diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2017-05-31 04:29:44 +0000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2017-05-31 14:30:52 +1000 |
| commit | d40dbdc85b6fb2fd78485ba02225511b8cbf20d7 (patch) | |
| tree | 8a213156109f0f51a2c1464f3e5758dd55fa5736 /PROTOCOL.certkeys | |
| parent | 2a108277f976e8d0955c8b29d1dfde04dcbb3d5b (diff) | |
upstream commit
spell out that custom options/extensions should follow the
usual SSH naming rules, e.g. "extension@example.com"
Upstream-ID: ab326666d2fad40769ec96b5a6de4015ffd97b8d
Diffstat (limited to 'PROTOCOL.certkeys')
| -rw-r--r-- | PROTOCOL.certkeys | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/PROTOCOL.certkeys b/PROTOCOL.certkeys index 734b606b..42aa8c2a 100644 --- a/PROTOCOL.certkeys +++ b/PROTOCOL.certkeys @@ -224,6 +224,9 @@ option-specific information (see below). All options are "critical", if an implementation does not recognise a option then the validating party should refuse to accept the certificate. +Custom options should append the originating author or organisation's +domain name to the option name, e.g. "my-option@example.com". + No critical options are defined for host certificates at present. The supported user certificate options and the contents and structure of their data fields are: @@ -255,6 +258,9 @@ as is the requirement that each name appear only once. If an implementation does not recognise an extension, then it should ignore it. +Custom options should append the originating author or organisation's +domain name to the option name, e.g. "my-option@example.com". + No extensions are defined for host certificates at present. The supported user certificate extensions and the contents and structure of their data fields are: @@ -285,4 +291,4 @@ permit-user-rc empty Flag indicating that execution of of this script will not be permitted if this option is not present. -$OpenBSD: PROTOCOL.certkeys,v 1.11 2017/05/16 16:54:05 djm Exp $ +$OpenBSD: PROTOCOL.certkeys,v 1.12 2017/05/31 04:29:44 djm Exp $ |