Comment 3 for bug 892554

Revision history for this message
Scott Moser (smoser) wrote : Re: [Bug 892554] Re: SSH keys summary does not report ECDSA key

> What's the best way to add a known_hosts entry from these fingerprints?
> Maybe the -e option should be used instead of -l ?

I don't think there is enough information to create an ssh known_hosts
entry from the fingerprint. I've written a blog post at
http://ubuntu-smoser.blogspot.com/2010/07/verify-ssh-keys-on-ec2-instances.html
demonstrating how to check the host before connecting.

I think the original intent of this feature (before my time) was to serve
humans verifying the remote host, thus the fingerprint makes sense.

However, it seems that it would make sense to support outputting something
more machine consumable, which the 'ssh -e' would be better for.

I'm open to adding a cloud-config option for this. Care to open a bug?

Unfortunately, I don't think we can reasonably ditch the old default
behavior as many tools have been written to scrape console output looking
for this formated string.