mirror of
git://anongit.mindrot.org/openssh.git
synced 2024-12-28 13:02:09 +00:00
f619d1cad9
strictly correct since while ECC requires sha256 the reverse is not true however it does prevent spurious test failures.
29 lines
757 B
Bash
29 lines
757 B
Bash
# $OpenBSD: kextype.sh,v 1.1 2010/09/22 12:26:05 djm Exp $
|
|
# Placed in the Public Domain.
|
|
|
|
tid="login with different key exchange algorithms"
|
|
|
|
TIME=/usr/bin/time
|
|
cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak
|
|
cp $OBJ/ssh_proxy $OBJ/ssh_proxy_bak
|
|
|
|
if test "$TEST_SSH_ECC" = "yes"; then
|
|
kextypes="ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521"
|
|
kextypes="$kextypes diffie-hellman-group-exchange-sha256"
|
|
fi
|
|
kextypes="$kextypes diffie-hellman-group-exchange-sha1"
|
|
kextypes="$kextypes diffie-hellman-group14-sha1"
|
|
kextypes="$kextypes diffie-hellman-group1-sha1"
|
|
|
|
tries="1 2 3 4"
|
|
for k in $kextypes; do
|
|
verbose "kex $k"
|
|
for i in $tries; do
|
|
${SSH} -F $OBJ/ssh_proxy -o KexAlgorithms=$k x true
|
|
if [ $? -ne 0 ]; then
|
|
fail "ssh kex $k"
|
|
fi
|
|
done
|
|
done
|
|
|