Community
Participate
Working Groups
3.1 M3 I use ssh2 to connect to the cvs server. My password expired over the weekend. As a result I get the attached dialog which tells a lot of scary warnings but does not point to the real cause namely that the password has (or might have) expired.
Created attachment 15721 [details] Picture of dialog
It was a coincidence that my password expired together with the server migration. The dialog is not related with the expired password but I still think it looks odd.
The message is provided by the Jsh library. We should investigate whether we can tailor these messages. This will also be an issue for internationalization.
Not for 3.1
The reason for that dialog is that the host-key on remote key has been changed. Without such a caution, user will be faced to man-in-the-middle attack. There are not any relations to password expiration. Since 3.2 M5(?), on that case, users will be asked if changed host-key is acceptable or not. Anyway, can you suggest me how to change the messages on that dialog? Is it enought to delete '@' characters on it or do you think of such dialog should not be displayed?
The dialog is OK to appear but should be made a bit more professional, e.g. remove the '@', separate the different possible causes by newline or even make a list out of it.
*** Bug 177161 has been marked as a duplicate of this bug. ***
And please, please add the affected server name as currently the user has no clue which server is affected unless he goes and searches for the given fingerprint.
(In reply to comment #8) > And please, please add the affected server name +1
I've added the host and the original message has been cleaned so I'm marking this as fixed.
verified
