Is there an easy way to generate hashed hostnames to be added to known_hosts?
I'd like to add an @cert-authority line to the known_hosts file.
Obviously ssh-keygen would not get the CA cert, I think it also needs a connection to the server, and I'm not sure I can get it to hash a wildcard.
So, how would I hash "*.bar.com" for example, so that it can be used in the known_hosts file?
Edit: Having thought about it, hashed wildcards probably can't work, as it would be too difficult for the client to match a wildcard after it has been hashed. But, if I can still get a method to hash a domain without requiring a connection to the server (as ssh-keygen does), that would be great.