You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
87 lines
2.4 KiB
87 lines
2.4 KiB
#!/bin/sh
|
|
# $OpenBSD: mktestdata.sh,v 1.2 2017/04/30 23:33:48 djm Exp $
|
|
|
|
set -ex
|
|
|
|
cd testdata
|
|
|
|
rm -f rsa* dsa* ecdsa* ed25519*
|
|
rm -f known_hosts*
|
|
|
|
gen_all() {
|
|
_n=$1
|
|
_ecdsa_bits=256
|
|
test "x$_n" = "x1" && _ecdsa_bits=384
|
|
test "x$_n" = "x2" && _ecdsa_bits=521
|
|
ssh-keygen -qt rsa -b 1024 -C "RSA #$_n" -N "" -f rsa_$_n
|
|
ssh-keygen -qt dsa -b 1024 -C "DSA #$_n" -N "" -f dsa_$_n
|
|
ssh-keygen -qt ecdsa -b $_ecdsa_bits -C "ECDSA #$_n" -N "" -f ecdsa_$_n
|
|
ssh-keygen -qt ed25519 -C "ED25519 #$_n" -N "" -f ed25519_$_n
|
|
# Don't need private keys
|
|
rm -f rsa_$_n dsa_$_n ecdsa_$_n ed25519_$_n
|
|
}
|
|
|
|
hentries() {
|
|
_preamble=$1
|
|
_kspec=$2
|
|
for k in `ls -1 $_kspec | sort` ; do
|
|
printf "$_preamble "
|
|
cat $k
|
|
done
|
|
echo
|
|
}
|
|
|
|
gen_all 1
|
|
gen_all 2
|
|
gen_all 3
|
|
gen_all 4
|
|
gen_all 5
|
|
gen_all 6
|
|
|
|
# A section of known_hosts with hashed hostnames.
|
|
(
|
|
hentries "sisyphus.example.com" "*_5.pub"
|
|
hentries "prometheus.example.com,192.0.2.1,2001:db8::1" "*_6.pub"
|
|
) > known_hosts_hash_frag
|
|
ssh-keygen -Hf known_hosts_hash_frag
|
|
rm -f known_hosts_hash_frag.old
|
|
|
|
# Populated known_hosts, including comments, hashed names and invalid lines
|
|
(
|
|
echo "# Plain host keys, plain host names"
|
|
hentries "sisyphus.example.com" "*_1.pub"
|
|
|
|
echo "# Plain host keys, hostnames + addresses"
|
|
hentries "prometheus.example.com,192.0.2.1,2001:db8::1" "*_2.pub"
|
|
|
|
echo "# Some hosts with wildcard names / IPs"
|
|
hentries "*.example.com,192.0.2.*,2001:*" "*_3.pub"
|
|
|
|
echo "# Hashed hostname and address entries"
|
|
cat known_hosts_hash_frag
|
|
rm -f known_hosts_hash_frag
|
|
echo
|
|
|
|
echo "# Revoked and CA keys"
|
|
printf "@revoked sisyphus.example.com " ; cat ed25519_4.pub
|
|
printf "@cert-authority prometheus.example.com " ; cat ecdsa_4.pub
|
|
printf "@cert-authority *.example.com " ; cat dsa_4.pub
|
|
|
|
printf "\n"
|
|
echo "# Some invalid lines"
|
|
# Invalid marker
|
|
printf "@what sisyphus.example.com " ; cat dsa_1.pub
|
|
# Key missing
|
|
echo "sisyphus.example.com "
|
|
# Key blob missing
|
|
echo "prometheus.example.com ssh-ed25519 "
|
|
# Key blob truncated
|
|
echo "sisyphus.example.com ssh-dsa AAAATgAAAAdz"
|
|
# Invalid type
|
|
echo "sisyphus.example.com ssh-XXX AAAATgAAAAdzc2gtWFhYAAAAP0ZVQ0tPRkZGVUNLT0ZGRlVDS09GRkZVQ0tPRkZGVUNLT0ZGRlVDS09GRkZVQ0tPRkZGVUNLT0ZGRlVDS09GRg=="
|
|
# Type mismatch with blob
|
|
echo "prometheus.example.com ssh-rsa AAAATgAAAAdzc2gtWFhYAAAAP0ZVQ0tPRkZGVUNLT0ZGRlVDS09GRkZVQ0tPRkZGVUNLT0ZGRlVDS09GRkZVQ0tPRkZGVUNLT0ZGRlVDS09GRg=="
|
|
) > known_hosts
|
|
|
|
echo OK
|