Limit SSHFP records to RSA keys

[dns.git] / bin / mksshfp

diff --git a/bin/mksshfp b/bin/mksshfp
index e4bc8ed30c84f293c680e46daaba43bac18a3a8e..362cd878f0be20f58f9e4c9b0f07f52ce600aac7 100755 (executable)
--- a/bin/mksshfp
+++ b/bin/mksshfp
@@ -18,7 +18,10 @@ if (-f "/etc/ssh/ssh_known_hosts")
             my $type = $3;
             my $value = $4;
 
             my $type = $3;
             my $value = $4;
 

-            print SSHFP_JS qq|  SSHFP("${host}", ${algorithm}, ${type}, "${value}"),\n|;
+            if ($type == 2 && $algorithm == 1)
+            {
+                print SSHFP_JS qq|  SSHFP("${host}", ${algorithm}, ${type}, "${value}"),\n|;
+            }

         }
         else
         {
         }
         else
         {