x509 cert chain

[Peter Stuge]

Paul Bradley wrote:
> I believe the latest OpenSSH builds support x509 certificates

Not at all. OpenSSH uses it's own certificate format.


> I've found Roumen Petrovs patches and read some of his stuff but I
> find it a bit difficult to follow and in any case I'm not sure how
> relevant his implementation is to the mainline openssh 5.4/5.5
> x509.

There is no x509 in OpenSSH mainline. You need the patches if that is
what you want.


//Peter