src/usr.bin/ssh/PROTOCOL.krl - diff

Return to PROTOCOL.krl CVS log

Up to [local] / src / usr.bin / ssh

version 1.4, 2018/04/10 00:10:49

version 1.5, 2018/09/12 01:21:34

Line 36

#define KRL_SECTION_EXPLICIT_KEY 2

#define KRL_SECTION_FINGERPRINT_SHA1 3

#define KRL_SECTION_SIGNATURE 4

#define KRL_SECTION_FINGERPRINT_SHA256 5

2. Certificate section

Line 127

Line 128

This section may appear multiple times.

4. SHA1 fingerprint sections

4. SHA1/SHA256 fingerprint sections

These sections, identified as KRL_SECTION_FINGERPRINT_SHA1, revoke

These sections, identified as KRL_SECTION_FINGERPRINT_SHA1 and

plain keys (i.e. not certificates) by listing their SHA1 hashes:

KRL_SECTION_FINGERPRINT_SHA256, revoke plain keys (i.e. not

certificates) by listing their hashes:

string public_key_hash[0]

....

This section must contain at least one "public_key_hash". The hash blob

is obtained by taking the SHA1 hash of the public key blob. Hashes in

is obtained by taking the SHA1 or SHA256 hash of the public key blob.

this section must appear in numeric order, treating each hash as a big-

Hashes in this section must appear in numeric order, treating each hash

endian integer.

as a big-endian integer.

This section may appear multiple times.