[TriLUG] SSH Host Key Verification

[Matt Pusateri]

Triluger's


I just built a brand new box(freebsd) yesterday and when I went to ssh
into it for the first time, it asked me to accept the host key
fingerpirnt as you would suspect.  This got me thinking about how to
verify the fingerprint, so a little googleing came up with "ssh-keygen
-l key" which prints out the fingerprint of the key you feed it.  Now
I have logged into the console and got my fingerprints, which
incidently match the fingerprints that I recorded when the server
booted for the first time and created the ssh keys.  But when I
connect via ssh the fingerprint does not match.  So is ssh-keygen -l
not the way to verify the host key fingerprint?  Or am I missing
something?

The client is ssh corporation's  ssh shell for windows 3.2.9,

And, No I have not been rooted :)


Thanks

Matt Pusateri