5.2.7. Key Constraints

このページは RFC 9987 の該当節を要約し, SSH agent protocol の番号, メッセージ名, セキュリティ要件を保持します.

Constraints are appended to constrained add-key requests as type bytes followed by constraint-specific data. If an agent does not recognize or support a requested constraint, it MUST abort parsing, refuse the request, and return SSH_AGENT_FAILURE.

Defined constraints include SSH_AGENT_CONSTRAIN_LIFETIME with a uint32 seconds value, SSH_AGENT_CONSTRAIN_CONFIRM, and SSH_AGENT_CONSTRAIN_EXTENSION with an extension name and extension-specific details. Vendor extension names MUST follow the domain-qualified naming scheme from [RFC4251], for example [email protected].