MacOS – List all keys added to keychain using `security add-generic-password`

James,

Are you attempting to run before you can walk?

I'm assuming you are using the Mac app Terminal

Have you successfully run ssh-agent and then successfully run ssh-add without the -c argument and then successfully used those credentials to log in to somewhere?

If so then you might be ready to think about using the -c argument.

First thing to note is that if you are relying on an X11 program to pop up the dialog required then you will have to be running in Xterm, rather than Terminal, as an X11 program will have a hard time passing back the information to OS X.

I'd be interested to know your use case. What are you actually trying to do?

For macOS Sierra:

To add an object and allow access (with user prompt), use the "-T Application" option. (Several applications can be used)

security add-generic-password -a "account" -s "name" -w 'password' -c aapl -T /Applications/Utilities/Keychain\ Access.app/Contents/MacOS/Keychain\ Access

Then to allow access without user prompt you need to modify the ACL for the object:

security -v set-generic-password-partition-list -s "name" -S "apple:"

The partition-list syntax is not very well documented. You might be able to see how Tunnelblick uses the ACL from the output of "security dump-keychain".

Source: man security