914 B

Raw Permalink Blame History

nsupdate-sshfp

Keith Irwin (www.ki9.us)

Bash script to update SSHFP records using nsupdate.

Installation

# git clone https://gitea.green.gf4/ki9/nsupdate-sshfp.git /usr/local/src/nsupdate-sshfp
# ln -s /usr/local/src/nsupdate-sshfp/nsupdate-sshfp /usr/local/bin/nsupdate-sshfp
# cp /usr/local/src/nsupdate-sshfp/systemd/* /etc/systemd/system/

Upgrade

# cd /usr/local/src/nsupdate-sshfp/
# git pull

Usage

$ nsupdate-sshfp <domain> <server> <ttl> <tsig>

For example:

$ nsupdate-sshfp ssh.example.com ns.example.com 86400 'hmac-sha512:mykeyname:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=='