diff options
Diffstat (limited to 'ssh-keygen.0')
| -rw-r--r-- | ssh-keygen.0 | 24 |
1 files changed, 15 insertions, 9 deletions
diff --git a/ssh-keygen.0 b/ssh-keygen.0 index 6c1763d4d44c..4eedd4162a60 100644 --- a/ssh-keygen.0 +++ b/ssh-keygen.0 @@ -19,7 +19,7 @@ SYNOPSIS ssh-keygen -R hostname [-f known_hosts_file] ssh-keygen -r hostname [-f input_keyfile] [-g] ssh-keygen -G output_file [-v] [-b bits] [-M memory] [-S start_point] - ssh-keygen -T output_file -f input_file [-v] [-a num_trials] + ssh-keygen -T output_file -f input_file [-v] [-a num_trials] [-K checkpt] [-W generator] ssh-keygen -s ca_key -I certificate_identity [-h] [-n principals] [-O option] [-V validity_interval] [-z serial_number] file ... @@ -51,9 +51,9 @@ DESCRIPTION passphrase is similar to a password, except it can be a phrase with a series of words, punctuation, numbers, whitespace, or any string of characters you want. Good passphrases are 10-30 characters long, are not - simple sentences or otherwise easily guessable (English prose has only 1- - 2 bits of entropy per character, and provides very bad passphrases), and - contain a mix of upper and lowercase letters, numbers, and non- + simple sentences or otherwise easily guessable (English prose has only + 1-2 bits of entropy per character, and provides very bad passphrases), + and contain a mix of upper and lowercase letters, numbers, and non- alphanumeric characters. The passphrase can be changed later by using the -p option. @@ -90,7 +90,7 @@ DESCRIPTION the minimum size is 768 bits and the default is 2048 bits. Generally, 2048 bits is considered sufficient. DSA keys must be exactly 1024 bits as specified by FIPS 186-2. For ECDSA keys, - the -b flag determines they key length by selecting from one of + the -b flag determines the key length by selecting from one of three elliptic curve sizes: 256, 384 or 521 bits. Attempting to use bit lengths other than these three values for ECDSA keys will fail. @@ -149,9 +149,15 @@ DESCRIPTION -i This option will read an unencrypted private (or public) key file in the format specified by the -m option and print an OpenSSH - compatible private (or public) key to stdout. This option allows - importing keys from other software, including several commercial - SSH implementations. The default import format is ``RFC4716''. + compatible private (or public) key to stdout. + + -K checkpt + Write the last line processed to the file checkpt while + performing DH candidate screening using the -T option. This will + be used to skip lines in the input file that have already been + processed if the job is restarted. This option allows importing + keys from other software, including several commercial SSH + implementations. The default import format is ``RFC4716''. -L Prints the contents of a certificate. @@ -451,4 +457,4 @@ AUTHORS created OpenSSH. Markus Friedl contributed the support for SSH protocol versions 1.5 and 2.0. -OpenBSD 5.0 April 13, 2011 OpenBSD 5.0 +OpenBSD 5.0 October 16, 2011 OpenBSD 5.0 |