How do i check the fingerprint of an aws pem key?

hawksbill

Link to download : https://aws.amazon.com/items/351?externalID=351

You may need to do this if you think there's a mis-match between your aws keys.

This tool is part of the ec2-api-tools and not the awscli tools.

Set your environment variables in your shell. JAVA_HOME differs of course depending on which java software you are using.

$ export JAVA_HOME=/usr/lib/jvm/java-8-openjdk-amd64
$ export EC2_HOME=/usr/local/aws/ec2
$ export PATH=$PATH:$EC2_HOME/bin

$ ec2-fingerprint-key --help
SYNOPSIS
ec2fp ([ec2-fingerprint-key])
ec2fp [GENERAL OPTIONS] KEYFILE
GENERAL NOTES
Any command option/parameter may be passed a value of '-' to indicate
that values for that option should be read from stdin.
DESCRIPTION
Generate a fingerprint for a private key generated by Amazon EC2.
The KEYFILE parameter is a file containing an unencrypted PEM encoded
PKCS#8 private key (as generated by Amazon EC2).

To check the fingerprint of an aws PEM key. -v only displays the version

$ ec2-fingerprint-key -v TestInstance.pem 
Setting User-Agent to [ec2-api-tools 1.7.5.1]
4b:ef:87:02:20:10:c2:c4:89:e3:d0:23:8a:ab:a5:12:87:c5:38:5c

or the short command form.

$ ec2fp -v TestInstance.pem 
Setting User-Agent to [ec2-api-tools 1.7.5.1]
3b:ef:87:02:15:10:c2:c4:89:e3:d0:95:8a:ab:a5:62:87:c5:38:5c