tree 177a8c032d9396249708e4a5cb65321d9250fdee
parent 5485f8d50a5bc46aeed829075ebf5d9c617027ea
author djm@openbsd.org <djm@openbsd.org> 1567499659 +0000
committer Damien Miller <djm@mindrot.org> 1567500023 +1000

upstream: sshsig: lightweight signature and verification ability

for OpenSSH

This adds a simple manual signature scheme to OpenSSH.
Signatures can be made and verified using ssh-keygen -Y sign|verify

Signatures embed the key used to make them. At verification time, this
is matched via principal name against an authorized_keys-like list
of allowed signers.

Mostly by Sebastian Kinne w/ some tweaks by me

ok markus@

OpenBSD-Commit-ID: 2ab568e7114c933346616392579d72be65a4b8fb