G Derber

This is looking more complicated. The sshpubkey attribute has been defined globally, but adding the actual key an error saying the attribute isn't available.

With smartcards and an ssh certificate authority, this isn't really needed. Moving to the 2.0 project

How to keep track of all revoked certificates? This needs to be permanent. This is what the CRL serial files are for. Now how to read and write those files,

Considering that with smartcards only a pin is required, not a full password, this is being moved to the 2.0 release plan