/****************************************************************************
*																			*
*							cryptlib SSH Test Routines						*
*						Copyright Peter Gutmann 1998-2021					*
*																			*
****************************************************************************/

#include "cryptlib.h"
#include "test/test.h"

/* Various features can be disabled by configuration options, in order to 
   handle this we need to include the cryptlib config file so that we can 
   selectively disable some tests.
   
   Note that this checking isn't perfect, if cryptlib is built in release
   mode but we include config.h here in debug mode then the defines won't
   match up because the use of debug mode enables extra options that won't
   be enabled in the release-mode cryptlib */
#include "misc/config.h"
#ifndef NDEBUG
  #include "misc/analyse.h"		/* Needed for fault.h */
  #include "misc/fault.h"
#endif /* !NDEBUG */

#if defined( __MVS__ ) || defined( __VMCMS__ )
  /* Suspend conversion of literals to ASCII */
  #pragma convlit( suspend )
#endif /* IBM big iron */
#if defined( __ILEC400__ )
  #pragma convert( 0 )
#endif /* IBM medium iron */

#if defined( __MVS__ )
  /* MVS control section (CSECT) names default to the file name and can't
	 match any symbol name either in the file or in another file or library 
	 (e.g. write.c vs. write()).  Because of this we have to explicitly 
	 name the csect's so that they don't conflict with external symbol
	 names */
  #pragma csect( CODE, "testSSHC" )
  #pragma csect( STATIC, "testSSHS" )
  #pragma csect( TEST, "testSSHT" )
#endif /* __MVS__ */

/* Uncomment the following to ask the user for a password rather than using
   a hardcoded password when testing against live accounts */

/* #define USER_SUPPLIED_PASSWORD */
#ifdef USER_SUPPLIED_PASSWORD
  #undef SSH2_SERVER_NAME
  #undef SSH_USER_NAME
  #define SSH2_SERVER_NAME	"192.168.1.1"
  #define SSH_USER_NAME		"root"
#endif /* USER_SUPPLIED_PASSWORD */

/* We can run the SSH self-test with a large variety of options, rather than
   using dozens of boolean option flags to control them all we define
   various test classes that exercise each option type.  The TOTP 
   authentication token for the client can be generated with any 2FA 
   application like Authy, or via online generators like 
   https://totp.danhersam.com, using the SSH_AUTHTOKEN as the seed value */

typedef enum {
	SSH_TEST_NONE,				/* No SSHv2 test type */
	SSH_TEST_NORMAL,			/* Standard SSHv2 test */
	SSH_TEST_DSAKEY,			/* DSA server key instead of RSA */
	SSH_TEST_ECCKEY,			/* ECDSA server key instead of RSA */
	SSH_TEST_PUBKEYAUTH,		/* Use public key for auth */
	SSH_TEST_PUBKEYAUTH_WRONGKEY, /* Use public key for auth but with wrong key */
	SSH_TEST_PUBKEYAUTH_WRONGNAME, /* Use public key for auth but with wrong name */
	SSH_TEST_PUBKEYAUTH_PASSWORD,/* Enable public key but use password */
	SSH_TEST_PREAUTH,			/* Use pre-authentication before connect */
	SSH_TEST_PREAUTH_MISSING,	/* Use pre-auth but client doesn't send it */
	SSH_TEST_PREAUTH_WRONG,		/* Use pre-auth but auth with wrong value */
	SSH_TEST_TOTPAUTH,			/* Use TOTP for auth */
	SSH_TEST_SUBSYSTEM,			/* Test SFTP subsystem */
	SSH_TEST_PORTFORWARDING,	/* Test port forwarding */
	SSH_TEST_EXEC,				/* Test rexec rather than rsh functionality */
	SSH_TEST_MULTICHANNEL,		/* Test multi-channel handling */
	SSH_TEST_FINGERPRINT,		/* Test (invalid) key fingerprint */
	SSH_TEST_CONFIRMAUTH,		/* Test manual server confirmation of auth.*/
	SSH_TEST_DUALTHREAD,
	SSH_TEST_DUALTHREAD2,		/* Two-phase connect via different threads */
	SSH_TEST_CORRUPT_HANDSHAKE,	/* Detect corruption of handshake data */
	SSH_TEST_CORRUPT_KEYEX_CLIENT, /* Detect corruption of client keyex */
	SSH_TEST_CORRUPT_KEYEX_SERVER, /* Detect corruption of server keyex */
	SSH_TEST_CORRUPT_EXCHANGE_HASH, /* Detect corruption of exchange hash */
	SSH_TEST_BADSIG_HASH,		/* Detect corruption of hash for signature */
	SSH_TEST_BADSIG_SIG,		/* Detect corruption of signature data */
	SSH_TEST_WRONG_CERT,		/* Detect wrong key for server */
	SSH_TEST_CORRUPT_USERNAME,	/* Detect wrong username */
	SSH_TEST_CORRUPT_PASSWORD,	/* Detect wrong password */
	SSH_TEST_CORRUPT_CHANNEL_OPEN,	/* Detect various types of channel corruption */
	SSH_TEST_CORRUPT_CHANNEL_DATA,
	SSH_TEST_CORRUPT_CHANNEL_CLOSE,
	SSH_TEST_CORRUPT_CHANNEL_REQUEST,
	SSH_TEST_CORRUPT_DATA,		/* Detect corruption of payload data */
	SSH_TEST_CORRUPT_MAC,		/* Detect corruption of payload MAC */
	SSH_TEST_LAST				/* Last possible SSHv2 test type */
	} SSH_TEST_TYPE;

#if defined( TEST_SESSION ) || defined( TEST_SESSION_LOOPBACK )

/****************************************************************************
*																			*
*								Utility Functions							*
*																			*
****************************************************************************/

/* Test the ability to parse URLs */

typedef struct {
	const C_STR url;			/* Server URL */
	const C_STR name;			/* Parsed server name */
	const int port;				/* Parsed server port */
	const C_STR userInfo;		/* Parsed user info */
	} URL_PARSE_INFO;

static const URL_PARSE_INFO urlParseInfo[] = {
	/* IP address forms */
	{ TEXT( "1.2.3.4" ), TEXT( "1.2.3.4" ), 0, NULL },
	{ TEXT( "1.2.3.4:80" ), TEXT( "1.2.3.4" ), 80, NULL },
	{ TEXT( "user@1.2.3.4" ), TEXT( "1.2.3.4" ), 0, TEXT( "user" ) },
	{ TEXT( "[1:2:3:4]" ), TEXT( "[1:2:3:4]" ), 0, NULL },
	{ TEXT( "[1:2:3:4]:80" ), TEXT( "[1:2:3:4]" ), 80, NULL },
	{ TEXT( "user@[1:2:3:4]" ), TEXT( "[1:2:3:4]" ), 0, TEXT( "user" ) },
	{ TEXT( "[::1]" ), TEXT( "[::1]" ), 0, NULL },

	/* General URI forms */
	{ TEXT( "www.server.com" ), TEXT( "www.server.com" ), 0, NULL },
	{ TEXT( "www.server.com:80" ), TEXT( "www.server.com" ), 80, NULL },
	{ TEXT( "http://www.server.com/" ), TEXT( "www.server.com" ), 0, NULL },
	{ TEXT( "http://www.server.com:80" ), TEXT( "www.server.com" ), 80, NULL },
	{ TEXT( "http://user@www.server.com:80" ), TEXT( "www.server.com" ), 80, TEXT( "user" ) },
	{ TEXT( "http://www.server.com/location.php" ), TEXT( "www.server.com" ), 0, NULL },
	{ TEXT( "http://www.server.com:80/location.php" ), TEXT( "www.server.com" ), 80, NULL },
	{ TEXT( "http://www.server.com/location1/location2/location.php" ), TEXT( "www.server.com" ), 0, NULL },

	/* Spurious whitespace */
	{ TEXT( "  www.server.com  :   80 " ), TEXT( "www.server.com" ), 80, NULL },
	{ TEXT( " user  @  www.server.com  :   80 " ), TEXT( "www.server.com" ), 80, NULL },
	{ TEXT( "http:// user  @ www.server.com  :   80 " ), TEXT( "www.server.com" ), 80, TEXT( "user" ) },
	{ TEXT( "www.server.com  :   80 /location.php" ), TEXT( "www.server.com" ), 80, NULL },

	{ NULL, NULL, 0, NULL }
	};

static const URL_PARSE_INFO invalidUrlParseInfo[] = {
	/* Bad port */
	{ TEXT( "www.server.com:2" ), NULL, 0, NULL },
	{ TEXT( "www.server.com:80abcd" ), NULL, 0, NULL },
	{ TEXT( "www.server.com:abcd" ), NULL, 0, NULL },

	/* Bad general URI */
	{ TEXT( "http://" ), NULL, 0, NULL },
	{ TEXT( "http://xy" ), NULL, 0, NULL },
	{ TEXT( "@www.server.com" ), NULL, 0, NULL },
	{ TEXT( "   @www.server.com" ), NULL, 0, NULL },

	{ NULL, NULL, 0, NULL }
	};

int testSessionUrlParse( void )
	{
	CRYPT_SESSION cryptSession;
	int i, status;

	fputs( "Testing session URL parsing...\n", outputStream );

	/* Create a session of the most generic type */
	status = cryptCreateSession( &cryptSession, CRYPT_UNUSED, 
								 CRYPT_SESSION_TLS );
	if( status == CRYPT_ERROR_PARAM3 )	/* TLS session access not available */
		return( CRYPT_ERROR_NOTAVAIL );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptCreateSession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}

	/* Set various URLs as the server name and retrieve the parsed form */
	for( i = 0; urlParseInfo[ i ].url != NULL; i++ )
		{
		C_CHR nameBuffer[ 256 ], userInfoBuffer[ 256 ];
		int nameLength, userInfoLength DUMMY_INIT, port DUMMY_INIT;

		/* Clear any leftover attributes from previous tests */
		memset( nameBuffer, 0, 16 );
		memset( userInfoBuffer, 0, 16 );
		cryptDeleteAttribute( cryptSession, CRYPT_SESSINFO_SERVER_NAME );
		cryptDeleteAttribute( cryptSession, CRYPT_SESSINFO_SERVER_PORT );
		cryptDeleteAttribute( cryptSession, CRYPT_SESSINFO_USERNAME );

		/* Set the URL */
		status = cryptSetAttributeString( cryptSession,
										  CRYPT_SESSINFO_SERVER_NAME,
										  urlParseInfo[ i ].url,
										  paramStrlen( urlParseInfo[ i ].url ) );
		if( cryptStatusError( status ) )
			{
			fprintf( outputStream, "Couldn't set URL '%s', status %d, "
					 "line %d.\n", urlParseInfo[ i ].url, status, 
					 __LINE__ );
			return( FALSE );
			}

		/* Make sure that the parsed form is OK */
		status = cryptGetAttributeString( cryptSession,
										  CRYPT_SESSINFO_SERVER_NAME,
										  nameBuffer, &nameLength );
		if( cryptStatusOK( status ) && urlParseInfo[ i ].port )
			{
			status = cryptGetAttribute( cryptSession,
										CRYPT_SESSINFO_SERVER_PORT, &port );
			}
		if( cryptStatusOK( status ) && urlParseInfo[ i ].userInfo != NULL )
			{
			status = cryptGetAttributeString( cryptSession,
											  CRYPT_SESSINFO_USERNAME,
											  userInfoBuffer,
											  &userInfoLength );
			}
		if( cryptStatusError( status ) )
			{
			fprintf( outputStream, "Couldn't get parsed URL info for '%s', "
					 "status %d, line %d.\n", urlParseInfo[ i ].url, status, 
					 __LINE__ );
			return( FALSE );
			}
		if( paramStrlen( urlParseInfo[ i ].name ) != ( size_t ) nameLength || \
			memcmp( nameBuffer, urlParseInfo[ i ].name, nameLength ) || \
			( urlParseInfo[ i ].port && port != urlParseInfo[ i ].port ) || \
			( urlParseInfo[ i ].userInfo != NULL && \
			  memcmp( userInfoBuffer, urlParseInfo[ i ].userInfo,
			  userInfoLength ) ) )
			{
			fprintf( outputStream, "Parsed URL info for '%s' is incorrect, "
					 "line %d.\n", urlParseInfo[ i ].url, __LINE__ );
			return( FALSE );
			}
		}

	/* Now try it with invalid URLs */
	for( i = 0; invalidUrlParseInfo[ i ].url != NULL; i++ )
		{
		/* Clear any leftover attributes from previous tests */
		cryptDeleteAttribute( cryptSession, CRYPT_SESSINFO_SERVER_NAME );
		cryptDeleteAttribute( cryptSession, CRYPT_SESSINFO_SERVER_PORT );
		cryptDeleteAttribute( cryptSession, CRYPT_SESSINFO_USERNAME );

		/* Set the URL */
		status = cryptSetAttributeString( cryptSession,
										  CRYPT_SESSINFO_SERVER_NAME,
										  invalidUrlParseInfo[ i ].url,
										  paramStrlen( invalidUrlParseInfo[ i ].url ) );
		if( cryptStatusOK( status ) )
			{
			fprintf( outputStream, "Invalid URL '%s' was accepted as valid, "
					 "line %d.\n", invalidUrlParseInfo[ i ].url, __LINE__ );
			return( FALSE );
			}
		}

	/* Clean up */
	status = cryptDestroySession( cryptSession );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptDestroySession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}
	fputs( "Session URL parsing succeeded.\n\n", outputStream );
	return( TRUE );
	}

/* Test session attribute handling */

int testSessionAttributes( void )
	{
	CRYPT_SESSION cryptSession;
	int status;

	fputs( "Testing session attribute handling...\n", outputStream );

	/* Create a server session of the most generic type */
	status = cryptCreateSession( &cryptSession, CRYPT_UNUSED,
								 CRYPT_SESSION_TLS_SERVER );
	if( status == CRYPT_ERROR_PARAM3 )	/* TLS server session access not avail.*/
		return( CRYPT_ERROR_NOTAVAIL );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptCreateSession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}

	/* Add an initial attribute */
	status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_SERVER_NAME, TEXT( "servername" ),
								paramStrlen( TEXT( "servername" ) ) );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptSetAttributeString() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}

	/* Add several username/password pairs */
	status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_USERNAME, TEXT( "test1" ),
								paramStrlen( TEXT( "test1" ) ) );
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_PASSWORD, TEXT( "test1" ),
								paramStrlen( TEXT( "test1" ) ) );
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_USERNAME, TEXT( "test2" ),
								paramStrlen( TEXT( "test2" ) ) );
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_PASSWORD, TEXT( "test2" ),
								paramStrlen( TEXT( "test2" ) ) );
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_USERNAME, TEXT( "test3" ),
								paramStrlen( TEXT( "test3" ) ) );
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_PASSWORD, TEXT( "test3" ),
								paramStrlen( TEXT( "test3" ) ) );
		}
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptSetAttributeString() for "
				 "username/password pairs failed with error code %d, "
				 "line %d.\n", status, __LINE__ );
		return( FALSE );
		}

	/* Add a duplicate entry and make sure that it's detected */
	status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_USERNAME, TEXT( "test2" ),
								paramStrlen( TEXT( "test2" ) ) );
	if( status != CRYPT_ERROR_DUPLICATE )
		{
		fprintf( outputStream, "Addition of duplicate user/password entry "
				 "wasn't detected, line %d.\n", __LINE__ );
		return( FALSE );
		}

	/* Add a password without a preceding username and make sure that it's
	   detected */
	status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_PASSWORD, TEXT( "invalid_pw" ),
								paramStrlen( TEXT( "invalid_pw" ) ) );
	if( status != CRYPT_ERROR_NOTINITED )
		{
		fprintf( outputStream, "Addition of password without username "
				 "wasn't detected, line %d.\n", __LINE__ );
		return( FALSE );
		}

	/* Add a username without a password and make sure that it's detected */
	status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_USERNAME, TEXT( "valid_name" ),
								paramStrlen( TEXT( "valid_name" ) ) );
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
								CRYPT_SESSINFO_USERNAME, TEXT( "invalid_name" ),
								paramStrlen( TEXT( "invalid_name" ) ) );
		}
	if( status != CRYPT_ERROR_INITED )
		{
		fprintf( outputStream, "Addition of username without password "
				 "wasn't detected, line %d.\n", __LINE__ );
		return( FALSE );
		}

	/* Clean up */
	status = cryptDestroySession( cryptSession );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptDestroySession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}
	fputs( "Session attribute handling succeeded.\n\n", outputStream );

	return( TRUE );
	}

/* Test for system clock problems.  This is a bit of an oddly-placed 
   function that's needed to detect problems due to clock skew, which causes
   odd errors in any protocols that assume synchronised clocks.  The 
   following is an extremely bare-bones NTP client that works on a best-
   effort basis as a safety check for problems */

#if 0

/* The difference between the NTP and Unix epoch, in seconds: 1970 - 1900,
   from RFC 5905*/

#define EPOCH_DIFF	2208988800UL

/* The NTP flags, communicated in the first 8 bits.  This consists of two
   bits of leap indicator, set to zero, three bits of version, set to 4 =
   NTPv4, and three bits of mode, set to 3 = Client or 4 = Server */

#define NTP_CLIENT_FLAGS	( ( 0 << 6 ) | ( 4 << 3 ) | 3 )
#define NTP_SERVER_FLAGS	( ( 0 << 6 ) | ( 4 << 3 ) | 4 )
#define NTP_FLAGS_MASK		0x3F

int testClockProblems( void )
	{
#ifdef __WINDOWS__
	WSADATA wsaData;
#endif /* __WINDOWS__ */
	BYTE ntpRequest[ 48 ] = { NTP_CLIENT_FLAGS, 0, 0, 0 };
	BYTE ntpResponse[ 48 ];
	SOCKET netSocket;
	struct sockaddr_in sockAddr;
	struct hostent *hostInfo;
	time_t serverTime, transmitTime;
	int length;

	fputs( "Checking for clock skew problems...", outputStream );

#ifdef __WINDOWS__
	if( WSAStartup( 2, &wsaData ) )
		{
		fprintf( outputStream, "Couldn't initialise sockets interface, line "
				 "%d.\n", __LINE__ );
		return( FALSE );
		}
#endif /* __WINDOWS__ */

	transmitTime = time( NULL );
	*( ( unsigned long * ) ( ntpRequest + 40 ) ) = \
				htonl( ( unsigned long ) transmitTime + EPOCH_DIFF );

	memset( &sockAddr, 0, sizeof( struct sockaddr_in ) );
	sockAddr.sin_family = AF_INET;
#if 1
	hostInfo = gethostbyname( "pool.ntp.org" );
	if( hostInfo == NULL )
		{
		puts( "Hostname lookup." );
		return( FALSE );
		}
	sockAddr.sin_addr.s_addr = *( in_addr_t * ) hostInfo->h_addr_list[ 0 ];
#else
	sockAddr.sin_addr.s_addr = inet_addr( "192.168.1.15" );
#endif
	sockAddr.sin_port = htons( 123 );
	netSocket = socket( PF_INET, SOCK_DGRAM, IPPROTO_UDP );
	if( netSocket == INVALID_SOCKET )
		{
		puts( "socket()" );
		return( FALSE );
		}
	length = sendto( netSocket, ntpRequest, 48, 0,
					 ( struct sockaddr * ) &sockAddr,
					 sizeof( struct sockaddr ) );
	if( length != 48 )
		{
		puts( "UDP send" );
		return( FALSE );
		}
	length = recv( netSocket, ntpResponse, 48, 0 );
	if( length < 48 )
		{
		puts( "UDP receive" );
		return( FALSE );
		}
	if( ( ntpResponse[ 0 ] & NTP_FLAGS_MASK ) != NTP_SERVER_FLAGS )
		{
		puts( "Invalid response header" );
		return( FALSE );
		}
	if( memcmp( ntpRequest + 40, ntpResponse + 24, 8 ) )
		{
		puts( "Invalid response" );
		return( FALSE );
		}
	serverTime = \
		ntohl( *( unsigned long * ) ( ntpResponse + 40 ) ) - EPOCH_DIFF;
	printf( "NTP time = %sNTP delta to system time = %ld.\n", 
			ctime( &serverTime ), ( long ) ( serverTime - transmitTime ) );
	
	fputs( "System clock seems OK.\n\n", outputStream );

	return( TRUE );
	}
#endif /* 0 */

/****************************************************************************
*																			*
*							SSH Utility Functions							*
*																			*
****************************************************************************/

/* There are various servers running that we can use for testing, the
   following remapping allows us to switch between them.  Notes:

	Server 1: Local loopback.
	Server 2: Sends extraneous lines of text before the SSH ID string
			  (technically allowed by the RFC, but probably not in the way
			  that it's being used here).
	Server 3: Reference ssh.com implementation.
	Server 4: Reference OpenSSH implementation.  As of early 2016 switched 
			  to a bunch of oddball nonstandard suites that we don't support.
	Server 5: OpenSSH with ECC support.  There are two aliases for the same 
			  server, anoncvs is a somewhat nonstandard config that only 
			  allows access via the 'anoncvs' account and is rather abrupt
			  about disconnecting clients, and natsu, which is a more 
			  standard config that behaves more normally.
	Server 6: Sends PAM auth request consisting of 16 bytes of zeroes, 
			  technically this is valid (since the spec is so vague) but it
			  doesn't make any sense to send it.
	Server 7: Test server for SHA-256 signing support.
	Server 8: Cisco router with suboptimal handling of DH lengths, aborts on
			  old-style SSH_MSG_KEXDH_GEX_REQUEST with 2K bit key rather than 
			  continuing with what's available.
	Server 9: Cisco router that only supports the broken 
			  diffie-hellman-group1-sha1 (not even the mandatory
			  diffie-hellman-group14-sha1, let alone any 
			  diffie-hellman-group-exchange-xxx suite).
	Server 10: Cisco router with no support for any of the
			   diffie-hellman-group-exchange-xxx DH suites.
	Server 11: Bitvise test server for RFC 8308 and 8309.
	Server 12: Bitvise test server on localhost configured for both password 
			   and publickey auth.  To enable multiple auth: Settings | 
			   Access Control | Windows Groups, click on Everyone, Entry 0 
			   in Windows Groups | Authentication, set both Password and 
			   Public-key to Required and set Public Key to use.  In 
			   addition newer versions of the server don't support the MTI 
			   algorithms by default, to enable MTI algorithms: Settings | 
			   Algorithms | Encryption.
	Server 13: RSSBus test server on localhost configured for both password 
			   and publickey auth.  To set up a server, in the Flow tab drag 
			   SFTP across to workspace, set User, Auth.Mode = "Multiple 
			   Factor", set Password and Public Key to use.
	Server 14: SSH test server using non-OpenSSH implementation 
			   ("RebexSSH_1.0.0.0").  Uses a g value the same size as p,
			   which cryptlib rejects as too suspicious.
	Server 15: SSH test server running an ancient version of OpenSSH (RC4,
			   MD5, etc).  Returns an invalid signature for the keyex (the
			   hash values differ) if sending SSH_MSG_KEX_DH_GEX_REQUEST 
			   rather than SSH_MSG_KEX_DH_GEX_REQUEST_OLD.
	Server 16: Generally-available site that runs SSH, implemented via some
			   customised libssh variant.
	Server 17: Bitvise test server that sends out Global Requests on 
			   connect.
	Server 18: OpenSSH server on test device.
	Server 19: Java server that crashes with null pointer exception.
	Server 20: ssh.com 2.0 server that only supports ssh-dss, with a large
			   collection of ssh.com bugs.  This may be some strange mutant
			   implementation since it supports a weird mix of new (ECDH/
			   ECDSA and AES-CTR) and totally obsolete (DSA for server auth) 
			   algorithms.
	Server 21: Sends invalid SSH ID string.
	Server 22: Disconnects if sent a SSH_MSG_KEX_DH_GEX_REQUEST rather than 
			   SSH_MSG_KEX_DH_GEX_REQUEST_OLD.
	Server 23: Old SSH version (Dropbear 2011) that doesn't understand newer 
			   hacks like EtM and extensions.
	Server 24: Sends 'SSH-2.0-""' as its SSH ID.
	Server 25: Microsoft Azure SSH, sends empty SSH_MSG_EXT_INFO message.
	Server 26: Gitlab homebrew SSH,
			   https://about.gitlab.com/blog/2022/08/17/why-we-have-implemented-our-own-sshd-solution-on-gitlab-sass/
			   Only allows pubkey auth, uses "git" as the universal user 
			   name and then maps it to a real identity using the public 
			   key.  Note that the user name is taken from the key for
			   pubkey auth so to authenticate as git it's necessary to
			   either change the key used or temporarily patch the code by
			   the comment "override this automatic use".
	Server 27: Disconnects with "Key exchange failed" on seeing the client
			   hello, without even getting to any key exchange.

   To test local -> remote/remote -> local forwarding:

	ssh localhost -v -l test -pw test -L 110:pop3.test.com:110
	ssh localhost -v -l test -pw test -R 110:pop3.test.com:110

  For test purposes we connect to the OpenSSH server because this is the 
  most frequently-used one around, so maintaining compatibility with it 
  whenever it changes is important.  Using it for test connects is slightly 
  antisocial but in practice few people seem to run the self-test and we 
  never get past the initial handshake phase so it shouldn't be a big deal */

static const struct {
	const C_STR name;
	const C_STR userName;
	const C_STR password;
	const BOOLEAN useDualAuth;
	} sshInfo[] = {
	{ NULL, NULL, NULL, FALSE },
	/*  1 */ { TEXT( LOCAL_HOST_NAME ), SSH_USER_NAME, SSH_PASSWORD },
	/*  2 */ { TEXT( "sorrel.humboldt.edu:222" ), TEXT( "user" ), TEXT( "password" ) },
	/*  3 */ { TEXT( "www.ssh.com" ), TEXT( "user" ), TEXT( "password" ) },
	/*  4 */ { TEXT( "www.openssh.com" ), TEXT( "user" ), TEXT( "password" ) },
	/*  5 */ /* { TEXT( "anoncvs.mindrot.org" ), TEXT( "user" ), TEXT( "password" ) },	See comment above */
	/*  5 */ { TEXT( "natsu.mindrot.org" ), TEXT( "user" ), TEXT( "password" ) },
	/*  6 */ { TEXT( "home.bbsdev.net" ), TEXT( "user" ), TEXT( "password" ) },
	/*  7 */ { TEXT( "experiment.bitvise.com:10712" ), TEXT( "user" ), TEXT( "password" ) },
	/*  8 */ { TEXT( "212.152.166.227" ), TEXT( "user" ), TEXT( "password" ) },
	/*  9 */ { TEXT( "212.152.166.226:22" ), TEXT( "user" ), TEXT( "password" ) },
	/* 10 */ { TEXT( "212.152.166.227:2222" ), TEXT( "user" ), TEXT( "password" ) },
	/* 11 */ { TEXT( "experiment.bitvise.com:10739" ), TEXT( "test" ), TEXT( "test" ) },
	/* 12 */ { TEXT( LOCAL_HOST_NAME ), TEXT( "user" ), TEXT( "test" ), TRUE },
	/* 13 */ { TEXT( LOCAL_HOST_NAME ), TEXT( "test" ), TEXT( "test" ), TRUE },
	/* 14 */ { TEXT( "test.rebex.net" ), "demo", "password" },
	/* 15 */ { TEXT( "itcsubmit.wustl.edu" ), TEXT( "user" ), TEXT( "password" ) },
	/* 16 */ { TEXT( "github.com" ), TEXT( "user" ), TEXT( "password" ) },
	/* 17 */ { TEXT( "experiment.bitvise.com:10999" ), TEXT( "test" ), TEXT( "test" ) },
	/* 18 */ { TEXT( "odroid.n2.lan" ), TEXT( "root" ), TEXT( "odroid" ) },
	/* 19 */ { TEXT( "eftp.dev.na.nissan.biz" ), TEXT( "user" ), TEXT( "test" ) },
	/* 20 */ { TEXT( "ftp.devonway.com" ), TEXT( "user" ), TEXT( "password" ) },
	/* 21 */ { TEXT( "sftp.dsco.io" ), TEXT( "user" ), TEXT( "password" ) },
	/* 22 */ { TEXT( "files-sftp.cym.bio" ), TEXT( "user" ), TEXT( "password" ) },
	/* 23 */ { TEXT( "flukso.lan" ), TEXT( "user" ), TEXT( "password" ) },
	/* 24 */ { TEXT( "b2b.littelfuse.com" ), TEXT( "user" ), TEXT( "password" ) },
	/* 25 */ { TEXT( "stcpi001.blob.core.windows.net" ), TEXT( "user" ), TEXT( "password" ) },
	/* 26 */ { TEXT( "www.gitlab.com" ), TEXT( "user" ), TEXT( "password" ) },
	/* 27 */ { TEXT( "ftp.fortuneglobe.eu:8022" ), TEXT( "user" ), TEXT( "password" ) },
	{ NULL, NULL, NULL, FALSE }
	};

#define SSH2_SERVER_NO	3

#ifdef TEST_SESSION_LOOPBACK

/* Test the ability to have multiple server threads waiting on a session.
   Since this requries (OS-specific) threading, we just use two sample
   systems, Win32 (Windows threads) and Linux (pthreads).  Since Linux's
   somewhat strange not-quite-a-thread/not-quite-a-process implementation
   can be a bit buggy, we also use another sample pthreads implementation
   (FreeBSD/NetBSD) as a sanity check */

#ifdef WINDOWS_THREADS
  static unsigned __stdcall sshServerMultiThread( void *dummy )
#else
  static void *sshServerMultiThread( void *dummy )
#endif /* Windows vs. pthreads */
	{
	CRYPT_SESSION cryptSession;
	CRYPT_CONTEXT privateKey;
	BYTE filenameBuffer[ FILENAME_BUFFER_SIZE ];
#ifdef UNICODE_STRINGS
	wchar_t wcBuffer[ FILENAME_BUFFER_SIZE ];
#endif /* UNICODE_STRINGS */
	void *fileNamePtr = filenameBuffer;
	int status;

	fprintf( outputStream, "Server thread %lX activated.\n", 
			 ( unsigned long ) THREAD_SELF() );
	fflush( outputStream );

	/* Create the session and try to activate it.  We don't do anything
	   beyond that point since this is a test of multi-thread handling
	   capability, not session handling */
	status = cryptCreateSession( &cryptSession, CRYPT_UNUSED,
								 CRYPT_SESSION_SSH_SERVER );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptCreateSession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		THREAD_EXIT();
		}
	if( !setLocalConnect( cryptSession, 22 ) )
		{
		THREAD_EXIT();
		}
	filenameFromTemplate( filenameBuffer, SSH_PRIVKEY_FILE_TEMPLATE, 1 );
#ifdef UNICODE_STRINGS
	mbstowcs( wcBuffer, filenameBuffer, strlen( filenameBuffer ) + 1 );
	fileNamePtr = wcBuffer;
#endif /* UNICODE_STRINGS */
	status = getPrivateKey( &privateKey, fileNamePtr, USER_PRIVKEY_LABEL, 
							TEST_PRIVKEY_PASSWORD );
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttribute( cryptSession,
									CRYPT_SESSINFO_PRIVATEKEY, privateKey );
		cryptDestroyContext( privateKey );
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttribute( cryptSession, CRYPT_SESSINFO_AUTHRESPONSE,
									TRUE );
		}
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "Private key read/set failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		THREAD_EXIT();
		}
	fprintf( outputStream, "Server for thread %lX activated.\n", 
			 ( unsigned long ) THREAD_SELF() );
	status = cryptSetAttribute( cryptSession, CRYPT_SESSINFO_ACTIVE, TRUE );
	printConnectInfo( cryptSession );
	if( cryptStatusError( status ) )
		{
		printExtError( cryptSession,
					   "Attempt to activate SSH server session", status,
					   __LINE__ );
		}
	cryptDestroySession( cryptSession );
	fprintf( outputStream, "Server for thread %lX has exited.\n", 
			 ( unsigned long ) THREAD_SELF() );
	fflush( outputStream );

	THREAD_EXIT();
	}

#ifdef WINDOWS_THREADS
  static unsigned __stdcall sshClientMultiThread( void *dummy )
#else
  static void *sshClientMultiThread( void *dummy )
#endif /* Windows vs. pthreads */
	{
	CRYPT_SESSION cryptSession;
	int status;

	fprintf( outputStream, "Client thread %lX activated.\n", 
			 ( unsigned long ) THREAD_SELF() );
	fflush( outputStream );

	/* Create the session and try to activate it.  We don't do anything
	   beyond that point since this is a test of multi-thread handling
	   capability, not session handling */
	status = cryptCreateSession( &cryptSession, CRYPT_UNUSED,
								 CRYPT_SESSION_SSH );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptCreateSession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		THREAD_EXIT();
		}
	if( !setLocalConnect( cryptSession, 22 ) )
		{
		THREAD_EXIT();
		}
	status = cryptSetAttribute( cryptSession,
								CRYPT_OPTION_NET_CONNECTTIMEOUT, 10 );
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
										  CRYPT_SESSINFO_USERNAME,
										  sshInfo[ SSH2_SERVER_NO ].userName,
										  paramStrlen( sshInfo[ SSH2_SERVER_NO ].userName ) );
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
										  CRYPT_SESSINFO_PASSWORD,
										  sshInfo[ SSH2_SERVER_NO ].password,
										  paramStrlen( sshInfo[ SSH2_SERVER_NO ].password ) );
		}
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptSetAttribute/AttributeString() failed "
				 "with error code %d, line %d.\n", status, __LINE__ );
		THREAD_EXIT();
		}
	fprintf( outputStream, "Client for thread %lX activated.\n", 
			 ( unsigned long ) THREAD_SELF() );
	status = cryptSetAttribute( cryptSession, CRYPT_SESSINFO_ACTIVE, TRUE );
	printConnectInfo( cryptSession );
	if( cryptStatusError( status ) )
		{
		printExtError( cryptSession,
					   "Attempt to activate SSH client session", status,
					   __LINE__ );
		}
	cryptDestroySession( cryptSession );
	fprintf( outputStream, "Client for thread %lX has exited.\n", 
			 ( unsigned long ) THREAD_SELF() );
	fflush( outputStream );

	THREAD_EXIT();
	}

int testSessionSSHClientServerMultiThread( void )
	{
	return( multiThreadDispatch( sshClientMultiThread, 
								 sshServerMultiThread, MAX_NO_THREADS ) );
	}
#endif /* TEST_SESSION_LOOPBACK */

#ifdef USE_SSH_EXTENDED

/* Create an SSH channel */

static int createChannel( const CRYPT_SESSION cryptSession,
						  const C_STR type, const C_STR arg1 )
	{
	int status;

	status = cryptSetAttribute( cryptSession, CRYPT_SESSINFO_SSH_CHANNEL,
								CRYPT_UNUSED );
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
										  CRYPT_SESSINFO_SSH_CHANNEL_TYPE,
										  type, paramStrlen( type ) );
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptSetAttributeString( cryptSession,
										  CRYPT_SESSINFO_SSH_CHANNEL_ARG1,
										  arg1, paramStrlen( arg1 ) );
		}
	return( status );
	}

/* Print information on an SSH channel */

static BOOLEAN printChannelInfo( const CRYPT_SESSION cryptSession,
								 const SSH_TEST_TYPE testType,
								 const BOOLEAN isServer )
	{
	C_CHR stringBuffer[ CRYPT_MAX_TEXTSIZE + 1 ];
	C_CHR argBuffer[ CRYPT_MAX_TEXTSIZE + 1 ];
	int channel, stringLength DUMMY_INIT, argLength = 0, status;

	status = cryptGetAttribute( cryptSession, CRYPT_SESSINFO_SSH_CHANNEL,
								&channel );
	if( cryptStatusOK( status ) )
		{
		status = cryptGetAttributeString( cryptSession,
										  CRYPT_SESSINFO_SSH_CHANNEL_TYPE,
										  stringBuffer, &stringLength );
		}
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "%sCouldn't query channel ID/type, "
				 "status %d, line %d.\n", isServer ? "SVR: " : "", 
				 status, __LINE__ );
		return( FALSE );
		}
#ifdef UNICODE_STRINGS
	stringBuffer[ stringLength / sizeof( wchar_t ) ] = TEXT( '\0' );
#else
	stringBuffer[ stringLength ] = '\0';
#endif /* UNICODE_STRINGS */
#if defined( __MVS__ ) || defined( __VMCMS__ )
	bufferToEbcdic( buffer, buffer );
#endif /* EBCDIC systems */
	if( !paramStrcmp( stringBuffer, TEXT( "subsystem" ) ) || \
		!paramStrcmp( stringBuffer, TEXT( "direct-tcpip" ) ) )
		{
		status = cryptGetAttributeString( cryptSession,
										  CRYPT_SESSINFO_SSH_CHANNEL_ARG1,
										  argBuffer, &argLength );
		if( cryptStatusError( status ) )
			{
			fprintf( outputStream, "%sCouldn't query channel arg, "
					 "status %d, line %d.\n", isServer ? "SVR: " : "", 
					 status, __LINE__ );
			return( FALSE );
			}
#ifdef UNICODE_STRINGS
		argBuffer[ argLength / sizeof( wchar_t ) ] = TEXT( '\0' );
		fprintf( outputStream, "SVR: Client opened channel #%d, type '%S', "
				 "arg '%S'.\n", channel, stringBuffer, argBuffer );
#else
		argBuffer[ argLength ] = '\0';
  #if defined( __MVS__ ) || defined( __VMCMS__ )
		bufferToEbcdic( argBuffer, argBuffer );
  #endif /* EBCDIC systems */
		fprintf( outputStream, "SVR: Client opened channel #%d, type '%s', "
				 "arg '%s'.\n", channel, stringBuffer, argBuffer );
#endif /* UNICODE_STRINGS */
		fflush( outputStream );

		return( TRUE );
		}

	if( testType == SSH_TEST_SUBSYSTEM )
		{
		fprintf( outputStream, "SVR: Client requested subsystem but server "
				 "reported request as '%s', line %d.\n", stringBuffer, 
				 __LINE__ );
		return( FALSE );
		}

#ifdef UNICODE_STRINGS
	fprintf( outputStream, "SVR: Client opened channel #%d, type '%S'.\n",
			 channel, stringBuffer );
#else
	fprintf( outputStream, "SVR: Client opened channel #%d, type '%s'.\n",
			 channel, stringBuffer );
#endif /* UNICODE_STRINGS */
	fflush( outputStream );
	return( TRUE );
	}
#endif /* USE_SSH_EXTENDED */

/* Print information on data sent over an SSH channel */

static int printDataInfo( CRYPT_SESSION cryptSession,
						  char *buffer, const int bufSize,
						  int *bytesCopied, const BOOLEAN isServer, 
						  const BOOLEAN isErrorTest )
	{
	int channel = 0, status;

#ifdef USE_SSH_EXTENDED
	status = cryptGetAttribute( cryptSession, CRYPT_SESSINFO_SSH_CHANNEL, 
								&channel );
	if( cryptStatusError( status ) )
		{
		printExtError( cryptSession, 
					   isServer ? "SVR: Couldn't get data channel number" : \
								  "Couldn't get data channel number", 
					   status, __LINE__ );
		return( status );
		}
#endif /* USE_SSH_EXTENDED */

	/* Get the data from the session.  We specify a buffer size one smaller 
	   than what we've been passed since we zero-terminate it later on */
	status = cryptPopData( cryptSession, buffer, bufSize - 1, bytesCopied );
	if( cryptStatusError( status ) )
		{
		printExtError( cryptSession, 
					   isServer ? "SVR: Client data read failed" : \
								  "Server data read failed", 
					   status, __LINE__ );
#ifndef NDEBUG
		if( isErrorTest )
			{
			if( !isServer && status != CRYPT_ERROR_SIGNATURE && \
							 status != CRYPT_ERROR_BADDATA )
				{
				fprintf( outputStream, "Test returned status %d, should "
						 "have been %d or %d.\n", status, 
						 CRYPT_ERROR_SIGNATURE, CRYPT_ERROR_BADDATA );
				return( status );
				}

			/* These tests are supposed to fail, so if this happens then the 
			   overall test has succeeded */
			fputs( "  (This test checks error handling, so the failure "
				   "response is correct).\n", outputStream );
			return( SENTINEL );
			}
#endif /* !NDEBUG */
		return( status );
		}
	buffer[ *bytesCopied ] = '\0';
#if defined( __MVS__ ) || defined( __VMCMS__ )
	bufferToEbcdic( buffer, buffer );
#endif /* EBCDIC systems */
	fprintf( outputStream, "%s---- %s sent %d bytes on channel #%d ----\n",
			 isServer ? "SVR: " : "", isServer ? "Client" : "Server",
			 *bytesCopied, channel );
	if( isServer )
		fprintf( outputStream, "SVR: " );
	fputs( buffer, outputStream );
	fprintf( outputStream, "%s---- End of output ----\n", 
			 isServer ? "SVR: " : "" );
	fflush( outputStream );

	return( CRYPT_OK );
	}

/* Print information on SSH authorisation info */

static BOOLEAN printAuthInfo( CRYPT_SESSION cryptSession )
	{
	C_CHR stringBuffer[ CRYPT_MAX_TEXTSIZE + 1 ];
	int length, status;

	status = cryptGetAttributeString( cryptSession, CRYPT_SESSINFO_USERNAME,
									  stringBuffer, &length );
	if( cryptStatusOK( status ) )
		{
#ifdef UNICODE_STRINGS
		stringBuffer[ length / sizeof( wchar_t ) ] = TEXT( '\0' );
		fprintf( outputStream, "SVR: User name = '%S', ", stringBuffer );
#else
		stringBuffer[ length ] = '\0';
  #if defined( __MVS__ ) || defined( __VMCMS__ )
		bufferToEbcdic( stringBuffer, stringBuffer );
  #endif /* EBCDIC systems */
		fprintf( outputStream, "SVR: User name = '%s', ", stringBuffer );
#endif /* UNICODE_STRINGS */
		}
	if( cryptStatusOK( status ) )
		{
		status = cryptGetAttributeString( cryptSession, CRYPT_SESSINFO_PASSWORD,
										  stringBuffer, &length );
		}
	if( cryptStatusOK( status ) )
		{
#ifdef UNICODE_STRINGS
		stringBuffer[ length / sizeof( wchar_t ) ] = TEXT( '\0' );
		fprintf( outputStream, "password = '%S'.\n", stringBuffer );
#else
		stringBuffer[ length ] = '\0';
  #if defined( __MVS__ ) || defined( __VMCMS__ )
		bufferToEbcdic( stringBuffer, stringBuffer );
  #endif /* EBCDIC systems */
		fprintf( outputStream, "password = '%s'.\n", stringBuffer );
#endif /* UNICODE_STRINGS */
		}
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "SVR: Couldn't read client authentication "
				 "details, status = %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}
	fflush( outputStream );

	return( TRUE );
	}

/****************************************************************************
*																			*
*								SSH Routines Test							*
*																			*
****************************************************************************/

/* If we're testing dual-thread handling of sessions, we need to provide a
   forward declaration of the threading function since it's called from 
   within the SSH connect code */

#if defined( WINDOWS_THREADS )
  static unsigned __stdcall ssh2ServerThread( void *arg );
#elif defined( UNIX_THREADS )
  static void *ssh2ServerThread( void *arg );
#endif /* Windows vs. Unix threads*/

/* Establish an SSH session */

static int connectSSH( const CRYPT_SESSION_TYPE sessionType,
					   const SSH_TEST_TYPE testType,
					   const BOOLEAN localSession )
	{
	CRYPT_SESSION cryptSession;
#ifdef SSH2_SERVER_NAME
	const C_STR serverName = SSH2_SERVER_NAME;
#else
	const C_STR serverName = localSession ? TEXT( LOCAL_HOST_NAME ) : \
											sshInfo[ SSH2_SERVER_NO ].name;
#endif /* SSH2_SERVER_NAME */
	const BOOLEAN isServer = ( sessionType == CRYPT_SESSION_SSH_SERVER ) ? \
							   TRUE : FALSE;
	const BOOLEAN isErrorTest = ( testType >= SSH_TEST_CORRUPT_HANDSHAKE && \
								  testType < SSH_TEST_LAST ) ? \
								  TRUE : FALSE;
	const BOOLEAN useDualAuth = !isServer && \
								sshInfo[ SSH2_SERVER_NO ].useDualAuth;
	char buffer[ BUFFER_SIZE ];
#ifdef USE_SSH_EXTENDED
	int channel;
#endif /* USE_SSH_EXTENDED */
	int bytesCopied, status;

	/* If this is a local session, synchronise the client and server */
	if( localSession )
		{
		if( isServer )
			{
			/* Acquire the init mutex */
			acquireMutex();
			}
		else
			{
			/* We're the client Wait for the server to finish initialising */
			if( waitMutex() == CRYPT_ERROR_TIMEOUT )
				{
				fprintf( outputStream, "Timed out waiting for server to "
						 "initialise, line %d.\n", __LINE__ );
				return( FALSE );
				}
			}
		}

	/* If this is the dual-thread server test and we're the second server 
	   thread, skip the portions that have already been handled by the first 
	   thread */
#ifdef WINDOWS_THREADS
	if( isServer && testType == SSH_TEST_DUALTHREAD2 )
		goto dualThreadContinue;
#endif /* WINDOWS_THREADS */

	fprintf( outputStream, "%sTesting %sSSH%s session...\n",
			 isServer ? "SVR: " : "",
			 localSession ? "local " : "",
			 ( testType == SSH_TEST_DSAKEY ) ? " with DSA server key" : \
			 ( testType == SSH_TEST_ECCKEY ) ? " with ECDSA server key" : \
			 ( testType == SSH_TEST_SUBSYSTEM ) ? " SFTP" : \
			 ( testType == SSH_TEST_PORTFORWARDING ) ? " port-forwarding" : \
			 ( testType == SSH_TEST_EXEC ) ? " remote exec" : \
			 ( testType == SSH_TEST_MULTICHANNEL ) ? " multi-channel" : \
			 ( testType == SSH_TEST_PUBKEYAUTH ) ? " pubkey-auth" : \
			 ( testType == SSH_TEST_PUBKEYAUTH_WRONGKEY ) ? " pubkey-auth with incorrect key" : \
			 ( testType == SSH_TEST_PUBKEYAUTH_WRONGNAME ) ? " pubkey-auth with incorrect name" : \
			 ( testType == SSH_TEST_PUBKEYAUTH_PASSWORD ) ? " pubkey-auth but using password" : \
			 ( testType == SSH_TEST_TOTPAUTH ) ? " TOTP auth" : \
			 ( testType == SSH_TEST_PREAUTH ) ? " pre-authentication" : \
			 ( testType == SSH_TEST_PREAUTH_MISSING ) ? " pre-authentication absent" : \
			 ( testType == SSH_TEST_PREAUTH_WRONG ) ? " pre-authentication with incorrect value" : \
			 isErrorTest ? " with checking for error handling" : "" );
	if( !isServer && !localSession )
		{
#ifdef UNICODE_STRINGS
		fprintf( outputStream, "  Remote host: %S.\n", serverName );
#else
		fprintf( outputStream, "  Remote host: %s.\n", serverName );
#endif /* UNICODE_STRINGS */
		}
	fflush( outputStream );

	/* Create the session */
	status = cryptCreateSession( &cryptSession, CRYPT_UNUSED, sessionType );
	if( status == CRYPT_ERROR_PARAM3 )	/* SSH session access not available */
		{
		if( isServer && localSession )
			releaseMutex();	/* Make sure client doesn't hang */
		return( CRYPT_ERROR_NOTAVAIL );
		}
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptCreateSession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		if( isServer && localSession )
			releaseMutex();	/* Make sure client doesn't hang */
		return( FALSE );
		}
#if defined( CONFIG_FAULTS ) && !defined( NDEBUG )
	if( isErrorTest )
		{
		int testFaultType;

		if( isServer )
			{
			testFaultType = \
					( testType == SSH_TEST_CORRUPT_HANDSHAKE ) ? \
					  FAULT_SESSION_CORRUPT_HANDSHAKE : \
					( testType == SSH_TEST_CORRUPT_KEYEX_SERVER ) ? \
					  FAULT_SESSION_CORRUPT_KEYEX_SERVER : \
					( testType == SSH_TEST_CORRUPT_EXCHANGE_HASH ) ? \
					  FAULT_SESSION_SSH_CORRUPT_EXCHANGE_HASH : \
					( testType == SSH_TEST_BADSIG_HASH ) ? \
					  FAULT_BADSIG_HASH : \
					( testType == SSH_TEST_BADSIG_SIG ) ? \
					  FAULT_BADSIG_SIG : \
					( testType == SSH_TEST_WRONG_CERT ) ? \
					  FAULT_SESSION_WRONGCERT : \
					( testType == SSH_TEST_CORRUPT_USERNAME ) ? \
					  FAULT_CORRUPT_ID : \
					( testType == SSH_TEST_CORRUPT_PASSWORD ) ? \
					  FAULT_CORRUPT_AUTHENTICATOR : \
					( testType == SSH_TEST_CORRUPT_CHANNEL_OPEN ) ? \
					  FAULT_SESSION_SSH_CORRUPT_CHANNEL_OPEN : \
					( testType == SSH_TEST_CORRUPT_CHANNEL_DATA ) ? \
					  FAULT_SESSION_SSH_CORRUPT_CHANNEL_DATA : \
					( testType == SSH_TEST_CORRUPT_CHANNEL_CLOSE ) ? \
					  FAULT_SESSION_SSH_CORRUPT_CHANNEL_CLOSE : \
					( testType == SSH_TEST_CORRUPT_CHANNEL_REQUEST ) ? \
					  FAULT_SESSION_SSH_CORRUPT_CHANNEL_REQUEST : \
					( testType == SSH_TEST_CORRUPT_DATA ) ? \
					  FAULT_SESSION_CORRUPT_DATA : \
					( testType == SSH_TEST_CORRUPT_MAC ) ? \
					  FAULT_SESSION_CORRUPT_MAC : \
					  FAULT_NONE;
			}
		else
			{
			testFaultType = \
					( testType == SSH_TEST_CORRUPT_KEYEX_CLIENT ) ? \
					  FAULT_SESSION_CORRUPT_KEYEX_CLIENT : \
					  FAULT_NONE;
			}
		if( testFaultType != FAULT_NONE )
			cryptSetFaultType( testFaultType );
		}
#endif /* CONFIG_FAULTS && Debug */

	/* Set up the server and user information and activate the session */
	if( isServer )
		{
		CRYPT_CONTEXT privateKey;
		BYTE filenameBuffer[ FILENAME_BUFFER_SIZE ];
#ifdef UNICODE_STRINGS
		wchar_t wcBuffer[ FILENAME_BUFFER_SIZE ];
#endif /* UNICODE_STRINGS */
		void *fileNamePtr = filenameBuffer;

		if( !setLocalConnect( cryptSession, 22 ) )
			{
			cryptDestroySession( cryptSession );
			if( localSession )
				releaseMutex();	/* Make sure client doesn't hang */
			return( FALSE );
			}
		filenameFromTemplate( filenameBuffer, SSH_PRIVKEY_FILE_TEMPLATE, 
							  ( testType == SSH_TEST_ECCKEY ) ? 3 : \
							  ( testType == SSH_TEST_DSAKEY ) ? 2 : 1 );
#ifdef UNICODE_STRINGS
		mbstowcs( wcBuffer, filenameBuffer, strlen( filenameBuffer ) + 1 );
		fileNamePtr = wcBuffer;
#endif /* UNICODE_STRINGS */
		status = getPrivateKey( &privateKey, fileNamePtr, USER_PRIVKEY_LABEL, 
								TEST_PRIVKEY_PASSWORD );
		if( cryptStatusOK( status ) )
			{
			status = cryptSetAttribute( cryptSession,
										CRYPT_SESSINFO_PRIVATEKEY, privateKey );
			cryptDestroyContext( privateKey );
			}
		if( cryptStatusOK( status ) && \
			( testType == SSH_TEST_PUBKEYAUTH || \
			  testType == SSH_TEST_PUBKEYAUTH_WRONGKEY || \
			  testType == SSH_TEST_PUBKEYAUTH_WRONGNAME || \
			  testType == SSH_TEST_PUBKEYAUTH_PASSWORD ) )
			{
			CRYPT_KEYSET cryptKeyset;
			CRYPT_CONTEXT publicKey;

			status = cryptKeysetOpen( &cryptKeyset, CRYPT_UNUSED,
								CRYPT_KEYSET_DATABASE, DATABASE_KEYSET_NAME,
								CRYPT_KEYOPT_NONE );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				fprintf( outputStream, "SVR: Pubkey auth. database keyset "
						 "open failed with error code %d, line %d.\n", 
						 status, __LINE__ );
				if( localSession )
					releaseMutex();	/* Make sure client doesn't hang */
				return( FALSE );
				}
			filenameFromTemplate( filenameBuffer, 
								  USER_PRIVKEY_FILE_TEMPLATE, 1 );
			status = getPublicKey( &publicKey, filenameBuffer, 
								   USER_PRIVKEY_LABEL );
			if( cryptStatusOK( status ) )
				{
				/* Add the key to the authorisation database */
				status = cryptAddPublicKey( cryptKeyset, publicKey );
				if( status == CRYPT_ERROR_DUPLICATE )
					status = CRYPT_OK;
				cryptDestroyContext( publicKey );
				}
			if( cryptStatusOK( status ) )
				{
				status = cryptSetAttribute( cryptSession, 
											CRYPT_SESSINFO_KEYSET, 
											cryptKeyset );
				}
			cryptKeysetClose( cryptKeyset );
			}
		if( cryptStatusOK( status ) && \
			( ( testType == SSH_TEST_PREAUTH ) || \
			  ( testType == SSH_TEST_PREAUTH_MISSING ) || \
			  ( testType == SSH_TEST_PREAUTH_WRONG ) ) )
			{
			status = cryptSetAttributeString( cryptSession, 
											  CRYPT_SESSINFO_SSH_PREAUTH,
											  "test", 4 );
			}
		if( cryptStatusOK( status ) )
			{
			switch( testType )
				{
				case SSH_TEST_TOTPAUTH:
				case SSH_TEST_CONFIRMAUTH:
				case SSH_TEST_DUALTHREAD:
					break;

				default:
					/* If we're not testing manual confirmation of client 
					   auth, have cryptlib automatically confirm the auth */
					status = cryptSetAttribute( cryptSession, 
												CRYPT_SESSINFO_AUTHRESPONSE, 
												TRUE );
					break;
				}
			}
		}
	else
		{
		if( localSession )
			{
			if( !setLocalConnect( cryptSession, 22 ) )
				{
				cryptDestroySession( cryptSession );
				return( FALSE );
				}
			}
		else
			{
			status = cryptSetAttributeString( cryptSession,
							CRYPT_SESSINFO_SERVER_NAME, serverName, 
							paramStrlen( serverName ) );
			}
		if( cryptStatusOK( status ) && \
			( testType != SSH_TEST_PUBKEYAUTH && \
			  testType != SSH_TEST_PUBKEYAUTH_WRONGKEY ) )
			{						   /* pubkey takes user name from certificate */
#if defined USER_SUPPLIED_PASSWORD
			const C_STR userName = SSH_USER_NAME; 
#else
			const C_STR userName = sshInfo[ SSH2_SERVER_NO ].userName;
#endif /* USER_SUPPLIED_PASSWORD */
			status = cryptSetAttributeString( cryptSession,
							CRYPT_SESSINFO_USERNAME, userName, 
							paramStrlen( userName ) );
			}
		if( cryptStatusOK( status ) )
			{
			const BOOLEAN usePubkeyAuth = \
				( testType == SSH_TEST_PUBKEYAUTH || \
				  testType == SSH_TEST_PUBKEYAUTH_WRONGKEY || \
				  testType == SSH_TEST_PUBKEYAUTH_WRONGNAME ) ? TRUE : FALSE;

			if( usePubkeyAuth || useDualAuth )
				{
				char filenameBuffer[ FILENAME_BUFFER_SIZE ];
				CRYPT_CONTEXT privateKey;

				filenameFromTemplate( filenameBuffer, 
							USER_PRIVKEY_FILE_TEMPLATE, 
							( testType != SSH_TEST_PUBKEYAUTH_WRONGKEY ) ? \
							  1 : 2 );
				status = getPrivateKey( &privateKey, filenameBuffer,
								USER_PRIVKEY_LABEL, TEST_PRIVKEY_PASSWORD );
				if( cryptStatusOK( status ) && \
					( testType == SSH_TEST_PUBKEYAUTH || \
					  testType == SSH_TEST_PUBKEYAUTH_WRONGKEY ) )
					{
					char userName[ 128 ];
					int userNameLength;

					/* For the pubkey auth we have to provide the same name 
					   that's associated with the public key via the 
					   certificate or the auth will be rejected, unless 
					   we're using dual auth in which case we have a 
					   hardcoded user name */
					if( useDualAuth )
						{
						const BYTE *userNamePtr = \
										sshInfo[ SSH2_SERVER_NO ].userName;

						status = cryptSetAttributeString( cryptSession,
											CRYPT_SESSINFO_USERNAME,
											userNamePtr, 
											paramStrlen( userNamePtr ) );
						}
					else
						{
						/* Get the user name from the private key, or at 
						   least the certificate attached to it.  To 
						   override this automatic use it's necessary to 
						   change the code below to hardwire in the 
						   required name */
#if 1
						status = cryptGetAttributeString( privateKey, 
											CRYPT_CERTINFO_COMMONNAME, 
											userName, &userNameLength );
#else
						memcpy( userName, "git", 3 );	/* For github test */
						userNameLength = 3;
#endif /* 1 */
						if( cryptStatusOK( status ) )
							{
							status = cryptSetAttributeString( cryptSession,
											CRYPT_SESSINFO_USERNAME, 
											userName, userNameLength );
							}
						}
					}
				if( cryptStatusOK( status ) )
					{
					status = cryptSetAttribute( cryptSession,
									CRYPT_SESSINFO_PRIVATEKEY, privateKey );
					cryptDestroyContext( privateKey );
					}
				}
			if( !usePubkeyAuth || useDualAuth )
				{
#ifdef USER_SUPPLIED_PASSWORD
				char password[ 256 ];

				if( testType == SSH_TEST_TOTPAUTH )
					{
					fprintf( outputStream, "Enter SSHv2 server TOTP token: " );
					fgets( password, 255, stdin );
					password[ strlen( password ) - 1 ] = '\0';
					status = cryptSetAttributeString( cryptSession,
							CRYPT_SESSINFO_AUTHTOKEN, password, 
							strlen( password ) );
					}
				else
					{
					fprintf( outputStream, "Enter SSHv2 server password: " );
					fgets( password, 255, stdin );
					password[ strlen( password ) - 1 ] = '\0';
					status = cryptSetAttributeString( cryptSession,
							CRYPT_SESSINFO_PASSWORD, password, 
							strlen( password ) );
					}
#else
				status = cryptSetAttributeString( cryptSession,
							CRYPT_SESSINFO_PASSWORD,
							sshInfo[ SSH2_SERVER_NO ].password,
							paramStrlen( sshInfo[ SSH2_SERVER_NO ].password ) );
#endif /* User-supplied password */
				}
			}
#ifdef USE_SSH_EXTENDED
		if( cryptStatusOK( status ) && \
			( testType == SSH_TEST_SUBSYSTEM ) )
			{
			status = createChannel( cryptSession, TEXT( "subsystem" ),
									TEXT( "sftp" ) );
			}
		if( cryptStatusOK( status ) && \
			( testType == SSH_TEST_PORTFORWARDING || \
			  testType == SSH_TEST_MULTICHANNEL || \
			  testType == SSH_TEST_CORRUPT_CHANNEL_CLOSE || \
			  testType == SSH_TEST_CORRUPT_CHANNEL_REQUEST ) )
			{
			status = createChannel( cryptSession, TEXT( "direct-tcpip" ),
									TEXT( LOCAL_HOST_NAME ":1234" ) );
			}
#endif /* USE_SSH_EXTENDED */
		if( cryptStatusOK( status ) && \
			( testType == SSH_TEST_FINGERPRINT ) )
			{
			BYTE fingerPrint[ CRYPT_MAX_HASHSIZE ];

			/* Set a dummy (all-zero) fingerprint to force the connect to
			   fail */
			memset( fingerPrint, 0, CRYPT_MAX_HASHSIZE );
			status = cryptSetAttributeString( cryptSession,
											  CRYPT_SESSINFO_SERVER_FINGERPRINT_SHA1,
											  fingerPrint, 20 );
			}
#ifdef USE_SSH_EXTENDED
		if( cryptStatusOK( status ) && \
			( testType == SSH_TEST_EXEC ) )
			{
			status = createChannel( cryptSession, TEXT( "exec" ),
									TEXT( "/bin/netstat" ) );
			}
#endif /* USE_SSH_EXTENDED */
		if( cryptStatusOK( status ) && \
			( ( testType == SSH_TEST_PREAUTH ) || \
			  ( testType == SSH_TEST_PREAUTH_WRONG ) ) )
			{
			status = cryptSetAttributeString( cryptSession, 
										CRYPT_SESSINFO_SSH_PREAUTH,
										( testType == SSH_TEST_PREAUTH ) ? \
										  "test" : "abcd", 4 );
			}
		}
	if( cryptStatusError( status ) )
		{
		cryptDestroySession( cryptSession );
		fprintf( outputStream, "%scryptSetAttribute/AttributeString() "
				 "failed with error code %d, line %d.\n", 
				 isServer ? "SVR: " : "", status, __LINE__ );
		if( isServer && localSession )
			releaseMutex();	/* Make sure client doesn't hang */
		return( FALSE );
		}

	/* Activate the session.  Since we need to be able to process out-of-
	   band signalling such as channel control messages, we set a non-zero
	   timeout for reads */
	cryptSetAttribute( cryptSession, CRYPT_OPTION_NET_READTIMEOUT, 5 );
	if( localSession )
		{
		/* For the loopback test we also increase the connection timeout to 
		   a higher-than-normal level, since this gives us more time for
		   tracing through the code when debugging */
		cryptSetAttribute( cryptSession, CRYPT_OPTION_NET_CONNECTTIMEOUT, 
						   120 );
		}
	if( localSession && isServer )
		{
		/* Tell the client that we're ready to go */
		releaseMutex();
		}
	status = cryptSetAttribute( cryptSession, CRYPT_SESSINFO_ACTIVE, TRUE );
	if( isServer )
		{
#ifdef WINDOWS_THREADS
		if( testType == SSH_TEST_DUALTHREAD && \
			status == CRYPT_ENVELOPE_RESOURCE )
			{
			static CRYPT_SESSION localCryptSession = 0;
			int arg = SSH_TEST_DUALTHREAD2;
			unsigned threadID;

			/* Start a second thread to complete the handshake and exit */
			localCryptSession = cryptSession;
			_beginthreadex( NULL, 0, ssh2ServerThread, &arg, 0, &threadID );
			return( TRUE );

			/* The second thread continues from here */
dualThreadContinue:
			assert( localSession > 0 );
			cryptSession = localCryptSession;

			/* Allow the auth.and complete the handshake */
			fputs( "SVR: Confirming authentication to client...", 
				   outputStream );
			status = cryptSetAttribute( cryptSession,
										CRYPT_SESSINFO_AUTHRESPONSE, TRUE );
			if( cryptStatusOK( status ) )
				{
				status = cryptSetAttribute( cryptSession,
											CRYPT_SESSINFO_ACTIVE, TRUE );
				}
			}
#endif /* WINDOWS_THREADS */
		if( status == CRYPT_ENVELOPE_RESOURCE )
			{
			/* The client has tried to authenticate themselves, print the
			   info */
			if( !printAuthInfo( cryptSession ) )
				{
				cryptDestroySession( cryptSession );
				return( FALSE );
				}

			/* Deny the auth.and force them to retry, unless it's a loopback
			   test which is non-interactive and for which the client can't
			   perform an interactive re-auth */
			if( !localSession )
				{
				fputs( "SVR: Denying authentication to client, who should "
					   "reauth...", outputStream );
				status = cryptSetAttribute( cryptSession,
											CRYPT_SESSINFO_AUTHRESPONSE, 
											FALSE );
				if( cryptStatusOK( status ) )
					{
					status = cryptSetAttribute( cryptSession,
												CRYPT_SESSINFO_ACTIVE, TRUE );
					}
				if( status != CRYPT_ENVELOPE_RESOURCE )
					{
					printExtError( cryptSession, 
								   "SVR: Attempt to deny auth.to client", 
								   status, __LINE__ );
					cryptDestroySession( cryptSession );
					return( FALSE );
					}
				if( !printAuthInfo( cryptSession ) )
					{
					cryptDestroySession( cryptSession );
					return( FALSE );
					}
				}

			/* If it's TOTP authentication then we need to provide the seed 
			   value to allow the TOTP authentication to be verified */
			if( testType == SSH_TEST_TOTPAUTH )
				{
				status = cryptSetAttributeString( cryptSession,
												  CRYPT_SESSINFO_AUTHTOKEN,
												  SSH_AUTHTOKEN,
												  paramStrlen( SSH_AUTHTOKEN ) );
				if( cryptStatusError( status ) )
					{
					printExtError( cryptSession, 
								   "SVR: Attempt to confirm TOTP auth to client", 
								   status, __LINE__ );
					cryptDestroySession( cryptSession );
					return( FALSE );
					}
				}

			/* Allow the auth.and complete the handshake */
			fputs( "SVR: Confirming authentication to client...", 
				   outputStream );
			status = cryptSetAttribute( cryptSession,
										CRYPT_SESSINFO_AUTHRESPONSE, TRUE );
			if( cryptStatusOK( status ) )
				{
				status = cryptSetAttribute( cryptSession,
											CRYPT_SESSINFO_ACTIVE, TRUE );
				}
			}

		/* Now that the handshake is complete, display the connection info */
		if( cryptStatusOK( status ) && !printConnectInfo( cryptSession ) )
			{
			cryptDestroySession( cryptSession );
			return( FALSE );
			}
		}
	if( cryptStatusError( status ) )
		{
		if( testType == SSH_TEST_FINGERPRINT )
			{
			/* We've forced the connect to fail by using a dummy fingerprint,
			   everything is OK */
			if( isServer )
				fprintf( outputStream, "SVR: " );
			fputs( "SSH client rejected key with invalid fingerprint.", 
				   outputStream );
			cryptDestroySession( cryptSession );
			fputs( isServer ? "SVR: SSH server session succeeded.\n\n" : \
							  "SSH client session succeeded.\n\n", 
				   outputStream );
			fflush( outputStream );
			return( TRUE );
			}
		printExtError( cryptSession, isServer ? \
					   "SVR: Attempt to activate SSH server session" : \
					   "Attempt to activate SSH client session", status,
					   __LINE__ );
		if( isErrorTest || testType == SSH_TEST_PUBKEYAUTH_WRONGKEY || \
						   testType == SSH_TEST_PUBKEYAUTH_WRONGNAME || \
						   testType == SSH_TEST_PUBKEYAUTH_PASSWORD || \
						   testType == SSH_TEST_PREAUTH_MISSING || \
						   testType == SSH_TEST_PREAUTH_WRONG )
			{
			/* These tests are supposed to fail, so if this happens then the 
			   overall test has succeeded */
			cryptDestroySession( cryptSession );
			if( !isServer && \
				( testType != SSH_TEST_CORRUPT_MAC && \
				  testType != SSH_TEST_PUBKEYAUTH_WRONGKEY && \
				  testType != SSH_TEST_PUBKEYAUTH_WRONGNAME && \
				  testType != SSH_TEST_PUBKEYAUTH_PASSWORD && \
				  testType != SSH_TEST_PREAUTH_MISSING && \
				  testType != SSH_TEST_PREAUTH_WRONG) && \
				( status != CRYPT_ERROR_SIGNATURE && \
				  status != CRYPT_ERROR_BADDATA && \
				  status != CRYPT_ERROR_PERMISSION ) )
				{
				fprintf( outputStream, "Test returned status %d, should "
						 "have been %d or %d.\n", status, 
						 CRYPT_ERROR_SIGNATURE, CRYPT_ERROR_BADDATA );
				return( FALSE );
				}
			fputs( "  (This test checks error handling, so the failure "
				   "response is correct).\n\n", outputStream );
			return( TRUE );
			}
		if( localSession )
			{
			/* If it's a local session then none of the following soft-
			   failure conditions are valid */
			cryptDestroySession( cryptSession );
			return( FALSE );
			}
		if( !isServer && isServerDown( cryptSession, status ) )
			{
			cryptDestroySession( cryptSession );
			fputs( "  (Server could be down, faking it and "
				   "continuing...)\n\n", outputStream );
			return( CRYPT_ERROR_FAILED );
			}
		cryptDestroySession( cryptSession );
		if( status == CRYPT_ERROR_WRONGKEY )
			{
			/* This is another possible soft error condition, the default
			   username and password shouldn't be able to get into many
			   machines */
			cryptDestroySession( cryptSession );
			fputs( "  (Incorrect username/password, continuing...)\n\n", 
				   outputStream );
			return( TRUE );
			}
		if( status == CRYPT_ERROR_NOSECURE )
			{
			/* Another soft error condition, the server can't handle the
			   security level we want (usually occurs when trying to perform
			   an SSHv2 connect to an SSHv1 server) */
			cryptDestroySession( cryptSession );
			fputs( "  (Insufficiently secure protocol parameters, "
				   "continuing...)\n\n", outputStream );
			return( TRUE );
			}
		if( ( status == CRYPT_ERROR_NOTINITED || \
			  status == CRYPT_ERROR_NOTAVAIL ) && \
			!memcmp( sshInfo[ SSH2_SERVER_NO ].name, "www.gitlab", 10 ) )
			{
			/* Yet another soft-error condition, if we're using gitlab as our
			   test server then as of 2023 it only allows pubkey auth so we
			   can get a CRYPT_ERROR_NOTINITED rather than the more usual 
			   CRYPT_ERROR_WRONGKEY, and it only uses nonstandard crypto 
			   algorithms so we can get a CRYPT_ERROR_NOTAVAIL unless extended
			   SSH options are enabled */
			cryptDestroySession( cryptSession );
			fputs( "  (Pubkey needed for authentication unavailable, "
				   "continuing...)\n\n", outputStream );
			return( TRUE );
			}
		cryptDestroySession( cryptSession );
		return( FALSE );
		}
	if( testType == SSH_TEST_FINGERPRINT )
		{
		cryptDestroySession( cryptSession );
		fprintf( outputStream, "Attempt to connect with invalid key "
				 "fingerprint succeeded when it should\nhave failed, "
				 "line %d.\n", __LINE__ );
		return( FALSE );
		}
	if( testType == SSH_TEST_PUBKEYAUTH_WRONGKEY || \
		testType == SSH_TEST_PUBKEYAUTH_WRONGNAME )
		{
		cryptDestroySession( cryptSession );
		fprintf( outputStream, "Attempt to connect with invalid key or "
				 "user name succeeded when it\nshould have failed, "
				 "line %d.\n", __LINE__ );
		return( FALSE );
		}
	if( testType == SSH_TEST_PREAUTH_MISSING || \
		testType == SSH_TEST_PREAUTH_WRONG )
		{
		cryptDestroySession( cryptSession );
		fprintf( outputStream, "Attempt to connect with absent or invalid "
				 "pre-authentication succeeded when it\nshould have failed, "
				 "line %d.\n", __LINE__ );
		return( FALSE );
		}

	/* The error tests should cause handshake failures, so getting to this 
	   point is an error */
	if( isErrorTest && \
		( testType != SSH_TEST_CORRUPT_DATA && \
		  testType != SSH_TEST_CORRUPT_CHANNEL_DATA && \
		  testType != SSH_TEST_CORRUPT_CHANNEL_CLOSE && \
		  testType != SSH_TEST_CORRUPT_CHANNEL_REQUEST ) )
		{
		cryptDestroySession( cryptSession );
		fputs( "  (This test should have led to a handshake failure but "
			   "didn't, test has\n   failed).\n", outputStream );
		return( FALSE );
		}

	/* Report the session security info.  In standard SSH usage 
	   channel == session so we only try and report channel details if the
	   SSH extended capabilities are enabled */
	if( !printSecurityInfo( cryptSession, isServer, TRUE, FALSE, FALSE ) )
		{
		cryptDestroySession( cryptSession );
		return( FALSE );
		}
#ifdef USE_SSH_EXTENDED
	status = cryptGetAttribute( cryptSession, CRYPT_SESSINFO_SSH_CHANNEL,
								&channel );
	if( cryptStatusError( status ) )
		{
		cryptDestroySession( cryptSession );
		fprintf( outputStream, "cryptGetAttributeString() failed with "
				 "error code %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}
	fprintf( outputStream, "%sCurrent channel is #%d.\n", 
			 isServer ? "SVR: " : "", channel );
#endif /* USE_SSH_EXTENDED */
	fflush( outputStream );

	/* Report additional channel-specific information */
	if( isServer )
		{
		/* Display info on any channels that the client has opened.  As with
		   the earlier channel display, we can only do this if SSH extended
		   capabilities are enabled */
#ifdef USE_SSH_EXTENDED
		if( !printChannelInfo( cryptSession, testType, TRUE ) )
			{
			cryptDestroySession( cryptSession );
			return( FALSE );
			}
#endif /* USE_SSH_EXTENDED */

		/* Process any additional information that the client may throw
		   at us after the user-auth has completed */
		status = cryptPopData( cryptSession, buffer, BUFFER_SIZE,
							   &bytesCopied );
		if( cryptStatusOK( status ) && bytesCopied > 0 )
			{
			fprintf( outputStream, "SVR: Client sent additional %d bytes "
					 "post-handshake data.\n", bytesCopied );
			fflush( outputStream );
			}
#ifdef USE_SSH_EXTENDED
		else
			{
			if( status == CRYPT_ENVELOPE_RESOURCE )
				{
				/* The client performed additional control actions that were
				   handled inline as part of the data-pop, report the
				   details */
				if( !printChannelInfo( cryptSession, testType, TRUE ) )
					{
					cryptDestroySession( cryptSession );
					return( FALSE );
					}
				}
			}
#endif /* USE_SSH_EXTENDED */
		}

	/* If we're using the SFTP subsystem as a server, use the special-case
	   routines for this */
#if defined( WINDOWS_THREADS ) && 0
	if( testType == SSH_TEST_SUBSYSTEM )
		{
		if( isServer )
			{
			int sftpServer( const CRYPT_SESSION cryptSession );

			status = sftpServer( cryptSession );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				fprintf( outputStream, "SVR: Couldn't receive SFTP data "
						 "from client, status %d, line %d.\n", status, 
						 __LINE__ );
				return( FALSE );
				}
			cryptDestroySession( cryptSession );
			fputs( "SVR: SFTP server session succeeded.\n\n", outputStream );
			fflush( outputStream );
			return( TRUE );
			}
		else
			{
			int sftpClient( const CRYPT_SESSION cryptSession );

			status = sftpClient( cryptSession );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				fprintf( outputStream, "Couldn't send SFTP data to server, "
						 "status %d, line %d.\n", status, __LINE__ );
				return( FALSE );
				}
			cryptDestroySession( cryptSession );
			fputs( "SFTP client session succeeded.\n\n", outputStream );
			fflush( outputStream );
			return( TRUE );
			}
		}
#endif /* WINDOWS_THREADS && 0 */

#ifdef USE_SSH_EXTENDED
	/* If we're performing a multi-channel test, open a second channel (the
	   server handles this as part of its general connect-handling) */
	if( ( testType == SSH_TEST_MULTICHANNEL || \
		  testType == SSH_TEST_CORRUPT_CHANNEL_CLOSE || \
		  testType == SSH_TEST_CORRUPT_CHANNEL_REQUEST ) && !isServer )
		{
		status = createChannel( cryptSession, TEXT( "direct-tcpip" ),
								TEXT( LOCAL_HOST_NAME ":5678" ) );
		if( cryptStatusOK( status ) )
			{
			status = cryptGetAttribute( cryptSession,
										CRYPT_SESSINFO_SSH_CHANNEL,
										&channel );
			}
		if( cryptStatusOK( status ) )
			{
			status = cryptSetAttribute( cryptSession,
										CRYPT_SESSINFO_SSH_CHANNEL_ACTIVE,
										TRUE );
			}
		if( cryptStatusError( status ) )
			{
			cryptDestroySession( cryptSession );
			fprintf( outputStream, "Couldn't open second SSH chanel, "
					 "status %d, line %d.\n", status, __LINE__ );
			return( FALSE );
			}
		fprintf( outputStream, "Opened additional channel #%d to server.\n", 
				 channel );
		fflush( outputStream );
		}
#endif /* USE_SSH_EXTENDED */

	/* Send data over the SSH link */
	if( isServer )
		{
		/* Send a status message to the client */
		strcpy( buffer, "Welcome to cryptlib, now go away.\r\n" );
#if defined( __MVS__ ) || defined( __VMCMS__ )
		bufferToAscii( buffer, buffer );
#endif /* EBCDIC systems */
		status = cryptPushData( cryptSession, buffer, strlen( buffer ), 
								&bytesCopied );
		if( cryptStatusOK( status ) )
			status = cryptFlushData( cryptSession );
		if( cryptStatusError( status ) || bytesCopied != strlen( buffer ) )
			{
			cryptDestroySession( cryptSession );
			fprintf( outputStream, "SVR: Couldn't send data to client, "
					 "status %d, line %d.\n", status, __LINE__ );
			return( FALSE );
			}
		}

	/* Wait a bit while data arrives */
	delayThread( 2 );

	/* Print the first lot of output from the other side */
	status = printDataInfo( cryptSession, buffer, BUFFER_SIZE, &bytesCopied, 
							isServer, isErrorTest );
	if( cryptStatusError( status ) )
		{
		cryptDestroySession( cryptSession );

		/* Some tests are meant to fail because they check failure 
		   conditions, if we encounter one of these then we exit cleanly */
		if( status == SENTINEL )
			return( TRUE );

		return( FALSE );
		}

	/* If we're the server, echo the command to the client */
	if( isServer )
		{
		const int clientBytesCopied = bytesCopied;
		int dummy, i;

		/* If it's a multi-channel test, send the response back on a
		   different channel.  The currently-selected channel will be the
		   last one that the client opened (#2), so we can hardcode in
		   #1 for testing purposes */
		if( testType == SSH_TEST_MULTICHANNEL || \
			testType == SSH_TEST_CORRUPT_CHANNEL_CLOSE || \
			testType == SSH_TEST_CORRUPT_CHANNEL_REQUEST )
			{
			status = cryptSetAttribute( cryptSession,
										CRYPT_SESSINFO_SSH_CHANNEL, 1 );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				fprintf( outputStream, "SVR: Couldn't select channel #1 to "
						 "return data to client, status %d, line %d.\n", 
						 status, __LINE__ );
				return( FALSE );
				}
			}
		for( i = 0; i < clientBytesCopied; i++ )
			{
			if( buffer[ i ] < ' ' || buffer[ i ] >= 0x7F )
				buffer[ i ] = '.';
			}
		strcpy( buffer, "Input was [" );
#if defined( __MVS__ ) || defined( __VMCMS__ )
		bufferToAscii( buffer, buffer );
#endif /* EBCDIC systems */
		status = cryptPushData( cryptSession, buffer, strlen( buffer ), 
								&dummy );
		if( cryptStatusOK( status ) && clientBytesCopied > 0 )
			{
			status = cryptPushData( cryptSession, buffer, clientBytesCopied,
									&bytesCopied );
			}
		if( cryptStatusOK( status ) )
			{
			strcpy( buffer, "]\r\n" );
#if defined( __MVS__ ) || defined( __VMCMS__ )
			bufferToAscii( buffer, buffer );
#endif /* EBCDIC systems */
			status = cryptPushData( cryptSession, buffer, strlen( buffer ), 
									&dummy );
			}
		if( cryptStatusOK( status ) )
			status = cryptFlushData( cryptSession );
		if( cryptStatusError( status ) || bytesCopied != clientBytesCopied )
			{
			cryptDestroySession( cryptSession );
			fprintf( outputStream, "SVR: Couldn't send data to client, "
					 "status %d, line %d.\n", status, __LINE__ );
			return( FALSE );
			}
		}
	else
		{
		/* We're the client, if it's a session to a Unix ssh server, send a
		   sample command and display the output */
		if( !localSession )
			{
			/* Send a command to the server and get the results */
			strcpy( buffer, "ls -l | head -25\n" );
#if defined( __MVS__ ) || defined( __VMCMS__ )
			bufferToAscii( buffer, buffer );
#endif /* EBCDIC systems */
			status = cryptPushData( cryptSession, buffer, strlen( buffer ),
									&bytesCopied );
			if( cryptStatusOK( status ) )
				status = cryptFlushData( cryptSession );
			if( cryptStatusError( status ) || \
				bytesCopied != strlen( buffer ) )
				{
				cryptDestroySession( cryptSession );
				fprintf( outputStream, "Couldn't send data to server, "
						 "status %d, line %d.\n", status, __LINE__ );
				return( FALSE );
				}
			fputs( "Sent 'ls -l | head -25'", outputStream );
			delayThread( 3 );
			status = printDataInfo( cryptSession, buffer, BUFFER_SIZE, 
									&bytesCopied, isServer, isErrorTest );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				return( FALSE );
				}
			}
		else
			{
			/* It's a local session, just send a simple text string for
			   testing */
			strcpy( buffer, "Some test data" );
#if defined( __MVS__ ) || defined( __VMCMS__ )
			bufferToAscii( buffer, buffer );
#endif /* EBCDIC systems */
			status = cryptPushData( cryptSession, buffer, strlen( buffer ),
									&bytesCopied );
			if( cryptStatusOK( status ) )
				status = cryptFlushData( cryptSession );
			if( cryptStatusError( status ) || \
				bytesCopied != strlen( buffer ) )
				{
				cryptDestroySession( cryptSession );
				fprintf( outputStream, "Couldn't send data to server, "
						 "status %d, line %d.\n", status, __LINE__ );
				return( FALSE );
				}

			/* Make sure that we stay around long enough to get the
			   server's response */
			delayThread( 1 );

			/* Print the server's response */
			status = printDataInfo( cryptSession, buffer, BUFFER_SIZE, 
									&bytesCopied, isServer, isErrorTest );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				return( FALSE );
				}
			}
		}

	/* If we're performing a multi-channel test, close the second channel */
	if( testType == SSH_TEST_MULTICHANNEL || \
		testType == SSH_TEST_CORRUPT_CHANNEL_CLOSE || \
		testType == SSH_TEST_CORRUPT_CHANNEL_REQUEST )
		{
		if( isServer )
			{
			/* Perform a dummy pop to process the channel close */
			status = cryptPopData( cryptSession, buffer, BUFFER_SIZE, 
								   &bytesCopied );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				printExtError( cryptSession, 
							   "SVR: Processing of second channel close", 
							   status, __LINE__ );
				return( FALSE );
				}
			}
		else
			{
			/* Close the current channel */
			status = cryptSetAttribute( cryptSession,
										CRYPT_SESSINFO_SSH_CHANNEL_ACTIVE,
										FALSE );
			if( cryptStatusError( status ) )
				{
				cryptDestroySession( cryptSession );
				fprintf( outputStream, "Couldn't close second SSH channel, "
						 "status %d, line %d.\n", status, __LINE__ );
				return( FALSE );
				}
			fprintf( outputStream, "Closed second channel to server.\n" );
			fflush( outputStream );
			}
		}

	/* Clean up */
	status = cryptDestroySession( cryptSession );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "cryptDestroySession() failed with error "
				 "code %d, line %d.\n", status, __LINE__ );
		return( FALSE );
		}

	/* If we were expecting an error and got this far, this is in turn an 
	   error */
	if( isErrorTest )
		{
		fputs( "  (This test should have led to a failure but didn't, test "
			   "has failed).\n", outputStream );
		return( FALSE );
		}

	fputs( isServer ? "SVR: SSH server session succeeded.\n\n" : \
					  "SSH client session succeeded.\n\n", outputStream );
	fflush( outputStream );
	return( TRUE );
	}

int testSessionSSH( void )
	{
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_NORMAL, FALSE ) );
	}
int testSessionSSHPubkeyAuth( void )
	{
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_PUBKEYAUTH, FALSE ) );
	}
int testSessionSSHPubkeyAuthWrongKey( void )
	{
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_PUBKEYAUTH_WRONGKEY, FALSE ) );
	}
int testSessionSSHPubkeyAuthWrongName( void )
	{
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_PUBKEYAUTH_WRONGNAME, FALSE ) );
	}
int testSessionSSHPubkeyAuthPassword( void )
	{
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_PUBKEYAUTH_PASSWORD, FALSE ) );
	}
int testSessionSSHPreauth( void )
	{
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_PREAUTH, FALSE ) );
	}
int testSessionSSHPortforward( void )
	{
#ifdef USE_SSH_EXTENDED
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_PORTFORWARDING, FALSE ) );
#else
	return( TRUE );
#endif /* USE_SSH_EXTENDED */
	}
int testSessionSSHExec( void )
	{
#ifdef USE_SSH_EXTENDED
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_EXEC, FALSE ) );
#else
	return( TRUE );
#endif /* USE_SSH_EXTENDED */
	}
int testSessionSSH_SFTP( void )
	{
#ifdef USE_SSH_EXTENDED
	return( connectSSH( CRYPT_SESSION_SSH, SSH_TEST_SUBSYSTEM, FALSE ) );
#else
	return( TRUE );
#endif /* USE_SSH_EXTENDED */
	}
int testSessionSSHServer( void )
	{
	int status;

	createMutex();
	status = connectSSH( CRYPT_SESSION_SSH_SERVER, SSH_TEST_CONFIRMAUTH, FALSE );
	destroyMutex();

	return( status );
	}
int testSessionSSHServerPubkeyAuth( void )
	{
	int status;

	createMutex();
	status = connectSSH( CRYPT_SESSION_SSH_SERVER, SSH_TEST_PUBKEYAUTH, FALSE );
	destroyMutex();

	return( status );
	}
int testSessionSSHServerPreauth( void )
	{
	int status;

	createMutex();
	status = connectSSH( CRYPT_SESSION_SSH_SERVER, SSH_TEST_PREAUTH, TRUE );
	destroyMutex();

	return( status );
	}
int testSessionSSHServerTOTPAuth( void )
	{
	int status;

	createMutex();
	status = connectSSH( CRYPT_SESSION_SSH_SERVER, SSH_TEST_TOTPAUTH, TRUE );
	destroyMutex();

	return( status );
	}
int testSessionSSH_SFTPServer( void )
	{
#ifdef USE_SSH_EXTENDED
	int status;

	createMutex();
	status = connectSSH( CRYPT_SESSION_SSH_SERVER, SSH_TEST_SUBSYSTEM, FALSE );
	destroyMutex();

	return( status );
#else
	return( TRUE );
#endif /* USE_SSH_EXTENDED */
	}

/* Perform a client/server loopback test */

#ifdef TEST_SESSION_LOOPBACK

#ifdef WINDOWS_THREADS
  static unsigned __stdcall ssh2ServerThread( void *arg )
#else
  static void *ssh2ServerThread( void *arg )
#endif /* Windows vs. Unix threads */
	{
	const int argValue = *( ( int * ) arg );

	connectSSH( CRYPT_SESSION_SSH_SERVER, argValue, TRUE );
	THREAD_EXIT();
	}

static int sshClientServer( const SSH_TEST_TYPE testType )
	{
	THREAD_HANDLE hThread;
#ifdef __WINDOWS__
	unsigned threadID;
#endif /* __WINDOWS__ */
	int arg = testType, status;

	/* If this is a test that requires a database keyset, make sure that one 
	   is available */
	if( ( testType == SSH_TEST_PUBKEYAUTH || \
		  testType == SSH_TEST_PUBKEYAUTH_WRONGKEY || \
		  testType == SSH_TEST_PUBKEYAUTH_WRONGNAME || \
		  testType == SSH_TEST_PUBKEYAUTH_PASSWORD ) && \
		!checkDatabaseKeysetAvailable() )
		{
		fputs( "Skipping test due to unavailability of database "
			   "keysets.\n\n", outputStream );
		return( TRUE );
		}

	/* Start the server */
	createMutex();
#ifdef __WINDOWS__
	hThread = ( HANDLE ) _beginthreadex( NULL, 0, ssh2ServerThread, &arg, 0, 
										 &threadID );
#else
	pthread_create( &hThread, NULL, ssh2ServerThread, &arg );
#endif /* Windows vs. Unix threads */
	THREAD_SLEEP( 1000 );

	/* Connect to the local server */
	status = connectSSH( CRYPT_SESSION_SSH, testType, TRUE );
	waitForThread( hThread );
	destroyMutex();
	return( status );
	}

int testSessionSSHClientServer( void )
	{
	return( sshClientServer( SSH_TEST_NORMAL ) );
	}
int testSessionSSHClientServerDsaKey( void )
	{
	return( sshClientServer( SSH_TEST_DSAKEY ) );
	}
int testSessionSSHClientServerEccKey( void )
	{
	/* ECC algorithms may not be available so we only run this test if 
	   they've been enabled */
	if( cryptQueryCapability( CRYPT_ALGO_ECDSA, \
							  NULL ) == CRYPT_ERROR_NOTAVAIL )
		return( TRUE );

	return( sshClientServer( SSH_TEST_ECCKEY ) );
	}
int testSessionSSHClientServerPubkeyAuth( void )
	{
	return( sshClientServer( SSH_TEST_PUBKEYAUTH ) );
	}
int testSessionSSHClientServerPubkeyAuthWrongKey( void )
	{
	return( sshClientServer( SSH_TEST_PUBKEYAUTH_WRONGKEY ) );
	}
int testSessionSSHClientServerPubkeyAuthWrongName( void )
	{
	return( sshClientServer( SSH_TEST_PUBKEYAUTH_WRONGNAME ) );
	}
int testSessionSSHClientServerPubkeyAuthPassword( void )
	{
	return( sshClientServer( SSH_TEST_PUBKEYAUTH_PASSWORD ) );
	}
int testSessionSSHClientServerPreauth( void )
	{
	return( sshClientServer( SSH_TEST_PREAUTH ) );
	}
int testSessionSSHClientServerPreauthMissing( void )
	{
	return( sshClientServer( SSH_TEST_PREAUTH_MISSING ) );
	}
int testSessionSSHClientServerPreauthWrong( void )
	{
	return( sshClientServer( SSH_TEST_PREAUTH_WRONG ) );
	}
int testSessionSSHClientServerFingerprint( void )
	{
	/* Note that this test tests the correct functioning of a refused
	   connection when an incorrect key fingerprint is used, so it's
	   supposed to fail */
	return( sshClientServer( SSH_TEST_FINGERPRINT ) );
	}
int testSessionSSHClientServerSFTP( void )
	{
	return( sshClientServer( SSH_TEST_SUBSYSTEM ) );
	}
int testSessionSSHClientServerPortForward( void )
	{
#ifdef USE_SSH_EXTENDED
	return( sshClientServer( SSH_TEST_PORTFORWARDING ) );
#else
	return( TRUE );
#endif /* USE_SSH_EXTENDED */
	}
int testSessionSSHClientServerExec( void )
	{
#ifdef USE_SSH_EXTENDED
	return( sshClientServer( SSH_TEST_EXEC ) );
#else
	return( TRUE );
#endif /* USE_SSH_EXTENDED */
	}
int testSessionSSHClientServerMultichannel( void )
	{
#ifdef USE_SSH_EXTENDED
	return( sshClientServer( SSH_TEST_MULTICHANNEL ) );
#else
	return( TRUE );
#endif /* USE_SSH_EXTENDED */
	}
int testSessionSSHClientServerDualThread( void )
	{
	return( sshClientServer( SSH_TEST_DUALTHREAD ) );
	}
int testSessionSSHClientServerDebugCheck( void )
	{
#if defined( CONFIG_FAULTS ) && !defined( NDEBUG )
	cryptSetFaultType( FAULT_NONE );
	if( !sshClientServer( SSH_TEST_CORRUPT_HANDSHAKE ) )
		return( FALSE );	/* Detect corruption of handshake data */
	if( !sshClientServer( SSH_TEST_CORRUPT_KEYEX_CLIENT ) )
		return( FALSE );	/* Detect corruption of client keyex */
	if( !sshClientServer( SSH_TEST_CORRUPT_KEYEX_SERVER ) )
		return( FALSE );	/* Detect corruption of server keyex */
	if( !sshClientServer( SSH_TEST_CORRUPT_EXCHANGE_HASH ) )
		return( FALSE );	/* Detect corruption of exchange hash */
	if( !sshClientServer( SSH_TEST_BADSIG_HASH ) )
		return( FALSE );	/* Detect corruption of hash for signature */
	if( !sshClientServer( SSH_TEST_BADSIG_SIG ) )
		return( FALSE );	/* Detect corruption of signature data */
	if( !sshClientServer( SSH_TEST_WRONG_CERT ) )
		return( FALSE );	/* Detect wrong key for server */
#if 0	/* See comments in fault.h */
	if( !sshClientServer( SSH_TEST_CORRUPT_USERNAME ) )
		return( FALSE );	/* Detect wrong username */
	if( !sshClientServer( SSH_TEST_CORRUPT_PASSWORD ) )
		return( FALSE );	/* Detect wrong username */
#endif /* 0 */
	if( !sshClientServer( SSH_TEST_CORRUPT_DATA ) )
		return( FALSE );	/* Detect corruption of payload data */
	if( !sshClientServer( SSH_TEST_CORRUPT_MAC ) )
		return( FALSE );	/* Detect corruption of payload MAC */
	if( !sshClientServer( SSH_TEST_CORRUPT_CHANNEL_OPEN ) )
		return( FALSE );	/* Detect corruption of payload data */
	if( !sshClientServer( SSH_TEST_CORRUPT_CHANNEL_DATA ) )
		return( FALSE );	/* Detect corruption of payload data */
#if 0	/* See comments in fault.h */
	if( !sshClientServer( SSH_TEST_CORRUPT_CHANNEL_CLOSE ) )
		return( FALSE );	/* Detect corruption of payload data */
	if( !sshClientServer( SSH_TEST_CORRUPT_CHANNEL_REQUEST ) )
		return( FALSE );	/* Detect corruption of payload data */
#endif /* 0 */
	cryptSetFaultType( FAULT_NONE );
#endif /* CONFIG_FAULTS && Debug */
	return( TRUE );
	}
#endif /* TEST_SESSION_LOOPBACK */

/****************************************************************************
*																			*
*							SFTP Routines for SSH							*
*																			*
****************************************************************************/

/* The following code re-uses internal parts of cryptlib, so it provides its
   own dummy functions as stubs for cryptlib-internal ones.  Since this would
   produce link errors when cryptlib is statically linked with the test
   app, we only enable it for the threaded Windows (i.e. DLL) self-test */

#if defined( WINDOWS_THREADS ) && 0

/* The following code is a bare-bones SFTP implementation created purely for
   interop/performance testing of cryptlib's SSH implementation.  It does
   the bare minimum needed to set up an SFTP transfer, and shouldn't be used
   for anything other than testing.

   Rather than creating our own versions of code already present in cryptlib,
   we pull in the cryptlib code wholesale here unless we've built cryptlib as
   a static lib, in which case it'll already be present.  This is a pretty
   ugly hack, but saves having to copy over a pile of cryptlib code.

   Because cryptlib has an internal BYTE type, we need to no-op it out before
   we pull in any cryptlib code */

#undef BYTE
#define BYTE	_BYTE_DUMMY
#ifdef BOOLEAN
  #undef BOOLEAN	/* May be a typedef or a #define */
#endif /* BOOLEAN */
#ifndef STATIC_LIB
  #include "enc_dec/misc_rw.c"
#endif /* Non-static lib cryptlib */
#undef BYTE
#define BYTE	unsigned char

/* Replacements for cryptlib stream routines */

#define sMemDisconnect(	stream )
#define sMemConnect					sMemOpen
#define stell( stream )				( ( stream )->bufPos )

int sSetError( STREAM *stream, const int status )
	{
	stream->status = status;
	return( status );
	}

int sMemOpen( STREAM *stream, void *buffer, const int bufSize )
	{
	memset( stream, 0, sizeof( STREAM ) );
	stream->buffer = ( void * ) buffer;
	stream->bufEnd = bufSize;
	return( CRYPT_OK );
	}

int sread( STREAM *stream, void *buffer, const int count )
	{
	if( stream->bufPos + count > stream->bufEnd )
		{
		sSetError( stream, CRYPT_ERROR_UNDERFLOW );
		return( CRYPT_ERROR_UNDERFLOW );
		}
	memcpy( buffer, stream->buffer + stream->bufPos, count );
	stream->bufPos += count;
	return( CRYPT_OK );
	}

int swrite( STREAM *stream, const void *buffer, const int count )
	{
	if( stream->buffer != NULL )
		{
		if( stream->bufPos + count > stream->bufEnd )
			{
			sSetError( stream, CRYPT_ERROR_OVERFLOW );
			return( CRYPT_ERROR_OVERFLOW );
			}
		memcpy( stream->buffer + stream->bufPos, buffer, count );
		}
	stream->bufPos += count;
	return( CRYPT_OK );
	}

int sgetc( STREAM *stream )
	{
	int ch;

	if( stream->bufPos + 1 > stream->bufEnd )
		{
		sSetError( stream, CRYPT_ERROR_UNDERFLOW );
		return( CRYPT_ERROR_UNDERFLOW );
		}
	ch = stream->buffer[ stream->bufPos ];
	stream->bufPos++;
	return( ch );
	}

int sputc( STREAM *stream, const int data )
	{
	if( stream->buffer != NULL )
		{
		if( stream->bufPos + 1 > stream->bufEnd )
			{
			sSetError( stream, CRYPT_ERROR_OVERFLOW );
			return( CRYPT_ERROR_OVERFLOW );
			}
		stream->buffer[ stream->bufPos++ ] = data;
		}
	else
		stream->bufPos++;
	return( CRYPT_OK );
	}

int sseek( STREAM *stream, const long position )
	{
	return( 0 );
	}

int sPeek( STREAM *stream )
	{
	return( 0 );
	}

int sSkip( STREAM *stream, const long offset )
	{
	return( 0 );
	}

int sMemDataLeft( const STREAM *stream )
	{
	return( stream->bufSize - stream->bufPos );
	}

/* Dummy routines needed in misc_rw.c */

int BN_num_bits( const BIGNUM *a ) { return 0; }
int BN_high_bit( BIGNUM *a ) { return 0; }
BIGNUM *BN_bin2bn( const unsigned char *s, int len, BIGNUM *ret ) { return NULL; }
int	BN_bn2bin( const BIGNUM *a, unsigned char *to ) { return 0; }
int importBignum( BIGNUM *bn, const void *buffer, const int length,
				  const int minLength, const int maxLength, 
				  const BIGNUM *maxRange, const BOOLEAN checkKeysize ) { return -1; }
int exportBignum( void *data, const int dataMaxLength, int *dataLength,
				  const void *bignumPtr ) { return -1; }

/* SFTP command types */

#define SSH_FXP_INIT			1
#define SSH_FXP_VERSION			2
#define SSH_FXP_OPEN			3
#define SSH_FXP_CLOSE			4
#define SSH_FXP_READ			5
#define SSH_FXP_WRITE			6
#define SSH_FXP_LSTAT			7
#define SSH_FXP_FSTAT			8
#define SSH_FXP_SETSTAT			9
#define SSH_FXP_FSETSTAT		10
#define SSH_FXP_OPENDIR			11
#define SSH_FXP_READDIR			12
#define SSH_FXP_REMOVE			13
#define SSH_FXP_MKDIR			14
#define SSH_FXP_RMDIR			15
#define SSH_FXP_REALPATH		16
#define SSH_FXP_STAT			17
#define SSH_FXP_RENAME			18
#define SSH_FXP_READLINK		19
#define SSH_FXP_SYMLINK			20
#define SSH_FXP_STATUS			101
#define SSH_FXP_HANDLE			102
#define SSH_FXP_DATA			103
#define SSH_FXP_NAME			104
#define SSH_FXP_ATTRS			105

/* SFTP attribute presence flags.  When these flags are set, the
   corresponding file attribute value is present */

#define SSH_FILEXFER_ATTR_SIZE			0x01
#define SSH_FILEXFER_ATTR_UIDGID		0x02
#define SSH_FILEXFER_ATTR_PERMISSIONSv3	0x04
#define SSH_FILEXFER_ATTR_ACMODTIME		0x08
#define SSH_FILEXFER_ATTR_ACCESSTIME	0x08
#define SSH_FILEXFER_ATTR_CREATETIME	0x10
#define SSH_FILEXFER_ATTR_MODIFYTIME	0x20
#define SSH_FILEXFER_ATTR_PERMISSIONSv4	0x40
#define SSH_FILEXFER_ATTR_ACL			0x40
#define SSH_FILEXFER_ATTR_OWNERGROUP	0x80
#define SSH_FILEXFER_ATTR_SUBSECOND_TIMES 0x100
#define SSH_FILEXFER_ATTR_EXTENDED		0x80000000

/* SFTP file open/create flags */

#define SSH_FXF_READ			0x01
#define SSH_FXF_WRITE			0x02
#define SSH_FXF_APPEND			0x04
#define SSH_FXF_CREAT			0x08
#define SSH_FXF_TRUNC			0x10
#define SSH_FXF_EXCL			0x20
#define SSH_FXF_TEXT			0x40

/* SFTP file types */

#define SSH_FILETYPE_REGULAR	1
#define SSH_FILETYPE_DIRECTORY	2
#define SSH_FILETYPE_SYMLINK	3
#define SSH_FILETYPE_SPECIAL	4
#define SSH_FILETYPE_UNKNOWN	5

/* SFTP status codes */

#define SSH_FX_OK				0
#define SSH_FX_EOF				1
#define SSH_FX_NO_SUCH_FILE		2
#define SSH_FX_PERMISSION_DENIED 3
#define SSH_FX_FAILURE			4
#define SSH_FX_BAD_MESSAGE		5
#define SSH_FX_NO_CONNECTION	6
#define SSH_FX_CONNECTION_LOST	7
#define SSH_FX_OP_UNSUPPORTED	8
#define SSH_FX_INVALID_HANDLE	9
#define SSH_FX_NO_SUCH_PATH		10
#define SSH_FX_FILE_ALREADY_EXISTS 11
#define SSH_FX_WRITE_PROTECT	12
#define SSH_FX_NO_MEDIA			13

/* A structure to contain SFTP file attributes */

typedef struct {
	BOOLEAN isDirectory;		/* Whether directory or normal file */
	long size;					/* File size */
	int permissions;			/* File permissions */
	time_t ctime, atime, mtime;	/* File create, access, mod times */
	} SFTP_ATTRS;

/* A structure to contain SFTP session information */

#define MAX_HANDLE_SIZE		16

typedef struct {
	int version;				/* SFTP protocol version */
	long id;					/* Session ID */
	BYTE handle[ MAX_HANDLE_SIZE ];	/* File handle */
	int handleSize;
	} SFTP_INFO;

/* Read/write SFTP attributes.  This changed completely from v3 to v4, so we
   have to treat them as special-cases:

	uint32		flags
	byte		file_type
	uint64		size (present if ATTR_SIZE)
	string		owner (present if ATTR_OWNERGROUP)
	string		group (present if ATTR_OWNERGROUP)
	uint32		permissions (present if ATTR_PERMISSIONS)
	uint64		atime (present if ATTR_ACCESSTIME)
	uint32		atime_nseconds (present if ATTR_SUBSECOND_TIMES)
	uint64		createtime (present if ATTR_CREATETIME)
	uint32		createtime_nseconds (present if ATTR_SUBSECOND_TIMES)
	uint64		mtime (present if ATTR_MODIFYTIME)
	uint32		mtime_nseconds (present if ATTR_SUBSECOND_TIMES)
	string		acl (present if ATTR_ACL)
	uint32		extended_count (present if ATTR_EXTENDED)
		string	extended_type
		string	extended_value
   		[ extended_count type/value pairs ] */

static int sizeofAttributes( SFTP_ATTRS *attributes, const int version )
	{
	int size = UINT32_SIZE;	/* Flags */

	if( version < 4 )
		{
		if( attributes->size != CRYPT_UNUSED )
			size += UINT64_SIZE;
		if( attributes->permissions != CRYPT_UNUSED )
			size += UINT32_SIZE;
		if( attributes->atime )
			size += UINT32_SIZE;
		if( attributes->mtime )
			size += UINT32_SIZE;
		}
	else
		{
		size++;
		if( attributes->size != CRYPT_UNUSED )
			size += UINT64_SIZE;
		if( attributes->permissions != CRYPT_UNUSED )
			size += UINT32_SIZE;
		if( attributes->ctime )
			size += UINT64_SIZE;
		if( attributes->atime )
			size += UINT64_SIZE;
		if( attributes->mtime )
			size += UINT64_SIZE;
		}

	return( size );
	}

static int readAttributes( STREAM *stream, SFTP_ATTRS *attributes, const int version )
	{
	long flags;

	memset( attributes, 0, sizeof( SFTP_ATTRS ) );
	attributes->permissions = CRYPT_UNUSED;
	attributes->size = CRYPT_UNUSED;

	/* Read basic attribute information: File size, and owner, and
	   permissions */
	flags = readUint32( stream );
	if( cryptStatusError( flags ) )
		return( flags );
	if( version < 4 )
		{
		if( flags & SSH_FILEXFER_ATTR_SIZE )
			readUint64( stream, &attributes->size );
		if( flags & SSH_FILEXFER_ATTR_UIDGID )
			{
			readUint32( stream );
			readUint32( stream );
			}
		if( flags & SSH_FILEXFER_ATTR_PERMISSIONSv3 )
			attributes->permissions = readUint32( stream );

		/* Read file access and modify times */
		if( flags & SSH_FILEXFER_ATTR_ACMODTIME )
			{
			readUint32Time( stream, &attributes->atime );
			readUint32Time( stream, &attributes->mtime );
			}
		}
	else
		{
		if( flags & SSH_FILEXFER_ATTR_SIZE )
			readUint64( stream, &attributes->size );
		if( flags & SSH_FILEXFER_ATTR_OWNERGROUP )
			{
			readString32( stream, NULL, 0, NULL );
			readString32( stream, NULL, 0, NULL );
			}
		if( flags & SSH_FILEXFER_ATTR_PERMISSIONSv4 )
			attributes->permissions = readUint32( stream );

		/* Read file create, access, and modify times */
		if( flags & SSH_FILEXFER_ATTR_ACCESSTIME )
			{
			readUint64Time( stream, &attributes->atime );
			if( flags & SSH_FILEXFER_ATTR_SUBSECOND_TIMES )
				readUint32( stream );
			}
		if( flags & SSH_FILEXFER_ATTR_CREATETIME )
			{
			readUint64Time( stream, &attributes->ctime );
			if( flags & SSH_FILEXFER_ATTR_SUBSECOND_TIMES )
				readUint32( stream );
			}
		if( flags & SSH_FILEXFER_ATTR_MODIFYTIME )
			{
			readUint64Time( stream, &attributes->mtime );
			if( flags & SSH_FILEXFER_ATTR_SUBSECOND_TIMES )
				readUint32( stream );
			}
		}

	/* Read ACLs and extended attribute type/value pairs, the one thing that
	   stayed the same from v3 to v4 */
	if( flags & SSH_FILEXFER_ATTR_ACL )
		readString32( stream, NULL, 0, NULL );
	if( flags & SSH_FILEXFER_ATTR_EXTENDED )
		{
		int extAttrCount = readUint32( stream );

		if( cryptStatusError( extAttrCount ) )
			return( extAttrCount );
		while( extAttrCount > 0 )
			{
			readString32( stream, NULL, 0, NULL );
			readString32( stream, NULL, 0, NULL );
			extAttrCount--;
			}
		}

	return( sGetStatus( stream ) );
	}

static int writeAttributes( STREAM *stream, SFTP_ATTRS *attributes, const int version )
	{
	int flags = 0;

	if( version < 4 )
		{
		/* Indicate which attribute values we're going to write */
		if( attributes->size != CRYPT_UNUSED )
			flags |= SSH_FILEXFER_ATTR_SIZE;
		if( attributes->permissions != CRYPT_UNUSED )
			flags |= SSH_FILEXFER_ATTR_PERMISSIONSv3;
		if( attributes->atime )
			flags |= SSH_FILEXFER_ATTR_ACMODTIME;
		writeUint32( stream, flags );

		/* Write the optional attributes */
		if( attributes->size != CRYPT_UNUSED )
			writeUint64( stream, attributes->size );
		if( attributes->permissions != CRYPT_UNUSED )
			writeUint32( stream, attributes->permissions );
		if( attributes->atime )
			{
			writeUint32Time( stream, attributes->atime );
			writeUint32Time( stream, attributes->mtime );
			}
		}
	else
		{
		/* Indicate which attribute values we're going to write */
		if( attributes->size != CRYPT_UNUSED )
			flags |= SSH_FILEXFER_ATTR_SIZE;
		if( attributes->permissions != CRYPT_UNUSED )
			flags |= SSH_FILEXFER_ATTR_PERMISSIONSv4;
		if( attributes->ctime )
			flags |= SSH_FILEXFER_ATTR_CREATETIME;
		if( attributes->atime )
			flags |= SSH_FILEXFER_ATTR_ACCESSTIME;
		if( attributes->mtime )
			flags |= SSH_FILEXFER_ATTR_MODIFYTIME;
		writeUint32( stream, flags );
		sputc( stream, attributes->isDirectory ? \
					   SSH_FILETYPE_DIRECTORY : SSH_FILETYPE_REGULAR );

		/* Write the optional attributes */
		if( attributes->size != CRYPT_UNUSED )
			writeUint64( stream, attributes->size );
		if( attributes->permissions != CRYPT_UNUSED )
			writeUint32( stream, attributes->permissions );
		if( attributes->ctime )
			writeUint64Time( stream, attributes->ctime );
		if( attributes->atime )
			writeUint64Time( stream, attributes->atime );
		if( attributes->mtime )
			writeUint64Time( stream, attributes->mtime );
		}

	return( sGetStatus( stream ) );
	}

/* Read/write SFTP status:

	uint32		id
	uint32		error/status code
	string		error message (ISO-10646 UTF-8 [RFC-2279])
	string		language tag (as defined in [RFC-1766]) */

static int sizeofStatus( const char *sshStatusString )
	{
	return( UINT32_SIZE + UINT32_SIZE + \
			( UINT32_SIZE + strlen( sshStatusString ) ) + \
			UINT32_SIZE );
	}

static int readStatus( STREAM *stream, SFTP_INFO *info )
	{
	static const struct {
		const int sftpStatus, cryptlibStatus;
		} sftpStatusMap[] = {
		{ SSH_FX_OK, CRYPT_OK },
		{ SSH_FX_EOF, CRYPT_ERROR_COMPLETE },
		{ SSH_FX_NO_SUCH_FILE, CRYPT_ERROR_NOTFOUND },
		{ SSH_FX_PERMISSION_DENIED, CRYPT_ERROR_PERMISSION },
		{ SSH_FX_FAILURE, CRYPT_ERROR_FAILED },
		{ SSH_FX_BAD_MESSAGE, CRYPT_ERROR_BADDATA },
		{ SSH_FX_NO_CONNECTION, CRYPT_ERROR_FAILED },
		{ SSH_FX_CONNECTION_LOST, CRYPT_ERROR_FAILED },
		{ SSH_FX_OP_UNSUPPORTED, CRYPT_ERROR_NOTAVAIL },
		{ SSH_FX_INVALID_HANDLE, CRYPT_ERROR_BADDATA },
		{ SSH_FX_NO_SUCH_PATH, CRYPT_ERROR_NOTFOUND },
		{ SSH_FX_FILE_ALREADY_EXISTS, CRYPT_ERROR_DUPLICATE },
		{ SSH_FX_WRITE_PROTECT, CRYPT_ERROR_PERMISSION },
		{ SSH_FX_NO_MEDIA, CRYPT_ERROR_FAILED },
		{ CRYPT_ERROR, CRYPT_ERROR_FAILED }
		};
	int value, i, status;

	/* Read the status info and make sure that it's valid */
	value = readUint32( stream );
	status = readUint32( stream );
	if( cryptStatusError( status ) )
		return( status );
	if( value != info->id )
		return( CRYPT_ERROR_BADDATA );

	/* Translate the SFTP status into a cryptlib status */
	for( i = 0; sftpStatusMap[ i ].sftpStatus != CRYPT_ERROR && \
				sftpStatusMap[ i ].sftpStatus != status; i++ );
	status = sftpStatusMap[ i ].cryptlibStatus;

	return( status );
	}

static int writeStatus( STREAM *stream, SFTP_INFO *info, const int sshStatus,
						const char *sshStatusString )
	{
	writeUint32( stream, info->id );
	writeUint32( stream, sshStatus );
	writeString32( stream, sshStatusString, strlen( sshStatusString ) );
	return( writeString32( stream, "", 0 ) );
	}

static int readSftpPacket( const CRYPT_SESSION cryptSession, void *buffer,
						   const int bufSize )
	{
	int bytesCopied, status;

	status = cryptPopData( cryptSession, buffer, BUFFER_SIZE, &bytesCopied );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "SVR: Couldn't read data from SFTP client, "
				 "status %d, line %d.\n", status, __LINE__ );
		return( status );
		}
	return( bytesCopied > 0 ? bytesCopied : CRYPT_ERROR_UNDERFLOW );
	}

static int writeSftpPacket( const CRYPT_SESSION cryptSession, const void *data,
							const int length )
	{
	int bytesCopied, status;

	status = cryptPushData( cryptSession, data, length, &bytesCopied );
	if( cryptStatusOK( status ) )
		status = cryptFlushData( cryptSession );
	if( cryptStatusError( status ) )
		{
		fprintf( outputStream, "SVR: Couldn't write data to SFTP client, "
				 "status %d, line %d.\n", status, __LINE__ );
		return( status );
		}
	if( bytesCopied < length )
		{
		fprintf( outputStream, "SVR: Only wrote %d of %d bytes of SFTP "
				 "data, line %d.\n", bytesCopied, length, __LINE__ );
		return( status );
		}
	return( CRYPT_OK );
	}

static int sendAck( const CRYPT_SESSION cryptSession, SFTP_INFO *sftpInfo )
	{
	STREAM stream;
	BYTE buffer[ 128 ];
	int length;

	/* Ack an SFTP packet */
	sMemOpen( &stream, buffer, 128 );
	writeUint32( &stream, 1 + sizeofStatus( "" ) );
	sputc( &stream, SSH_FXP_STATUS );
	writeStatus( &stream, sftpInfo, SSH_FX_OK, "" );
	length = stell( &stream );
	sMemDisconnect( &stream );
	return( writeSftpPacket( cryptSession, buffer, length ) );
	}

int sftpServer( const CRYPT_SESSION cryptSession )
	{
	STREAM stream;
	SFTP_ATTRS sftpAttrs;
	SFTP_INFO sftpInfo;
	BYTE buffer[ BUFFER_SIZE ], nameBuffer[ 128 ];
	time_t xferTime;
	long xferCount = 0, dataLength;
	int length, value, status;

	cryptSetAttribute( cryptSession, CRYPT_OPTION_NET_READTIMEOUT, 30 );

	memset( &sftpInfo, 0, sizeof( SFTP_INFO ) );

	/* Read the client's FXP_INIT and send our response */
	status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
	if( cryptStatusError( status ) )
		return( status );
	sMemConnect( &stream, buffer, status );
	length = readUint32( &stream );
	value = sgetc( &stream );
	if( ( length != 1 + 4 ) || ( value != SSH_FXP_INIT ) )
		return( CRYPT_ERROR_BADDATA );
	sftpInfo.version = readUint32( &stream );
	sMemDisconnect( &stream );
	fprintf( outputStream, "SVR: Client supports SFTP version %d.\n", 
			 sftpInfo.version );
	sMemOpen( &stream, buffer, BUFFER_SIZE );
	writeUint32( &stream, 1 + 4 );
	sputc( &stream, SSH_FXP_VERSION );
	writeUint32( &stream, 3 );
	length = stell( &stream );
	sMemDisconnect( &stream );
	status = writeSftpPacket( cryptSession, buffer, length );
	if( cryptStatusError( status ) )
		return( status );

	/* Read the client's FXP_OPEN and send our response */
	status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
	if( cryptStatusError( status ) )
		{
		printExtError( cryptSession, "SVR: Attempt to read data from "
					   "client", status, __LINE__ );
		return( status );
		}
	sMemConnect( &stream, buffer, status );
	length = readUint32( &stream );
	value = sgetc( &stream );
	if( value == SSH_FXP_STAT )
		{
		/* See what the client is after */
		sftpInfo.id = readUint32( &stream );
		length = readUint32( &stream );
		sread( &stream, nameBuffer, length );
		sMemDisconnect( &stream );
		nameBuffer[ length ] = '\0';
		fprintf( outputStream, "SVR: Client tried to stat file '%s'.\n", 
				 nameBuffer );
		if( strcmp( nameBuffer, "." ) )
			{
			fputs( "SVR: Don't know how to respond to stat request for this "
				   "file.", outputStream );
			return( CRYPT_ERROR_NOTAVAIL );
			}

		/* Send back a dummy response */
		memset( &sftpAttrs, 0, sizeof( SFTP_ATTRS ) );
		sftpAttrs.isDirectory = TRUE;
		sftpAttrs.permissions = 0777;
		sftpAttrs.size = CRYPT_UNUSED;
		sftpAttrs.atime = sftpAttrs.ctime = sftpAttrs.mtime = time( NULL );
		length = sizeofAttributes( &sftpAttrs, sftpInfo.version );
		sMemOpen( &stream, buffer, BUFFER_SIZE );
		writeUint32( &stream, 1 + UINT32_SIZE + length );
		sputc( &stream, SSH_FXP_ATTRS );
		writeUint32( &stream, sftpInfo.id );
		writeAttributes( &stream, &sftpAttrs, sftpInfo.version );
		length = stell( &stream );
		sMemDisconnect( &stream );
		status = writeSftpPacket( cryptSession, buffer, length );
		if( cryptStatusError( status ) )
			return( status );

		/* See what they want next */
		status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
		if( cryptStatusError( status ) )
			{
			printExtError( cryptSession, "SVR: Attempt to read data from "
						   "client", status, __LINE__ );
			return( status );
			}
		sMemConnect( &stream, buffer, status );
		length = readUint32( &stream );
		value = sgetc( &stream );
		}
	if( value == SSH_FXP_OPEN )
		{
		/* See what the client is after */
		sftpInfo.id = readUint32( &stream );
		length = readUint32( &stream );
		sread( &stream, nameBuffer, length );
		value = readUint32( &stream );
		readAttributes( &stream, &sftpAttrs, sftpInfo.version );
		sMemDisconnect( &stream );
		nameBuffer[ length ] = '\0';
		fprintf( outputStream, "Client tried to open file '%s', mode %02X, "
				 "length %d.\n", nameBuffer, value, sftpAttrs.size );

		/* Putty for some reason tries to open the current directory for
		   create (rather than the filename), and bails out when it gets a
		   permission-denied.  So I guess we tell it to go ahead... */
		sMemOpen( &stream, buffer, BUFFER_SIZE );
		writeUint32( &stream, 1 + UINT32_SIZE + ( UINT32_SIZE + 1 ) );
		sputc( &stream, SSH_FXP_HANDLE );
		writeUint32( &stream, sftpInfo.id );
		writeUint32( &stream, 1 );
		sputc( &stream, 1 );
		length = stell( &stream );
		sMemDisconnect( &stream );
		status = writeSftpPacket( cryptSession, buffer, length );
		if( cryptStatusError( status ) )
			return( status );
		}

	/* Now we're in the write loop... */
	xferTime = time( NULL );
	dataLength = 0;
	while( TRUE )
		{
		/* See what they want next */
		status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
		if( cryptStatusError( status ) )
			{
			printExtError( cryptSession, "SVR: Attempt to read data from "
						   "client", status, __LINE__ );
			return( status );
			}
		if( status < 1 )
			{
			fprintf( outputStream, "SVR: Read 0 bytes from client.\n" );
			return( CRYPT_ERROR_UNDERFLOW );
			}
		if( dataLength > 0 )
			{
			xferCount += status;
			dataLength -= status;
			fprintf( outputStream, "SRV: -------- : %d.\r", xferCount );
			if( dataLength <= 0 )
				break;
			continue;
			}
		sMemConnect( &stream, buffer, status );
		length = readUint32( &stream );
		if( status < BUFFER_SIZE && ( length != status - UINT32_SIZE ) )
			{
			fprintf( outputStream, "Didn't read complete packet, "
					 "length = %d, byte count = %d.\n", length, 
					 status - UINT32_SIZE );
			}
		value = sgetc( &stream );
		if( value != SSH_FXP_WRITE )
			break;
		sftpInfo.id = readUint32( &stream );
		readString32( &stream, nameBuffer, 128, &length );
		readUint64( &stream, &value );
		dataLength = readUint32( &stream );
		fprintf( outputStream, "SRV: %8d : %d.\r", value, length );
		xferCount += status - stell( &stream );
		dataLength -= status - stell( &stream );
		sMemDisconnect( &stream );

		/* Ack the write */
		if( dataLength <= 0 )
			{
			status = sendAck( cryptSession, &sftpInfo );
			if( cryptStatusError( status ) )
				return( status );
			}
		}
	xferTime = time( NULL ) - xferTime;
	fprintf( outputStream, "Transfer time = %d seconds, %ld bytes, "
			 "%d bytes/sec.\n", xferTime, xferCount, 
			 xferCount / xferTime );

	/* Clean up */
	if( value != SSH_FXP_CLOSE )
		{
		fprintf( outputStream, "SVR: Client sent unexpected packet %d.\n", 
				 value );
		return( CRYPT_ERROR_BADDATA );
		}
	sftpInfo.id = readUint32( &stream );
	status = sendAck( cryptSession, &sftpInfo );
	if( cryptStatusError( status ) )
		return( status );
	status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
	if( status == CRYPT_ERROR_COMPLETE )
		{
		fputs( "SVR: Client has closed the channel.", outputStream );
		return( CRYPT_OK );
		}
	if( cryptStatusError( status ) )
		return( status );
	sMemConnect( &stream, buffer, status );
	length = readUint32( &stream );
	value = sgetc( &stream );

	return( CRYPT_OK );
	}

#define SFTP_DATA_AMOUNT	( 1024 * 1024 )

int sftpClient( const CRYPT_SESSION cryptSession )
	{
	STREAM stream;
	SFTP_ATTRS sftpAttrs;
	SFTP_INFO sftpInfo;
	BYTE buffer[ BUFFER_SIZE ];
	long totalLength = SFTP_DATA_AMOUNT;
	int length, value, status;

	cryptSetAttribute( cryptSession, CRYPT_OPTION_NET_READTIMEOUT, 30 );

	memset( &sftpInfo, 0, sizeof( SFTP_INFO ) );

	/* Send our FXP_INIT and read back the response */
	sMemOpen( &stream, buffer, BUFFER_SIZE );
	writeUint32( &stream, 1 + 4 );
	sputc( &stream, SSH_FXP_INIT );
	writeUint32( &stream, 3 );
	length = stell( &stream );
	sMemDisconnect( &stream );
	status = writeSftpPacket( cryptSession, buffer, length );
	if( cryptStatusError( status ) )
		return( status );
	status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
	if( cryptStatusError( status ) )
		return( status );
	sMemConnect( &stream, buffer, status );
	length = readUint32( &stream );
	value = sgetc( &stream );
	if( ( length != 1 + 4 ) || ( value != SSH_FXP_VERSION ) )
		return( CRYPT_ERROR_BADDATA );
	sftpInfo.version = readUint32( &stream );
	sMemDisconnect( &stream );
	fprintf( outputStream, "Server supports SFTP version %d.\n", 
			 sftpInfo.version );

	/* Open the file to transfer */
	memset( &sftpAttrs, 0, sizeof( SFTP_ATTRS ) );
	sftpAttrs.permissions = 0777;
	sftpAttrs.size = CRYPT_UNUSED;
	sftpAttrs.atime = sftpAttrs.ctime = sftpAttrs.mtime = time( NULL );
	length = sizeofAttributes( &sftpAttrs, sftpInfo.version );
	sMemOpen( &stream, buffer, BUFFER_SIZE );
	writeUint32( &stream, 1 + UINT32_SIZE + ( UINT32_SIZE + 8 ) + UINT32_SIZE + length );
	sputc( &stream, SSH_FXP_OPEN );
	writeUint32( &stream, 1 );
	writeString32( &stream, "test.dat", 8 );
	writeUint32( &stream, SSH_FXF_CREAT | SSH_FXF_WRITE	);
	writeAttributes( &stream, &sftpAttrs, sftpInfo.version );
	length = stell( &stream );
	sMemDisconnect( &stream );
	status = writeSftpPacket( cryptSession, buffer, length );
	if( cryptStatusError( status ) )
		return( status );
	status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
	if( cryptStatusError( status ) )
		{
		printExtError( cryptSession, "Attempt to read data from server",
					   status, __LINE__ );
		return( status );
		}
	sMemConnect( &stream, buffer, status );
	length = readUint32( &stream );
	value = sgetc( &stream );
	readUint32( &stream );
	readString32( &stream, sftpInfo.handle, MAX_HANDLE_SIZE, 
				  &sftpInfo.handleSize );
	sMemDisconnect( &stream );
	if( value != SSH_FXP_HANDLE )
		{
		fprintf( outputStream, "Server sent packet %d, expected file "
				 "handle.\n", value );
		return( CRYPT_ERROR_BADDATA );
		}

	/* Send the file (just 1MB of test data) */
	sMemOpen( &stream, buffer, BUFFER_SIZE );
	writeUint32( &stream, 1 + UINT32_SIZE + \
						  ( UINT32_SIZE + sftpInfo.handleSize ) + \
						  UINT64_SIZE + ( UINT32_SIZE + SFTP_DATA_AMOUNT ) );
	sputc( &stream, SSH_FXP_WRITE );
	writeUint32( &stream, sftpInfo.id );
	writeString32( &stream, sftpInfo.handle, sftpInfo.handleSize );
	writeUint64( &stream, 0 );
	writeUint32( &stream, SFTP_DATA_AMOUNT );
	length = stell( &stream );
	memset( buffer + length, '*', BUFFER_SIZE - length );
	status = writeSftpPacket( cryptSession, buffer, BUFFER_SIZE );
	if( cryptStatusError( status ) )
		return( status );
	totalLength -= BUFFER_SIZE - length;
	while( totalLength > 0 )
		{
		memset( buffer, '*', BUFFER_SIZE );
		status = writeSftpPacket( cryptSession, buffer,
								  min( totalLength, BUFFER_SIZE ) );
		if( cryptStatusError( status ) )
			return( status );
		totalLength -= min( totalLength, BUFFER_SIZE );
		}

	/* Wait for the ack */
	status = readSftpPacket( cryptSession, buffer, BUFFER_SIZE );
	if( cryptStatusError( status ) )
		{
		printExtError( cryptSession, "Attempt to read data from server",
					   status, __LINE__ );
		return( status );
		}

	return( CRYPT_OK );
	}
#endif /* WINDOWS_THREADS && 0 */

#endif /* TEST_SESSION || TEST_SESSION_LOOPBACK */
