Displaying 2 results from an estimated 2 matches for "mlindgren".
Did you mean:
lindgren
2014 May 08
1
bug or feature with ssh-keygen and user CAs?
...e new entry, I will do ssh-keygen -R <ip>. This has the unintended consequence of matching on the offending entry in the known_hosts file *and* my cert-authority entry:
$ ssh-keygen -R 10.50.3.149
# Host 10.50.3.149 found: line 1 type RSA
# Host 10.50.3.149 found: line 512 type ECDSA
/Users/mlindgren/.ssh/known_hosts updated.
Original contents retained as /Users/mlindgren/.ssh/known_hosts.old
Am I missing something fundamental here?
Thanks,
Mattias
2014 May 08
5
[Bug 2241] New: ssh-keygen -R removes matching key as well as @cert-authority
...hority
Product: Portable OpenSSH
Version: 6.6p1
Hardware: amd64
OS: Mac OS X
Status: NEW
Severity: minor
Priority: P5
Component: ssh-keygen
Assignee: unassigned-bugs at mindrot.org
Reporter: mlindgren at runelind.net
I have confirmed this behavior from OpenSSH 6.6 in OS X (from MacPorts)
and 6.6 in Ubuntu. I have set up a SSH Certificate authority, and as
such I put in the following line at the top of my known_hosts file
@cert-authority *.mydomain.com ssh-rsa <public key>
Below this ar...