- djm@cvs.openbsd.org 2010/09/22 12:26:05

     [regress/Makefile regress/kextype.sh]
     regress test for each of the key exchange algorithms that we support

1 files changed, 26 insertions, 0 deletions

diff --git a/regress/kextype.sh b/regress/kextype.sh
new file mode 100644
index 000000000..ba6fd9509
--- /dev/null
+++ b/regress/kextype.sh
@@ -0,0 +1,26 @@
+#       $OpenBSD: kextype.sh,v 1.1 2010/09/22 12:26:05 djm Exp $
+#       Placed in the Public Domain.
+
+tid="login with different key exchange algorithms"
+
+TIME=/usr/bin/time
+cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak
+cp $OBJ/ssh_proxy $OBJ/ssh_proxy_bak
+
+kextypes="ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521"
+kextypes="$kextypes diffie-hellman-group-exchange-sha256"
+kextypes="$kextypes diffie-hellman-group-exchange-sha1"
+kextypes="$kextypes diffie-hellman-group14-sha1"
+kextypes="$kextypes diffie-hellman-group1-sha1"
+
+tries="1 2 3 4"
+for k in $kextypes; do 
+        verbose "kex $k"
+        for i in $tries; do
+                ${SSH} -F $OBJ/ssh_proxy -o KexAlgorithms=$k x true
+                if [ $? -ne 0 ]; then
+                        fail "ssh kex $k"
+                fi
+        done
+done
+