show ssh-keyscan errors

1 files changed, 16 insertions, 0 deletions

diff --git a/bin/cryptonomic-dyndns-command b/bin/cryptonomic-dyndns-command
index 348ed74..c191066 100755
--- a/bin/cryptonomic-dyndns-command
+++ b/bin/cryptonomic-dyndns-command
@@ -83,6 +83,21 @@ add()
         powerdns_sqlite_add_replace_record "$domain" "$record_type" "$ip"
 }
 
+validate_ssh_server()
+{
+        e=$(mktemp)
+        ssh-keyscan -t "$SSH_CLIENT_KEYTYPE" "$ip_address" | grep -q " $SSH_CLIENT_KEYDATA\$" 2>"$e"
+        if [ $? = 0 ]
+        then
+                rm "$e"
+                return 0
+        else
+                cat "$e" >&2
+                rm "$e"
+                false
+        fi
+}
+
 validate_dns_label()
 {
         if [ $#1 -gt 64 ]
@@ -105,6 +120,7 @@ validate_dns_label()
 
 main()
 {
+        validate_ssh_server "$ip_address" || return
         add "$domain" "$ip_address"
         for label in $SSH_ORIGINAL_COMMAND
         do