summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorColin Watson <cjwatson@debian.org>2014-02-09 16:10:09 +0000
committerColin Watson <cjwatson@debian.org>2017-10-04 13:54:48 +0100
commit7e53354725eeb002e6126a73fd5f294ed9f9b03e (patch)
tree68b46db470cf8feab15645231ee897ec0cbc678c
parent312eb64a9faf4e8cdb95f2ae147ecbfa6c0efd83 (diff)
Adjust various OpenBSD-specific references in manual pages
No single bug reference for this patch, but history includes: http://bugs.debian.org/154434 (login.conf(5)) http://bugs.debian.org/513417 (/etc/rc) http://bugs.debian.org/530692 (ssl(8)) https://bugs.launchpad.net/bugs/456660 (ssl(8)) Forwarded: not-needed Last-Update: 2017-10-04 Patch-Name: openbsd-docs.patch
-rw-r--r--moduli.54
-rw-r--r--ssh-keygen.112
-rw-r--r--ssh.14
-rw-r--r--sshd.85
-rw-r--r--sshd_config.53
5 files changed, 13 insertions, 15 deletions
diff --git a/moduli.5 b/moduli.5
index ef0de0850..149846c8c 100644
--- a/moduli.5
+++ b/moduli.5
@@ -21,7 +21,7 @@
21.Nd Diffie-Hellman moduli 21.Nd Diffie-Hellman moduli
22.Sh DESCRIPTION 22.Sh DESCRIPTION
23The 23The
24.Pa /etc/moduli 24.Pa /etc/ssh/moduli
25file contains prime numbers and generators for use by 25file contains prime numbers and generators for use by
26.Xr sshd 8 26.Xr sshd 8
27in the Diffie-Hellman Group Exchange key exchange method. 27in the Diffie-Hellman Group Exchange key exchange method.
@@ -110,7 +110,7 @@ first estimates the size of the modulus required to produce enough
110Diffie-Hellman output to sufficiently key the selected symmetric cipher. 110Diffie-Hellman output to sufficiently key the selected symmetric cipher.
111.Xr sshd 8 111.Xr sshd 8
112then randomly selects a modulus from 112then randomly selects a modulus from
113.Fa /etc/moduli 113.Fa /etc/ssh/moduli
114that best meets the size requirement. 114that best meets the size requirement.
115.Sh SEE ALSO 115.Sh SEE ALSO
116.Xr ssh-keygen 1 , 116.Xr ssh-keygen 1 ,
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 5f1ec09b0..dfbc65ddb 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -176,9 +176,7 @@ key in
176.Pa ~/.ssh/id_ed25519 176.Pa ~/.ssh/id_ed25519
177or 177or
178.Pa ~/.ssh/id_rsa . 178.Pa ~/.ssh/id_rsa .
179Additionally, the system administrator may use this to generate host keys, 179Additionally, the system administrator may use this to generate host keys.
180as seen in
181.Pa /etc/rc .
182.Pp 180.Pp
183Normally this program generates the key and asks for a file in which 181Normally this program generates the key and asks for a file in which
184to store the private key. 182to store the private key.
@@ -229,9 +227,7 @@ If
229.Fl f 227.Fl f
230has also been specified, its argument is used as a prefix to the 228has also been specified, its argument is used as a prefix to the
231default path for the resulting host key files. 229default path for the resulting host key files.
232This is used by 230This is used by system administration scripts to generate new host keys.
233.Pa /etc/rc
234to generate new host keys.
235.It Fl a Ar rounds 231.It Fl a Ar rounds
236When saving a new-format private key (i.e. an ed25519 key or when the 232When saving a new-format private key (i.e. an ed25519 key or when the
237.Fl o 233.Fl o
@@ -676,7 +672,7 @@ option.
676Valid generator values are 2, 3, and 5. 672Valid generator values are 2, 3, and 5.
677.Pp 673.Pp
678Screened DH groups may be installed in 674Screened DH groups may be installed in
679.Pa /etc/moduli . 675.Pa /etc/ssh/moduli .
680It is important that this file contains moduli of a range of bit lengths and 676It is important that this file contains moduli of a range of bit lengths and
681that both ends of a connection share common moduli. 677that both ends of a connection share common moduli.
682.Sh CERTIFICATES 678.Sh CERTIFICATES
@@ -863,7 +859,7 @@ on all machines
863where the user wishes to log in using public key authentication. 859where the user wishes to log in using public key authentication.
864There is no need to keep the contents of this file secret. 860There is no need to keep the contents of this file secret.
865.Pp 861.Pp
866.It Pa /etc/moduli 862.It Pa /etc/ssh/moduli
867Contains Diffie-Hellman groups used for DH-GEX. 863Contains Diffie-Hellman groups used for DH-GEX.
868The file format is described in 864The file format is described in
869.Xr moduli 5 . 865.Xr moduli 5 .
diff --git a/ssh.1 b/ssh.1
index 3cc94688c..2a2aab306 100644
--- a/ssh.1
+++ b/ssh.1
@@ -842,6 +842,10 @@ implements public key authentication protocol automatically,
842using one of the DSA, ECDSA, Ed25519 or RSA algorithms. 842using one of the DSA, ECDSA, Ed25519 or RSA algorithms.
843The HISTORY section of 843The HISTORY section of
844.Xr ssl 8 844.Xr ssl 8
845(on non-OpenBSD systems, see
846.nh
847http://www.openbsd.org/cgi\-bin/man.cgi?query=ssl&sektion=8#HISTORY)
848.hy
845contains a brief discussion of the DSA and RSA algorithms. 849contains a brief discussion of the DSA and RSA algorithms.
846.Pp 850.Pp
847The file 851The file
diff --git a/sshd.8 b/sshd.8
index 2ed523a2c..02c5e1dfd 100644
--- a/sshd.8
+++ b/sshd.8
@@ -65,7 +65,7 @@ over an insecure network.
65.Nm 65.Nm
66listens for connections from clients. 66listens for connections from clients.
67It is normally started at boot from 67It is normally started at boot from
68.Pa /etc/rc . 68.Pa /etc/init.d/ssh .
69It forks a new 69It forks a new
70daemon for each incoming connection. 70daemon for each incoming connection.
71The forked daemons handle 71The forked daemons handle
@@ -850,7 +850,7 @@ This file is for host-based authentication (see
850.Xr ssh 1 ) . 850.Xr ssh 1 ) .
851It should only be writable by root. 851It should only be writable by root.
852.Pp 852.Pp
853.It Pa /etc/moduli 853.It Pa /etc/ssh/moduli
854Contains Diffie-Hellman groups used for the "Diffie-Hellman Group Exchange" 854Contains Diffie-Hellman groups used for the "Diffie-Hellman Group Exchange"
855key exchange method. 855key exchange method.
856The file format is described in 856The file format is described in
@@ -950,7 +950,6 @@ The content of this file is not sensitive; it can be world-readable.
950.Xr ssh-keyscan 1 , 950.Xr ssh-keyscan 1 ,
951.Xr chroot 2 , 951.Xr chroot 2 ,
952.Xr hosts_access 5 , 952.Xr hosts_access 5 ,
953.Xr login.conf 5 ,
954.Xr moduli 5 , 953.Xr moduli 5 ,
955.Xr sshd_config 5 , 954.Xr sshd_config 5 ,
956.Xr inetd 8 , 955.Xr inetd 8 ,
diff --git a/sshd_config.5 b/sshd_config.5
index 41e8c9399..79676a955 100644
--- a/sshd_config.5
+++ b/sshd_config.5
@@ -382,8 +382,7 @@ then no banner is displayed.
382By default, no banner is displayed. 382By default, no banner is displayed.
383.It Cm ChallengeResponseAuthentication 383.It Cm ChallengeResponseAuthentication
384Specifies whether challenge-response authentication is allowed (e.g. via 384Specifies whether challenge-response authentication is allowed (e.g. via
385PAM or through authentication styles supported in 385PAM).
386.Xr login.conf 5 )
387The default is 386The default is
388.Cm yes . 387.Cm yes .
389.It Cm ChrootDirectory 388.It Cm ChrootDirectory