RepoMirrors/openssh
1
0
Fork 0
mirror of git://anongit.mindrot.org/openssh.git synced 2025-01-03 00:02:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

upstream: regression test for match-principals. Mostly by Fabian

Browse Source 
Stelzer

OpenBSD-Regress-ID: ced0bec89af90935103438986bbbc4ad1df9cfa7
This commit is contained in:
djm@openbsd.org 2021-11-27 07:20:58 +00:00 committed by Damien Miller
parent 78230b3ec8
commit a443491e67
1 changed files with 27 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
regress/sshsig.sh
View File

@ -1,4 +1,4 @@
# $OpenBSD: sshsig.sh,v 1.9 2021/11/18 03:53:48 djm Exp $
# $OpenBSD: sshsig.sh,v 1.10 2021/11/27 07:20:58 djm Exp $
# Placed in the Public Domain.
tid="sshsig"
@ -410,6 +410,32 @@ for t in $SIGNKEYS; do
done
# Test key independant match-principals
(
printf "principal1 " ; cat $pubkey;
printf "princi* " ; cat $pubkey;
printf "unique " ; cat $pubkey;
) > $OBJ/allowed_signers
verbose "$tid: match principals"
${SSHKEYGEN} -Y match-principals -f $OBJ/allowed_signers -I "unique" | \
fgrep "unique" >/dev/null || \
fail "faild to match static principal"
${SSHKEYGEN} -Y match-principals -f $OBJ/allowed_signers -I "princip" | \
fgrep "princi*" >/dev/null || \
fail "faild to match wildcard principal"
${SSHKEYGEN} -Y match-principals -f $OBJ/allowed_signers -I "principal1" | \
fgrep -e "principal1" -e "princi*" >/dev/null || \
fail "faild to match static and wildcard principal"
verbose "$tid: nomatch principals"
for x in princ prince unknown ; do
${SSHKEYGEN} -Y match-principals -f $OBJ/allowed_signers \
-I $x >/dev/null 2>&1 && \
fail "succeeded to match unknown principal \"$x\""
done
trace "kill agent"
${SSHAGENT} -k > /dev/null