j-hpn-ssh/regress/misc/fuzz-harness/testdata/create-agent-corpus.sh

#!/usr/bin/env sh

# Exercise ssh-agent to generate fuzzing corpus

# XXX assumes agent hacked up with sk-dummy.o and ssh-sk.o linked directly
#     and dumping of e->request for each message.

set -xe
SSH_AUTH_SOCK=$PWD/sock
rm -f agent-[0-9]* $SSH_AUTH_SOCK
export SSH_AUTH_SOCK
../../../../ssh-agent -D -a $SSH_AUTH_SOCK &
sleep 1
AGENT_PID=$!
trap "kill $AGENT_PID" EXIT

PRIV="id_dsa id_ecdsa id_ecdsa_sk id_ed25519 id_ed25519_sk id_rsa"

# add keys
ssh-add $PRIV

# sign
ssh-add -T *.pub

# list
ssh-add -l

# remove individually
ssh-add -d $PRIV

# re-add with constraints
ssh-add -c -t 3h $PRIV

# delete all
ssh-add -D

# attempt to add a PKCS#11 token
ssh-add -s /fake || :

# attempt to delete PKCS#11
ssh-add -e /fake || :

ssh-add -L