diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2018-03-12 00:56:03 +0000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2018-03-14 18:55:47 +1100 |
| commit | 500396b204c58e78ad9d081516a365a9f28dc3fd (patch) | |
| tree | a84bdc544228dfdd2dbbac68063687ab7e102f36 | |
| parent | a76b5d26c2a51d7dd7a5164e683ab3f4419be215 (diff) | |
upstream: check valid-before option in authorized_keys
OpenBSD-Regress-ID: 7e1e4a84f7f099a290e5a4cbf4196f90ff2d7e11
| -rw-r--r-- | regress/key-options.sh | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/regress/key-options.sh b/regress/key-options.sh index 5e3a4f66..99184994 100644 --- a/regress/key-options.sh +++ b/regress/key-options.sh @@ -1,4 +1,4 @@ -# $OpenBSD: key-options.sh,v 1.6 2018/03/04 01:46:48 djm Exp $ +# $OpenBSD: key-options.sh,v 1.7 2018/03/12 00:56:03 djm Exp $ # Placed in the Public Domain. tid="key options" @@ -94,4 +94,21 @@ for f in 127.0.0.1 '127.0.0.0\/8'; do fi done -rm -f "$origkeys" +check_valid_before() { + which=$1 + opts=$2 + expect=$3 + sed "s/.*/$opts &/" $origkeys >$authkeys + verbose "key option valid-before $which" + ${SSH} -q -F $OBJ/ssh_proxy somehost true + case "$expect" in + fail) test $? -eq 0 && fail "key option succeeded $which" ;; + pass) test $? -ne 0 && fail "key option failed $which" ;; + *) fatal "unknown expectation $expect" ;; + esac +} +check_valid_before "default" "" "pass" +check_valid_before "invalid" 'valid-before="INVALID"' "fail" +check_valid_before "expired" 'valid-before="19990101"' "fail" +check_valid_before "valid" 'valid-before="20380101"' "pass" + |