[Bug 3198] Custom critical options are not lexically ordered

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Jul 28 08:10:53 AEST 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3198

--- Comment #1 from Mariano Cano <mariano.cano at gmail.com> ---
The same will occur on regular extension, PROTOCOL.certkeys states:

... The encoding and ordering of extensions in this field is 
identical to that of the critical options, as is the requirement
that each name appear only once. 

But a certificate created with the following command will have the
specified extension at the end of the standard ones:

ssh-keygen -s ca-key -I key-id -O extension:login at github.com=username
user-key.pub

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list