summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
authornaddy@openbsd.org <naddy@openbsd.org>2019-11-18 23:16:49 +0000
committerDamien Miller <djm@mindrot.org>2019-11-20 09:27:29 +1100
commitf0edda81c5ebccffcce52b182c3033531a1aab71 (patch)
tree7e12495cd4902d1d2611d4a5f8d9eb3cbc87e426 /ssh-keygen.1
parent189550f5bc85148e85f4caa1f6b2fc623149a4ee (diff)
upstream: more missing mentions of ed25519-sk; ok djm@
OpenBSD-Commit-ID: f242e53366f61697dffd53af881bc5daf78230ff
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.117
1 files changed, 10 insertions, 7 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index e4b5e9d69..feaa69efe 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-keygen.1,v 1.175 2019/11/18 04:50:45 djm Exp $ 1.\" $OpenBSD: ssh-keygen.1,v 1.176 2019/11/18 23:16:49 naddy Exp $
2.\" 2.\"
3.\" Author: Tatu Ylonen <ylo@cs.hut.fi> 3.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -191,7 +191,8 @@ key in
191.Pa ~/.ssh/id_dsa , 191.Pa ~/.ssh/id_dsa ,
192.Pa ~/.ssh/id_ecdsa , 192.Pa ~/.ssh/id_ecdsa ,
193.Pa ~/.ssh/id_ecdsa_sk , 193.Pa ~/.ssh/id_ecdsa_sk ,
194.Pa ~/.ssh/id_ed25519 194.Pa ~/.ssh/id_ed25519 ,
195.Pa ~/.ssh/id_ed25519_sk
195or 196or
196.Pa ~/.ssh/id_rsa . 197.Pa ~/.ssh/id_rsa .
197Additionally, the system administrator may use this to generate host keys, 198Additionally, the system administrator may use this to generate host keys,
@@ -285,7 +286,7 @@ flag determines the key length by selecting from one of three elliptic
285curve sizes: 256, 384 or 521 bits. 286curve sizes: 256, 384 or 521 bits.
286Attempting to use bit lengths other than these three values for ECDSA keys 287Attempting to use bit lengths other than these three values for ECDSA keys
287will fail. 288will fail.
288ECDSA-SK and Ed25519 keys have a fixed length and the 289ECDSA-SK, Ed25519 and Ed25519-SK keys have a fixed length and the
289.Fl b 290.Fl b
290flag will be ignored. 291flag will be ignored.
291.It Fl C Ar comment 292.It Fl C Ar comment
@@ -1044,9 +1045,10 @@ hardware security keys.
1044.It Pa ~/.ssh/id_ecdsa 1045.It Pa ~/.ssh/id_ecdsa
1045.It Pa ~/.ssh/id_ecdsa_sk 1046.It Pa ~/.ssh/id_ecdsa_sk
1046.It Pa ~/.ssh/id_ed25519 1047.It Pa ~/.ssh/id_ed25519
1048.It Pa ~/.ssh/id_ed25519_sk
1047.It Pa ~/.ssh/id_rsa 1049.It Pa ~/.ssh/id_rsa
1048Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519 or RSA 1050Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519,
1049authentication identity of the user. 1051security key-hosted Ed25519 or RSA authentication identity of the user.
1050This file should not be readable by anyone but the user. 1052This file should not be readable by anyone but the user.
1051It is possible to 1053It is possible to
1052specify a passphrase when generating the key; that passphrase will be 1054specify a passphrase when generating the key; that passphrase will be
@@ -1061,9 +1063,10 @@ will read this file when a login attempt is made.
1061.It Pa ~/.ssh/id_ecdsa.pub 1063.It Pa ~/.ssh/id_ecdsa.pub
1062.It Pa ~/.ssh/id_ecdsa_sk.pub 1064.It Pa ~/.ssh/id_ecdsa_sk.pub
1063.It Pa ~/.ssh/id_ed25519.pub 1065.It Pa ~/.ssh/id_ed25519.pub
1066.It Pa ~/.ssh/id_ed25519_sk.pub
1064.It Pa ~/.ssh/id_rsa.pub 1067.It Pa ~/.ssh/id_rsa.pub
1065Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519 or RSA 1068Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519,
1066public key for authentication. 1069security key-hosted Ed25519 or RSA public key for authentication.
1067The contents of this file should be added to 1070The contents of this file should be added to
1068.Pa ~/.ssh/authorized_keys 1071.Pa ~/.ssh/authorized_keys
1069on all machines 1072on all machines