Merge pull request #442 from sedwards2009/ssh

SSH support

extensions/ProxySessionBackend/src/ProxySessionBackendExtension.ts

@@ -8,6 +8,6 @@ import { CygwinProxySessionBackend } from './CygwinProxySessionBackend.js';
 import { WslProxySessionBackend } from './WslProxySessionBackend.js';
 
 export function activate(context: ExtensionContext): any {
-  context.sessions.registerSessionBackend("Cygwin", new CygwinProxySessionBackend(context.logger));
-  context.sessions.registerSessionBackend("Windows Subsystem for Linux", new WslProxySessionBackend(context.logger));
+  context.sessions.registerSessionBackend("cygwin", new CygwinProxySessionBackend(context.logger));
+  context.sessions.registerSessionBackend("wsl", new WslProxySessionBackend(context.logger));
 }

extensions/SSHSessionBackend/README.md

@@ -0,0 +1 @@
+Back-end for SSH connections

extensions/SSHSessionBackend/jest.config.cjs

@@ -0,0 +1,7 @@
+// For a detailed explanation regarding each configuration property, visit:
+// https://jestjs.io/docs/en/configuration.html
+module.exports = {
+  rootDir: "build",
+  moduleFileExtensions: ["js"],
+  testMatch: ["**/*.jest.js"],
+};

extensions/SSHSessionBackend/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "ssh-session-backend",
+  "description": "SSH Session Backend",
+  "author": "Simon Edwards",
+  "license": "MIT",
+  "version": "1.0.0",
+  "type": "module",
+  "exports": "./dist/SSHSessionBackendExtension.js",
+  "scripts": {
+    "build": "yarn run build-code && yarn run build-bundle && yarn run lint",
+    "build-code": "tsc",
+    "build-bundle": "esbuild build/SSHSessionBackendExtension.js --bundle --outfile=dist/SSHSessionBackendExtension.js --platform=node --format=esm --external:ssh2",
+    "clean": "shx rm -rf build dist",
+    "lint": "eslint \"src/**/*.ts\"",
+    "lint-strict": "eslint --max-warnings 1 \"src/**/*.ts\"",
+    "test": "yarn run build && yarn node --experimental-vm-modules $(yarn bin jest)"
+  },
+  "dependencies": {
+    "@types/ssh2": "^1.15.0",
+    "node-pty": "1.0.0"
+  },
+  "devDependencies": {
+    "@extraterm/extraterm-extension-api": "0.15.0",
+    "@types/jest": "27.0.1",
+    "@types/lodash-es": "4.17.10",
+    "@types/node": "^18.15.3",
+    "esbuild": "^0.15.5",
+    "eslint": "8.53.0",
+    "eslint-config-extraterm": "1.0.0",
+    "eslint-plugin-unicorn": "42.0.0",
+    "extraterm-event-emitter": "1.0.0",
+    "extraterm-later": "1.0.0",
+    "jest": "27.5.1",
+    "lodash-es": "4.17.21",
+    "node-gyp": "^8.3.0",
+    "shx": "^0.3.2",
+    "ssh2": "1.15.0",
+    "typescript": "5.2.2"
+  },
+  "isInternal": true,
+  "contributes": {
+    "sessionBackends": [
+      {
+        "name": "SSH",
+        "type": "ssh"
+      }
+    ]
+  }
+}

extensions/SSHSessionBackend/src/HostPattern.jest.ts

@@ -0,0 +1,71 @@
+/*
+ * Copyright 2024 Simon Edwards <[email protected]>
+ *
+ * This source code is licensed under the MIT license which is detailed in the LICENSE.txt file.
+ */
+
+import { HostPattern } from "./HostPattern";
+
+test("plain IP", done => {
+  const pattern = new HostPattern("192.168.1.1");
+  expect(pattern.isNegative()).toBe(false);
+  expect(pattern.match("192.168.1.1")).toBe(true);
+  done();
+});
+
+test("negate IP", done => {
+  const pattern = new HostPattern("!192.168.1.1");
+  expect(pattern.isNegative()).toBe(true);
+  expect(pattern.match("192.168.1.1")).toBe(true);
+  done();
+});
+
+test("domain", done => {
+  const pattern = new HostPattern("*.example.com");
+  expect(pattern.isNegative()).toBe(false);
+
+  expect(pattern.match("server.example.com")).toBe(true);
+
+  expect(pattern.match("server.example.com.au")).toBe(false);
+  done();
+});
+
+test("any domain", done => {
+  const pattern = new HostPattern("*");
+  expect(pattern.isNegative()).toBe(false);
+
+  expect(pattern.match("server.example.com")).toBe(true);
+  expect(pattern.match("192.168.1.1")).toBe(true);
+  expect(pattern.match("server.example.com.au")).toBe(true);
+  done();
+});
+
+test("domain with ?", done => {
+  const pattern = new HostPattern("server?.example.com");
+  expect(pattern.isNegative()).toBe(false);
+
+  expect(pattern.match("server1.example.com")).toBe(true);
+  expect(pattern.match("server2.example.com")).toBe(true);
+
+  expect(pattern.match("server.example.com.au")).toBe(false);
+  expect(pattern.match("server123.example.com.au")).toBe(false);
+  done();
+});
+
+test("domain with multiple *", done => {
+  const pattern = new HostPattern("*.example.com.*");
+  expect(pattern.isNegative()).toBe(false);
+
+  expect(pattern.match("server.example.com.au")).toBe(true);
+
+  expect(pattern.match("server.example.com")).toBe(false);
+  done();
+});
+
+test("Escape dots", done => {
+  const pattern = new HostPattern(".......example.com");
+  expect(pattern.isNegative()).toBe(false);
+
+  expect(pattern.match("server.example.com")).toBe(false);
+  done();
+});

extensions/SSHSessionBackend/src/HostPattern.ts

@@ -0,0 +1,39 @@
+/*
+ * Copyright 2024 Simon Edwards <[email protected]>
+ *
+ * This source code is licensed under the MIT license which is detailed in the LICENSE.txt file.
+ */
+
+export class HostPattern {
+
+  #isNegative: boolean;
+  #regex: RegExp;
+
+  constructor(pattern: string) {
+    this.#isNegative = false;
+    this.#convertPattern(pattern);
+  }
+
+  #convertPattern(pattern: string): void {
+    if (pattern.startsWith("!")) {
+      this.#isNegative = true;
+      pattern = pattern.substring(1);
+    }
+
+    // Convert the pattern to a regex
+    // * should be a wild card and match anything text.
+    // ? is wild card which matches 1 character.
+    // Make sure other regex characters are escaped.
+    const regexPattern = pattern.replace(/[-\/\\^$*+?.()|[\]{}]/g, "\\$&")
+      .replace(/\\\*/g, ".*").replace(/\\\?/g, ".");
+    this.#regex = new RegExp(`^${regexPattern}$`, "i");
+  }
+
+  isNegative(): boolean {
+    return this.#isNegative;
+  }
+
+  match(host: string): boolean {
+    return this.#regex.test(host);
+  }
+}

extensions/SSHSessionBackend/src/KnownHosts.jest.ts

@@ -0,0 +1,192 @@
+/*
+ * Copyright 2024 Simon Edwards <[email protected]>
+ *
+ * This source code is licensed under the MIT license which is detailed in the LICENSE.txt file.
+ */
+import { Logger } from "@extraterm/extraterm-extension-api";
+import { KnownHosts, VerifyResultCode } from "./KnownHosts";
+import ssh2 from "ssh2";
+
+
+const log: Logger = {
+  debug: function (msg: any, ...opts: any[]): void {
+    console.log(msg, ...opts);
+  },
+  info: function (msg: any, ...opts: any[]): void {
+    console.log(msg, ...opts);
+  },
+  warn: function (msg: any, ...opts: any[]): void {
+    console.log(msg, ...opts);
+  },
+  severe: function (msg: any, ...opts: any[]): void {
+    console.log(msg, ...opts);
+  },
+  startTime: function (label: string): void {
+  },
+  endTime: function (label: string): void {
+  }
+};
+
+function parseKey(key: string): ssh2.ParsedKey {
+  const result = ssh2.utils.parseKey(key);
+  if (result instanceof Error) {
+    throw result;
+  }
+  return result;
+}
+
+
+test("plain host", done => {
+  const knownHosts = new KnownHosts(log);
+  knownHosts.loadString(`192.168.1.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=
+rubuntu,192.168.1.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAmrcgpIsIb9RZZdlhB44addflgtm0//PVBUjrvcYuAk5Jd3qbmyD6gtifxpcMlNoRtiGo7Fr5q5x3Zl1/ZgfXncrBaqJhFHfnwLk6XBtWg3wUYOb0kZdfouFaGFPwAKkmY58GJqBM0iLavmtCHmczDT3ZfR72PPKgP5vomCKqpMs=
+`);
+  expect(knownHosts.lines.length).toBe(3);
+  expect(knownHosts.lines[0].type).toBe("host");
+  expect(knownHosts.lines[0].type).toBe("host");
+  expect(knownHosts.lines[2].type).toBe("comment");
+
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=");
+  expect(knownHosts.verify("192.168.1.1", 22, publicKey).result).toBe(VerifyResultCode.OK);
+
+  const publicKey2 = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAmrcgpIsIb9RZZdlhB44addflgtm0//PVBUjrvcYuAk5Jd3qbmyD6gtifxpcMlNoRtiGo7Fr5q5x3Zl1/ZgfXncrBaqJhFHfnwLk6XBtWg3wUYOb0kZdfouFaGFPwAKkmY58GJqBM0iLavmtCHmczDT3ZfR72PPKgP5vomCKqpMs=");
+
+  expect(knownHosts.verify("192.168.1.3", 22, publicKey2).result).toBe(VerifyResultCode.OK);
+  expect(knownHosts.verify("rubuntu", 22, publicKey2).result).toBe(VerifyResultCode.OK);
+  done();
+});
+
+test("plain host with port", done => {
+  const knownHosts = new KnownHosts(log);
+  knownHosts.loadString(`[192.168.1.1]:2222 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=
+rubuntu,192.168.1.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAmrcgpIsIb9RZZdlhB44addflgtm0//PVBUjrvcYuAk5Jd3qbmyD6gtifxpcMlNoRtiGo7Fr5q5x3Zl1/ZgfXncrBaqJhFHfnwLk6XBtWg3wUYOb0kZdfouFaGFPwAKkmY58GJqBM0iLavmtCHmczDT3ZfR72PPKgP5vomCKqpMs=
+`);
+  expect(knownHosts.lines.length).toBe(3);
+  expect(knownHosts.lines[0].type).toBe("host");
+  expect(knownHosts.lines[0].type).toBe("host");
+  expect(knownHosts.lines[2].type).toBe("comment");
+
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=");
+  expect(knownHosts.verify("192.168.1.1", 2222, publicKey).result).toBe(VerifyResultCode.OK);
+
+  done();
+});
+
+test("plain host public key mismatch", done => {
+  const knownHosts = new KnownHosts(log);
+  knownHosts.loadString(`192.168.1.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=
+rubuntu,192.168.1.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAmrcgpIsIb9RZZdlhB44addflgtm0//PVBUjrvcYuAk5Jd3qbmyD6gtifxpcMlNoRtiGo7Fr5q5x3Zl1/ZgfXncrBaqJhFHfnwLk6XBtWg3wUYOb0kZdfouFaGFPwAKkmY58GJqBM0iLavmtCHmczDT3ZfR72PPKgP5vomCKqpMs=
+`);
+
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCCrz28L4LKGrxay8mWLclpjQ4aQEJBHQ38DQzshyUfMlg8stRAsgXfJ+eO26MQj/Gcih+Ftdh7SpOLOnYITNROEBbGHdRSFR7fIDk/3/B4EAT5dzeP4D5srgUULaDwefIax2d2e1kRaTjaXIVvxO+5Hl29HgqoNwF7RsUu62JlnLtTiQSfr+ZSB5fq8Vicb3j63mXxz+6rSZYnny32MCWo4bVXd3wO5GgC8IoRmZWSupALiY8jNas2SuL4zSwLfedcN23aOJXa/anAZ6cEb3AH3/jyDTiCktBAVBgI7GdcTkv6NnKopQZo7I+sWowE41izL2Rn1bcJ655bXmiqb5D7");
+  expect(knownHosts.verify("192.168.1.1", 22, publicKey).result).toBe(VerifyResultCode.CHANGED);
+  done();
+});
+
+test("hash host", done => {
+  const knownHosts = new KnownHosts(log);
+
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq3A1A0ovCLQMIypva4r+IOoy6d/Untkpjh0Qg00KNKgj7MsB+0PJlqqKSQORxeRTMfsgJ8adSkwEaoz6uu7/UhDCRXcnHqaX2GtPtSZTp6PT+uI3+aF0OJ07PsRUn3NW6DRXJP37gtxykasQowNbeO54qULXyzaDkAOt504S8pHPORP7EW5P19BBJsk5PFDkzf+eTlZtQtiNK1lhEG/+a/M60ggDUoEHpRgSqB5r3RleNlDt2/dBcvKcF/3AQIpgkEqtTgmJWZrwKF9HFMeY0NI+bHEMUsvPFoVAIZqXJwR/ipv9enib0/azQzUoSJJv59ETbToima6p5kNod+SjSw==");
+
+  // 192.168.1.2
+  knownHosts.loadString(`|1|Lw/h2cw00uRxdmZeQ93a7++tPHM=|w+FeYx7J4ljE4a/k4YgY+8eXlBU= ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq3A1A0ovCLQMIypva4r+IOoy6d/Untkpjh0Qg00KNKgj7MsB+0PJlqqKSQORxeRTMfsgJ8adSkwEaoz6uu7/UhDCRXcnHqaX2GtPtSZTp6PT+uI3+aF0OJ07PsRUn3NW6DRXJP37gtxykasQowNbeO54qULXyzaDkAOt504S8pHPORP7EW5P19BBJsk5PFDkzf+eTlZtQtiNK1lhEG/+a/M60ggDUoEHpRgSqB5r3RleNlDt2/dBcvKcF/3AQIpgkEqtTgmJWZrwKF9HFMeY0NI+bHEMUsvPFoVAIZqXJwR/ipv9enib0/azQzUoSJJv59ETbToima6p5kNod+SjSw==`);
+  expect(knownHosts.verify("192.168.1.2", 22, publicKey).result).toBe(VerifyResultCode.OK);
+  expect(knownHosts.verify("192.168.1.9", 22, publicKey).result).toBe(VerifyResultCode.UNKNOWN);
+  done();
+});
+
+test("hash host public key mismatch", done => {
+  const knownHosts = new KnownHosts(log);
+
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCCrz28L4LKGrxay8mWLclpjQ4aQEJBHQ38DQzshyUfMlg8stRAsgXfJ+eO26MQj/Gcih+Ftdh7SpOLOnYITNROEBbGHdRSFR7fIDk/3/B4EAT5dzeP4D5srgUULaDwefIax2d2e1kRaTjaXIVvxO+5Hl29HgqoNwF7RsUu62JlnLtTiQSfr+ZSB5fq8Vicb3j63mXxz+6rSZYnny32MCWo4bVXd3wO5GgC8IoRmZWSupALiY8jNas2SuL4zSwLfedcN23aOJXa/anAZ6cEb3AH3/jyDTiCktBAVBgI7GdcTkv6NnKopQZo7I+sWowE41izL2Rn1bcJ655bXmiqb5D7");
+
+  // 192.168.1.2
+  knownHosts.loadString(`|1|Lw/h2cw00uRxdmZeQ93a7++tPHM=|w+FeYx7J4ljE4a/k4YgY+8eXlBU= ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq3A1A0ovCLQMIypva4r+IOoy6d/Untkpjh0Qg00KNKgj7MsB+0PJlqqKSQORxeRTMfsgJ8adSkwEaoz6uu7/UhDCRXcnHqaX2GtPtSZTp6PT+uI3+aF0OJ07PsRUn3NW6DRXJP37gtxykasQowNbeO54qULXyzaDkAOt504S8pHPORP7EW5P19BBJsk5PFDkzf+eTlZtQtiNK1lhEG/+a/M60ggDUoEHpRgSqB5r3RleNlDt2/dBcvKcF/3AQIpgkEqtTgmJWZrwKF9HFMeY0NI+bHEMUsvPFoVAIZqXJwR/ipv9enib0/azQzUoSJJv59ETbToima6p5kNod+SjSw==`);
+  expect(knownHosts.verify("192.168.1.2", 22, publicKey).result).toBe(VerifyResultCode.CHANGED);
+  done();
+});
+
+test("revoked", done => {
+  const knownHosts = new KnownHosts(log);
+  knownHosts.loadString(`@revoked 192.168.1.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=
+`);
+  expect(knownHosts.lines.length).toBe(2);
+  expect(knownHosts.lines[0].type).toBe("revoked");
+
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=");
+  expect(knownHosts.verify("192.168.1.1", 22, publicKey).result).toBe(VerifyResultCode.REVOKED);
+
+  done();
+});
+
+test("unknown host with alias", done => {
+  const knownHosts = new KnownHosts(log);
+  knownHosts.loadString(`192.168.1.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=
+rubuntu,192.168.1.3 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAmrcgpIsIb9RZZdlhB44addflgtm0//PVBUjrvcYuAk5Jd3qbmyD6gtifxpcMlNoRtiGo7Fr5q5x3Zl1/ZgfXncrBaqJhFHfnwLk6XBtWg3wUYOb0kZdfouFaGFPwAKkmY58GJqBM0iLavmtCHmczDT3ZfR72PPKgP5vomCKqpMs=
+`);
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=");
+  const result = knownHosts.verify("192.168.1.2", 22, publicKey);
+  expect(result.result).toBe(VerifyResultCode.UNKNOWN);
+  expect(result.aliases.length).toBe(1);
+  expect(result.aliases[0].lineNumber).toBe(1);
+  expect(result.aliases[0].host).toBe("192.168.1.1");
+
+  done();
+});
+
+test("unknown host with hashed alias", done => {
+  const knownHosts = new KnownHosts(log);
+
+  const publicKey = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq3A1A0ovCLQMIypva4r+IOoy6d/Untkpjh0Qg00KNKgj7MsB+0PJlqqKSQORxeRTMfsgJ8adSkwEaoz6uu7/UhDCRXcnHqaX2GtPtSZTp6PT+uI3+aF0OJ07PsRUn3NW6DRXJP37gtxykasQowNbeO54qULXyzaDkAOt504S8pHPORP7EW5P19BBJsk5PFDkzf+eTlZtQtiNK1lhEG/+a/M60ggDUoEHpRgSqB5r3RleNlDt2/dBcvKcF/3AQIpgkEqtTgmJWZrwKF9HFMeY0NI+bHEMUsvPFoVAIZqXJwR/ipv9enib0/azQzUoSJJv59ETbToima6p5kNod+SjSw==");
+
+  // 192.168.1.2
+  knownHosts.loadString(`|1|Lw/h2cw00uRxdmZeQ93a7++tPHM=|w+FeYx7J4ljE4a/k4YgY+8eXlBU= ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq3A1A0ovCLQMIypva4r+IOoy6d/Untkpjh0Qg00KNKgj7MsB+0PJlqqKSQORxeRTMfsgJ8adSkwEaoz6uu7/UhDCRXcnHqaX2GtPtSZTp6PT+uI3+aF0OJ07PsRUn3NW6DRXJP37gtxykasQowNbeO54qULXyzaDkAOt504S8pHPORP7EW5P19BBJsk5PFDkzf+eTlZtQtiNK1lhEG/+a/M60ggDUoEHpRgSqB5r3RleNlDt2/dBcvKcF/3AQIpgkEqtTgmJWZrwKF9HFMeY0NI+bHEMUsvPFoVAIZqXJwR/ipv9enib0/azQzUoSJJv59ETbToima6p5kNod+SjSw==`);
+  const result = knownHosts.verify("192.168.22.22", 22, publicKey);
+  expect(result.result).toBe(VerifyResultCode.UNKNOWN);
+  expect(result.aliases.length).toBe(1);
+  expect(result.aliases[0].host).toBe("[hashed host]");
+  expect(result.aliases[0].lineNumber).toBe(1);
+
+  done();
+});
+
+test("append line", done => {
+  const knownHosts = new KnownHosts(log);
+
+  const key = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=");
+  knownHosts.appendHost("192.168.1.1", 22, key);
+
+  const result = knownHosts.verify("192.168.1.1", 22, key);
+  expect(result.result).toBe(VerifyResultCode.OK);
+
+  done();
+});
+
+test("append line round-trip", done => {
+  const knownHosts = new KnownHosts(log);
+  const key = parseKey("ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5VqOFLlef825wmfC4/yA8KLzg+K8Ay9gXiNw/ygNw+kuRZAD1nk3QXdVObH/tPy78cLjtzRzQxAkXozSsfyz0yguveHJXcG92Y1Dps402AVZsZsQwruzoTjEwcXrzOW+dIQiNw34Sa/kmG0/F6eILGtUtpR3swXGrejb0Lc0iEE=");
+  knownHosts.appendHost("192.168.1.1", 22, key);
+
+  const knownHost2 = new KnownHosts(log);
+  knownHost2.loadString(knownHosts.dumpString(""));
+  const result = knownHosts.verify("192.168.1.1", 22, key);
+  expect(result.result).toBe(VerifyResultCode.OK);
+
+  done();
+});
+
+test("host with multiple keys", done => {
+  const knownHosts = new KnownHosts(log);
+
+  const publicKey = parseKey("ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCDODdSGody90CUfpvyJiHiiyHIPR+dsiRPCfwIh1LZ");
+
+  knownHosts.loadString(`ubuntuvm ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBB4qvlOk+E26lklnTmzTi++qVXJz9/lMM8ceHB0XroUo7X5/C5W0VaqWAjNUZQZb0i5QAXxDhVCb/MMPhRlbErQ=
+ubuntuvm ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDAofLs4nIqiybGO7kCJWL/7RmVM6XLSoeLBkfFvH79SilK6+Z6iNlQVeqWkKekx+P41YrY/nvKc4N7CylvWiD/OsRHDkfij2vbVC44QlMr78GE+RHVNfyqYq1jI98SJv0oaMdKE7zQHtfr13ah7XYupmO4ND99pZFX14XbZ6yf8fdE+2bOsrd9dVCPU45jc0fGOVaaocXeK6D3NO9icwVd3mw8KISyMEUY8J6b8dvwUlzmzyvDmyqF11DDcZ2N9cldW0UsiZ/GglxvQELjEW3R5mb8ZLwz5TF42KpqJNUEIyAZvSUmMZ2hialR73vDNLm4yCC++jGt1EOGQzWe8SbCMuuHnnBXu5DHpjAXrw0qehLg/h3BIOIc0qUTvdKapOe1tIO0n5lQ/JeGj8ZqnNxqdXMEX5z4JIJ3s738dbYWGLMu2nrJMvqkKHtU6xUEm/pmBdWGxdnrXvYeeyskLZfSobKb8zvuQHavHllQt/deiHzaf0XaCf6SulOpICrLayk=
+ubuntuvm ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDCDODdSGody90CUfpvyJiHiiyHIPR+dsiRPCfwIh1LZ
+`);
+
+  const result = knownHosts.verify("ubuntuvm", 22, publicKey);
+  expect(result.result).toBe(VerifyResultCode.OK);
+
+  done();
+});