diff options
Diffstat (limited to 'ssh-keysign.0')
-rw-r--r-- | ssh-keysign.0 | 52 |
1 files changed, 52 insertions, 0 deletions
diff --git a/ssh-keysign.0 b/ssh-keysign.0 new file mode 100644 index 000000000..65d75f313 --- /dev/null +++ b/ssh-keysign.0 | |||
@@ -0,0 +1,52 @@ | |||
1 | SSH-KEYSIGN(8) System Manager's Manual SSH-KEYSIGN(8) | ||
2 | |||
3 | NAME | ||
4 | ssh-keysign M-bM-^@M-^S ssh helper program for host-based authentication | ||
5 | |||
6 | SYNOPSIS | ||
7 | ssh-keysign | ||
8 | |||
9 | DESCRIPTION | ||
10 | ssh-keysign is used by ssh(1) to access the local host keys and generate | ||
11 | the digital signature required during host-based authentication. | ||
12 | |||
13 | ssh-keysign is disabled by default and can only be enabled in the global | ||
14 | client configuration file /etc/ssh/ssh_config by setting EnableSSHKeysign | ||
15 | to M-bM-^@M-^\yesM-bM-^@M-^]. | ||
16 | |||
17 | ssh-keysign is not intended to be invoked by the user, but from ssh(1). | ||
18 | See ssh(1) and sshd(8) for more information about host-based | ||
19 | authentication. | ||
20 | |||
21 | FILES | ||
22 | /etc/ssh/ssh_config | ||
23 | Controls whether ssh-keysign is enabled. | ||
24 | |||
25 | /etc/ssh/ssh_host_dsa_key | ||
26 | /etc/ssh/ssh_host_ecdsa_key | ||
27 | /etc/ssh/ssh_host_ed25519_key | ||
28 | /etc/ssh/ssh_host_rsa_key | ||
29 | These files contain the private parts of the host keys used to | ||
30 | generate the digital signature. They should be owned by root, | ||
31 | readable only by root, and not accessible to others. Since they | ||
32 | are readable only by root, ssh-keysign must be set-uid root if | ||
33 | host-based authentication is used. | ||
34 | |||
35 | /etc/ssh/ssh_host_dsa_key-cert.pub | ||
36 | /etc/ssh/ssh_host_ecdsa_key-cert.pub | ||
37 | /etc/ssh/ssh_host_ed25519_key-cert.pub | ||
38 | /etc/ssh/ssh_host_rsa_key-cert.pub | ||
39 | If these files exist they are assumed to contain public | ||
40 | certificate information corresponding with the private keys | ||
41 | above. | ||
42 | |||
43 | SEE ALSO | ||
44 | ssh(1), ssh-keygen(1), ssh_config(5), sshd(8) | ||
45 | |||
46 | HISTORY | ||
47 | ssh-keysign first appeared in OpenBSD 3.2. | ||
48 | |||
49 | AUTHORS | ||
50 | Markus Friedl <markus@openbsd.org> | ||
51 | |||
52 | OpenBSD 5.9 February 17, 2016 OpenBSD 5.9 | ||