Re: ssh.1: use public key on example "ssh-keygen -l" command

Lucas de Sena <[email protected]> Mon, 3 Aug 2026 13:05:57 -0300
Newsgroups gmane.os.openbsd.tech
Message-ID <anC8JBg5jnQfdXDx@sabia>
Resending without my mail signature that confuses patch(1)

On 2026-08-01, Lucas de Sena wrote:
> Use the public key on example command for ssh-keygen(1).
> 
> The prompt here ($) implies that the command is run by a regular user,
> which should have no read access to the host private key.  And even if
> it were run by root, ssh-keygen(1) finds and uses the corresponding
> public key anyway, yielding the same result.


diff /usr/src
path + /usr/src
commit - f8480ad0276ad54ce9f7ed2b2004c86f9f1a9521
blob - 747a126a1d19aca620769dda933a0d0f3febe9fc
file + usr.bin/ssh/ssh.1
--- usr.bin/ssh/ssh.1
+++ usr.bin/ssh/ssh.1
@@ -1184,7 +1184,7 @@ has been disabled).
 Fingerprints can be determined using
 .Xr ssh-keygen 1 :
 .Pp
-.Dl $ ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key
+.Dl $ ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key.pub
 .Pp
 If the fingerprint is already known, it can be matched
 and the key can be accepted or rejected.