diff options
-rw-r--r-- | moduli.5 | 4 | ||||
-rw-r--r-- | ssh-keygen.1 | 12 | ||||
-rw-r--r-- | ssh.1 | 4 | ||||
-rw-r--r-- | sshd.8 | 5 | ||||
-rw-r--r-- | sshd_config.5 | 3 |
5 files changed, 13 insertions, 15 deletions
@@ -21,7 +21,7 @@ | |||
21 | .Nd Diffie-Hellman moduli | 21 | .Nd Diffie-Hellman moduli |
22 | .Sh DESCRIPTION | 22 | .Sh DESCRIPTION |
23 | The | 23 | The |
24 | .Pa /etc/moduli | 24 | .Pa /etc/ssh/moduli |
25 | file contains prime numbers and generators for use by | 25 | file contains prime numbers and generators for use by |
26 | .Xr sshd 8 | 26 | .Xr sshd 8 |
27 | in the Diffie-Hellman Group Exchange key exchange method. | 27 | in the Diffie-Hellman Group Exchange key exchange method. |
@@ -110,7 +110,7 @@ first estimates the size of the modulus required to produce enough | |||
110 | Diffie-Hellman output to sufficiently key the selected symmetric cipher. | 110 | Diffie-Hellman output to sufficiently key the selected symmetric cipher. |
111 | .Xr sshd 8 | 111 | .Xr sshd 8 |
112 | then randomly selects a modulus from | 112 | then randomly selects a modulus from |
113 | .Fa /etc/moduli | 113 | .Fa /etc/ssh/moduli |
114 | that best meets the size requirement. | 114 | that best meets the size requirement. |
115 | .Sh SEE ALSO | 115 | .Sh SEE ALSO |
116 | .Xr ssh-keygen 1 , | 116 | .Xr ssh-keygen 1 , |
diff --git a/ssh-keygen.1 b/ssh-keygen.1 index 37a4fc2b2..24bed5f61 100644 --- a/ssh-keygen.1 +++ b/ssh-keygen.1 | |||
@@ -178,9 +178,7 @@ key in | |||
178 | .Pa ~/.ssh/id_ed25519 | 178 | .Pa ~/.ssh/id_ed25519 |
179 | or | 179 | or |
180 | .Pa ~/.ssh/id_rsa . | 180 | .Pa ~/.ssh/id_rsa . |
181 | Additionally, the system administrator may use this to generate host keys, | 181 | Additionally, the system administrator may use this to generate host keys. |
182 | as seen in | ||
183 | .Pa /etc/rc . | ||
184 | .Pp | 182 | .Pp |
185 | Normally this program generates the key and asks for a file in which | 183 | Normally this program generates the key and asks for a file in which |
186 | to store the private key. | 184 | to store the private key. |
@@ -227,9 +225,7 @@ For each of the key types (rsa1, rsa, dsa, ecdsa and ed25519) | |||
227 | for which host keys | 225 | for which host keys |
228 | do not exist, generate the host keys with the default key file path, | 226 | do not exist, generate the host keys with the default key file path, |
229 | an empty passphrase, default bits for the key type, and default comment. | 227 | an empty passphrase, default bits for the key type, and default comment. |
230 | This is used by | 228 | This is used by system administration scripts to generate new host keys. |
231 | .Pa /etc/rc | ||
232 | to generate new host keys. | ||
233 | .It Fl a Ar rounds | 229 | .It Fl a Ar rounds |
234 | When saving a new-format private key (i.e. an ed25519 key or any SSH protocol | 230 | When saving a new-format private key (i.e. an ed25519 key or any SSH protocol |
235 | 2 key when the | 231 | 2 key when the |
@@ -642,7 +638,7 @@ option. | |||
642 | Valid generator values are 2, 3, and 5. | 638 | Valid generator values are 2, 3, and 5. |
643 | .Pp | 639 | .Pp |
644 | Screened DH groups may be installed in | 640 | Screened DH groups may be installed in |
645 | .Pa /etc/moduli . | 641 | .Pa /etc/ssh/moduli . |
646 | It is important that this file contains moduli of a range of bit lengths and | 642 | It is important that this file contains moduli of a range of bit lengths and |
647 | that both ends of a connection share common moduli. | 643 | that both ends of a connection share common moduli. |
648 | .Sh CERTIFICATES | 644 | .Sh CERTIFICATES |
@@ -841,7 +837,7 @@ on all machines | |||
841 | where the user wishes to log in using public key authentication. | 837 | where the user wishes to log in using public key authentication. |
842 | There is no need to keep the contents of this file secret. | 838 | There is no need to keep the contents of this file secret. |
843 | .Pp | 839 | .Pp |
844 | .It Pa /etc/moduli | 840 | .It Pa /etc/ssh/moduli |
845 | Contains Diffie-Hellman groups used for DH-GEX. | 841 | Contains Diffie-Hellman groups used for DH-GEX. |
846 | The file format is described in | 842 | The file format is described in |
847 | .Xr moduli 5 . | 843 | .Xr moduli 5 . |
@@ -852,6 +852,10 @@ implements public key authentication protocol automatically, | |||
852 | using one of the DSA, ECDSA, Ed25519 or RSA algorithms. | 852 | using one of the DSA, ECDSA, Ed25519 or RSA algorithms. |
853 | The HISTORY section of | 853 | The HISTORY section of |
854 | .Xr ssl 8 | 854 | .Xr ssl 8 |
855 | (on non-OpenBSD systems, see | ||
856 | .nh | ||
857 | http://www.openbsd.org/cgi\-bin/man.cgi?query=ssl&sektion=8#HISTORY) | ||
858 | .hy | ||
855 | contains a brief discussion of the DSA and RSA algorithms. | 859 | contains a brief discussion of the DSA and RSA algorithms. |
856 | .Pp | 860 | .Pp |
857 | The file | 861 | The file |
@@ -67,7 +67,7 @@ over an insecure network. | |||
67 | .Nm | 67 | .Nm |
68 | listens for connections from clients. | 68 | listens for connections from clients. |
69 | It is normally started at boot from | 69 | It is normally started at boot from |
70 | .Pa /etc/rc . | 70 | .Pa /etc/init.d/ssh . |
71 | It forks a new | 71 | It forks a new |
72 | daemon for each incoming connection. | 72 | daemon for each incoming connection. |
73 | The forked daemons handle | 73 | The forked daemons handle |
@@ -891,7 +891,7 @@ This file is for host-based authentication (see | |||
891 | .Xr ssh 1 ) . | 891 | .Xr ssh 1 ) . |
892 | It should only be writable by root. | 892 | It should only be writable by root. |
893 | .Pp | 893 | .Pp |
894 | .It Pa /etc/moduli | 894 | .It Pa /etc/ssh/moduli |
895 | Contains Diffie-Hellman groups used for the "Diffie-Hellman Group Exchange" | 895 | Contains Diffie-Hellman groups used for the "Diffie-Hellman Group Exchange" |
896 | key exchange method. | 896 | key exchange method. |
897 | The file format is described in | 897 | The file format is described in |
@@ -993,7 +993,6 @@ The content of this file is not sensitive; it can be world-readable. | |||
993 | .Xr ssh-keyscan 1 , | 993 | .Xr ssh-keyscan 1 , |
994 | .Xr chroot 2 , | 994 | .Xr chroot 2 , |
995 | .Xr hosts_access 5 , | 995 | .Xr hosts_access 5 , |
996 | .Xr login.conf 5 , | ||
997 | .Xr moduli 5 , | 996 | .Xr moduli 5 , |
998 | .Xr sshd_config 5 , | 997 | .Xr sshd_config 5 , |
999 | .Xr inetd 8 , | 998 | .Xr inetd 8 , |
diff --git a/sshd_config.5 b/sshd_config.5 index b56564044..4d255e5ce 100644 --- a/sshd_config.5 +++ b/sshd_config.5 | |||
@@ -375,8 +375,7 @@ then no banner is displayed. | |||
375 | By default, no banner is displayed. | 375 | By default, no banner is displayed. |
376 | .It Cm ChallengeResponseAuthentication | 376 | .It Cm ChallengeResponseAuthentication |
377 | Specifies whether challenge-response authentication is allowed (e.g. via | 377 | Specifies whether challenge-response authentication is allowed (e.g. via |
378 | PAM or through authentication styles supported in | 378 | PAM). |
379 | .Xr login.conf 5 ) | ||
380 | The default is | 379 | The default is |
381 | .Dq yes . | 380 | .Dq yes . |
382 | .It Cm ChrootDirectory | 381 | .It Cm ChrootDirectory |