Re: Using principal wildcards in gpg.ssh.allowedSignersFile

Fabian Stelzer [off-list ref] writes:

quoted

Thanks for your report. I tested the described behaviour and I think
this is a bug in openssh. find-principals will never match on a CA 
cert with wildcard principals whereas wildcards for non-CA keys work
just fine. I've emailed the openssh maintainer about it and will 
prepare a patch.

Just for reference to the git list:
This issue was fixed with
https://github.com/openssh/openssh-portable/commit/15b7199a1fd37eff4c695e09d573f3db9f4274b7
which should be in the next openssh release.

Thanks for a heads-up.