[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: known_hosts file format



On Wed, 2 Feb 2011, Aris Adamantiadis wrote:

> This is not a known issue. I personally never used comments in SSH
> keys. My explanation to that part of code that doesn't accept 5 fields
> has been written before OpenSSH published documentation around the
> known_hosts key format.
>
> However, most of the keys I see in my own known hosts file are from the
> type
> |1|hash ssh-rsa key
> or
> host ssh-rsa key
>
> could you paste us a sample of pubkey that doesn't work ?

We create our known_hosts by collecting all public host keys and adding
all hostnames and IP numbers but leaving the comment. Example:

derga,derga-p,10.9.20.5,192.168.14.11,derga-p.priv.lan,derga.cluster ssh-rsa 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 noe@derga

Keys like the above work fine when the comment is removed.

Norbert


References:
known_hosts file formatNorbert Paschedag <noe@xxxxxxxxxxxxx>
Re: known_hosts file formatAris Adamantiadis <aris@xxxxxxxxxxxx>
Archive administrator: postmaster@lists.cynapses.org