Mailing List Archive

Are you looking to use a test framework such as DejaGNU for this? If you
haven't decided already, this might be a good choice given the
interactive nature of OpenSSH.

But then, I'm only going on what I think it can do for you since I've
never actually used it myself. If Cygnus can test GDB on cross targets
with it, we should be OK ;-)

-Andre

Ben Taylor wrote:
>
> Since I have been involved with the OpenSSH project, I've seen references
> to really cool things that people are using OpenSSH for. However, my
> limitation comes from lack of experience with ssh type projects/products,
> and my testing tends to be pretty minimal.
>
> What do you think about starting a suite of testing methods for OpenSSH?
> I figure there are some pretty cool things being done out there, and those
> of us who have resources could further stress-test the code with good
> examples of testing methods.
>
> I would like to volunteer to accept testing methods from other OpenSSH
> folks who really stress out the protocol and systems. What I'm looking for
> is a complete but short description of how to set up the "test", along
> with any shell code, or other fragments of code needed to make the test
> work for us ssh dummies. Once I have it standardized with documentation
> and code, I'll forward it to Damien for inclusion in the tree.
>
> Ben

On Fri, 7 Jan 2000, Andre Lucas wrote:

> Are you looking to use a test framework such as DejaGNU for this? If you
> haven't decided already, this might be a good choice given the
> interactive nature of OpenSSH.

I suppose I could do something like that. Though I'll have to pull it
down and start playing with that. Initially, I was just looking for
boilerplate scripts and descriptions so that more thorough testing
can occur, especially by those of us less familiar with ssh type tools.

> But then, I'm only going on what I think it can do for you since I've
> never actually used it myself. If Cygnus can test GDB on cross targets
> with it, we should be OK ;-)

Damn, GDB with cross targets? I would figure so. Any one really familiar
with Deja Gnu?

Ben

>
> -Andre
>
> Ben Taylor wrote:
> >
> > Since I have been involved with the OpenSSH project, I've seen references
> > to really cool things that people are using OpenSSH for. However, my
> > limitation comes from lack of experience with ssh type projects/products,
> > and my testing tends to be pretty minimal.
> >
> > What do you think about starting a suite of testing methods for OpenSSH?
> > I figure there are some pretty cool things being done out there, and those
> > of us who have resources could further stress-test the code with good
> > examples of testing methods.
> >
> > I would like to volunteer to accept testing methods from other OpenSSH
> > folks who really stress out the protocol and systems. What I'm looking for
> > is a complete but short description of how to set up the "test", along
> > with any shell code, or other fragments of code needed to make the test
> > work for us ssh dummies. Once I have it standardized with documentation
> > and code, I'll forward it to Damien for inclusion in the tree.
> >
> > Ben
>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 7 Jan 2000, Ben Taylor wrote:

>
> Since I have been involved with the OpenSSH project, I've seen
> references to really cool things that people are using OpenSSH for.
> However, my limitation comes from lack of experience with ssh type
> projects/products, and my testing tends to be pretty minimal.
>
> What do you think about starting a suite of testing methods for
> OpenSSH? I figure there are some pretty cool things being done out
> there, and those of us who have resources could further stress-test
> the code with good examples of testing methods.

Before a do a release I do some basic tests:

Basic connectivity

RSA authentication

Password authentication

If I have time, or have touched a lot of the code I do one or more
of the following:

Connect OpenSSH -> commercial SSH

Connect Commerical SSH -> OpenSSH

ssh-keygen

ssh-agent

while [ 1 ] ; do ssh djm@localhost /bin/true || echo FAIL ; done

scp a couple of large files around & do md5sums on the results

Notably absent is testing of the port-forwarding.

> I would like to volunteer to accept testing methods from other
> OpenSSH folks who really stress out the protocol and systems. What
> I'm looking for is a complete but short description of how to set up
> the "test", along with any shell code, or other fragments of code
> needed to make the test work for us ssh dummies. Once I have it
> standardized with documentation and code, I'll forward it to Damien
> for inclusion in the tree.

A testing framework would be wonderful, perhaps a test subdirectory
and multiple tests implemented as makefile rules and/or shell
scripts.

I will assist wherever possible, this promises to make my life much
easier :)

Regards,
Damien

- --
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: djm@mindrot.org (home) -or- djm@ibs.com.au (work)


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE4dgASormJ9RG1dI8RAmLUAJ9qdh3yKfxlBFfzJOKE+/NiruJuuQCeI4Ok
2BNOhNXrcvJhIw7rNoopkFA=
=FcCX
-----END PGP SIGNATURE-----

>I would like to volunteer to accept testing methods from other OpenSSH
>folks who really stress out the protocol and systems. What I'm looking for

Okay, here's how I exercise the TCP port-forwarding scheme by websurfing
over it.

Assume you have shell access to a system running sshd and Squid or
some other proxy web cache. Call this machine "squid".

Locally execute the following command in its own window:

ssh -L3128:127.0.0.1:3128 squid

Now configure your web browser to use a proxy with address 127.0.0.1,
port 3128, and surf away.

There used to be an option in Netscape to control the max number of
simultaneous TCP connections that it will open, but I can't find it in
the Linux flavor of Communicator 4.7. Anybody know if it's still there
somewhere? Setting this to a large number would really exercise ssh
port forwarding.

Phil