https://bugzilla.mindrot.org/show_bug.cgi?id=3198

--- Comment #1 from Mariano Cano <[email protected]> ---
The same will occur on regular extension, PROTOCOL.certkeys states:

... The encoding and ordering of extensions in this field is 
identical to that of the critical options, as is the requirement
that each name appear only once. 

But a certificate created with the following command will have the
specified extension at the end of the standard ones:

ssh-keygen -s ca-key -I key-id -O extension:[email protected]=username
user-key.pub

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to