x509 cert chain

Peter Stuge peter at stuge.se
Sat Oct 30 22:27:40 EST 2010

Paul Bradley wrote:
> I believe the latest OpenSSH builds support x509 certificates

Not at all. OpenSSH uses it's own certificate format.

> I've found Roumen Petrovs patches and read some of his stuff but I
> find it a bit difficult to follow and in any case I'm not sure how
> relevant his implementation is to the mainline openssh 5.4/5.5
> x509.

There is no x509 in OpenSSH mainline. You need the patches if that is
what you want.


More information about the openssh-unix-dev mailing list