summaryrefslogtreecommitdiff
path: root/ssh-keysign.8
diff options
context:
space:
mode:
Diffstat (limited to 'ssh-keysign.8')
-rw-r--r--ssh-keysign.816
1 files changed, 11 insertions, 5 deletions
diff --git a/ssh-keysign.8 b/ssh-keysign.8
index 46c0ee9cd..5e09e0271 100644
--- a/ssh-keysign.8
+++ b/ssh-keysign.8
@@ -1,4 +1,4 @@
1.\" $OpenBSD: ssh-keysign.8,v 1.10 2010/08/04 05:42:47 djm Exp $ 1.\" $OpenBSD: ssh-keysign.8,v 1.12 2010/08/31 11:54:45 djm Exp $
2.\" 2.\"
3.\" Copyright (c) 2002 Markus Friedl. All rights reserved. 3.\" Copyright (c) 2002 Markus Friedl. All rights reserved.
4.\" 4.\"
@@ -22,7 +22,7 @@
22.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 22.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
23.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 23.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24.\" 24.\"
25.Dd $Mdocdate: August 4 2010 $ 25.Dd $Mdocdate: August 31 2010 $
26.Dt SSH-KEYSIGN 8 26.Dt SSH-KEYSIGN 8
27.Os 27.Os
28.Sh NAME 28.Sh NAME
@@ -55,12 +55,15 @@ and
55.Xr sshd 8 55.Xr sshd 8
56for more information about host-based authentication. 56for more information about host-based authentication.
57.Sh FILES 57.Sh FILES
58.Bl -tag -width Ds 58.Bl -tag -width Ds -compact
59.It Pa /etc/ssh/ssh_config 59.It Pa /etc/ssh/ssh_config
60Controls whether 60Controls whether
61.Nm 61.Nm
62is enabled. 62is enabled.
63.It Pa /etc/ssh/ssh_host_dsa_key, /etc/ssh/ssh_host_rsa_key 63.Pp
64.It Pa /etc/ssh/ssh_host_dsa_key
65.It Pa /etc/ssh/ssh_host_ecdsa_key
66.It Pa /etc/ssh/ssh_host_rsa_key
64These files contain the private parts of the host keys used to 67These files contain the private parts of the host keys used to
65generate the digital signature. 68generate the digital signature.
66They should be owned by root, readable only by root, and not 69They should be owned by root, readable only by root, and not
@@ -68,7 +71,10 @@ accessible to others.
68Since they are readable only by root, 71Since they are readable only by root,
69.Nm 72.Nm
70must be set-uid root if host-based authentication is used. 73must be set-uid root if host-based authentication is used.
71.It Pa /etc/ssh/ssh_host_dsa_key-cert.pub, /etc/ssh/ssh_host_rsa_key-cert.pub 74.Pp
75.It Pa /etc/ssh/ssh_host_dsa_key-cert.pub
76.It Pa /etc/ssh/ssh_host_ecdsa_key-cert.pub
77.It Pa /etc/ssh/ssh_host_rsa_key-cert.pub
72If these files exist they are assumed to contain public certificate 78If these files exist they are assumed to contain public certificate
73information corresponding with the private keys above. 79information corresponding with the private keys above.
74.El 80.El