mirror of
https://github.com/libssh2/libssh2.git
synced 2025-07-29 13:01:14 +03:00
e62a72b22f
Also: - merge CI check and shellcheck jobs into a single one. To share the same shellcheck version and less overhead. - use `set -eu` in more scripts. - make sure CI scripts run from any cwd. To make it easy to run them on local machine. - minor tidy-ups. Closes #1618
82 lines
3.4 KiB
Bash
Executable File
82 lines
3.4 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# Copyright (C) Viktor Szakats
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
set -eu
|
|
|
|
# Generate test keys
|
|
|
|
# tests/openssh_server
|
|
|
|
rm ./openssh_server/*_key || true
|
|
|
|
ssh-keygen -t rsa -b 2048 -N '' -m PEM -C '' -f 'openssh_server/ssh_host_rsa_key'
|
|
ssh-keygen -t ecdsa -b 256 -N '' -m PEM -C '' -f 'openssh_server/ssh_host_ecdsa_key'
|
|
ssh-keygen -t ed25519 -N '' -C '' -f 'openssh_server/ssh_host_ed25519_key'
|
|
|
|
rm ./openssh_server/ca_* || true
|
|
|
|
ssh-keygen -t ecdsa -b 521 -N '' -C 'ca_ecdsa' -f 'openssh_server/ca_ecdsa'
|
|
ssh-keygen -t rsa -b 3072 -N '' -C 'ca_rsa' -f 'openssh_server/ca_rsa'
|
|
|
|
# tests
|
|
|
|
rm './key_'* || true
|
|
|
|
pw='libssh2'
|
|
id='identity'
|
|
pr='libssh2'
|
|
|
|
ssh-keygen -t dsa -N '' -m PEM -C 'key_dsa' -f 'key_dsa'
|
|
ssh-keygen -t dsa -N '' -m PEM -C 'key_dsa_wrong' -f 'key_dsa_wrong' # not to add to 'authorized_keys'
|
|
|
|
ssh-keygen -t rsa -b 2048 -N '' -m PEM -C 'key_rsa' -f 'key_rsa'
|
|
ssh-keygen -t rsa -b 2048 -N "${pw}" -m PEM -C 'key_rsa_encrypted' -f 'key_rsa_encrypted'
|
|
ssh-keygen -t rsa -b 2048 -N '' -C 'key_rsa_openssh' -f 'key_rsa_openssh'
|
|
ssh-keygen -t rsa -b 2048 -N "${pw}" -C 'key_rsa_aes256gcm' -f 'key_rsa_aes256gcm' -Z aes256-gcm@openssh.com
|
|
ssh-keygen -t rsa -b 4096 -N '' -C 'key_rsa_signed' -f 'key_rsa_signed'
|
|
ssh-keygen -I "${id}" -n "${pr}" -s 'openssh_server/ca_rsa' 'key_rsa_signed.pub'
|
|
ssh-keygen -t rsa -b 4096 -N '' -C 'key_rsa_sha2_256_signed' -f 'key_rsa_sha2_256_signed'
|
|
ssh-keygen -I "${id}" -n "${pr}" -s 'openssh_server/ca_rsa' 'key_rsa_sha2_256_signed.pub'
|
|
|
|
ssh-keygen -t ecdsa -b 384 -N '' -C 'key_ecdsa' -f 'key_ecdsa'
|
|
ssh-keygen -t ecdsa -b 384 -N '' -C 'key_ecdsa_signed' -f 'key_ecdsa_signed'
|
|
ssh-keygen -I "${id}" -n "${pr}" -s 'openssh_server/ca_ecdsa' 'key_ecdsa_signed.pub'
|
|
|
|
ssh-keygen -t ed25519 -N '' -C 'key_ed25519' -f 'key_ed25519'
|
|
ssh-keygen -t ed25519 -N "${pw}" -C 'key_ed25519_encrypted' -f 'key_ed25519_encrypted' -Z aes256-ctr
|
|
|
|
cat \
|
|
'key_dsa.pub' \
|
|
'key_rsa.pub' \
|
|
'key_rsa_encrypted.pub' \
|
|
'key_rsa_openssh.pub' \
|
|
'key_rsa_aes256gcm.pub' \
|
|
'key_ed25519.pub' \
|
|
'key_ed25519_encrypted.pub' \
|
|
'key_ecdsa.pub' \
|
|
> 'openssh_server/authorized_keys'
|
|
|
|
cat \
|
|
'openssh_server/ca_ecdsa.pub' \
|
|
'openssh_server/ca_rsa.pub' \
|
|
> 'openssh_server/ca_user_keys.pub'
|
|
|
|
# tests/test_*.c
|
|
|
|
echo 'Add these public keys and hashes to:'
|
|
echo ' - test_hostkey.c'
|
|
echo ' - test_hostkey_hash.c'
|
|
|
|
for fn in ./openssh_server/*_key.pub; do
|
|
pub="$(grep -a -o -E ' [A-Za-z0-9+/=]+' < "${fn}" | head -1 | cut -c 2-)"
|
|
printf '====== %s\n' "${fn}"
|
|
printf 'BASE64 %s\n' "${pub}"
|
|
{
|
|
printf 'MD5 %s\n' "$(printf '%s' "${pub}" | openssl base64 -d -A | openssl dgst -hex -md5)"
|
|
printf 'SHA1 %s\n' "$(printf '%s' "${pub}" | openssl base64 -d -A | openssl dgst -hex -sha1)"
|
|
printf 'SHA256 %s\n' "$(printf '%s' "${pub}" | openssl base64 -d -A | openssl dgst -hex -sha256)"
|
|
} | tr '[:lower:]' '[:upper:]'
|
|
done
|