Man page or keyword search:   man All Sections 1 - General Commands 2 - System Calls 3 - Subroutines, Functions 4 - Special Files 5 - File Formats 6 - Games and Screensavers 7 - Macros and Conventions 8 - Maintenence Commands 9 - Kernel Interface New Commands Server 4.4BSD AIX Alpinelinux Archlinux Aros BSDOS BSDi Bifrost CentOS Cygwin Darwin Debian DigitalUNIX DragonFly ElementaryOS Fedora FreeBSD Gentoo GhostBSD HP-UX Haiku Hurd IRIX Inferno JazzOS Kali Knoppix LinuxMint MacOSX Mageia Mandriva Manjaro Minix MirBSD NeXTSTEP NetBSD OPENSTEP OSF1 OpenBSD OpenDarwin OpenIndiana OpenMandriva OpenServer OpenSuSE OpenVMS Oracle PC-BSD Peanut Pidora Plan9 QNX Raspbian RedHat Scientific Slackware SmartOS Solaris SuSE SunOS Syllable Tru64 UNIXv7 Ubuntu Ultrix UnixWare Xenix YellowDog aLinux   10987 pages apropos Keyword Search (all sections) Output format html ascii pdf view pdf save postscript

SSH-KEYSIGN(8)							SSH-KEYSIGN(8)

NAME
       ssh-keysign - ssh helper program for host-based authentication

SYNOPSIS
       ssh-keysign

DESCRIPTION
       ssh-keysign  is used by ssh(1) to access the local host keys and gener‐
       ate the digital signature  required  during  host-based	authentication
       with SSH protocol version 2.

       ssh-keysign  is	disabled  by  default  and  can only be enabled in the
       global client configuration  file  /opt/ssh/etc/ssh_config  by  setting
       EnableSSHKeysign to ``yes''.

       ssh-keysign is not intended to be invoked by the user, but from ssh(1).
       See ssh(1) and sshd(8) for more information about host-based  authenti‐
       cation.

FILES
       /opt/ssh/etc/ssh_config
	      Controls whether ssh-keysign is enabled.

       /opt/ssh/etc/ssh_host_dsa_key, /opt/ssh/etc/ssh_host_rsa_key
	      These  files  contain the private parts of the host keys used to
	      generate the digital signature.  They should be owned  by	 root,
	      readable only by privileged users, and not accessible to others.
	      Since they are readable only by  privileged  users,  ssh-keysign
	      must  be	set-uid to a privileged user if host-based authentica‐
	      tion is used.

HISTORY
       HP-UX Secure Shell is based on OpenSSH version 5.2p1

SEE ALSO
       ssh(1), ssh-keygen(1), ssh_config(5), sshd(8)

HISTORY
       ssh-keysign first appeared in OpenBSD 3.2 .

AUTHORS
       Markus Friedl <markus@openbsd.org>

								SSH-KEYSIGN(8)

Vote for polarhome