]> git.ipfire.org Git - thirdparty/openssh-portable.git/commit
upstream: When adding certificates to an agent, set the expiry to
authordjm@openbsd.org <djm@openbsd.org>
Thu, 11 Sep 2025 02:54:42 +0000 (02:54 +0000)
committerDamien Miller <djm@mindrot.org>
Thu, 11 Sep 2025 02:58:09 +0000 (12:58 +1000)
commit0c719c6aabc061f02a907fc96c390d0449b49f26
tree7dd9c1460706eb1ca54fe06bf2ba4c12575390d1
parente9dcccc3541b0ae1c43581ed26215d5cc82e4be0
upstream: When adding certificates to an agent, set the expiry to

the certificate expiry time plus a short (5 min) grace period.

This will cause the agent to automtically remove certificates shortly
after they expire.

A new ssh-add -N option disables this behaviour.

Feedback/ok deraadt@

OpenBSD-Commit-ID: 92fed1bba1025069ad45deebb534be7530e181df
ssh-add.1
ssh-add.c