[Info-vax] SSH public key fingerprint issue

[Steven Schweda]

On Oct 17, 10:29 am, Scott Greig <jsgr... at geminaq.com> wrote:

> Why the difference in the two fingerprints?

   The usual explanation (SSH2/SECSH v. OpenSSH)?

> Is one (more) correct?

   Correct?  Probably not.  Popular?  Probably.

> Is there a way to get the PuTTY version of the fingerprint
> from VMS ?

   I know nothing, but the "ssh-keygen" on my handy HP-UX
system has an option:

  -B          Show bubblebabble digest of key file.

There:

dyi # uname -a
HP-UX dyi B.11.31 U ia64 4235313755 unlimited-user license

dyi # ssh -V
OpenSSH_5.5p1+sftpfilecontrol-v1.3-hpn13v7, OpenSSL 0.9.8k 25 Mar 2009
HP-UX Secure Shell-A.05.50.015, HP-UX Secure Shell version

dyi # ssh-keygen -F alp -l
# Host alp found: line 1 type DSA
1024 ab:05:70:89:9b:ab:72:cf:65:c8:63:4e:de:f5:11:c4
 |1|hQIkknwRzC8MCYwlsrwNdS7nBUc=|WWFq04TRGY6GUfkOe9n5Cj4VqV8= (DSA)

dyi # ssh-keygen -F alp > fred
dyi # ssh-keygen -B
Enter file in which the key is (/root/.ssh/id_rsa): ./fred
1024 xufov-dedar-pipel-penep-forel-segip-gagir-dugoz-hyrek-byfar-kaxax
 |1|hQIkknwRzC8MCYwlsrwNdS7nBUc=|WWFq04TRGY6GUfkOe9n5Cj4VqV8= (DSA)

   Back on the VMS system:

alp $ ssh_keygen -"F" KEY_22_ALP.PUB
Fingerprint for key:
xufov-dedar-pipel-penep-forel-segip-gagir-dugoz-hyrek-byfar-kaxax

which looks strangely familiar.

   So, it seems to be possible to get either form from an
OpenSSH ssh-keygen, but if there's a way to get the hex
version on VMS, it's a mystery to me.  On the bright side,
you should now have a new keyword to feed into a Web search.
(It was certainly new to me.)  I'd guess that some program
somewhere can beat one form into the other.