From Fedora Project Wiki

Revision as of 10:31, 29 March 2017 by Szidek (talk | contribs) (Created page with "{{QA/Test_Case |description=OpenSSH support |actions= We will test if openssh client respects current policy # Prepare ssh server that uses old crypto #:<pre> #::cp /etc/ssh/s...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Description

OpenSSH support


How to test

We will test if openssh client respects current policy

  1. Prepare ssh server that uses old crypto 
    cp /etc/ssh/sshd_config sshd_config.bak
    

    echo 'Ciphers aes128-cbc' >/etc/ssh/sshd_config
    

    service sshd restart
  2. Switch to NORMAL profile 
    update-crypto-policies --set NORMAL
  3. Connect to the server 
    ssh -vv localhost
  4. Switch to FUTURE profile 
    update-crypto-policies --set FUTURE
  5. Connect to the server 
    ssh -vv localhost
  6. Restore original settings 
    cp sshd_config.bak /etc/ssh/sshd_config
    

    service sshd restart

Expected Results

  1. sshd server starts successfully
  2. no error
  3. connection is established - TODO
  4. no error
  5. connection is NOT established - TODO
  6. sshd server starts successfully



Retrieved from "https://fedoraproject.org/w/index.php?title=QA:Testcase_CryptoPolicies_openssh&oldid=489280"