From 2c03c41cb1517d93179e4dd203cb942f2c674ae6 Mon Sep 17 00:00:00 2001
From: "Kyle J. McKay" <mackyle@gmail.com>
Date: Sat, 17 Dec 2022 17:50:06 -0700
Subject: [PATCH] indextext.html: add notice about upcoming ssh host key change

Mention the upcoming SSH host key replacement on the home page to
hopefully minimize alarm.

The original SSH host key used for ssh repository access since the
beginning of repo.or.cz is no longer considered sufficiently secure
and must be replaced since the most recent ssh clients will generally
refuse to connect anymore in their default configuration.

Include details about the ugly message that will be shown by the
ssh client and the fingerprint of the new key that should match the
fingerprint shown in the ssh client's error message.

Signed-off-by: Kyle J. McKay <mackyle@gmail.com>
---
 gitweb/indextext.html | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/gitweb/indextext.html b/gitweb/indextext.html
index 4d78640..6f1fdf9 100644
--- a/gitweb/indextext.html
+++ b/gitweb/indextext.html
@@ -6,6 +6,19 @@
 }
 </style>
 
+<div class="notice" title="2022-12-17">
+<p>We'll be <b>replacing our SSH host key</b> within the next couple of days.<br />
+We're doing this because the original ssh
+host key in use since 2009 is no longer considered sufficiently secure.<br />
+After this happens you will see a very ugly message
+<i>(WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!)</i> when you access
+any repositories using ssh.<br />
+The error message will indicate which line of your "known_hosts" file
+must be removed to get rid of the ugly message.<br />
+The error message will also include a <b>fingerprint for our new ssh key</b> which is:</p>
+<p><b>SHA256:2AcJJmsZTraK3zrIuA3cZtRJGFhd28iLEev7GLv+X2w</b></p>
+</div>
+
 <p><strong>repo.or.cz</strong> is a public <a href="https://git-scm.com/">Git</a> hosting site.
 Create a project in a snap, <strong>publish your development</strong>, give others push
 access and let anyone have a look and contribute.
-- 
2.11.4.GIT