summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.113
1 files changed, 5 insertions, 8 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index ede37921c..7c8b1f202 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -149,9 +149,7 @@ key in
149.Pa ~/.ssh/id_dsa 149.Pa ~/.ssh/id_dsa
150or 150or
151.Pa ~/.ssh/id_rsa . 151.Pa ~/.ssh/id_rsa .
152Additionally, the system administrator may use this to generate host keys, 152Additionally, the system administrator may use this to generate host keys.
153as seen in
154.Pa /etc/rc .
155.Pp 153.Pp
156Normally this program generates the key and asks for a file in which 154Normally this program generates the key and asks for a file in which
157to store the private key. 155to store the private key.
@@ -197,9 +195,7 @@ The options are as follows:
197For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys 195For each of the key types (rsa1, rsa, dsa and ecdsa) for which host keys
198do not exist, generate the host keys with the default key file path, 196do not exist, generate the host keys with the default key file path,
199an empty passphrase, default bits for the key type, and default comment. 197an empty passphrase, default bits for the key type, and default comment.
200This is used by 198This is used by system administration scripts to generate new host keys.
201.Pa /etc/rc
202to generate new host keys.
203.It Fl a Ar trials 199.It Fl a Ar trials
204Specifies the number of primality tests to perform when screening DH-GEX 200Specifies the number of primality tests to perform when screening DH-GEX
205candidates using the 201candidates using the
@@ -535,7 +531,7 @@ option.
535Valid generator values are 2, 3, and 5. 531Valid generator values are 2, 3, and 5.
536.Pp 532.Pp
537Screened DH groups may be installed in 533Screened DH groups may be installed in
538.Pa /etc/moduli . 534.Pa /etc/ssh/moduli .
539It is important that this file contains moduli of a range of bit lengths and 535It is important that this file contains moduli of a range of bit lengths and
540that both ends of a connection share common moduli. 536that both ends of a connection share common moduli.
541.Sh CERTIFICATES 537.Sh CERTIFICATES
@@ -661,7 +657,7 @@ on all machines
661where the user wishes to log in using public key authentication. 657where the user wishes to log in using public key authentication.
662There is no need to keep the contents of this file secret. 658There is no need to keep the contents of this file secret.
663.Pp 659.Pp
664.It Pa /etc/moduli 660.It Pa /etc/ssh/moduli
665Contains Diffie-Hellman groups used for DH-GEX. 661Contains Diffie-Hellman groups used for DH-GEX.
666The file format is described in 662The file format is described in
667.Xr moduli 5 . 663.Xr moduli 5 .
@@ -670,6 +666,7 @@ The file format is described in
670.Xr ssh 1 , 666.Xr ssh 1 ,
671.Xr ssh-add 1 , 667.Xr ssh-add 1 ,
672.Xr ssh-agent 1 , 668.Xr ssh-agent 1 ,
669.Xr ssh-vulnkey 1 ,
673.Xr moduli 5 , 670.Xr moduli 5 ,
674.Xr sshd 8 671.Xr sshd 8
675.Rs 672.Rs