{"id":786,"date":"2015-03-29T14:24:46","date_gmt":"2015-03-29T05:24:46","guid":{"rendered":"http:\/\/matoken.org\/blog\/?p=786"},"modified":"2015-03-29T14:24:46","modified_gmt":"2015-03-29T05:24:46","slug":"openssh_6-8_6-8p1-fingerprint_algorithm","status":"publish","type":"post","link":"https:\/\/matoken.org\/blog\/2015\/03\/29\/openssh_6-8_6-8p1-fingerprint_algorithm\/","title":{"rendered":"OpenSSH 6.8\/6.8p1 \u3067\u9375\u6307\u7d0b\u306e\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u306e\u898f\u5b9a\u5024\u304c\u5909\u308f\u3063\u305f\u306e\u3067\u8a66\u3059"},"content":{"rendered":"
\n

\"openssh\"<\/a><\/p>\n

OpenSSH 6.8\/6.8p1 \u306e\u30ea\u30ea\u30fc\u30b9\u30ce\u30fc\u30c8\u3092\u773a\u3081\u3066\u3044\u3066\u6c17\u306b\u306a\u308b\u70b9\u304c\uff0e
http:\/\/www.openssh.com\/txt\/release-6.8<\/a><\/p>\n

* Add FingerprintHash option to ssh(1) and sshd(8), and equivalent\r\n   command-line flags to the other tools to control algorithm used\r\n   for key fingerprints. The default changes from MD5 to SHA256 and\r\n   format from hex to base64.\r\n Fingerprints now have the hash algorithm prepended. An example of\r\n   the new format: SHA256:mVPwvezndPv\/ARoIadVY98vAC0g+P\/5633yTC4d\/wXE\r\n   Please note that visual host keys will also be different.\r\n<\/code><\/pre>\n
\u9375\u6307\u7d0b\u306e\u898f\u5b9a\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u304cMD5 \u304b\u3089SHA256 \u306b\u5909\u308f\u308a\uff0c\u8868\u793a\u5f62\u5f0f\u3082hex \u304b\u3089base64 \u306b\u306a\u3063\u305f\uff0cvisual host key \u3082\u5909\u308f\u308b\uff0e\u3068\u3044\u3046\u3053\u3068\u3067\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u305f\uff0e<\/p>\n
\u5f93\u6765\u306e\u30b3\u30de\u30f3\u30c9\u3067\u306e\u9375\u6307\u7d0b\u8868\u793a\uff0eMD5\/hex \u304c\u4f7f\u308f\u308c\u308b<\/p>\n
% ssh-keygen -l -v -f \/etc\/ssh\/ssh_host_ecdsa_key\r\n256 e8:d0:53:e7:34:59:e9:77:3a:e7:8d:8a:a9:f6:91:84 \/etc\/ssh\/ssh_host_ecdsa_key.pub (ECDSA)\r\n+---[ECDSA 256]---+\r\n|            ..   |\r\n|           o.    |\r\n|        . =.     |\r\n|     . o = .. . .|\r\n|    . + E o  . o |\r\n|     o . . .  o .|\r\n|      .   o    =.|\r\n|        .  +  . o|\r\n|       ..o+ ..   |\r\n+-----------------+\r\n<\/code><\/pre>\n
OpenSSH 6.8\/6.8p1 \u306e\u30b3\u30de\u30f3\u30c9\u3067\u306e\u9375\u6307\u7d0b\u8868\u793a\uff0eSHA256\/base64\u304c\u4f7f\u308f\u308c\u3066\u9375\u6307\u7d0b\u306e\u982d\u306bSHA256\u304c\u4ed8\u3044\u305f\u308avisual host key  \u306e\u898b\u305f\u76ee\u3082\u5909\u308f\u308b\uff0e<\/p>\n
% \/home\/mk\/usr\/local\/openssh-6.8p1\/bin\/ssh-keygen -l -v -f \/etc\/ssh\/ssh_host_ecdsa_key\r\n256 SHA256:pDZReijOXeDXAE0IgYb5E+DHgbyvClEllKCs499RI54 root@x220(ECDSA)\r\n+---[ECDSA 256]---+\r\n|+*+++oo=+        |\r\n|*o*o...=.o       |\r\n|.=o+. = = .      |\r\n|.o+o o B         |\r\n|+ ..o.=oS        |\r\n|.o ...+..        |\r\n|...  E           |\r\n|... . .          |\r\n|o  . .           |\r\n+----[SHA256]-----+\r\n<\/code><\/pre>\n
\u3057\u304b\u3057\uff0c-E<\/code> option \u304c\u63d0\u4f9b\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u6307\u5b9a\u3067\u304d\u308b\u306e\u3067\u3053\u308c\u3067MD5\/hex \u3067\u9375\u6307\u7d0b\u306e\u78ba\u8a8d\u304c\u53ef\u80fd\uff0e
\u203bssh-keygen \u2014help \u3088\u308a<\/p>\n
   ssh-keygen -l [-v] [-E fingerprint_hash] [-f input_keyfile]\r\n<\/code><\/pre>\n
\u203bman \u3088\u308a<\/p>\n
 -E fingerprint_hash\r\n         Specifies the hash algorithm used when displaying key fingerprints.  Valid options are: \u201cmd5\u201d and \u201csha256\u201d.  The default is \u201csha256\u201d.\r\n<\/code><\/pre>\n
OpenSSH 6.8\/6.8p1 \u306e\u30b3\u30de\u30f3\u30c9\u3067MD5 \u3092\u6307\u5b9a\uff0eMD5\/hex \u3067\u9375\u6307\u7d0b\u304c\u8868\u793a\u3055\u308c\u308b\uff0e\u305f\u3060\uff0c\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u306eMD5<\/code> \u304c\u9375\u6307\u7d0b\u306e\u982d\u306b\u3064\u304f\u3057\u5f8c\u308d\u306bcomment \u3082\u4ed8\u304f\u306e\u3067diff \u3068\u304b\u3092\u4f7f\u3046\u3068\u5dee\u7570\u304c\u51fa\u308b\uff0evisual host key \u3082\u4e0b\u306b[MD5]<\/code>\u304c\u3064\u304f\u306e\u3067\u540c\u69d8\uff0e<\/p>\n
% \/home\/mk\/usr\/local\/openssh-6.8p1\/bin\/ssh-keygen -l -v -E md5 -f \/etc\/ssh\/ssh_host_ecdsa_key\r\n256 MD5:e8:d0:53:e7:34:59:e9:77:3a:e7:8d:8a:a9:f6:91:84 root@x220(ECDSA)\r\n+---[ECDSA 256]---+\r\n|            ..   |\r\n|           o.    |\r\n|        . =.     |\r\n|     . o = .. . .|\r\n|    . + E o  . o |\r\n|     o . . .  o .|\r\n|      .   o    =.|\r\n|        .  +  . o|\r\n|       ..o+ ..   |\r\n+------[MD5]------+\r\n% ssh-keygen -l -v -f \/etc\/ssh\/ssh_host_ecdsa_key\r\n<\/code><\/pre>\n
\u3066\u3053\u3068\u3067\u66ab\u304f\u306fMD5\/SHA256\u306e2\u7a2e\u985e\u306e\u9375\u6307\u7d0b\u3092\u63d0\u4f9b\u3057\u305f\u307b\u3046\u304c\u826f\u3055\u305d\u3046\u3067\u3059\u306d\uff0e<\/p>\n<\/div>\n
\n