Key fingerprint feature request

Jarno Huuskonen jhuuskon at messi.uku.fi
Tue Jan 16 04:03:39 EST 2001


On Fri, Jan 12, Markus Friedl wrote:
> i think it would be nice if the commercial ssh could print 
> out the  host keys fingerprint in same format as OpenSSH :)

I'm not very optimistic that commercial ssh is going to change to 
md5/hex fingerprint :)

> > >From what I can see it wouldn't be too much work to add new fingerprint
> > method to key.c:key_fingerprint ... Perhaps the fingerprint style could
> > be configurable with ssh_config options ?
> 
> well, ssh-keygen does not read ssh_config (and should not).
> but, yes, perhaps key_fingerprint should get some more options
> (like hash type, output format). on the other hand, this could
> confuse people.

When I was thinking about the ssh_config option for fingerprint style
I had in mind that ssh would use the ssh_config option when displaying
the fingerprint (when connecting to new hosts).

Would something like this work:
- modify key.c:key_fingerprint to take hash_type and fingerprint style
  parameters (hash is md5 / sha1  and fingerprint is 'bubble' / hex).
  ( or just one parameter with both parameters combined?)

- add KeyFingerprintStyle option to ssh_config (this could have values
  like md5-hex, sha1-hex, sha1-bubble etc).
  (Perhaps even multiple values so it would be possible to get the 
   key-fingerprint printed in openssh / commercial ssh style at the same
   time).

- change ssh-keygen.c and ssh-add.c to use the new parameters
  for key_fingerprint (use md5/hex as default and perhaps have something
  like -o parameter)

- change sshconnect.c to use the new parameters and to use the ssh_config 
  option.

(- and modify the manuals to reflect these changes).
All the default values would make OpenSSH to act like before, but add the
possibility to print key fingerprint commercial ssh-style.
 
If these ideas sound somewhat feasible I might volunteer to start coding...

-Jarno

-- 
Jarno Huuskonen - System Administrator   |  Jarno.Huuskonen at uku.fi
University of Kuopio - Computer Centre   |  Work:   +358 17 162822
PO BOX 1627, 70211 Kuopio, Finland       |  Mobile: +358 40 5388169





More information about the openssh-unix-dev mailing list