Same treatment for the prose the compiler carries: doc and line comments across src/ and tests/, test assertion and error-message strings (prose surfaces: the tunnel-map registration/establish errors, the key-source decode payload, assertion messages), scripts/matrix.sh comment lines, the fuzz sidecar's comments and README (corpus seeds untouched), and the Cargo.toml comment headers plus the crates.io description. The AGENTS.md no-em-dash rule (convention 14) now holds for the whole tracked tree. Verification: repo-wide git grep is clean (single exempt hit: the verification command's own search pattern), cargo test (18 suites, zero failures, default and per-feature builds via scripts/matrix.sh), clippy --all-targets -D warnings and clippy all-features, fmt --check, doc --no-deps, and the fuzz corpus gate (fuzz/shared, 11 tests) all green.
28 lines
1.5 KiB
Plaintext
28 lines
1.5 KiB
Plaintext
# Independent-issuer fingerprint vectors: the alkssh wave-1 test-key
|
||
# fixture set. Each entry pairs a committed OpenSSH ed25519 keypair (the
|
||
# .key/.pub files in this directory) with its fingerprint byte-verbatim
|
||
# from `ssh-keygen -lf`, recorded from OpenSSH_9.6p1
|
||
# (Ubuntu-3ubuntu13.20) at vector-generation time.
|
||
#
|
||
# The keys are throwaway test fixtures minted for the test suite only;
|
||
# their private halves are committed on purpose (committed keys are
|
||
# throwaway fixtures, not secrets; they are never registered anywhere
|
||
# real and never deployed).
|
||
#
|
||
# <fixture> <expected fingerprint>
|
||
alpha.pub SHA256:YyaiL42Xl8tcRRUhNCiqQBsiiRWVHHDR9hpXC45EQ6A
|
||
bravo.pub SHA256:yQf/w2wYBoZ9adDlRGbcNh7AHE3mbqWRCqoGHra1ib0
|
||
charlie.pub SHA256:b5jdwosbZUx5nsY5zfr/ZCt+4sJYehVBq7Xl/wstJ9U
|
||
delta.pub SHA256:4MiQ0KGoTEaklHBTlxPDuQkeu0FTyqEbne10K6Z8CKs
|
||
ca.pub SHA256:mPAq1aRKBuyH3gZs9IcLWtc1X3AhYi50P80mpo7XPSw
|
||
# alpha-cert.pub: the alpha user certificate (serial 1, key id
|
||
# `alkssh-fixture-alpha`, principal `git`, validity 2026–2036): the
|
||
# ssh-keygen output above the fingerprint line is its OpenSSH text; the
|
||
# certificate's embedded public half is alpha.pub (the same fingerprint
|
||
# as alpha.pub; `ssh-keygen -lf alpha-cert.pub` reports it with the
|
||
# ED25519-CERT type). The cert was signed by the throwaway ca key at
|
||
# vector-generation time (w2-auth-bridge's auth_openssh_certificate
|
||
# decline fixture). `ca.key`'s private half is committed on the same
|
||
# fixture rationale as every other private half here.
|
||
alpha-cert.pub SHA256:YyaiL42Xl8tcRRUhNCiqQBsiiRWVHHDR9hpXC45EQ6A
|