- djm@cvs.openbsd.org 2010/03/03 22:49:50

[sshd.8]
     the authorized_keys option for CA keys is "cert-authority", not
     "from=cert-authority". spotted by imorgan AT nas.nasa.gov
This commit is contained in:
Damien Miller 2010-03-04 21:51:37 +11:00
parent 41396573af
commit cd38c9c555
2 changed files with 7 additions and 3 deletions

View File

@ -11,6 +11,10 @@
[auth-options.c key.c] [auth-options.c key.c]
reject strings with embedded ASCII nul chars in certificate key IDs, reject strings with embedded ASCII nul chars in certificate key IDs,
principal names and constraints principal names and constraints
- djm@cvs.openbsd.org 2010/03/03 22:49:50
[sshd.8]
the authorized_keys option for CA keys is "cert-authority", not
"from=cert-authority". spotted by imorgan AT nas.nasa.gov
20100303 20100303
- (djm) [PROTOCOL.certkeys] Add RCS Ident - (djm) [PROTOCOL.certkeys] Add RCS Ident

6
sshd.8
View File

@ -34,8 +34,8 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\" .\"
.\" $OpenBSD: sshd.8,v 1.252 2010/02/26 22:09:28 jmc Exp $ .\" $OpenBSD: sshd.8,v 1.253 2010/03/03 22:49:50 djm Exp $
.Dd $Mdocdate: February 26 2010 $ .Dd $Mdocdate: March 3 2010 $
.Dt SSHD 8 .Dt SSHD 8
.Os .Os
.Sh NAME .Sh NAME
@ -508,7 +508,7 @@ No spaces are permitted, except within double quotes.
The following option specifications are supported (note The following option specifications are supported (note
that option keywords are case-insensitive): that option keywords are case-insensitive):
.Bl -tag -width Ds .Bl -tag -width Ds
.It Cm from="cert-authority" .It Cm cert-authority
Specifies that the listed key is a certification authority (CA) that is Specifies that the listed key is a certification authority (CA) that is
trusted to validate signed certificates for user authentication. trusted to validate signed certificates for user authentication.
.Pp .Pp