Skip to content

Commit 3b2dd60

Browse files
ejohnstownphilljj
authored andcommitted
scripts: add an OpenSSH strict KEX interop test
Runs the OpenSSH client against the echoserver and the wolfSSH example client against sshd, checking that each pairing negotiates the strict KEX marker and that a session then runs over the connection. - skip when ssh is missing or predates OpenSSH 9.6 - fall back from the ECC keys to RSA, then Ed25519, on a build without them, and give sshd RSA and Ed25519 host keys beside the ECDSA one - skip the sshd half alone when sshd or ssh-keygen is missing, or sshd will not start unprivileged - report the sequence number resets OpenSSH logs rather than test them, the wording being no contract - run from make check through dist_noinst_SCRIPTS
1 parent 1b9ae35 commit 3b2dd60

2 files changed

Lines changed: 447 additions & 0 deletions

File tree

‎scripts/include.am‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,10 @@ endif
2020
# app wasn't built.
2121
dist_noinst_SCRIPTS+= scripts/sshclient.test
2222

23+
# Not gated on a feature: the script skips itself when OpenSSH is missing
24+
# or predates strict KEX.
25+
dist_noinst_SCRIPTS+= scripts/openssh-interop.test
26+
2327
dist_noinst_SCRIPTS+= scripts/fwd.test
2428
dist_noinst_SCRIPTS+= scripts/fwd-bulk.test
2529
endif

0 commit comments

Comments
 (0)