diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2007-10-03 08:00:42 +0000 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2007-10-03 08:00:42 +0000 |
| commit | 51c6a5d43b09835289a469165aa7a2bfb79dbdc6 (patch) | |
| tree | 49b4c738d465d09c72fd048bb77b91514058b40c /docs/curl.1 | |
| parent | 15b8da1980538f5c56115777610867230b0ac9d1 (diff) | |
Based on a patch brought by Johnny Luong, libcurl now offers
CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and the curl tool --hostpubmd5. They both make
the SCP or SFTP connection verify the remote host's md5 checksum of the public
key before doing a connect, to reduce the risk of a man-in-the-middle attack.
Diffstat (limited to 'docs/curl.1')
| -rw-r--r-- | docs/curl.1 | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/curl.1 b/docs/curl.1 index f415d6f30..26d70b8d2 100644 --- a/docs/curl.1 +++ b/docs/curl.1 @@ -544,6 +544,11 @@ for you. See also the \fI-A/--user-agent\fP and \fI-e/--referer\fP options. This option can be used multiple times to add/replace/remove multiple headers. +.IP "--hostpubmd5" +Pass a string containing 32 hexadecimal digits. The string should be the 128 +bit MD5 cheksum of the remote host's public key, curl will refuse the +connection with the host unless the md5sums match. This option is only for SCP +and SFTP transfers. (Added in 7.17.1) .IP "--ignore-content-length" (HTTP) Ignore the Content-Length header. This is particularly useful for servers |