主页 / server / 问题 / 528680
Accepted
Dustin Oprea
Asked: 2013-08-06 01:34:16 +0800 CST

SSH 主机密钥：“ssh-keygen -H”与“ssh-keyscan”

  • 772

“ssh-keygen -F”似乎为给定的主机名返回一个主机密钥（第一次匹配？），“ssh-keyscan”似乎返回所有匹配，但顺序不清楚。

两者的具体区别是什么？

ssh

1 个回答

  1. Best Answer

    从ssh-keygen(1)手册页：

    -H      Hash a known_hosts file.  This replaces all hostnames and addresses with hashed
        representations within the specified file; the original content is moved to a
        file with a .old suffix.  These hashes may be used normally by ssh and sshd, but 
        they do not reveal identifying information should the file's contents be 
        disclosed.  This option will not modify existing hashed hostnames and is 
        therefore safe to use on files that mix hashed and non-hashed names.

    并从ssh-keyscan(1)手册页：

    -H      Hash all hostnames and addresses in the output.  Hashed names may be used 
        normally by ssh and sshd, but they do not reveal identifying information should
        the file's contents be disclosed.

    前者在本地朗姆酒，散列您的~/.ssh/known_hosts文件，而后者联系远程服务器以请求其密钥。

    • 0

相关问题