CVSROOT:        /cvs
Module name:    src
Changes by:     d...@cvs.openbsd.org    2020/01/23 16:31:52

Modified files:
        usr.bin/ssh    : ssh-keygen.1 ssh-keygen.c sshsig.c sshsig.h 

Log message:
ssh-keygen -Y find-principals fixes based on feedback from Markus:

use "principals" instead of principal, as allowed_signers lines may list
multiple.

When the signing key is a certificate, emit only principals that match
the certificate principal list.

NB. the command -Y name changes: "find-principal" => "find-principals"

ok markus@

Reply via email to