From be57fd05943a0fddf95d6b5aaab2a40914c259ce Mon Sep 17 00:00:00 2001
From: Seth Vargo <seth@sethvargo.com>
Date: Mon, 21 Aug 2017 17:23:29 -0400
Subject: [PATCH] Thread stderr through too (#3211)

* Thread stderr through too

* Small docs typo
---
 command/ssh.go                                                 | 3 +++
 .../source/docs/secrets/ssh/signed-ssh-certificates.html.md    | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/command/ssh.go b/command/ssh.go
index 5b745ac080..03e1933da6 100644
--- a/command/ssh.go
+++ b/command/ssh.go
@@ -316,6 +316,7 @@ func (c *SSHCommand) handleTypeCA() error {
 	cmd := exec.Command("ssh", args...)
 	cmd.Stdin = os.Stdin
 	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
 	err = cmd.Run()
 	if err != nil {
 		return errors.Wrap(err, "failed to run ssh command")
@@ -381,6 +382,7 @@ func (c *SSHCommand) handleTypeOTP() error {
 
 	cmd.Stdin = os.Stdin
 	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
 	err = cmd.Run()
 	if err != nil {
 		return errors.Wrap(err, "failed to run ssh command")
@@ -430,6 +432,7 @@ func (c *SSHCommand) handleTypeDynamic() error {
 	cmd := exec.Command("ssh", args...)
 	cmd.Stdin = os.Stdin
 	cmd.Stdout = os.Stdout
+	cmd.Stderr = os.Stderr
 	err = cmd.Run()
 	if err != nil {
 		return errors.Wrap(err, "failed to run ssh command")
diff --git a/website/source/docs/secrets/ssh/signed-ssh-certificates.html.md b/website/source/docs/secrets/ssh/signed-ssh-certificates.html.md
index f5b0e4d966..b377ddd4f6 100644
--- a/website/source/docs/secrets/ssh/signed-ssh-certificates.html.md
+++ b/website/source/docs/secrets/ssh/signed-ssh-certificates.html.md
@@ -299,7 +299,7 @@ target machines.
     ```
 
     ```text
-    $ vault -field=public_key read ssh-host-signer/config/ca
+    $ vault read -field=public_key ssh-host-signer/config/ca
     ```
 
 1. Add the resulting public key to the `known_hosts` file with authority.