The branch, build-baikal has been updated via 42e073c3a6ccf65bb1a98283c6d9f394626b079d (commit) from 8966252f797a3dcf1bde347d6cfb7520e9900129 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- ----------------------------------------------------------------------- Summary of changes: debian/changelog | 1 + x2go/checkhosts.py | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) The diff of changes is: diff --git a/debian/changelog b/debian/changelog index b2c7439..7377066 100644 --- a/debian/changelog +++ b/debian/changelog @@ -14,6 +14,7 @@ python-x2go (0.1.1.8-0-x2go1) UNRELEASED; urgency=low - Fix missing import of socket module in backends/control/_stdout.py. - Catch failures on sftp_write in control session instance. - Always disconnect from X2goSession instance. + - Use random passwords for checking SSH host keys. -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de> Sun, 25 Sep 2011 02:08:11 +0200 diff --git a/x2go/checkhosts.py b/x2go/checkhosts.py index 7e8c209..b66835f 100644 --- a/x2go/checkhosts.py +++ b/x2go/checkhosts.py @@ -26,6 +26,7 @@ __NAME__ = 'x2gocheckhosts-pylib' # modules import paramiko import binascii +import uuid # Python X2go modules import sshproxy @@ -221,7 +222,7 @@ def check_ssh_host_key(x2go_sshclient_instance, hostname, port=22): host_ok = False try: - paramiko.SSHClient.connect(x2go_sshclient_instance, hostname=hostname, port=port, username='foo', password='bar') + paramiko.SSHClient.connect(x2go_sshclient_instance, hostname=hostname, port=port, username='foo', password=str(uuid.uuid1())) except x2go_exceptions.AuthenticationException: host_ok = True x2go_sshclient_instance.logger('SSH host key verification for host [%s]:%s succeeded. Host is already known to the client\'s Paramiko/SSH sub-system.' % (_hostname, _port), loglevel=log.loglevel_NOTICE) hooks/post-receive -- python-x2go.git (Python X2Go Client API) This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "python-x2go.git" (Python X2Go Client API).