search

dev-sec / ssh-baseline

DevSec SSH Baseline - InSpec Profile
https://dev-sec.io/baselines/ssh/
Apache License 2.0
283 stars 78 forks source link

Inverted command/expected result between 2 tests in ssh-22 #182

Open strus38 opened 4 years ago

strus38 commented 4 years ago
sh-baseline ssh-22 Bash command ssh -G localhost stdout is expected to match "ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr" KO expected "user root\nhostname localhost\nport 22\naddressfamily any\nbatchmode no\ncanonicalizefallbacklocal y...trolpersist no\nescapechar ~\nipqos lowdelay throughput\nrekeylimit 0 0\nstreamlocalbindmask 0177\n" to match "macs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256" Diff: @@ […]
ssh-baseline ssh-22 Bash command ssh -G localhost stdout is expected to match "macs hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-512,hmac-sha2-256" KO expected "user root\nhostname localhost\nport 22\naddressfamily any\nbatchmode no\ncanonicalizefallbacklocal y...trolpersist no\nescapechar ~\nipqos lowdelay throughput\nrekeylimit 0 0\nstreamlocalbindmask 0177\n" to match "ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr" Diff @@ […]

The fix is just to put the right expected for the right test.