From Fedora Project Wiki
No edit summary |
No edit summary |
||
| Line 5: | Line 5: | ||
# Check LEGACY profile | # Check LEGACY profile | ||
#:<pre> | #:<pre> | ||
#::update-crypto-policies --set LEGACY || echo FAIL | #::update-crypto-policies --set LEGACY || echo "FAIL update LEGACY" | ||
#::wget -O - https://rc4.badssl.com/ || echo "FAIL wget rc4" | #::wget -O - https://rc4.badssl.com/ || echo "FAIL wget rc4" | ||
#::curl https://rc4.badssl.com/ || echo "FAIL curl LEGACY rc4"</pre> | #::curl https://rc4.badssl.com/ || echo "FAIL curl LEGACY rc4"</pre> | ||
# Check DEFAULT profile | # Check DEFAULT profile | ||
#:<pre> | #:<pre> | ||
#::update-crypto-policies --set DEFAULT || echo FAIL | #::update-crypto-policies --set DEFAULT || echo "FAIL update DEFAULT" | ||
#::wget -O - https://rc4.badssl.com/ && echo "FAIL wget DEFAULT rc4" | #::wget -O - https://rc4.badssl.com/ && echo "FAIL wget DEFAULT rc4" | ||
#::wget -O - https://3des.badssl.com/ || echo "FAIL wget DEFAULT 3des" | #::wget -O - https://3des.badssl.com/ || echo "FAIL wget DEFAULT 3des" | ||
| Line 17: | Line 17: | ||
# Check FUTURE profile | # Check FUTURE profile | ||
#:<pre> | #:<pre> | ||
#::update-crypto-policies --set FUTURE || echo FAIL | #::update-crypto-policies --set FUTURE || echo "FAIL update FUTURE" | ||
#::wget -O - https://3des.badssl.com/ && echo "FAIL wget FUTURE 3des" | #::wget -O - https://3des.badssl.com/ && echo "FAIL wget FUTURE 3des" | ||
#::wget -O - https://mozilla-modern.badssl.com/ || echo "FAIL wget FUTURE modern" | #::wget -O - https://mozilla-modern.badssl.com/ || echo "FAIL wget FUTURE modern" | ||
#::curl https://3des.badssl.com/ && echo "FAIL curl FUTURE 3des | #::curl https://3des.badssl.com/ && echo "FAIL curl FUTURE 3des" | ||
#::curl https://mozilla-modern.badssl.com/ || echo "FAIL curl FUTURE modern"</pre> | #::curl https://mozilla-modern.badssl.com/ || echo "FAIL curl FUTURE modern"</pre> | ||
|results= | |results= | ||
# commands complete without <code>FAIL</code> being printed | # commands complete without <code>FAIL</code> being printed | ||
}} | }} | ||
Revision as of 17:03, 29 March 2017
Description
Sanity of crypto-policies
How to test
We will test if system actually pays attention to crypto policy setting
- Check LEGACY profile
- update-crypto-policies --set LEGACY || echo "FAIL update LEGACY"
- wget -O - https://rc4.badssl.com/ || echo "FAIL wget rc4"
- curl https://rc4.badssl.com/ || echo "FAIL curl LEGACY rc4"
- Check DEFAULT profile
- update-crypto-policies --set DEFAULT || echo "FAIL update DEFAULT"
- wget -O - https://rc4.badssl.com/ && echo "FAIL wget DEFAULT rc4"
- wget -O - https://3des.badssl.com/ || echo "FAIL wget DEFAULT 3des"
- curl https://rc4.badssl.com/ && echo "FAIL curl DEFAULT rc4"
- curl https://3des.badssl.com/ || echo "FAIL curl DEFAULT 3des"
- Check FUTURE profile
- update-crypto-policies --set FUTURE || echo "FAIL update FUTURE"
- wget -O - https://3des.badssl.com/ && echo "FAIL wget FUTURE 3des"
- wget -O - https://mozilla-modern.badssl.com/ || echo "FAIL wget FUTURE modern"
- curl https://3des.badssl.com/ && echo "FAIL curl FUTURE 3des"
- curl https://mozilla-modern.badssl.com/ || echo "FAIL curl FUTURE modern"
Expected Results
- commands complete without
FAILbeing printed