make-sshfp.sh

#!/usr/bin/env bash

if [[ $# != 2 ]] ; then
  echo "Usage: $0 <domain name> <hostname not including domain name>"
  exit 1
fi

if ! command -v dnsimple >/dev/null 2>/dev/null ; then
  echo 'You must have the dnsimple command line tool installed and in your $PATH.'
  echo "Try 'gem install dnsimple-ruby' and then make a $HOME/.dnsimple config file."
  exit 1
fi

DOMAIN="${1}"
NAME="${2}"

HOSTNAME="${NAME}.${DOMAIN}"
declare -i int_type=0
for type in rsa dsa ecdsa ; do
  let int_type++
  PUBKEY="${NAME}.${type}"
  ssh-keyscan -t $type "${HOSTNAME}" > "${PUBKEY}"
  if [ -s "${PUBKEY}" ] ; then
    FINGERPRINT=$(ssh-keygen -l -f "${PUBKEY}" | cut -f 2 -d ' ')
    RECORD="${int_type} 1 ${FINGERPRINT}"
    dnsimple record:create "${DOMAIN}" "${NAME}" SSHFP "'${RECORD}'"
  fi
  rm "${PUBKEY}"
done