summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
authorDamien Miller <djm@mindrot.org>2013-01-20 22:34:46 +1100
committerDamien Miller <djm@mindrot.org>2013-01-20 22:34:46 +1100
commit881a7a2c5dc1d39b7e5f50e0d6c52d61b85491c3 (patch)
tree6f39882d1255e38b6a5be59e915d980a913219c8 /ssh-keygen.1
parent072fdcd19821bbd36ee175475286fad17eaaa367 (diff)
- jmc@cvs.openbsd.org 2013/01/18 21:48:43
[ssh-keygen.1] command-line (adj.) -> command line (n.);
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.116
1 files changed, 8 insertions, 8 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index ca0ab3537..9d7a25cf4 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-keygen.1,v 1.113 2013/01/18 08:39:04 jmc Exp $ 1.\" $OpenBSD: ssh-keygen.1,v 1.114 2013/01/18 21:48:43 jmc Exp $
2.\" 2.\"
3.\" Author: Tatu Ylonen <ylo@cs.hut.fi> 3.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -346,7 +346,7 @@ In this mode,
346.Nm 346.Nm
347will generate a KRL file at the location specified via the 347will generate a KRL file at the location specified via the
348.Fl f 348.Fl f
349flag that revokes every key or certificate presented on the command-line. 349flag that revokes every key or certificate presented on the command line.
350Keys/certificates to be revoked may be specified by public key file or 350Keys/certificates to be revoked may be specified by public key file or
351using the format described in the 351using the format described in the
352.Sx KEY REVOCATION LISTS 352.Sx KEY REVOCATION LISTS
@@ -506,7 +506,7 @@ for protocol version 2.
506Update a KRL. 506Update a KRL.
507When specified with 507When specified with
508.Fl k , 508.Fl k ,
509keys listed via the command-line are added to the existing KRL rather than 509keys listed via the command line are added to the existing KRL rather than
510a new KRL being created. 510a new KRL being created.
511.It Fl V Ar validity_interval 511.It Fl V Ar validity_interval
512Specify a validity interval when signing a certificate. 512Specify a validity interval when signing a certificate.
@@ -698,7 +698,7 @@ revoked by serial number.
698KRLs may be generated using the 698KRLs may be generated using the
699.Fl k 699.Fl k
700flag. 700flag.
701This option reads one or more files from the command-line and generates a new 701This option reads one or more files from the command line and generates a new
702KRL. 702KRL.
703The files may either contain a KRL specification (see below) or public keys, 703The files may either contain a KRL specification (see below) or public keys,
704listed one per line. 704listed one per line.
@@ -721,14 +721,14 @@ If two serial numbers are specified separated by a hyphen, then the range
721of serial numbers including and between each is revoked. 721of serial numbers including and between each is revoked.
722The CA key must have been specified on the 722The CA key must have been specified on the
723.Nm 723.Nm
724command-line using the 724command line using the
725.Fl s 725.Fl s
726option. 726option.
727.It Cm id : Ar key_id 727.It Cm id : Ar key_id
728Revokes a certificate with the specified key ID string. 728Revokes a certificate with the specified key ID string.
729The CA key must have been specified on the 729The CA key must have been specified on the
730.Nm 730.Nm
731command-line using the 731command line using the
732.Fl s 732.Fl s
733option. 733option.
734.It Cm key : Ar public_key 734.It Cm key : Ar public_key
@@ -742,7 +742,7 @@ KRLs may be updated using the
742.Fl u 742.Fl u
743flag in addition to 743flag in addition to
744.Fl k . 744.Fl k .
745When this option is specified, keys listed via the command-line are merged into 745When this option is specified, keys listed via the command line are merged into
746the KRL, adding to those already there. 746the KRL, adding to those already there.
747.Pp 747.Pp
748It is also possible, given a KRL, to test whether it revokes a particular key 748It is also possible, given a KRL, to test whether it revokes a particular key
@@ -750,7 +750,7 @@ It is also possible, given a KRL, to test whether it revokes a particular key
750The 750The
751.Fl Q 751.Fl Q
752flag will query an existing KRL, testing each key specified on the commandline. 752flag will query an existing KRL, testing each key specified on the commandline.
753If any key listed on the command-line has been revoked (or an error encountered) 753If any key listed on the command line has been revoked (or an error encountered)
754then 754then
755.Nm 755.Nm
756will exit with a non-zero exit status. 756will exit with a non-zero exit status.