diff options
| author | Damien Miller <djm@cvs.openbsd.org> | 2015-05-22 05:28:46 +0000 |
|---|---|---|
| committer | Damien Miller <djm@cvs.openbsd.org> | 2015-05-22 05:28:46 +0000 |
| commit | 032f5fc1b6bceb120469217ff35ce41bf7251786 (patch) | |
| tree | 32f78f9872c69bfd495b68d016b03ccf1a86f288 /usr.bin | |
| parent | f602f8990ea611e55d089ea48adc03272ce65549 (diff) | |
mention ssh-keygen -E for comparing legacy MD5 fingerprints; bz#2332
Diffstat (limited to 'usr.bin')
| -rw-r--r-- | usr.bin/ssh/ssh.1 | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/usr.bin/ssh/ssh.1 b/usr.bin/ssh/ssh.1 index dd01b978779..df7ac86af93 100644 --- a/usr.bin/ssh/ssh.1 +++ b/usr.bin/ssh/ssh.1 @@ -33,8 +33,8 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: ssh.1,v 1.357 2015/05/06 05:45:17 dtucker Exp $ -.Dd $Mdocdate: May 6 2015 $ +.\" $OpenBSD: ssh.1,v 1.358 2015/05/22 05:28:45 djm Exp $ +.Dd $Mdocdate: May 22 2015 $ .Dt SSH 1 .Os .Sh NAME @@ -1106,6 +1106,11 @@ Fingerprints can be determined using .Pp If the fingerprint is already known, it can be matched and the key can be accepted or rejected. +If only legacy (MD5) fingerprints for the server are available, the +.Xr ssh-keygen 1 +.Fl E +option may be used to downgrade the fingerprint algorithm to match. +.Pp Because of the difficulty of comparing host keys just by looking at fingerprint strings, there is also support to compare host keys visually, |