CVSROOT: /cvs
Module name: src
Changes by: d...@cvs.openbsd.org 2013/01/17 16:00:01
Modified files:
usr.bin/ssh : auth.c key.c key.h ssh-keygen.1 ssh-keygen.c
sshd_config.5
usr.bin/ssh/lib: Makefile
Added files:
usr.bin/ssh : PROTOCOL.krl krl.c krl.h
Log message:
add support for Key Revocation Lists (KRLs). These are a compact way to
represent lists of revoked keys and certificates, taking as little as
a single bit of incremental cost to revoke a certificate by serial number.
KRLs are loaded via the existing RevokedKeys sshd_config option.
feedback and ok markus@
