Lines Matching refs:OBJ
6 rm -f $OBJ/known_hosts-cert* $OBJ/host_ca_key* $OBJ/host_revoked_*
7 rm -f $OBJ/cert_host_key* $OBJ/host_krl_*
24 ) >> $OBJ/ssh_proxy
25 cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak
29 ) >> $OBJ/sshd_proxy_bak
36 cat $OBJ/$k || fatal "couldn't cat $k"
42 cat $OBJ/$k || fatal "couldn't cat $k"
48 ${SSHKEYGEN} -q -N '' -t ed25519 -f $OBJ/host_ca_key ||\
50 ${SSHKEYGEN} -q -N '' -t rsa -f $OBJ/host_ca_key2 ||\
53 kh_ca host_ca_key.pub host_ca_key2.pub > $OBJ/known_hosts-cert.orig
54 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
57 touch $OBJ/host_revoked_empty
58 touch $OBJ/host_revoked_plain
59 touch $OBJ/host_revoked_cert
60 cat $OBJ/host_ca_key.pub $OBJ/host_ca_key2.pub > $OBJ/host_revoked_ca
69 ${SSHKEYGEN} -kf $OBJ/host_krl_empty || fatal "KRL init failed"
70 ${SSHKEYGEN} -kf $OBJ/host_krl_plain || fatal "KRL init failed"
71 ${SSHKEYGEN} -kf $OBJ/host_krl_cert || fatal "KRL init failed"
72 ${SSHKEYGEN} -kf $OBJ/host_krl_ca $OBJ/host_ca_key.pub $OBJ/host_ca_key2.pub \
81 -f $OBJ/cert_host_key_${ktype} || \
83 ${SSHKEYGEN} -ukf $OBJ/host_krl_plain \
84 $OBJ/cert_host_key_${ktype}.pub || fatal "KRL update failed"
85 cat $OBJ/cert_host_key_${ktype}.pub >> $OBJ/host_revoked_plain
87 rsa-sha2-*) tflag="-t $ktype"; ca="$OBJ/host_ca_key2" ;;
88 *) tflag=""; ca="$OBJ/host_ca_key" ;;
92 -n $HOSTS $OBJ/cert_host_key_${ktype} ||
94 ${SSHKEYGEN} -ukf $OBJ/host_krl_cert \
95 $OBJ/cert_host_key_${ktype}-cert.pub || \
97 cat $OBJ/cert_host_key_${ktype}-cert.pub >> $OBJ/host_revoked_cert
106 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
107 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
108 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
109 "$@" -F $OBJ/ssh_proxy somehost true
127 cat $OBJ/sshd_proxy_bak
128 echo HostKey $OBJ/cert_host_key_${ktype}
129 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
131 ) > $OBJ/sshd_proxy
136 -oRevokedHostKeys=$OBJ/host_krl_empty
138 -oRevokedHostKeys=$OBJ/host_krl_plain
140 -oRevokedHostKeys=$OBJ/host_krl_cert
142 -oRevokedHostKeys=$OBJ/host_krl_ca
144 -oRevokedHostKeys=$OBJ/host_revoked_empty
146 -oRevokedHostKeys=$OBJ/host_revoked_plain
148 -oRevokedHostKeys=$OBJ/host_revoked_cert
150 -oRevokedHostKeys=$OBJ/host_revoked_ca
155 kh_ca host_ca_key.pub host_ca_key2.pub > $OBJ/known_hosts-cert.orig
157 test -f "$OBJ/cert_host_key_${ktype}.pub" || fatal "no pubkey"
158 kh_revoke cert_host_key_${ktype}.pub >> $OBJ/known_hosts-cert.orig
160 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
165 cat $OBJ/sshd_proxy_bak
166 echo HostKey $OBJ/cert_host_key_${ktype}
167 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
169 ) > $OBJ/sshd_proxy
171 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
172 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
173 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
174 -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
182 kh_ca host_ca_key.pub host_ca_key2.pub > $OBJ/known_hosts-cert.orig
183 kh_revoke host_ca_key.pub host_ca_key2.pub >> $OBJ/known_hosts-cert.orig
184 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
188 cat $OBJ/sshd_proxy_bak
189 echo HostKey $OBJ/cert_host_key_${ktype}
190 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
191 ) > $OBJ/sshd_proxy
192 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
193 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
194 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
195 -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
202 kh_ca host_ca_key.pub host_ca_key2.pub > $OBJ/known_hosts-cert.orig
203 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
212 rsa-sha2-*) tflag="-t $ktype"; ca="$OBJ/host_ca_key2" ;;
213 *) tflag=""; ca="$OBJ/host_ca_key" ;;
216 $sign_opts $OBJ/cert_host_key_${kt} ||
219 cat $OBJ/sshd_proxy_bak
220 echo HostKey $OBJ/cert_host_key_${kt}
221 echo HostCertificate $OBJ/cert_host_key_${kt}-cert.pub
222 ) > $OBJ/sshd_proxy
224 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
225 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
226 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
227 -F $OBJ/ssh_proxy somehost true >/dev/null 2>&1
251 rm -f $OBJ/known_hosts-cert $OBJ/cert_host_key*
254 ${SSHKEYGEN} -q -N '' -t ${ktype} -f $OBJ/cert_host_key_${ktype} || \
257 rsa-sha2-*) tflag="-t $ktype"; ca="$OBJ/host_ca_key2" ;;
258 *) tflag=""; ca="$OBJ/host_ca_key" ;;
262 -n $HOSTS $OBJ/cert_host_key_${ktype} ||
266 cat $OBJ/cert_host_key_${ktype}.pub
267 ) > $OBJ/known_hosts-cert
269 cat $OBJ/sshd_proxy_bak
270 echo HostKey $OBJ/cert_host_key_${ktype}
271 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
272 ) > $OBJ/sshd_proxy
274 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
275 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
276 -F $OBJ/ssh_proxy somehost true
283 kh_ca host_ca_key.pub host_ca_key2.pub > $OBJ/known_hosts-cert.orig
284 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
287 rm -f $OBJ/cert_host_key*
289 ${SSHKEYGEN} -q -N '' -t ${kt} -f $OBJ/cert_host_key_${kt} || \
295 ${SSHKEYGEN} $tflag -h -q -s $OBJ/cert_host_key_${kt} \
297 -n $HOSTS $OBJ/cert_host_key_${kt} ||
300 cat $OBJ/sshd_proxy_bak
301 echo HostKey $OBJ/cert_host_key_${kt}
302 echo HostCertificate $OBJ/cert_host_key_${kt}-cert.pub
303 ) > $OBJ/sshd_proxy
305 cp $OBJ/known_hosts-cert.orig $OBJ/known_hosts-cert
306 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
307 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
308 -F $OBJ/ssh_proxy -q somehost true >/dev/null 2>&1
314 rm -f $OBJ/known_hosts-cert* $OBJ/host_ca_key* $OBJ/cert_host_key*
