133 lines
3.3 KiB
Plaintext
133 lines
3.3 KiB
Plaintext
(* Module: Test_ssh *)
|
|
module Test_ssh =
|
|
|
|
let conf =
|
|
"# start
|
|
IdentityFile /etc/ssh/identity.asc
|
|
|
|
Match final all
|
|
GSSAPIAuthentication yes
|
|
|
|
Host suse.cz
|
|
ForwardAgent yes
|
|
SendEnv LC_LANG
|
|
|
|
Host *
|
|
ForwardAgent no
|
|
ForwardX11Trusted yes
|
|
|
|
# IdentityFile ~/.ssh/identity
|
|
SendEnv LC_IDENTIFICATION LC_ALL LC_*
|
|
ProxyCommand ssh -q -W %h:%p gateway.example.com
|
|
RemoteForward [1.2.3.4]:20023 localhost:22
|
|
RemoteForward 2221 lhost1:22
|
|
LocalForward 3001 remotehost:3000
|
|
Ciphers aes128-ctr,aes192-ctr
|
|
MACs hmac-md5,hmac-sha1,umac-64@openssh.com
|
|
HostKeyAlgorithms ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,ssh-rsa-cert-v01@openssh.com,ssh-rsa
|
|
KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256
|
|
PubkeyAcceptedKeyTypes ssh-ed25519-cert-v01@openssh.com,ssh-ed25519,ssh-rsa-cert-v01@openssh.com,ssh-rsa
|
|
"
|
|
|
|
test Ssh.lns get conf =
|
|
{ "#comment" = "start" }
|
|
{ "IdentityFile" = "/etc/ssh/identity.asc" }
|
|
{ }
|
|
{ "Match"
|
|
{ "Condition"
|
|
{ "final" = "all" }
|
|
}
|
|
{ "Settings"
|
|
{ "GSSAPIAuthentication" = "yes" }
|
|
{ }
|
|
}
|
|
}
|
|
{ "Host" = "suse.cz"
|
|
{ "ForwardAgent" = "yes" }
|
|
{ "SendEnv"
|
|
{ "1" = "LC_LANG" } }
|
|
{ }
|
|
}
|
|
{ "Host" = "*"
|
|
{ "ForwardAgent" = "no" }
|
|
{ "ForwardX11Trusted" = "yes" }
|
|
{ }
|
|
{ "#comment" = "IdentityFile ~/.ssh/identity" }
|
|
{ "SendEnv"
|
|
{ "1" = "LC_IDENTIFICATION" }
|
|
{ "2" = "LC_ALL" }
|
|
{ "3" = "LC_*" } }
|
|
{ "ProxyCommand" = "ssh -q -W %h:%p gateway.example.com" }
|
|
{ "RemoteForward"
|
|
{ "[1.2.3.4]:20023" = "localhost:22" }
|
|
}
|
|
{ "RemoteForward"
|
|
{ "2221" = "lhost1:22" }
|
|
}
|
|
{ "LocalForward"
|
|
{ "3001" = "remotehost:3000" }
|
|
}
|
|
{ "Ciphers"
|
|
{ "1" = "aes128-ctr" }
|
|
{ "2" = "aes192-ctr" }
|
|
}
|
|
{ "MACs"
|
|
{ "1" = "hmac-md5" }
|
|
{ "2" = "hmac-sha1" }
|
|
{ "3" = "umac-64@openssh.com" }
|
|
}
|
|
{ "HostKeyAlgorithms"
|
|
{ "1" = "ssh-ed25519-cert-v01@openssh.com" }
|
|
{ "2" = "ssh-ed25519" }
|
|
{ "3" = "ssh-rsa-cert-v01@openssh.com" }
|
|
{ "4" = "ssh-rsa" }
|
|
}
|
|
{ "KexAlgorithms"
|
|
{ "1" = "curve25519-sha256@libssh.org" }
|
|
{ "2" = "diffie-hellman-group-exchange-sha256" }
|
|
}
|
|
{ "PubkeyAcceptedKeyTypes"
|
|
{ "1" = "ssh-ed25519-cert-v01@openssh.com" }
|
|
{ "2" = "ssh-ed25519" }
|
|
{ "3" = "ssh-rsa-cert-v01@openssh.com" }
|
|
{ "4" = "ssh-rsa" }
|
|
}
|
|
}
|
|
|
|
(* Test: Ssh.lns
|
|
Proxycommand is case-insensitive *)
|
|
|
|
test Ssh.lns get "Proxycommand ssh -q test nc -q0 %h 22\n" =
|
|
{ "Proxycommand" = "ssh -q test nc -q0 %h 22" }
|
|
|
|
(* Test: Ssh.lns
|
|
GlobalKnownHostsFile *)
|
|
test Ssh.lns get "GlobalKnownHostsFile /etc/ssh/ssh_known_hosts /etc/ssh/ssh_known_hosts2\n" =
|
|
{ "GlobalKnownHostsFile"
|
|
{ "1" = "/etc/ssh/ssh_known_hosts" }
|
|
{ "2" = "/etc/ssh/ssh_known_hosts2" }
|
|
}
|
|
|
|
(* Keywords can be separated from their arguments with '=', too *)
|
|
test Ssh.lns get "Host mail.watzmann.net
|
|
LocalForward=11111 mail.watzmann.net:110\n" =
|
|
{ "Host" = "mail.watzmann.net"
|
|
{ "LocalForward"
|
|
{ "11111" = "mail.watzmann.net:110" } } }
|
|
|
|
test Ssh.lns get "ForwardAgent=yes\n" =
|
|
{ "ForwardAgent" = "yes" }
|
|
|
|
test Ssh.lns get "ForwardAgent =\tyes\n" =
|
|
{ "ForwardAgent" = "yes" }
|
|
|
|
(* Issue #605 *)
|
|
test Ssh.lns get "RekeyLimit 1G 1h\n" =
|
|
{ "RekeyLimit"
|
|
{ "amount" = "1G" }
|
|
{ "duration" = "1h" } }
|
|
|
|
test Ssh.lns get "RekeyLimit 1G\n" =
|
|
{ "RekeyLimit"
|
|
{ "amount" = "1G" } }
|