ssh-keygen: Difference between revisions

from HTYP, the free directory anyone can edit if they can prove to me that they're not a spambot
Created page with "category:Linux commands ==About== ssh-keygen is a Linux command for generating ssh keys. Just typing the command without any arguments will generate a new key in..."
 
No edit summary
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
[[category:Linux commands]]
[[category:Linux commands]]
==About==
==About==
[[ssh-keygen]] is a Linux command for generating [[ssh]] keys.
[[ssh-keygen]] is a [[Linux command]] for generating [[ssh]] keys.


Just typing the command without any arguments will generate a new key in <code>~/.ssh/id_rsa</code> (a prompt offers to let you change this), with an optional passphrase (also queried by prompt).
Just typing the command without any arguments will generate a new key-pair in <code>~/.ssh/</code> (a prompt offers to let you change this), with an optional passphrase (also queried by prompt). The files will be called <code>id_X</code> and <code>id_X.pub</code>, where X is replaced by whatever key type you choose ("rsa" was the default when last tested).


It can also be used to remove conflicting entries from the <code>.known-hosts</code> file.
It can also be used to remove conflicting entries from the <code>.known-hosts</code> file.
==Pages==
* {{l/manpage}} for this system
===Notes===
Note that there is bad syntax in the command format on the manpage. The manpage says:
ssh-keygen [-q] [-b bits] [-t dsa | ecdsa | ed25519 | rsa]
The clause which begins with <code>[-t</code> implies that you could type "-t dsa" or "ecdsa" or "ed25519" or "rsa", but the actual choices are "-t dsa" or "-t ecdsa" or "-t ed25519" or "-t rsa". The actual syntax should be:
ssh-keygen [-q] [-b bits] [-t [dsa | ecdsa | ed25519 | rsa]]
==How To==
To create a new ed25519 key:
ssh-keygen -t ed25519
==Links==
* {{wikipedia}}

Latest revision as of 19:45, 18 April 2023

About

ssh-keygen is a Linux command for generating ssh keys.

Just typing the command without any arguments will generate a new key-pair in ~/.ssh/ (a prompt offers to let you change this), with an optional passphrase (also queried by prompt). The files will be called id_X and id_X.pub, where X is replaced by whatever key type you choose ("rsa" was the default when last tested).

It can also be used to remove conflicting entries from the .known-hosts file.

Pages

Notes

Note that there is bad syntax in the command format on the manpage. The manpage says:

ssh-keygen [-q] [-b bits] [-t dsa | ecdsa | ed25519 | rsa]

The clause which begins with [-t implies that you could type "-t dsa" or "ecdsa" or "ed25519" or "rsa", but the actual choices are "-t dsa" or "-t ecdsa" or "-t ed25519" or "-t rsa". The actual syntax should be:

ssh-keygen [-q] [-b bits] [-t [dsa | ecdsa | ed25519 | rsa]]

How To

To create a new ed25519 key:

ssh-keygen -t ed25519