SSHFP management tools?

[Darren Tucker]

On Thu, 16 Jul 2026 at 05:41, Chris Rapier <rapier at psc.edu> wrote:
> Are there any tools that help to automate the process of insert sshfp
> records in to DNS? I'm interested in getting our organization to deploy
> them but doing this manually would be excessive. Instead of reinventing
> the wheel I am hoping someone has already done this.

I just updated the SSHFP regression test[0] to test extra key types.

I ended up generating a bind-format zone file from the test keys in
the test script then just importing that zonefile into the DNS
provider.  This was fine for me given this was a one-time setup but
may or may not be suitable for your use case.

[0] https://github.com/openssh/openssh-portable/blob/master/regress/sshfp-connect.sh

-- 
Darren Tucker (dtucker at dtucker.net)
GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860  37F4 9357 ECEF 11EA A6FA
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.