Limit the number of SSHFP records we generate

[dns.git] / bin / mksshfp

diff --git a/bin/mksshfp b/bin/mksshfp
index 56c7bbb50086cb3ac3e24649c1df2a2e2f876f99..7c0f518034332dd72c1111ea9bb6f79bf12068ff 100755 (executable)
--- a/bin/mksshfp
+++ b/bin/mksshfp
@@ -18,7 +18,11 @@ if (-f "/etc/ssh/ssh_known_hosts")
             my $type = $3;
             my $value = $4;
 
-            print SSHFP_JS qq|  SSHFP("${host}", ${algorithm}, ${type}, "${value}");\n|;
+            if ($type == 2 &&
+                ($algorithm == 3 || $algorithm == 4))
+            {
+                print SSHFP_JS qq|  SSHFP("${host}", ${algorithm}, ${type}, "${value}"),\n|;
+            }
         }
         else
         {