cloudtools / ssh-cert-authority

An implementation of an SSH certificate authority.
BSD 2-Clause "Simplified" License
728 stars 71 forks source link

Support forcefully rejecting requests #9

Closed bobveznat closed 9 years ago

bobveznat commented 9 years ago

Signers now have the option to "reject" a certificate request. Rejecting a request permanently disables a cert request so that it will never be signed. Signers can use this to reject certificate requests that violate policy or are, perhaps, unreasonable. After being rejected no one has to worry that the request gets signed at a later date.