search for: allowed_sign

On Wed, 23 Apr 2025, Wiktor Kwapisiewicz via openssh-unix-dev wrote: > Hello, > > I'm currently evaluating using `ssh-keygen -Y verify` to check OS artifacts > (e.g. packages) and I noticed that the `-f allowed_signers_file` option can be > passed only once. A side remark: technically it can be passed multiple times > without a warning but the last invocation overrides all previous ones. Tested > using: > > $ ssh-keygen -Y verify -f allowed_signers -f /dev/null -n file -s > statement.txt.sig...

Hello, I'm currently evaluating using `ssh-keygen -Y verify` to check OS artifacts (e.g. packages) and I noticed that the `-f allowed_signers_file` option can be passed only once. A side remark: technically it can be passed multiple times without a warning but the last invocation overrides all previous ones. Tested using: $ ssh-keygen -Y verify -f allowed_signers -f /dev/null -n file -s statement.txt.sig -I wiktor at metacode.biz...

Hello, I've noticed that `ssh-keygen -Y find-principals` warns about empty lines in the allowed signers file, even though the documentation says they should be treated as comments: $ ssh-keygen -Y find-principals -f allowed_signers.md -I wiktor at metacode.biz -n file -s rsa-key.txt.sig < rsa-key.txt allowed_signers.md:3: missing key <---- here wiktor at metacode.biz `-Y verify` doesn't have this issue: $ ssh-keygen -Y verify -f allowed_signers.md -I wiktor at metacode.biz -n file -s rsa-key.txt.sig &l...

...- a/Makefile.in +++ b/Makefile.in @@ -296,6 +296,45 @@ clean: regressclean rm -f regress/misc/sk-dummy/*.o rm -f regress/misc/sk-dummy/*.lo rm -f regress/misc/sk-dummy/sk-dummy.so + rm -f regress/agent-ca.pub + rm -f regress/agent.log + rm -f regress/allowed_signers + rm -f regress/authkeys_orig + rm -f regress/command + rm -f regress/data.2 + rm -f regress/done + rm -f regress/expect_* + rm -f regress/host.sk-ssh-ed25519 at openssh.com + rm -f regress/host_* + rm -f regress/revoked_keys + rm -f regress/...