taskSavannah Administration - Tasks: task #13862, public keys haven't synchronized...


task #13862: public keys haven't synchronized after over an hour

Submitted by:  Glyph Lefkowitz <glyph>
Submitted on:  Thu 14 Jan 2016 09:15:27 AM UTC  
Should Start On:  Thu 14 Jan 2016 08:00:00 AM UTC Should be Finished on:  Thu 14 Jan 2016 08:00:00 AM UTC
Category:  System Priority:  5 - Normal
Status:  Cancelled Privacy:  Public
Percent Complete:  0% Assigned to:  None
Open/Closed:  Closed Effort:  0.00

Add a New Comment(Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Tue 18 Sep 2018 07:01:21 PM UTC, comment #5:

I will respond to my earlier comment about https saying that yes in the intervening time https has been fully implemented for anonymous clones. Using https is now highly recommended (but not yet required) for anonymous clones.

Bob Proulx <rwp>
Site Administrator
Tue 18 Sep 2018 06:23:33 PM UTC, comment #4:

If I understand it correctly, Savannah now supports anonymous clones over HTTPS; I assume there is little other point in using SSH for non-member clones, so I'm closing this task.

Please feel free to re-open it if I'm wrong.

Ineiev <ineiev>
Site Administrator
Fri 15 Jan 2016 03:04:10 PM UTC, comment #3:

The usual way that verification works is to verify the downloaded files against their gpg signature. By verifying the gpg signature you can be assured of the validity of the files.

Unfortunately there is a long chain of dependencies that need to occur before the software on Savannah can be upgraded to support https transport.

For the case of vcs.savannah.gnu.org and its aliases the ssh key fingerprint is:


Bob Proulx <rwp>
Site Administrator
Thu 14 Jan 2016 09:11:27 PM UTC, comment #2:

I just want the ability to use SSH to retrieve code from Savannah so that I can have some measure of authentication and privacy on what code I'm retrieving and when. I would be equally happy if I could clone from https://savannah.gnu.org/ (happier, actually, because I can't seem to find an authenticated channel that publishes the SSH key fingerprints of the servers).

If I can't do this without being a member of a project on Savannah, is there a "dummy" project I can join?

Glyph Lefkowitz <glyph>
Thu 14 Jan 2016 03:01:17 PM UTC, comment #1:


The 4th ssh pubkey in your account is invalid (it has spaces in it, perhaps due to copy&pasting a multi-line pubkey?).
Please edit it and remove the spaces.

Based on your profile, it seems you are not a member of any current project on GNU Savannah. As such, you have no write-permissions on any repository, and thus SSH access will be blocked anyhow.

- assaf

Assaf Gordon <agn>
Site Administrator
Thu 14 Jan 2016 09:15:27 AM UTC, original submission:

I've set the public keys on my account ("glyph") but I can't access vcs.savannah.gnu.org over ssh ("Permission denied (publickey).") after over an hour. The documentation obliquely references a "cron job" but how often is this expected to run?

Glyph Lefkowitz <glyph>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by ineiev (Posted a comment)
  • -email is unavailable- added by rwp (Posted a comment)
  • -email is unavailable- added by agn (Posted a comment)
  • -email is unavailable- added by glyph (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-09-18 ineiev StatusNone => Cancelled
        Open/ClosedOpen => Closed

    Back to the top

    Powered by Savane 3.4