bin/sign: Don't explicitly request a particular certificate version.

[ssh-ca] / bin / sign

diff --git a/bin/sign b/bin/sign
index 7c84ae6..32592be 100755 (executable)
--- a/bin/sign
+++ b/bin/sign
@@ -40,7 +40,7 @@ while read line <&3; do
   ## Read the host line.
   set -- $line
   case "$1" in
-    @domain) domain=$2 ;;
+    @domain) domain=$2; continue ;;
     @*) echo >&2 "$0: unknown directive \`$1'"; exit 1 ;;
   esac
   host=$1
@@ -67,7 +67,7 @@ while read line <&3; do
   for kt in $rawkeytypes; do
     if [ ! -f host/$host-$kt.pub ]; then continue; fi
     cp host/$host-$kt.pub publish.new/
-    ssh-keygen -q -tv00 -sca/ca-$kt \
+    ssh-keygen -q -sca/ca-$kt \
       -h -I"$cacomment:$host.$domain" -n$names \
       -V$validity \
       publish.new/$host-$kt.pub