ssh-keygen -V doesn't respect DST

[Jan Schermer]

Hi,
we just entered DST here in Czech Republic, and my CA started generating certificates with a +1h offset:

ssh-keygen -U -s some-ca-key.pub -V 20220328110400:20220328112400 -I 981-20220328-1104 -O extension:login at github.com=someone at github.com -I eed3f7c7-4809-46e7-892e-6e3642da59c8 438.pub

Signed user key 438-cert.pub: id "eed3f7c7-4809-46e7-892e-6e3642da59c8 " serial 0 valid from 2022-03-28T12:04:00 to 2022-03-28T12:24:00


$ date
Mon Mar 28 11:21:25 CEST 2022
$ ls -la /etc/localtime
lrwxrwxrwx. 1 root root 35 Jun  8  2020 /etc/localtime -> ../usr/share/zoneinfo/Europe/Prague

As a workaround, I set /usr/share/zoneinfo/Etc/GMT-1 as a timezone, but this is clearly not right.

Any plans to fix this? Apparently I am not the only person who encountered it https://github.com/cloudtools/ssh-ca/blob/master/ssh_ca/utils.py#L72 <https://github.com/cloudtools/ssh-ca/blob/master/ssh_ca/utils.py#L72>

Thanks
Jan