Re: howto calculate fingerprints from ssh host keys?

[Christoph Moench-Tegeder <cmt@rz.uni-karlsruhe.de>]

## Thomas Gebhardt (gebhardt@HRZ.Uni-Marburg.DE):

> > $ ssh-keygen -l -f ssh_host_dsa_key.pub
> > $ 1024 97:46:de:e0:a1:71:76:6f:b6:e8:f1:40:2a:63:bc:18 ssh_host_dsa_key.pub

> 2. the fingerprints are generated from the secret keys, not from the
>    public keys.

No, they are generated from the public keys.
As ssh-keygen(1) states, "-l Show fingerprint of specified public key file."
There is no sense in providing information about the secret key to any user
(except root, because he knows everything). users only get the public host
key, and that's all they can verify.

Regards,
cmt

-- 
Spare Space