manual: Instruct the user to create RFC4716 keys.

We support both types of keys, but it would be lovely to get rid of
the open-coded parser for PEM keys in grcypt.c. This is the first
step to deprecate the use of PEM keys.

diff --git a/web/manual.md b/web/manual.md
index 2c806614d1e4ea001f990949d817dd5929e39a00..44799e910fc8c041667599fcff8669a1a89608c1 100644 (file)
--- a/web/manual.md
+++ b/web/manual.md
@@ -446,7 +446,7 @@ following commands:
 Next, change to the "bar" account on client_host and generate the
 key pair with the commands
 
 Next, change to the "bar" account on client_host and generate the
 key pair with the commands
 

-       ssh-keygen -q -t rsa -b 2048 -N '' -m PEM
+       ssh-keygen -q -t rsa -b 2048 -N '' -m RFC4716

 
 This generates the two files id_rsa and id_rsa.pub in ~/.ssh.  Note
 that para_server won't accept keys shorter than 2048 bits. Moreover,
 
 This generates the two files id_rsa and id_rsa.pub in ~/.ssh.  Note
 that para_server won't accept keys shorter than 2048 bits. Moreover,