3 ms·
Does it allow you to verify fingerprints? [Hopefully with the new & improved case-sensitive SHA256 format as well? :)]
by ehPReth 10y ago
Does it allow you to verify fingerprints? [Hopefully with the new & improved case-sensitive SHA256 format as well? :)]
- carloscabanero 10y agoIf I remember, fingerprint was verified using libssh2, but I do not think they do SHA256 yet. Tried to look in their documentation but didn't find it. Would be a great addition too.
- zejay 10y agoRight now it seems to show an SHA1 hash encoded in hex, which is very inconvenient because ssh-keygen displays either MD5 in hex or SHA256 in base64. It should at least tell the user what hash algo was used, I found that out by trial and error.
- geofft 10y agoHeh, I have the opposite problem with Prompt - none of my OpenSSH packages are new enough to use the new format, so I can't cross-reference with a known-good SHA-1 fingerprint. Turns out you can run cut -d' ' -f2 /etc/ssh/ssh_host_ecdsa_key.pub | base64 -d | openssl sha256 -binary | base64 but this requires actually being on the host (and isn't useful for servers where you don't get a shell).