diff options
author | Darren Tucker <dtucker@cvs.openbsd.org> | 2024-08-20 09:02:46 +0000 |
---|---|---|
committer | Darren Tucker <dtucker@cvs.openbsd.org> | 2024-08-20 09:02:46 +0000 |
commit | b27776662ed0447bbe452c89f7235e47f9ecded2 (patch) | |
tree | b50f211d5d86b015f3b316b93744ec21758097a5 /regress/usr.bin/ssh | |
parent | aae96d3959f10a6e54bfa7b0e103c1d398ff6a85 (diff) |
Set a default RekeyLimit of 256k. Used unless overridden by a
command-line flag, which simplifies some of the ssh command lines.
Diffstat (limited to 'regress/usr.bin/ssh')
-rw-r--r-- | regress/usr.bin/ssh/rekey.sh | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/regress/usr.bin/ssh/rekey.sh b/regress/usr.bin/ssh/rekey.sh index f1ed4c56984..24c5a380d4b 100644 --- a/regress/usr.bin/ssh/rekey.sh +++ b/regress/usr.bin/ssh/rekey.sh @@ -1,4 +1,4 @@ -# $OpenBSD: rekey.sh,v 1.23 2024/08/20 07:52:43 dtucker Exp $ +# $OpenBSD: rekey.sh,v 1.24 2024/08/20 09:02:45 dtucker Exp $ # Placed in the Public Domain. tid="rekey" @@ -9,6 +9,7 @@ rm -f ${LOG} cp $OBJ/sshd_proxy $OBJ/sshd_proxy_bak echo "Compression no" >> $OBJ/ssh_proxy +echo "RekeyLimit 256k" >> $OBJ/ssh_proxy # Test rekeying based on data volume only. # Arguments will be passed to ssh. @@ -57,7 +58,7 @@ done for opt in $opts; do verbose "client rekey $opt" - ssh_data_rekeying "$opt" -oRekeyLimit=256k + ssh_data_rekeying "$opt" done # AEAD ciphers are magical so test with all KexAlgorithms @@ -65,7 +66,7 @@ if ${SSH} -Q cipher-auth | grep '^.*$' >/dev/null 2>&1 ; then for c in `${SSH} -Q cipher-auth`; do for kex in `${SSH} -Q kex`; do verbose "client rekey $c $kex" - ssh_data_rekeying "KexAlgorithms=$kex" -oRekeyLimit=256k -oCiphers=$c + ssh_data_rekeying "KexAlgorithms=$kex" -oCiphers=$c done done fi |