diff --git a/roles/distgit/pagure/templates/pagure.cfg b/roles/distgit/pagure/templates/pagure.cfg index 5f6a466fd8..5adbef5b47 100644 --- a/roles/distgit/pagure/templates/pagure.cfg +++ b/roles/distgit/pagure/templates/pagure.cfg @@ -150,20 +150,31 @@ CHECK_SESSION_IP = True APPLICATION_ROOT = '/' # Set the SSH certs/keys +# For the key ('pubkey'): +# ssh-keyscan pkgs.stg.fedoraproject.org +# For SHA256 fingerprint ('SHA256'): +# ssh-keyscan pkgs.stg.fedoraproject.org | ssh-keygen -lf - +# For legacy/md5 fingerprint ('fingerprint'): +# ssh-keyscan pkgs.stg.fedoraproject.org | ssh-keygen -E md5 -lf - {% if env == 'staging' %} SSH_KEYS = { 'RSA': { - 'fingerprint': '2048 ce:e8:a7:2b:7a:6a:9c:6f:f0:e7:ab:bb:a0:c4:f3:f2 (RSA)', - 'pubkey': 'pkgs.stg.fedoraproject.org ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7kE4Zst3uYFPdoJN341v+annUShkcu+ODT93JX95OfOwbqQP3ZeCG3Nl1+mHOcRg8mRqxmf8FadzjSVoGKf8rWdAQA4vawS8b98XyHp7oCIS6Ydv+wVtFy1ecGHn9yEvuiVLU6G2nn9LJ5rVbNa/dtLUZp9VA+zxQo/wmVGON/XdH9i3pGzCzQb+aRr2xW0uEGJAnLQd04URi7skpsX9EhZcc/aPgrOH5A/jacECN1c/6bS/J+ReNoohqaoj0JZB+4sPX71YoaMOgEZz7z9o7qmKQhSC6iH08nLY53kcy+geSMoFxbokFupnrvof5Ck5MHIYucPnuj7EUrB2srAyD', - 'SHA256': 'SHA256:+WoPGFGoQqGMYdT4wc4T8XFr2ounR4dHNfdmNEI9Dfo', + 'fingerprint': '3072 MD5:1b:9f:76:c7:f6:e6:77:a6:cf:6f:d2:d8:22:b1:50:fc (RSA)', + 'pubkey': 'pkgs.stg.fedoraproject.org ssh-rsa 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', + 'SHA256': 'SHA256:vP5vCRP10BqUrLDV1Hp7d2zpYeRiOVrV9ukDTJ4G13k', } } {% else %} +# Production... +# ssh-keyscan pkgs.fedoraproject.org | ssh-keygen -E md5 -lf - +# ssh-keyscan pkgs.fedoraproject.org +# ssh-keyscan pkgs.fedoraproject.org | ssh-keygen -lf - +# etc. SSH_KEYS = { 'RSA': { - 'fingerprint': '2048 fe:2e:6a:86:f3:41:e7:03:95:ea:9c:7f:75:9c:ce:9d (RSA)', - 'pubkey': 'pkgs.fedoraproject.org ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnhQyqu6oY5g01SOEbtrgrlCk3/eoLVZl2oh6c+Xq2oJg5ppPCtvmdWgU9rEltS+jgAYTH3LG4lGd02boMk8mmV5QvzGGRA9HmN991Phm7y4EN5r84A0gibf2O5QzhU2IMBQuOkEMwqZC+wc7pGGFJeXQjzBAVidjacxXtVJyfFOhAIYoHerIYq3VbJrTzEGkHmcJ8o3ZnP8Mt35aBESNsHdIaCOpvZzK1NVHdUHwRGcXIjG6t06mNVG4DVbdpB6xmMbAD5bemPoPVG0oYVs9wmhSHC0LmOZbvv8CDO2Z0DJ8q25FwVlTjo1Eq2A8VJc4LnHTDHZbtDZiKGTo/UMvvQ==', - 'SHA256': 'SHA256:Q12OTyTeOHWlS54dTzy2BNu7wB8UKNf18+7WHIDsORc', + 'fingerprint': '3072 MD5:d6:ad:b1:cf:39:8a:b5:df:5d:37:9b:79:5b:c5:8d:f1 (RSA)', + 'pubkey': 'pkgs.fedoraproject.org ssh-rsa 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', + 'SHA256': 'SHA256:dJN0nFWBcWK7SFs2k0nnsO+XNA9+aEDY4FWO7uhxTN8', } } {% endif %}