Displaying 2 results from an estimated 2 matches for "sig_namespace".
Did you mean:
pid_namespace
2025 Apr 29
1
Multiple allowed signer files in `ssh-keygen -Y verify`
...rations accept multiple files */
+static char **identity_files;
+static size_t nidentity_files;
+
/* This is set to the passphrase if given on the command line. */
static char *identity_passphrase = NULL;
@@ -2803,16 +2807,17 @@ done:
static int
sig_verify(const char *signature, const char *sig_namespace,
- const char *principal, const char *allowed_keys, const char *revoked_keys,
- char * const *opts, size_t nopts)
+ const char *principal, char **allowed_keys, size_t nallowed_keys,
+ const char *revoked_keys, char * const *opts, size_t nopts)
{
- int r, ret = -1;
+ int r, ret = -1, ma...
2025 Apr 23
1
Multiple allowed signer files in `ssh-keygen -Y verify`
Hello,
I'm currently evaluating using `ssh-keygen -Y verify` to check OS
artifacts (e.g. packages) and I noticed that the `-f
allowed_signers_file` option can be passed only once. A side remark:
technically it can be passed multiple times without a warning but the
last invocation overrides all previous ones. Tested using:
$ ssh-keygen -Y verify -f allowed_signers -f /dev/null -n file -s