RFC 6954 adds support for ECDSA keys and SHA-256 hashes to SSHFP records.
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=813398
Major feature, belongs in 3.3 backlog for now. Kicking into needs triage to confirm.
Jan: RFC 6594 is supported in both OpenSSH and BIND versions available in F18. There is one minor issue with SHA-256 SSHFP records in nsupdate + bind-dyndb-ldap (formatting of the records in LDAP is not right, it does NOT affect functionality)
BIND splits long fingerprints with single space after each 60 characters, but there is no way how to enforce different formatting (without re-implementing BIND formatting subsystem) => pspacek recommends to handle white spaces in IPA CLI & WebUI
Changing 3.2 priority
master: 86dde3a
Metadata Update from @jcholast: - Issue assigned to jcholast - Issue set to the milestone: FreeIPA 3.2 - 2013/01
Login to comment on this ticket.