Monorepo for Tangled tangled.org

feature request: show server's SSH fingerprint in the "empty repository" guide #588

Open akavel.tngl.sh
Open opened by akavel.tngl.sh

I just created my first tangled repository. The repo's page now shows me a guide like below:

This is an empty repository. To get started:

  1. First, generate a new SSH key pair.

  2. Then add the public key to your account from the keys page in your settings.

  3. Configure your remote to git@tangled.org:did:plc:64z4jzl6athhsyrqjuzga5la

  4. Push!

When I executed git push -u tangled main on my machine, git asked me if I trust the server, with an option to provide the server's fingerprint:

$ git push -u tangled main
The authenticity of host 'tangled.org (95.111.205.38)' can't be established.
ED25519 key fingerprint is SHA256:fLyp6ivr5HqmGI8yJiPYstTiJa2AXF/RAa9kF/ur1xo.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])?

It would be very cool, and presumably improve security somewhat (?), if the "guide" shown on the empty repository also printed the expected fingerprint of the server I'll be connecting to, so that I could copy & paste it into my git CLI, rather than e.g. blindly hitting "yes"!

On my Docker run Knot the public key is located at /etc/ssh/keys/ssh_host_rsa_key.pub

Asking because Google results tend to indicate that normally it's located at /etc/ssh/ssh_host_rsa_key.pub ?

If the nix ran Knot has it at that second location, then the Knot will need some logic to determine where to find the public key.

Also running into the same message. IMO it's a bit of a stange DX to have the 4th step be "Push!" without mentioning that this will happen.

Sign up or Sign in to add to the discussion.