. "$BST_LIB"
require dropbearkey dropbear/present

tmp=${TMPDIR:-/tmp}/bst-dropbear.$$
mkdir -p "$tmp"

# key generation prints the public key + fingerprint (the ticket's headline check)
check_out dropbear/keygen-rsa     "Fingerprint:" dropbearkey -t rsa -f "$tmp/id_rsa"
check_out dropbear/keygen-ed25519 "Fingerprint:" dropbearkey -t ed25519 -f "$tmp/id_ed"

# -y re-derives the public key from the stored private key -- round-trips the key file
check_out dropbear/key-pubread    "ssh-rsa"      dropbearkey -y -f "$tmp/id_rsa"

# client / server / scp identify themselves via usage output (no network needed;
# the commands exit non-zero on bare usage, so assert on output only)
check_out dropbear/dbclient-usage "Dropbear SSH client" sh -c "dbclient --help 2>&1; :"
check_out dropbear/dropbear-usage "Dropbear server"     sh -c "dropbear --help 2>&1; :"
check_out dropbear/scp-usage      "usage: scp"          sh -c "scp 2>&1; :"

rm -rf "$tmp"