openssh/regress/cert-hostkey.sh

30 for ktype in $PLAIN_TYPES ; do
31 	verbose "$tid: sign host ${ktype} cert"
33 	${SSHKEYGEN} -q -N '' -t ${ktype} \
34 	    -f $OBJ/cert_host_key_${ktype} || \
35 		fail "ssh-keygen of cert_host_key_${ktype} failed"
38 	    -n $HOSTS $OBJ/cert_host_key_${ktype} ||
39 		fail "couldn't sign cert_host_key_${ktype}"
40 	type_has_legacy $ktype || continue
41 	cp $OBJ/cert_host_key_${ktype} $OBJ/cert_host_key_${ktype}_v00
42 	cp $OBJ/cert_host_key_${ktype}.pub $OBJ/cert_host_key_${ktype}_v00.pub
43 	verbose "$tid: sign host ${ktype}_v00 cert"
46 	    -n $HOSTS $OBJ/cert_host_key_${ktype}_v00 ||
47 		fail "couldn't sign cert_host_key_${ktype}_v00"
52 	for ktype in $PLAIN_TYPES rsa_v00 dsa_v00; do
53 		verbose "$tid: host ${ktype} cert connect privsep $privsep"
56 			echo HostKey $OBJ/cert_host_key_${ktype}
57 			echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
75 	for ktype in $PLAIN_TYPES rsa_v00 dsa_v00; do
76 		test -f "$OBJ/cert_host_key_${ktype}.pub" || fatal "no pubkey"
77 		printf "@revoked * `cat $OBJ/cert_host_key_${ktype}.pub`\n"
81 	for ktype in $PLAIN_TYPES rsa_v00 dsa_v00; do
82 		verbose "$tid: host ${ktype} revoked cert privsep $privsep"
85 			echo HostKey $OBJ/cert_host_key_${ktype}
86 			echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
108 for ktype in $PLAIN_TYPES rsa_v00 dsa_v00 ; do
109 	verbose "$tid: host ${ktype} revoked cert"
112 		echo HostKey $OBJ/cert_host_key_${ktype}
113 		echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
179 	for ktype in $PLAIN_TYPES ; do
180 		type_has_legacy $ktype || continue
182 		verbose "$tid: host ${ktype} ${v} cert downgrade to raw key"
184 		${SSHKEYGEN} -q -N '' -t ${ktype} \
185 		    -f $OBJ/cert_host_key_${ktype} || \
186 			fail "ssh-keygen of cert_host_key_${ktype} failed"
189 		    -n $HOSTS $OBJ/cert_host_key_${ktype} ||
190 			fail "couldn't sign cert_host_key_${ktype}"
193 			cat $OBJ/cert_host_key_${ktype}.pub
197 			echo HostKey $OBJ/cert_host_key_${ktype}
198 			echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub