Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-07 14:50:55 +03:00
Code Issues Packages Projects Releases Wiki Activity

sshd: add support for host key certificates

Browse Source 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
This commit is contained in:
Nicola Murino
2022-04-01 08:03:56 +02:00
parent a7b159aebb
commit 55f8171dd1
5 changed files with 91 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
sftpd/sftpd_test.go
View File

@@ -396,6 +396,44 @@ func TestInitialization(t *testing.T) {
if assert.Error(t, err) {
assert.Contains(t, err.Error(), "unsupported key-exchange algorithm")
}
sftpdConf.HostCertificates = []string{"missing file"}
err = sftpdConf.Initialize(configDir)
if assert.Error(t, err) {
assert.Contains(t, err.Error(), "unable to load host certificate")
}
sftpdConf.HostCertificates = []string{"."}
err = sftpdConf.Initialize(configDir)
assert.Error(t, err)
hostCertPath := filepath.Join(os.TempDir(), "host_cert.pub")
err = os.WriteFile(hostCertPath, []byte(testCertValid), 0600)
assert.NoError(t, err)
sftpdConf.HostKeys = []string{privateKeyPath}
sftpdConf.HostCertificates = []string{hostCertPath}
err = sftpdConf.Initialize(configDir)
if assert.Error(t, err) {
assert.Contains(t, err.Error(), "is not an host certificate")
}
err = os.WriteFile(hostCertPath, []byte(testPubKey), 0600)
assert.NoError(t, err)
err = sftpdConf.Initialize(configDir)
if assert.Error(t, err) {
assert.Contains(t, err.Error(), "is not an SSH certificate")
}
err = os.WriteFile(hostCertPath, []byte("abc"), 0600)
assert.NoError(t, err)
err = sftpdConf.Initialize(configDir)
if assert.Error(t, err) {
assert.Contains(t, err.Error(), "unable to parse host certificate")
}
err = os.WriteFile(hostCertPath, []byte(testHostCert), 0600)
assert.NoError(t, err)
err = sftpdConf.Initialize(configDir)
assert.Error(t, err)
err = os.Remove(hostCertPath)
assert.NoError(t, err)
sftpdConf.HostKeys = nil
sftpdConf.HostCertificates = nil
sftpdConf.RevokedUserCertsFile = "."
err = sftpdConf.Initialize(configDir)
assert.Error(t, err)