summaryrefslogtreecommitdiff
path: root/ssh-keyscan.1
diff options
context:
space:
mode:
authorjmc@openbsd.org <jmc@openbsd.org>2018-03-05 07:03:18 +0000
committerDamien Miller <djm@mindrot.org>2018-03-12 11:48:15 +1100
commit0bcd871ccdf3baf2b642509ba4773d5be067cfa2 (patch)
tree09e708983400761125752b7e43693d1bf6614648 /ssh-keyscan.1
parent45011511a09e03493568506ce32f4891a174a3bd (diff)
upstream: move the input format details to -f; remove the output
format details and point to sshd(8), where it is documented; ok dtucker OpenBSD-Commit-ID: 95f17e47dae02a6ac7329708c8c893d4cad0004a
Diffstat (limited to 'ssh-keyscan.1')
-rw-r--r--ssh-keyscan.133
1 files changed, 9 insertions, 24 deletions
diff --git a/ssh-keyscan.1 b/ssh-keyscan.1
index edefe76f6..f3d7a4078 100644
--- a/ssh-keyscan.1
+++ b/ssh-keyscan.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-keyscan.1,v 1.43 2018/03/02 21:40:15 jmc Exp $ 1.\" $OpenBSD: ssh-keyscan.1,v 1.44 2018/03/05 07:03:18 jmc Exp $
2.\" 2.\"
3.\" Copyright 1995, 1996 by David Mazieres <dm@lcs.mit.edu>. 3.\" Copyright 1995, 1996 by David Mazieres <dm@lcs.mit.edu>.
4.\" 4.\"
@@ -6,7 +6,7 @@
6.\" permitted provided that due credit is given to the author and the 6.\" permitted provided that due credit is given to the author and the
7.\" OpenBSD project by leaving this copyright notice intact. 7.\" OpenBSD project by leaving this copyright notice intact.
8.\" 8.\"
9.Dd $Mdocdate: March 2 2018 $ 9.Dd $Mdocdate: March 5 2018 $
10.Dt SSH-KEYSCAN 1 10.Dt SSH-KEYSCAN 1
11.Os 11.Os
12.Sh NAME 12.Sh NAME
@@ -26,7 +26,9 @@ is a utility for gathering the public SSH host keys of a number of
26hosts. 26hosts.
27It was designed to aid in building and verifying 27It was designed to aid in building and verifying
28.Pa ssh_known_hosts 28.Pa ssh_known_hosts
29files. 29files,
30the format of which is documented in
31.Xr sshd 8 .
30.Nm 32.Nm
31provides a minimal interface suitable for use by shell and perl 33provides a minimal interface suitable for use by shell and perl
32scripts. 34scripts.
@@ -42,27 +44,6 @@ For scanning, one does not need
42login access to the machines that are being scanned, nor does the 44login access to the machines that are being scanned, nor does the
43scanning process involve any encryption. 45scanning process involve any encryption.
44.Pp 46.Pp
45Input is expected in the format:
46.Bd -literal -offset 3n
471.2.3.4,1.2.4.4 name.my.domain,name,n.my.domain,n,1.2.3.4,1.2.4.4
48.Ed
49.Pp
50The output format is:
51.Bd -literal -offset 3n
52host-or-namelist keytype base64-encoded-key
53.Ed
54.Pp
55Where
56.Ar keytype
57is either
58.Dq ecdsa-sha2-nistp256 ,
59.Dq ecdsa-sha2-nistp384 ,
60.Dq ecdsa-sha2-nistp521 ,
61.Dq ssh-ed25519 ,
62.Dq ssh-dss
63or
64.Dq ssh-rsa .
65.Pp
66The options are as follows: 47The options are as follows:
67.Bl -tag -width Ds 48.Bl -tag -width Ds
68.It Fl 4 49.It Fl 4
@@ -92,6 +73,10 @@ If
92is supplied instead of a filename, 73is supplied instead of a filename,
93.Nm 74.Nm
94will read from the standard input. 75will read from the standard input.
76Input is expected in the format:
77.Bd -literal
781.2.3.4,1.2.4.4 name.my.domain,name,n.my.domain,n,1.2.3.4,1.2.4.4
79.Ed
95.It Fl H 80.It Fl H
96Hash all hostnames and addresses in the output. 81Hash all hostnames and addresses in the output.
97Hashed names may be used normally by 82Hashed names may be used normally by