Rebootstrapping is the standard procedure. We could log a bunch of
instructions in various places, but we don't do this currently.


On Thu, Apr 24, 2014 at 2:59 PM, Edward Welbourne
<notifications@github.com>wrote:

> In libcfnet/client_code.c:
>
> >                  ConnectionInfoPrintableKeyHash(conn_info));
> >              SavePublicKey(username, ConnectionInfoPrintableKeyHash(conn_info),
> >                            KeyRSA(ConnectionInfoKey(conn_info)));
> >          }
> >          else
> >          {
> > -            Log(LOG_LEVEL_ERR, "TRUST FAILED, WARNING: possible MAN IN THE MIDDLE attack!");
> > -            Log(LOG_LEVEL_ERR, "Rebootstrap the client if you really want to start trusting this new key.");
> > +            Log(LOG_LEVEL_ERR,
> > +                "TRUST FAILED, server presented an untrusted key, dropping connection!");
> > +            Log(LOG_LEVEL_ERR,
> > +                "Rebootstrap the client if you really want to start trusting this new key");
>
> Possibly worth logging, at a less alarming level: what cf-key command will
> tell the system to trust that key for the given hub ?
>
> --
> Reply to this email directly or view it on GitHub<https://github.com/cfengine/core/pull/1658/files#r11947316>
> .
>