/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to debian/tests/control

  • Committer: Teddy Hogeborn
  • Date: 2015-07-20 03:03:33 UTC
  • Revision ID: teddy@recompile.se-20150720030333-203m2aeblypcsfte
Bug fix for GnuTLS 3: be compatible with old 2048-bit DSA keys.

The mandos-keygen program in Mandos version 1.6.0 and older generated
2048-bit DSA keys, and when GnuTLS uses these it has trouble
connecting using the Mandos default priority string.  This was
previously fixed in Mandos 1.6.2, but the bug reappeared when using
GnuTLS 3, so the default priority string has to change again; this
time also the Mandos client has to change its default, so now the
server and the client should use the same default priority string:

SECURE256:!CTYPE-X.509:+CTYPE-OPENPGP:!RSA:+SIGN-DSA-SHA256

* mandos (main/server_defaults): Changed default priority string.
* mandos-options.xml (/section/para[id="priority_compat"]): Removed.
  (/section/para[id="priority"]): Changed default priority string.
* mandos.conf ([DEFAULT]/priority): - '' -
* mandos.conf.xml (OPTIONS/priority): Refer to the id "priority"
                                      instead of "priority_compat".
* mandos.xml (OPTIONS/--priority): - '' -
* plugins.d/mandos-client.c (main): Changed default priority string.

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/tests/control
1
 
Test-Command: /usr/sbin/mandos --check
2
 
Restrictions: superficial, allow-stderr
3
 
Features: test-name=mandos-check
4
 
Depends: mandos
5
 
 
6
 
Test-Command: /usr/sbin/mandos-ctl --check --verbose
7
 
Restrictions: allow-stderr
8
 
Features: test-name=mandos-ctl
9
 
Depends: mandos
10
 
 
11
 
Test-Command: /usr/sbin/mandos-keygen --version
12
 
Restrictions: superficial
13
 
Features: test-name=mandos-keygen-version
14
 
Depends: mandos-client
15
 
 
16
 
Test-Command: /usr/lib/$(dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null)/mandos/plugin-runner --version
17
 
Restrictions: needs-root, superficial
18
 
Features: test-name=plugin-runner-version
19
 
Depends: mandos-client
20
 
 
21
 
Test-Command: /usr/lib/$(dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null)/mandos/plugin-helpers/mandos-client-iprouteadddel --version
22
 
Restrictions: needs-root, superficial
23
 
Features: test-name=mandos-client-iprouteadddel-version
24
 
Depends: mandos-client
25
 
 
26
 
Test-Command: /usr/lib/dracut/modules.d/90mandos/password-agent --test --verbose
27
 
Features: test-name=password-agent
28
 
Depends: mandos-client
29
 
 
30
 
Test-Command: /usr/lib/dracut/modules.d/90mandos/password-agent --test --verbose -p /task-creators/start_mandos_client/suid
31
 
Restrictions: needs-root
32
 
Features: test-name=password-agent-suid
33
 
Depends: mandos-client