summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.113
1 files changed, 5 insertions, 8 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 03f927edf..fe26750a4 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -152,9 +152,7 @@ key in
152.Pa ~/.ssh/id_dsa 152.Pa ~/.ssh/id_dsa
153or 153or
154.Pa ~/.ssh/id_rsa . 154.Pa ~/.ssh/id_rsa .
155Additionally, the system administrator may use this to generate host keys, 155Additionally, the system administrator may use this to generate host keys.
156as seen in
157.Pa /etc/rc .
158.Pp 156.Pp
159Normally this program generates the key and asks for a file in which 157Normally this program generates the key and asks for a file in which
160to store the private key. 158to store the private key.
@@ -200,9 +198,7 @@ The options are as follows:
200For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys 198For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys
201do not exist, generate the host keys with the default key file path, 199do not exist, generate the host keys with the default key file path,
202an empty passphrase, default bits for the key type, and default comment. 200an empty passphrase, default bits for the key type, and default comment.
203This is used by 201This is used by system administration scripts to generate new host keys.
204.Pa /etc/rc
205to generate new host keys.
206.It Fl a Ar trials 202.It Fl a Ar trials
207Specifies the number of primality tests to perform when screening DH-GEX 203Specifies the number of primality tests to perform when screening DH-GEX
208candidates using the 204candidates using the
@@ -556,7 +552,7 @@ option.
556Valid generator values are 2, 3, and 5. 552Valid generator values are 2, 3, and 5.
557.Pp 553.Pp
558Screened DH groups may be installed in 554Screened DH groups may be installed in
559.Pa /etc/moduli . 555.Pa /etc/ssh/moduli .
560It is important that this file contains moduli of a range of bit lengths and 556It is important that this file contains moduli of a range of bit lengths and
561that both ends of a connection share common moduli. 557that both ends of a connection share common moduli.
562.Sh CERTIFICATES 558.Sh CERTIFICATES
@@ -682,7 +678,7 @@ on all machines
682where the user wishes to log in using public key authentication. 678where the user wishes to log in using public key authentication.
683There is no need to keep the contents of this file secret. 679There is no need to keep the contents of this file secret.
684.Pp 680.Pp
685.It Pa /etc/moduli 681.It Pa /etc/ssh/moduli
686Contains Diffie-Hellman groups used for DH-GEX. 682Contains Diffie-Hellman groups used for DH-GEX.
687The file format is described in 683The file format is described in
688.Xr moduli 5 . 684.Xr moduli 5 .
@@ -691,6 +687,7 @@ The file format is described in
691.Xr ssh 1 , 687.Xr ssh 1 ,
692.Xr ssh-add 1 , 688.Xr ssh-add 1 ,
693.Xr ssh-agent 1 , 689.Xr ssh-agent 1 ,
690.Xr ssh-vulnkey 1 ,
694.Xr moduli 5 , 691.Xr moduli 5 ,
695.Xr sshd 8 692.Xr sshd 8
696.Rs 693.Rs