summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/ssh-add.1
diff options
context:
space:
mode:
authordjm <djm@openbsd.org>2019-10-31 21:19:56 +0000
committerdjm <djm@openbsd.org>2019-10-31 21:19:56 +0000
commit8867a42f6e51fdcd31198eb6283fd95976795cb9 (patch)
tree314b2b8c6c0f3013f82d7d8046be30de3db9497a /usr.bin/ssh/ssh-add.1
parentadd new agent key constraint for U2F/FIDO provider (diff)
downloadwireguard-openbsd-8867a42f6e51fdcd31198eb6283fd95976795cb9.tar.xz
wireguard-openbsd-8867a42f6e51fdcd31198eb6283fd95976795cb9.zip
ssh-add support for U2F/FIDO keys
Diffstat (limited to 'usr.bin/ssh/ssh-add.1')
-rw-r--r--usr.bin/ssh/ssh-add.113
1 files changed, 11 insertions, 2 deletions
diff --git a/usr.bin/ssh/ssh-add.1 b/usr.bin/ssh/ssh-add.1
index d4e1c603be6..9dc44fa74dc 100644
--- a/usr.bin/ssh/ssh-add.1
+++ b/usr.bin/ssh/ssh-add.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ssh-add.1,v 1.69 2019/01/21 12:53:35 djm Exp $
+.\" $OpenBSD: ssh-add.1,v 1.70 2019/10/31 21:19:56 djm Exp $
.\"
.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
.\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@@ -35,7 +35,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: January 21 2019 $
+.Dd $Mdocdate: October 31 2019 $
.Dt SSH-ADD 1
.Os
.Sh NAME
@@ -46,6 +46,7 @@
.Op Fl cDdkLlqvXx
.Op Fl E Ar fingerprint_hash
.Op Fl t Ar life
+.Op Fl S Ar provider
.Op Ar
.Nm ssh-add
.Fl s Ar pkcs11
@@ -134,6 +135,11 @@ Be quiet after a successful operation.
.It Fl s Ar pkcs11
Add keys provided by the PKCS#11 shared library
.Ar pkcs11 .
+.It Fl S Ar provider
+Specifies a path to a security key provider library that will be used when
+adding any security key-hosted keys, overriding the default of using the
+.Ev "SSH_SK_PROVIDER"
+environment variable to specify a provider.
.It Fl T Ar pubkey ...
Tests whether the private keys that correspond to the specified
.Ar pubkey
@@ -189,6 +195,9 @@ to make this work.)
Identifies the path of a
.Ux Ns -domain
socket used to communicate with the agent.
+.It Ev SSH_SK_PROVIDER
+Specifies the path to a security key provider library used to interact with
+hardware security keys.
.El
.Sh FILES
.Bl -tag -width Ds