bdy 1.23.6-dev → 1.23.7-dev

package/node_modules/ssh2/test/test-protocol-keyparser.js

@@ -0,0 +1,177 @@
+'use strict';
+
+const assert = require('assert');
+const { readdirSync, readFileSync } = require('fs');
+const { inspect } = require('util');
+
+const { parseKey } = require('../lib/protocol/keyParser.js');
+
+const { EDDSA_SUPPORTED } = require('../lib/protocol/constants.js');
+
+const BASE_PATH = `${__dirname}/fixtures/keyParser`;
+
+function failMsg(name, message, exit) {
+  const msg = `[${name}] ${message}`;
+  if (!exit)
+    return msg;
+  console.error(msg);
+  process.exit(1);
+}
+
+readdirSync(BASE_PATH).forEach((name) => {
+  if (/\.result$/i.test(name))
+    return;
+  if (/ed25519/i.test(name) && !EDDSA_SUPPORTED)
+    return;
+
+  const isPublic = /\.pub$/i.test(name);
+  const isEncrypted = /_enc/i.test(name);
+  const isPPK = /^ppk_/i.test(name);
+  const key = readFileSync(`${BASE_PATH}/${name}`);
+  let res;
+  if (isEncrypted)
+    res = parseKey(key, (isPPK ? 'node.js' : 'password'));
+  else
+    res = parseKey(key);
+  let expected = JSON.parse(
+    readFileSync(`${BASE_PATH}/${name}.result`, 'utf8')
+  );
+  if (typeof expected === 'string') {
+    if (!(res instanceof Error))
+      failMsg(name, `Expected error: ${expected}`, true);
+    assert.strictEqual(
+      expected,
+      res.message,
+      failMsg(name,
+              'Error message mismatch.\n'
+                + `Expected: ${inspect(expected)}\n`
+                + `Received: ${inspect(res.message)}`)
+    );
+  } else if (res instanceof Error) {
+    failMsg(name, `Unexpected error: ${res.stack}`, true);
+  } else {
+    if (Array.isArray(expected) && !Array.isArray(res))
+      failMsg(name, 'Expected array but did not receive one', true);
+    if (!Array.isArray(expected) && Array.isArray(res))
+      failMsg(name, 'Received array but did not expect one', true);
+
+    if (!Array.isArray(res)) {
+      res = [res];
+      expected = [expected];
+    } else if (res.length !== expected.length) {
+      failMsg(name,
+              `Expected ${expected.length} keys, but received ${res.length}`,
+              true);
+    }
+
+    res.forEach((curKey, i) => {
+      const details = {
+        type: curKey.type,
+        comment: curKey.comment,
+        public: curKey.getPublicPEM(),
+        publicSSH: curKey.getPublicSSH()
+                   && curKey.getPublicSSH().toString('base64'),
+        private: curKey.getPrivatePEM()
+      };
+      assert.deepStrictEqual(
+        details,
+        expected[i],
+        failMsg(name,
+                'Parser output mismatch.\n'
+                  + `Expected: ${inspect(expected[i])}\n\n`
+                  + `Received: ${inspect(details)}`)
+      );
+    });
+
+    // Test `equals()`
+    let copy;
+    if (isEncrypted)
+      copy = parseKey(key, (isPPK ? 'node.js' : 'password'));
+    else
+      copy = parseKey(key);
+    if (!Array.isArray(copy))
+      copy = [copy];
+    for (let i = 0; i < res.length; ++i) {
+      assert.strictEqual(
+        res[i].equals(copy[i]),
+        true,
+        failMsg(name, 'equals() failed with copy')
+      );
+    }
+  }
+
+  if (isEncrypted && !isPublic) {
+    // Make sure parsing encrypted keys without a passphrase results in an
+    // appropriate error
+    const err = parseKey(key);
+    if (!(err instanceof Error))
+      failMsg(name, 'Expected error during parse without passphrase', true);
+    if (!/no passphrase/i.test(err.message)) {
+      failMsg(name,
+              `Error during parse without passphrase: ${err.message}`,
+              true);
+    }
+
+    // Make sure parsing encrypted keys with an incorrect passphrase results in
+    // an appropriate error
+    const errIncPass = parseKey(key, 'incorrectPassphrase');
+    if (!(errIncPass instanceof Error)) {
+      failMsg(name,
+              'Expected error during parse with an incorrect passphrase',
+              true);
+    }
+    if (!/bad passphrase\?|unable to authenticate data/i
+        .test(errIncPass.message)) {
+      failMsg(name,
+              'Error during parse with an incorrect passphrase: '
+                + errIncPass.message,
+              true);
+    }
+  }
+
+  if (!isPublic) {
+    // Try signing and verifying to make sure the private/public key PEMs are
+    // correct
+    const data = Buffer.from('hello world');
+    res.forEach((curKey) => {
+      let result = curKey.sign(data);
+      if (result instanceof Error) {
+        failMsg(name,
+                `Error while signing data with key: ${result.message}`,
+                true);
+      }
+      result = curKey.verify(data, result);
+      if (result instanceof Error) {
+        failMsg(name,
+                `Error while verifying signed data with key: ${result.message}`,
+                true);
+      }
+      if (!result)
+        failMsg(name, 'Failed to verify signed data with key', true);
+    });
+    if (res.length === 1 && !isPPK) {
+      const pubFile = readFileSync(`${BASE_PATH}/${name}.pub`);
+      const pubParsed = parseKey(pubFile);
+      if (!(pubParsed instanceof Error)) {
+        let result = res[0].sign(data);
+        if (result instanceof Error) {
+          failMsg(name,
+                  `Error while signing data with key: ${result.message}`,
+                  true);
+        }
+        result = pubParsed.verify(data, result);
+        if (result instanceof Error) {
+          failMsg(name,
+                  'Error while verifying signed data with separate public key: '
+                    + result.message,
+                  true);
+        }
+        if (!result) {
+          failMsg(name,
+                  'Failed to verify signed data with separate public key',
+                  true);
+        }
+      }
+    }
+  }
+});

package/node_modules/ssh2/test/test-server-hostkeys.js

@@ -0,0 +1,138 @@
+'use strict';
+
+const assert = require('assert');
+
+const {
+  fixtureKey,
+  mustCall,
+  setup,
+} = require('./common.js');
+
+const debug = false;
+
+[
+  { desc: 'RSA user key (old OpenSSH)',
+    hostKey: fixtureKey('id_rsa') },
+  { desc: 'RSA user key (new OpenSSH)',
+    hostKey: fixtureKey('openssh_new_rsa') },
+  { desc: 'DSA host key',
+    hostKey: fixtureKey('ssh_host_dsa_key') },
+  { desc: 'ECDSA host key',
+    hostKey: fixtureKey('ssh_host_ecdsa_key') },
+  { desc: 'PPK',
+    hostKey: fixtureKey('id_rsa.ppk') },
+].forEach((test) => {
+  const { desc, hostKey } = test;
+  const clientKey = fixtureKey('openssh_new_rsa');
+  const username = 'KeyUser';
+  const { server } = setup(
+    desc,
+    {
+      client: {
+        username,
+        privateKey: clientKey.raw,
+        algorithms: {
+          serverHostKey: [ hostKey.key.type ],
+        }
+      },
+      server: { hostKeys: [ hostKey.raw ] },
+      debug,
+    }
+  );
+
+  server.on('connection', mustCall((conn) => {
+    let authAttempt = 0;
+    conn.on('authentication', mustCall((ctx) => {
+      assert(ctx.username === username,
+             `Wrong username: ${ctx.username}`);
+      switch (++authAttempt) {
+        case 1:
+          assert(ctx.method === 'none',
+                 `Wrong auth method: ${ctx.method}`);
+          return ctx.reject();
+        case 3:
+          assert(ctx.signature, 'Missing publickey signature');
+        // FALLTHROUGH
+        case 2:
+          assert(ctx.method === 'publickey',
+                 `Wrong auth method: ${ctx.method}`);
+          assert(ctx.key.algo === clientKey.key.type,
+                 `Wrong key algo: ${ctx.key.algo}`);
+          assert.deepStrictEqual(clientKey.key.getPublicSSH(),
+                                 ctx.key.data,
+                                 'Public key mismatch');
+          break;
+      }
+      if (ctx.signature) {
+        const result =
+          clientKey.key.verify(ctx.blob, ctx.signature, ctx.hashAlgo);
+        assert(result === true, 'Could not verify publickey signature');
+      }
+      ctx.accept();
+    }, 3)).on('ready', mustCall(() => {
+      conn.end();
+    }));
+  }));
+});
+
+
+{
+  const RSA_KEY = fixtureKey('ssh_host_rsa_key');
+  const ECDSA_KEY = fixtureKey('ssh_host_ecdsa_key');
+  [ RSA_KEY, ECDSA_KEY ].forEach((key) => {
+    const selKeyType = key.key.type;
+    const clientKey = fixtureKey('openssh_new_rsa');
+    const username = 'KeyUser';
+    const { client, server } = setup(
+      `Multiple host key types (${key.type} selected)`,
+      {
+        client: {
+          username,
+          privateKey: clientKey.raw,
+          algorithms: {
+            serverHostKey: [ selKeyType ],
+          }
+        },
+        server: { hostKeys: [ RSA_KEY.raw, ECDSA_KEY.raw ] },
+        debug,
+      }
+    );
+
+    server.on('connection', mustCall((conn) => {
+      let authAttempt = 0;
+      conn.on('authentication', mustCall((ctx) => {
+        assert(ctx.username === username,
+               `Wrong username: ${ctx.username}`);
+        switch (++authAttempt) {
+          case 1:
+            assert(ctx.method === 'none',
+                   `Wrong auth method: ${ctx.method}`);
+            return ctx.reject();
+          case 3:
+            assert(ctx.signature, 'Missing publickey signature');
+          // FALLTHROUGH
+          case 2:
+            assert(ctx.method === 'publickey',
+                   `Wrong auth method: ${ctx.method}`);
+            assert(ctx.key.algo === clientKey.key.type,
+                   `Wrong key algo: ${ctx.key.algo}`);
+            assert.deepStrictEqual(clientKey.key.getPublicSSH(),
+                                   ctx.key.data,
+                                   'Public key mismatch');
+            break;
+        }
+        if (ctx.signature) {
+          const result =
+            clientKey.key.verify(ctx.blob, ctx.signature, ctx.hashAlgo);
+          assert(result === true, 'Could not verify publickey signature');
+        }
+        ctx.accept();
+      }, 3)).on('ready', mustCall(() => {
+        conn.end();
+      }));
+    }));
+    client.on('handshake', mustCall((info) => {
+      assert(info.serverHostKey === selKeyType, 'Wrong host key selected');
+    }));
+  });
+}