|
Lines 634-640
For example:
Link Here
|
| 634 |
.Dq 20100101123000:20110101123000 |
634 |
.Dq 20100101123000:20110101123000 |
| 635 |
(valid from 12:30 PM, January 1st, 2010 to 12:30 PM, January 1st, 2011), |
635 |
(valid from 12:30 PM, January 1st, 2010 to 12:30 PM, January 1st, 2011), |
| 636 |
.Dq -1d:20110101 |
636 |
.Dq -1d:20110101 |
| 637 |
(valid from yesterday to midnight, January 1st, 2011). |
637 |
(valid from yesterday to midnight, January 1st, 2011), |
| 638 |
.Dq -1m:forever |
638 |
.Dq -1m:forever |
| 639 |
(valid from one minute ago and never expiring). |
639 |
(valid from one minute ago and never expiring). |
| 640 |
.It Fl v |
640 |
.It Fl v |
|
Lines 1005-1011
A certificate that is presented at a tim
Link Here
|
| 1005 |
considered valid. |
1005 |
considered valid. |
| 1006 |
By default, certificates are valid from |
1006 |
By default, certificates are valid from |
| 1007 |
.Ux |
1007 |
.Ux |
| 1008 |
Epoch to the distant future. |
1008 |
the epoch to the distant future. |
| 1009 |
.Pp |
1009 |
.Pp |
| 1010 |
For certificates to be used for user or host authentication, the CA |
1010 |
For certificates to be used for user or host authentication, the CA |
| 1011 |
public key must be trusted by |
1011 |
public key must be trusted by |
|
Lines 1107-1113
Empty lines and lines starting with a
Link Here
|
| 1107 |
.Ql # |
1107 |
.Ql # |
| 1108 |
are ignored as comments. |
1108 |
are ignored as comments. |
| 1109 |
.Pp |
1109 |
.Pp |
| 1110 |
The principals field is a pattern-list (See PATTERNS in |
1110 |
The principals field is a pattern-list (see PATTERNS in |
| 1111 |
.Xr ssh_config 5 ) |
1111 |
.Xr ssh_config 5 ) |
| 1112 |
consisting of one or more comma-separated USER@DOMAIN identity patterns |
1112 |
consisting of one or more comma-separated USER@DOMAIN identity patterns |
| 1113 |
that are accepted for signing. |
1113 |
that are accepted for signing. |