ssh-keyscan ma aqbalo ikhtiyaarka ProxyCommand ee SSH. Sidaas darteed proxy loo habeeyay ssh ma si otomaatig ah u habeeysana skanner-ka gaarka ah.

Hal xal waa relay TCP maxalli ah oo hore loo sameeyay, kaas oo dhammaystira aqoonsiga proxy iyo is-weydaarsiga CONNECT loo baahan yahay, kadibna soo bandhiga qulqulka byte-ka server-ka SSH ee loogu talagalay. Haddii relay-gaasi uu dhageysto 127.0.0.1:2222:

ssh-keyscan -p 2222 127.0.0.1 > candidate.keys
ssh-keygen -lf candidate.keys

Amarka koowaad wuxuu soo ururiyaa furayaasha musharixiinta; tan labaad waxay muujisaa faraha. Relay-gu waa inuu dhaafsiyo qulqulka SSH ka dib isticmaalka jawaabta proxy oo dhan, halkii uu cinwaannada HTTP siin lahaa skanner-ka.

Calaamada host-ka ee natiijada waxay qeexdaa barta ugu dambeysa ee relay-ga maxalliga ah. Ha ku darin iyada oo aan la beddelin oo ha moodin inay hadda aqoonsanayso magaca host-ka SFTP fog.

Xaqiiji faraha iyada oo loo marayo diiwaan la aamini karo ama maamule ka hor inta aadan kii la xiriirin host-ka iyo dekedda dhabta ah ee known_hosts. ssh-keyscan waxay soo ururisaa waxa soo bandhiga barta la gaari karo; xiriir proxy ah oo guulaysta ma aqoonsado furahaas.

Maqaallo la xiriira