From Fedora Project Wiki
Description
Sanity of crypto-policies
How to test
We will test if system actually pays attention to crypto policy setting
- Check LEGACY profile
- update-crypto-policies --set LEGACY || echo FAIL
- wget -O - https://rc4.badssl.com/ || echo "FAIL wget rc4"
- curl https://rc4.badssl.com/ || echo "FAIL curl LEGACY rc4"
- Check DEFAULT profile
- update-crypto-policies --set DEFAULT || echo FAIL
- wget -O - https://rc4.badssl.com/ && echo "FAIL wget DEFAULT rc4"
- wget -O - https://3des.badssl.com/ || echo "FAIL wget DEFAULT 3des"
- curl https://rc4.badssl.com/ && echo "FAIL curl DEFAULT rc4"
- curl https://3des.badssl.com/ || echo "FAIL curl DEFAULT 3des"
- Check FUTURE profile
- update-crypto-policies --set FUTURE || echo FAIL
- wget -O - https://3des.badssl.com/ && echo "FAIL wget FUTURE 3des"
- wget -O - https://mozilla-modern.badssl.com/ || echo "FAIL wget FUTURE modern"
- curl https://3des.badssl.com/ && echo "FAIL curl FUTURE 3des
- curl https://mozilla-modern.badssl.com/ || echo "FAIL curl FUTURE modern"
Expected Results
- commands complete without
FAIL
being printed