openssh/regress/cert-userkey.sh

23 for ktype in $PLAIN_TYPES ; do
24 	verbose "$tid: sign user ${ktype} cert"
25 	${SSHKEYGEN} -q -N '' -t ${ktype} \
26 	    -f $OBJ/cert_user_key_${ktype} || \
27 		fail "ssh-keygen of cert_user_key_${ktype} failed"
29 	    -z $$ -n ${USER},mekmitasdigoat $OBJ/cert_user_key_${ktype} ||
30 		fail "couldn't sign cert_user_key_${ktype}"
31 	type_has_legacy $ktype || continue
32 	cp $OBJ/cert_user_key_${ktype} $OBJ/cert_user_key_${ktype}_v00
33 	cp $OBJ/cert_user_key_${ktype}.pub $OBJ/cert_user_key_${ktype}_v00.pub
34 	verbose "$tid: sign host ${ktype}_v00 cert"
37 	    -n ${USER},mekmitasdigoat $OBJ/cert_user_key_${ktype}_v00 ||
38 		fatal "couldn't sign cert_user_key_${ktype}_v00"
42 for ktype in $PLAIN_TYPES rsa_v00 dsa_v00 ; do
44 		_prefix="${ktype} privsep $privsep"
59 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
68 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
77 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
86 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
95 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
105 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
116 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
135 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
147 		${SSH} -2i $OBJ/cert_user_key_${ktype} \
168 	for ktype in $PLAIN_TYPES rsa_v00 dsa_v00 ; do
170 			_prefix="${ktype} privsep $privsep $auth"
179 			${SSH} -2i $OBJ/cert_user_key_${ktype} \
193 			cp $OBJ/cert_user_key_${ktype}.pub \
195 			${SSH} -2i $OBJ/cert_user_key_${ktype} \
203 			    $OBJ/cert_user_key_${ktype}.pub
204 			${SSH} -2i $OBJ/cert_user_key_${ktype} \
211 			${SSH} -2i $OBJ/cert_user_key_${ktype} \
219 		verbose "$tid: ${ktype} $auth revoked CA key"
225 		${SSH} -2i $OBJ/cert_user_key_${ktype} -F $OBJ/ssh_proxy \
260 		for ktype in rsa rsa_v00 ; do
261 			case $ktype in
282 			verbose "$tid: $ident auth $auth expect $result $ktype"
286 			    $OBJ/cert_user_key_${ktype} ||
287 				fail "couldn't sign cert_user_key_${ktype}"
289 			${SSH} -2i $OBJ/cert_user_key_${ktype} \
338 for ktype in $PLAIN_TYPES rsa_v00 dsa_v00 ; do
339 	case $ktype in
344 	${SSHKEYGEN} $args -q -s $OBJ/cert_user_key_${ktype} -I \
346 	    -n $USER $OBJ/cert_user_key_${ktype} ||
347 		fail "couldn't sign cert_user_key_${ktype}"
348 	verbose "$tid: user ${ktype} connect wrong cert"
349 	${SSH} -2i $OBJ/cert_user_key_${ktype} -F $OBJ/ssh_proxy \