RepoMirrors
/
openssh
mirror of git://anongit.mindrot.org/openssh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

upstream: check valid-before option in authorized_keys 

OpenBSD-Regress-ID: 7e1e4a84f7f099a290e5a4cbf4196f90ff2d7e11
This commit is contained in:
djm@openbsd.org 2018-03-12 00:56:03 +00:00 committed by Damien Miller
parent a76b5d26c2
commit 500396b204
1 changed files with 19 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
regress/key-options.sh
View File

@ -1,4 +1,4 @@
# $OpenBSD: key-options.sh,v 1.6 2018/03/04 01:46:48 djm Exp $
# $OpenBSD: key-options.sh,v 1.7 2018/03/12 00:56:03 djm Exp $
# Placed in the Public Domain.
tid="key options"
@ -94,4 +94,21 @@ for f in 127.0.0.1 '127.0.0.0\/8'; do
fi
done
rm -f "$origkeys"
check_valid_before() {
which=$1
opts=$2
expect=$3
sed "s/.*/$opts &/" $origkeys >$authkeys
verbose "key option valid-before $which"
${SSH} -q -F $OBJ/ssh_proxy somehost true
case "$expect" in
fail) test $? -eq 0 && fail "key option succeeded $which" ;;
pass) test $? -ne 0 && fail "key option failed $which" ;;
*) fatal "unknown expectation $expect" ;;
esac
}
check_valid_before "default" "" "pass"
check_valid_before "invalid" 'valid-before="INVALID"' "fail"
check_valid_before "expired" 'valid-before="19990101"' "fail"
check_valid_before "valid" 'valid-before="20380101"' "pass"