summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/ssh.1
AgeCommit message (Collapse)Author
2008-11-09typo fixed (overriden -> overridden)Tobias Stoeckmann
ok espie, jmc
2008-11-05add dynamic forward escape command line; ok djm@Kevin Steves
2008-10-08Add -y option to force logging via syslog rather than stderr.Damien Miller
Useful for daemonised ssh connection (ssh -f). Patch originally from and ok'd by markus@
2008-07-02When forking after authentication ("ssh -f") with ExitOnForwardFailureDamien Miller
enabled, delay the fork until after replies for any -R forwards have been seen. Allows for robust detection of -R forward failure when using -f (similar to bz#92); ok dtucker@
2008-06-26add VisualHostKey to the list of options listed in -o;Jason McIntyre
2008-06-26Move SSH Fingerprint Visualization away from sharing the config optionAlexander von Gernler
CheckHostIP to an own config option named VisualHostKey. While there, fix the behaviour that ssh would draw a random art picture on every newly seen host even when the option was not enabled. prodded by deraadt@, discussions, help and ok markus@ djm@ dtucker@
2008-06-13Explain the use of SSH fpr visualization using random art, and cite theAlexander von Gernler
original scientific paper inspiring that technique. Much help with English and nroff by jmc@, thanks.
2008-02-11bump Mdocdate for pages committed in "febuary", necessary becauseJason McIntyre
of a typo in rcs.c;
2008-02-09Document the correct permissions for the ~/.ssh/ directory.Ryan Thomas McBride
ok jmc
2008-01-19satisfy the pedants: -q does not suppress all diagnostic messages (e.g.Damien Miller
some commandline parsing warnings go unconditionally to stdout).
2007-06-12add -K to SYNOPSIS;Jason McIntyre
2007-06-12Add "-K" flag for ssh to set GSSAPIAuthentication=yes andDamien Miller
GSSAPIDelegateCredentials=yes. This is symmetric with -k (disable GSSAPI) and is useful for hosts with /home on Kerberised NFS; bz #1312 patch from Markus.Kuhn AT cl.cam.ac.uk; ok dtucker@ markus@
2007-06-07Add a new MAC algorithm for data integrity, UMAC-64 (not default yet, mustPeter Valchev
specify umac-64@openssh.com). Provides about 20% end-to-end speedup compared to hmac-md5. Represents a different approach to message authentication to that of HMAC that may be beneficial if HMAC based on one of its underlying hash algorithms is found to be vulnerable to a new attack. http://www.ietf.org/rfc/rfc4418.txt in conjunction with and OK djm@
2007-05-31convert to new .Dd format;Jason McIntyre
2006-12-11add rfc 4716 (public key format); ok jmcMarkus Friedl
2006-10-28correct/expand example of usage of -w; ok jmc@ stevesk@Otto Moerbeek
2006-09-25Change "a SSH" to "an SSH". Hurray, I'm not the only one whoRay Lai
pronounces "SSH" as "ess-ess-aich". OK jmc@ and stevesk@.
2006-07-11add ExitOnForwardFailure: terminate the connection if ssh(1)Markus Friedl
cannot set up all requested dynamic, local, and remote port forwardings. ok djm, dtucker, stevesk, jmc
2006-07-02use -KR[bind_address:]port here; ok djm@Kevin Steves
2006-07-02more details and clarity for tun(4) device forwarding; ok and helpKevin Steves
jmc@
2006-05-29add GSSAPI to the list of authentication methods supported;Jason McIntyre
2006-03-22simplify SSHFP example; ok jmc@Jakob Schlyter
2006-03-16Add RFC4419 (Diffie-Hellman group exchange KEX) to the list of SSH RFCsDamien Miller
that OpenSSH supports
2006-02-24more consistency fixes;Jason McIntyre
2006-02-15remove the IETF draft references and replace them with some updated RFCs;Jason McIntyre
list from markus;
2006-02-06make this a little less ambiguous...Jason McIntyre
2006-02-06- typo fixMathieu Sauve-Frankel
ok jmc@
2006-01-30remove an incorrect sentence;Jason McIntyre
reported by roumen petrov; ok djm markus
2006-01-26add a section on verifying host keys in dns;Jason McIntyre
written with a lot of help from jakob; feedback dtucker/markus; ok markus
2006-01-20Document RekeyLimit. Based on patch from jan.iven at cern.ch from mindrot #1056Darren Tucker
with feedback from jmc, djm and markus; ok jmc@ djm@
2006-01-18add a section on ssh-based vpn, based on reyk's README.tun;Jason McIntyre
2006-01-15correction from deraadtJason McIntyre
2006-01-12back out a sentence - AUTHENTICATION already documents this;Jason McIntyre
2006-01-12refer to `TCP' rather than `TCP/IP' in the context of connectionJason McIntyre
forwarding; ok markus
2006-01-12split sections on tcp and x11 forwarding into two sections.Jason McIntyre
add an example in the tcp section, based on sth i wrote for ssh faq; help + ok: djm markus dtucker
2006-01-06final round of whacking FILES for duplicate info, and some consistencyJason McIntyre
fixes; ok djm
2006-01-06weed out some duplicate info in the known_hosts FILES entries;Jason McIntyre
ok djm
2006-01-04-.Xr gzip 1 ,Jason McIntyre
2006-01-04+.Xr ssh-keyscan 1 ,Jason McIntyre
2006-01-04remove .Xr's to rsh(1) and telnet(1): they are hardly needed;Jason McIntyre
2006-01-04chop out some duplication in the .{r,s}hosts/{h,sh}osts.equiv FILESJason McIntyre
entries; ok markus
2006-01-03tweak the description of ~/.ssh/environmentJason McIntyre
2006-01-03put FILES in some sort of order: sort by pathnameJason McIntyre
2006-01-03use a larger width for the ENVIRONMENT list;Jason McIntyre
2006-01-03move FILES to a -compact list, and make each files an item in that list.Jason McIntyre
this avoids nastly line wrap when we have long pathnames, and treats each file as a separate item; remove the .Pa too, since it is useless.
2006-01-02start to cut some duplicate info from FILES;Jason McIntyre
help/ok djm
2005-12-31.Nm does not require an argument;Jason McIntyre
2005-12-31clean up ENVIRONMENT a little;Jason McIntyre
2005-12-31merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVERJason McIntyre
AUTHENTICATION" sections into "AUTHENTICATION"; some rewording done to make the text read better, plus some improvements from djm; ok djm
2005-12-31document -MM; ok djm@Kevin Steves