4 .\" Author: Tatu Ylonen <ylo@cs.hut.fi>
6 .\" Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
7 .\" All rights reserved
9 .\" Created: Sun May 7 00:14:37 1995 ylo
11 .\" $OpenBSD: scp.1,v 1.85 2019/01/26 22:41:28 djm Exp $
13 .Dd $Mdocdate: January 26 2019 $
18 .Nd secure copy (remote file copy program)
23 .Op Fl F Ar ssh_config
24 .Op Fl i Ar identity_file
25 .Op Fl J Ar destination
27 .Op Fl o Ar ssh_option
33 copies files between hosts on a network.
36 for data transfer, and uses the same authentication and provides the
40 will ask for passwords or passphrases if they are needed for
47 may be specified as a local pathname, a remote host with optional path
50 .Oo user @ Oc host : Op path ,
54 .No scp:// Oo user @ Oc host Oo : port Oc Op / path .
56 Local file names can be made explicit using absolute or relative pathnames
59 treating file names containing
63 When copying between two remote hosts, if the URI format is used, a
65 may only be specified on the
71 The options are as follows:
74 Copies between two remote hosts are transferred through the local host.
75 Without this option the data is copied directly between the two remote
77 Note that this option disables the progress meter.
81 to use IPv4 addresses only.
85 to use IPv6 addresses only.
87 Selects batch mode (prevents asking for passwords or passphrases).
94 to enable compression.
96 Selects the cipher to use for encrypting the data transfer.
97 This option is directly passed to
99 .It Fl F Ar ssh_config
100 Specifies an alternative
101 per-user configuration file for
103 This option is directly passed to
105 .It Fl i Ar identity_file
106 Selects the file from which the identity (private key) for public key
107 authentication is read.
108 This option is directly passed to
110 .It Fl J Ar destination
111 Connect to the target host by first making an
113 connection to the jump host described by
115 and then establishing a TCP forwarding to the ultimate destination from
117 Multiple jump hops may be specified separated by comma characters.
118 This is a shortcut to specify a
120 configuration directive.
121 This option is directly passed to
124 Limits the used bandwidth, specified in Kbit/s.
125 .It Fl o Ar ssh_option
126 Can be used to pass options to
128 in the format used in
130 This is useful for specifying options
131 for which there is no separate
134 For full details of the options listed below, and their possible values, see
137 .Bl -tag -width Ds -offset indent -compact
143 .It CanonicalizeFallbackLocal
144 .It CanonicalizeHostname
145 .It CanonicalizeMaxDots
146 .It CanonicalizePermittedCNAMEs
147 .It CASignatureAlgorithms
149 .It ChallengeResponseAuthentication
153 .It ConnectionAttempts
158 .It GlobalKnownHostsFile
159 .It GSSAPIAuthentication
160 .It GSSAPIDelegateCredentials
163 .It HostbasedAuthentication
164 .It HostbasedKeyTypes
165 .It HostKeyAlgorithms
172 .It KbdInteractiveAuthentication
173 .It KbdInteractiveDevices
177 .It NoHostAuthenticationForLocalhost
178 .It NumberOfPasswordPrompts
179 .It PasswordAuthentication
182 .It PreferredAuthentications
185 .It PubkeyAcceptedKeyTypes
186 .It PubkeyAuthentication
189 .It ServerAliveInterval
190 .It ServerAliveCountMax
192 .It StrictHostKeyChecking
196 .It UserKnownHostsFile
200 Specifies the port to connect to on the remote host.
201 Note that this option is written with a capital
205 is already reserved for preserving the times and modes of the file.
207 Preserves modification times, access times, and modes from the
210 Quiet mode: disables the progress meter as well as warning and diagnostic
214 Recursively copy entire directories.
217 follows symbolic links encountered in the tree traversal.
221 to use for the encrypted connection.
222 The program must understand
226 Disable strict filename checking.
227 By default when copying files from a remote host to a local directory
229 checks that the received filenames match those requested on the command-line
230 to prevent the remote end from sending unexpected or unwanted files.
231 Because of differences in how various operating systems and shells interpret
232 filename wildcards, these checks may cause wanted files to be rejected.
233 This option disables these checks at the expense of fully trusting that
234 the server will not send unexpected filenames.
241 to print debugging messages about their progress.
243 debugging connection, authentication, and configuration problems.
257 is based on the rcp program in
259 source code from the Regents of the University of California.
261 .An Timo Rinne Aq Mt tri@iki.fi
262 .An Tatu Ylonen Aq Mt ylo@cs.hut.fi