taskSavannah Administration - Tasks: task #13862, public keys haven't synchronized...


task #13862: public keys haven't synchronized after over an hour

Submitted by:  Glyph Lefkowitz <glyph>
Submitted on:  Thu 14 Jan 2016 09:15:27 AM UTC  
Should Start On: Thu 14 Jan 2016 08:00:00 AM UTCShould be Finished on: Thu 14 Jan 2016 08:00:00 AM UTC
Category: SystemPriority: 5 - Normal
Status: NonePrivacy: Public
Percent Complete: 0%Assigned to: None
Open/Closed: OpenEffort: 0.00

Add a New Comment(Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Fri 15 Jan 2016 03:04:10 PM UTC, comment #3:

The usual way that verification works is to verify the downloaded files against their gpg signature. By verifying the gpg signature you can be assured of the validity of the files.

Unfortunately there is a long chain of dependencies that need to occur before the software on Savannah can be upgraded to support https transport.

For the case of vcs.savannah.gnu.org and its aliases the ssh key fingerprint is:


Bob Proulx <rwp>
Site Administrator
Thu 14 Jan 2016 09:11:27 PM UTC, comment #2:

I just want the ability to use SSH to retrieve code from Savannah so that I can have some measure of authentication and privacy on what code I'm retrieving and when. I would be equally happy if I could clone from https://savannah.gnu.org/ (happier, actually, because I can't seem to find an authenticated channel that publishes the SSH key fingerprints of the servers).

If I can't do this without being a member of a project on Savannah, is there a "dummy" project I can join?

Glyph Lefkowitz <glyph>
Thu 14 Jan 2016 03:01:17 PM UTC, comment #1:


The 4th ssh pubkey in your account is invalid (it has spaces in it, perhaps due to copy&pasting a multi-line pubkey?).
Please edit it and remove the spaces.

Based on your profile, it seems you are not a member of any current project on GNU Savannah. As such, you have no write-permissions on any repository, and thus SSH access will be blocked anyhow.

- assaf

Assaf Gordon <agn>
Site Administrator
Thu 14 Jan 2016 09:15:27 AM UTC, original submission:

I've set the public keys on my account ("glyph") but I can't access vcs.savannah.gnu.org over ssh ("Permission denied (publickey).") after over an hour. The documentation obliquely references a "cron job" but how often is this expected to run?

Glyph Lefkowitz <glyph>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by rwp (Posted a comment)
  • -unavailable- added by agn (Posted a comment)
  • -unavailable- added by glyph (Submitted the item)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    No Changes Have Been Made to This Item

    Back to the top

    Powered by Savane 3.1-cleanup1