1
1
<?xml version="1.0" encoding="UTF-8"?>
2
2
<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3
3
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4
<!ENTITY VERSION "1.0">
4
5
<!ENTITY COMMANDNAME "mandos-keygen">
5
<!ENTITY TIMESTAMP "2017-02-23">
6
<!ENTITY % common SYSTEM "common.ent">
6
<!ENTITY TIMESTAMP "2008-08-31">
10
9
<refentry xmlns:xi="http://www.w3.org/2001/XInclude">
12
11
<title>Mandos Manual</title>
13
12
<!-- NWalsh’s docbook scripts use this to generate the footer: -->
14
13
<productname>Mandos</productname>
15
<productnumber>&version;</productnumber>
14
<productnumber>&VERSION;</productnumber>
16
15
<date>&TIMESTAMP;</date>
19
18
<firstname>Björn</firstname>
20
19
<surname>Påhlsson</surname>
22
<email>belorn@recompile.se</email>
21
<email>belorn@fukt.bsnet.se</email>
26
25
<firstname>Teddy</firstname>
27
26
<surname>Hogeborn</surname>
29
<email>teddy@recompile.se</email>
28
<email>teddy@fukt.bsnet.se</email>
44
34
<holder>Teddy Hogeborn</holder>
45
35
<holder>Björn Påhlsson</holder>
47
<xi:include href="legalnotice.xml"/>
39
This manual page is free software: you can redistribute it
40
and/or modify it under the terms of the GNU General Public
41
License as published by the Free Software Foundation,
42
either version 3 of the License, or (at your option) any
47
This manual page is distributed in the hope that it will
48
be useful, but WITHOUT ANY WARRANTY; without even the
49
implied warranty of MERCHANTABILITY or FITNESS FOR A
50
PARTICULAR PURPOSE. See the GNU General Public License
55
You should have received a copy of the GNU General Public
56
License along with this program; If not, see
57
<ulink url="http://www.gnu.org/licenses/"/>.
51
63
<refentrytitle>&COMMANDNAME;</refentrytitle>
52
64
<manvolnum>8</manvolnum>
125
137
<replaceable>TIME</replaceable></option></arg>
129
<arg choice="plain"><option>--force</option></arg>
130
<arg choice="plain"><option>-f</option></arg>
140
<arg><option>--force</option></arg>
134
143
<command>&COMMANDNAME;</command>
135
144
<group choice="req">
136
145
<arg choice="plain"><option>--password</option></arg>
137
146
<arg choice="plain"><option>-p</option></arg>
138
<arg choice="plain"><option>--passfile
139
<replaceable>FILE</replaceable></option></arg>
140
<arg choice="plain"><option>-F</option>
141
<replaceable>FILE</replaceable></arg>
154
159
<arg choice="plain"><option>-n
155
160
<replaceable>NAME</replaceable></option></arg>
158
<arg choice="plain"><option>--no-ssh</option></arg>
159
<arg choice="plain"><option>-S</option></arg>
163
164
<command>&COMMANDNAME;</command>
181
182
<command>&COMMANDNAME;</command> is a program to generate the
182
183
OpenPGP key used by
183
<citerefentry><refentrytitle>mandos-client</refentrytitle>
184
<citerefentry><refentrytitle>password-request</refentrytitle>
184
185
<manvolnum>8mandos</manvolnum></citerefentry>. The key is
185
186
normally written to /etc/mandos for later installation into the
186
187
initrd image, but this, and most other things, can be changed
190
191
This program can also be used with the
191
<option>--password</option> or <option>--passfile</option>
192
options to generate a ready-made section for
193
<filename>clients.conf</filename> (see
192
<option>--password</option> option to generate a ready-made
193
section for <filename>clients.conf</filename> (see
194
194
<citerefentry><refentrytitle>mandos-clients.conf</refentrytitle>
195
195
<manvolnum>5</manvolnum></citerefentry>).
264
264
<replaceable>KEYTYPE</replaceable></option></term>
267
Subkey type. Default is <quote>RSA</quote> (Elgamal
267
Subkey type. Default is <quote>ELG-E</quote> (Elgamal
268
268
encryption-only).
274
274
<term><option>--sublength
275
275
<replaceable>BITS</replaceable></option></term>
301
301
<replaceable>TEXT</replaceable></option></term>
304
Comment field for key. Default is empty.
304
Comment field for key. The default value is
305
<quote><literal>Mandos client key</literal></quote>.
310
311
<term><option>--expire
311
312
<replaceable>TIME</replaceable></option></term>
351
<term><option>--passfile
352
<replaceable>FILE</replaceable></option></term>
354
<replaceable>FILE</replaceable></option></term>
357
The same as <option>--password</option>, but read from
358
<replaceable>FILE</replaceable>, not the terminal.
363
<term><option>--no-ssh</option></term>
364
<term><option>-S</option></term>
367
When <option>--password</option> or
368
<option>--passfile</option> is given, this option will
369
prevent <command>&COMMANDNAME;</command> from calling
370
<command>ssh-keyscan</command> to get an SSH fingerprint
371
for this host and, if successful, output suitable config
372
options to use this fingerprint as a
373
<option>checker</option> option in the output. This is
374
otherwise the default behavior.
381
354
<refsect1 id="overview">
382
355
<title>OVERVIEW</title>
383
356
<xi:include href="overview.xml"/>
480
455
</informalexample>
481
456
<informalexample>
483
Prompt for a password, encrypt it with the key in <filename
484
class="directory">/etc/mandos</filename> and output a section
485
suitable for <filename>clients.conf</filename>.
458
Prompt for a password, encrypt it with the key in
459
<filename>/etc/mandos</filename> and output a section suitable
460
for <filename>clients.conf</filename>.
488
463
<userinput>&COMMANDNAME; --password</userinput>
517
492
<manvolnum>8</manvolnum></citerefentry>.
521
496
<refsect1 id="see_also">
522
497
<title>SEE ALSO</title>
524
<citerefentry><refentrytitle>intro</refentrytitle>
525
<manvolnum>8mandos</manvolnum></citerefentry>,
526
499
<citerefentry><refentrytitle>gpg</refentrytitle>
527
500
<manvolnum>1</manvolnum></citerefentry>,
528
501
<citerefentry><refentrytitle>mandos-clients.conf</refentrytitle>
529
502
<manvolnum>5</manvolnum></citerefentry>,
530
503
<citerefentry><refentrytitle>mandos</refentrytitle>
531
504
<manvolnum>8</manvolnum></citerefentry>,
532
<citerefentry><refentrytitle>mandos-client</refentrytitle>
533
<manvolnum>8mandos</manvolnum></citerefentry>,
534
<citerefentry><refentrytitle>ssh-keyscan</refentrytitle>
535
<manvolnum>1</manvolnum></citerefentry>
505
<citerefentry><refentrytitle>password-request</refentrytitle>
506
<manvolnum>8mandos</manvolnum></citerefentry>