QA:Testcase CryptoPolicies openssh

Description

OpenSSH support

How to test

We will test if openssh client respects current policy

1. Prepare ssh server that uses old crypto

   cp /etc/ssh/sshd_config sshd_config.bak
   echo -e 'Match *\n    Ciphers 3des-cbc' >>/etc/ssh/sshd_config
   service sshd restart

2. Switch to NORMAL profile

   update-crypto-policies --set DEFAULT

3. Connect to the server

   ssh -vv localhost 'echo CONNECTED'

4. Switch to FUTURE profile

   update-crypto-policies --set FUTURE

5. Connect to the server

   ssh -vv localhost 'echo CONNECTED'

6. Restore original settings

   cp sshd_config.bak /etc/ssh/sshd_config
   service sshd restart

Expected Results

1. sshd server starts successfully
2. no error
3. connection is established - CONNECTED is printed
4. no error
5. connection is NOT established
6. sshd server starts successfully