From: Junio C Hamano <gitster@pobox.com>
Date: Thu, 03 Feb 2022 18:43:57 GMT
Subject: Re: Using principal wildcards in gpg.ssh.allowedSignersFile
Message-ID: <xmqqfsozvlhu.fsf@gitster.g>
In-Reply-To: <20220203124104.77ioij3jqqqyoc54@fs>

Fabian Stelzer <fs@gigacodes.de> writes:

>> Thanks for your report. I tested the described behaviour and I think
>> this is a bug in openssh. find-principals will never match on a CA 
>> cert with wildcard principals whereas wildcards for non-CA keys work
>> just fine. I've emailed the openssh maintainer about it and will 
>>prepare a patch.
>
> Just for reference to the git list:
> This issue was fixed with
> https://github.com/openssh/openssh-portable/commit/15b7199a1fd37eff4c695e09d573f3db9f4274b7
> which should be in the next openssh release.

Thanks for a heads-up.