fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167) #27

Merged
christianmanivong merged 1 commits from fix/ssh-host-key-tofu-1167 into master 2026-10-18 19:23:47 +00:00
Owner

Host-key verification via napalm-device-types HostKeyCheck (>= 4.19.0); refused before login, every key seen reported. Part of NetOrk/netork#1167.

Host-key verification via napalm-device-types HostKeyCheck (>= 4.19.0); refused before login, every key seen reported. Part of NetOrk/netork#1167.
christianmanivong added 1 commit 2026-10-18 19:23:46 +00:00
fix(ssh): verify the host key netOrk expects, report the one seen (NetOrk/netork#1167)
CI / test (3.10) (push) Successful in 54s
CI / test (3.11) (push) Successful in 40s
CI / test (3.12) (push) Successful in 51s
CI / test (3.10) (pull_request) Successful in 42s
CI / test (3.11) (pull_request) Successful in 35s
CI / test (3.12) (pull_request) Successful in 49s
6bb3035857
The driver accepted any SSH host key. It now verifies through
napalm-device-types' HostKeyCheck (>= 4.19.0): with a known key in
optional_args["ssh_host_keys"] any other key is refused before login, and
every key seen is reported to optional_args["ssh_host_key_observer"].
Without either argument it connects as before (first use).
christianmanivong merged commit d210c9abe8 into master 2026-10-18 19:23:47 +00:00
christianmanivong deleted branch fix/ssh-host-key-tofu-1167 2026-10-18 19:23:47 +00:00
Sign in to join this conversation.