Re: ssh host keys

On Thu, 16 Apr 2020, ahriman wrote:

Hi everyone,

I'll mention this on IRC as well. I pruned some older SSH host keys from ~inst, so some of you may get an error when connecting that the fingerprint doesn't match what's expected.

You may double-check the new fingerprint by checking the SSHFP record. I also put it on the web site below the language/shells list.

Just for reference, if you want to check the fingerprints against the SSHFP DNS record it can be done like this:

ssh -o "VerifyHostKeyDNS ask" tilde.institute

This otion can be set on youf ~/.ssh/config if you prefer. For more information take a look at the man page for ssh_config(5) and the "VERIFYING HOST KEYS" section of ssh(1).

Cheers,