Skip to content

Commit 9670a8c

Browse files
committed
scripts: add an OpenSSH strict KEX interop test
Runs the OpenSSH client against the echoserver and the wolfSSH example client against sshd, checking that each pairing negotiates the strict KEX marker and that a session then runs over the connection. - skip when ssh is missing or predates OpenSSH 9.6 - fall back from the ECC keys to RSA, then Ed25519, on a build without them, and give sshd an Ed25519 host key for the same case - skip the sshd half alone when sshd or ssh-keygen is missing, or sshd will not start unprivileged - report the sequence number resets OpenSSH logs rather than test them, the wording being no contract - run from make check through dist_noinst_SCRIPTS
1 parent ef0dcd1 commit 9670a8c

2 files changed

Lines changed: 441 additions & 0 deletions

File tree

‎scripts/include.am‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ endif
1515
# app wasn't built.
1616
dist_noinst_SCRIPTS+= scripts/sshclient.test
1717

18+
# Not gated on anything: the script skips itself when OpenSSH is missing
19+
# or predates strict KEX.
20+
dist_noinst_SCRIPTS+= scripts/openssh-interop.test
21+
1822
dist_noinst_SCRIPTS+= scripts/fwd.test
1923
EXTRA_DIST += scripts/fwd.test.expect
2024
dist_noinst_SCRIPTS+= scripts/fwd-bulk.test

0 commit comments

Comments
 (0)