prompt to update a host key

Stephen Harris lists at spuddy.org
Fri Mar 15 21:39:47 AEDT 2019


On Fri, Mar 15, 2019 at 09:10:26AM +0000, Jochen Bern wrote:
> Imagine sysadminning a boatload of VMs getting IPs from a dynamic pool, a la
> 
> $ for ADDR in $CUSTOMER_1_RANGE $CUSTOMER_2_RANGE... ; do
> > ping -c 1 -w 2 $ADDR >/dev/null 2>&1 && ssh root@$ADDR do_urgent_fix
> > done
> 
> , and it mightn't be that much of a niche anymore ...

And that's when you look at using certificate based host keys.

-- 

rgds
Stephen


More information about the openssh-unix-dev mailing list