I have a script that deals with some servers in an environment where new hosts are added once in a while. I'd like to avoid being asked whether new fingerprint should be accepted but be warned if any previously known fingerprint have been changed. Turning off StrictHostKeyChecking is not an option because it will leave me vulnerable to MITM attacks. What would be the most elegant way to silently accept new servers' fingerprints in this case?
Asked
Active
Viewed 68 times