2016-02-17 07:38:19 +00:00
|
|
|
.\" $OpenBSD: ssh-keysign.8,v 1.15 2016/02/17 07:38:19 jmc Exp $
|
2002-06-06 19:57:33 +00:00
|
|
|
.\"
|
|
|
|
|
.\" Copyright (c) 2002 Markus Friedl. All rights reserved.
|
|
|
|
|
.\"
|
|
|
|
|
.\" Redistribution and use in source and binary forms, with or without
|
|
|
|
|
.\" modification, are permitted provided that the following conditions
|
|
|
|
|
.\" are met:
|
|
|
|
|
.\" 1. Redistributions of source code must retain the above copyright
|
|
|
|
|
.\" notice, this list of conditions and the following disclaimer.
|
|
|
|
|
.\" 2. Redistributions in binary form must reproduce the above copyright
|
|
|
|
|
.\" notice, this list of conditions and the following disclaimer in the
|
|
|
|
|
.\" documentation and/or other materials provided with the distribution.
|
|
|
|
|
.\"
|
|
|
|
|
.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
|
|
|
.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
|
|
|
.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
|
|
|
.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
|
|
|
.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
|
|
|
.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
|
|
|
.\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
|
|
|
.\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
|
|
|
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
|
|
|
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
|
.\"
|
2016-02-17 07:38:19 +00:00
|
|
|
.Dd $Mdocdate: February 17 2016 $
|
2002-06-06 19:57:33 +00:00
|
|
|
.Dt SSH-KEYSIGN 8
|
|
|
|
|
.Os
|
|
|
|
|
.Sh NAME
|
|
|
|
|
.Nm ssh-keysign
|
2006-03-15 00:55:31 +00:00
|
|
|
.Nd ssh helper program for host-based authentication
|
2002-06-06 19:57:33 +00:00
|
|
|
.Sh SYNOPSIS
|
2002-06-11 15:50:13 +00:00
|
|
|
.Nm
|
2002-06-06 19:57:33 +00:00
|
|
|
.Sh DESCRIPTION
|
|
|
|
|
.Nm
|
|
|
|
|
is used by
|
|
|
|
|
.Xr ssh 1
|
2002-06-11 15:50:13 +00:00
|
|
|
to access the local host keys and generate the digital signature
|
2016-02-17 07:38:19 +00:00
|
|
|
required during host-based authentication.
|
2002-07-04 00:19:40 +00:00
|
|
|
.Pp
|
|
|
|
|
.Nm
|
|
|
|
|
is disabled by default and can only be enabled in the
|
2002-12-23 02:09:59 +00:00
|
|
|
global client configuration file
|
2002-07-04 00:19:40 +00:00
|
|
|
.Pa /etc/ssh/ssh_config
|
|
|
|
|
by setting
|
2002-11-09 15:52:31 +00:00
|
|
|
.Cm EnableSSHKeysign
|
2002-07-04 00:19:40 +00:00
|
|
|
to
|
|
|
|
|
.Dq yes .
|
|
|
|
|
.Pp
|
2002-06-06 19:57:33 +00:00
|
|
|
.Nm
|
|
|
|
|
is not intended to be invoked by the user, but from
|
|
|
|
|
.Xr ssh 1 .
|
|
|
|
|
See
|
|
|
|
|
.Xr ssh 1
|
|
|
|
|
and
|
|
|
|
|
.Xr sshd 8
|
2006-03-15 00:55:31 +00:00
|
|
|
for more information about host-based authentication.
|
2002-06-11 15:50:13 +00:00
|
|
|
.Sh FILES
|
2010-08-31 12:31:14 +00:00
|
|
|
.Bl -tag -width Ds -compact
|
2002-07-04 00:19:40 +00:00
|
|
|
.It Pa /etc/ssh/ssh_config
|
|
|
|
|
Controls whether
|
|
|
|
|
.Nm
|
|
|
|
|
is enabled.
|
2010-08-31 12:31:14 +00:00
|
|
|
.Pp
|
|
|
|
|
.It Pa /etc/ssh/ssh_host_dsa_key
|
2010-08-31 12:41:14 +00:00
|
|
|
.It Pa /etc/ssh/ssh_host_ecdsa_key
|
2013-12-18 06:46:27 +00:00
|
|
|
.It Pa /etc/ssh/ssh_host_ed25519_key
|
2010-08-31 12:31:14 +00:00
|
|
|
.It Pa /etc/ssh/ssh_host_rsa_key
|
2002-06-11 15:50:13 +00:00
|
|
|
These files contain the private parts of the host keys used to
|
2003-04-01 11:42:14 +00:00
|
|
|
generate the digital signature.
|
|
|
|
|
They should be owned by root, readable only by root, and not
|
2002-06-11 15:50:13 +00:00
|
|
|
accessible to others.
|
|
|
|
|
Since they are readable only by root,
|
|
|
|
|
.Nm
|
2006-03-15 00:55:31 +00:00
|
|
|
must be set-uid root if host-based authentication is used.
|
2010-08-31 12:31:14 +00:00
|
|
|
.Pp
|
|
|
|
|
.It Pa /etc/ssh/ssh_host_dsa_key-cert.pub
|
2010-08-31 12:41:14 +00:00
|
|
|
.It Pa /etc/ssh/ssh_host_ecdsa_key-cert.pub
|
2013-12-18 06:46:27 +00:00
|
|
|
.It Pa /etc/ssh/ssh_host_ed25519_key-cert.pub
|
2010-08-31 12:31:14 +00:00
|
|
|
.It Pa /etc/ssh/ssh_host_rsa_key-cert.pub
|
2010-08-05 03:04:50 +00:00
|
|
|
If these files exist they are assumed to contain public certificate
|
|
|
|
|
information corresponding with the private keys above.
|
2002-06-11 15:50:13 +00:00
|
|
|
.El
|
2002-06-06 19:57:33 +00:00
|
|
|
.Sh SEE ALSO
|
|
|
|
|
.Xr ssh 1 ,
|
2002-06-11 15:50:13 +00:00
|
|
|
.Xr ssh-keygen 1 ,
|
2002-07-04 00:19:40 +00:00
|
|
|
.Xr ssh_config 5 ,
|
2002-06-06 19:57:33 +00:00
|
|
|
.Xr sshd 8
|
|
|
|
|
.Sh HISTORY
|
|
|
|
|
.Nm
|
|
|
|
|
first appeared in
|
|
|
|
|
.Ox 3.2 .
|
2003-06-11 12:04:39 +00:00
|
|
|
.Sh AUTHORS
|
2013-07-18 06:14:13 +00:00
|
|
|
.An Markus Friedl Aq Mt markus@openbsd.org
|
