[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#784288: openssh-server: create hostkeys with $(hostname -f) as comment



Package: openssh-server
Version: 1:6.7p1-6
Severity: wishlist


Hi.

Currently, when the package is installed and hostkeys are created
this is apparently done with setting the key's comment field in a
user@hostname fashion, I guess imply by using ssh-keygen's default.

It may be cosmetically nicer to explicity set just the fully
quallified hostname (via -C "$(hostname --fqdn)").

The idea is, if one mixes all kinds of keys in e.g a file thant
"root@bar.org" indicates "this is user root's key from host bar.org",
i.e. typically what one has in ~/.ssh/id_rsa and friends.

For the host key used by sshd I'd think just "bar.org" would be better,
so one would easily see, that this is the host key from bar.org
and not the user key from it's root user.
Further, it's not even said that sshd will actually run as user root,
that could have been changed by the admin.


Cheers,
Chris.


Reply to: