summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.113
1 files changed, 5 insertions, 8 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 41da2077b..f7e3ea4c6 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -150,9 +150,7 @@ key in
150.Pa ~/.ssh/id_dsa 150.Pa ~/.ssh/id_dsa
151or 151or
152.Pa ~/.ssh/id_rsa . 152.Pa ~/.ssh/id_rsa .
153Additionally, the system administrator may use this to generate host keys, 153Additionally, the system administrator may use this to generate host keys.
154as seen in
155.Pa /etc/rc .
156.Pp 154.Pp
157Normally this program generates the key and asks for a file in which 155Normally this program generates the key and asks for a file in which
158to store the private key. 156to store the private key.
@@ -198,9 +196,7 @@ The options are as follows:
198For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys 196For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys
199do not exist, generate the host keys with the default key file path, 197do not exist, generate the host keys with the default key file path,
200an empty passphrase, default bits for the key type, and default comment. 198an empty passphrase, default bits for the key type, and default comment.
201This is used by 199This is used by system administration scripts to generate new host keys.
202.Pa /etc/rc
203to generate new host keys.
204.It Fl a Ar trials 200.It Fl a Ar trials
205Specifies the number of primality tests to perform when screening DH-GEX 201Specifies the number of primality tests to perform when screening DH-GEX
206candidates using the 202candidates using the
@@ -544,7 +540,7 @@ option.
544Valid generator values are 2, 3, and 5. 540Valid generator values are 2, 3, and 5.
545.Pp 541.Pp
546Screened DH groups may be installed in 542Screened DH groups may be installed in
547.Pa /etc/moduli . 543.Pa /etc/ssh/moduli .
548It is important that this file contains moduli of a range of bit lengths and 544It is important that this file contains moduli of a range of bit lengths and
549that both ends of a connection share common moduli. 545that both ends of a connection share common moduli.
550.Sh CERTIFICATES 546.Sh CERTIFICATES
@@ -670,7 +666,7 @@ on all machines
670where the user wishes to log in using public key authentication. 666where the user wishes to log in using public key authentication.
671There is no need to keep the contents of this file secret. 667There is no need to keep the contents of this file secret.
672.Pp 668.Pp
673.It Pa /etc/moduli 669.It Pa /etc/ssh/moduli
674Contains Diffie-Hellman groups used for DH-GEX. 670Contains Diffie-Hellman groups used for DH-GEX.
675The file format is described in 671The file format is described in
676.Xr moduli 5 . 672.Xr moduli 5 .
@@ -679,6 +675,7 @@ The file format is described in
679.Xr ssh 1 , 675.Xr ssh 1 ,
680.Xr ssh-add 1 , 676.Xr ssh-add 1 ,
681.Xr ssh-agent 1 , 677.Xr ssh-agent 1 ,
678.Xr ssh-vulnkey 1 ,
682.Xr moduli 5 , 679.Xr moduli 5 ,
683.Xr sshd 8 680.Xr sshd 8
684.Rs 681.Rs