Overview (SYNOPSIS)
ssh-add [-lLdDx ] [-t life ] [file ... ] ssh-add -s reader ssh-add -e reader
Description (DESCRIPTION)
The authentication agent (authentication agent), ssh-agent1, adding identification data RSA or DSA. When the program run without parameters, it will $ HOME / .ssh / id_rsa $ HOME / .ssh / id_dsa and $ HOME / .ssh / the contents of the file sent to the identity authentication proxy can specify a different file name on the command line. If a file requires a passphrase (a passphrase) access, will prompt the user to enter, and then read from the user's passphrase tty terminal. given a plurality of identity documents, will retry the last secret language.
To work properly, you must run the certification agency, and is the ancestor of the current process.
The available options are:
- -l
- Acting on behalf of the current list of fingerprint authentication identity.
- -L
- Acting on behalf of the current list of authentication of public key parameters.
- -d
- And add identity Instead, delete the identity data from the certification agency.
- -D
- Delete all data from the identity of the certification agency.
- -x
- Acting locked with a password.
- -X
- Unlock the agent.
- -t life
- Adding to the identity of the agent when setting the maximum life cycle. Lifecycle in seconds, you can also use the time in the format specified sshd_config5.
- -c
- Identity must first be confirmed before the certification was confirmed by the work of the latter mentioned SSH_ASKPASS be programmed. After a successful confirmation, SSH_ASKPASS returns a status word 0 to the caller, rather than transfer text data.
- -s reader
- Add smart card reader in the key.
- -e reader
- Remove the smart card reader in the key.
File (FILES)
- $HOME/.ssh/identity
- The agreement contains the first edition of the RAS user identity data.
- $HOME/.ssh/id_dsa
- The agreement contains the user identity of the second edition of DSA data.
- $HOME/.ssh/id_rsa
- The agreement contains the user identity of the second edition of RAS data.
Identity documents only allowed its users to read, does not allow access to other users. Note that if the identity of the file can be accessed by other users, this file will be ignored.
Environment (ENVIRONMENT)
- DISPLAY 和 SSH_ASKPASS
- If you need a passphrase when it is running on the terminal, it will read the passphrase from the current terminal. If you do not and terminal association, but set the DISPLAY and SSH_ASKPASS environment variables, it performs SSH_ASKPASS specified program, open an X11 window to read the passphrase. when calling from .Xsession or similar profile, this feature is useful. (Note that you may first want to enter redirected to / dev / null to work on some machines.)
- SSH_AUTH_SOCK
- UNIX domain socket indicate a path for the agent and communication.