You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by GitBox <gi...@apache.org> on 2020/06/25 10:48:13 UTC

[GitHub] [airflow] kkuzelka opened a new issue #9510: SSHHook warns that Remote Identification Change is not verified. when self.allow_host_key_change is set to False instead of when it is set to true

kkuzelka opened a new issue #9510:
URL: https://github.com/apache/airflow/issues/9510


   **Apache Airflow version**: 1.10.10
   
   **What happened**: 
   for any ssh connection with `allow_host_key_change` set to False or unset Airflow prints
   ```
    WARNING - Remote Identification Change is not verified. This wont protect against Man-In-The-Middle attacks
   ```
   **What you expected to happen**:
   
   https://airflow.apache.org/docs/stable/howto/connection/ssh.html says
   
    ```allow_host_key_change - Set to true if you want to allow connecting to hosts that has host key changed or when you get ‘REMOTE HOST IDENTIFICATION HAS CHANGED’ error. This wont protect against Man-In-The-Middle attacks. Other possible solution is to remove the host entry from ~/.ssh/known_hosts file. Default is false.```
   
   **How to reproduce it**:
   ```
       ssh_hook = SSHHook(ssh_conn_id=sftp_conn_id)
       sftp_client = ssh_hook.get_conn().open_sftp()
   ```
   Let me know if I misunderstood how this should work.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] zhangyi-hu commented on issue #9510: SSHHook warns that Remote Identification Change is not verified. when self.allow_host_key_change is set to False instead of when it is set to true

Posted by GitBox <gi...@apache.org>.
zhangyi-hu commented on issue #9510:
URL: https://github.com/apache/airflow/issues/9510#issuecomment-723696619


   I'm still seeing this in 1.10.12


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [airflow] boring-cyborg[bot] commented on issue #9510: SSHHook warns that Remote Identification Change is not verified. when self.allow_host_key_change is set to False instead of when it is set to true

Posted by GitBox <gi...@apache.org>.
boring-cyborg[bot] commented on issue #9510:
URL: https://github.com/apache/airflow/issues/9510#issuecomment-649463341


   Thanks for opening your first issue here! Be sure to follow the issue template!
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org