Feature Request: Make ssh-keygen -R accepts Host aliases from .ssh/config

Peter Moody mindrot at hda3.com
Wed Oct 19 02:52:36 AEDT 2016


> One annoying thing I found when working with hosts that get reinstalled
> regularly is I occasionally want to delete there known_host entires. I have
> been using ssh-keygen -R to do this.

alternative solution: use host certificates rather than host keys.

* you distribute a single ca pubkey rather than a hostkey for every host.
* you'll _never_ see a "do you accept this host key" message if you're
connecting to a host with a correct host cert.


More information about the openssh-unix-dev mailing list