"SSHFP software creates DNS SSHFP records using SSH public keys." (9 words)
If you're looking for a reliable way to generate DNS SSHFP records from SSH public keys, then look no further than sshfp. With the ability to take public keys from either a knownhosts file or from scanning the host's sshd daemon, this software is highly versatile and easy to use.
Moreover, the ssh client can make use of these SSHFP records if you simply set "VerifyHostKeyDNS yes" in the file /etc/ssh/ssh_config. This can be a huge timesaver and make your system more secure overall.
One great feature of sshfp is that it offers a range of syntax options, including the ability to specify a knownhosts file or hostname(s) for input. Additionally, the -s / --scan option allows you to scan hosts or a domain for public SSH keys using ssh-keyscan.
Other options for sshfp include the ability to include trailing dots in the hostname in the SSHFP records (with the -t / --trailing-dot option), specifying a filename for output (with -o / --output), and accessing help or version information (with -h / --help or -v / --version respectively).
As for requirements, all you need is python-dns. And in terms of updates, this latest release includes a -p port option, a Debian package, and a fix in parsing getopt order. All in all, sshfp is a fantastic tool for anyone looking to streamline their DNS SSHFP record-generation process.
Moreover, the ssh client can make use of these SSHFP records if you simply set "VerifyHostKeyDNS yes" in the file /etc/ssh/ssh_config. This can be a huge timesaver and make your system more secure overall.
One great feature of sshfp is that it offers a range of syntax options, including the ability to specify a knownhosts file or hostname(s) for input. Additionally, the -s / --scan option allows you to scan hosts or a domain for public SSH keys using ssh-keyscan.
Other options for sshfp include the ability to include trailing dots in the hostname in the SSHFP records (with the -t / --trailing-dot option), specifying a filename for output (with -o / --output), and accessing help or version information (with -h / --help or -v / --version respectively).
As for requirements, all you need is python-dns. And in terms of updates, this latest release includes a -p port option, a Debian package, and a fix in parsing getopt order. All in all, sshfp is a fantastic tool for anyone looking to streamline their DNS SSHFP record-generation process.
What's New
Version 1.1.2: N/A