openssh/regress
Damien Miller 6efd94f32e - (djm) [regress/connect-privsep.sh regress/test-exec.sh] demote fatal
regress errors for the sandbox to warnings. ok tim dtucker
2011-09-04 19:04:16 +10:00
..
.cvsignore - (djm) [regress/.cvsignore] Ignore Makefile here 2006-03-15 13:13:27 +11:00
addrmatch.sh - djm@cvs.openbsd.org 2010/02/09 04:57:36 2010-02-24 17:26:38 +11:00
agent-getpeereid.sh - (tim) [regress/agent-getpeereid.sh] shell portability fix. 2011-01-16 22:53:56 -08:00
agent-pkcs11.sh - markus@cvs.openbsd.org 2010/02/08 10:52:47 2010-02-24 17:31:20 +11:00
agent-ptrace.sh - (djm) [regress/agent-ptrace.sh] Fix false failure on OS X by adding 2011-01-17 11:20:18 +11:00
agent-timeout.sh - (dtucker) [regress/agent-timeout.sh] Timeout of 5 sec is borderline for 2003-09-13 09:46:03 +10:00
agent.sh - jmc@cvs.openbsd.org 2007/11/25 15:35:09 2008-03-12 23:58:55 +11:00
banner.sh - dtucker@cvs.openbsd.org 2003/10/11 11:49:49 2004-01-30 12:58:51 +11:00
broken-pipe.sh
brokenkeys.sh - djm@cvs.openbsd.org 2004/10/29 23:59:22 2004-12-06 23:07:37 +11:00
bsd.regress.mk
cert-hostkey.sh - djm@cvs.openbsd.org 2011/05/20 02:43:36 2011-05-20 19:07:45 +10:00
cert-userkey.sh - djm@cvs.openbsd.org 2011/05/17 07:13:31 2011-05-20 19:06:48 +10:00
cfgmatch.sh - dtucker@cvs.openbsd.org 2011/06/03 05:35:10 2011-08-17 12:08:15 +10:00
cipher-speed.sh - (djm) [regress/cipher-speed.sh regress/try-ciphers.sh] disable HMAC-SHA2 2011-08-17 12:25:46 +10:00
conch-ciphers.sh - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh] 2009-02-16 15:21:39 +11:00
connect-privsep.sh - (djm) [regress/connect-privsep.sh regress/test-exec.sh] demote fatal 2011-09-04 19:04:16 +10:00
connect.sh
dsa_ssh2.prv
dsa_ssh2.pub
dynamic-forward.sh - dtucker@cvs.openbsd.org 2011/06/03 00:29:52 2011-06-03 14:19:02 +10:00
envpass.sh - djm@cvs.openbsd.org 2005/03/04 08:48:46 2005-03-07 18:35:34 +11:00
exit-status.sh
forcecommand.sh - (dtucker) [regress/forcecommand.sh] Portablize. 2006-07-24 23:50:23 +10:00
forwarding.sh - dtucker@cvs.openbsd.org 2010/01/11 02:53:44 2010-02-24 17:25:58 +11:00
host-expand.sh - (tim) [regress/host-expand.sh] Fix for building outside of read only 2011-01-10 12:56:26 -08:00
kextype.sh - (dtucker) [Makefile.in configure.ac regress/kextype.sh] Skip sha256-based 2011-01-16 18:28:09 +11:00
key-options.sh - djm@cvs.openbsd.org 2008/06/30 08:07:34 2008-07-04 17:08:58 +10:00
keygen-change.sh
keygen-convert.sh - dtucker@cvs.openbsd.org 2009/11/09 04:20:04 2010-02-24 17:33:30 +11:00
keyscan.sh
keytype.sh - (djm) [regress/keytype.sh] s/echo -n/echon/ to repair failing regress 2011-01-08 21:58:20 +11:00
localcommand.sh - (tim) [regress/localcommand.sh] Shell portability fix. Reported by imorgan at 2008-03-14 11:02:51 -07:00
login-timeout.sh - (tim) [regress/login-timeout.sh regress/reconfigure.sh regress/reexec.sh 2010-08-12 09:43:13 -07:00
Makefile - (djm) [regress/Makefile] use $TEST_SSH_KEYGEN instead of the one in 2011-01-17 10:51:40 +11:00
multiplex.sh - (djm) [configure.ac regress/agent-getpeereid.sh regress/multiplex.sh] 2011-01-17 16:17:09 +11:00
portnum.sh - (tim) [regress/portnum.sh] Shell portability fix. 2010-01-16 11:37:53 -08:00
proto-mismatch.sh
proto-version.sh
proxy-connect.sh
putty-ciphers.sh - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh] 2009-02-16 15:21:39 +11:00
putty-kex.sh - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh] 2009-02-16 15:21:39 +11:00
putty-transfer.sh - (djm) [regress/conch-ciphers.sh regress/putty-ciphers.sh] 2009-02-16 15:21:39 +11:00
README.regress - (djm) [Makefile.in WARNING.RNG aclocal.m4 buildpkg.sh.in configure.ac] 2011-05-05 13:48:37 +10:00
reconfigure.sh - (tim) [regress/login-timeout.sh regress/reconfigure.sh regress/reexec.sh 2010-08-12 09:43:13 -07:00
reexec.sh - (tim) [regress/login-timeout.sh regress/reconfigure.sh regress/reexec.sh 2010-08-12 09:43:13 -07:00
rekey.sh - (dtucker) [regress/rekey.sh] Touch datafile before filling with dd, since 2004-12-20 12:35:42 +11:00
rsa_openssh.prv
rsa_openssh.pub
rsa_ssh2.prv
runtests.sh
scp-ssh-wrapper.sh - dtucker@cvs.openbsd.org 2005/12/14 04:36:39 2006-01-31 22:03:11 +11:00
scp.sh - djm@cvs.openbsd.org 2006/01/31 10:36:33 2006-01-31 22:06:41 +11:00
sftp-badcmds.sh - djm@cvs.openbsd.org 2009/08/13 01:11:55 2009-10-07 10:43:57 +11:00
sftp-batch.sh - djm@cvs.openbsd.org 2009/08/13 01:11:55 2009-10-07 10:43:57 +11:00
sftp-cmds.sh Id sync 2010-12-05 10:34:08 +11:00
sftp-glob.sh - (djm) [configure.ac regress/agent-getpeereid.sh regress/multiplex.sh] 2011-01-17 16:17:09 +11:00
sftp.sh - djm@cvs.openbsd.org 2009/08/13 01:11:55 2009-10-07 10:43:57 +11:00
ssh2putty.sh fix id 2009-10-07 10:58:40 +11:00
ssh-com-client.sh - markus@cvs.openbsd.org 2004/02/24 17:06:52 2004-02-29 20:33:51 +11:00
ssh-com-keygen.sh - markus@cvs.openbsd.org 2004/02/24 17:06:52 2004-02-29 20:33:51 +11:00
ssh-com-sftp.sh - djm@cvs.openbsd.org 2009/08/20 18:43:07 2009-10-07 10:46:29 +11:00
ssh-com.sh - markus@cvs.openbsd.org 2004/02/24 17:06:52 2004-02-29 20:33:51 +11:00
sshd-log-wrapper.sh - dtucker@cvs.openbsd.org 2005/02/27 11:33:30 2005-03-07 18:33:02 +11:00
stderr-after-eof.sh
stderr-data.sh
t4.ok
t5.ok
test-exec.sh - (djm) [regress/connect-privsep.sh regress/test-exec.sh] demote fatal 2011-09-04 19:04:16 +10:00
transfer.sh
try-ciphers.sh - (djm) [regress/cipher-speed.sh regress/try-ciphers.sh] disable HMAC-SHA2 2011-08-17 12:25:46 +10:00
yes-head.sh - (dtucker) [regress/yes-head.sh] Work around breakage caused by some 2005-11-28 16:41:03 +11:00

Overview.

$ ./configure && make tests

You'll see some progress info. A failure will cause either the make to
abort or the driver script to report a "FATAL" failure.

The test consists of 2 parts. The first is the file-based tests which is
driven by the Makefile, and the second is a set of network or proxycommand
based tests, which are driven by a driver script (test-exec.sh) which is
called multiple times by the Makefile.

Failures in the first part will cause the Makefile to return an error.
Failures in the second part will print a "FATAL" message for the failed
test and continue.

OpenBSD has a system-wide regression test suite. OpenSSH Portable's test
suite is based on OpenBSD's with modifications.


Environment variables.

SUDO: path to sudo command, if desired. Note that some systems (notably
	systems using PAM) require sudo to execute some tests.
TEST_SSH_TRACE: set to "yes" for verbose output from tests 
TEST_SSH_QUIET: set to "yes" to suppress non-fatal output.
TEST_SSH_x: path to "ssh" command under test, where x=SSH,SSHD,SSHAGENT,SSHADD
	SSHKEYGEN,SSHKEYSCAN,SFTP,SFTPSERVER
OBJ: used by test scripts to access build dir.
TEST_SHELL: shell used for running the test scripts.
TEST_SSH_PORT: TCP port to be used for the listening tests.
TEST_SSH_SSH_CONFOPTS: Configuration directives to be added to ssh_config
	before running each test.
TEST_SSH_SSHD_CONFOTPS: Configuration directives to be added to sshd_config
	before running each test.


Individual tests.

You can run an individual test from the top-level Makefile, eg:
$ make tests LTESTS=agent-timeout

If you need to manipulate the environment more you can invoke test-exec.sh
directly if you set up the path to find the binaries under test and the
test scripts themselves, for example:

$ cd regress
$ PATH=`pwd`/..:$PATH:. TEST_SHELL=/bin/sh sh test-exec.sh `pwd` \
    agent-timeout.sh
ok agent timeout test


Files.

test-exec.sh: the main test driver. Sets environment, creates config files
and keys and runs the specified test.

At the time of writing, the individual tests are:
agent-timeout.sh:	agent timeout test
agent.sh:		simple agent test
broken-pipe.sh:		broken pipe test
connect-privsep.sh:	proxy connect with privsep
connect.sh:		simple connect
exit-status.sh:		remote exit status
forwarding.sh:		local and remote forwarding
keygen-change.sh:	change passphrase for key
keyscan.sh:		keyscan
proto-mismatch.sh:	protocol version mismatch
proto-version.sh:	sshd version with different protocol combinations
proxy-connect.sh:	proxy connect
sftp.sh:		basic sftp put/get
ssh-com-client.sh:	connect with ssh.com client
ssh-com-keygen.sh:	ssh.com key import
ssh-com-sftp.sh:	basic sftp put/get with ssh.com server
ssh-com.sh:		connect to ssh.com server
stderr-after-eof.sh:	stderr data after eof
stderr-data.sh:		stderr data transfer
transfer.sh:		transfer data
try-ciphers.sh:		try ciphers
yes-head.sh:		yes pipe head


Problems?

Run the failing test with shell tracing (-x) turned on:
$ PATH=`pwd`/..:$PATH:. sh -x test-exec.sh `pwd` agent-timeout.sh

Failed tests can be difficult to diagnose. Suggestions:
- run the individual test via ./test-exec.sh `pwd` [testname]
- set LogLevel to VERBOSE in test-exec.sh and enable syslogging of
  auth.debug (eg to /var/log/authlog).


Known Issues.

- Similarly, if you do not have "scp" in your system's $PATH then the
  multiplex scp tests will fail (since the system's shell startup scripts
  will determine where the shell started by sshd will look for scp).

- Recent GNU coreutils deprecate "head -[n]": this will cause the yes-head
  test to fail.  The old behaviour can be restored by setting (and
  exporting) _POSIX2_VERSION=199209 before running the tests.

$Id: README.regress,v 1.12 2011/05/05 03:48:42 djm Exp $