X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=tests%2Fbasic;h=d83749bd6e94bb6b629e870c50870d63c53cb835;hb=adef51285ea488ecda7b0a77b142d99e022d9e10;hp=3386f762b33e7b02ef5a4c152c3e8eade11b3889;hpb=cfe0e0885fc4210877665bb7713446c3063faee0;p=monkeysphere.git diff --git a/tests/basic b/tests/basic index 3386f76..d83749b 100755 --- a/tests/basic +++ b/tests/basic @@ -37,7 +37,7 @@ On debian-derived systems, you can set this up with: perl -MDigest::SHA -e 1 2>/dev/null || { echo "You must have the perl module Digest::SHA installed to run this test. On debian-derived systems, you can set this up with: - apt-get install libdigest-sha1-perl" ; exit 1; } + apt-get install libdigest-sha-perl" ; exit 1; } ## FIXME: other checks? @@ -66,7 +66,7 @@ ssh_test() { # wait until the socket is created before continuing while [ ! -S "$SOCKET" ] ; do - sleep 1 + sleep 2 done # make a client connection to the socket @@ -76,7 +76,7 @@ ssh_test() { || RETURN="$?" # kill the sshd process if it's still running - kill "$SSHD_PID" + kill "$SSHD_PID" || true SSHD_PID= if [ "$RETURN" = "$CODE" ] ; then @@ -300,7 +300,7 @@ mv "$TESTHOME"/.monkeysphere/authorized_user_ids{,.bak} monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication denial..." +echo "### ssh connection test for failure..." ssh_test 255 mv "$TESTHOME"/.monkeysphere/authorized_user_ids{.bak,} @@ -313,7 +313,7 @@ chmod g+w "$TESTHOME"/.monkeysphere/authorized_user_ids monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication denial..." +echo "### ssh connection test for failure..." ssh_test 255 chmod g-w "$TESTHOME"/.monkeysphere/authorized_user_ids echo @@ -323,25 +323,157 @@ chmod o+w "$TESTHOME"/.monkeysphere/authorized_user_ids monkeysphere-authentication update-users $(whoami) echo echo "##################################################" -echo "### ssh connection test for server authentication denial..." +echo "### ssh connection test for failure..." ssh_test 255 chmod o-w "$TESTHOME"/.monkeysphere/authorized_user_ids monkeysphere-authentication update-users $(whoami) +# test symlinks +echo +echo "##################################################" +echo "### setup for symlink tests..." +cp -a "$TESTHOME"/.monkeysphere{,.linktest} + +echo +echo "##################################################" +echo "### make authorized_user_ids an absolute symlink and updating..." +mv "$TESTHOME"/.monkeysphere/authorized_user_ids{,.bak} +ln -s "$TESTHOME"/.monkeysphere{.linktest,}/authorized_user_ids +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir and updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for failure..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +echo +echo "##################################################" +echo "### make authorized_user_ids a relative symlink and updating..." +ln -sf ../.monkeysphere.linktest/authorized_user_ids "$TESTHOME"/.monkeysphere/authorized_user_ids +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for failure..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +# FIXME: implement check of link path, and uncomment this test +# echo +# echo "##################################################" +# echo "### create bad permissions on link dir and updating..." +# chmod o+w "$TESTHOME"/.monkeysphere +# monkeysphere-authentication update-users $(whoami) +# echo +# echo "##################################################" +# echo "### ssh connection test for failure..." +# ssh_test 255 +# chmod o-w "$TESTHOME"/.monkeysphere +rm "$TESTHOME"/.monkeysphere/authorized_user_ids +mv "$TESTHOME"/.monkeysphere/authorized_user_ids{.bak,} + +echo +echo "##################################################" +echo "### make .monkeysphere directory an absolute symlink and updating..." +mv "$TESTHOME"/.monkeysphere{,.bak} +ln -s "$TESTHOME"/.monkeysphere{.linktest,} +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir and updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for failure..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +echo +echo "##################################################" +echo "### make .monkeysphere directory a relative symlink and updating..." +ln -sfn .monkeysphere{.linktest,} +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." +ssh_test +echo +echo "##################################################" +echo "### create bad permissions on link dir updating..." +chmod o+w "$TESTHOME"/.monkeysphere.linktest +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for failure..." +ssh_test 255 +chmod o-w "$TESTHOME"/.monkeysphere.linktest +rm "$TESTHOME"/.monkeysphere +mv "$TESTHOME"/.monkeysphere{.bak,} + +# ensure we're back to normal: +echo +echo "##################################################" +echo "### making sure we are back to normal..." +monkeysphere-authentication update-users $(whoami) +ssh_test + +echo +echo "##################################################" +echo "### ssh connection test with hostname 'testhost2' added..." +monkeysphere-host add-hostname testhost2 +ssh_test + +echo +echo "##################################################" +echo "### ssh connection test for failure with 'testhost' revoked..." +monkeysphere-host revoke-hostname testhost +ssh_test 255 + # FIXME: addtest: remove admin as id-certifier and check ssh failure -# FIXME: addtest: add hostname on host key -# FIXME: addtest: revoke hostname on host key and check ssh failure +# FIXME: addtest: how do we test that set-expire makes sense after new +# hostnames have been added? + +# FIXME: addtest: revoke the host key and check ssh failure -# addtest: revoke the host key and check ssh failure # test to make sure things are OK after the previous tests: +echo +echo "##################################################" +echo "### settings reset, updating..." +monkeysphere-authentication update-users $(whoami) +echo +echo "##################################################" +echo "### ssh connection test for success..." ssh_test + echo echo "##################################################" -echo "### ssh connection test for server with revoked key..." +echo "### revoking host key..." # generate the revocation certificate and feed it directly to the test # user's keyring (we're not publishing to the keyservers) monkeysphere-host revoke-key | gpg --import +echo +echo "##################################################" +echo "### ssh connection test for failure..." ssh_test 255