Check that we use ECDH when we have a ECDSA cert

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24705 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2009-02-14 20:14:16 +00:00
parent 143101e825
commit 793c93cbe4

View File

@@ -409,11 +409,13 @@ if test "$pkinit" = yes -a "$rsa" = yes ; then
if ${hxtool} info | grep 'ecdsa:' > /dev/null ; then if ${hxtool} info | grep 'ecdsa:' > /dev/null ; then
echo "Trying pk-init (ec certificate)" echo "Trying pk-init (ec certificate)"
> messages.log
${kinit} -C FILE:${base}/pkinit-ec.crt,${base}/pkinit-ec.key bar@${R} || \ ${kinit} -C FILE:${base}/pkinit-ec.crt,${base}/pkinit-ec.key bar@${R} || \
{ ec=1 ; eval "${testfailed}"; } { ec=1 ; eval "${testfailed}"; }
${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; } ${kgetcred} ${server}@${R} || { ec=1 ; eval "${testfailed}"; }
${kdestroy} ${kdestroy}
grep 'PK-INIT using ecdh' messages.log > /dev/null || \
{ ec=1 ; eval "${testfailed}"; }
fi fi
else else