SCP support for -o StrictHostKeyChecking=no broken

François Isabelle isabellf at
Tue Oct 23 06:21:06 EST 2012


With SCP, it seems like the option precedence is ignored.
Although this seems to work well with SSH.

$ scp -oStrictHostKeyChecking=no   hs21-dev04:/tmp/1  hs21-dev02:/tmp/2
The authenticity of host 'hs21-dev04 (' can't be established.
RSA key fingerprint is ec:0f:eb:b2:fa:6f:50:ef:89:64:01:5e:c9:cc:54:20.
Are you sure you want to continue connecting (yes/no)?

$ ssh -oStrictHostKeyChecking=no   hs21-dev04
Warning: Permanently added 'hs21-dev04,' (RSA) to the list of
known hosts.
user at hs21-dev04's password:

$ssh -V
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008

My current workaround is to run SSH first to store the key, than SSH. But I
believe this is a bug.

More information about the openssh-unix-dev mailing list