Difference between revisions of "CheckHostIP"
Jump to navigation
Jump to search
Tags: Mobile web edit, Mobile edit |
Tags: Mobile web edit, Mobile edit |
||
| Line 6: | Line 6: | ||
<code>[[ssh]]</code> 8.5 disable <code>CheckHostIP</code> by default. | <code>[[ssh]]</code> 8.5 disable <code>CheckHostIP</code> by default. | ||
| + | |||
| + | |||
| + | == Related options == | ||
| + | * <code>[[StrictHostKeyChecking]]</code> | ||
== See also == | == See also == | ||
Latest revision as of 10:59, 29 March 2021
CheckHostIP If this flag is set to yes, ssh(1) will additionally check the host IP address in the known_hosts file. This allows ssh to detect if a host key changed due to DNS spoofing. If the option is set to no, the check will not be executed. The default is yes until OpenSSH 8.5 (2021)
ssh 8.5 disable CheckHostIP by default.
Related options[edit]
See also[edit]
- OpenSSH (changelog):
/etc/ssh/sshd_config|/etc/ssh/ssh_config|~/.ssh/|openSSL | sshd logs|sftp|scp|authorized_keys|ssh-keygen|ssh-keyscan|ssh-add|ssh-agent|ssh|Ssh -O stop|ssh-copy-id|CheckHostIP|UseKeychain, OpenSSF
Advertising:
