5.2.7. Key Constraints

Cette page resume la section correspondante du RFC 9987 et conserve les numeros, noms de messages et exigences de securite du protocole agent SSH.

Constraints are appended to constrained add-key requests as type bytes followed by constraint-specific data. If an agent does not recognize or support a requested constraint, it MUST abort parsing, refuse the request, and return SSH_AGENT_FAILURE.

Defined constraints include SSH_AGENT_CONSTRAIN_LIFETIME with a uint32 seconds value, SSH_AGENT_CONSTRAIN_CONFIRM, and SSH_AGENT_CONSTRAIN_EXTENSION with an extension name and extension-specific details. Vendor extension names MUST follow the domain-qualified naming scheme from [RFC4251], for example [email protected].