Skip to content

add SSH feature coverage for the OpenSSH update - #684

Open
LucienLassalle wants to merge 1 commit into
masterfrom
lle-openssh9.9p1
Open

add SSH feature coverage for the OpenSSH update#684
LucienLassalle wants to merge 1 commit into
masterfrom
lle-openssh9.9p1

Conversation

@LucienLassalle

Copy link
Copy Markdown
Contributor

Add regression/feature tests for the new OpenSSH package (post-quantum KEX, FIDO/security-key support, scp/sftp behavior, ssh_config.d inclusion)

  • test_ssh_config_include.py: extends the sshd_config.d include regression test with the client-side ssh_config.d equivalent.
  • test_ssh_algorithms.py: hardcoded, exhaustive coverage of the KEX/cipher/MAC/host-key algorithms the package supports, so any future change to that list has to be a conscious update of this file.
  • test_ssh_post_quantum.py: checks the hybrid post-quantum KEX is negotiated by default.
  • test_ssh_fido.py: checks FIDO/security-key (sk-*) support is advertised and wired in.
  • test_ssh_file_transfer.py: checks scp (SFTP and legacy protocols) and sftp file transfers.

Note: Claude Sonnet 5 helped me write the tests.

@LucienLassalle
LucienLassalle force-pushed the lle-openssh9.9p1 branch 2 times, most recently from faa635a to 8c2e419 Compare August 26, 2026 17:21
@LucienLassalle
LucienLassalle marked this pull request as ready for review August 27, 2026 12:38
@LucienLassalle
LucienLassalle requested a review from a team as a code owner August 27, 2026 12:38
Comment thread tests/system/test_ssh_file_transfer.py Outdated
Comment thread tests/system/conftest.py Outdated
Comment thread tests/system/test_ssh_algorithms.py
Comment thread tests/system/test_ssh_algorithms.py Outdated
Comment thread tests/system/test_ssh_file_transfer.py Outdated
Comment thread tests/system/test_ssh_file_transfer.py Outdated
Comment thread tests/system/test_ssh_post_quantum.py Outdated
Add regression/feature tests for the new OpenSSH package (post-quantum
KEX, FIDO/security-key support, scp/sftp behavior, ssh_config.d
inclusion)

- test_ssh_config_include.py: extends the sshd_config.d include
  regression test with the client-side ssh_config.d equivalent.
- test_ssh_algorithms.py: hardcoded, exhaustive coverage of the
  KEX/cipher/MAC/host-key algorithms the package supports, so any
  future change to that list has to be a conscious update of this
  file.
- test_ssh_post_quantum.py: checks the hybrid post-quantum KEX is
  negotiated by default.
- test_ssh_fido.py: checks FIDO/security-key (sk-*) support is
  advertised and wired in.
- test_ssh_file_transfer.py: checks scp (SFTP and legacy protocols)
  and sftp file transfers.

Signed-off-by: Lucas RAVAGNIER <lucas.ravagnier@vates.tech>
@stormi
stormi self-requested a review August 31, 2026 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants