src/crypto/external/bsd/openssh/dist/ssh-keygen.1 - diff

Return to ssh-keygen.1 CVS log

Up to [cvs.NetBSD.org] / src / crypto / external / bsd / openssh / dist

Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.

version 1.1.1.11, 2015/08/13 10:26:01

version 1.1.1.12, 2015/08/21 08:08:57

Line 1

.\" $OpenBSD: ssh-keygen.1,v 1.126 2015/07/03 03:49:45 djm Exp $

.\" $OpenBSD: ssh-keygen.1,v 1.127 2015/08/20 19:20:06 naddy Exp $

.\"

.\" Author: Tatu Ylonen <ylo@cs.hut.fi>

Line 35

.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF

.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

.\"

.Dd $Mdocdate: July 3 2015 $

.Dd $Mdocdate: August 20 2015 $

.Dt SSH-KEYGEN 1

.Os

.Sh NAME

Line 680 and identifying the CA key by providing

.Fl s :

.Pp

.Dl $ ssh-keygen -s ca_key.pub -D libpkcs11.so -I key_id host_key.pub

.Dl $ ssh-keygen -s ca_key.pub -D libpkcs11.so -I key_id user_key.pub

.Pp

In all cases,

.Ar key_id

Line 693 By default, generated certificates are v

To generate a certificate for a specified set of principals:

.Pp

.Dl $ ssh-keygen -s ca_key -I key_id -n user1,user2 user_key.pub

.Dl "$ ssh-keygen -s ca_key -I key_id -h -n host.domain user_key.pub"

.Dl "$ ssh-keygen -s ca_key -I key_id -h -n host.domain host_key.pub"

.Pp

Additional limitations on the validity and use of user certificates may

be specified through certificate options.