search for: sshkey_is_priv

...t;%s: sshkey_sign: %s", __func__, ssh_err(ok)); goto send; @@ -643,12 +696,38 @@ process_add_identity(SocketEntry *e, int } } - success = 1; if (lifetime && !death) death = monotime() + lifetime; + + /* handle additional certificates for an existing private key */ + if (!sshkey_is_private(k)) { + id = lookup_identity_unshadowed_key(k, version); + /* ensure we have a private key and this cert is new */ + if (id != NULL && lookup_identity(k, version) == NULL) { + Identity *certid = xcalloc(1, sizeof(Identity)); + certid->idkey = refkey_new(k); + certid->shado...

https://bugzilla.mindrot.org/show_bug.cgi?id=2472 Bug ID: 2472 Summary: Add support to load additional certificates Product: Portable OpenSSH Version: 7.1p1 Hardware: All OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: ssh-agent Assignee: unassigned-bugs at