We don't yet understand why these tests fail, but the Apple sshd seems to have some non-trivial vendor patches, so it is plausibly a platform-specific bug in the test. Let's skip that failure mode on the whole platform until/unless someone has time to reproduce and investigate the failure. For golang/go#64959. Cq-Include-Trybots: luci.golang.try:x_crypto-gotip-darwin-amd64-longtest,x_crypto-gotip-linux-amd64-longtest,x_crypto-gotip-windows-amd64-longtest Change-Id: I9e43579469de3fe9329c093b5916bbed0edd3751 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/554077 Reviewed-by: Dmitri Shuralyov <dmitshur@golang.org> Reviewed-by: Dmitri Shuralyov <dmitshur@google.com> Reviewed-by: Nicola Murino <nicola.murino@gmail.com> LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Auto-Submit: Bryan Mills <bcmills@google.com>
60 lines
1.6 KiB
Go
60 lines
1.6 KiB
Go
// Copyright 2014 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
//go:build aix || darwin || dragonfly || freebsd || linux || netbsd || openbsd || solaris
|
|
|
|
package test
|
|
|
|
import (
|
|
"bytes"
|
|
"testing"
|
|
|
|
"golang.org/x/crypto/ssh"
|
|
"golang.org/x/crypto/ssh/agent"
|
|
)
|
|
|
|
func TestAgentForward(t *testing.T) {
|
|
server := newServer(t)
|
|
conn := server.Dial(clientConfig())
|
|
defer conn.Close()
|
|
|
|
keyring := agent.NewKeyring()
|
|
if err := keyring.Add(agent.AddedKey{PrivateKey: testPrivateKeys["dsa"]}); err != nil {
|
|
t.Fatalf("Error adding key: %s", err)
|
|
}
|
|
if err := keyring.Add(agent.AddedKey{
|
|
PrivateKey: testPrivateKeys["dsa"],
|
|
ConfirmBeforeUse: true,
|
|
LifetimeSecs: 3600,
|
|
}); err != nil {
|
|
t.Fatalf("Error adding key with constraints: %s", err)
|
|
}
|
|
pub := testPublicKeys["dsa"]
|
|
|
|
sess, err := conn.NewSession()
|
|
if err != nil {
|
|
skipIfIssue64959(t, err)
|
|
t.Fatalf("NewSession: %v", err)
|
|
}
|
|
if err := agent.RequestAgentForwarding(sess); err != nil {
|
|
t.Fatalf("RequestAgentForwarding: %v", err)
|
|
}
|
|
|
|
if err := agent.ForwardToAgent(conn, keyring); err != nil {
|
|
t.Fatalf("SetupForwardKeyring: %v", err)
|
|
}
|
|
out, err := sess.CombinedOutput("ssh-add -L")
|
|
if err != nil {
|
|
t.Fatalf("running ssh-add: %v, out %s", err, out)
|
|
}
|
|
key, _, _, _, err := ssh.ParseAuthorizedKey(out)
|
|
if err != nil {
|
|
t.Fatalf("ParseAuthorizedKey(%q): %v", out, err)
|
|
}
|
|
|
|
if !bytes.Equal(key.Marshal(), pub.Marshal()) {
|
|
t.Fatalf("got key %s, want %s", ssh.MarshalAuthorizedKey(key), ssh.MarshalAuthorizedKey(pub))
|
|
}
|
|
}
|