From Fedora Project Wiki
No edit summary |
No edit summary |
||
| Line 6: | Line 6: | ||
#:<pre> | #:<pre> | ||
#::update-crypto-policies --set LEGACY || echo "FAIL update LEGACY" | #::update-crypto-policies --set LEGACY || echo "FAIL update LEGACY" | ||
#::wget -O | #::wget -q -O /dev/null https://rc4.badssl.com/ || echo "FAIL wget rc4" | ||
#::curl -s https://rc4.badssl.com/ >/dev/null|| echo "FAIL curl LEGACY rc4"</pre> | #::curl -s https://rc4.badssl.com/ >/dev/null|| echo "FAIL curl LEGACY rc4"</pre> | ||
# Check DEFAULT profile | # Check DEFAULT profile | ||
#:<pre> | #:<pre> | ||
#::update-crypto-policies --set DEFAULT || echo "FAIL update DEFAULT" | #::update-crypto-policies --set DEFAULT || echo "FAIL update DEFAULT" | ||
#::wget -O | #::wget -q -O /dev/null https://rc4.badssl.com/ && echo "FAIL wget DEFAULT rc4" | ||
#::wget -O | #::wget -q -O /dev/null https://3des.badssl.com/ || echo "FAIL wget DEFAULT 3des" | ||
#::curl -s https://rc4.badssl.com/ >/dev/null && echo "FAIL curl DEFAULT rc4" | #::curl -s https://rc4.badssl.com/ >/dev/null && echo "FAIL curl DEFAULT rc4" | ||
#::curl -s https://3des.badssl.com/ >/dev/null || echo "FAIL curl DEFAULT 3des"</pre> | #::curl -s https://3des.badssl.com/ >/dev/null || echo "FAIL curl DEFAULT 3des"</pre> | ||
| Line 18: | Line 18: | ||
#:<pre> | #:<pre> | ||
#::update-crypto-policies --set FUTURE || echo "FAIL update FUTURE" | #::update-crypto-policies --set FUTURE || echo "FAIL update FUTURE" | ||
#::wget -O | #::wget -q -O /dev/null https://3des.badssl.com/ && echo "FAIL wget FUTURE 3des" | ||
#::wget -O | #::wget -q -O /dev/null https://mozilla-modern.badssl.com/ || echo "FAIL wget FUTURE modern" | ||
#::curl -s https://3des.badssl.com/ >/dev/null && echo "FAIL curl FUTURE 3des" | #::curl -s https://3des.badssl.com/ >/dev/null && echo "FAIL curl FUTURE 3des" | ||
#::curl -s https://mozilla-modern.badssl.com/ >/dev/null || echo "FAIL curl FUTURE modern"</pre> | #::curl -s https://mozilla-modern.badssl.com/ >/dev/null || echo "FAIL curl FUTURE modern"</pre> | ||
Revision as of 17:58, 29 March 2017
Description
Sanity of crypto-policies
How to test
We will test if system actually pays attention to crypto policy setting
- Check LEGACY profile
- update-crypto-policies --set LEGACY || echo "FAIL update LEGACY"
- wget -q -O /dev/null https://rc4.badssl.com/ || echo "FAIL wget rc4"
- curl -s https://rc4.badssl.com/ >/dev/null|| echo "FAIL curl LEGACY rc4"
- Check DEFAULT profile
- update-crypto-policies --set DEFAULT || echo "FAIL update DEFAULT"
- wget -q -O /dev/null https://rc4.badssl.com/ && echo "FAIL wget DEFAULT rc4"
- wget -q -O /dev/null https://3des.badssl.com/ || echo "FAIL wget DEFAULT 3des"
- curl -s https://rc4.badssl.com/ >/dev/null && echo "FAIL curl DEFAULT rc4"
- curl -s https://3des.badssl.com/ >/dev/null || echo "FAIL curl DEFAULT 3des"
- Check FUTURE profile
- update-crypto-policies --set FUTURE || echo "FAIL update FUTURE"
- wget -q -O /dev/null https://3des.badssl.com/ && echo "FAIL wget FUTURE 3des"
- wget -q -O /dev/null https://mozilla-modern.badssl.com/ || echo "FAIL wget FUTURE modern"
- curl -s https://3des.badssl.com/ >/dev/null && echo "FAIL curl FUTURE 3des"
- curl -s https://mozilla-modern.badssl.com/ >/dev/null || echo "FAIL curl FUTURE modern"
Expected Results
- commands complete without
FAILbeing printed