version 1.195, 2020/01/23 07:16:38 |
version 1.196, 2020/01/23 23:31:52 |
|
|
.Fl f Ar krl_file |
.Fl f Ar krl_file |
.Ar |
.Ar |
.Nm ssh-keygen |
.Nm ssh-keygen |
.Fl Y Cm find-principal |
.Fl Y Cm find-principals |
.Fl s Ar signature_file |
.Fl s Ar signature_file |
.Fl f Ar allowed_signers_file |
.Fl f Ar allowed_signers_file |
.Nm ssh-keygen |
.Nm ssh-keygen |
|
|
Specifies a path to a library that will be used when creating |
Specifies a path to a library that will be used when creating |
FIDO authenticator-hosted keys, overriding the default of using |
FIDO authenticator-hosted keys, overriding the default of using |
the internal USB HID support. |
the internal USB HID support. |
.It Fl Y Cm find-principal |
.It Fl Y Cm find-principals |
Find the principal associated with the public key of a signature, |
Find the principal(s) associated with the public key of a signature, |
provided using the |
provided using the |
.Fl s |
.Fl s |
flag in an authorized signers file provided using the |
flag in an authorized signers file provided using the |
|
|
The format of the allowed signers file is documented in the |
The format of the allowed signers file is documented in the |
.Sx ALLOWED SIGNERS |
.Sx ALLOWED SIGNERS |
section below. |
section below. |
If a matching principal is found, it is returned on standard output. |
If one or more matching principals are found, they are returned on |
|
standard output. |
.It Fl Y Cm check-novalidate |
.It Fl Y Cm check-novalidate |
Checks that a signature generated using |
Checks that a signature generated using |
.Nm |
.Nm |