openssh/regress/cert-hostkey.sh

60 for ktype in $PLAIN_TYPES ; do
61 	verbose "$tid: sign host ${ktype} cert"
63 	${SSHKEYGEN} -q -N '' -t ${ktype} \
64 	    -f $OBJ/cert_host_key_${ktype} || \
65 		fatal "ssh-keygen of cert_host_key_${ktype} failed"
67 	    $OBJ/cert_host_key_${ktype}.pub || fatal "KRL update failed"
68 	cat $OBJ/cert_host_key_${ktype}.pub >> $OBJ/host_revoked_plain
71 	    -n $HOSTS $OBJ/cert_host_key_${ktype} ||
72 		fatal "couldn't sign cert_host_key_${ktype}"
74 	    $OBJ/cert_host_key_${ktype}-cert.pub || \
76 	cat $OBJ/cert_host_key_${ktype}-cert.pub >> $OBJ/host_revoked_cert
103 	for ktype in $PLAIN_TYPES ; do
104 		verbose "$tid: host ${ktype} cert connect privsep $privsep"
107 			echo HostKey $OBJ/cert_host_key_${ktype}
108 			echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
113 		attempt_connect "$ktype basic connect"			"yes"
114 		attempt_connect "$ktype empty KRL"			"yes" \
116 		attempt_connect "$ktype KRL w/ plain key revoked"	"no" \
118 		attempt_connect "$ktype KRL w/ cert revoked"		"no" \
120 		attempt_connect "$ktype KRL w/ CA revoked"		"no" \
122 		attempt_connect "$ktype empty plaintext revocation"	"yes" \
124 		attempt_connect "$ktype plain key plaintext revocation"	"no" \
126 		attempt_connect "$ktype cert plaintext revocation"	"no" \
128 		attempt_connect "$ktype CA plaintext revocation"	"no" \
138 	for ktype in $PLAIN_TYPES ; do
139 		test -f "$OBJ/cert_host_key_${ktype}.pub" || fatal "no pubkey"
140 		printf "@revoked * `cat $OBJ/cert_host_key_${ktype}.pub`\n"
145 	for ktype in $PLAIN_TYPES ; do
146 		verbose "$tid: host ${ktype} revoked cert privsep $privsep"
149 			echo HostKey $OBJ/cert_host_key_${ktype}
150 			echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
174 for ktype in $PLAIN_TYPES ; do
175 	verbose "$tid: host ${ktype} revoked cert"
178 		echo HostKey $OBJ/cert_host_key_${ktype}
179 		echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
240 for ktype in $PLAIN_TYPES ; do
242 	verbose "$tid: host ${ktype} ${v} cert downgrade to raw key"
244 	${SSHKEYGEN} -q -N '' -t ${ktype} \
245 	    -f $OBJ/cert_host_key_${ktype} || \
246 		fail "ssh-keygen of cert_host_key_${ktype} failed"
249 	    -n $HOSTS $OBJ/cert_host_key_${ktype} ||
250 		fail "couldn't sign cert_host_key_${ktype}"
253 		cat $OBJ/cert_host_key_${ktype}.pub
257 		echo HostKey $OBJ/cert_host_key_${ktype}
258 		echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub