=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/ssh_config.5,v retrieving revision 1.195 retrieving revision 1.196 diff -u -r1.195 -r1.196 --- src/usr.bin/ssh/ssh_config.5 2014/11/10 22:25:49 1.195 +++ src/usr.bin/ssh/ssh_config.5 2014/12/04 02:24:32 1.196 @@ -33,8 +33,8 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: ssh_config.5,v 1.195 2014/11/10 22:25:49 djm Exp $ -.Dd $Mdocdate: November 10 2014 $ +.\" $OpenBSD: ssh_config.5,v 1.196 2014/12/04 02:24:32 djm Exp $ +.Dd $Mdocdate: December 4 2014 $ .Dt SSH_CONFIG 5 .Os .Sh NAME @@ -1253,6 +1253,16 @@ .Fl T flags for .Xr ssh 1 . +.It Cm RevokedHostKeys +Specifies revoked host public keys. +Keys listed in this file will be refused for host authentication. +Note that if this file does not exist or is not readable, +then host authentication will be refused for all hosts. +Keys may be specified as a text file, listing one public key per line, or as +an OpenSSH Key Revocation List (KRL) as generated by +.Xr ssh-keygen 1 . +For more information on KRLs, see the KEY REVOCATION LISTS section in +.Xr ssh-keygen 1 . .It Cm RhostsRSAAuthentication Specifies whether to try rhosts based authentication with RSA host authentication.