summaryrefslogtreecommitdiff
path: root/ssh-agent.1
Commit message (Collapse)AuthorAgeFilesLines
* upstream: Replace the term "security key" with "(FIDO)naddy@openbsd.org2019-12-301-4/+4
| | | | | | | | | authenticator". The polysemous use of "key" was too confusing. Input from markus@. ok jmc@ OpenBSD-Commit-ID: 12eea973a44c8232af89f86e4269d71ae900ca8f
* upstream: tweak the Nd lines for a bit of consistency; ok markusjmc@openbsd.org2019-12-111-3/+3
| | | | OpenBSD-Commit-ID: 876651bdde06bc1e72dd4bd7ad599f42a6ce5a16
* upstream: reshuffle the text to read better; input from naddy,jmc@openbsd.org2019-11-291-82/+76
| | | | | | djmc, and dtucker OpenBSD-Commit-ID: a0b2aca2b67614dda3d6618ea097bf0610c35013
* upstream: revert previous: naddy pointed out what's meant tojmc@openbsd.org2019-11-201-3/+5
| | | | | | happen. rethink needed... OpenBSD-Commit-ID: fb0fede8123ea7f725fd65e00d49241c40bd3421
* upstream: -c and -s do not make sense with -k; reshuffle -k intojmc@openbsd.org2019-11-201-6/+4
| | | | | | the main synopsis/usage; ok djm OpenBSD-Commit-ID: f881ba253da015398ae8758d973e3390754869bc
* upstream: ssh-agent support for U2F/FIDO keysdjm@openbsd.org2019-11-011-9/+11
| | | | | | feedback & ok markus@ OpenBSD-Commit-ID: bb544a44bc32e45d2ec8bf652db2046f38360acb
* upstream commitjmc@openbsd.org2016-11-301-12/+13
| | | | | | tweak previous; while here fix up FILES and AUTHORS; Upstream-ID: 93f6e54086145a75df8d8ec7d8689bdadbbac8fa
* upstream commitdjm@openbsd.org2016-11-301-2/+15
| | | | | | | add a whitelist of paths from which ssh-agent will load (via ssh-pkcs11-helper) a PKCS#11 module; ok markus@ Upstream-ID: fe79769469d9cd6d26fe0dc15751b83ef2a06e8f
* upstream commitjmc@openbsd.org2015-11-161-2/+2
| | | | | | do not confuse mandoc by presenting "Dd"; Upstream-ID: 1470fce171c47b60bbc7ecd0fc717a442c2cfe65
* upstream commitjcs@openbsd.org2015-11-161-2/+9
| | | | | | | | | | | | | Add an AddKeysToAgent client option which can be set to 'yes', 'no', 'ask', or 'confirm', and defaults to 'no'. When enabled, a private key that is used during authentication will be added to ssh-agent if it is running (with confirmation enabled if set to 'confirm'). Initial version from Joachim Schipper many years ago. ok markus@ Upstream-ID: a680db2248e8064ec55f8be72d539458c987d5f4
* upstream commitjmc@openbsd.org2015-11-091-3/+3
| | | | | | | | | | "commandline" -> "command line", since there are so few examples of the former in the pages, so many of the latter, and in some of these pages we had multiple spellings; prompted by tj Upstream-ID: 78459d59bff74223f8139d9001ccd56fc4310659
* upstream commitjmc@openbsd.org2015-04-291-3/+2
| | | | combine -Dd onto one line and update usage();
* upstream commitdjm@openbsd.org2015-04-291-3/+9
| | | | | add ssh-agent -D to leave ssh-agent in foreground without enabling debug mode; bz#2381 ok dtucker@
* upstream commitdjm@openbsd.org2014-12-221-2/+11
| | | | | | | | Add FingerprintHash option to control algorithm used for key fingerprints. Default changes from MD5 to SHA256 and format from hex to base64. Feedback and ok naddy@ markus@
* upstream commitsobrado@openbsd.org2014-10-131-3/+3
| | | | | | | improve capitalization for the Ed25519 public-key signature system. ok djm@
* - djm@cvs.openbsd.org 2014/04/16 23:28:12Damien Miller2014-04-201-37/+16
| | | | | | | [ssh-agent.1] remove the identity files from this manpage - ssh-agent doesn't deal with them at all and the same information is duplicated in ssh-add.1 (which does deal with them); prodded by deraadt@
* - naddy@cvs.openbsd.org 2013/12/07 11:58:46Damien Miller2013-12-181-4/+7
| | | | | | [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8 ssh.1] [ssh_config.5 sshd.8 sshd_config.5] add missing mentions of ed25519; ok djm@
* - djm@cvs.openbsd.org 2010/11/21 01:01:13Damien Miller2010-12-011-4/+4
| | | | | | [clientloop.c misc.c misc.h ssh-agent.1 ssh-agent.c] honour $TMPDIR for client xauth and ssh-agent temporary directories; feedback and ok markus@
* - jmc@cvs.openbsd.org 2010/08/31 17:40:54Damien Miller2010-09-101-3/+3
| | | | | [ssh-agent.1] fix some macro abuse;
* - djm@cvs.openbsd.org 2010/08/31 11:54:45Damien Miller2010-08-311-4/+7
| | | | | | | | | | | | | | | | | | | | | | | | | [PROTOCOL PROTOCOL.agent PROTOCOL.certkeys auth2-jpake.c authfd.c] [authfile.c buffer.h dns.c kex.c kex.h key.c key.h monitor.c] [monitor_wrap.c myproposal.h packet.c packet.h pathnames.h readconf.c] [ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c] [ssh-keyscan.1 ssh-keyscan.c ssh-keysign.8 ssh.1 ssh.c ssh2.h] [ssh_config.5 sshconnect.c sshconnect2.c sshd.8 sshd.c sshd_config.5] [uuencode.c uuencode.h bufec.c kexecdh.c kexecdhc.c kexecdhs.c ssh-ecdsa.c] Implement Elliptic Curve Cryptography modes for key exchange (ECDH) and host/user keys (ECDSA) as specified by RFC5656. ECDH and ECDSA offer better performance than plain DH and DSA at the same equivalent symmetric key length, as well as much shorter keys. Only the mandatory sections of RFC5656 are implemented, specifically the three REQUIRED curves nistp256, nistp384 and nistp521 and only ECDH and ECDSA. Point compression (optional in RFC5656 is NOT implemented). Certificate host and user keys using the new ECDSA key types are supported. Note that this code has not been tested for interoperability and may be subject to change. feedback and ok markus@
* - tedu@cvs.openbsd.org 2010/01/17 21:49:09Damien Miller2010-01-261-4/+5
| | | | | | [ssh-agent.1] Correct and clarify ssh-add's password asking behavior. Improved text dtucker and ok jmc
* - sobrado@cvs.openbsd.org 2009/10/22 15:02:12Darren Tucker2009-10-241-8/+7
| | | | | | | | [ssh-agent.1 ssh-add.1 ssh.1] write UNIX-domain in a more consistent way; while here, replace a few remaining ".Tn UNIX" macros with ".Ux" ones. pointed out by ratchov@, thanks! ok jmc@
* - sobrado@cvs.openbsd.org 2009/10/22 12:35:53Darren Tucker2009-10-241-6/+10
| | | | | | [ssh.1 ssh-agent.1 ssh-add.1] use the UNIX-related macros (.At and .Ux) where appropriate. ok jmc@
* - sobrado@cvs.openbsd.org 2009/03/26 08:38:39Darren Tucker2009-06-211-3/+3
| | | | | | [sftp-server.8 sshd.8 ssh-agent.1] fix a few typographical errors found by spell(1). ok dtucker@, jmc@
* - sobrado@cvs.openbsd.org 2007/09/09 11:38:01Damien Miller2007-09-171-14/+14
| | | | | | [ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.c] sort synopsis and options in ssh-agent(1); usage is lowercase ok jmc@
* - jmc@cvs.openbsd.org 2007/05/31 19:20:16Darren Tucker2007-06-051-2/+2
| | | | | | | [scp.1 ssh_config.5 sftp-server.8 ssh-agent.1 sshd_config.5 sftp.1 ssh-keygen.1 ssh-keyscan.1 ssh-add.1 sshd.8 ssh.1 ssh-keysign.8] convert to new .Dd format; (We will need to teach mdoc2man.awk to understand this too.)
* - jmc@cvs.openbsd.org 2006/07/18 08:03:09Damien Miller2006-07-241-3/+3
| | | | | [ssh-agent.1 sshd_config.5] mark up angle brackets;
* - dtucker@cvs.openbsd.org 2005/11/28 06:02:56Darren Tucker2005-11-281-4/+4
| | | | | | [ssh-agent.1] Update agent socket path templates to reflect reality, correct xref for time formats. bz#1121, patch from openssh at roumenpetrov.info, ok djm@
* - djm@cvs.openbsd.org 2005/04/21 06:17:50Damien Miller2005-05-261-7/+7
| | | | | | [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 ssh_config.5 sshd.8] [sshd_config.5] OpenSSH doesn't ever look at the $HOME environment variable, so don't say that we do (bz #623); ok deraadt@
* - deraadt@cvs.openbsd.org 2004/07/11 17:48:47Darren Tucker2004-07-171-2/+2
| | | | | | | | [channels.c cipher.c clientloop.c clientloop.h compat.h moduli.c readconf.c nchan.c pathnames.h progressmeter.c readconf.h servconf.c session.c sftp-client.c sftp.c ssh-agent.1 ssh-keygen.c ssh.c ssh1.h sshd.c ttymodes.h] spaces
* - dtucker@cvs.openbsd.org 2004/05/13 02:47:50Darren Tucker2004-05-131-5/+17
| | | | | [ssh-agent.1] Add examples to ssh-agent.1, bz#481 from Ralf Hauser; ok deraadt@
* - jmc@cvs.openbsd.org 2003/06/10 09:12:11Damien Miller2003-06-111-6/+6
| | | | | | | | | | | [scp.1 sftp-server.8 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5] [sshd.8 sshd_config.5 ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8] - section reorder - COMPATIBILITY merge - macro cleanup - kill whitespace at EOL - new sentence, new line ssh pages ok markus@
* - (djm) OpenBSD CVS SyncDamien Miller2003-05-151-2/+2
| | | | | | | - jmc@cvs.openbsd.org 2003/05/14 13:11:56 [ssh-agent.1] setup -> set up; from wiz@netbsd
* - (djm) OpenBSD CVS SyncDamien Miller2003-04-011-3/+4
| | | | | | | | | | - jmc@cvs.openbsd.org 2003/03/28 10:11:43 [scp.1 sftp.1 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5 sshd_config.5] [ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8] - killed whitespace - new sentence new line - .Bk for arguments ok markus@
* - (djm) OpenBSD CVS SyncDamien Miller2003-01-221-1/+10
| | | | | | | | - marc@cvs.openbsd.org 2003/01/21 18:14:36 [ssh-agent.1 ssh-agent.c] Add a -t life option to ssh-agent that set the default lifetime. The default can still be overriden by using -t in ssh-add. OK markus@
* - markus@cvs.openbsd.org 2002/06/24 13:12:23Ben Lindstrom2002-06-251-3/+3
| | | | | [ssh-agent.1] the socket name contains ssh-agent's ppid; via mpech@ from form@
* - stevesk@cvs.openbsd.org 2002/06/22 16:45:29Ben Lindstrom2002-06-231-2/+2
| | | | | [ssh-agent.1 sshd.8 sshd_config.5] use process ID vs. pid/PID/process identifier
* - deraadt@cvs.openbsd.org 2002/06/19 00:27:55Ben Lindstrom2002-06-211-2/+2
| | | | | | | | | [auth-bsdauth.c auth-skey.c auth1.c auth2-chall.c auth2-none.c authfd.c authfd.h monitor_wrap.c msg.c nchan.c radix.c readconf.c scp.c sftp.1 ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh-keygen.c ssh-keysign.c ssh.1 sshconnect.c sshconnect.h sshconnect2.c ttymodes.c xmalloc.h] KNF done automatically while reading....
* - markus@cvs.openbsd.org 2002/06/05 16:08:07Ben Lindstrom2002-06-061-2/+7
| | | | | | [ssh-agent.1 ssh-agent.c] '-a bind_address' binds the agent to user-specified unix-domain socket instead of /tmp/ssh-XXXXXXXX/agent.<pid>; ok djm@ (some time ago).
* - stevesk@cvs.openbsd.org 2002/02/04 20:41:16Damien Miller2002-02-081-10/+1
| | | | | [ssh-agent.1] more sync for default ssh-add identities; ok markus@
* - stevesk@cvs.openbsd.org 2002/02/03 23:22:59Damien Miller2002-02-051-4/+6
| | | | | [ssh-agent.1] ssh-add also adds $HOME/.ssh/id_rsa and $HOME/.ssh/id_dsa now.
* - stevesk@cvs.openbsd.org 2001/11/19 18:40:46Ben Lindstrom2001-12-061-1/+6
| | | | | | [ssh-agent.1] clarify/state that private keys are not exposed to clients using the agent; ok markus@
* - deraadt@cvs.openbsd.org 2001/09/05 06:23:07Ben Lindstrom2001-09-121-4/+4
| | | | | [scp.1 sftp.1 ssh.1 ssh-agent.1 sshd.8 ssh-keygen.1 ssh-keyscan.1] avoid first person in manual pages
* - stevesk@cvs.openbsd.org 2001/08/23 18:02:48Ben Lindstrom2001-09-121-6/+4
| | | | | [ssh-agent.1] fix usage; ok markus@
* - stevesk@cvs.openbsd.org 2001/07/15 16:57:21Ben Lindstrom2001-07-181-2/+2
| | | | | [ssh-agent.1] -d will not fork; ok markus@
* - markus@cvs.openbsd.org 2001/06/26 04:07:06Ben Lindstrom2001-07-041-1/+7
| | | | | [ssh-agent.1 ssh-agent.c] add debug flag
* - itojun@cvs.openbsd.org 2001/04/10 09:13:22Ben Lindstrom2001-04-111-3/+5
| | | | | [ssh-add.1 ssh-agent.1 ssh-keygen.1 ssh.1 sshd.8] document id_rsa{.pub,}. markus ok
* - deraadt@cvs.openbsd.org 2001/04/02 17:32:23Ben Lindstrom2001-04-041-2/+2
| | | | | [ssh-agent.1] grammar; slade@shore.net
* - deraadt@cvs.openbsd.org 2001/03/02 18:54:31Ben Lindstrom2001-03-051-4/+4
| | | | | | | [atomicio.c atomicio.h auth-chall.c auth.c auth2-chall.c crc32.h scp.c serverloop.c session.c sftp-server.8 sftp.1 ssh-add.1 ssh-add.c ssh-agent.1 ssh-agent.c ssh-keygen.1 ssh.1 sshd.8] make copyright lines the same format
* - (bal) A bit more whitespace cleanupBen Lindstrom2001-02-101-2/+1
|