Re: [PLUG] ssh key fingerprint

Jeff Abrahamson <jeff@purple.com> · Tue, 18 Mar 2003 14:04:55 -0500

On Tue, Mar 18, 2003 at 01:11:08PM -0500, gabriel rosenkoetter wrote:
> On Tue, Mar 18, 2003 at 12:08:30PM -0500, Jeff Abrahamson wrote:
> > How do I find out the ssh host fingerprint for a machine, besides
> > logging in for the first time and having ssh ask me to confirm?
> > 
> > Searching the ssh man page for fingerprint returns no hits.
> 
> ssh-keyscan(1)?

Thanks, Gabriel.  But I think I missed something, ssh-keyscan gives me
the host's key rather than the fingerprint of the key.

It (ssh-keyscan) also seems quite willing to go out and get ssh keys
from foreign hosts, but the point of verifying key fingerprints is to
avoid man in the middle attacks. I feel like I'm missing something
about this tool.

-- 
 Jeff

 Jeff Abrahamson  <http://www.purple.com/jeff/>
 GPG fingerprint: 1A1A BA95 D082 A558 A276  63C6 16BF 8C4C 0D1D AE4B