On Fri, Sep 07, 2012 at 04:11:01PM +0200, DaB. wrote:
However as far as I understand rfc4255.txt [1] there is no way to put ECDSA- key-hashes into DNS.
It's in RFC 6594, but older OpenSSH releases may not be able to generate those hashes using ssh-keygen.
If affected, it would be done by base64 -d the ssh_host_ecdsa_key.pub and put "3 1 `sha1sum of the decoded`" in manually.