summaryrefslogtreecommitdiff
path: root/sshd.8
diff options
context:
space:
mode:
Diffstat (limited to 'sshd.8')
-rw-r--r--sshd.817
1 files changed, 7 insertions, 10 deletions
diff --git a/sshd.8 b/sshd.8
index 42f1520b4..17b917c06 100644
--- a/sshd.8
+++ b/sshd.8
@@ -33,8 +33,8 @@
33.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 33.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
34.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 34.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
35.\" 35.\"
36.\" $OpenBSD: sshd.8,v 1.279 2015/05/01 07:11:47 djm Exp $ 36.\" $OpenBSD: sshd.8,v 1.280 2015/07/03 03:49:45 djm Exp $
37.Dd $Mdocdate: May 1 2015 $ 37.Dd $Mdocdate: July 3 2015 $
38.Dt SSHD 8 38.Dt SSHD 8
39.Os 39.Os
40.Sh NAME 40.Sh NAME
@@ -187,15 +187,12 @@ Specifies that
187.Nm 187.Nm
188is being run from 188is being run from
189.Xr inetd 8 . 189.Xr inetd 8 .
190If SSH protocol 1 is enabled,
190.Nm 191.Nm
191is normally not run 192should not normally be run
192from inetd because it needs to generate the server key before it can 193from inetd because it needs to generate the server key before it can
193respond to the client, and this may take tens of seconds. 194respond to the client, and this may take some time.
194Clients would have to wait too long if the key was regenerated every time. 195Clients may have to wait too long if the key was regenerated every time.
195However, with small key sizes (e.g. 512) using
196.Nm
197from inetd may
198be feasible.
199.It Fl k Ar key_gen_time 196.It Fl k Ar key_gen_time
200Specifies how often the ephemeral protocol version 1 server key is 197Specifies how often the ephemeral protocol version 1 server key is
201regenerated (default 3600 seconds, or one hour). 198regenerated (default 3600 seconds, or one hour).
@@ -290,7 +287,7 @@ used to identify the host.
290.Pp 287.Pp
291Forward security for protocol 1 is provided through 288Forward security for protocol 1 is provided through
292an additional server key, 289an additional server key,
293normally 768 bits, 290normally 1024 bits,
294generated when the server starts. 291generated when the server starts.
295This key is normally regenerated every hour if it has been used, and 292This key is normally regenerated every hour if it has been used, and
296is never stored on disk. 293is never stored on disk.