openssh/regress/principals-command.sh

6 rm -f $OBJ/user_ca_key* $OBJ/cert_user_key*
7 cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak
21 test -f "$OBJ/authorized_principals_${LOGNAME}" &&
22 	exec cat "$OBJ/authorized_principals_${LOGNAME}"
27 if ! $OBJ/check-perm -m keys-command $PRINCIPALS_CMD ; then
35 ${SSHKEYGEN} -q -N '' -t ed25519  -f $OBJ/user_ca_key || \
37 ${SSHKEYGEN} -q -N '' -t ed25519 -f $OBJ/cert_user_key || \
39 ${SSHKEYGEN} -q -s $OBJ/user_ca_key -I "regress user key for $USER" \
40     -z $$ -n ${USER},mekmitasdigoat $OBJ/cert_user_key || \
49 		rm -f $OBJ/authorized_keys_$USER
51 			cat $OBJ/sshd_proxy_bak
56 			echo "TrustedUserCAKeys $OBJ/user_ca_key.pub"
57 		) > $OBJ/sshd_proxy
64 		echo > $OBJ/authorized_principals_$USER
65 		${SSH} -2i $OBJ/cert_user_key \
66 		    -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
73 		echo gregorsamsa > $OBJ/authorized_principals_$USER
74 		${SSH} -2i $OBJ/cert_user_key \
75 		    -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
82 		echo mekmitasdigoat > $OBJ/authorized_principals_$USER
83 		${SSH} -2i $OBJ/cert_user_key \
84 		    -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
91 		echo 'blah mekmitasdigoat' > $OBJ/authorized_principals_$USER
92 		${SSH} -2i $OBJ/cert_user_key \
93 		    -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
101 		    $OBJ/authorized_principals_$USER
102 		${SSH} -2i $OBJ/cert_user_key \
103 		    -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
111 		    $OBJ/authorized_principals_$USER
112 		${SSH} -2i $OBJ/cert_user_key \
113 		    -F $OBJ/ssh_proxy somehost false >/dev/null 2>&1
119 		rm -f $OBJ/authorized_principals_$USER
121 			cat $OBJ/sshd_proxy_bak
123 		) > $OBJ/sshd_proxy
129 			cat $OBJ/user_ca_key.pub
130 		) > $OBJ/authorized_keys_$USER
131 		${SSH} -2i $OBJ/cert_user_key \
132 		    -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
141 			cat $OBJ/user_ca_key.pub
142 		) > $OBJ/authorized_keys_$USER
143 		${SSH} -2i $OBJ/cert_user_key \
144 		    -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1