From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: X-Spam-Status: No, score=-3.0 required=3.0 tests=AWL,BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_HI, SPF_HELO_PASS,SPF_PASS,UNPARSEABLE_RELAY shortcircuit=no autolearn=no autolearn_force=no version=3.4.2 Received: from nue.mailmanlists.eu (nue.mailmanlists.eu [IPv6:2a01:4f8:1c0c:6b10::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 8C4201F601 for ; Thu, 15 Dec 2022 07:53:42 +0000 (UTC) Authentication-Results: dcvr.yhbt.net; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=ruby-lang.org header.i=@ruby-lang.org header.b="HXwZiOyD"; dkim-atps=neutral Received: from nue.mailmanlists.eu (localhost [127.0.0.1]) by nue.mailmanlists.eu (Postfix) with ESMTP id 333F57F070; Thu, 15 Dec 2022 07:53:35 +0000 (UTC) Authentication-Results: nue.mailmanlists.eu; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=ruby-lang.org header.i=@ruby-lang.org header.a=rsa-sha256 header.s=s1 header.b=HXwZiOyD; dkim-atps=neutral Received: from xtrwkhkc.outbound-mail.sendgrid.net (xtrwkhkc.outbound-mail.sendgrid.net [167.89.16.28]) by nue.mailmanlists.eu (Postfix) with ESMTPS id 6107A7F06D for ; Thu, 15 Dec 2022 07:53:32 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ruby-lang.org; h=from:references:subject:mime-version:content-type: content-transfer-encoding:list-id:to:cc:content-type:from:subject:to; s=s1; bh=FZX+m9uNdpoMDeYFajp33CYUxhIS7h3NxOM4ynBdcpo=; b=HXwZiOyDNeJyfZOUnfUhjJpEuPGQ34JndKDN9bQ83CsIx6MjkG9ni4I/esgXqs8Ip4nB D8dlMKwj+m52dqLLDqNMlWFnjyJxg2c5bAek8U0qAOO0f2U4e08D34Ubd46RQkPeAFpueq opkvJASlKKKTQrBGyP6/qqcfiF1NTOP4H9V1fQoJ3rRzpIFei8LkY1Wzeff9EvA+13VZPM rQhvjleJjoXUwzK89SKPhNsqASenk7uDwehZhev+5sYlEuyss1QecIj+VSpaiiBrt97XWa kRnPer7pUc4cNOJDosNst0mNZmp4bpqFaDMxrDW7PRbiRp/S/w1IJWhIOum1/glA== Received: by filterdrecv-8569859b9-8tv76 with SMTP id filterdrecv-8569859b9-8tv76-1-639AD27B-8 2022-12-15 07:53:31.162383822 +0000 UTC m=+2364404.647646218 Received: from herokuapp.com (unknown) by geopod-ismtpd-3-0 (SG) with ESMTP id bcXpN4WsQ863yyDnwSy9SA for ; Thu, 15 Dec 2022 07:53:31.106 +0000 (UTC) Date: Thu, 15 Dec 2022 07:53:31 +0000 (UTC) From: "hsbt (Hiroshi SHIBATA)" Message-ID: References: Mime-Version: 1.0 X-Redmine-Project: ruby-master X-Redmine-Issue-Tracker: Misc X-Redmine-Issue-Id: 19162 X-Redmine-Issue-Author: hsbt X-Redmine-Issue-Assignee: hsbt X-Redmine-Sender: hsbt X-Mailer: Redmine X-Redmine-Host: bugs.ruby-lang.org X-Redmine-Site: Ruby Issue Tracking System X-Auto-Response-Suppress: All Auto-Submitted: auto-generated X-Redmine-MailingListIntegration-Message-Ids: 87699 X-SG-EID: =?us-ascii?Q?BAqCsB0mvMCnHXWkBD9MTHUyV8AfYOY3mM6FlznSxbO5US8=2FSBDCMBBYmmIAuU?= =?us-ascii?Q?TeaKG5YiQzAGgZc0jHcwXZVFMafO4FzN+zEifU7?= =?us-ascii?Q?=2FXM1+duvvDzBLWzqqJjaVB9qPLirmv5ObbZBZbW?= =?us-ascii?Q?MlRS3w=2FgQSN7oos7aMJv1=2FZj8CiKsY9w8J9iNLd?= =?us-ascii?Q?RI2FNCKRLetJrWhJmPXegbubGlKyvoqp=2F81V14n?= =?us-ascii?Q?zsxv10LJfcI0XABTQENpyldl44klJE1YdDOsMIR?= =?us-ascii?Q?ftntE8nkuleIYqN00EfpA=3D=3D?= To: ruby-core@ml.ruby-lang.org X-Entity-ID: b/2+PoftWZ6GuOu3b0IycA== Message-ID-Hash: EU2HFF4NCZXKF2DNWBES2LDIZKCLVBSJ X-Message-ID-Hash: EU2HFF4NCZXKF2DNWBES2LDIZKCLVBSJ X-MailFrom: bounces+313651-b711-ruby-core=ml.ruby-lang.org@em5188.ruby-lang.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.3 Precedence: list Reply-To: Ruby developers Subject: [ruby-core:111298] [Ruby master Misc#19162] [ANN] Restrict weak ssh public key for git.ruby-lang.org List-Id: Ruby developers Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Issue #19162 has been updated by hsbt (Hiroshi SHIBATA). I made to manage our keys under the GitHub: https://github.com/ruby/git.ruby-lang.org/blob/master/recipes/files/var/git/.ssh/authorized_keys Please send a pull-request to `https://github.com/ruby/git.ruby-lang.org` when you want to update or add your keys. ---------------------------------------- Misc #19162: [ANN] Restrict weak ssh public key for git.ruby-lang.org https://bugs.ruby-lang.org/issues/19162#change-100658 * Author: hsbt (Hiroshi SHIBATA) * Status: Closed * Priority: Normal * Assignee: hsbt (Hiroshi SHIBATA) ---------------------------------------- We continuously migrate our ssh public keys on git.ruby-lang.org from svn and cvs. I found some of pub keys used weak algorithm. So, I will restrict them at 15 Dec 2022. I'll notify committers who are still use weak key later. -- https://bugs.ruby-lang.org/ ______________________________________________ ruby-core mailing list -- ruby-core@ml.ruby-lang.org To unsubscribe send an email to ruby-core-leave@ml.ruby-lang.org ruby-core info -- https://ml.ruby-lang.org/mailman3/postorius/lists/ruby-core.ml.ruby-lang.org/