Re: SSHFP management tools?
Darren Tucker via openssh-unix-dev <[email protected]> Thu, 16 Jul 2026 08:51:11 +1000
| Newsgroups | gmane.network.openssh.devel |
|---|---|
| Message-ID | <CALDDTe3DubVm_rysTF1xuENAC3L5SZQuoMww0c+rGpmW4doOdA@mail.gmail.com> |
On Thu, 16 Jul 2026 at 05:41, Chris Rapier <[email protected]> wrote: > Are there any tools that help to automate the process of insert sshfp > records in to DNS? I'm interested in getting our organization to deploy > them but doing this manually would be excessive. Instead of reinventing > the wheel I am hoping someone has already done this. I just updated the SSHFP regression test[0] to test extra key types. I ended up generating a bind-format zone file from the test keys in the test script then just importing that zonefile into the DNS provider. This was fine for me given this was a one-time setup but may or may not be suitable for your use case. [0] https://github.com/openssh/openssh-portable/blob/master/regress/sshfp-connect.sh -- Darren Tucker (dtucker at dtucker.net) GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860 37F4 9357 ECEF 11EA A6FA Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.