Difference between revisions of "ssh-keygen"

from HTYP, the free directory anyone can edit if they can prove to me that they're not a spambot
Jump to navigation Jump to search
(bad syntax)
(corrections)
Line 3: Line 3:
 
[[ssh-keygen]] is a [[Linux command]] for generating [[ssh]] keys.
 
[[ssh-keygen]] is a [[Linux command]] for generating [[ssh]] keys.
  
Just typing the command without any arguments will generate a new key in <code>~/.ssh/id_rsa</code> (a prompt offers to let you change this), with an optional passphrase (also queried by prompt).
+
Just typing the command without any arguments will generate a new key-pair in <code>~/.ssh/</code> (a prompt offers to let you change this), with an optional passphrase (also queried by prompt). The files will be called <code>id_X</code> and <code>id_X.pub</code>, where X is replaced by whatever key type you choose ("rsa" was the default when last tested).
  
 
It can also be used to remove conflicting entries from the <code>.known-hosts</code> file.
 
It can also be used to remove conflicting entries from the <code>.known-hosts</code> file.

Revision as of 18:25, 21 March 2020

About

ssh-keygen is a Linux command for generating ssh keys.

Just typing the command without any arguments will generate a new key-pair in ~/.ssh/ (a prompt offers to let you change this), with an optional passphrase (also queried by prompt). The files will be called id_X and id_X.pub, where X is replaced by whatever key type you choose ("rsa" was the default when last tested).

It can also be used to remove conflicting entries from the .known-hosts file.

Pages

Note that there is bad syntax in the command format on the manpage. The manpage says:

ssh-keygen [-q] [-b bits] [-t dsa | ecdsa | ed25519 | rsa]

The clause which begins with [-t implies that you could type "-t dsa" or "ecdsa" or "ed25519" or "rsa", but the actual choices are "-t dsa" or "-t ecdsa" or "-t ed25519" or "-t rsa". The actual syntax should be:

ssh-keygen [-q] [-b bits] [-t [dsa | ecdsa | ed25519 | rsa]]

Links