diff options
author | Evan Read <eread@gitlab.com> | 2018-12-20 01:28:20 +0300 |
---|---|---|
committer | Evan Read <eread@gitlab.com> | 2018-12-20 01:28:20 +0300 |
commit | 82798f2188e4099a5e7925b7b976f388b775d075 (patch) | |
tree | 8770eaefbbde067b9e4ec482073a5278cf40a96d /doc | |
parent | 46164f067ca4b7b8f08f5eb768a117f7172611bc (diff) | |
parent | eacbffa30a2e90afb703ac3a8b2f7f51d65ae2e8 (diff) |
Merge branch 'docs/ssh-host-authenticity' into 'master'
SSH docs: clarify that you need to accept the authenticity of the server
Closes #54880
See merge request gitlab-org/gitlab-ce!23584
Diffstat (limited to 'doc')
-rw-r--r-- | doc/ssh/README.md | 21 |
1 files changed, 20 insertions, 1 deletions
diff --git a/doc/ssh/README.md b/doc/ssh/README.md index d9ae3c08172..e570627bfc1 100644 --- a/doc/ssh/README.md +++ b/doc/ssh/README.md @@ -185,7 +185,26 @@ your terminal (replacing `gitlab.com` with your GitLab's instance domain): ssh -T git@gitlab.com ``` -You should receive a _Welcome to GitLab, `@username`!_ message. +The first time you connect to GitLab via SSH, you will be asked to verify the +authenticity of the GitLab host you are connecting to. +For example, when connecting to GitLab.com, answer `yes` to add GitLab.com to +the list of trusted hosts: + +``` +The authenticity of host 'gitlab.com (35.231.145.151)' can't be established. +ECDSA key fingerprint is SHA256:HbW3g8zUjNSksFbqTiUWPWg2Bq1x8xdGUrliXFzSnUw. +Are you sure you want to continue connecting (yes/no)? yes +Warning: Permanently added 'gitlab.com' (ECDSA) to the list of known hosts. +``` + +NOTE: **Note:** +For GitLab.com, consult the +[SSH host keys fingerprints](../user/gitlab_com/index.md#ssh-host-keys-fingerprints), +to make sure you're connecting to the correct server. + +Once added to the list of known hosts, you won't be asked to validate the +authenticity of GitLab's host again. Run the above command once more, and +you should only receive a _Welcome to GitLab, `@username`!_ message. If the welcome message doesn't appear, run SSH's verbose mode by replacing `-T` with `-vvvT` to understand where the error is. |