1 .TH NTP-KEYGEN 1 2009-12-10 "(ntp 4.2.6)" "Programmer's Manual"
2 .\" EDIT THIS FILE WITH CAUTION (ntp-keygen.1)
4 .\" It has been AutoGen-ed December 10, 2009 at 05:08:22 AM by AutoGen 5.10
5 .\" From the definitions ntp-keygen-opts.def
6 .\" and the template file agman1.tpl
9 ntp-keygen \- Create a NTP host key
12 .\" Mixture of short (flag) options and long options
13 .RB [ \-\fIflag\fP " [\fIvalue\fP]]... [" \--\fIopt-name\fP " [[=| ]\fIvalue\fP]]..."
15 All arguments must be options.
17 This manual page briefly documents the \fBntp-keygen\fP command.
18 If there is no new host key, look for an existing one.
19 If one is not found, create it.
22 .BR \-c " \fIscheme\fP, " \--certificate "=" \fIscheme\fP
26 RSA-MD2, RSA-MD5, RSA-SHA, RSA-SHA1, RSA-MDC2, RSA-RIPEMD160,
29 Select the certificate message digest/signature encryption scheme.
30 Note that RSA schemes must be used with a RSA sign key and DSA
31 schemes must be used with a DSA sign key. The default without
32 this option is RSA-MD5.
34 .BR \-d ", " \--debug-level
35 Increase output debug message level.
36 This option may appear an unlimited number of times.
38 Increase the debugging message output level.
40 .BR \-D " \fIstring\fP, " \--set-debug-level "=" \fIstring\fP
41 Set the output debug message level.
42 This option may appear an unlimited number of times.
44 Set the output debugging level. Can be supplied multiple times,
45 but each overrides the previous value(s).
47 .BR \-e ", " \--id-key
48 Write IFF or GQ identity keys.
50 Write the IFF or GQ client keys to the standard output. This is
51 intended for automatic key distribution by mail.
53 .BR \-G ", " \--gq-params
54 Generate GQ parameters and keys.
56 Generate parameters and keys for the GQ identification scheme,
57 obsoleting any that may exist.
59 .BR \-H ", " \--host-key
60 generate RSA host key.
62 Generate new host keys, obsoleting any that may exist.
64 .BR \-I ", " \--iffkey
65 generate IFF parameters.
67 Generate parameters for the IFF identification scheme, obsoleting
70 .BR \-i " \fIissuer-name\fP, " \--issuer-name "=" \fIissuer-name\fP
73 Set the suject name to name. This is used as the subject field
74 in certificates and in the file name for host and sign keys.
76 .BR \-M ", " \--md5key
79 Generate MD5 keys, obsoleting any that may exist.
81 .BR \-m " \fImodulus\fP, " \--modulus "=" \fImodulus\fP
83 This option takes an integer number as its argument.
84 The value of \fImodulus\fP is constrained to being:
88 in the range 256 through 2048
92 The number of bits in the prime modulus. The default is 512.
94 .BR \-P ", " \--pvt-cert
95 generate PC private certificate.
97 Generate a private certificate. By default, the program generates
100 .BR \-p " \fIpasswd\fP, " \--pvt-passwd "=" \fIpasswd\fP
101 output private password.
103 Encrypt generated files containing private data with the specified
104 password and the DES-CBC algorithm.
106 .BR \-q " \fIpasswd\fP, " \--get-pvt-passwd "=" \fIpasswd\fP
107 input private password.
109 Set the password for reading files to the specified password.
111 .BR \-S " \fIsign\fP, " \--sign-key "=" \fIsign\fP
112 generate sign key (RSA or DSA).
114 Generate a new sign key of the designated type, obsoleting any
115 that may exist. By default, the program uses the host key as the
118 .BR \-s " \fIhost\fP, " \--subject-name "=" \fIhost\fP
121 Set the issuer name to name. This is used for the issuer field
122 in certificates and in the file name for identity files.
124 .BR \-T ", " \--trusted-cert
125 trusted certificate (TC scheme).
127 Generate a trusted certificate. By default, the program generates
128 a non-trusted certificate.
130 .BR \-V " \fInum\fP, " \--mv-params "=" \fInum\fP
131 generate <num> MV parameters.
132 This option takes an integer number as its argument.
134 Generate parameters and keys for the Mu-Varadharajan (MV)
135 identification scheme.
137 .BR \-v " \fInum\fP, " \--mv-keys "=" \fInum\fP
138 update <num> MV keys.
139 This option takes an integer number as its argument.
141 This option has not been fully documented.
144 Display extended usage information and exit.
146 .BR \-! , " \--more-help"
147 Extended usage information passed thru pager.
149 .BR \-> " [\fIrcfile\fP]," " \--save-opts" "[=\fIrcfile\fP]"
150 Save the option state to \fIrcfile\fP. The default is the \fIlast\fP
151 configuration file listed in the \fBOPTION PRESETS\fP section, below.
153 .BR \-< " \fIrcfile\fP," " \--load-opts" "=\fIrcfile\fP," " \--no-load-opts"
154 Load options from \fIrcfile\fP.
155 The \fIno-load-opts\fP form will disable the loading
156 of earlier RC/INI files. \fI--no-load-opts\fP is handled early,
159 .BR \- " [{\fIv|c|n\fP}]," " \--version" "[=\fI{v|c|n}\fP]"
160 Output version of program and exit. The default mode is `v', a simple
161 version. The `c' mode will print copyright information and `n' will
162 print the full copyright notice.
164 Any option that is not marked as \fInot presettable\fP may be preset
165 by loading values from configuration ("RC" or ".INI") file(s) and values from
166 environment variables named:
168 \fBNTP_KEYGEN_<option-name>\fP or \fBNTP_KEYGEN\fP
171 The environmental presets take precedence (are processed later than)
172 the configuration files.
173 The \fIhomerc\fP files are "\fI$HOME\fP", and "\fI.\fP".
174 If any of these are directories, then the file \fI.ntprc\fP
175 is searched for within those directories.
177 David L. Mills and/or others
179 Please send bug reports to: http://bugs.ntp.org, bugs@ntp.org
184 see html/copyright.html
188 This manual page was \fIAutoGen\fP-erated from the \fBntp-keygen\fP