Add OpenSSH certificate signing path

This commit is contained in:
Eric Wendland 2026-05-19 15:56:47 +02:00
commit 91c65e367d
9 changed files with 160 additions and 13 deletions

View file

@ -421,6 +421,8 @@ pub enum SshCertCommand {
#[arg(long)]
out: Option<PathBuf>,
#[arg(long)]
sign: bool,
#[arg(long)]
subject: Option<String>,
},
Import {
@ -736,6 +738,7 @@ fn request_for_command(command: Command) -> Result<ControlRequest> {
valid_for,
serial,
out,
sign,
subject,
} => ControlRequest::SshCertApprove {
request_id,
@ -743,6 +746,7 @@ fn request_for_command(command: Command) -> Result<ControlRequest> {
valid_for,
serial,
out,
sign,
subject,
},
SshCertCommand::Import {
@ -1201,6 +1205,10 @@ fn print_response(response: ControlResponse, json: bool) -> Result<()> {
}
println!("signing_command:");
println!("{}", shell_quote_command(&approval.signing_command));
println!("signed: {}", approval.signed);
if let Some(certificate_id) = approval.certificate_id {
println!("certificate_id: {certificate_id}");
}
println!("note: {}", approval.note);
}
ControlResponse::SshCertImported { certificate } => {