summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDamien Miller <djm@cvs.openbsd.org>2024-11-27 13:00:24 +0000
committerDamien Miller <djm@cvs.openbsd.org>2024-11-27 13:00:24 +0000
commit221ab03fbe3c743b948a4ca62b51a493273f6a6d (patch)
tree12d78b068e7fe6034c02669f2206a474b239a7d6
parentfa8b75388d65a2beea66fd7f70d6db2626ae3382 (diff)
mention that biometrics may be used for FIDO key user verification as
well as PIN. Prompted by Zack Newman, ok jmc@
-rw-r--r--usr.bin/ssh/ssh-keygen.18
1 files changed, 3 insertions, 5 deletions
diff --git a/usr.bin/ssh/ssh-keygen.1 b/usr.bin/ssh/ssh-keygen.1
index 06f0555a4ec..00246a861ac 100644
--- a/usr.bin/ssh/ssh-keygen.1
+++ b/usr.bin/ssh/ssh-keygen.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ssh-keygen.1,v 1.233 2024/08/17 08:35:04 djm Exp $
+.\" $OpenBSD: ssh-keygen.1,v 1.234 2024/11/27 13:00:23 djm Exp $
.\"
.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -35,7 +35,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: August 17 2024 $
+.Dd $Mdocdate: November 27 2024 $
.Dt SSH-KEYGEN 1
.Os
.Sh NAME
@@ -1041,13 +1041,11 @@ format.
.Pp
.It Ic verify-required
Require signatures made using this key indicate that the user was first
-verified.
+verified, e.g. by PIN or on-token biometrics.
This option only makes sense for the FIDO authenticator algorithms
.Cm ecdsa-sk
and
.Cm ed25519-sk .
-Currently PIN authentication is the only supported verification method,
-but other methods may be supported in the future.
.El
.Pp
At present, no standard options are valid for host keys.