rtunnel 0.3.8 → 0.4.0

data/test/test_crypto.rb

@@ -0,0 +1,127 @@
+require 'rtunnel'
+
+require 'openssl'
+require 'test/unit'
+
+class CryptoTest < Test::Unit::TestCase
+  C = RTunnel::Crypto
+  
+  @@rsa_key_path = 'test_data/ssh_host_rsa_key' 
+  @@dsa_key_path = 'test_data/ssh_host_dsa_key' 
+  @@known_hosts_path = 'test_data/known_hosts' 
+  @@authorized_keys_path = 'test_data/authorized_keys2'
+  
+  def test_read_private_key
+    key = C.read_private_key @@rsa_key_path
+    assert_equal File.read(@@rsa_key_path), key.to_pem
+    assert_equal OpenSSL::PKey::RSA, key.class
+
+    key = C.read_private_key @@dsa_key_path
+    assert_equal File.read(@@dsa_key_path), key.to_pem
+    assert_equal OpenSSL::PKey::DSA, key.class
+  end
+  
+  def test_read_known_hosts
+    keys = C.read_authorized_keys @@known_hosts_path    
+    verify_authorized_keys keys    
+  end
+
+  def test_read_authorized_keys
+    keys = C.read_authorized_keys @@authorized_keys_path
+    verify_authorized_keys keys    
+  end
+  
+  def verify_authorized_keys(keys)
+    assert_equal 4, keys.length
+    assert_equal [OpenSSL::PKey::RSA] * 3 + [OpenSSL::PKey::DSA],
+                 keys.map { |k| k.class }
+    assert_equal C.read_private_key(@@rsa_key_path).public_key.to_pem,
+                 keys[1].to_pem
+    assert_equal C.read_private_key(@@dsa_key_path).public_key.to_pem,
+                 keys[3].to_pem    
+  end
+  
+  def test_key_fingerprint
+    keys = C.read_authorized_keys @@known_hosts_path
+
+    assert_equal 4, keys.map { |k| C.key_fingerprint k }.uniq.length
+    keys.each { |k| assert_equal C.key_fingerprint(k), C.key_fingerprint(k) }
+  end
+  
+  def test_load_public_keys
+    keyset = C.load_public_keys @@known_hosts_path
+    rsa_key = C.read_private_key @@rsa_key_path
+    dsa_key = C.read_private_key @@dsa_key_path
+    
+    assert_equal rsa_key.public_key.to_pem,
+                 keyset[C.key_fingerprint(rsa_key)].to_pem
+    assert_equal dsa_key.public_key.to_pem,
+                 keyset[C.key_fingerprint(dsa_key)].to_pem
+  end
+  
+  def test_key_encryption
+    test_data = 'qwertyuiopasdfghjklzxcvbnm' * 2
+    rsa_key = C.read_private_key @@rsa_key_path
+    dsa_key = C.read_private_key @@rsa_key_path
+    
+    [rsa_key, dsa_key].each do |key|
+      encrypted_data = C.encrypt_with_key key.public_key, test_data
+      decrypted_data = C.decrypt_with_key key, encrypted_data
+      
+      assert_equal test_data, decrypted_data
+      0.upto(test_data.length - 4) do |i|
+        assert !encrypted_data.index(test_data[i, 4]),
+               'Encryption did not wipe the original pattern'
+      end
+    end
+  end
+  
+  def test_encryption_depends_on_key
+    num_keys = 16
+    test_data = 'qwertyuiopasdfghjklzxcvbnm' * 2
+    keys = (0...num_keys).map { OpenSSL::PKey::RSA.generate 1024, 35 }
+    assert_equal num_keys, keys.map { |k| C.encrypt_with_key k, test_data }.
+                                uniq.length
+  end
+  
+  def test_hasher_random_keys_are_random
+    num_keys = 1024
+    assert_equal num_keys, (0...num_keys).map { C::Hasher.random_key }.
+                                          uniq.length
+  end
+  
+  def test_hasher_random_keys_yield_random_results
+    num_keys = 1024
+    test_data = 'qwertyuiopasdfghjklzxcvbnm' * 2
+    assert_equal num_keys, (0...num_keys).map { C::Hasher.new.hash test_data }.
+                                          uniq.length
+  end
+  
+  def test_hasher_hashes_are_finite
+    num_blocks = 64
+    block = 'qwertyuiopasdfghjklzxcvbnm'
+    
+    hasher = C::Hasher.new
+    hash_length = hasher.hash('').length
+    1.upto(num_blocks) { |n| assert_equal hash_length, hasher.hash(block * n).
+                                                              length }
+  end
+  
+  def test_hasher_has_state
+    num_blocks = 1024
+    block = 'qwertyuiopasdfghjklzxcvbnm'
+    hasher = C::Hasher.new
+    
+    assert_equal num_blocks, (0...num_blocks).map { hasher.hash block}.uniq.
+                                               length
+  end
+  
+  def test_hasher_is_reproducible
+    hasher = C::Hasher.new
+    hasher2 = C::Hasher.new hasher.key
+    
+    num_blocks = 128
+    block = 'qwertyuiopasdfghjklzxcvbnm'
+    1.upto(num_blocks) { assert_equal hasher.hash(block), hasher2.hash(block) }
+  end
+end

data/test/test_frame_protocol.rb

@@ -0,0 +1,109 @@
+require 'rtunnel'
+
+require 'test/unit'
+
+require 'test/protocol_mocks.rb'
+
+# Send mock for frames.
+class EmSendFramesMock < EmSendMock
+  include RTunnel::FrameProtocol
+end
+
+# Receive mock for frames.
+class EmReceiveFramesMock < EmReceiveMock
+  include RTunnel::FrameProtocol
+  object_name :frame
+end
+
+class FrameProtocolTest < Test::Unit::TestCase
+  def setup
+    super
+    @send_mock = EmSendFramesMock.new
+  end
+  
+  def teardown
+    super
+  end
+
+  def continuous_data_test(frames)
+    truncated_data_test frames, []
+  end
+  
+  def truncated_data_test(frames, sub_lengths)
+    frames.each { |frame| @send_mock.send_frame frame }
+    in_string = @send_mock.string
+    in_strings, i = [], 0
+    sub_lengths.each do |sublen|
+      in_strings << in_string[i, sublen]
+      i += sublen
+    end
+    in_strings << in_string[i..-1] if i < in_string.length
+    out_frames = EmReceiveFramesMock.new(@send_mock.string).replay.frames
+    assert_equal frames, out_frames
+  end
+
+  def test_empty_frame
+    continuous_data_test ['']    
+  end
+  
+  def test_byte_frame
+    continuous_data_test ['F']
+  end
+
+  def test_string_frame
+    continuous_data_test [(32...128).to_a.pack('C*')]
+  end
+  
+  def test_multiple_frames
+    continuous_data_test [(32...128).to_a.pack('C*'), '', 'F', '', '1234567890']
+  end
+  
+  def test_truncated_border
+    truncated_data_test ['A', 'A'], [1, 0, 2, 0]
+  end
+  
+  def test_truncated_border_and_joined_data_size
+    truncated_data_test ['A', 'A'], [1, 1, 1, 1]
+  end
+  
+  def test_truncated_size
+    long_frame = (32...128).to_a.pack('C*') * 5
+    truncated_data_test [long_frame], [1]
+  end
+
+  def test_truncated_size_and_data
+    long_frame = (32...128).to_a.pack('C*') * 5
+    truncated_data_test [long_frame], [1, 16]
+  end
+  
+  def test_badass
+    # TODO(not_me): this test takes 4 seconds; replace with more targeted tests
+    
+    # build the badass string
+    s2_frame = 'qwertyuiopasdfgh' * 8 * 128 # 16384 characters, size is 3 bytes
+    @send_mock.send_frame s2_frame
+    s2_string = @send_mock.string
+    s2_count = 3
+    send_string = s2_string * s2_count
+    ex_frames = [s2_frame] * s2_count
+    
+    # build cut points in a string
+    s2_points = [0, 1, 2, 3, 4, 5, 127, 128, 8190, 16381, 16382, 16383]
+    cut_points = []
+    0.upto(s2_count - 1) do |i|
+      cut_points += s2_points.map { |p| p + i * s2_string.length }
+    end
+    
+    # try all combinations of cutting up the string in 4 pieces
+    0.upto(cut_points.length - 1) do |i|
+      (i + 1).upto(cut_points.length - 1) do |j|
+        (j + 1).upto(cut_points.length - 1) do |k|
+          packets = [0...cut_points[i], cut_points[i]...cut_points[j],
+                     cut_points[j]...cut_points[k], cut_points[k]..-1].
+                    map { |r| send_string[r] }
+          assert_equal ex_frames, EmReceiveFramesMock.new(packets).replay.frames
+        end
+      end
+    end
+  end
+end

data/test/test_io_extensions.rb

@@ -0,0 +1,70 @@
+require 'rtunnel'
+
+require 'stringio'
+require 'test/unit'
+
+class IOExtensionsTest < Test::Unit::TestCase  
+  def setup
+    @test_sizes = [0, 1, 10, 127, 128, (1 << 20), (1 << 45) / 3, (1 << 62) / 5]
+    @test_strings = ['', 'a',
+                     (32..127).to_a.map { |c| c.chr}.join,
+                     (32..127).to_a.map { |c| c.chr}.join * 511]
+    @str = StringIO.new
+  end
+  
+  def test_varsizes_independent
+    @test_sizes.each do |size|
+      @str = StringIO.new
+      @str.write_varsize size
+      @str.rewind
+      assert_equal size, @str.read_varsize
+    end
+  end
+ 
+  def test_varsizes_appended
+    @test_sizes.each { |size| @str.write_varsize size }
+    @str.rewind
+    @test_sizes.each do |size|
+      assert_equal size, @str.read_varsize
+    end
+  end
+  
+  def test_varsize_error
+    @str.write_varsize((1 << 62) / 3)
+    vs = @str.string
+    0.upto(vs.length - 1) do |truncated_len|
+      @str = StringIO.new
+      @str.write vs[0, truncated_len]
+      @str.rewind
+      assert_raise(RTunnel::TruncatedDataError) { @str.read_varsize }
+    end
+  end
+  
+  def test_varstring_independent
+    @test_strings.each do |str|
+      @str = StringIO.new
+      @str.write_varstring str
+      @str.rewind
+      assert_equal str, @str.read_varstring
+    end    
+  end
+  
+  def test_varstring_appended
+    @test_strings.each { |str| @str.write_varstring str }
+    @str.rewind
+    @test_strings.each do |str|
+       assert_equal str, @str.read_varstring
+    end    
+  end
+
+  def test_varstring_error
+    @str.write_varstring 'This will be truncated'
+    vs = @str.string
+    0.upto(vs.length - 1) do |truncated_len|
+      @str = StringIO.new
+      @str.write vs[0, truncated_len]
+      @str.rewind
+      assert_raise(RTunnel::TruncatedDataError) { @str.read_varstring }
+    end
+  end
+end

data/test/test_server.rb

@@ -0,0 +1,70 @@
+require 'rtunnel'
+
+require 'resolv'
+require 'test/unit'
+
+
+class ServerTest < Test::Unit::TestCase
+  def setup    
+    super
+    @server = RTunnel::Server.new(:control_address => 'localhost')
+    @localhost_addr = Resolv.getaddress 'localhost'
+  end
+  
+  def test_options
+    server = RTunnel::Server
+    assert_equal "18.241.3.100:#{RTunnel::DEFAULT_CONTROL_PORT}",
+                 server.extract_control_address('18.241.3.100')                 
+    assert_equal "18.241.3.100:9199",
+                 server.extract_control_address('18.241.3.100:9199')
+    assert_equal "#{@localhost_addr}:#{RTunnel::DEFAULT_CONTROL_PORT}",
+                 server.extract_control_address('localhost')                 
+    assert_equal "#{@localhost_addr}:9199",
+                 server.extract_control_address('localhost:9199')
+    assert_equal "0.0.0.0:9199",
+                 server.extract_control_address('9199')
+
+    assert_equal RTunnel::KEEP_ALIVE_INTERVAL,
+                 server.extract_keep_alive_interval(nil)
+    assert_equal 29, server.extract_keep_alive_interval(29)
+    
+    assert_equal 0, server.extract_lowest_listen_port(nil)
+    assert_equal 29, server.extract_lowest_listen_port(29)
+    assert_equal 65535, server.extract_highest_listen_port(nil)
+    assert_equal 29, server.extract_highest_listen_port(29)
+    
+    assert_equal nil, server.extract_authorized_keys(nil)
+    keyset = server.extract_authorized_keys 'test_data/known_hosts'
+    assert_equal RTunnel::Crypto::KeySet, keyset.class
+    assert keyset.length != 0, 'No key read from the known_hosts file'
+  end
+  
+  def test_validate_remote_listen
+    # remove Connection's new override, don't want event_machine here
+    EventMachine::Connection.class_eval do
+      class << self
+        alias_method :backup_new, :new
+        remove_method :new
+      end
+    end
+    
+    server = RTunnel::Server.new(:control_address => 'localhost',
+                                 :lowest_listen_port => 91,
+                                 :highest_listen_port => 105)
+    connection = RTunnel::Server::ControlConnection.new server
+        
+    assert !connection.validate_remote_listen('localhost', 80)
+    assert connection.validate_remote_listen('localhost', 91)
+    assert connection.validate_remote_listen('localhost', 105)
+    assert !connection.validate_remote_listen('localhost', 90)
+    assert !connection.validate_remote_listen('localhost', 106)
+
+    # re-instate Connection's new override
+    EventMachine::Connection.class_eval do
+      class << self
+        alias_method :new, :backup_new
+        remove_method :backup_new
+      end
+    end
+  end
+end

data/test/test_socket_factory.rb

@@ -0,0 +1,42 @@
+require 'rtunnel'
+
+require 'test/unit'
+
+class SocketFactoryTest < Test::Unit::TestCase
+  SF = RTunnel::SocketFactory
+  
+  def setup
+    
+  end
+
+  def teardown
+    
+  end
+  
+  def test_host_from_address
+    assert_equal nil, SF.host_from_address(nil)
+    assert_equal '127.0.0.1', SF.host_from_address('127.0.0.1')
+    assert_equal '127.0.0.1', SF.host_from_address('127.0.0.1:1234')
+    assert_equal 'fe80::1%lo0', SF.host_from_address('fe80::1%lo0')
+    assert_equal 'fe80::1%lo0', SF.host_from_address('fe80::1%lo0:19020')
+  end
+  
+  def test_port_from_address
+    assert_equal nil, SF.port_from_address(nil)
+    assert_equal nil, SF.port_from_address('127.0.0.1')
+    assert_equal 1234, SF.port_from_address('127.0.0.1:1234')
+    assert_equal nil, SF.port_from_address('fe80::1%lo0')
+    assert_equal 19020, SF.port_from_address('fe80::1%lo0:19020')
+  end
+  
+  def test_inbound
+    assert SF.inbound?(:in_port => 1)
+    assert SF.inbound?(:in_host => '1')
+    assert SF.inbound?(:in_addr => '1')
+    assert SF.inbound?(:inbound => true)
+    assert !SF.inbound?(:out_port => 1)
+    assert !SF.inbound?(:out_host => '1')
+    assert !SF.inbound?(:out_addr => '1')
+  end
+end
+

data/test/test_tunnel.rb

@@ -0,0 +1,186 @@
+require 'rtunnel'
+
+require 'test/unit'
+
+require 'rubygems'
+require 'eventmachine'
+
+require 'test/scenario_connection.rb'
+
+# Integration tests ensuring that we can start a tunnel.
+class TunnelTest < Test::Unit::TestCase
+  def setup
+    super
+    
+    @connection_time = 0.001
+    @secure_connection_time = 0.5
+    @log_level = 'debug'
+    @local_host = '127.0.0.1'
+    @listen_port = 21335
+    @tunnel_port = 21336
+    @control_port = 21337
+    @key_file = 'test_data/ssh_host_rsa_key'
+    @hosts_file = 'test_data/known_hosts'
+    
+    @tunnel_server = new_server
+    @tunnel_client = new_client
+  end
+  
+  def new_server(extra_options = {})
+    RTunnel::Server.new({
+        :control_address => "#{@local_host}:#{@control_port}",
+        :log_level => @log_level
+        }.merge(extra_options))
+  end
+  
+  def new_client(extra_options = {})
+    RTunnel::Client.new({
+            :control_address => "#{@local_host}:#{@control_port}",
+            :remote_listen_address => "#{@local_host}:#{@listen_port}",
+            :tunnel_to_address => "#{@local_host}:#{@tunnel_port}",
+            :log_level => @log_level
+            }.merge(extra_options))
+  end
+  
+  def tunnel_test(connection_time = nil)
+    @stop_proc = proc do
+      @tunnel_client.stop
+      @tunnel_server.stop
+      @stop_proc = nil
+    end
+
+    EventMachine::run do
+      @tunnel_server.start
+      @tunnel_client.start
+
+      if connection_time
+        EventMachine.add_timer(connection_time) { yield }
+      else
+        EventMachine.next_tick { yield }
+      end
+    end
+  end
+  
+  def test_client_driven_tunnel
+    tunnel_test do
+      @tunnel_server.on_remote_listen do
+        EventMachine::start_server @local_host, @tunnel_port,
+            ScenarioConnection, self, [[:recv, 'Hello'], [:send, 'World'],
+                                       [:unbind], [:stop, @stop_proc]]
+
+        EventMachine::connect @local_host, @listen_port,
+            ScenarioConnection, self, [[:send, 'Hello'], [:recv, 'World'],
+                                       [:close]]
+      end
+    end
+  end
+  
+  def test_server_driven_tunnel
+    tunnel_test do
+      @tunnel_server.on_remote_listen do
+        EventMachine::start_server @local_host, @tunnel_port,
+            ScenarioConnection, self, [[:send, 'Hello'], [:recv, 'World'],
+                                       [:close]]
+
+        EventMachine::connect @local_host, @listen_port,
+            ScenarioConnection, self, [[:recv, 'Hello'], [:send, 'World'],
+                                       [:unbind], [:stop]]
+      end  
+    end    
+  end
+  
+  def test_two_tunnels
+    start_second = lambda do
+      @tunnel_client.stop
+      @tunnel_client.start
+      @tunnel_server.on_remote_listen do
+        EventMachine::connect @local_host, @listen_port,
+            ScenarioConnection, self, [[:send, 'Hello'], [:recv, 'World'],
+                                       [:unbind], [:stop, @stop_proc]]
+      end
+    end
+    
+    tunnel_test do
+      @tunnel_server.on_remote_listen do
+        EventMachine::start_server @local_host, @tunnel_port,
+            ScenarioConnection, self, [[:recv, 'Hello'], [:send, 'World'],
+                  [:close], [:recv, 'Hello'], [:send, 'World'], [:close]]
+
+        EventMachine::connect @local_host, @listen_port,
+            ScenarioConnection, self, [[:send, 'Hello'], [:recv, 'World'],
+                                       [:proc, start_second], [:unbind]]
+      end
+    end
+  end
+  
+  def test_secure_tunnel
+    @tunnel_server = new_server :authorized_keys => @hosts_file
+    @tunnel_client = new_client :private_key => @key_file
+    tunnel_test do
+      @tunnel_server.on_remote_listen do
+        EventMachine::start_server @local_host, @tunnel_port,
+            ScenarioConnection, self, [[:recv, 'Hello'], [:send, 'World'],
+                                       [:unbind], [:stop, @stop_proc]]
+
+        EventMachine::connect @local_host, @listen_port,
+            ScenarioConnection, self, [[:send, 'Hello'], [:recv, 'World'],
+                                       [:close]]
+      end
+    end
+  end
+
+  def test_secure_async_tunnel
+    @tunnel_server = new_server :authorized_keys => @hosts_file
+    @tunnel_client = new_client :private_key => @key_file
+    tunnel_test do
+      @tunnel_server.on_remote_listen do
+        EventMachine::start_server @local_host, @tunnel_port,
+            ScenarioConnection, self, [[:send, 'World'], [:recv, 'Hello'],
+                                       [:unbind], [:stop, @stop_proc]]
+
+        EventMachine::connect @local_host, @listen_port,
+            ScenarioConnection, self, [[:send, 'Hello'], [:recv, 'World'],
+                                       [:close]]
+      end
+    end
+  end
+  
+  def test_bad_listen_address
+    @tunnel_server = new_server
+    @tunnel_client = new_client :remote_listen_address =>
+                                "18.70.0.160:#{@listen_port}"
+                                
+    tunnel_test do
+      EventMachine::start_server @local_host, @tunnel_port,
+          ScenarioConnection, self, []
+                                     
+      EventMachine::connect @local_host, @listen_port,
+          ScenarioConnection, self, [[:unbind], [:stop, @stop_proc]]
+    end
+  end
+
+  # TODO: fix this
+  def test_secure_server_rejects_unsecure_client
+    @tunnel_server = new_server :authorized_keys => @hosts_file
+    tunnel_test(@secure_connection_time) do
+      EventMachine::start_server @local_host, @tunnel_port,
+          ScenarioConnection, self, []
+                                     
+      EventMachine::connect @local_host, @listen_port,
+          ScenarioConnection, self, [[:unbind], [:stop, @stop_proc]]
+    end
+  end
+
+  # hrmf... this is testing security and its not 100% reliable... but I can't think of a better way
+  def test_secure_server_rejects_unauthorized_key
+    @tunnel_server = new_server :authorized_keys => @hosts_file
+    @tunnel_client = new_client :private_key => 'test_data/random_rsa_key'
+    tunnel_test(@secure_connection_time) do
+      EventMachine::start_server @local_host, @tunnel_port,
+          ScenarioConnection, self, []
+
+      EventMachine::connect @local_host, @listen_port,
+          ScenarioConnection, self, [[:unbind], [:stop, @stop_proc]]
+    end
+  end
+end

data/test_data/authorized_keys2

@@ -0,0 +1,4 @@
+no-port-forwarding,no-agent-forwarding,command="/usr/NX/bin/nxnode" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ== stub@github.org
+no-port-forwarding,no-agent-forwarding,command="/usr/NX/bin/nxnode" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq7VciLo2wB+/2ThHXejC/kgkN205zlyS5cvN40Mqi3qvRVS75X1RawDoLot8eJ9KCYqZFr2Dr73d/EQNltN7dKJoPIj1IKxoraWkyNFbhhzpYuOltg9oO5UBSTNLupqla7zcdj4IwCCkBYk4+TS0dwmi20buOJ0FPY5PgbzmMnUiV9ipBqeJSdZB+TePH1gqlt7AP/6ti/0gxb2K7F69dZl/BSxMEzRCfBlTFC3f/4n8IdCuSJvNxxY+TtRnLL5CKUhj9QaIBan6JCkdRvVOBY7wmsNT8nGDzfDFSDD3KKn93g4LRkyMeaYlSDLxKy8PnNhjWgBNH1YNYyicsGfBKQ== costan@obsidian.local
+no-port-forwarding,no-agent-forwarding,command="/usr/NX/bin/nxnode" ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3tPhdPUFGAYyrT1quRSOevLbAdKAJ6Ovwqw0m99R0QkqUwMUh09pgedWZeij7HtAHtoWPrNFev8FrwcwnL14NgA/gwNnXxbqd4twC1HyFShUf7POry8bz3Qk+84STHeMY8++hhn8LgNyfuVQswHoW661aqieLM6pF8q8xIUtkXA7daNpJAL4nTN1TxgUoCDpCa0EbUPkGpwFPNtGPuokRXNOCR9g8T6LmPQbzGUTc4CzFfQ9rrHaimqkEmRWJbBOaik1bdQNqOh6MUDDuUSpkJV7fwu3bl4fF5/1kw2HCREEjJmESOYnZhOS+MCp1qAUcuXqpMqXD8ATNsuXqrIhTQ== stub@rubyforge.org
+no-port-forwarding,no-agent-forwarding,command="/usr/NX/bin/nxnode" ssh-dss AAAAB3NzaC1kc3MAAACBAPdWp4HhWUoNawosyEBvrhPSbjhCJiKnVWiUS6bo0BCGzTHhugrkv2HgtlKhWo8nqTw5E4YxzFVyZ0YQt4m7NYDLTZVjrqbIpL/3F5qNXco127O/im0cG27AKC8Jf7knmUTjd8EBhtK65tNDmxPtzKQtemlNTVPX1VccOn6eLtn1AAAAFQDtQC21TJrf/p5WNsU9UIJzO9/hIwAAAIEAgwTrIfleQMEAK9N3xeMVZpAGfSAoX6owLtk3z+iQ3rM9FRvM/CgezOgezLowJghkw/bcQDmMuudBUuijrM3zZWdr6eqoNbFTR/KKiUx3cYf0LAHNPbXfVz+P7BXqjcEj75qnwuHQMp7vNMg+dmV40UA2TiC5/8QlaZVwkOSPN6gAAACAPMGJEFkoR0ayfkd0S/tnY9ilO17T6rdoDuF25ATtNUd6Zji6tslxBkQFWtTeinO3rGkqJRPndq0wp3E33AOHhJE/FOIlWl4Tf6aeU95Y4enYujKQDiImSTXmdiw5wq/LFdc3a2waOUvuI+647wxgHhqTmD7xI2biGZLYN9Oasy0= costan@obsidian.local

data/test_data/known_hosts

@@ -0,0 +1,4 @@
+github.com,65.74.177.129 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==
+obsidian.local ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq7VciLo2wB+/2ThHXejC/kgkN205zlyS5cvN40Mqi3qvRVS75X1RawDoLot8eJ9KCYqZFr2Dr73d/EQNltN7dKJoPIj1IKxoraWkyNFbhhzpYuOltg9oO5UBSTNLupqla7zcdj4IwCCkBYk4+TS0dwmi20buOJ0FPY5PgbzmMnUiV9ipBqeJSdZB+TePH1gqlt7AP/6ti/0gxb2K7F69dZl/BSxMEzRCfBlTFC3f/4n8IdCuSJvNxxY+TtRnLL5CKUhj9QaIBan6JCkdRvVOBY7wmsNT8nGDzfDFSDD3KKn93g4LRkyMeaYlSDLxKy8PnNhjWgBNH1YNYyicsGfBKQ==
+rubyforge.org,205.234.109.19 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3tPhdPUFGAYyrT1quRSOevLbAdKAJ6Ovwqw0m99R0QkqUwMUh09pgedWZeij7HtAHtoWPrNFev8FrwcwnL14NgA/gwNnXxbqd4twC1HyFShUf7POry8bz3Qk+84STHeMY8++hhn8LgNyfuVQswHoW661aqieLM6pF8q8xIUtkXA7daNpJAL4nTN1TxgUoCDpCa0EbUPkGpwFPNtGPuokRXNOCR9g8T6LmPQbzGUTc4CzFfQ9rrHaimqkEmRWJbBOaik1bdQNqOh6MUDDuUSpkJV7fwu3bl4fF5/1kw2HCREEjJmESOYnZhOS+MCp1qAUcuXqpMqXD8ATNsuXqrIhTQ==
+obsidian.local ssh-dss AAAAB3NzaC1kc3MAAACBAPdWp4HhWUoNawosyEBvrhPSbjhCJiKnVWiUS6bo0BCGzTHhugrkv2HgtlKhWo8nqTw5E4YxzFVyZ0YQt4m7NYDLTZVjrqbIpL/3F5qNXco127O/im0cG27AKC8Jf7knmUTjd8EBhtK65tNDmxPtzKQtemlNTVPX1VccOn6eLtn1AAAAFQDtQC21TJrf/p5WNsU9UIJzO9/hIwAAAIEAgwTrIfleQMEAK9N3xeMVZpAGfSAoX6owLtk3z+iQ3rM9FRvM/CgezOgezLowJghkw/bcQDmMuudBUuijrM3zZWdr6eqoNbFTR/KKiUx3cYf0LAHNPbXfVz+P7BXqjcEj75qnwuHQMp7vNMg+dmV40UA2TiC5/8QlaZVwkOSPN6gAAACAPMGJEFkoR0ayfkd0S/tnY9ilO17T6rdoDuF25ATtNUd6Zji6tslxBkQFWtTeinO3rGkqJRPndq0wp3E33AOHhJE/FOIlWl4Tf6aeU95Y4enYujKQDiImSTXmdiw5wq/LFdc3a2waOUvuI+647wxgHhqTmD7xI2biGZLYN9Oasy0=

data/test_data/random_rsa_key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/test_data/ssh_host_dsa_key

@@ -0,0 +1,12 @@
+-----BEGIN DSA PRIVATE KEY-----
+MIIBvAIBAAKBgQD3VqeB4VlKDWsKLMhAb64T0m44QiYip1VolEum6NAQhs0x4boK
+5L9h4LZSoVqPJ6k8OROGMcxVcmdGELeJuzWAy02VY66myKS/9xeajV3KNduzv4pt
+HBtuwCgvCX+5J5lE43fBAYbSuubTQ5sT7cykLXppTU1T19VXHDp+ni7Z9QIVAO1A
+LbVMmt/+nlY2xT1QgnM73+EjAoGBAIME6yH5XkDBACvTd8XjFWaQBn0gKF+qMC7Z
+N8/okN6zPRUbzPwoHszoHsy6MCYIZMP23EA5jLrnQVLoo6zN82Vna+nqqDWxU0fy
+iolMd3GH9CwBzT2131c/j+wV6o3BI++ap8Lh0DKe7zTIPnZleNFANk4guf/EJWmV
+cJDkjzeoAoGAPMGJEFkoR0ayfkd0S/tnY9ilO17T6rdoDuF25ATtNUd6Zji6tslx
+BkQFWtTeinO3rGkqJRPndq0wp3E33AOHhJE/FOIlWl4Tf6aeU95Y4enYujKQDiIm
+STXmdiw5wq/LFdc3a2waOUvuI+647wxgHhqTmD7xI2biGZLYN9Oasy0CFQDL/9Z1
+fSLn88m1sUeWAZ4Ys2IIxw==
+-----END DSA PRIVATE KEY-----