Searched refs:KRL (Results 1 – 4 of 4) sorted by relevance
5 The KRL consists of a header and zero or more sections. The header is:18 Where "krl_version" is a version number that increases each time the KRL20 00:00:00 UTC that the KRL was generated, "comment" is an optional comment122 certificates KRL section that may be used to provide optional or critical137 result in KRL parsing failure. If false, then it may be safely be174 This section type provides a generic extension mechanism to the KRL189 result in KRL parsing failure. If false, then it may be safely be194 6. KRL signature sections196 Note: KRL signatures are not supported by OpenSSH. OpenSSH >= 9.4 will201 preceding ones: to provide cryptographic authentication of a KRL that[all …]
5098 upstream: return SSH_ERR_KRL_BAD_MAGIC when a KRL doesn't contain a5145 upstream: remove vestigal support for KRL signatures5147 When the KRL format was originally defined, it included support for5148 signing of KRL objects. However, the code to sign KRLs and verify KRL5153 semi-finished KRL signing/verification support from OpenSSH and5155 no longer need to perform multiple parsing passes over KRL objects.5165 upstream: Support for KRL extensions.5167 This defines wire formats for optional KRL extensions and implements6121 upstream: Free KRL ptr in addition to its contents.
779 5.3 KRL format
157 KRL=$2160 $SSHKEYGEN -Qf $KRL $KEY >/dev/null163 fatal "key $KEY not revoked by KRL $KRL: $TAG"165 fatal "key $KEY unexpectedly revoked by KRL $KRL: $TAG"