Date: Fri, 27 Jul 2001 18:08:44 +0200 From: "Karsten W. Rohrbach" <karsten@rohrbach.de> To: Scott Johnson <sjohn@airlinksys.com>, freebsd-security@freebsd.org Subject: Re: ssh_host_dsa_key fingerprint Message-ID: <20010727180844.M23159@mail.webmonster.de> In-Reply-To: <20010727182433.A1105@ringworld.oblivion.bg>; from roam@orbitel.bg on Fri, Jul 27, 2001 at 06:24:33PM %2B0300 References: <20010727011647.A69806@sjohn.airlinksys.com> <20010727170448.I23159@mail.webmonster.de> <20010727182433.A1105@ringworld.oblivion.bg>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] Peter Pentchev(roam@orbitel.bg)@2001.07.27 18:24:33 +0000: > On Fri, Jul 27, 2001 at 05:04:48PM +0200, Karsten W. Rohrbach wrote: > > Scott Johnson(sjohn@airlinksys.com)@2001.07.27 01:16:47 +0000: > > > If you're like me and wondered how to get a fingerprint for your DSA host > > > key: start ssh-agent, add the host key, and list your keys. > > > > > > If you don't care or already figured out a way, disregard this message. > > > :-) > > > > man ssh-keygen(1): > > > > -l Show fingerprint of specified private or public key file. > > Does this work for DSA though? > > [root@ringworld:v3 ~]# ssh-keygen -lf /etc/ssh/ssh_host_dsa_key > /etc/ssh/ssh_host_dsa_key is not a valid key file. > [root@ringworld:v3 ~]# ssh-keygen -lf /etc/ssh/ssh_host_key > 1024 fc:1f:cf:8c:5c:dc:10:d7:80:21:a3:cc:3b:b2:9f:9d root@ringworld.office1.bg > [root@ringworld:v3 ~]# > > Seems to work OK for the RSA host key.. > This is on a -stable rebuilt today: > > [root@ringworld:v3 ~]# ssh -V > SSH Version OpenSSH_2.3.0 green@FreeBSD.org 20010321, protocol versions 1.5/2.0. > Compiled with SSL (0x0090601f). peter, as always, you are right. this works only for rsa keys. my fault ;-) /k -- > "Her figure described a set of parabolas that could cause cardiac arrest > in a yak." --Woody Allen KR433/KR11-RIPE -- WebMonster Community Founder -- nGENn GmbH Senior Techie http://www.webmonster.de/ -- ftp://ftp.webmonster.de/ -- http://www.ngenn.net/ karsten&rohrbach.de -- alpha&ngenn.net -- alpha&scene.org -- catch@spam.de GnuPG 0x2964BF46 2001-03-15 42F9 9FFF 50D4 2F38 DBEE DF22 3340 4F4E 2964 BF46 Please do not remove my address from To: and Cc: fields in mailing lists. 10x [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7YZIMM0BPTilkv0YRApZ7AJ48aKWe62iDeobYc1XXJtSSxLCD2wCfeWWL GJfo47iBC8IJJILUqOxBzmQ= =0/ot -----END PGP SIGNATURE-----help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010727180844.M23159>