Hello. I would like for the ssh-keyscan(1) -t argument (key type) to support the certificate types too (such as ssh-ed25519-cert-v01@xxxxxxxxxxx), as from `ssh -Q key`. This would allow to dump remote host certificates, useful for various situations like certificate expiration monitoring. Regards, Aaron Jones
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature
_______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev