From 031d4d700009d4a8d5cbfdb67b8bfc89bcbf27d6 Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano.cano@gmail.com>
Date: Tue, 23 Nov 2021 17:52:17 -0800
Subject: [PATCH] Return BadRequest when validating sign options.

---
 authority/ssh.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/authority/ssh.go b/authority/ssh.go
index d533374a..7b8f26e2 100644
--- a/authority/ssh.go
+++ b/authority/ssh.go
@@ -173,7 +173,7 @@ func (a *Authority) SignSSH(ctx context.Context, key ssh.PublicKey, opts provisi
 		// validate the given SSHOptions
 		case provisioner.SSHCertOptionsValidator:
 			if err := o.Valid(opts); err != nil {
-				return nil, errs.ForbiddenErr(err, "error validating ssh certificate options")
+				return nil, errs.BadRequestErr(err, "error validating ssh certificate options")
 			}
 
 		default: