make `ssh -Q CASignatureAlgorithms` only list signature algorithms that
authordjm <djm@openbsd.org>
Wed, 21 Jun 2023 05:08:32 +0000 (05:08 +0000)
committerdjm <djm@openbsd.org>
Wed, 21 Jun 2023 05:08:32 +0000 (05:08 +0000)
commit7800c160b8717a2e4dba6ad3b683ff4cdd9e867e
tree29f01c4a7a8dc429d2021be04134fe04c9ddb649
parentcdc6f5c1e5538503125f1e11efcd2c2fe0368d98
make `ssh -Q CASignatureAlgorithms` only list signature algorithms that
are valid for CA signing. Previous behaviour was to list all signing
algorithms, including certificate algorithms (OpenSSH certificates do
not support CA chains). part of bz3577; ok dtucker@
usr.bin/ssh/ssh.1
usr.bin/ssh/ssh.c