ssh-agent
E911264
ssh-agent is a background program that securely stores and manages SSH private keys, enabling passwordless authentication for multiple SSH connections.
Statements (51)
| Predicate | Object |
|---|---|
| instanceOf |
SSH agent
ⓘ
software utility ⓘ |
| acceptsCommand |
ssh-add
ⓘ
ssh-add -D ⓘ ssh-add -X ⓘ ssh-add -d ⓘ ssh-add -l ⓘ ssh-add -x ⓘ |
| alternativeImplementation |
Pageant
NERFINISHED
ⓘ
gpg-agent NERFINISHED ⓘ |
| availableOn | Microsoft Windows via OpenSSH NERFINISHED ⓘ |
| configuredBy | shell initialization scripts ⓘ |
| developedBy | OpenBSD Project (via OpenSSH) NERFINISHED ⓘ |
| doesNotStoreKeys | on disk in decrypted form ⓘ |
| exposes |
SSH_AGENT_PID environment variable
ⓘ
SSH_AUTH_SOCK environment variable ⓘ |
| implements | SSH agent protocol ⓘ |
| invokedBy | ssh-agent command ⓘ |
| license | BSD-style license (via OpenSSH) ⓘ |
| operatesAs | background process ⓘ |
| partOf | OpenSSH NERFINISHED ⓘ |
| primaryFunction |
cache decrypted SSH private keys in memory
ⓘ
enable passwordless SSH authentication ⓘ forward authentication credentials to remote hosts ⓘ manage SSH private keys ⓘ |
| relatedTo |
ssh
ⓘ
ssh-add ⓘ ssh-keygen ⓘ |
| runsAs | user-level daemon ⓘ |
| securityProperty |
can be locked with a passphrase
ⓘ
can require user confirmation for each use of a key ⓘ never exposes private key material to SSH clients directly ⓘ performs cryptographic operations on behalf of clients ⓘ |
| storesKeys | in volatile memory ⓘ |
| supportsFeature |
DSA keys (legacy)
ⓘ
ECDSA keys ⓘ Ed25519 keys ⓘ RSA keys ⓘ agent forwarding ⓘ confirmation-required keys ⓘ key lifetime constraints ⓘ multiple keys per user ⓘ |
| supportsProtocol |
SSH-1
NERFINISHED
ⓘ
SSH-2 ⓘ |
| typicalUseCase |
automated deployments using SSH keys
ⓘ
single sign-on for multiple SSH connections ⓘ |
| usedOn |
BSD systems
NERFINISHED
ⓘ
Linux NERFINISHED ⓘ Unix-like operating systems ⓘ macOS NERFINISHED ⓘ |
| uses | UNIX domain sockets ⓘ |
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.