openssh/regress/cert-userkey.sh

6 rm -f $OBJ/authorized_keys_$USER $OBJ/user_ca_key* $OBJ/cert_user_key*
41 	    -I "regress user key for $USER" \
42 	    -n ${USER},mekmitasdigoat $tflag $OBJ/cert_user_key_${ktype} || \
53 		rm -f $OBJ/authorized_keys_$USER
69 		rm -f $OBJ/authorized_principals_$USER
78 		echo > $OBJ/authorized_principals_$USER
87 		echo gregorsamsa > $OBJ/authorized_principals_$USER
96 		echo mekmitasdigoat > $OBJ/authorized_principals_$USER
105 		echo 'blah mekmitasdigoat' > $OBJ/authorized_principals_$USER
115 		    $OBJ/authorized_principals_$USER
126 		    $OBJ/authorized_principals_$USER
134 		rm -f $OBJ/authorized_principals_$USER
150 		) > $OBJ/authorized_keys_$USER
162 		) > $OBJ/authorized_keys_$USER
178 		) > $OBJ/authorized_keys_$USER
180 		echo > $OBJ/authorized_keys_$USER
292 				) > $OBJ/authorized_keys_$USER
294 				echo > $OBJ/authorized_keys_$USER
306 			    -I "regress user key for $USER" \
326 test_one "correct principal"	success "-n ${USER}"
327 test_one "host-certificate"	failure "-n ${USER} -h"
329 test_one "cert not yet valid"	failure "-n ${USER} -V20200101:20300101"
330 test_one "cert expired"		failure "-n ${USER} -V19800101:19900101"
331 test_one "cert valid interval"	success "-n ${USER} -V-1w:+2w"
332 test_one "wrong source-address"	failure "-n ${USER} -Osource-address=10.0.0.0/8"
333 test_one "force-command"	failure "-n ${USER} -Oforce-command=false"
343 rm -f $OBJ/authorized_keys_$USER
344 echo mekmitasdigoat > $OBJ/authorized_principals_$USER
351 rm -f $OBJ/authorized_principals_$USER
359     "-n ${USER} -Oforce-command=true" \
362     "-n ${USER} -Oforce-command=false" \
365     "-n ${USER} -Oforce-command=false" \
368     "-n ${USER} -Oforce-command=true" \
377 	    "regress user key for $USER" \
378 	    -n $USER $OBJ/cert_user_key_${ktype} ||
388 rm -f $OBJ/authorized_keys_$USER $OBJ/user_ca_key* $OBJ/cert_user_key*
389 rm -f $OBJ/authorized_principals_$USER