130 lines
3.6 KiB
Bash
130 lines
3.6 KiB
Bash
# $OpenBSD: percent.sh,v 1.17 2023/03/27 03:56:50 dtucker Exp $
|
|
# Placed in the Public Domain.
|
|
|
|
tid="percent expansions"
|
|
|
|
if [ -x "/usr/xpg4/bin/id" ]; then
|
|
PATH=/usr/xpg4/bin:$PATH
|
|
export PATH
|
|
fi
|
|
|
|
USER=`id -u -n`
|
|
USERID=`id -u`
|
|
HOST=`hostname | cut -f1 -d.`
|
|
HOSTNAME=`hostname`
|
|
HASH=""
|
|
|
|
# Localcommand is evaluated after connection because %T is not available
|
|
# until then. Because of this we use a different method of exercising it,
|
|
# and we can't override the remote user otherwise authentication will fail.
|
|
# We also have to explicitly enable it.
|
|
echo "permitlocalcommand yes" >> $OBJ/ssh_proxy
|
|
|
|
trial()
|
|
{
|
|
opt="$1"; arg="$2"
|
|
expect=`echo "$3" | sed 's|^//|/|'` # approximate realpath
|
|
|
|
trace "test $opt=$arg $expect"
|
|
rm -f $OBJ/actual
|
|
got=""
|
|
case "$opt" in
|
|
localcommand)
|
|
${SSH} -F $OBJ/ssh_proxy -o $opt="echo '$arg' >$OBJ/actual" \
|
|
somehost true
|
|
got=`cat $OBJ/actual`
|
|
;;
|
|
userknownhostsfile)
|
|
# Move the userknownhosts file to what the expansion says,
|
|
# make sure ssh works then put it back.
|
|
mv "$OBJ/known_hosts" "$OBJ/$expect"
|
|
${SSH} -F $OBJ/ssh_proxy -o $opt="$OBJ/$arg" somehost true && \
|
|
got="$expect"
|
|
mv "$OBJ/$expect" "$OBJ/known_hosts"
|
|
;;
|
|
matchexec)
|
|
(cat $OBJ/ssh_proxy && \
|
|
echo "Match Exec \"echo '$arg' >$OBJ/actual\"") \
|
|
>$OBJ/ssh_proxy_match
|
|
${SSH} -F $OBJ/ssh_proxy_match remuser@somehost true || true
|
|
got=`cat $OBJ/actual`
|
|
;;
|
|
*forward)
|
|
# LocalForward and RemoteForward take two args and only
|
|
# operate on Unix domain socket paths
|
|
got=`${SSH} -F $OBJ/ssh_proxy -o $opt="/$arg /$arg" -G \
|
|
remuser@somehost | awk '$1=="'$opt'"{print $2" "$3}'`
|
|
expect="/$expect /$expect"
|
|
;;
|
|
*)
|
|
got=`${SSH} -F $OBJ/ssh_proxy -o $opt="$arg" -G \
|
|
remuser@somehost | awk '$1=="'$opt'"{print $2}'`
|
|
esac
|
|
if [ "$got" != "$expect" ]; then
|
|
fail "$opt=$arg expect $expect got $got"
|
|
fi
|
|
}
|
|
|
|
for i in matchexec localcommand remotecommand controlpath identityagent \
|
|
forwardagent localforward remoteforward revokedhostkeys \
|
|
userknownhostsfile; do
|
|
verbose $tid $i percent
|
|
case "$i" in
|
|
localcommand|userknownhostsfile)
|
|
# Any test that's going to actually make a connection needs
|
|
# to use the real username.
|
|
REMUSER=$USER ;;
|
|
*)
|
|
REMUSER=remuser ;;
|
|
esac
|
|
if [ "$i" = "$localcommand" ]; then
|
|
trial $i '%T' NONE
|
|
fi
|
|
# Matches implementation in readconf.c:ssh_connection_hash()
|
|
if [ ! -z "${OPENSSL_BIN}" ]; then
|
|
HASH=`printf "${HOSTNAME}127.0.0.1${PORT}$REMUSER" |
|
|
$OPENSSL_BIN sha1 | cut -f2 -d' '`
|
|
trial $i '%C' $HASH
|
|
fi
|
|
trial $i '%%' '%'
|
|
trial $i '%i' $USERID
|
|
trial $i '%h' 127.0.0.1
|
|
trial $i '%L' $HOST
|
|
trial $i '%l' $HOSTNAME
|
|
trial $i '%n' somehost
|
|
trial $i '%k' localhost-with-alias
|
|
trial $i '%p' $PORT
|
|
trial $i '%r' $REMUSER
|
|
trial $i '%u' $USER
|
|
# We can't specify a full path outside the regress dir, so skip tests
|
|
# containing %d for UserKnownHostsFile
|
|
if [ "$i" != "userknownhostsfile" ]; then
|
|
trial $i '%d' $HOME
|
|
in='%%/%i/%h/%d/%L/%l/%n/%p/%r/%u'
|
|
out="%/$USERID/127.0.0.1/$HOME/$HOST/$HOSTNAME/somehost/$PORT/$REMUSER/$USER"
|
|
if [ ! -z "${HASH}" ]; then
|
|
in="$in/%C"
|
|
out="$out/$HASH"
|
|
fi
|
|
trial $i "$in" "$out"
|
|
fi
|
|
done
|
|
|
|
# Subset of above since we don't expand shell-style variables on anything that
|
|
# runs a command because the shell will expand those.
|
|
for i in controlpath identityagent forwardagent localforward remoteforward \
|
|
userknownhostsfile; do
|
|
verbose $tid $i dollar
|
|
FOO=bar
|
|
export FOO
|
|
trial $i '${FOO}' $FOO
|
|
done
|
|
|
|
|
|
# A subset of options support tilde expansion
|
|
for i in controlpath identityagent forwardagent; do
|
|
verbose $tid $i tilde
|
|
trial $i '~' $HOME/
|
|
trial $i '~/.ssh' $HOME/.ssh
|
|
done
|