You are not logged in.

#1 2014-06-12 04:23:39

apocolyps1
Member
Registered: 2009-01-18
Posts: 7

ssh know_hosts

dont ask why but it has been a long time since ive had a need to edit my ssh known_hosts file. so to my surprise there seemed to be alot of keys in there that i could not identify?

am i mistaken in thinking the only keys that should be in there are ones ive added when ssh'ing to a new host?

humbly yours, overtly paranoid albiet at least confused arch user.

Offline

#2 2014-06-12 07:29:06

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,231
Website

Re: ssh know_hosts

apocolyps1 wrote:

am i mistaken in thinking the only keys that should be in there are ones ive added when ssh'ing to a new host?

That's correct.

apocolyps1 wrote:

alot of keys in there that i could not identify?

What is "a lot"? Examples? Are they hosts you know but don't think you've SSH'ed to?

Don't forget SSH will hash the hostname if HashKnownHosts is set to yes

man ssh_confg wrote:

Indicates that ssh(1) should hash host names and addresses when they  are  added  to  ~/.ssh/known_hosts.   These
hashed  names  may  be used normally by ssh(1) and sshd(8), but they do not reveal identifying information should
the file's contents be disclosed.  The default is ``no''.  Note that existing names and addresses in known  hosts
files will not be converted automatically, but may be manually hashed using ssh-keygen(1).

Offline

Board footer

Powered by FluxBB