# 2.0.8.1 update may request SSH/SFTP ssh-ed25519 host key reverification

**URL:** <https://forum.duplicati.com/t/2-0-8-1-update-may-request-ssh-sftp-ssh-ed25519-host-key-reverification/17916>\
**Category:** Support\
**Created:** [May 9, 2024, 1:39pm UTC](https://forum.duplicati.com/t/2-0-8-1-update-may-request-ssh-sftp-ssh-ed25519-host-key-reverification/17916 "2024-05-09T13:39:55Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![kenkendk](https://forum.duplicati.com/user_avatar/forum.duplicati.com/kenkendk/32/5305_2.png) [@kenkendk](https://forum.duplicati.com/u/kenkendk)\
**Post date:** [May 10, 2024, 8:18am UTC](https://forum.duplicati.com/t/2-0-8-1-update-may-request-ssh-sftp-ssh-ed25519-host-key-reverification/17916/2 "2024-05-10T08:18:41Z")

</div>

> [@hellcake](#):
>
> I’m using a self-signed certificate and I’ve got an error with fingerprint verification. The message says “ssh-ed25519 256”, but the checksum appears to still be the same md5 16 bytes. It’s a good thing if the developers decided to upgrade the checksum verification to sha-256, since md5 is considered unsafe, but then the checksum should be different and 32 bytes in length.

The error message is related to the SSH library which was updated. IIRC, the default trusted algorithms are a bit stricter, which would explain the change in keys. I am not sure how the fingerprint is created, but the 16 bytes are returned from the SSH library (and server), and I _think_ this is part of the key-file hash (including all lengths).

You can see the number after `ssh-ed25519` is changed from `32` to `256`, so what I understand from the error message is that you are seeing the same server key, but now using the 256 bit key instead of the previous 32 bit key.

> [@Release: 2.0.8.1 (beta) 2024-05-07](https://forum.duplicati.com/t/release-2-0-8-1-beta-2024-05-07/17893/14):
>
> Has the handling of temporary files in the _tempdir_ location been changed in this version?

I am not aware of any changes related to the temp folder.  
I looked at the source and the intention of the `--run-script-after` option seems to be to delete the temp file immediately after the script exits.

---

_[View the full topic](https://forum.duplicati.com/t/2-0-8-1-update-may-request-ssh-sftp-ssh-ed25519-host-key-reverification/17916)._
