$ sshconfig-lint
Back to the checker
ENDEFRES

sshconfig-lint

UpdateHostKeys ask with ControlPersist

← All checks
warningChecked in the browserUPDATE_HOSTKEYS_ASK_PERSIST

Interactive host-key confirmation is combined with a persistent multiplexed connection.

Why it matters

OpenSSH cannot ask for confirmation in this mode and disables UpdateHostKeys confirmation.

How to fix it

Use UpdateHostKeys yes when automatic updates are acceptable, or disable ControlPersist in this scope when confirmation is required.

Before and after

What is wrong
Host work  ControlMaster auto  ControlPersist 10m  UpdateHostKeys ask
Corrected configuration
Host work  ControlMaster auto  ControlPersist 10m  UpdateHostKeys yes