summaryrefslogtreecommitdiff
path: root/ssh-keygen.1
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-keygen.1')
-rw-r--r--ssh-keygen.112
1 files changed, 4 insertions, 8 deletions
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 124456577..9b877b860 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -178,9 +178,7 @@ key in
178.Pa ~/.ssh/id_ed25519 178.Pa ~/.ssh/id_ed25519
179or 179or
180.Pa ~/.ssh/id_rsa . 180.Pa ~/.ssh/id_rsa .
181Additionally, the system administrator may use this to generate host keys, 181Additionally, the system administrator may use this to generate host keys.
182as seen in
183.Pa /etc/rc .
184.Pp 182.Pp
185Normally this program generates the key and asks for a file in which 183Normally this program generates the key and asks for a file in which
186to store the private key. 184to store the private key.
@@ -243,9 +241,7 @@ If
243.Fl f 241.Fl f
244has also been specified, its argument is used as a prefix to the 242has also been specified, its argument is used as a prefix to the
245default path for the resulting host key files. 243default path for the resulting host key files.
246This is used by 244This is used by system administration scripts to generate new host keys.
247.Pa /etc/rc
248to generate new host keys.
249.It Fl a Ar rounds 245.It Fl a Ar rounds
250When saving a private key this option specifies the number of KDF 246When saving a private key this option specifies the number of KDF
251(key derivation function) rounds used. 247(key derivation function) rounds used.
@@ -703,7 +699,7 @@ option.
703Valid generator values are 2, 3, and 5. 699Valid generator values are 2, 3, and 5.
704.Pp 700.Pp
705Screened DH groups may be installed in 701Screened DH groups may be installed in
706.Pa /etc/moduli . 702.Pa /etc/ssh/moduli .
707It is important that this file contains moduli of a range of bit lengths and 703It is important that this file contains moduli of a range of bit lengths and
708that both ends of a connection share common moduli. 704that both ends of a connection share common moduli.
709.Sh CERTIFICATES 705.Sh CERTIFICATES
@@ -903,7 +899,7 @@ on all machines
903where the user wishes to log in using public key authentication. 899where the user wishes to log in using public key authentication.
904There is no need to keep the contents of this file secret. 900There is no need to keep the contents of this file secret.
905.Pp 901.Pp
906.It Pa /etc/moduli 902.It Pa /etc/ssh/moduli
907Contains Diffie-Hellman groups used for DH-GEX. 903Contains Diffie-Hellman groups used for DH-GEX.
908The file format is described in 904The file format is described in
909.Xr moduli 5 . 905.Xr moduli 5 .