[Bug 2387] sshd treats certificate extensions as critical

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Wed Apr 22 09:36:07 AEST 2015


https://bugzilla.mindrot.org/show_bug.cgi?id=2387

Darren Tucker <dtucker at zip.com.au> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au

--- Comment #1 from Darren Tucker <dtucker at zip.com.au> ---
Leaving aside the discussion of this particular bug, if you are adding
your own extensions to the certificates you should probably be using
your own namespace (ie $foo@$yourdomain, as per RFC4251 section 6),
otherwise you risk future breakage if OpenSSH adds a like-named one.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list