summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
authorjmc@openbsd.org <jmc@openbsd.org>2019-12-27 08:28:44 +0000
committerDamien Miller <djm@mindrot.org>2019-12-30 14:31:40 +1100
commit20ccd854245c598e2b47cc9f8d4955d645195055 (patch)
treea9db76540d1b035531862531b241a517de17d358 /ssh-keygen.1
parent5b6c954751dd3677466cda7adb92e4f05446c96c (diff)
upstream: sort -Y internally in the options list, as is already
done in synopsis; OpenBSD-Commit-ID: 86d033c5764404057616690d7be992e445b42274
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.134
1 files changed, 17 insertions, 17 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 8d62bc72e..038e2c578 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-keygen.1,v 1.181 2019/12/27 08:25:07 jmc Exp $ 1.\" $OpenBSD: ssh-keygen.1,v 1.182 2019/12/27 08:28:44 jmc Exp $
2.\" 2.\"
3.\" Author: Tatu Ylonen <ylo@cs.hut.fi> 3.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -688,6 +688,22 @@ Note that
688.Xr sshd 8 688.Xr sshd 8
689will refuse such signatures by default, unless overridden via 689will refuse such signatures by default, unless overridden via
690an authorized_keys option. 690an authorized_keys option.
691.It Fl Y Cm check-novalidate
692Checks that a signature generated using
693.Nm
694.Fl Y Cm sign
695has a valid structure.
696This does not validate if a signature comes from an authorized signer.
697When testing a signature,
698.Nm
699accepts a message on standard input and a signature namespace using
700.Fl n .
701A file containing the corresponding signature must also be supplied using the
702.Fl s
703flag.
704Successful testing of the signature is signalled by
705.Nm
706returning a zero exit status.
691.It Fl Y Cm sign 707.It Fl Y Cm sign
692Cryptographically sign a file or some data using a SSH key. 708Cryptographically sign a file or some data using a SSH key.
693When signing, 709When signing,
@@ -744,22 +760,6 @@ The revocation file may be a KRL or a one-per-line list of public keys.
744Successful verification by an authorized signer is signalled by 760Successful verification by an authorized signer is signalled by
745.Nm 761.Nm
746returning a zero exit status. 762returning a zero exit status.
747.It Fl Y Cm check-novalidate
748Checks that a signature generated using
749.Nm
750.Fl Y Cm sign
751has a valid structure.
752This does not validate if a signature comes from an authorized signer.
753When testing a signature,
754.Nm
755accepts a message on standard input and a signature namespace using
756.Fl n .
757A file containing the corresponding signature must also be supplied using the
758.Fl s
759flag.
760Successful testing of the signature is signalled by
761.Nm
762returning a zero exit status.
763.It Fl y 763.It Fl y
764This option will read a private 764This option will read a private
765OpenSSH format file and print an OpenSSH public key to stdout. 765OpenSSH format file and print an OpenSSH public key to stdout.