ssh-keyscan(1) 맨 페이지 - 윈디하나의 솔라나라

개요

섹션
맨 페이지 이름
검색(S)

ssh-keyscan(1)

is  a  utility for gathering the public SSH host keys of a number
of hosts.  It was designed  to  aid  in  building  and  verifying
files,  the  format  of which is documented in provides a minimal
interface suitable for use by shell and perl scripts.  uses  non-
blocking  socket I/O to contact as many hosts as possible in par‐
allel, so it is very efficient.  The keys from a domain of  1,000
hosts  can  be  collected  in  tens of seconds, even when some of
those hosts are down or do not run For  scanning,  one  does  not
need  login  access  to  the machines that are being scanned, nor
does the scanning process involve any encryption.   Hosts  to  be
scanned  may be specified by hostname, address or by CIDR network
range (e.g. 192.168.16/28).  If a  network  range  is  specified,
then  all  addresses  in that range will be scanned.  The options
are as follows: Force to use IPv4 addresses only.  Force  to  use
IPv6  addresses only.  Request certificates from target hosts in‐
stead of plain keys.  Print keys found as SSHFP DNS records.  The
default is to print keys in a format usable  as  an  file.   Read
hosts  or  pairs  from one per line.  If is supplied instead of a
filename, will read from the standard input.  Names read  from  a
file  must  start with an address, hostname or CIDR network range
to be scanned.  Addresses and hostnames may  optionally  be  fol‐
lowed  by  comma-separated  name  or address aliases that will be
copied to the output.   For  example:  192.168.11.0/24  10.20.1.1
happy.example.org 10.0.0.1,sad.example.org Hash all hostnames and
addresses  in  the  output.  Hashed names may be used normally by
and but they do not reveal  identifying  information  should  the
file's  contents  be  disclosed.  Specify a key/value option.  At
present, only a single option is supported: Selects a hash  algo‐
rithm  to  use when printing SSHFP records using the flag.  Valid
algorithms are and The default is to print both.  Connect  to  on
the  remote  host.  Quiet mode: do not print server host name and
banners in comments.  Set the timeout  for  connection  attempts.
If  seconds  have  elapsed  since a connection was initiated to a
host or since the last time anything was read from that host, the
connection is closed and the host in question considered unavail‐
able.  The default is 5 seconds.  Specify the type of the key  to
fetch  from the scanned hosts.  The possible values are or Multi‐
ple values may be specified by separating them with commas.   The
default is to fetch all the above key types.  Verbose mode: print
debugging messages about progress.  If an ssh_known_hosts file is
constructed  using without verifying the keys, users will be vul‐
nerable to attacks.  On the other hand, if the security model al‐
lows such a risk, can help in the detection of tampered  keyfiles
or  man  in  the  middle  attacks  which  have  begun  after  the
ssh_known_hosts file was created.  Print the RSA host key for ma‐
chine Search a network range, printing all supported  key  types:
Find  all  hosts  from  the file which have new or different keys
from those in the sorted file $ ssh-keyscan -t  rsa,ecdsa,ed25519
-f  ssh_hosts  |  \          sort  -u  -  ssh_known_hosts  | diff
ssh_known_hosts -

See for descriptions of the following attributes:

box; cbp-1 | cbp-1 l | l .   ATTRIBUTE  TYPE  ATTRIBUTE  VALUE  =
Availability    network/ssh = Stability       Pass-through uncom‐
mitted  wrote the initial version, and added support for protocol
version 2.



Source code for open source software components in Oracle Solaris
can be found  at  https://www.oracle.com/downloads/opensource/so‐
laris-source-code-downloads.html.

This software was built from source available at:
https://github.com/oracle/solaris-userland

The original community source was downloaded from:
https://mir‐
rors.sonic.net/pub/OpenBSD/OpenSSH/portable/openssh-10.2p1.tar.gz

Further  information about this software can be found on the open
source community website at https://www.openssh.com/.



























































맨 페이지 내용의 저작권은 맨 페이지 작성자에게 있습니다.
RSS ATOM XHTML 5 CSS3