diff options
Diffstat (limited to 'templates/man1/ssh-keygen.1.pot')
-rw-r--r-- | templates/man1/ssh-keygen.1.pot | 432 |
1 files changed, 131 insertions, 301 deletions
diff --git a/templates/man1/ssh-keygen.1.pot b/templates/man1/ssh-keygen.1.pot index fe086639..78269ff0 100644 --- a/templates/man1/ssh-keygen.1.pot +++ b/templates/man1/ssh-keygen.1.pot @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" -"POT-Creation-Date: 2024-03-01 17:09+0100\n" +"POT-Creation-Date: 2024-05-01 15:54+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: LANGUAGE <LL@li.org>\n" @@ -17,7 +17,7 @@ msgstr "" "Content-Transfer-Encoding: 8bit\n" #. type: Dd -#: archlinux debian-unstable opensuse-tumbleweed +#: archlinux debian-unstable opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "$Mdocdate: September 4 2023 $" msgstr "" @@ -57,7 +57,8 @@ msgid "SYNOPSIS" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "E<.Nm ssh-keygen> E<.Op Fl q> E<.Op Fl a Ar rounds> E<.Op Fl b Ar bits> E<." "Op Fl C Ar comment> E<.Op Fl f Ar output_keyfile> E<.Op Fl m Ar format> E<." @@ -115,7 +116,7 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-unstable opensuse-tumbleweed +#: archlinux debian-unstable opensuse-leap-15-6 opensuse-tumbleweed msgid "" "The type of key to be generated is specified with the E<.Fl t> option. If " "invoked without any arguments, E<.Nm> will generate an Ed25519 key." @@ -219,7 +220,7 @@ msgid "Fl A" msgstr "" #. type: Plain text -#: archlinux opensuse-tumbleweed +#: archlinux opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Generate host keys of all default key types (rsa, ecdsa, and ed25519) if " "they do not already exist. The host keys are generated with the default key " @@ -237,7 +238,8 @@ msgid "Fl a Ar rounds" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "When saving a private key, this option specifies the number of KDF (key " "derivation function, currently E<.Xr bcrypt_pbkdf 3>) rounds used. Higher " @@ -432,7 +434,8 @@ msgid "Fl h" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "When signing a key, create a host certificate instead of a user " "certificate. See the E<.Sx CERTIFICATES> section for details." @@ -446,7 +449,8 @@ msgid "Fl I Ar certificate_identity" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Specify the key identity when signing a public key. See the E<.Sx " "CERTIFICATES> section for details." @@ -478,7 +482,8 @@ msgid "Fl K" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Download resident keys from a FIDO authenticator. Public and private key " "files will be written to the current directory for each downloaded key. If " @@ -614,7 +619,8 @@ msgid "Fl n Ar principals" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Specify one or more principals (user or host names) to be included in a " "certificate when signing a key. Multiple principals may be specified, " @@ -653,27 +659,31 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "When generating FIDO authenticator-backed keys, the options listed in the E<." "Sx FIDO AUTHENTICATOR> section may be specified." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "When performing signature-related options using the E<.Fl Y> flag, the " "following options are accepted:" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Cm hashalg Ns = Ns Ar algorithm" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Selects the hash algorithm to use for hashing the message to be signed. " "Valid algorithms are E<.Dq sha256> and E<.Dq sha512.> The default is E<.Dq " @@ -681,25 +691,29 @@ msgid "" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Cm print-pubkey" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Print the full public key to standard output after signature verification." msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Cm verify-time Ns = Ns Ar timestamp" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Specifies a time to use when validating signatures instead of the current " "time. The time may be specified as a date or time in the YYYYMMDD[Z] or in " @@ -709,14 +723,14 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-unstable opensuse-tumbleweed +#: archlinux debian-unstable opensuse-leap-15-6 opensuse-tumbleweed msgid "" "When generating SSHFP DNS records from public keys using the E<.Fl r> flag, " "the following options are accepted:" msgstr "" #. type: Plain text -#: archlinux debian-unstable opensuse-tumbleweed +#: archlinux debian-unstable opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Selects a hash algorithm to use when printing SSHFP records using the E<.Fl " "D> flag. Valid algorithms are E<.Dq sha1> and E<.Dq sha256>. The default " @@ -825,7 +839,8 @@ msgid "Fl s Ar ca_key" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Certify (sign) a public key using the specified CA key. See the E<.Sx " "CERTIFICATES> section for details." @@ -873,7 +888,8 @@ msgid "Fl U" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "When used in combination with E<.Fl s> or E<.Fl Y Cm sign>, this option " "indicates that a CA key resides in a E<.Xr ssh-agent 1>. See the E<.Sx " @@ -913,31 +929,36 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "The start time may be specified as:" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "The string E<.Dq always> to indicate the certificate has no specified start " "time." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "A date or time in the system time zone formatted as YYYYMMDD or " "YYYYMMDDHHMM[SS]." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "A date or time in the UTC time zone as YYYYMMDDZ or YYYYMMDDHHMM[SS]Z." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "A relative time before the current system time consisting of a minus sign " "followed by an interval in the format described in the TIME FORMATS section " @@ -945,26 +966,30 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "A raw seconds since epoch (Jan 1 1970 00:00:00 UTC) as a hexadecimal number " "beginning with E<.Dq 0x>." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "The end time may be specified similarly to the start time:" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "The string E<.Dq forever> to indicate the certificate has no specified end " "time." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "A relative time after the current system time consisting of a plus sign " "followed by an interval in the format described in the TIME FORMATS section " @@ -972,86 +997,101 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "For example:" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "+52w1d" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "Valid from now to 52 weeks and one day from now." msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "-4w:+4w" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "Valid from four weeks ago to four weeks from now." msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "20100101123000:20110101123000" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "Valid from 12:30 PM, January 1st, 2010 to 12:30 PM, January 1st, 2011." msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "20100101123000Z:20110101123000Z" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Similar, but interpreted in the UTC time zone rather than the system time " "zone." msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "-1d:20110101" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "Valid from yesterday to midnight, January 1st, 2011." msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "0x1:0x2000000000" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "Valid from roughly early 1970 to May 2033." msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "-1m:forever" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "Valid from one minute ago and never expiring." msgstr "" @@ -1106,13 +1146,15 @@ msgid "" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Fl Y Cm match-principals" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Find principal matching the principal name provided using the E<.Fl I> flag " "in the authorized signers file specified using the E<.Fl f> flag. If one or " @@ -1147,7 +1189,7 @@ msgid "Fl Y Cm sign" msgstr "" #. type: Plain text -#: archlinux debian-unstable opensuse-tumbleweed +#: archlinux debian-unstable opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Cryptographically sign a file or some data using an SSH key. When signing, " "E<.Nm> accepts zero or more files to sign on the command-line - if no files " @@ -1211,13 +1253,15 @@ msgid "" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Fl Z Ar cipher" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Specifies the cipher to use for encryption when writing an OpenSSH-format " "private key file. The list of available ciphers may be obtained using E<.Qq " @@ -1323,7 +1367,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Screened DH groups may be installed in E<.Pa /etc/ssh/moduli>. It is " "important that this file contains moduli of a range of bit lengths." @@ -1813,7 +1858,8 @@ msgid "At present, no standard options are valid for host keys." msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Finally, certificates may be defined with a validity lifetime. The E<.Fl V> " "option allows specification of certificate start and end times. A " @@ -1823,7 +1869,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "For certificates to be used for user or host authentication, the CA public " "key must be trusted by E<.Xr sshd 8> or E<.Xr ssh 1>. Refer to those manual " @@ -1831,13 +1878,15 @@ msgid "" msgstr "" #. type: Sh -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "FIDO AUTHENTICATOR" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "E<.Nm> is able to generate FIDO authenticator-backed keys, after which they " "may be used much like any other key type supported by OpenSSH, so long as " @@ -1853,7 +1902,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "The options that are valid for FIDO keys are:" msgstr "" @@ -1881,7 +1931,8 @@ msgid "Cm challenge Ns = Ns Ar path" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Specifies a path to a challenge string that will be passed to the FIDO " "authenticator during key generation. The challenge string may be used as " @@ -1897,7 +1948,8 @@ msgid "Cm device" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Explicitly specify a E<.Xr fido 4> device to use, rather than letting the " "authenticator middleware select one." @@ -1927,7 +1979,8 @@ msgid "Cm resident" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Indicate that the key handle should be stored on the FIDO authenticator " "itself. This makes it easier to use the authenticator on multiple " @@ -1963,7 +2016,8 @@ msgid "Cm verify-required" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Indicate that this private key should require user verification for each " "signature. Not all FIDO authenticators support this option. Currently PIN " @@ -1979,7 +2033,8 @@ msgid "Cm write-attestation Ns = Ns Ar path" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "May be used at key generation time to record the attestation data returned " "from FIDO authenticators during key generation. This information is " @@ -2164,7 +2219,8 @@ msgid "" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "The principals field is a pattern-list (see PATTERNS in E<.Xr ssh_config " "5>) consisting of one or more comma-separated USER@DOMAIN identity patterns " @@ -2199,7 +2255,8 @@ msgid "" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Cm namespaces Ns = Ns namespace-list" msgstr "" @@ -2215,13 +2272,15 @@ msgid "" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Cm valid-after Ns = Ns timestamp" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Indicates that the key is valid for use at or after the specified timestamp, " "which may be a date or time in the YYYYMMDD[Z] or YYYYMMDDHHMM[SS][Z] " @@ -2231,13 +2290,15 @@ msgid "" msgstr "" #. type: It -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed #, no-wrap msgid "Cm valid-before Ns = Ns timestamp" msgstr "" #. type: Plain text -#: archlinux debian-bookworm debian-unstable opensuse-tumbleweed +#: archlinux debian-bookworm debian-unstable opensuse-leap-15-6 +#: opensuse-tumbleweed msgid "" "Indicates that the key is valid for use at or before the specified timestamp." msgstr "" @@ -2465,7 +2526,7 @@ msgid "$Mdocdate: September 10 2022 $" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm msgid "" "The type of key to be generated is specified with the E<.Fl t> option. If " "invoked without any arguments, E<.Nm> will generate an RSA key." @@ -2493,7 +2554,7 @@ msgid "" msgstr "" #. type: Plain text -#: debian-bookworm opensuse-leap-15-6 +#: debian-bookworm msgid "" "Cryptographically sign a file or some data using a SSH key. When signing, " "E<.Nm> accepts zero or more files to sign on the command-line - if no files " @@ -2502,234 +2563,3 @@ msgid "" "appended, or to standard output if the message to be signed was read from " "standard input." msgstr "" - -#. type: Dd -#: opensuse-leap-15-6 -#, no-wrap -msgid "$Mdocdate: September 9 2020 $" -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"E<.Nm ssh-keygen> E<.Op Fl q> E<.Op Fl a Ar rounds> E<.Op Fl b Ar bits> E<." -"Op Fl C Ar comment> E<.Op Fl f Ar output_keyfile> E<.Op Fl m Ar format> E<." -"Op Fl N Ar new_passphrase> E<.Op Fl O Ar option> E<.Op Fl t Cm dsa | ecdsa | " -"ecdsa-sk | ed25519 | ed25519-sk | rsa> E<.Op Fl w Ar provider> E<.Nm ssh-" -"keygen> E<.Fl p> E<.Op Fl a Ar rounds> E<.Op Fl f Ar keyfile> E<.Op Fl m Ar " -"format> E<.Op Fl N Ar new_passphrase> E<.Op Fl P Ar old_passphrase> E<.Nm " -"ssh-keygen> E<.Fl i> E<.Op Fl f Ar input_keyfile> E<.Op Fl m Ar key_format> " -"E<.Nm ssh-keygen> E<.Fl e> E<.Op Fl f Ar input_keyfile> E<.Op Fl m Ar " -"key_format> E<.Nm ssh-keygen> E<.Fl y> E<.Op Fl f Ar input_keyfile> E<.Nm " -"ssh-keygen> E<.Fl c> E<.Op Fl a Ar rounds> E<.Op Fl C Ar comment> E<.Op Fl f " -"Ar keyfile> E<.Op Fl P Ar passphrase> E<.Nm ssh-keygen> E<.Fl l> E<.Op Fl v> " -"E<.Op Fl E Ar fingerprint_hash> E<.Op Fl f Ar input_keyfile> E<.Nm ssh-" -"keygen> E<.Fl B> E<.Op Fl f Ar input_keyfile> E<.Nm ssh-keygen> E<.Fl D Ar " -"pkcs11> E<.Nm ssh-keygen> E<.Fl F Ar hostname> E<.Op Fl lv> E<.Op Fl f Ar " -"known_hosts_file> E<.Nm ssh-keygen> E<.Fl H> E<.Op Fl f Ar known_hosts_file> " -"E<.Nm ssh-keygen> E<.Fl K> E<.Op Fl a Ar rounds> E<.Op Fl w Ar provider> E<." -"Nm ssh-keygen> E<.Fl R Ar hostname> E<.Op Fl f Ar known_hosts_file> E<.Nm " -"ssh-keygen> E<.Fl r Ar hostname> E<.Op Fl g> E<.Op Fl f Ar input_keyfile> E<." -"Nm ssh-keygen> E<.Fl M Cm generate> E<.Op Fl O Ar option> E<.Ar output_file> " -"E<.Nm ssh-keygen> E<.Fl M Cm screen> E<.Op Fl f Ar input_file> E<.Op Fl O Ar " -"option> E<.Ar output_file> E<.Nm ssh-keygen> E<.Fl I Ar " -"certificate_identity> E<.Fl s Ar ca_key> E<.Op Fl hU> E<.Op Fl D Ar " -"pkcs11_provider> E<.Op Fl n Ar principals> E<.Op Fl O Ar option> E<.Op Fl V " -"Ar validity_interval> E<.Op Fl z Ar serial_number> E<.Ar> E<.Nm ssh-keygen> " -"E<.Fl L> E<.Op Fl f Ar input_keyfile> E<.Nm ssh-keygen> E<.Fl A> E<.Op Fl a " -"Ar rounds> E<.Op Fl f Ar prefix_path> E<.Nm ssh-keygen> E<.Fl k> E<.Fl f Ar " -"krl_file> E<.Op Fl u> E<.Op Fl s Ar ca_public> E<.Op Fl z Ar version_number> " -"E<.Ar> E<.Nm ssh-keygen> E<.Fl Q> E<.Op Fl l> E<.Fl f Ar krl_file> E<.Ar> E<." -"Nm ssh-keygen> E<.Fl Y Cm find-principals> E<.Fl s Ar signature_file> E<.Fl " -"f Ar allowed_signers_file> E<.Nm ssh-keygen> E<.Fl Y Cm check-novalidate> E<." -"Fl n Ar namespace> E<.Fl s Ar signature_file> E<.Nm ssh-keygen> E<.Fl Y Cm " -"sign> E<.Fl f Ar key_file> E<.Fl n Ar namespace> E<.Ar> E<.Nm ssh-keygen> E<." -"Fl Y Cm verify> E<.Fl f Ar allowed_signers_file> E<.Fl I Ar signer_identity> " -"E<.Fl n Ar namespace> E<.Fl s Ar signature_file> E<.Op Fl r Ar " -"revocation_file>" -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"For each of the key types (rsa, dsa, ecdsa and ed25519) for which host keys " -"do not exist, generate the host keys with the default key file path, an " -"empty passphrase, default bits for the key type, and default comment. If E<." -"Fl f> has also been specified, its argument is used as a prefix to the " -"default path for the resulting host key files. This is used by E<.Pa /etc/" -"rc> to generate new host keys." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"When saving a private key, this option specifies the number of KDF (key " -"derivation function) rounds used. Higher numbers result in slower " -"passphrase verification and increased resistance to brute-force password " -"cracking (should the keys be stolen). The default is 16 rounds." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"When signing a key, create a host certificate instead of a user " -"certificate. Please see the E<.Sx CERTIFICATES> section for details." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Specify the key identity when signing a public key. Please see the E<.Sx " -"CERTIFICATES> section for details." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Download resident keys from a FIDO authenticator. Public and private key " -"files will be written to the current directory for each downloaded key. If " -"multiple FIDO authenticators are attached, keys will be downloaded from the " -"first touched authenticator." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Specify one or more principals (user or host names) to be included in a " -"certificate when signing a key. Multiple principals may be specified, " -"separated by commas. Please see the E<.Sx CERTIFICATES> section for details." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"When generating a key that will be hosted on a FIDO authenticator, this flag " -"may be used to specify key-specific options. Those supported at present are:" -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Specifies a path to a challenge string that will be passed to the FIDO token " -"during key generation. The challenge string may be used as part of an out-" -"of-band protocol for key enrollment (a random challenge is used by default)." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Explicitly specify a E<.Xr fido 4> device to use, rather than letting the " -"token middleware select one." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Indicate that the key should be stored on the FIDO authenticator itself. " -"Resident keys may be supported on FIDO2 tokens and typically require that a " -"PIN be set on the token prior to generation. Resident keys may be loaded " -"off the token using E<.Xr ssh-add 1>." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Indicate that this private key should require user verification for each " -"signature. Not all FIDO tokens support this option. Currently PIN " -"authentication is the only supported verification method, but other methods " -"may be supported in the future." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"May be used at key generation time to record the attestation data returned " -"from FIDO tokens during key generation. Please note that this information " -"is potentially sensitive. By default, this information is discarded." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Certify (sign) a public key using the specified CA key. Please see the E<." -"Sx CERTIFICATES> section for details." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"When used in combination with E<.Fl s>, this option indicates that a CA key " -"resides in a E<.Xr ssh-agent 1>. See the E<.Sx CERTIFICATES> section for " -"more information." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"The start time may be specified as the string E<.Dq always> to indicate the " -"certificate has no specified start time, a date in YYYYMMDD format, a time " -"in YYYYMMDDHHMM[SS] format, a relative time (to the current time) consisting " -"of a minus sign followed by an interval in the format described in the TIME " -"FORMATS section of E<.Xr sshd_config 5>." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"The end time may be specified as a YYYYMMDD date, a YYYYMMDDHHMM[SS] time, a " -"relative time starting with a plus character or the string E<.Dq forever> to " -"indicate that the certificate has no expiry date." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"For example: E<.Dq +52w1d> (valid from now to 52 weeks and one day from " -"now), E<.Dq -4w:+4w> (valid from four weeks ago to four weeks from now), E<." -"Dq 20100101123000:20110101123000> (valid from 12:30 PM, January 1st, 2010 to " -"12:30 PM, January 1st, 2011), E<.Dq -1d:20110101> (valid from yesterday to " -"midnight, January 1st, 2011). E<.Dq -1m:forever> (valid from one minute ago " -"and never expiring)." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Screened DH groups may be installed in E<.Pa /etc/ssh/moduli>. It is " -"important that this file contains moduli of a range of bit lengths and that " -"both ends of a connection share common moduli." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"Finally, certificates may be defined with a validity lifetime. The E<.Fl V> " -"option allows specification of certificate start and end times. A " -"certificate that is presented at a time outside this range will not be " -"considered valid. By default, certificates are valid from E<.Ux> Epoch to " -"the distant future." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"For certificates to be used for user or host authentication, the CA public " -"key must be trusted by E<.Xr sshd 8> or E<.Xr ssh 1>. Please refer to those " -"manual pages for details." -msgstr "" - -#. type: Plain text -#: opensuse-leap-15-6 -msgid "" -"The principals field is a pattern-list (See PATTERNS in E<.Xr ssh_config " -"5>) consisting of one or more comma-separated USER@DOMAIN identity patterns " -"that are accepted for signing. When verifying, the identity presented via " -"the E<.Fl I> option must match a principals pattern in order for the " -"corresponding key to be considered acceptable for verification." -msgstr "" - -#. type: It -#: opensuse-leap-15-6 -#, no-wrap -msgid "Cm namespaces=\"namespace-list\"" -msgstr "" |