ssh-agent-filter(1)

ssh-agent-filter1

Filtering proxy for ssh-agent meant to be forwarded to untrusted servers

Usage

ssh-agent-filter [OPTIONS]

Overview

ssh-agent-filter provides the unix domain socket interface of an ssh-agent. By default it forks and outputs shell code setting SSH_AUTH_SOCK and SSH_AGENT_PID, just like ssh-agent does.

It filters each request according to its command line options. No crypto operations are done by ssh-agent-filter; they are delegated to the upstream ssh-agent.

ssh-agent-filter is not meant to be used directly, but through afssh.

Options

-A [ --all-confirmed ]

allow all other keys with confirmation

-c [ --comment ] arg

key specified by comment

-C [ --comment-confirmed ] arg

key specified by comment, with confirmation

-d [ --debug ]

show some debug info, don't fork

-f [ --fingerprint ] arg

key specified by pubkey's hex-encoded md5 fingerprint

-F [ --fingerprint-confirmed ] arg key specified by pubkey's hex-encoded md5

fingerprint, with confirmation

-h [ --help ]

print this help message

-k [ --key ] arg

key specified by base64-encoded pubkey

-K [ --key-confirmed ] arg

key specified by base64-encoded pubkey, with confirmation

-n [ --name ] arg

name for this instance of ssh-agent-filter, for confirmation puposes

-V [ --version ]

print version information

Environment

SSH_AUTH_SOCK

socket of upstream ssh-agent

SSH_ASKPASS

command to run for confirmation questions

Releases

6 releases since Debian 8 (Jessie); the text changed 4 times.

  1. 8
  2. 9
  3. 10
  4. 11–12
  5. 13

Author

Written by Timo Weingärtner.

Reporting bugs

Report bugs to the Debian BTS at https://bugs.debian.org/ or by mail to [email protected].

From ssh-agent-filter 0.5.2-1+b6 in Debian 13 (Trixie). Parsed by carta from the page's man source.