You are viewing mmcgrath

Previous Entry | Next Entry

SSHFP records?

mmcgrath-head
So I learned about SSHFP records at FUDCon and decided to implement them for some of our externally facing sites like cvs.fedoraproject.org, fedorapeople.org and git.fedorahosted.org (and others).

What is an SSHFP record? It's a ssh host key in DNS so you can verify it is correct. For example you can run:

$ dig SSHFP git.fedorahosted.org

Which will get you:

git.fedorahosted.org. 85975 IN SSHFP 2 1 DE382873ABE19B40AEFE714D686E15E16EAD5177
git.fedorahosted.org. 85975 IN SSHFP 1 1 A843ECED826C2F0075888150E89AE4567CD37D7F

So how can you use this information? Set VerifyHostKeyDNS to yes in your ssh_config (man ssh_config for more info, but you'll probably want to place it in your ~/.ssh/config file)

Comments

(Anonymous)
Dec. 20th, 2010 08:10 am (UTC)
Microsoft Office 2007
As I write this post—longhandOffice 2010 (http://www.software-hotbuy.com/)in a spiral notebook—I’m 20,000 feet above eastern Washington, having Microsoft Office 2010 (http://www.software-hotbuy.com/)just crossed above the Cascades on my return flight Microsoft word (http://www.software-hotbuy.com/)to Chicago. I visited Seattle for the weekend to Office 2007 (http://www.software-hotbuy.com/)and I have known each other for 20 years now. They Microsoft Office (http://www.software-hotbuy.com/)had a lovely ceremony, and the trip in general was fantastic.Microsoft Office 2007 (http://www.software-hotbuy.com/)In the 13 years since I left Seattle, I’ve Office 2007 key (http://www.software-hotbuy.com/)visited six or seven times, and I always return to wherever has Office 2007 download (http://www.software-hotbuy.com/)Office 2007 Professional (http://www.software-hotbuy.com/)become home with mixed feelings about the place. It Outlook 2010 (http://www.software-hotbuy.com/)both alarms and pleases me to see howMicrosoft outlook (http://www.software-hotbuy.com/)that once-familiar areas seem almost foreign. ForMicrosoft outlook 2010 (http://www.software-hotbuy.com/)neighborhoods have changed, to the point Windows 7 (http://www.software-hotbuy.com/windows-7-c-2.html) as have cookie-cutter, here-today-and-gone-tomorrow nightclubs that cater to the shiny shirt crowd.

Latest Month

July 2013
S M T W T F S
 123456
78910111213
14151617181920
21222324252627
28293031   

Page Summary

Powered by LiveJournal.com
Designed by yoksel