/*

 * pkd_client.h -- macros for generating client-specific command

 *                 invocations for use with pkd testing

 *

 * (c) 2014, 2018 Jon Simons <jon@jonsimons.org>

 */

#ifndef __PKD_CLIENT_H__

#define __PKD_CLIENT_H__

#include "config.h"

/* OpenSSH */

#define OPENSSH_BINARY "ssh"

#define OPENSSH_KEYGEN "ssh-keygen"

#define OPENSSH_HOSTKEY_ALGOS_DEFAULT "ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa"

#define OPENSSH_PKACCEPTED_DEFAULT    "ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-rsa-cert-v01@openssh.com,ssh-ed25519-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com"

#if       HAVE_ECC

#define OPENSSH_HOSTKEY_ALGOS_ECDSA   ",ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521"

#define OPENSSH_PKACCEPTED_ECDSA      ",ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com"

#else  /* HAVE_ECC */

#define OPENSSH_HOSTKEY_ALGOS_ECDSA   ""

#define OPENSSH_PKACCEPTED_ECDSA      ""

#endif /* HAVE_ECC */

#if       HAVE_DSA

#define OPENSSH_HOSTKEY_ALGOS_DSA     ",ssh-dss"

#define OPENSSH_PKACCEPTED_DSA        ",ssh-dss,ssh-dss-cert-v01@openssh.com"

#else  /* HAVE_DSA */

#define OPENSSH_HOSTKEY_ALGOS_DSA     ""

#define OPENSSH_PKACCEPTED_DSA        ""

#endif /* HAVE_DSA */

#define OPENSSH_HOSTKEY_ALGOS \

  "-o HostKeyAlgorithms="        \

  OPENSSH_HOSTKEY_ALGOS_DEFAULT  \

  OPENSSH_HOSTKEY_ALGOS_ECDSA    \

  OPENSSH_HOSTKEY_ALGOS_DSA

#define OPENSSH_PKACCEPTED_TYPES \

  "-o PubkeyAcceptedKeyTypes="  \

  OPENSSH_PKACCEPTED_DEFAULT    \

  OPENSSH_PKACCEPTED_ECDSA      \

  OPENSSH_PKACCEPTED_DSA

#define OPENSSH_CMD_START(hostkey_algos) \

    OPENSSH_BINARY " "                  \

    "-o UserKnownHostsFile=/dev/null "  \

    "-o StrictHostKeyChecking=no "      \

    "-F /dev/null "                     \

    hostkey_algos " "                   \

    OPENSSH_PKACCEPTED_TYPES " "        \

    "-i " CLIENT_ID_FILE " "            \

    "1> %s.out "                        \

    "2> %s.err "                        \

    "-vvv "

#define OPENSSH_CMD_END "-p 1234 localhost ls"

#define OPENSSH_CMD \

    OPENSSH_CMD_START(OPENSSH_HOSTKEY_ALGOS) OPENSSH_CMD_END

#define OPENSSH_KEX_CMD(kexalgo) \

    OPENSSH_CMD_START(OPENSSH_HOSTKEY_ALGOS) "-o KexAlgorithms=" kexalgo " " OPENSSH_CMD_END

#define OPENSSH_CIPHER_CMD(ciphers) \

    OPENSSH_CMD_START(OPENSSH_HOSTKEY_ALGOS) "-c " ciphers " " OPENSSH_CMD_END

#define OPENSSH_MAC_CMD(macs) \

    OPENSSH_CMD_START(OPENSSH_HOSTKEY_ALGOS) "-c aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,aes192-cbc,aes128-cbc -o MACs=" macs " " OPENSSH_CMD_END

#define OPENSSH_HOSTKEY_CMD(hostkeyalgo) \

    OPENSSH_CMD_START("-o HostKeyAlgorithms=" hostkeyalgo " ") OPENSSH_CMD_END

#define OPENSSH_CERT_CMD \

    OPENSSH_CMD_START(OPENSSH_HOSTKEY_ALGOS) "-o CertificateFile=" CLIENT_ID_FILE "-cert.pub " OPENSSH_CMD_END

#define OPENSSH_SHA256_CERT_CMD \

    OPENSSH_CMD_START(OPENSSH_HOSTKEY_ALGOS) "-o CertificateFile=" CLIENT_ID_FILE "-sha256-cert.pub " OPENSSH_CMD_END

/* Dropbear */

#define DROPBEAR_BINARY "dbclient"

#define DROPBEAR_KEYGEN "dropbearkey"

#define DROPBEAR_CMD_START \

    DROPBEAR_BINARY " "      \

    "-y -y "                 \

    "-i " CLIENT_ID_FILE " " \

    "1> %s.out "             \

    "2> %s.err "

#define DROPBEAR_CMD_END "-p 1234 localhost ls"

#define DROPBEAR_CMD \

    DROPBEAR_CMD_START DROPBEAR_CMD_END

#if 0 /* dbclient does not expose control over kex algo */

#define DROPBEAR_KEX_CMD(kexalgo) \

    DROPBEAR_CMD

#endif

#define DROPBEAR_CIPHER_CMD(ciphers) \

    DROPBEAR_CMD_START "-c " ciphers " " DROPBEAR_CMD_END

#define DROPBEAR_MAC_CMD(macs) \

    DROPBEAR_CMD_START "-m " macs " " DROPBEAR_CMD_END

#endif /* __PKD_CLIENT_H__ */