Make ssh’s VerifyHostKeyDNS work on OSX as it should

Fri, 17 Oct 2014 14:18:41 +0000

Finaly there is MacOS X Yosemite.
With it hopefully an update of the default openssh client app i thought. After installing the update i had to admit, i was wrong. Same old OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 as in Maverics. With the same old bug (??) mentioned here, where adding -o VerifyHostKeyDNS=yes leads to

DNS lookup error: general failure
No matching host key fingerprint found in DNS.

That’s not nice. I do want to use SSHFP, partly because i think its a nice feature, partly because i hardly ever check the fingerprints of my hosts.

Yosemite on ohneKontur – der Blog

Make ssh’s VerifyHostKeyDNS work on OSX as it should

So lets fix OS X ssh client, shall we.