From 843b8c38d3621c5f6d2570db674d527d3336d3eb Mon Sep 17 00:00:00 2001 From: Nicola Murino Date: Thu, 19 Dec 2024 19:55:25 +0100 Subject: [PATCH] SSH: add a test case for DSA keys Signed-off-by: Nicola Murino --- internal/httpd/httpd_test.go | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/internal/httpd/httpd_test.go b/internal/httpd/httpd_test.go index 285a03380..47a3475eb 100644 --- a/internal/httpd/httpd_test.go +++ b/internal/httpd/httpd_test.go @@ -5264,6 +5264,13 @@ func TestUserPublicKey(t *testing.T) { _, err = httpdtest.RemoveUser(user, http.StatusOK) assert.NoError(t, err) + // DSA keys are not accepted + u = getTestUser() + u.Password = "" + u.PublicKeys = []string{"ssh-dss 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"} + _, resp, err := httpdtest.AddUser(u, http.StatusBadRequest) + assert.NoError(t, err) + assert.Contains(t, string(resp), "DSA key format is insecure and it is not allowed") } func TestUpdateUserEmptyPassword(t *testing.T) {