tyler.durden
/
openssh-portable
mirror of https://github.com/PowerShell/openssh-portable.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

- espie@cvs.openbsd.org 2002/08/21 11:20:59 

[sshd.8]
     `RSA' updated to refer to `public key', where it matters.
     okay markus@
This commit is contained in:
Damien Miller 2002-09-04 16:24:55 +10:00
parent 6cffb9a8cd
commit b83df8d505
2 changed files with 13 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@ -3,6 +3,10 @@
- markus@cvs.openbsd.org 2002/08/12 10:46:35 - markus@cvs.openbsd.org 2002/08/12 10:46:35
[ssh-agent.c] [ssh-agent.c]
make ssh-agent setgid, disallow ptrace. make ssh-agent setgid, disallow ptrace.
- espie@cvs.openbsd.org 2002/08/21 11:20:59
[sshd.8]
`RSA' updated to refer to `public key', where it matters.
okay markus@
20020820 20020820
- OpenBSD CVS Sync - OpenBSD CVS Sync
@ -1544,4 +1548,4 @@
- (stevesk) entropy.c: typo in debug message - (stevesk) entropy.c: typo in debug message
- (djm) ssh-keygen -i needs seeded RNG; report from markus@ - (djm) ssh-keygen -i needs seeded RNG; report from markus@
$Id: ChangeLog,v 1.2427 2002/09/04 06:20:26 djm Exp $ $Id: ChangeLog,v 1.2428 2002/09/04 06:24:55 djm Exp $

16
sshd.8
View File

@ -34,7 +34,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd.8,v 1.188 2002/08/12 17:30:35 stevesk Exp $ .\" $OpenBSD: sshd.8,v 1.189 2002/08/21 11:20:59 espie Exp $
.Dd September 25, 1999 .Dd September 25, 1999
.Dt SSHD 8 .Dt SSHD 8
.Os .Os
@ -389,9 +389,9 @@ Each RSA public key consists of the following fields, separated by
spaces: options, bits, exponent, modulus, comment. spaces: options, bits, exponent, modulus, comment.
Each protocol version 2 public key consists of: Each protocol version 2 public key consists of:
options, keytype, base64 encoded key, comment. options, keytype, base64 encoded key, comment.
The options fields The options field
are optional; its presence is determined by whether the line starts is optional; its presence is determined by whether the line starts
with a number or not (the option field never starts with a number). with a number or not (the options field never starts with a number).
The bits, exponent, modulus and comment fields give the RSA key for The bits, exponent, modulus and comment fields give the RSA key for
protocol version 1; the protocol version 1; the
comment field is not used for anything (but may be convenient for the comment field is not used for anything (but may be convenient for the
@ -402,7 +402,7 @@ or
.Dq ssh-rsa . .Dq ssh-rsa .
.Pp .Pp
Note that lines in this file are usually several hundred bytes long Note that lines in this file are usually several hundred bytes long
(because of the size of the RSA key modulus). (because of the size of the public key encoding).
You don't want to type them in; instead, copy the You don't want to type them in; instead, copy the
.Pa identity.pub , .Pa identity.pub ,
.Pa id_dsa.pub .Pa id_dsa.pub
@ -421,7 +421,7 @@ The following option specifications are supported (note
that option keywords are case-insensitive): that option keywords are case-insensitive):
.Bl -tag -width Ds .Bl -tag -width Ds
.It Cm from="pattern-list" .It Cm from="pattern-list"
Specifies that in addition to RSA authentication, the canonical name Specifies that in addition to public key authentication, the canonical name
of the remote host must be present in the comma-separated list of of the remote host must be present in the comma-separated list of
patterns patterns
.Pf ( Ql * .Pf ( Ql *
@ -433,7 +433,7 @@ patterns negated by prefixing them with
.Ql ! ; .Ql ! ;
if the canonical host name matches a negated pattern, the key is not accepted. if the canonical host name matches a negated pattern, the key is not accepted.
The purpose The purpose
of this option is to optionally increase security: RSA authentication of this option is to optionally increase security: public key authentication
by itself does not trust the network or name servers or anything (but by itself does not trust the network or name servers or anything (but
the key); however, if somebody somehow steals the key, the key the key); however, if somebody somehow steals the key, the key
permits an intruder to log in from anywhere in the world. permits an intruder to log in from anywhere in the world.
@ -451,7 +451,7 @@ one must not request a pty or should specify
.Cm no-pty . .Cm no-pty .
A quote may be included in the command by quoting it with a backslash. A quote may be included in the command by quoting it with a backslash.
This option might be useful This option might be useful
to restrict certain RSA keys to perform just a specific operation. to restrict certain public keys to perform just a specific operation.
An example might be a key that permits remote backups but nothing else. An example might be a key that permits remote backups but nothing else.
Note that the client may specify TCP/IP and/or X11 Note that the client may specify TCP/IP and/or X11
forwarding unless they are explicitly prohibited. forwarding unless they are explicitly prohibited.