From 98b2a47d0e58df23811d150b0bfc4bbc7e6d940a Mon Sep 17 00:00:00 2001
From: John Thiltges <jthiltges2@unl.edu>
Date: Mon, 6 Mar 2023 12:07:17 -0600
Subject: [PATCH] Initial commit of ssh keys page

---
 content/FAQ/ssh-keys.md | 91 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 91 insertions(+)
 create mode 100644 content/FAQ/ssh-keys.md

diff --git a/content/FAQ/ssh-keys.md b/content/FAQ/ssh-keys.md
new file mode 100644
index 00000000..22e2db60
--- /dev/null
+++ b/content/FAQ/ssh-keys.md
@@ -0,0 +1,91 @@
++++
+title = "SSH host keys"
+description = "SSH keys for HCC services"
+weight = "95"
++++
+
+- [Summary](#summary)
+- [Swan](#swan)
+- [Crane](#crane)
+
+---
+
+## Summary
+
+SSH host keys securely identify SSH servers. When an SSH client connects to a server, the server presents a host key to the client. The client confirms the key has not changed from previous connections.
+
+HCC tries to keep the SSH keys unchanged throughout the lifetime of a service, but security requirements evolve, and key changes may be necessary. If you get a key change warning, please confirm the fingerprint against the list below before updating your SSH client known hosts list. If the key fingerprint does not match, do not accept the new key and *do not enter* your credentials, and please contact HCC.
+
+### Example warning message
+
+```
+@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
+@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
+IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
+Someone could be eavesdropping on you right now (man-in-the-middle attack)!
+It is also possible that a host key has just been changed.
+```
+
+
+[//]: # ( for i in /etc/ssh/ssh_host_*pub ; do ssh-keygen -lf $i ; done )
+
+## Swan
+
+### swan.unl.edu fingerprints
+
+```
+SHA256:qcyi6CEw1gUgumEghA+TcXFmu39MAO4Pyrt8rT6+ymk (ECDSA)
+SHA256:SrpwIZFSaZ3Nt6Ne9PW/7SSHXo1sdT0QnputriPAmA0 (ED25519)
+SHA256:GfkTzeP/gWn0NChgWwAqOpuSVWPNtXbjlVqy2pyRGlk (RSA)
+```
+
+### swan-xfer.unl.edu fingerprints
+
+```
+SHA256:TvONmFeLVTA3IyA1IkGqzcLnLSOYZ2lkOWUesQ33nE0 (ECDSA)
+SHA256:hY4dkI8ngY//lwuOC3sUgZtRNnMl6zkWPX10ptlSgiY (ED25519)
+SHA256:l8pMknftfqRVtFF+BQc2WXwbZ23QhnjbG2erzPLzrGc (RSA)
+```
+
+### known\_hosts
+
+```
+swan.unl.edu ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBGJgEGqgkU3g8tzgedOXnNmGvBmgU8wPHnoFW1MDREhfdsDwyOvq+Pu+O+vSf1B4f3Krl49VkDhk1/kzMOSa/2U=
+swan.unl.edu ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFH3i+E4EKT20y+tXmnizsXN2c6Lg2SlaGjsbERegll6
+swan.unl.edu ssh-rsa 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
+
+swan-xfer.unl.edu ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCWWKy921NTqcvbDISuOmNnViBegfwVk3Ni25Z0e8GBmTPXPDCyoVGCwAyXtiqxVFjPwNt9/zD8VWi/hInE9O8o=
+swan-xfer.unl.edu ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDKgahWZaLmYmGfIOigoAGaW2Wpj84UzrpmgnXvkxMtN
+swan-xfer.unl.edu ssh-rsa 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
+```
+
+## Crane
+
+### crane.unl.edu fingerprints
+
+```
+SHA256:0C+JzhK+Lw0Sm3HBcqn84vLIVr79ewp548Q4EnMikRQ (ECDSA)
+SHA256:s/ZLlfcinYzEkamJ15Htek+0tpKlwo5uq+HajcxowRE (ED25519)
+SHA256:GDH3+iqSp3WJxtUE6tXNQcWRwpf0xjYgkQrYBDX3Ir0 (RSA)
+```
+
+### crane-xfer.unl.edu fingerprints
+
+```
+SHA256:k9w+Khxea9ZZCuayJc+YIFi+9LRV68QPHXl7OSEANis (ECDSA)
+SHA256:V64bGApa8S1MbvfkFQGEUL9xx7RWOzWetorPpGyBTMw (ED25519)
+SHA256:WfS6HcnjbOrD8z11C1RYgF4TNZsqUnM/ZBpoTO2J4Pg (RSA)
+```
+
+### known\_hosts
+
+```
+crane.unl.edu ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBKFSyNCtoEMiMCLyvh6FsoFhfmGtJEbmeDqfoqi3tU2WaX7Dtc6Ti0k87MxfgPmLSn+wqSXDUxNL2eMdzuy9LRg=
+crane.unl.edu ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILqREOJ9NtVi9d7p0pBBOumIbUJxc1Io3847pJacp8Ct
+crane.unl.edu ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv0LS4DwF7vdSk0jz5/otXyGn93hieUXu9ZFQgAVZLHyOYveBYSTyW9GCicAGtBBePbt3PvGzYARLHa9CX3K/sqAeax1DpmHuM1x6SNvIrvYySymqRJZWcvRHOo8o2Zc/5NZMmh06AtCLKuG9SxdmjuoBcfgX6AtG6gfH9t/7k2Q04qwpvaRy8cRbJCndiW8UAJblqg722m52reydqg8iN5C1QD/773yEUPdfVNVqIMsnSvoiEbSijxocaopiKiU9f1/QdvOIDyh6/b5BXp1o2zQ1fd4I0OveZDKn3QAqpX44wfuJ1u9D/Gq87K5NhyE3TqPUIe/+ZqZNzrcZmii66w==
+
+crane-xfer.unl.edu ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBAWBwHOTjsPaftbFP1hL/rEo9E29yrEy+l82TfN6NJCvaFb4kdppDo86utmadWMB08YbUghEdOJXoNpudb7AHlI=
+crane-xfer.unl.edu ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBL/nZV+XQEV19FODr1F2Z6Kn0jDhM+xEaq9QRDWetEY
+crane-xfer.unl.edu ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBggvAv6Gj6q5RnmMegh3S9YqNN2PEIyjEodbcvKyncY7r0seKVP4ABthrS3fU8bz1wSVi4nSVhMhGT4eRaDViy9NJPoebyORmiAczWgIZKip79YM+UZSQgZI0OtgfDv3Ouv2/ti1ymn0qVEHLrm7pLGto7HJlLGRpj4Acwid5T6sY3QTGyaJ64hkblYWfAryVcNIS/Qfz7wyeZEG1WE4XKPy2Ax+dRiYBiSWoORWzdMAs5OASrgtM1CeScjqrBlx3BDBi9FLzqbBq+IO/5Ee31Tvg9zBZtTgwAGwxsWhCvA+V95FDvSSjrjjNFEZ1ThuWbyDlEOmfF/B/k6wdxSTP
+```
-- 
GitLab