Created attachment 3063 [details] proposed patch The documentation in PROTOCOL.certkeys (accidentally, I assume) says ecdsa-sha2-nistp256-cert-v01@openssh.com key types are actually called ecdsa-sha2-nistp256-v01@openssh.com (no -cert), same for the other key sizes. I think the attached patch explains it better than my prose.
Applied - thanks!
Close all resolved bugs after release of OpenSSH 7.7.