On Wed, May 14, 2014 at 1:40 AM, Jiri B <ji...@devio.us> wrote: > > is it possible to have a wildcard in principals when generating > user certificate? >
>From reading ssh/key.c:key_cert_check_authority(), I would say that name matching of principals is exact only, without wildcards. Philip Guenther