summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--ChangeLog6
-rw-r--r--ssh-agent.17
2 files changed, 11 insertions, 2 deletions
diff --git a/ChangeLog b/ChangeLog
index 674ad85d7..7ff15b28b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -12,6 +12,10 @@
12 - markus@cvs.openbsd.org 2001/11/19 11:20:21 12 - markus@cvs.openbsd.org 2001/11/19 11:20:21
13 [sshd.c] 13 [sshd.c]
14 fd leak on HUP; ok stevesk@ 14 fd leak on HUP; ok stevesk@
15 - stevesk@cvs.openbsd.org 2001/11/19 18:40:46
16 [ssh-agent.1]
17 clarify/state that private keys are not exposed to clients using the
18 agent; ok markus@
15 19
1620011126 2020011126
17 - (tim) [contrib/cygwin/README, openbsd-compat/bsd-cygwin_util.c, 21 - (tim) [contrib/cygwin/README, openbsd-compat/bsd-cygwin_util.c,
@@ -6934,4 +6938,4 @@
6934 - Wrote replacements for strlcpy and mkdtemp 6938 - Wrote replacements for strlcpy and mkdtemp
6935 - Released 1.0pre1 6939 - Released 1.0pre1
6936 6940
6937$Id: ChangeLog,v 1.1670 2001/12/06 16:35:40 mouring Exp $ 6941$Id: ChangeLog,v 1.1671 2001/12/06 16:37:51 mouring Exp $
diff --git a/ssh-agent.1 b/ssh-agent.1
index 00c19921c..2b9f3d97c 100644
--- a/ssh-agent.1
+++ b/ssh-agent.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-agent.1,v 1.28 2001/09/05 06:23:07 deraadt Exp $ 1.\" $OpenBSD: ssh-agent.1,v 1.29 2001/11/19 18:40:46 stevesk Exp $
2.\" 2.\"
3.\" Author: Tatu Ylonen <ylo@cs.hut.fi> 3.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -127,6 +127,11 @@ Later
127.Xr ssh 1 127.Xr ssh 1
128looks at these variables and uses them to establish a connection to the agent. 128looks at these variables and uses them to establish a connection to the agent.
129.Pp 129.Pp
130The agent will never send a private key over its request channel.
131Instead, operations that require a private key will be performed
132by the agent, and the result will be returned to the requester.
133This way, private keys are not exposed to clients using the agent.
134.Pp
130A unix-domain socket is created 135A unix-domain socket is created
131.Pq Pa /tmp/ssh-XXXXXXXX/agent.<pid> , 136.Pq Pa /tmp/ssh-XXXXXXXX/agent.<pid> ,
132and the name of this socket is stored in the 137and the name of this socket is stored in the