[Bug 2617] sign_and_send_pubkey: no separate private key for certificate

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Wed Dec 7 00:05:20 AEDT 2016


https://bugzilla.mindrot.org/show_bug.cgi?id=2617

--- Comment #11 from Adam Eijdenberg <adam at continusec.com> ---
Created attachment 2903
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2903&action=edit
Load key files for matching cert names

This patch adds to the previous ones to make all the tests actually
pass.

It mirrors the logic for loading keys (which check for matching certs
filenames, if none are explicitly specified), and looks for keys which
match cert filenames if no keys are explicitly specified.

It also disables use of id_rsa (and other defaults) when an explicit
CertificateFile is specified (similar to when an IdentityFile is
specified) and also when IdentitiesOnly is specified (and that is
likely worth discussion as to whether that's the right thing to do or
not).

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list