Displaying 2 results from an estimated 2 matches for "sign_op".
2025 Apr 29
1
Multiple allowed signer files in `ssh-keygen -Y verify`
...identity_files = xrecallocarray(identity_files,
+ nidentity_files, nidentity_files + 1,
+ sizeof(*identity_files));
+ identity_files[nidentity_files++] = xstrdup(optarg);
break;
case 'g':
print_generic = 1;
@@ -3608,17 +3656,17 @@ main(int argc, char **argv)
if (sign_op != NULL) {
if (strncmp(sign_op, "find-principals", 15) == 0) {
if (ca_key_path == NULL) {
- error("Too few arguments for find-principals:"
+ fatal("Too few arguments for find-principals:"
"missing signature file");
exit(1);
}...
2025 Apr 23
1
Multiple allowed signer files in `ssh-keygen -Y verify`
Hello,
I'm currently evaluating using `ssh-keygen -Y verify` to check OS
artifacts (e.g. packages) and I noticed that the `-f
allowed_signers_file` option can be passed only once. A side remark:
technically it can be passed multiple times without a warning but the
last invocation overrides all previous ones. Tested using:
$ ssh-keygen -Y verify -f allowed_signers -f /dev/null -n file -s