Annotation of src/usr.bin/ssh/ssh-keyscan.1, Revision 1.22
1.22 ! ray 1: .\" $OpenBSD: ssh-keyscan.1,v 1.21 2005/09/30 20:34:26 jaredy Exp $
1.4 deraadt 2: .\"
3: .\" Copyright 1995, 1996 by David Mazieres <dm@lcs.mit.edu>.
4: .\"
5: .\" Modification and redistribution in source and binary forms is
6: .\" permitted provided that due credit is given to the author and the
1.6 pvalchev 7: .\" OpenBSD project by leaving this copyright notice intact.
1.3 niklas 8: .\"
1.1 markus 9: .Dd January 1, 1996
1.4 deraadt 10: .Dt SSH-KEYSCAN 1
1.1 markus 11: .Os
12: .Sh NAME
13: .Nm ssh-keyscan
14: .Nd gather ssh public keys
15: .Sh SYNOPSIS
16: .Nm ssh-keyscan
1.15 jmc 17: .Bk -words
1.20 jmc 18: .Op Fl 46Hv
19: .Op Fl f Ar file
1.10 markus 20: .Op Fl p Ar port
21: .Op Fl T Ar timeout
22: .Op Fl t Ar type
23: .Op Ar host | addrlist namelist
24: .Op Ar ...
1.15 jmc 25: .Ek
1.1 markus 26: .Sh DESCRIPTION
27: .Nm
28: is a utility for gathering the public ssh host keys of a number of
1.15 jmc 29: hosts.
30: It was designed to aid in building and verifying
1.1 markus 31: .Pa ssh_known_hosts
32: files.
33: .Nm
34: provides a minimal interface suitable for use by shell and perl
35: scripts.
36: .Pp
37: .Nm
38: uses non-blocking socket I/O to contact as many hosts as possible in
1.15 jmc 39: parallel, so it is very efficient.
40: The keys from a domain of 1,000
1.1 markus 41: hosts can be collected in tens of seconds, even when some of those
1.15 jmc 42: hosts are down or do not run ssh.
43: For scanning, one does not need
1.12 deraadt 44: login access to the machines that are being scanned, nor does the
45: scanning process involve any encryption.
1.9 mpech 46: .Pp
47: The options are as follows:
1.1 markus 48: .Bl -tag -width Ds
1.20 jmc 49: .It Fl 4
50: Forces
51: .Nm
52: to use IPv4 addresses only.
53: .It Fl 6
54: Forces
55: .Nm
56: to use IPv6 addresses only.
57: .It Fl f Ar file
58: Read hosts or
59: .Pa addrlist namelist
60: pairs from this file, one per line.
61: If
62: .Pa -
63: is supplied instead of a filename,
64: .Nm
65: will read hosts or
66: .Pa addrlist namelist
67: pairs from the standard input.
1.19 djm 68: .It Fl H
69: Hash all hostnames and addresses in the output.
70: Hashed names may be used normally by
71: .Nm ssh
72: and
73: .Nm sshd ,
74: but they do not reveal identifying information should the file's contents
75: be disclosed.
1.10 markus 76: .It Fl p Ar port
77: Port to connect to on the remote host.
1.11 stevesk 78: .It Fl T Ar timeout
1.15 jmc 79: Set the timeout for connection attempts.
80: If
1.1 markus 81: .Pa timeout
82: seconds have elapsed since a connection was initiated to a host or since the
83: last time anything was read from that host, then the connection is
1.15 jmc 84: closed and the host in question considered unavailable.
85: Default is 5 seconds.
1.10 markus 86: .It Fl t Ar type
1.11 stevesk 87: Specifies the type of the key to fetch from the scanned hosts.
1.10 markus 88: The possible values are
89: .Dq rsa1
90: for protocol version 1 and
91: .Dq rsa
92: or
93: .Dq dsa
94: for protocol version 2.
95: Multiple values may be specified by separating them with commas.
96: The default is
97: .Dq rsa1 .
98: .It Fl v
99: Verbose mode.
100: Causes
101: .Nm
102: to print debugging messages about its progress.
1.2 itojun 103: .El
1.9 mpech 104: .Sh SECURITY
1.22 ! ray 105: If an ssh_known_hosts file is constructed using
1.9 mpech 106: .Nm
1.12 deraadt 107: without verifying the keys, users will be vulnerable to
1.18 brad 108: .Em man in the middle
1.9 mpech 109: attacks.
1.12 deraadt 110: On the other hand, if the security model allows such a risk,
1.9 mpech 111: .Nm
1.12 deraadt 112: can help in the detection of tampered keyfiles or man in the middle
113: attacks which have begun after the ssh_known_hosts file was created.
1.1 markus 114: .Sh FILES
115: .Pa Input format:
1.10 markus 116: .Bd -literal
1.1 markus 117: 1.2.3.4,1.2.4.4 name.my.domain,name,n.my.domain,n,1.2.3.4,1.2.4.4
1.10 markus 118: .Ed
1.1 markus 119: .Pp
1.10 markus 120: .Pa Output format for rsa1 keys:
121: .Bd -literal
1.1 markus 122: host-or-namelist bits exponent modulus
1.10 markus 123: .Ed
124: .Pp
125: .Pa Output format for rsa and dsa keys:
126: .Bd -literal
127: host-or-namelist keytype base64-encoded-key
128: .Ed
129: .Pp
130: Where
131: .Pa keytype
132: is either
133: .Dq ssh-rsa
134: or
1.16 markus 135: .Dq ssh-dss .
1.1 markus 136: .Pp
1.13 deraadt 137: .Pa /etc/ssh/ssh_known_hosts
1.17 jmc 138: .Sh EXAMPLES
139: Print the
140: .Pa rsa1
141: host key for machine
142: .Pa hostname :
143: .Bd -literal
144: $ ssh-keyscan hostname
145: .Ed
146: .Pp
147: Find all hosts from the file
148: .Pa ssh_hosts
149: which have new or different keys from those in the sorted file
150: .Pa ssh_known_hosts :
151: .Bd -literal
152: $ ssh-keyscan -t rsa,dsa -f ssh_hosts | \e
153: sort -u - ssh_known_hosts | diff ssh_known_hosts -
154: .Ed
1.1 markus 155: .Sh SEE ALSO
1.4 deraadt 156: .Xr ssh 1 ,
1.1 markus 157: .Xr sshd 8
1.7 mpech 158: .Sh AUTHORS
1.21 jaredy 159: .An -nosplit
1.17 jmc 160: .An David Mazieres Aq dm@lcs.mit.edu
1.10 markus 161: wrote the initial version, and
1.17 jmc 162: .An Wayne Davison Aq wayned@users.sourceforge.net
1.10 markus 163: added support for protocol version 2.
1.17 jmc 164: .Sh BUGS
165: It generates "Connection closed by remote host" messages on the consoles
166: of all the machines it scans if the server is older than version 2.9.
167: This is because it opens a connection to the ssh port, reads the public
168: key, and drops the connection as soon as it gets the key.
![[BACK]](/icons/back.gif){kind=icon}
Return to ssh-keyscan.1 CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / ssh