Sending new patch updated with current changes.

On 2026-08-01, Lucas de Sena wrote:
> The prompt here ($) implies that the command is run by a regular user,
> which should have no read access to the host private key.  And even if
> it were run by root, ssh-keygen(1) finds and uses the corresponding
> public key anyway, yielding the same result.


diff /usr/src
path + /usr/src
commit - 84bf78a6967c0b1c1b62ebb332255dc0265b87fb
blob - 557cf66d33ca3583dcf1f467624a749762c38a01
file + usr.bin/ssh/ssh.1
--- usr.bin/ssh/ssh.1
+++ usr.bin/ssh/ssh.1
@@ -1188,7 +1188,7 @@ has been disabled).
 Fingerprints can be determined using
 .Xr ssh-keygen 1 :
 .Pp
-.Dl $ ssh-keygen -l -f /etc/ssh/ssh_host_ed25519_key
+.Dl $ ssh-keygen -l -f /etc/ssh/ssh_host_ed25519_key.pub
 .Pp
 If the fingerprint is already known, it can be matched
 and the key can be accepted or rejected.