src/usr.bin/ssh/ssh-keygen.1 - diff

Return to ssh-keygen.1 CVS log

Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/ssh-keygen.1 between version 1.219 and 1.220

version 1.219, 2022/01/05 04:50:11

version 1.220, 2022/02/06 00:29:03

Line 372

.It Fl h

When signing a key, create a host certificate instead of a user

certificate.

Please see the

See the

.Sx CERTIFICATES

section for details.

.It Fl I Ar certificate_identity

Specify the key identity when signing a public key.

Please see the

See the

.Sx CERTIFICATES

section for details.

.It Fl i

Line 469

Specify one or more principals (user or host names) to be included in

a certificate when signing a key.

Multiple principals may be specified, separated by commas.

Please see the

See the

.Sx CERTIFICATES

section for details.

.It Fl O Ar option

Line 534

.It Cm write-attestation Ns = Ns Ar path

May be used at key generation time to record the attestation data

returned from FIDO tokens during key generation.

Please note that this information is potentially sensitive.

This information is potentially sensitive.

By default, this information is discarded.

.El

.Pp

Line 594

for the specified public key file.

.It Fl s Ar ca_key

Certify (sign) a public key using the specified CA key.

Please see the

See the

.Sx CERTIFICATES

section for details.

.Pp

Line 1059

.Xr sshd 8

.Xr ssh 1 .

Please refer to those manual pages for details.

Refer to those manual pages for details.

.Sh KEY REVOCATION LISTS

.Nm

is able to manage OpenSSH format Key Revocation Lists (KRLs).