> What's the best way to add a known_hosts entry from these fingerprints?
> Maybe the -e option should be used instead of -l ?

I don't think there is enough information to create an ssh known_hosts
entry from the fingerprint.  I've written a blog post at
http://ubuntu-smoser.blogspot.com/2010/07/verify-ssh-keys-on-ec2-instances.html
demonstrating how to check the host before connecting.

I think the original intent of this feature (before my time) was to serve
humans verifying the remote host, thus the fingerprint makes sense.

However, it seems that it would make sense to support outputting something
more machine consumable, which the 'ssh -e' would be better for.

I'm open to adding a cloud-config option for this.  Care to open a bug?

Unfortunately, I don't think we can reasonably ditch the old default
behavior as many tools have been written to scrape console output looking
for this formated string.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to cloud-init in Ubuntu.
https://bugs.launchpad.net/bugs/892554

Title:
  SSH keys summary does not report ECDSA key

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-init/+bug/892554/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to