It seems that openssh has changed the way it displays key fingerprints.
I am trying to ssh from a client machine to a server:
- client: ubuntu 14.04 running OpenSSH 6.6.1
- server: FreeBSD running OpenSSH 7.2p2.
The client reports the md5 hash of the server's key as a sequence of 16 pairs of hex digits, like this:
The server defaults to using the sha256 hash, but thanks to this answer I can force it to give the sha1 hash by running:
[root@host /etc/ssh]# ssh-keygen -l -E sha1 -f ssh_host_ecdsa_key.pub
I want the result to look like this:
but instead I get this:
256 SHA1:KIh0ejR4O+RqrSq7JdGAASddRfI email@example.com (ECDSA)
It looks to me like a base64 encoded version of the fingerprint is now being displayed instead of hex digits.
How can I get the checksum of the server's key in the same format as that reported by the (older) client (colon separated hex digits, sha1 hash) so as to check that they are the same?
EDIT: The old version of SSH gives the md5 checksum, not the sha1 checksum as I mistakenly thought. Using that checksum (as the now accepted answer should state) in the -E option gives the desired output.