CVS server key

[Geraint Paul Bevan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've just got the message below after trying `cvs -z9 update -PAd`

Hopefully this is because the host key has actually changed rather than
someone surreptitiously trying to insert code on my machine (although I
now realise that I didn't ever check the original key for authenticity).

I am just wondering if the host key is documented anywhere or if we are
all just acting on the assumption that we are communicating with the
real octave.org when downloading via anonymous CVS.


/usr/local/src/octave/octave:
$ cvs -z9 update -PAd
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that the RSA host key has just been changed.
The fingerprint for the RSA key sent by the remote host is
ee:21:47:45:85:1c:6b:09:45:e7:b7:4a:20:85:c7:fe.
Please contact your system administrator.
Add correct host key in /home/gbevan/.ssh/known_hosts to get rid of this
message.
Offending key in /home/gbevan/.ssh/known_hosts:20
RSA host key for www.octave.org has changed and you have requested
strict checking.
Host key verification failed.
cvs [update aborted]: end of file from server (consult above messages if
any)


- --
Geraint Bevan
http://www.mech.gla.ac.uk/~gbevan

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iEYEARECAAYFAkFn1+0ACgkQcXV3N50QmNMjYgCfSmhX5q/AV606inybkZUX+kW/
f4oAoICOeZswDxOaWdg1PFik82esAeoI
=Ak5T
-----END PGP SIGNATURE-----



-------------------------------------------------------------
Octave is freely available under the terms of the GNU GPL.

Octave's home on the web:  http://www.octave.org
How to fund new projects:  http://www.octave.org/funding.html
Subscription information:  http://www.octave.org/archive.html
-------------------------------------------------------------