src/usr.bin/ssh/ssh-agent.1 - diff

Return to ssh-agent.1 CVS log

Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/ssh-agent.1 between version 1.73.6.1 and 1.74

version 1.73.6.1, 2023/07/19 14:08:59

version 1.74, 2022/10/07 04:06:26

Line 106

environment variable).

.It Fl O Ar option

Specify an option when starting

.Nm .

.Xr ssh-agent 1 .

Currently two options are supported:

Currently only one option is supported:

.Cm allow-remote-pkcs11

and

.Cm no-restrict-websafe .

.Pp

This instructs

The

.Xr ssh-agent 1

.Cm allow-remote-pkcs11

option allows clients of a forwarded

.Nm

to load PKCS#11 or FIDO provider libraries.

By default only local clients may perform this operation.

Note that signalling that a

.Nm

client remote is performed by

.Xr ssh 1 ,

and use of other tools to forward access to the agent socket may circumvent

this restriction.

.Pp

The

.Cm no-restrict-websafe ,

instructs

.Nm

to permit signatures using FIDO keys that might be web authentication

requests.

By default,

.Nm

.Xr ssh-agent 1

refuses signature requests for FIDO keys where the key application string

does not start with

.Dq ssh:

Line 198

Line 180

.Pp

In both cases,

.Xr ssh 1

looks at these environment variables

looks at these environment variables and uses them to establish a connection to the agent.

and uses them to establish a connection to the agent.

.Pp

The agent initially does not have any private keys.

Keys are added using