mirror of
git://anongit.mindrot.org/openssh.git
synced 2024-12-28 04:52:07 +00:00
edb1af5044
[dhgex.sh integrity.sh kextype.sh rekey.sh try-ciphers.sh]
repair regress tests broken by server-side default cipher/kex/mac changes
by ensuring that the option under test is included in the server's
algorithm list
26 lines
581 B
Bash
26 lines
581 B
Bash
# $OpenBSD: kextype.sh,v 1.5 2014/04/21 22:15:37 djm Exp $
|
|
# Placed in the Public Domain.
|
|
|
|
tid="login with different key exchange algorithms"
|
|
|
|
TIME=/usr/bin/time
|
|
cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak
|
|
cp $OBJ/ssh_proxy $OBJ/ssh_proxy_bak
|
|
|
|
# Make server accept all key exchanges.
|
|
ALLKEX=`ssh -Q kex`
|
|
KEXOPT=`echo $ALLKEX | tr ' ' ,`
|
|
echo "KexAlgorithms=$KEXOPT" >> $OBJ/sshd_proxy
|
|
|
|
tries="1 2 3 4"
|
|
for k in `${SSH} -Q kex`; do
|
|
verbose "kex $k"
|
|
for i in $tries; do
|
|
${SSH} -F $OBJ/ssh_proxy -o KexAlgorithms=$k x true
|
|
if [ $? -ne 0 ]; then
|
|
fail "ssh kex $k"
|
|
fi
|
|
done
|
|
done
|
|
|