openssh/regress/cert-userkey.sh

6 rm -f $OBJ/authorized_keys_$USER $OBJ/user_ca_key* $OBJ/cert_user_key*
27 	${SSHKEYGEN} -q -s $OBJ/user_ca_key -I "regress user key for $USER" \
28 	    -z $$ -n ${USER},mekmitasdigoat $OBJ/cert_user_key_${ktype} ||
39 		rm -f $OBJ/authorized_keys_$USER
55 		rm -f $OBJ/authorized_principals_$USER
64 		echo > $OBJ/authorized_principals_$USER
73 		echo gregorsamsa > $OBJ/authorized_principals_$USER
82 		echo mekmitasdigoat > $OBJ/authorized_principals_$USER
91 		echo 'blah mekmitasdigoat' > $OBJ/authorized_principals_$USER
101 		    $OBJ/authorized_principals_$USER
112 		    $OBJ/authorized_principals_$USER
120 		rm -f $OBJ/authorized_principals_$USER
136 		) > $OBJ/authorized_keys_$USER
148 		) > $OBJ/authorized_keys_$USER
164 		) > $OBJ/authorized_keys_$USER
166 		echo > $OBJ/authorized_keys_$USER
278 				) > $OBJ/authorized_keys_$USER
280 				echo > $OBJ/authorized_keys_$USER
292 			    -I "regress user key for $USER" \
312 test_one "correct principal"	success "-n ${USER}"
313 test_one "host-certificate"	failure "-n ${USER} -h"
315 test_one "cert not yet valid"	failure "-n ${USER} -V20200101:20300101"
316 test_one "cert expired"		failure "-n ${USER} -V19800101:19900101"
317 test_one "cert valid interval"	success "-n ${USER} -V-1w:+2w"
318 test_one "wrong source-address"	failure "-n ${USER} -Osource-address=10.0.0.0/8"
319 test_one "force-command"	failure "-n ${USER} -Oforce-command=false"
329 rm -f $OBJ/authorized_keys_$USER
330 echo mekmitasdigoat > $OBJ/authorized_principals_$USER
337 rm -f $OBJ/authorized_principals_$USER
349 	    "regress user key for $USER" \
350 	    -n $USER $OBJ/cert_user_key_${ktype} ||
360 rm -f $OBJ/authorized_keys_$USER $OBJ/user_ca_key* $OBJ/cert_user_key*
361 rm -f $OBJ/authorized_principals_$USER