1
0
mirror of https://github.com/openbsd/src.git synced 2026-05-01 17:46:35 +00:00

very basic testing of multiple files in RevokedKeys and RevokedHostkeys

This commit is contained in:
djm
2026-02-11 22:58:23 +00:00
parent 556dbe6d53
commit 829f23bb15
2 changed files with 6 additions and 3 deletions

View File

@@ -1,4 +1,4 @@
# $OpenBSD: cert-hostkey.sh,v 1.30 2025/12/22 03:36:43 djm Exp $
# $OpenBSD: cert-hostkey.sh,v 1.31 2026/02/11 22:58:23 djm Exp $
# Placed in the Public Domain.
tid="certified host keys"
@@ -143,6 +143,8 @@ for ktype in $PLAIN_TYPES ; do
attempt_connect "$ktype basic connect" "yes"
attempt_connect "$ktype empty KRL" "yes" \
-oRevokedHostKeys=$OBJ/host_krl_empty
attempt_connect "$ktype multiple KRL files" "no" \
-oRevokedHostKeys="/dev/null $OBJ/host_krl_plain"
attempt_connect "$ktype KRL w/ plain key revoked" "no" \
-oRevokedHostKeys=$OBJ/host_krl_plain
attempt_connect "$ktype KRL w/ cert revoked" "no" \

View File

@@ -1,4 +1,4 @@
# $OpenBSD: cert-userkey.sh,v 1.31 2025/12/22 01:50:46 djm Exp $
# $OpenBSD: cert-userkey.sh,v 1.32 2026/02/11 22:58:23 djm Exp $
# Placed in the Public Domain.
tid="certified user keys"
@@ -226,7 +226,8 @@ basic_tests() {
verbose "$tid: ${_prefix} revoked key"
(
cat $OBJ/sshd_proxy_bak
echo "RevokedKeys $OBJ/cert_user_key_revoked"
# Also test multiple RevokedKeys files.
echo "RevokedKeys /dev/null $OBJ/cert_user_key_revoked"
echo "PubkeyAcceptedAlgorithms ${t}"
echo "$extra_sshd"
) > $OBJ/sshd_proxy