Re: Fingerprint displayed by scp (new host) and in debian-installer

[David Wright <deblis@lionunicorn.co.uk>]

On Fri 26 Jan 2018 at 08:30:43 (+0000), davidson wrote:
> On Wed, 24 Jan 2018, David Wright wrote:
> 
> >The stretch version of scp displays fingerprints using a SHA256
> >hash, but of course a jessie machine has no idea of what its
> >fingerprint is except using an MD5 hash. A question and suggestion:
> >
> >Is there a way to get stretch scp to show the fingerprint in MD5
> >when connecting to a new (jessie) host?
> 
> I don't have a jessie host to test this on:
> 
>  $ scp -o FingerprintHash=md5 file_to_copy account@recipient.host:destination_file
> 
> Does it work?

Yes thanks. Unfortunately it got left out of the man page and there's
no warning about these changes in the release notes.

I should add:

> >IIRC the debian-installer only shows the SHA256 fingerprint.  It
> >ought to display the MD5 version too, for those people installing
> >over the network with ssh from an older machine.
   … because older versions of ssh don't have the option of
     choosing their FingerprintHash at all.

Cheers,
David.