elie/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2025-06-22 18:53:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixed built-in policy formatting and filled in missing host key size information.

Browse Source
This commit is contained in:
Joe Testa
2023-04-26 15:47:58 -04:00
parent 4c098b7d12
commit 7f8d6b4d5b
7 changed files with 192 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
test/docker/expected_results/openssh_8.0p1_builtin_policy_test1.json
View File

@ -1,6 +1,31 @@
{
"errors": [],
"errors": [
{
"actual": [
"3072"
],
"expected_optional": [
""
],
"expected_required": [
"4096"
],
"mismatched_field": "Host key (rsa-sha2-256) sizes"
},
{
"actual": [
"3072"
],
"expected_optional": [
""
],
"expected_required": [
"4096"
],
"mismatched_field": "Host key (rsa-sha2-512) sizes"
}
],
"host": "localhost",
"passed": true,
"policy": "Hardened OpenSSH Server v8.0 (version 1)"
"passed": false,
"policy": "Hardened OpenSSH Server v8.0 (version 2)"
}

14
test/docker/expected_results/openssh_8.0p1_builtin_policy_test1.txt
View File

@ -1,3 +1,13 @@
Host: localhost:2222
Policy: Hardened OpenSSH Server v8.0 (version 1)
Result: ✔ Passed
Policy: Hardened OpenSSH Server v8.0 (version 2)
Result: ❌ Failed!

Errors:
* Host key (rsa-sha2-256) sizes did not match.
- Expected: 4096
- Actual: 3072
* Host key (rsa-sha2-512) sizes did not match.
- Expected: 4096
- Actual: 3072


26
test/docker/expected_results/openssh_8.0p1_builtin_policy_test2.json
View File

@ -1,5 +1,29 @@
{
"errors": [
{
"actual": [
"3072"
],
"expected_optional": [
""
],
"expected_required": [
"4096"
],
"mismatched_field": "Host key (rsa-sha2-256) sizes"
},
{
"actual": [
"3072"
],
"expected_optional": [
""
],
"expected_required": [
"4096"
],
"mismatched_field": "Host key (rsa-sha2-512) sizes"
},
{
"actual": [
"umac-64-etm@openssh.com",
@ -26,5 +50,5 @@
],
"host": "localhost",
"passed": false,
"policy": "Hardened OpenSSH Server v8.0 (version 1)"
"policy": "Hardened OpenSSH Server v8.0 (version 2)"
}

10
test/docker/expected_results/openssh_8.0p1_builtin_policy_test2.txt
View File

@ -1,8 +1,16 @@
Host: localhost:2222
Policy: Hardened OpenSSH Server v8.0 (version 1)
Policy: Hardened OpenSSH Server v8.0 (version 2)
Result: ❌ Failed!

Errors:
* Host key (rsa-sha2-256) sizes did not match.
- Expected: 4096
- Actual: 3072
* Host key (rsa-sha2-512) sizes did not match.
- Expected: 4096
- Actual: 3072
* MACs did not match.
- Expected: hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, umac-128-etm@openssh.com
- Actual: umac-64-etm@openssh.com, umac-128-etm@openssh.com, hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, hmac-sha1-etm@openssh.com, umac-64@openssh.com, umac-128@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-sha1