Fabian Stelzer <fs@xxxxxxxxxxxx> writes: >> Thanks for your report. I tested the described behaviour and I think >> this is a bug in openssh. find-principals will never match on a CA >> cert with wildcard principals whereas wildcards for non-CA keys work >> just fine. I've emailed the openssh maintainer about it and will >>prepare a patch. > > Just for reference to the git list: > This issue was fixed with > https://github.com/openssh/openssh-portable/commit/15b7199a1fd37eff4c695e09d573f3db9f4274b7 > which should be in the next openssh release. Thanks for a heads-up.