version 1.90, 2010/03/10 07:40:35 |
version 1.91, 2010/03/13 21:45:46 |
|
|
.Dl $ ssh-keygen -s /path/to/ca_key -I key_id /path/to/user_key.pub |
.Dl $ ssh-keygen -s /path/to/ca_key -I key_id /path/to/user_key.pub |
.Pp |
.Pp |
The resultant certificate will be placed in |
The resultant certificate will be placed in |
.Pa /path/to/user_key_cert.pub . |
.Pa /path/to/user_key-cert.pub . |
A host certificate requires the |
A host certificate requires the |
.Fl h |
.Fl h |
option: |
option: |
|
|
.Dl $ ssh-keygen -s /path/to/ca_key -I key_id -h /path/to/host_key.pub |
.Dl $ ssh-keygen -s /path/to/ca_key -I key_id -h /path/to/host_key.pub |
.Pp |
.Pp |
The host certificate will be output to |
The host certificate will be output to |
.Pa /path/to/host_key_cert.pub . |
.Pa /path/to/host_key-cert.pub . |
In both cases, |
In both cases, |
.Ar key_id |
.Ar key_id |
is a "key identifier" that is logged by the server when the certificate |
is a "key identifier" that is logged by the server when the certificate |