[Bug 2742] Improve -R option, allow to purge all similar keys

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Tue Jul 18 19:59:20 AEST 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2742

--- Comment #2 from Dirk Stöcker <mindrot at dstoecker.de> ---
> OpenSSH does not print that line. It is a Debian addition [1].

Seems openSUSE copied this patch. Maybe it should find its way into the
official tool ;-)

> I don't think ssh-keygen should resolve the hostname to IP address and remove also that lines.

That's NOT what I proposed. This would not work always anyway (dynamic
IPs again or otherwise changed IPs or switch from a dual stack network
to a IPV4 or ...).

What I propose is to offer to delete all keys with "the same key data".
As the host key changed any entry with the same key data very likely is
obsolete as well. There may be cases when this is not true (e.g.
different hosts using the same key), so it should be optional.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list