̾??
ssh-keyscan
— ssh
????????????????
ssh-keyscan
[-v46
]
[-p
?ݡ????ֹ?]
[-T
?????ॢ?????ÿ?]
[-t
???μ???]
[-f
?ե?????̾]
[?ۥ???̾ | ???ɥ쥹?ꥹ?? ?ۥ???̾?ꥹ??]
[...]
ssh-keyscan
??ʣ???Υۥ??Ȥ??? ssh
?ѤΥۥ??ȸ??????????????뤿????
?桼?ƥ????ƥ??Ǥ?????????
ssh_known_hosts
?ե??????????ۤ??????ڤ????Τ???Ω?Ĥ褦???????Ƥ??ޤ???
ssh-keyscan
?ϥ????륹?????ץȤ??뤤?? perl
???????ץȤ????Ȥ??Τ?Ŭ??????
?Ǿ??¤Υ??ե????????????Ƥ??ޤ???
ssh-keyscan
?ϥΥ??֥??å??????å? I/O
???Ȥ????ʤ??٤?¿???Υۥ??Ȥ?
?????˥??????????ޤ??????Τ??ᤳ?????????˸?ΨŪ?Ǥ???
1000
???ۤɤΥۥ??Ȥ????ʤ??ɥᥤ???θ????????äǽ????Ƥ??ޤ??ޤ???
???Ȥ??????Ĥ??Υۥ??Ȥ? ssh
?????äƤ??ʤ??ä??ꡢ?ۥ??Ȥ??????Ƥ????ꤷ?Ƥ⡢?Ǥ???
?????????Τ??????????ޥ????˥???????ɬ?פϤ????ޤ??ޤ???
?????????Ȥ??˰Ź????Ѥ???ɬ?פ⤢???ޤ?????
???ץ??????ϰʲ??ΤȤ????Ǥ?
:
-p
?ݡ????ֹ?
- ??³???????⡼?ȥۥ??Ⱦ??Υݡ??Ȥ????ꤷ?ޤ???
-T
- ??³??????ॢ???Ȥ????ޤǤ??ÿ??????ꤷ?ޤ???
?????ۥ??Ȥ???³?????ߤƤ??顢???뤤?ϺǸ??ˤ??Υۥ??Ȥ??鲿??
???????Ƥ??? timeout
?ä??в᤹???Ȥ?????³???Ĥ????졢?????Υۥ??Ȥϻ?????ǽ?Ȥ???
ǧ???????ޤ????ǥե????ȤǤ? 5
?äǤ???
-t
???μ???
- ?ۥ??Ȥ??????????븰?μ????????ꤷ?ޤ???
?Ȥꤦ???ͤϡ??ץ??ȥ???
?С??????? 1 ?? “rsa1”
?ȡ??ץ??ȥ??? ?С??????? 2 ?? “rsa”
???뤤?? “dsa” ?Ǥ???
ʣ?????ͤ????ꤹ???Ȥ??ϡ??????ޤǶ??ڤäƤ?????????
?ǥե????ȤǤϤ????? “rsa1”
?ˤʤäƤ??ޤ???
-f
?ե?????̾
- ???Υե????뤫?顢?ۥ???̾???뤤??
???ɥ쥹?ꥹ??
?ۥ???̾?ꥹ??
???Ȥ??ɤ߹??ߤޤ?????
1??1???ܤǤ????????Ȥ??? -
?????ꤵ?줿???硢
ssh-keyscan
??ɸ?????Ϥ????ۥ???̾???뤤??
???ɥ쥹?ꥹ??
?ۥ???̾?ꥹ??
???Ȥ??ɤ߹??ߤޤ???
-v
- ??Ĺɽ???⡼?ɡ?
ssh-keyscan
???ʹ????ΥǥХå????å???????ɽ???????褦?ˤ??ޤ???
-4
ssh-keyscan
?? IPv4
???ɥ쥹?Τߤ??Ȥ??褦???????ޤ???
-6
ssh-keyscan
?? IPv6
???ɥ쥹?Τߤ??Ȥ??褦???????ޤ???
ssh-keyscan
???Ĥ??äơ????ڤ????? ssh_known_hosts
?ե??????????ۤ??????硢 (?ʤꤹ?ޤ?)
???????Ф???̵?????ˤʤ??ޤ???
???äݤ??????Ȥ??Υ????????ƥ????ǥ뤬???Τ褦?ʴ?????
?Ϥ????Ǥ??????硢???٤??????? ssh_known_hosts
?????äƤ??ޤ??С?
ssh-keyscan
?Ϥ????ʸ??Ρ????⤵?줿???ե??????? man
in the middle ??????
???Τ????Τ˻Ȥ??ޤ???
???Ϸ???:
1.2.3.4,1.2.4.4 name.my.domain,name,n.my.domain,n,1.2.3.4,1.2.4.4
rsa1 ???ν??Ϸ???:
?ۥ??Ȥ??뤤?ϥۥ???̾?Υꥹ?? ?ӥåȿ? ?٤??ؿ? ????
rsa ?????? dsa
???ν??Ϸ???:
?ۥ??Ȥ??뤤?ϥۥ???̾?Υꥹ?? ???μ??? base64?????ɤ??줿??
keytype ???ͤ?
“ssh-rsa” ???뤤?? “ssh-dss”
?Τɤ??餫?Ǥ???
/etc/ssh/ssh_known_hosts
hostname
?ǻ??ꤵ?????ޥ????? rsa1
?ۥ??ȸ???ɽ?????? :
?ե????? ssh_hosts
?ˤ????ۥ??ȤΤ????????????ۥ??ȡ????뤤?ϥ????Ȥ??줿
ssh_known_hosts
?ե??????ˤ??????Τȸ??????äƤ????ۥ??ȤĤ???
:
$ ssh-keyscan -t rsa,dsa -f ssh_hosts | \
sort -u - ssh_known_hosts | diff ssh_known_hosts -
David Mazieres
⟨dm@lcs.mit.edu⟩
???ǽ??ΥС??????????? Wayne
Davison ⟨wayned@users.sourceforge.net⟩
???ץ??ȥ??? ?С??????? 2
?Υ??ݡ??Ȥ??ɲä??ޤ?????
??????¦?ΥС????????? 2.9
?????Ť??ȡ?
???Υץ????????ϥ??????????٤ƤΥޥ????Υ?????????
"Connection closed by remote host"
?Υ??å????????Ĥ??ޤ???
?????ϡ????Υץ??????ब ssh
?ѤΥݡ??Ȥ???³???????ȡ?
?????????ɤߤ????Ǥ???????³???ڤäƤ??ޤ??????Ǥ???
???? ʹ?? (yusuke at cs . nyu . edu) 2003/4/17 (for
3.6.1p1)
???ޥ˥奢???ڡ????ϻ??Τ????դˤ???
FreeBSD ?????˽??????ä???
FreeBSD
???ܸ??ޥ˥奢???˼?Ͽ?????Ƥ????????Ƥ??ޤ???
?????ˤĤ??ƤΤ??ո???????Ŧ???????ޤ?????
FreeBSD jpman ?ץ?????????
⟨man-jp@jp.FreeBSD.org⟩ ?ޤ??Ͽ????? (yusuke at cs
. nyu . edu) ?ޤǤ????꤯????????