1#	$OpenBSD: dropbear-kex.sh,v 1.1 2023/10/20 06:56:45 dtucker Exp $
2#	Placed in the Public Domain.
3
4tid="dropbear kex"
5
6if test "x$REGRESS_INTEROP_DROPBEAR" != "xyes" ; then
7	skip "dropbear interop tests not enabled"
8fi
9
10cat >>$OBJ/sshd_proxy <<EOD
11PubkeyAcceptedAlgorithms +ssh-rsa,ssh-dss
12HostkeyAlgorithms +ssh-rsa,ssh-dss
13EOD
14cp $OBJ/sshd_proxy $OBJ/sshd_proxy.bak
15
16kex="curve25519-sha256 curve25519-sha256@libssh.org
17    diffie-hellman-group14-sha256 diffie-hellman-group14-sha1"
18
19for k in $kex; do
20	verbose "$tid: kex $k"
21	rm -f ${COPY}
22	# dbclient doesn't have switch for kex, so force in server
23	(cat $OBJ/sshd_proxy.bak; echo "KexAlgorithms $k") >$OBJ/sshd_proxy
24	env HOME=$OBJ dbclient -y -i $OBJ/.dropbear/id_rsa 2>$OBJ/dbclient.log \
25	    -J "$OBJ/ssh_proxy.sh" somehost cat ${DATA} > ${COPY}
26	if [ $? -ne 0 ]; then
27		fail "ssh cat $DATA failed"
28	fi
29	cmp ${DATA} ${COPY}		|| fail "corrupted copy"
30done
31rm -f ${COPY}
32