try-ciphers.sh revision 180751
1#	$OpenBSD: try-ciphers.sh,v 1.11 2007/06/07 19:41:46 pvalchev Exp $
2#	Placed in the Public Domain.
3
4tid="try ciphers"
5
6ciphers="aes128-cbc 3des-cbc blowfish-cbc cast128-cbc 
7	arcfour128 arcfour256 arcfour 
8	aes192-cbc aes256-cbc rijndael-cbc@lysator.liu.se
9	aes128-ctr aes192-ctr aes256-ctr"
10macs="hmac-sha1 hmac-md5 umac-64@openssh.com hmac-sha1-96 hmac-md5-96"
11
12for c in $ciphers; do
13	for m in $macs; do
14		trace "proto 2 cipher $c mac $m"
15		verbose "test $tid: proto 2 cipher $c mac $m"
16		${SSH} -F $OBJ/ssh_proxy -2 -m $m -c $c somehost true
17		if [ $? -ne 0 ]; then
18			fail "ssh -2 failed with mac $m cipher $c"
19		fi
20	done
21done
22
23ciphers="3des blowfish"
24for c in $ciphers; do
25	trace "proto 1 cipher $c"
26	verbose "test $tid: proto 1 cipher $c"
27	${SSH} -F $OBJ/ssh_proxy -1 -c $c somehost true
28	if [ $? -ne 0 ]; then
29		fail "ssh -1 failed with cipher $c"
30	fi
31done
32
33if ${SSH} -oCiphers=acss@openssh.org 2>&1 | grep "Bad SSH2 cipher" >/dev/null
34then
35	:
36else
37
38echo "Ciphers acss@openssh.org" >> $OBJ/sshd_proxy
39c=acss@openssh.org
40for m in $macs; do
41	trace "proto 2 $c mac $m"
42	verbose "test $tid: proto 2 cipher $c mac $m"
43	${SSH} -F $OBJ/ssh_proxy -2 -m $m -c $c somehost true
44	if [ $? -ne 0 ]; then
45		fail "ssh -2 failed with mac $m cipher $c"
46	fi
47done
48
49fi
50