NAPALM/napalm-openwrt
1
0 Fork 0
Code Issues 8 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167) #18

Merged
christianmanivong merged 1 commits from fix/ssh-host-key-tofu-1167 into master 2026-10-18 19:23:41 +00:00
Conversation 0 Commits 1 Files Changed 3
+102 -11
christianmanivong commented 2026-10-18 19:23:40 +00:00
Owner
Copy link
Copy source

Host-key verification via napalm-device-types HostKeyCheck (>= 4.19.0); refused before login, every key seen reported. Part of NetOrk/netork#1167.

Host-key verification via napalm-device-types HostKeyCheck (>= 4.19.0); refused before login, every key seen reported. Part of NetOrk/netork#1167.
christianmanivong added 1 commit 2026-10-18 19:23:40 +00:00
fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167)
CI / test (3.10) (push) Successful in 34s
Details
CI / test (3.11) (push) Successful in 40s
Details
CI / test (3.12) (push) Successful in 34s
Details
CI / test (3.10) (pull_request) Successful in 36s
Details
CI / test (3.11) (pull_request) Successful in 29s
Details
CI / test (3.12) (pull_request) Successful in 27s
Details
cb14f1f00f 
The driver accepted any SSH host key. It now verifies through
napalm-device-types' HostKeyCheck (>= 4.19.0): with a known key in
optional_args["ssh_host_keys"] any other key is refused before login, and
every key seen is reported to optional_args["ssh_host_key_observer"].
Without either argument it connects as before (first use).
christianmanivong merged commit 7f2ae6ac58 into master 2026-10-18 19:23:41 +00:00
christianmanivong deleted branch fix/ssh-host-key-tofu-1167 2026-10-18 19:23:41 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is broken
 enhancement
New feature or request
 tech-debt
Refactoring / cleanup / deferred debt
prio
P0
Road blocker: blocks other work, drop everything
prio
P1
Critical
prio
P2
Important and urgent
prio
P3
Important, not urgent
prio
P4
Neither important nor urgent
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
christianmanivong
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: NAPALM/napalm-openwrt#18