Check that we use ECDH when we have a ECDSA cert
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24705 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -409,11 +409,13 @@ if test "$pkinit" = yes -a "$rsa" = yes ; then
|
|||||||
|
|
||||||
if ${hxtool} info | grep 'ecdsa:' > /dev/null ; then
|
if ${hxtool} info | grep 'ecdsa:' > /dev/null ; then
|
||||||
echo "Trying pk-init (ec certificate)"
|
echo "Trying pk-init (ec certificate)"
|
||||||
|
> messages.log
|
||||||
${kinit} -C FILE:${base}/pkinit-ec.crt,${base}/pkinit-ec.key bar@${R} || \
|
${kinit} -C FILE:${base}/pkinit-ec.crt,${base}/pkinit-ec.key bar@${R} || \
|
||||||
{ ec=1 ; eval "${testfailed}"; }
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
|
|
||||||
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
|
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
|
||||||
${kdestroy}
|
${kdestroy}
|
||||||
|
grep 'PK-INIT using ecdh' messages.log > /dev/null || \
|
||||||
|
{ ec=1 ; eval "${testfailed}"; }
|
||||||
fi
|
fi
|
||||||
|
|
||||||
else
|
else
|
||||||
|
Reference in New Issue
Block a user