summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.113
1 files changed, 5 insertions, 8 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 7da73e07c..0d84ebd1e 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -171,9 +171,7 @@ key in
171.Pa ~/.ssh/id_dsa 171.Pa ~/.ssh/id_dsa
172or 172or
173.Pa ~/.ssh/id_rsa . 173.Pa ~/.ssh/id_rsa .
174Additionally, the system administrator may use this to generate host keys, 174Additionally, the system administrator may use this to generate host keys.
175as seen in
176.Pa /etc/rc .
177.Pp 175.Pp
178Normally this program generates the key and asks for a file in which 176Normally this program generates the key and asks for a file in which
179to store the private key. 177to store the private key.
@@ -219,9 +217,7 @@ The options are as follows:
219For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys 217For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys
220do not exist, generate the host keys with the default key file path, 218do not exist, generate the host keys with the default key file path,
221an empty passphrase, default bits for the key type, and default comment. 219an empty passphrase, default bits for the key type, and default comment.
222This is used by 220This is used by system administration scripts to generate new host keys.
223.Pa /etc/rc
224to generate new host keys.
225.It Fl a Ar trials 221.It Fl a Ar trials
226Specifies the number of primality tests to perform when screening DH-GEX 222Specifies the number of primality tests to perform when screening DH-GEX
227candidates using the 223candidates using the
@@ -606,7 +602,7 @@ option.
606Valid generator values are 2, 3, and 5. 602Valid generator values are 2, 3, and 5.
607.Pp 603.Pp
608Screened DH groups may be installed in 604Screened DH groups may be installed in
609.Pa /etc/moduli . 605.Pa /etc/ssh/moduli .
610It is important that this file contains moduli of a range of bit lengths and 606It is important that this file contains moduli of a range of bit lengths and
611that both ends of a connection share common moduli. 607that both ends of a connection share common moduli.
612.Sh CERTIFICATES 608.Sh CERTIFICATES
@@ -801,7 +797,7 @@ on all machines
801where the user wishes to log in using public key authentication. 797where the user wishes to log in using public key authentication.
802There is no need to keep the contents of this file secret. 798There is no need to keep the contents of this file secret.
803.Pp 799.Pp
804.It Pa /etc/moduli 800.It Pa /etc/ssh/moduli
805Contains Diffie-Hellman groups used for DH-GEX. 801Contains Diffie-Hellman groups used for DH-GEX.
806The file format is described in 802The file format is described in
807.Xr moduli 5 . 803.Xr moduli 5 .
@@ -810,6 +806,7 @@ The file format is described in
810.Xr ssh 1 , 806.Xr ssh 1 ,
811.Xr ssh-add 1 , 807.Xr ssh-add 1 ,
812.Xr ssh-agent 1 , 808.Xr ssh-agent 1 ,
809.Xr ssh-vulnkey 1 ,
813.Xr moduli 5 , 810.Xr moduli 5 ,
814.Xr sshd 8 811.Xr sshd 8
815.Rs 812.Rs