diff options
| author | Greg Hudson <ghudson@mit.edu> | 2016-05-04 11:25:32 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2016-07-19 19:02:05 -0400 |
| commit | b55c2ecf1e938132524f2bc079ec1ba3734b0383 (patch) | |
| tree | 115bff702bdc1519f135ea03920b7d572c6bd584 | |
| parent | 5eb0d447050c688b1003ad7d5cd0e2e733187298 (diff) | |
| download | krb5-b55c2ecf1e938132524f2bc079ec1ba3734b0383.zip krb5-b55c2ecf1e938132524f2bc079ec1ba3734b0383.tar.gz krb5-b55c2ecf1e938132524f2bc079ec1ba3734b0383.tar.bz2 | |
Add a PKINIT test using RSA
In t_pkinit.py, add a simple PKINIT test using RSA encryption instead
of a Diffie-Hellman exchange.
| -rwxr-xr-x | src/tests/t_pkinit.py | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/tests/t_pkinit.py b/src/tests/t_pkinit.py index f0214b6..526473b 100755 --- a/src/tests/t_pkinit.py +++ b/src/tests/t_pkinit.py @@ -111,6 +111,12 @@ realm.kinit(realm.user_princ, realm.klist(realm.user_princ) realm.run([kvno, realm.host_princ]) +# Try again using RSA instead of DH. +realm.kinit(realm.user_princ, + flags=['-X', 'X509_user_identity=%s' % file_identity, + '-X', 'flag_RSA_PROTOCOL=yes']) +realm.klist(realm.user_princ) + # Run the basic test - PKINIT with FILE: identity, with a password on the key, # supplied by the prompter. # Expect failure if the responder does nothing, and we have no prompter. |