[openssh-commits] [openssh] branch master updated (4df246ec -> ec1ddb72)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  4df246ec  Fix conditional for running hostbased tests.
       new  ec1ddb72  upstream: allow certificate validity intervals, sshsig verification

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit ec1ddb72a146fd66d18df9cd423517453a5d8044
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Aug 11 01:56:51 2022 +0000

    upstream: allow certificate validity intervals, sshsig verification
    
    times and authorized_keys expiry-time options to accept dates in the UTC time
    zone in addition to the default of interpreting them in the system time zone.
    YYYYMMDD and YYMMDDHHMM[SS] dates/times will be interpreted as UTC if
    suffixed with a 'Z' character.
    
    Also allow certificate validity intervals to be specified in raw
    seconds-since-epoch as hex value, e.g. -V 0x1234:0x4567890. This
    is intended for use by regress tests and other tools that call
    ssh-keygen as part of a CA workflow.
    
    bz3468 ok dtucker
    
    OpenBSD-Commit-ID: 454db1cdffa9fa346aea5211223a2ce0588dfe13

Summary of changes:
 misc.c       | 26 ++++++++++++++----
 ssh-keygen.1 | 88 ++++++++++++++++++++++++++++++++++++++++++++----------------
 ssh-keygen.c | 25 ++++++++++++++---
 sshd.8       |  9 ++++---
 4 files changed, 113 insertions(+), 35 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.