Bug 976

Summary: ssh-keyscan should accept cidr ranges
Product: Portable OpenSSH Reporter: Damien Miller <djm>
Component: MiscellaneousAssignee: Damien Miller <djm>
Status: CLOSED FIXED    
Severity: enhancement CC: dtucker, wittayahom5
Priority: P2    
Version: -current   
Hardware: All   
OS: All   
Bug Depends on:    
Bug Blocks: 3480    
Attachments:
Description Flags
expand CIDR ranges in ssh-keyscan none

Description Damien Miller 2005-01-22 16:13:48 AEDT
ssh-keyscan should accept cidr ranges and scan every host in the range. E.g.

ssh-keyscan 10.1.2.0/8
Comment 1 Darren Tucker 2005-01-22 16:22:41 AEDT
Also AllowUsers/DenyUsers/AllowGroups/DenyGroups in sshd_config, eg

AllowGroups sshlocal@192.168.0.0/24
AllowGroups sshremote@0.0.0.0/0
Comment 2 Damien Miller 2022-07-01 14:31:06 AEST
Created attachment 3602 [details]
expand CIDR ranges in ssh-keyscan
Comment 3 Damien Miller 2023-01-13 13:30:20 AEDT
Patch was committed back in 202210
Comment 4 Damien Miller 2023-03-17 13:38:08 AEDT
OpenSSH 9.3 has been released. Close resolved bugs