How to determine SSH fingerprint of Droplet instance

[adrianlshaw]

During Droplet creation, the API seems to have a way of specifying the SSH identities that are authorized to access the droplet instance. This allows the droplet instance to authenticate clients.

However, I cannot find a way to get the public key fingerprint of the SSH server running on the Droplet instance. In other words, how are clients able to authenticate the instance?

[andrewsomething]

The DigitalOcean API does not currently support this. If this is something you require, there are some workarounds. I'd suggest looking into using cloud-init to either post the host key to a webhook or to provide your own host key.

https://www.digitalocean.com/community/questions/how-do-i-validate-the-ecdsa-key-fingerprint-of-my-newly-created-droplet?answer=41769

[adrianlshaw]

Thanks a lot for the pointer. I was completely unaware aware of the cloud-init approach. It would be nice if the API provided an abstraction to help with this, but I understand that it might go beyond the scope of what this library provides. In the meantime, I'll try the workaround.