Bug#413240: ITP: sshfp -- DNS SSHFP records generator

2007-03-03 Thread Julien Valroff 
Package: wnpp
Severity: wishlist
Owner: Julien Valroff <[EMAIL PROTECTED]>

* Package name : sshfp
  Version  : 1.1.1
  Upstream Authors : Paul Wouters <[EMAIL PROTECTED]> and Jake Appelbaum 
<[EMAIL PROTECTED]>
* URL  : http://www.xelerance.com/software/sshfp/
* License  : GPL
  Programming Lang : Python
  Description  : DNS SSHFP records generator

sshfp generates RFC4255 SSHFP DNS records based on the public keys stored in
a known_hosts file, or public keys can be obtained by using ssh-keyscan.
Serve these entries from the DNS server for your domain to provide
authentication via the ssh VerifyHostKeyDNS option.

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-686
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#413240: ITP: sshfp -- DNS SSHFP records generator

2007-03-03 Thread Peter Mathiasson 
On Sat, Mar 03, 2007 at 04:53:59PM +0100, Julien Valroff wrote:
> Package: wnpp
> Severity: wishlist
> Owner: Julien Valroff <[EMAIL PROTECTED]>
> 
> * Package name : sshfp
>   Version  : 1.1.1
>   Upstream Authors : Paul Wouters <[EMAIL PROTECTED]> and Jake Appelbaum 
> <[EMAIL PROTECTED]>
> * URL  : http://www.xelerance.com/software/sshfp/
> * License  : GPL
>   Programming Lang : Python
>   Description  : DNS SSHFP records generator
> 
> sshfp generates RFC4255 SSHFP DNS records based on the public keys stored in
> a known_hosts file, or public keys can be obtained by using ssh-keyscan.
> Serve these entries from the DNS server for your domain to provide
> authentication via the ssh VerifyHostKeyDNS option.

What functionality does this provide over ssh-keygen included with openssh?

-- 
Peter Mathiasson


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#413240: ITP: sshfp -- DNS SSHFP records generator

2007-03-03 Thread Julien Valroff 
Le samedi 03 mars 2007 à 17:19 +0100, Peter Mathiasson a écrit :
> On Sat, Mar 03, 2007 at 04:53:59PM +0100, Julien Valroff wrote:
> > Package: wnpp
> > Severity: wishlist
> > Owner: Julien Valroff <[EMAIL PROTECTED]>
> > 
> > * Package name : sshfp
> >   Version  : 1.1.1
> >   Upstream Authors : Paul Wouters <[EMAIL PROTECTED]> and Jake Appelbaum 
> > <[EMAIL PROTECTED]>
> > * URL  : http://www.xelerance.com/software/sshfp/
> > * License  : GPL
> >   Programming Lang : Python
> >   Description  : DNS SSHFP records generator
> > 
> > sshfp generates RFC4255 SSHFP DNS records based on the public keys stored in
> > a known_hosts file, or public keys can be obtained by using ssh-keyscan.
> > Serve these entries from the DNS server for your domain to provide
> > authentication via the ssh VerifyHostKeyDNS option.
> 
> What functionality does this provide over ssh-keygen included with openssh?

It does basically the same, except that ssh-keygen is limited as it can
only read entries from a key file. sshfp can read keys from a
known_hosts file or use ssh-keyscan to retrieve public keys.

It has also some more advanced features, like 'sshfp -s -a debian.org'
which can retrieves all host keys from a given domain (ok, don't use it
with debian.org, but quite useful for your local domain).

Cheers,
Julien