blob: 0e6930aba71f7ea8ad4e3b1b65e4eb0fb5be8fbe [file] [log] [blame]
Damien Miller32aa1441999-10-29 09:15:49 +10001.\" -*- nroff -*-
2.\"
3.\" ssh-add.1
4.\"
5.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
6.\"
7.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
8.\" All rights reserved
9.\"
10.\" Created: Sat Apr 22 23:55:14 1995 ylo
11.\"
Damien Miller7b28dc52000-09-05 13:34:53 +110012.\" $Id: ssh-add.1,v 1.16 2000/09/05 02:34:54 djm Exp $
Damien Miller32aa1441999-10-29 09:15:49 +100013.\"
14.Dd September 25, 1999
15.Dt SSH-ADD 1
16.Os
17.Sh NAME
18.Nm ssh-add
Damien Millerad833b32000-08-23 10:46:23 +100019.Nd adds RSA or DSA identities for the authentication agent
Damien Miller32aa1441999-10-29 09:15:49 +100020.Sh SYNOPSIS
21.Nm ssh-add
Damien Miller10f6f6b1999-11-17 17:29:08 +110022.Op Fl lLdD
Damien Miller32aa1441999-10-29 09:15:49 +100023.Op Ar
Damien Miller22c77262000-04-13 12:26:34 +100024.Sh DESCRIPTION
Damien Miller32aa1441999-10-29 09:15:49 +100025.Nm
Damien Millerad833b32000-08-23 10:46:23 +100026adds RSA or DSA identities to the authentication agent,
Damien Miller32aa1441999-10-29 09:15:49 +100027.Xr ssh-agent 1 .
28When run without arguments, it adds the file
29.Pa $HOME/.ssh/identity .
Damien Miller450a7a12000-03-26 13:04:51 +100030Alternative file names can be given on the command line.
31If any file requires a passphrase,
Damien Miller32aa1441999-10-29 09:15:49 +100032.Nm
Damien Miller22c77262000-04-13 12:26:34 +100033asks for the passphrase from the user.
Damien Miller450a7a12000-03-26 13:04:51 +100034The Passphrase it is read from the user's tty.
Damien Miller32aa1441999-10-29 09:15:49 +100035.Pp
36The authentication agent must be running and must be an ancestor of
37the current process for
38.Nm
39to work.
40.Pp
41The options are as follows:
42.Bl -tag -width Ds
43.It Fl l
Damien Miller10f6f6b1999-11-17 17:29:08 +110044Lists fingerprints of all identities currently represented by the agent.
45.It Fl L
46Lists public key parameters of all identities currently represented by the agent.
Damien Miller32aa1441999-10-29 09:15:49 +100047.It Fl d
48Instead of adding the identity, removes the identity from the agent.
49.It Fl D
50Deletes all identities from the agent.
51.El
52.Sh FILES
53.Bl -tag -width Ds
Damien Milleraae6c611999-12-06 11:47:28 +110054.It Pa $HOME/.ssh/identity
Damien Miller450a7a12000-03-26 13:04:51 +100055Contains the RSA authentication identity of the user.
56This file should not be readable by anyone but the user.
Damien Miller32aa1441999-10-29 09:15:49 +100057Note that
58.Nm
59ignores this file if it is accessible by others.
60It is possible to
61specify a passphrase when generating the key; that passphrase will be
Damien Miller450a7a12000-03-26 13:04:51 +100062used to encrypt the private part of this file.
63This is the default file added by
Damien Miller32aa1441999-10-29 09:15:49 +100064.Nm
65when no other files have been specified.
Damien Millerad833b32000-08-23 10:46:23 +100066.It Pa $HOME/.ssh/id_dsa
67Contains the DSA authentication identity of the user.
Damien Miller7b28dc52000-09-05 13:34:53 +110068.El
Damien Milleraae6c611999-12-06 11:47:28 +110069.Sh ENVIRONMENT
70.Bl -tag -width Ds
71.It Ev "DISPLAY" and "SSH_ASKPASS"
Damien Miller32aa1441999-10-29 09:15:49 +100072If
73.Nm
74needs a passphrase, it will read the passphrase from the current
Damien Miller450a7a12000-03-26 13:04:51 +100075terminal if it was run from a terminal.
76If
Damien Miller32aa1441999-10-29 09:15:49 +100077.Nm
78does not have a terminal associated with it but
79.Ev DISPLAY
Damien Miller5428f641999-11-25 11:54:57 +110080and
81.Ev SSH_ASKPASS
82are set, it will execute the program specified by
83.Ev SSH_ASKPASS
Damien Miller450a7a12000-03-26 13:04:51 +100084and open an X11 window to read the passphrase.
85This is particularly useful when calling
Damien Miller32aa1441999-10-29 09:15:49 +100086.Nm
87from a
88.Pa .Xsession
Damien Miller450a7a12000-03-26 13:04:51 +100089or related script.
90(Note that on some machines it
Damien Miller32aa1441999-10-29 09:15:49 +100091may be necessary to redirect the input from
92.Pa /dev/null
93to make this work.)
Damien Miller7b28dc52000-09-05 13:34:53 +110094.El
Damien Miller32aa1441999-10-29 09:15:49 +100095.Sh AUTHOR
96Tatu Ylonen <ylo@cs.hut.fi>
97.Pp
98OpenSSH
99is a derivative of the original (free) ssh 1.2.12 release, but with bugs
Damien Miller450a7a12000-03-26 13:04:51 +1000100removed and newer features re-added.
101Rapidly after the 1.2.12 release,
102newer versions bore successively more restrictive licenses.
103This version of OpenSSH
Damien Miller32aa1441999-10-29 09:15:49 +1000104.Bl -bullet
105.It
Damien Millercfabe862000-04-20 23:27:27 +1000106has all components of a restrictive nature (i.e., patents)
Damien Miller32aa1441999-10-29 09:15:49 +1000107directly removed from the source code; any licensed or patented components
108are chosen from
109external libraries.
110.It
111has been updated to support ssh protocol 1.5.
112.It
Damien Miller22c77262000-04-13 12:26:34 +1000113contains added support for
Damien Miller32aa1441999-10-29 09:15:49 +1000114.Xr kerberos 8
115authentication and ticket passing.
116.It
117supports one-time password authentication with
118.Xr skey 1 .
119.El
Damien Miller32aa1441999-10-29 09:15:49 +1000120.Sh SEE ALSO
121.Xr ssh 1 ,
122.Xr ssh-agent 1 ,
123.Xr ssh-keygen 1 ,
124.Xr sshd 8 ,