1# $NetBSD: t_tcpip.sh,v 1.5 2011/02/16 19:31:31 pooka Exp $ 2# 3# Copyright (c) 2011 The NetBSD Foundation, Inc. 4# All rights reserved. 5# 6# Redistribution and use in source and binary forms, with or without 7# modification, are permitted provided that the following conditions 8# are met: 9# 1. Redistributions of source code must retain the above copyright 10# notice, this list of conditions and the following disclaimer. 11# 2. Redistributions in binary form must reproduce the above copyright 12# notice, this list of conditions and the following disclaimer in the 13# documentation and/or other materials provided with the distribution. 14# 15# THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 16# ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 17# TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 18# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 19# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 20# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 21# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 22# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 23# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 24# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 25# POSSIBILITY OF SUCH DAMAGE. 26# 27 28rumpnetsrv='rump_server -lrumpnet -lrumpnet_net -lrumpnet_netinet' 29export RUMP_SERVER=unix://csock 30 31atf_test_case http cleanup 32http_head() 33{ 34 atf_set "descr" "Start hijacked httpd and get webpage from it" 35} 36 37http_body() 38{ 39 40 atf_check -s exit:0 ${rumpnetsrv} ${RUMP_SERVER} 41 # make sure clients die after we nuke the server 42 export RUMPHIJACK_RETRYCONNECT='die' 43 44 # start bozo in daemon mode 45 atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so \ 46 /usr/libexec/httpd -b -s $(atf_get_srcdir) 47 48 atf_check -s exit:0 -o file:"$(atf_get_srcdir)/netstat.expout" \ 49 rump.netstat -a 50 51 # get the webpage 52 atf_check -s exit:0 env LD_PRELOAD=/usr/lib/librumphijack.so \ 53 $(atf_get_srcdir)/h_netget 127.0.0.1 80 webfile 54 55 # check that we got what we wanted 56 atf_check -o match:'HTTP/1.0 200 OK' cat webfile 57 atf_check -o match:'Content-Length: 95' cat webfile 58 atf_check -o file:"$(atf_get_srcdir)/index.html" \ 59 sed -n '1,/^ 60$/!p' webfile 61} 62 63http_cleanup() 64{ 65 rump.halt 66} 67 68# 69# Starts a SSH server and sets up the client to access it. 70# Authentication is allowed and done using an RSA key exclusively, which 71# is generated on the fly as part of the test case. 72# XXX: Ideally, all the tests in this test program should be able to share 73# the generated key, because creating it can be a very slow process on some 74# machines. 75# 76# XXX2: copypasted from jmmv's sshd thingamob in the psshfs test. 77# ideally code (and keys, like jmmv notes above) could be shared 78# 79start_sshd() { 80 echo "Setting up SSH server configuration" 81 sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \ 82 $(atf_get_srcdir)/sshd_config.in >sshd_config || \ 83 atf_fail "Failed to create sshd_config" 84 atf_check -s ignore -o empty -e ignore \ 85 cp $(atf_get_srcdir)/ssh_host_key . 86 atf_check -s ignore -o empty -e ignore \ 87 cp $(atf_get_srcdir)/ssh_host_key.pub . 88 atf_check -s eq:0 -o empty -e empty chmod 400 ssh_host_key 89 atf_check -s eq:0 -o empty -e empty chmod 444 ssh_host_key.pub 90 91 env LD_PRELOAD=/usr/lib/librumphijack.so \ 92 /usr/sbin/sshd -e -f ./sshd_config 93 while [ ! -f sshd.pid ]; do 94 sleep 0.01 95 done 96 echo "SSH server started (pid $(cat sshd.pid))" 97 98 echo "Setting up SSH client configuration" 99 atf_check -s eq:0 -o empty -e empty \ 100 ssh-keygen -f ssh_user_key -t rsa -b 1024 -N "" -q 101 atf_check -s eq:0 -o empty -e empty \ 102 cp ssh_user_key.pub authorized_keys 103 echo "127.0.0.1,localhost,::1 " \ 104 "$(cat $(atf_get_srcdir)/ssh_host_key.pub)" >known_hosts || \ 105 atf_fail "Failed to create known_hosts" 106 atf_check -s eq:0 -o empty -e empty chmod 600 authorized_keys 107 sed -e "s,@SRCDIR@,$(atf_get_srcdir),g" -e "s,@WORKDIR@,$(pwd),g" \ 108 $(atf_get_srcdir)/ssh_config.in >ssh_config || \ 109 atf_fail "Failed to create ssh_config" 110 111 echo "sshd running" 112} 113 114atf_test_case ssh cleanup 115ssh_head() 116{ 117 atf_set "descr" "Test that hijacked ssh/sshd works" 118} 119 120ssh_body() 121{ 122 123 atf_check -s exit:0 ${rumpnetsrv} ${RUMP_SERVER} 124 # make sure clients die after we nuke the server 125 export RUMPHIJACK_RETRYCONNECT='die' 126 127 start_sshd 128 129 # create some sort of directory for us to "ls" 130 mkdir testdir 131 cd testdir 132 jot 11 | xargs touch 133 jot 11 12 | xargs mkdir 134 cd .. 135 136 atf_check -s exit:0 -o save:ssh.out \ 137 env LD_PRELOAD=/usr/lib/librumphijack.so \ 138 ssh -T -F ssh_config 127.0.0.1 env BLOCKSIZE=512 \ 139 ls -li $(pwd)/testdir 140 atf_check -s exit:0 -o file:ssh.out env BLOCKSIZE=512 \ 141 ls -li $(pwd)/testdir 142} 143 144ssh_cleanup() 145{ 146 rump.halt 147 # sshd dies due to RUMPHIJACK_RETRYCONNECT=1d6 148} 149 150atf_init_test_cases() 151{ 152 atf_add_test_case http 153 atf_add_test_case ssh 154} 155