Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2024-11-22 03:09:22 +01:00
Code Issues Projects Releases Wiki Activity

ssh_config: add UpdateHostKeys yes

Browse Source
This commit is contained in:
Aminda Suomalainen 2015-09-02 08:15:16 +03:00
parent c05b52354f
commit 66f604a6dd
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
.mikaela/ssh/config
View File

@ -33,9 +33,16 @@ Host *
# "ping" the server every minute. # "ping" the server every minute.
ServerAliveInterval 60 ServerAliveInterval 60
# OpenSSH 6.8+ - ask all host keys from servers.
# I trust the server admins and ways to identify the keys (DNSSEC,
# manual)
UpdateHostKeys yes
# Verify SSHFP records. In case DNSSEC is used this skips the # Verify SSHFP records. In case DNSSEC is used this skips the
# question on whether you trust the fingerprint or not. # question on whether you trust the fingerprint or not.
VerifyHostKeyDNS=yes # All my hosts run DNSSEC validating Unbound on localhost and use it
# for all DNS queries. Yours should too.
VerifyHostKeyDNS yes
Host hilla Host hilla
HostName hilla.kapsi.fi HostName hilla.kapsi.fi

8
etc/ssh/ssh_config
View File

@ -31,6 +31,14 @@ Host *
# "ping" the server every minute. # "ping" the server every minute.
ServerAliveInterval 60 ServerAliveInterval 60
# OpenSSH 6.8+ - ask all host keys from servers.
# I trust the server admins and ways to identify the keys (DNSSEC,
# manual)
UpdateHostKeys yes
# Verify SSHFP records. In case DNSSEC is used this skips the # Verify SSHFP records. In case DNSSEC is used this skips the
# question on whether you trust the fingerprint or not. # question on whether you trust the fingerprint or not.
VerifyHostKeyDNS=yes VerifyHostKeyDNS=yes
# All my hosts run DNSSEC validating Unbound on localhost and use it
# for all DNS queries. Yours should too.
VerifyHostKeyDNS yes