back       next
Home

openssh

Verifying SSH Key Fingerprint

Submitted by sandip on Thu, 01/01/2009 - 21:02.

If you've been given a public ssh host key and want to verify it before adding it permanently to your ssh known_hosts file:

Get the public ssh key:

$ ssh-keyscan -p 22 -t rsa,dsa {remote_host} > /tmp/ssh_host_rsa_dsa_key.pub

Get the ssh key fingerprint:

$ ssh-keygen -l -f /tmp/ssh_host_rsa_dsa_key.pub

»

Checking Ubuntu Servers for openssh and openssl vulnerable keys

Submitted by sandip on Sun, 06/22/2008 - 21:33.
  1. Update openssh and openssl packages
    # apt-get update
    # apt-get install openssh openssl

  2. Install openssh-blacklist and openssl-blacklist
    # apt-get install openssh-blacklist openssl-blacklist

  3. Check all ssh compromised keys via:
    # ssh-vulnkeys -a

  4. Check all ssl keys and certificates via:
    # openssl-vulnkeys *.key *.pem

    Note: Plesk specific ssl certs are stored at "/opt/psa/var/certificates/"

»

Syndicate content