Host Key Problem

Question

Hi,

I read the warnings regarding the host key rotation. I checked the keys on my machine and everything looked fine.

The following article is not helpful.

ACTION REQUIRED: Update your Bitbucket Cloud SSH Host Keys - Bitbucket

I don't know how to resolve the problem I am having now that the Host Keys have rotated and I can no longer communicate with BitBucket either through IntelliJ or the cmdline.

Please note I am using a Linux (CentOS) based machine.

Can someone provide guidance for how I can reestablish communication with bitbucket.

Theodora Boudale · Answer

Hi @Dale.Carter,

It's good to hear that things are working from your work network.

I just wanted to add a quick note here, for any other users that may come across your post:

There is no need for users to change the SSH keys they have already set up for their account, workspace, project, or repos. You can continue using the SSH keys you had already set up.

Our recommendation is to configure your SSH client to use either the ECDSA or the Ed25519 host key of Bitbucket Cloud (this is not related to the SSH keys you have set up for your account). The host key of a server (in this case, Bitbucket Cloud), is used to establish the authenticity of that server.

If you are using OpenSSH or a compatible client, the blog post has more details about the change and what you need to do.

We also have the following FAQ page that covers questions about some other SSH clients and common issues:

* https://confluence.atlassian.com/bbkb/bitbucket-cloud-ssh-host-key-rotation-faq-1235851234.html

Kind regards,
Theodora

Dale.Carter · Answer

Thanks for the reply.

I am happy to say I am wrong. My setup uses a virtual machine for the Linux environment and for some reason being at home on a wifi network was causing issues. As soon as I came back into work and connected via ethernet. Run the cmds again it all worked.

Baskar Annamalai_2plula · Answer

Hi Dale,

I believe you still have access to your Bitbucket Cloud via browser, otherwise, reach out to the Bitbucket Cloud Support team via https://support.atlassian.com/contact/#/

Basically, you would need to replace your current RSA or DSA SSH host key with the ECDSA or Ed25519 SSH host keys based on the warning post.

You can follow up with the following steps:

* https://support.atlassian.com/bitbucket-cloud/docs/set-up-personal-ssh-keys-on-linux/

The ssh keys can be generated with the following command:

* https://support.atlassian.com/bitbucket-cloud/docs/configure-ssh-and-two-step-verification/#SSH-Client-Keys

Best regards,
Baskar Annamalai
ServiceRocket.