diff options
author | naddy@openbsd.org <naddy@openbsd.org> | 2019-11-18 23:16:49 +0000 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2019-11-20 09:27:29 +1100 |
commit | f0edda81c5ebccffcce52b182c3033531a1aab71 (patch) | |
tree | 7e12495cd4902d1d2611d4a5f8d9eb3cbc87e426 /ssh-keygen.1 | |
parent | 189550f5bc85148e85f4caa1f6b2fc623149a4ee (diff) |
upstream: more missing mentions of ed25519-sk; ok djm@
OpenBSD-Commit-ID: f242e53366f61697dffd53af881bc5daf78230ff
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r-- | ssh-keygen.1 | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1 index e4b5e9d69..feaa69efe 100644 --- a/ssh-keygen.1 +++ b/ssh-keygen.1 | |||
@@ -1,4 +1,4 @@ | |||
1 | .\" $OpenBSD: ssh-keygen.1,v 1.175 2019/11/18 04:50:45 djm Exp $ | 1 | .\" $OpenBSD: ssh-keygen.1,v 1.176 2019/11/18 23:16:49 naddy Exp $ |
2 | .\" | 2 | .\" |
3 | .\" Author: Tatu Ylonen <ylo@cs.hut.fi> | 3 | .\" Author: Tatu Ylonen <ylo@cs.hut.fi> |
4 | .\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland | 4 | .\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland |
@@ -191,7 +191,8 @@ key in | |||
191 | .Pa ~/.ssh/id_dsa , | 191 | .Pa ~/.ssh/id_dsa , |
192 | .Pa ~/.ssh/id_ecdsa , | 192 | .Pa ~/.ssh/id_ecdsa , |
193 | .Pa ~/.ssh/id_ecdsa_sk , | 193 | .Pa ~/.ssh/id_ecdsa_sk , |
194 | .Pa ~/.ssh/id_ed25519 | 194 | .Pa ~/.ssh/id_ed25519 , |
195 | .Pa ~/.ssh/id_ed25519_sk | ||
195 | or | 196 | or |
196 | .Pa ~/.ssh/id_rsa . | 197 | .Pa ~/.ssh/id_rsa . |
197 | Additionally, the system administrator may use this to generate host keys, | 198 | Additionally, the system administrator may use this to generate host keys, |
@@ -285,7 +286,7 @@ flag determines the key length by selecting from one of three elliptic | |||
285 | curve sizes: 256, 384 or 521 bits. | 286 | curve sizes: 256, 384 or 521 bits. |
286 | Attempting to use bit lengths other than these three values for ECDSA keys | 287 | Attempting to use bit lengths other than these three values for ECDSA keys |
287 | will fail. | 288 | will fail. |
288 | ECDSA-SK and Ed25519 keys have a fixed length and the | 289 | ECDSA-SK, Ed25519 and Ed25519-SK keys have a fixed length and the |
289 | .Fl b | 290 | .Fl b |
290 | flag will be ignored. | 291 | flag will be ignored. |
291 | .It Fl C Ar comment | 292 | .It Fl C Ar comment |
@@ -1044,9 +1045,10 @@ hardware security keys. | |||
1044 | .It Pa ~/.ssh/id_ecdsa | 1045 | .It Pa ~/.ssh/id_ecdsa |
1045 | .It Pa ~/.ssh/id_ecdsa_sk | 1046 | .It Pa ~/.ssh/id_ecdsa_sk |
1046 | .It Pa ~/.ssh/id_ed25519 | 1047 | .It Pa ~/.ssh/id_ed25519 |
1048 | .It Pa ~/.ssh/id_ed25519_sk | ||
1047 | .It Pa ~/.ssh/id_rsa | 1049 | .It Pa ~/.ssh/id_rsa |
1048 | Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519 or RSA | 1050 | Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519, |
1049 | authentication identity of the user. | 1051 | security key-hosted Ed25519 or RSA authentication identity of the user. |
1050 | This file should not be readable by anyone but the user. | 1052 | This file should not be readable by anyone but the user. |
1051 | It is possible to | 1053 | It is possible to |
1052 | specify a passphrase when generating the key; that passphrase will be | 1054 | specify a passphrase when generating the key; that passphrase will be |
@@ -1061,9 +1063,10 @@ will read this file when a login attempt is made. | |||
1061 | .It Pa ~/.ssh/id_ecdsa.pub | 1063 | .It Pa ~/.ssh/id_ecdsa.pub |
1062 | .It Pa ~/.ssh/id_ecdsa_sk.pub | 1064 | .It Pa ~/.ssh/id_ecdsa_sk.pub |
1063 | .It Pa ~/.ssh/id_ed25519.pub | 1065 | .It Pa ~/.ssh/id_ed25519.pub |
1066 | .It Pa ~/.ssh/id_ed25519_sk.pub | ||
1064 | .It Pa ~/.ssh/id_rsa.pub | 1067 | .It Pa ~/.ssh/id_rsa.pub |
1065 | Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519 or RSA | 1068 | Contains the DSA, ECDSA, security key-hosted ECDSA, Ed25519, |
1066 | public key for authentication. | 1069 | security key-hosted Ed25519 or RSA public key for authentication. |
1067 | The contents of this file should be added to | 1070 | The contents of this file should be added to |
1068 | .Pa ~/.ssh/authorized_keys | 1071 | .Pa ~/.ssh/authorized_keys |
1069 | on all machines | 1072 | on all machines |