Did the GitLab hostkey change?

1

Hi, I’ve been accessing the RenkuLab GitLab using SSH for the past few weeks. Coming back from the holidays, SSH now complains that the host key doesn’t match anymore. As the instance config doesn’t list any, I wanted to know if the keys were actually supposed to change?

Going to assume it’s fine because the GitLab was down the last time I tried accessing it before the holidays, so this might be an accidental change from the recovery and my work isn’t very security sensitive anyway.

The current keys:

gitlab.renkulab.io ssh-rsa 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
gitlab.renkulab.io ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJHW/Tl6kwIht+k5kYLRjBllZYMr8Fxg50WJrGT1pNk6blc2WftOG6JLMYdKTWjiQeirao2iB3LMEaMHFepE4Is=
gitlab.renkulab.io ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICepFXmk0dhq34fTC4odJNZLIw7v4P84YTVW9YInGtk9

The ones saved in my known_hosts:

gitlab.renkulab.io ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxhY8Ow0svrFMxnTlo183OqOCLrB6VzODn6vTyWyvam11wHUd7jQ8t825RO/MhzzMBPnXIvHIijBJcFzYPNEsBp+h4IqvEwANgilZt9j6TJPMvptr9fG+Y+Xz32MhdYiiTVRuo498ewF1ZRtXswndRIUSq/i+9tQ2g/OQSJ+EJ9crqF5fCvnF4GZVSKE/qXeG9qtahiIwdMk6VNx0AxJQXCQcjlY/jJIsTzE+B2zAY1E8i8PAhxjUMQdxp0Om8ldXfv4ZPaDbIncl42YMh6sShWuowUmlt1eNYNWiu+haDRBQukJ00l+hXFmAw/FCIDlqr8qK9hdxEqUaWOh6zSJVw39ynQ17sIRMzV9/3DldD4aTzN1mZhIT5ee3RvH1QFrj5ow+HOlmMqWnZULOvMQX1gTjw0aeTZVcby3v7s6uwfdu14TrSD5g8M0FREMlzMYCqRAJxL2W+flLOm4YBmZnGfrKNn39Use0Eshv8vKk7Hc+eo8qEHISbReg02bNI9us=
gitlab.renkulab.io ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBDQrXc8s8P+K6gO/NJbvsPkGQUJGx1beKYy+16g0SMIUSn4u34/Zb0KUkQcmxLwm7/5c+WvGIYl+fgSrUQ90AU=
gitlab.renkulab.io ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINY1WiygpSfhFsVE8EfbUOX8N3c0+CwpznYfPZp1LYm8
2

Hi @tschai,

My apologies for this. Yes, the host keys for Renkulab.io GitLab did in fact change during the maintenance window. This was not a planned action for the mid-December maintenance window, but was the result of having to restore services from backup, resulting in new host keys being generated.

The current keys which you posted are indeed the currently valid keys for Renkulab.io GitLab.

Thanks,

Wes