From 63dbf9692a7898957f3f47d58589cc40bbc03741 Mon Sep 17 00:00:00 2001
From: Jan Pokorný <jpokorny@redhat.com>
Date: Thu, 2 May 2013 17:36:28 +0200
Subject: SSH config: better fingerprints handling for Fedora
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Jan Pokorný <jpokorny@redhat.com>
---
 scripts/firstrun/02-ssl-common | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

(limited to 'scripts/firstrun')

diff --git a/scripts/firstrun/02-ssl-common b/scripts/firstrun/02-ssl-common
index 70be8cf..e29f875 100644
--- a/scripts/firstrun/02-ssl-common
+++ b/scripts/firstrun/02-ssl-common
@@ -1 +1,23 @@
+# fedora setup
+
+local host
+local found
+
 wget https://admin.fedoraproject.org/ssh_known_hosts -O ~/.ssh/fedora-known_hosts
+while read host; do
+	found=$(grep $(dig +short "${host}") ~/.ssh/fedora-known_hosts)
+	if test -n "${found}"; then
+		chmod u+w ~/.ssh/config
+		cat >>~/.ssh/config <<EOF
+
+Host $host
+	HostKeyAlias $(echo "${found}" | cut -d, -f1)
+	IdentityFile ~/.ssh/fedora-id_rsa
+	UserKnownHostsFile /dev/null
+	GlobalKnownHostsFile ~/.ssh/fedora-known_hosts
+EOF
+		chmod u-w ~/.ssh/config
+	fi
+done <<-EOFOUT
+	fedorapeople.org
+EOFOUT
-- 
cgit