On Thu, Jun 14, 2007 at 09:00:51AM -0400, Chris Hatko wrote:

> When I ssh into a box it presents me with a rsa finger print as below:
> 
> The authenticity of host 'samplehost (xxx.xxx.xxx.xxx)' can't be
> established.
> RSA key fingerprint is 2f:e4:d2:75:5a:a1:55:b4:42:54:69:91:72:dd:72:4a
> 
> I'd like to confirm which certificate is being used on this box. To do this
> I've logged into the box and  I've been trying to generate the same
> fingerprint from a certificate file. I'm pretty sure the certificate file in
> question is /opt/apache/conf/ssl.crt/server.crt but running the following
> command gives the sha1 fingerprint. Is there a way to get the RSA
> fingerprint? Or is there something else I can try?

Why do you believe that SSH is using the apache server certificate, and
not the host's SSH key (which is not an X509 certificate at all).

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to