1 # $OpenBSD: sshcfgparse.sh,v 1.4 2018/07/04 13:51:12 djm Exp $
2 # Placed in the Public Domain.
6 expect_result_present() {
8 for _expect in "$@" ; do
9 echo "$f" | tr ',' '\n' | grep "^$_expect\$" >/dev/null
10 if test $? -ne 0 ; then
11 fail "missing expected \"$_expect\" from \"$_str\""
15 expect_result_absent() {
17 for _expect in "$@" ; do
18 echo "$f" | tr ',' '\n' | grep "^$_expect\$" >/dev/null
19 if test $? -eq 0 ; then
20 fail "unexpected \"$_expect\" present in \"$_str\""
25 verbose "reparse minimal config"
26 (${SSH} -G -F $OBJ/ssh_config somehost >$OBJ/ssh_config.1 &&
27 ${SSH} -G -F $OBJ/ssh_config.1 somehost >$OBJ/ssh_config.2 &&
28 diff $OBJ/ssh_config.1 $OBJ/ssh_config.2) || fail "reparse minimal config"
31 f=`${SSH} -GF $OBJ/ssh_config host | awk '/exitonforwardfailure/{print $2}'`
32 test "$f" = "no" || fail "exitonforwardfailure default"
33 f=`${SSH} -GF $OBJ/ssh_config -W a:1 h | awk '/exitonforwardfailure/{print $2}'`
34 test "$f" = "yes" || fail "exitonforwardfailure enable"
35 f=`${SSH} -GF $OBJ/ssh_config -W a:1 -o exitonforwardfailure=no h | \
36 awk '/exitonforwardfailure/{print $2}'`
37 test "$f" = "no" || fail "exitonforwardfailure override"
39 f=`${SSH} -GF $OBJ/ssh_config host | awk '/clearallforwardings/{print $2}'`
40 test "$f" = "no" || fail "clearallforwardings default"
41 f=`${SSH} -GF $OBJ/ssh_config -W a:1 h | awk '/clearallforwardings/{print $2}'`
42 test "$f" = "yes" || fail "clearallforwardings enable"
43 f=`${SSH} -GF $OBJ/ssh_config -W a:1 -o clearallforwardings=no h | \
44 awk '/clearallforwardings/{print $2}'`
45 test "$f" = "no" || fail "clearallforwardings override"
47 verbose "user first match"
48 user=`awk '$1=="User" {print $2}' $OBJ/ssh_config`
49 f=`${SSH} -GF $OBJ/ssh_config host | awk '/^user /{print $2}'`
50 test "$f" = "$user" || fail "user from config, expected '$user' got '$f'"
51 f=`${SSH} -GF $OBJ/ssh_config -o user=foo -l bar baz@host | awk '/^user /{print $2}'`
52 test "$f" = "foo" || fail "user first match -oUser, expected 'foo' got '$f' "
53 f=`${SSH} -GF $OBJ/ssh_config -lbar baz@host user=foo baz@host | awk '/^user /{print $2}'`
54 test "$f" = "bar" || fail "user first match -l, expected 'bar' got '$f'"
55 f=`${SSH} -GF $OBJ/ssh_config baz@host -o user=foo -l bar baz@host | awk '/^user /{print $2}'`
56 test "$f" = "baz" || fail "user first match user@host, expected 'baz' got '$f'"
58 verbose "pubkeyacceptedkeytypes"
60 f=`${SSH} -GF none host | awk '/^pubkeyacceptedkeytypes /{print $2}'`
61 expect_result_present "$f" "ssh-ed25519" "ssh-ed25519-cert-v01.*"
62 expect_result_absent "$f" "ssh-dss"
64 f=`${SSH} -GF none -opubkeyacceptedkeytypes=ssh-ed25519 host | \
65 awk '/^pubkeyacceptedkeytypes /{print $2}'`
66 expect_result_present "$f" "ssh-ed25519"
67 expect_result_absent "$f" "ssh-ed25519-cert-v01.*" "ssh-dss"
68 # Removal from default set
69 f=`${SSH} -GF none -opubkeyacceptedkeytypes=-ssh-ed25519-cert* host | \
70 awk '/^pubkeyacceptedkeytypes /{print $2}'`
71 expect_result_present "$f" "ssh-ed25519"
72 expect_result_absent "$f" "ssh-ed25519-cert-v01.*" "ssh-dss"
73 f=`${SSH} -GF none -opubkeyacceptedkeytypes=-ssh-ed25519 host | \
74 awk '/^pubkeyacceptedkeytypes /{print $2}'`
75 expect_result_present "$f" "ssh-ed25519-cert-v01.*"
76 expect_result_absent "$f" "ssh-ed25519" "ssh-dss"
77 # Append to default set.
78 # XXX this will break for !WITH_OPENSSL
79 f=`${SSH} -GF none -opubkeyacceptedkeytypes=+ssh-dss-cert* host | \
80 awk '/^pubkeyacceptedkeytypes /{print $2}'`
81 expect_result_present "$f" "ssh-ed25519" "ssh-dss-cert-v01.*"
82 expect_result_absent "$f" "ssh-dss"
83 f=`${SSH} -GF none -opubkeyacceptedkeytypes=+ssh-dss host | \
84 awk '/^pubkeyacceptedkeytypes /{print $2}'`
85 expect_result_present "$f" "ssh-ed25519" "ssh-ed25519-cert-v01.*" "ssh-dss"
86 expect_result_absent "$f" "ssh-dss-cert-v01.*"
89 rm -f $OBJ/ssh_config.[012]