summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.115
1 files changed, 12 insertions, 3 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 7c8b1f202..f7e3ea4c6 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-keygen.1,v 1.106 2011/04/13 04:09:37 djm Exp $ 1.\" $OpenBSD: ssh-keygen.1,v 1.108 2011/10/16 11:02:46 dtucker Exp $
2.\" 2.\"
3.\" Author: Tatu Ylonen <ylo@cs.hut.fi> 3.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -35,7 +35,7 @@
35.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 35.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
36.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 36.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
37.\" 37.\"
38.Dd $Mdocdate: April 13 2011 $ 38.Dd $Mdocdate: October 16 2011 $
39.Dt SSH-KEYGEN 1 39.Dt SSH-KEYGEN 1
40.Os 40.Os
41.Sh NAME 41.Sh NAME
@@ -104,6 +104,7 @@
104.Fl f Ar input_file 104.Fl f Ar input_file
105.Op Fl v 105.Op Fl v
106.Op Fl a Ar num_trials 106.Op Fl a Ar num_trials
107.Op Fl K Ar checkpt
107.Op Fl W Ar generator 108.Op Fl W Ar generator
108.Nm ssh-keygen 109.Nm ssh-keygen
109.Fl s Ar ca_key 110.Fl s Ar ca_key
@@ -210,7 +211,7 @@ Generally, 2048 bits is considered sufficient.
210DSA keys must be exactly 1024 bits as specified by FIPS 186-2. 211DSA keys must be exactly 1024 bits as specified by FIPS 186-2.
211For ECDSA keys, the 212For ECDSA keys, the
212.Fl b 213.Fl b
213flag determines they key length by selecting from one of three elliptic 214flag determines the key length by selecting from one of three elliptic
214curve sizes: 256, 384 or 521 bits. 215curve sizes: 256, 384 or 521 bits.
215Attempting to use bit lengths other than these three values for ECDSA keys 216Attempting to use bit lengths other than these three values for ECDSA keys
216will fail. 217will fail.
@@ -292,6 +293,14 @@ in the format specified by the
292.Fl m 293.Fl m
293option and print an OpenSSH compatible private 294option and print an OpenSSH compatible private
294(or public) key to stdout. 295(or public) key to stdout.
296.It Fl K Ar checkpt
297Write the last line processed to the file
298.Ar checkpt
299while performing DH candidate screening using the
300.Fl T
301option.
302This will be used to skip lines in the input file that have already been
303processed if the job is restarted.
295This option allows importing keys from other software, including several 304This option allows importing keys from other software, including several
296commercial SSH implementations. 305commercial SSH implementations.
297The default import format is 306The default import format is