mirror of
https://git.tartarus.org/simon/putty.git
synced 2025-06-30 19:12:48 -05:00
Been meaning to do this for years: introduce a configuration option
to manually tweak the host name and port number under which the SSH host key is read and written. I've put it in the cross-platform Connection panel. Partly under the flimsy pretext that other backends _can_ use it if they so wish (and in fact it overrides the host name for title-bar purposes in all network backends, though it has no other effect in anything but SSH); but mostly because the SSH panel was too full already :-) [originally from svn r8033]
This commit is contained in:
@ -1716,6 +1716,54 @@ IPv6 address available, and fall back to IPv4 if not.)
|
||||
If you need to force PuTTY to use a particular protocol, you can
|
||||
explicitly set this to \q{IPv4} or \q{IPv6}.
|
||||
|
||||
\S{config-loghost} \I{logical host name}\q{Logical name of remote host}
|
||||
|
||||
\cfg{winhelp-topic}{connection.loghost}
|
||||
|
||||
This allows you to tell PuTTY that the host it will really end up
|
||||
connecting to is different from where it thinks it is making a
|
||||
network connection.
|
||||
|
||||
You might use this, for instance, if you had set up an SSH port
|
||||
forwarding in one PuTTY session so that connections to some
|
||||
arbitrary port (say, \cw{localhost} port 10022) were forwarded to a
|
||||
second machine's SSH port (say, \cw{foovax} port 22), and then
|
||||
started a second PuTTY connecting to the forwarded port.
|
||||
|
||||
In normal usage, the second PuTTY will access the host key cache
|
||||
under the host name and port it actually connected to (i.e.
|
||||
\cw{localhost} port 10022 in this example). Using the logical host
|
||||
name option, however, you can configure the second PuTTY to cache
|
||||
the host key under the name of the host \e{you} know that it's
|
||||
\e{really} going to end up talking to (here \c{foovax}).
|
||||
|
||||
This can be useful if you expect to connect to the same actual
|
||||
server through many different channels (perhaps because your port
|
||||
forwarding arrangements keep changing): by consistently setting the
|
||||
logical host name, you can arrange that PuTTY will not keep asking
|
||||
you to reconfirm its host key. Conversely, if you expect to use the
|
||||
same local port number for port forwardings to lots of different
|
||||
servers, you probably didn't want any particular server's host key
|
||||
cached under that local port number.
|
||||
|
||||
If you just enter a host name for this option, PuTTY will cache the
|
||||
SSH host key under the default SSH port for that host, irrespective
|
||||
of the port you really connected to (since the typical scenario is
|
||||
like the above example: you connect to a silly real port number and
|
||||
your connection ends up forwarded to the normal port-22 SSH server
|
||||
of some other machine). To override this, you can append a port
|
||||
number to the logical host name, separated by a colon. E.g. entering
|
||||
\cq{foovax:2200} as the logical host name will cause the host key to
|
||||
be cached as if you had connected to port 2200 of \c{foovax}.
|
||||
|
||||
If you provide a host name using this option, it is also displayed
|
||||
in other locations which contain the remote host name, such as the
|
||||
default window title and the default SSH password prompt. This
|
||||
reflects the fact that this is the host you're \e{really} connecting
|
||||
to, which is more important than the mere means you happen to be
|
||||
using to contact that host. (This applies even if you're using a
|
||||
protocol other than SSH.)
|
||||
|
||||
\H{config-data} The Data panel
|
||||
|
||||
The Data panel allows you to configure various pieces of data which
|
||||
@ -2757,6 +2805,12 @@ that forwarding remain open. Similarly, changes to global settings
|
||||
such as \q{Local ports accept connections from other hosts} only take
|
||||
effect on new forwardings.
|
||||
|
||||
If the connection you are forwarding over SSH is itself a second SSH
|
||||
connection made by another copy of PuTTY, you might find the
|
||||
\q{logical host name} configuration option useful to warn PuTTY of
|
||||
which host key it should be expecting. See \k{config-loghost} for
|
||||
details of this.
|
||||
|
||||
\S{config-ssh-portfwd-localhost} Controlling the visibility of
|
||||
forwarded ports
|
||||
|
||||
|
@ -837,3 +837,7 @@ saved sessions from
|
||||
|
||||
\IM{PGP signatures} PGP signatures, of PuTTY binaries
|
||||
\IM{PGP signatures} signatures, of PuTTY binaries
|
||||
|
||||
\IM{logical host name} logical host name
|
||||
\IM{logical host name} host name, logical
|
||||
\IM{logical host name} host key, caching policy
|
||||
|
@ -470,6 +470,12 @@ to obtain a fix from Microsoft in order to use addresses like
|
||||
For more options relating to port forwarding, see
|
||||
\k{config-ssh-portfwd}.
|
||||
|
||||
If the connection you are forwarding over SSH is itself a second SSH
|
||||
connection made by another copy of PuTTY, you might find the
|
||||
\q{logical host name} configuration option useful to warn PuTTY of
|
||||
which host key it should be expecting. See \k{config-loghost} for
|
||||
details of this.
|
||||
|
||||
\H{using-rawprot} Making \i{raw TCP connections}
|
||||
|
||||
A lot of \I{debugging Internet protocols}Internet protocols are
|
||||
@ -890,6 +896,16 @@ This option is equivalent to the \q{Private key file for
|
||||
authentication} box in the Auth panel of the PuTTY configuration box
|
||||
(see \k{config-ssh-privkey}).
|
||||
|
||||
\S2{using-cmdline-loghost} \i\c{-loghost}: specify a \i{logical host
|
||||
name}
|
||||
|
||||
This option overrides PuTTY's normal SSH host key caching policy by
|
||||
telling it the name of the host you expect your connection to end up
|
||||
at (in cases where this differs from the location PuTTY thinks it's
|
||||
connecting to). It can be a plain host name, or a host name followed
|
||||
by a colon and a port number. See \k{config-loghost} for more detail
|
||||
on this.
|
||||
|
||||
\S2{using-cmdline-pgpfp} \i\c{-pgpfp}: display \i{PGP key fingerprint}s
|
||||
|
||||
This option causes the PuTTY tools not to run as normal, but instead
|
||||
|
Reference in New Issue
Block a user