Different HostKeys for different hostnames or IPs in the same sshd?..

Mikhail T. mi+thun at aldan.algebra.com
Wed Sep 21 16:09:20 EST 2011


On 21.09.2011 01:49, Darren Tucker wrote:
>> >  Is not there something similar in ssh protocol? Can it, perhaps, be added?
> There's not.  I guess it might be theoretically possible to shoehorn
> it in but I don't see much value in it.

I thought, I began this thread with a use-case for this feature... It is 
hardly an exotic situation and allowing to solve the problem "properly" 
would be most valuable.

> >  Alternatively, is there a way to make the client check the remote host key
> >  against not one, but*several*  of the known keys for the same name?
> Not the openssh client.  I dunno if any other implementations can.

Can't the client be altered to do this? Yours,

    -mi



More information about the openssh-unix-dev mailing list