NAPALM/napalm-openwrt

0 Fork 0

fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167) #18

Merged

christianmanivong merged 1 commits from fix/ssh-host-key-tofu-1167 into master

2026-10-18 19:23:41 +00:00

Author	SHA1	Message	Date
Christian Manivong	cb14f1f00f	fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167 ) CI / test (3.10) (push) Successful in 34s Details CI / test (3.11) (push) Successful in 40s Details CI / test (3.12) (push) Successful in 34s Details CI / test (3.10) (pull_request) Successful in 36s Details CI / test (3.11) (pull_request) Successful in 29s Details CI / test (3.12) (pull_request) Successful in 27s Details The driver accepted any SSH host key. It now verifies through napalm-device-types' HostKeyCheck (>= 4.19.0): with a known key in optional_args["ssh_host_keys"] any other key is refused before login, and every key seen is reported to optional_args["ssh_host_key_observer"]. Without either argument it connects as before (first use).	2026-10-18 21:23:40 +02:00