diff options
author | Damien Miller <djm@mindrot.org> | 2010-03-05 21:30:54 +1100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2010-03-05 21:30:54 +1100 |
commit | 922b541329285cede860607c877f72663f3d2a9f (patch) | |
tree | 0c41ed5f86f96a859eba2ff544a21e4121cfe2f0 | |
parent | 98339054f949ad87f15b4d618a421765d4097cd9 (diff) |
- jmc@cvs.openbsd.org 2010/03/05 08:31:20
[ssh.1]
document certificate authentication; help/ok djm
-rw-r--r-- | ChangeLog | 3 | ||||
-rw-r--r-- | ssh.1 | 18 |
2 files changed, 18 insertions, 3 deletions
@@ -26,6 +26,9 @@ | |||
26 | - jmc@cvs.openbsd.org 2010/03/05 06:50:35 | 26 | - jmc@cvs.openbsd.org 2010/03/05 06:50:35 |
27 | [ssh.1 sshd.8] | 27 | [ssh.1 sshd.8] |
28 | tweak previous; | 28 | tweak previous; |
29 | - jmc@cvs.openbsd.org 2010/03/05 08:31:20 | ||
30 | [ssh.1] | ||
31 | document certificate authentication; help/ok djm | ||
29 | - (tim) [ssh-pkcs11.c] Fix "non-constant initializer" errors in older | 32 | - (tim) [ssh-pkcs11.c] Fix "non-constant initializer" errors in older |
30 | compilers. OK djm@ | 33 | compilers. OK djm@ |
31 | - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure | 34 | - (djm) [ssh-rand-helper.c] declare optind, avoiding compilation failure |
@@ -34,7 +34,7 @@ | |||
34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF | 34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
36 | .\" | 36 | .\" |
37 | .\" $OpenBSD: ssh.1,v 1.300 2010/03/05 06:50:34 jmc Exp $ | 37 | .\" $OpenBSD: ssh.1,v 1.301 2010/03/05 08:31:20 jmc Exp $ |
38 | .Dd $Mdocdate: March 5 2010 $ | 38 | .Dd $Mdocdate: March 5 2010 $ |
39 | .Dt SSH 1 | 39 | .Dt SSH 1 |
40 | .Os | 40 | .Os |
@@ -798,8 +798,20 @@ file, and has one key | |||
798 | per line, though the lines can be very long. | 798 | per line, though the lines can be very long. |
799 | After this, the user can log in without giving the password. | 799 | After this, the user can log in without giving the password. |
800 | .Pp | 800 | .Pp |
801 | The most convenient way to use public key authentication may be with an | 801 | A variation on public key authentication |
802 | authentication agent. | 802 | is available in the form of certificate authentication: |
803 | instead of a set of public/private keys, | ||
804 | signed certificates are used. | ||
805 | This has the advantage that a single trusted certification authority | ||
806 | can be used in place of many public/private keys. | ||
807 | See the | ||
808 | .Sx CERTIFICATES | ||
809 | section of | ||
810 | .Xr ssh-keygen 1 | ||
811 | for more information. | ||
812 | .Pp | ||
813 | The most convenient way to use public key or certificate authentication | ||
814 | may be with an authentication agent. | ||
803 | See | 815 | See |
804 | .Xr ssh-agent 1 | 816 | .Xr ssh-agent 1 |
805 | for more information. | 817 | for more information. |