Mailing List Archive

[openssh] branch master updated (4df246ec -> ec1ddb72)
This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

from 4df246ec Fix conditional for running hostbased tests.
new ec1ddb72 upstream: allow certificate validity intervals, sshsig verification

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit ec1ddb72a146fd66d18df9cd423517453a5d8044
Author: djm@openbsd.org <djm@openbsd.org>
Date: Thu Aug 11 01:56:51 2022 +0000

upstream: allow certificate validity intervals, sshsig verification

times and authorized_keys expiry-time options to accept dates in the UTC time
zone in addition to the default of interpreting them in the system time zone.
YYYYMMDD and YYMMDDHHMM[SS] dates/times will be interpreted as UTC if
suffixed with a 'Z' character.

Also allow certificate validity intervals to be specified in raw
seconds-since-epoch as hex value, e.g. -V 0x1234:0x4567890. This
is intended for use by regress tests and other tools that call
ssh-keygen as part of a CA workflow.

bz3468 ok dtucker

OpenBSD-Commit-ID: 454db1cdffa9fa346aea5211223a2ce0588dfe13

Summary of changes:
misc.c | 26 ++++++++++++++----
ssh-keygen.1 | 88 ++++++++++++++++++++++++++++++++++++++++++++----------------
ssh-keygen.c | 25 ++++++++++++++---
sshd.8 | 9 ++++---
4 files changed, 113 insertions(+), 35 deletions(-)

--
To stop receiving notification emails like this one, please contact
djm@mindrot.org.
_______________________________________________
openssh-commits mailing list
openssh-commits@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-commits