Duba maɓallin SSH ta hanyar relay ɗin proxy da ke akwai

ssh-keyscan ba ya karɓar zaɓin ProxyCommand na SSH. Don haka proxy da aka saita don ssh ba ya saita na'urar duba ta daban kai tsaye.

Ɗaya daga cikin hanyoyi shi ne relay ɗin TCP na gida da aka riga aka kafa, wanda ke kammala tabbatarwar proxy da musayar CONNECT da ake buƙata sannan ya fallasa rafin byte na uwar garken SSH da ake nufi. Idan wannan relay ɗin yana saurare a 127.0.0.1:2222:

ssh-keyscan -p 2222 127.0.0.1 > candidate.keys
ssh-keygen -lf candidate.keys

Umarni na farko yana tattara maɓallan da za a yi la'akari da su; na biyu yana nuna sawun yatsansu. Relay ɗin dole ne ya bar rafin SSH ya wuce bayan ya cinye cikakken amsar proxy, maimakon ya miƙa kanun HTTP ga na'urar duba.

Alamar host ɗin da ke cikin fitarwa tana bayyana ƙarshen relay ɗin na gida. Kada ka haɗa ta ba canji ba kuma ka ɗauka cewa yanzu tana gano sunan host ɗin SFTP na nesa.

Tabbatar da sawun yatsan ta hanyar rikodin amintacce ko mai gudanarwa kafin ka haɗa maɓallin da ainihin host da tashar a cikin known_hosts. ssh-keyscan yana tattara abin da ƙarshen da ake iya isa ya gabatar; haɗin proxy mai nasara ba ya tabbatar da wannan maɓallin.