xCAT/xcat-core
2
0
Fork 0
mirror of https://github.com/xcat2/xcat-core.git synced 2025-05-22 03:32:04 +00:00
Code Issues Releases Wiki Activity

Merge pull request #7202 from peterwywong/hostkeys-2

Browse Source 
Improve PR 7193: Check host keys supported by the operating system and report new ones if any
This commit is contained in:
besawn 2022-06-21 09:30:56 -04:00 committed by GitHub
commit 3a301a1b19
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
xCAT-test/autotest/testcase/install_xCAT/case0
View File

@ -21,6 +21,16 @@ check:rc==0
check:output=~running
cmd:rm -rf /install_xCAT_xcat-core.tar.bz2 /install_xCAT_xcat-dep.tar.bz2
# Check host keys supported by the operating system and report new ones, if any.
cmd:echo -e "dsa\necdsa\ned25519\nrsa\nrsa1" > /tmp/known_host_keys
check:rc==0
cmd:ssh-keygen --help 2>&1 | grep "\[-t" | sed -E 's/.*(\[\-t.*)/\1/' | cut -d "[" -f2 | cut -d "]" -f1 | sed 's/-t//' | sed 's/|//g' | xargs -n 1 | grep -v '\-sk' > /tmp/current_os_host_keys
check:rc==0
cmd:diff /tmp/known_host_keys /tmp/current_os_host_keys
check:output!~>
cmd:rm -f /tmp/known_host_keys /tmp/current_os_host_keys
check:rc==0
# Obtain the highest version of TLS supported by OpenSSL/TLS.
cmd:openssl s_client --help 2>&1 | grep "\-tls1" | awk '{print $1}' | sort | tail -1
check:rc==0
@ -61,6 +71,16 @@ cmd:sleep 5
cmd:service goconserver status
cmd:service conserver status
# Check host keys supported by the operating system and report new ones, if any.
cmd:echo -e "dsa\necdsa\ned25519\nrsa\nrsa1" > /tmp/known_host_keys
check:rc==0
cmd:ssh-keygen --help 2>&1 | grep "\[-t" | sed -E 's/.*(\[\-t.*)/\1/' | cut -d "[" -f2 | cut -d "]" -f1 | sed 's/-t//' | sed 's/|//g' | xargs -n 1 | grep -v '\-sk' > /tmp/current_os_host_keys
check:rc==0
cmd:diff /tmp/known_host_keys /tmp/current_os_host_keys
check:output!~>
cmd:rm -f /tmp/known_host_keys /tmp/current_os_host_keys
check:rc==0
# Obtain the highest version of TLS supported by OpenSSL/TLS.
cmd:openssl s_client --help 2>&1 | grep "\-tls1" | awk '{print $1}' | sort | tail -1
check:rc==0