May 26, 2018
Generate SSHFP DNS records from knownhosts files or ssh-keyscan
sshfp generates DNS SSHFP records from SSH public keys. sshfp can take public keys from a knownhosts file or from scanning the host’s sshd daemon. The ssh client can use these SSHFP records if you set “VerifyHostKeyDNS yes” in the file /etc/ssh/ssh_config.