Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #191505 > unrolled thread

Fingerprint displayed by scp (new host) and in debian-installer

Started byDavid Wright <deblis@lionunicorn.co.uk>
First post2018-01-24 21:00 +0100
Last post2018-01-26 18:00 +0100
Articles 3 — 2 participants

Back to article view | Back to linux.debian.user


Contents

  Fingerprint displayed by scp (new host) and in debian-installer David Wright <deblis@lionunicorn.co.uk> - 2018-01-24 21:00 +0100
    Re: Fingerprint displayed by scp (new host) and in  debian-installer davidson <davidson@freevolt.org> - 2018-01-26 09:10 +0100
      Re: Fingerprint displayed by scp (new host) and in debian-installer David Wright <deblis@lionunicorn.co.uk> - 2018-01-26 18:00 +0100

#191505 — Fingerprint displayed by scp (new host) and in debian-installer

FromDavid Wright <deblis@lionunicorn.co.uk>
Date2018-01-24 21:00 +0100
SubjectFingerprint displayed by scp (new host) and in debian-installer
Message-ID<vbznc-3VR-13@gated-at.bofh.it>
The stretch version of scp displays fingerprints using a SHA256 hash,
but of course a jessie machine has no idea of what its fingerprint
is except using an MD5 hash. A question and suggestion:

Is there a way to get stretch scp to show the fingerprint in MD5
when connecting to a new (jessie) host?

IIRC the debian-installer only shows the SHA256 fingerprint.
It ought to display the MD5 version too, for those people
installing over the network with ssh from an older machine.

Cheers,
David.

[toc] | [next] | [standalone]


#191582 — Re: Fingerprint displayed by scp (new host) and in debian-installer

Fromdavidson <davidson@freevolt.org>
Date2018-01-26 09:10 +0100
SubjectRe: Fingerprint displayed by scp (new host) and in debian-installer
Message-ID<vc7fb-Li-3@gated-at.bofh.it>
In reply to#191505
On Wed, 24 Jan 2018, David Wright wrote:

> The stretch version of scp displays fingerprints using a SHA256
> hash, but of course a jessie machine has no idea of what its
> fingerprint is except using an MD5 hash. A question and suggestion:
>
> Is there a way to get stretch scp to show the fingerprint in MD5
> when connecting to a new (jessie) host?

I don't have a jessie host to test this on:

  $ scp -o FingerprintHash=md5 file_to_copy account@recipient.host:destination_file

Does it work?

> IIRC the debian-installer only shows the SHA256 fingerprint.  It
> ought to display the MD5 version too, for those people installing
> over the network with ssh from an older machine.
>
> Cheers,
> David.
>
>

[toc] | [prev] | [next] | [standalone]


#191608

FromDavid Wright <deblis@lionunicorn.co.uk>
Date2018-01-26 18:00 +0100
Message-ID<vcfw5-5NZ-29@gated-at.bofh.it>
In reply to#191582
On Fri 26 Jan 2018 at 08:30:43 (+0000), davidson wrote:
> On Wed, 24 Jan 2018, David Wright wrote:
> 
> >The stretch version of scp displays fingerprints using a SHA256
> >hash, but of course a jessie machine has no idea of what its
> >fingerprint is except using an MD5 hash. A question and suggestion:
> >
> >Is there a way to get stretch scp to show the fingerprint in MD5
> >when connecting to a new (jessie) host?
> 
> I don't have a jessie host to test this on:
> 
>  $ scp -o FingerprintHash=md5 file_to_copy account@recipient.host:destination_file
> 
> Does it work?

Yes thanks. Unfortunately it got left out of the man page and there's
no warning about these changes in the release notes.

I should add:

> >IIRC the debian-installer only shows the SHA256 fingerprint.  It
> >ought to display the MD5 version too, for those people installing
> >over the network with ssh from an older machine.
   … because older versions of ssh don't have the option of
     choosing their FingerprintHash at all.

Cheers,
David.

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web