NAPALM/napalm-bsd
1
0 Fork 0
Code Issues 8 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167) #18

Merged
christianmanivong merged 1 commits from fix/ssh-host-key-tofu-1167 into main 2026-10-18 19:23:45 +00:00
Conversation 0 Commits 1 Files Changed 4
+122 -6
christianmanivong commented 2026-10-18 19:23:45 +00:00
Owner
Copy link
Copy source

Host-key verification via napalm-device-types HostKeyCheck (>= 4.19.0); refused before login, every key seen reported. Part of NetOrk/netork#1167.

Host-key verification via napalm-device-types HostKeyCheck (>= 4.19.0); refused before login, every key seen reported. Part of NetOrk/netork#1167.
christianmanivong added 1 commit 2026-10-18 19:23:45 +00:00
fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167)
CI / test (3.10) (push) Successful in 27s
Details
CI / test (3.11) (push) Successful in 30s
Details
CI / test (3.12) (push) Successful in 37s
Details
CI / test (3.10) (pull_request) Successful in 32s
Details
CI / test (3.11) (pull_request) Successful in 34s
Details
CI / test (3.12) (pull_request) Successful in 29s
Details
6179607137 
The driver accepted any SSH host key. It now verifies through
napalm-device-types' HostKeyCheck (>= 4.19.0): with a known key in
optional_args["ssh_host_keys"] any other key is refused before login, and
every key seen is reported to optional_args["ssh_host_key_observer"].
Without either argument it connects as before (first use).
christianmanivong merged commit 4a95a5f0d4 into main 2026-10-18 19:23:45 +00:00
christianmanivong deleted branch fix/ssh-host-key-tofu-1167 2026-10-18 19:23:46 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is broken
 enhancement
New feature or request
 tech-debt
Refactoring / cleanup / deferred debt
prio
P0
Road blocker: blocks other work, drop everything
prio
P1
Critical
prio
P2
Important and urgent
prio
P3
Important, not urgent
prio
P4
Neither important nor urgent
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
christianmanivong
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: NAPALM/napalm-bsd#18