Lines Matching refs:ktype
84 for ktype in $PLAIN_TYPES ; do
85 verbose "$tid: sign host ${ktype} cert"
87 ${SSHKEYGEN} -q -N '' -t ${ktype} \
88 -f $OBJ/cert_host_key_${ktype} || \
89 fatal "ssh-keygen of cert_host_key_${ktype} failed"
91 $OBJ/cert_host_key_${ktype}.pub || fatal "KRL update failed"
92 cat $OBJ/cert_host_key_${ktype}.pub >> $OBJ/host_revoked_plain
93 case $ktype in
94 rsa-sha2-*) tflag="-t $ktype"; ca="$OBJ/host_ca_key2" ;;
99 -n $HOSTS $OBJ/cert_host_key_${ktype} ||
100 fatal "couldn't sign cert_host_key_${ktype}"
102 $OBJ/cert_host_key_${ktype}-cert.pub || \
104 cat $OBJ/cert_host_key_${ktype}-cert.pub >> $OBJ/host_revoked_cert
131 for ktype in $PLAIN_TYPES ; do
132 verbose "$tid: host ${ktype} cert connect privsep $privsep"
135 echo HostKey $OBJ/cert_host_key_${ktype}
136 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
141 attempt_connect "$ktype basic connect" "yes"
142 attempt_connect "$ktype empty KRL" "yes" \
144 attempt_connect "$ktype KRL w/ plain key revoked" "no" \
146 attempt_connect "$ktype KRL w/ cert revoked" "no" \
148 attempt_connect "$ktype KRL w/ CA revoked" "no" \
150 attempt_connect "$ktype empty plaintext revocation" "yes" \
152 attempt_connect "$ktype plain key plaintext revocation" "no" \
154 attempt_connect "$ktype cert plaintext revocation" "no" \
156 attempt_connect "$ktype CA plaintext revocation" "no" \
163 for ktype in $PLAIN_TYPES ; do
164 test -f "$OBJ/cert_host_key_${ktype}.pub" || fatal "no pubkey"
165 kh_revoke cert_host_key_${ktype}.pub >> $OBJ/known_hosts-cert.orig
169 for ktype in $PLAIN_TYPES ; do
170 verbose "$tid: host ${ktype} revoked cert privsep $privsep"
173 echo HostKey $OBJ/cert_host_key_${ktype}
174 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
192 for ktype in $PLAIN_TYPES ; do
193 verbose "$tid: host ${ktype} revoked cert"
196 echo HostKey $OBJ/cert_host_key_${ktype}
197 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
218 case $ktype in
219 rsa-sha2-*) tflag="-t $ktype"; ca="$OBJ/host_ca_key2" ;;
257 for ktype in $PLAIN_TYPES ; do
259 verbose "$tid: host ${ktype} ${v} cert downgrade to raw key"
261 ${SSHKEYGEN} -q -N '' -t ${ktype} -f $OBJ/cert_host_key_${ktype} || \
262 fail "ssh-keygen of cert_host_key_${ktype} failed"
263 case $ktype in
264 rsa-sha2-*) tflag="-t $ktype"; ca="$OBJ/host_ca_key2" ;;
269 -n $HOSTS $OBJ/cert_host_key_${ktype} ||
270 fatal "couldn't sign cert_host_key_${ktype}"
273 cat $OBJ/cert_host_key_${ktype}.pub
277 echo HostKey $OBJ/cert_host_key_${ktype}
278 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub