+Local unprivileged testing machinery
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+This directory contains some random utilities I've found useful for
+testing Secnet. It lets me run two (or more) instances on a single
+machine, and get them to exchange keys and transmit packets, all as an
+unprivileged user.
+
+This isn't standalone: other tools are needed to make it work.
+Dependencies are described along with the tools they're needed by.
+
+ * mk-sshv1-rsapriv KEYRING TAG OUT: converts a Catacomb format RSA
+ private key, in the given KEYRING with the given TAG, writing a file
+ OUT in the SSH v1 format wanted by Secnet. This needs my Catacomb
+ library, https://git.distorted.org.uk/~mdw/catacomb/, and the Python
+ bindings, https://git.distorted.org.uk/~mdw/catacomb-python/. If
+ you have some other way of generating RSA private keys in the right
+ format, then you don't need this stuff.
+
+ * mkping FROM-NAME FROM-ADDR TO-NAME TO-ADDR OUT: formats an IPv4 ICMP
+ echo request packet with source and destination addresses FROM-ADDR
+ and TO-ADDR respectively, with payload a simple string containing
+ FROM-NAME and TO-NAME, and writes it to OUT, which may be `-' for
+ standard output. This requires the Python `ImpactPacket' library,
+ available in Debian as `python-impacket'.
+
+ * fake-userv-ipif: is a call-compatible drop-in for `userv', but uses
+ the `tripe-uslip' program instead. To use it, configure a
+ `userv-ipif' netlink with userv-path = "./fake-userv-ipif", and
+ service-name = "SOCKET", where SOCKET names a Unix-domain socket to
+ use as the fake network interface. Secnet will start `tripe-uslip'
+ and use it as its tunnel device, and you can send and receive
+ packets with tripe-uslip -p SOCKET <IN and tripe-uslip -g SOCKET
+ >OUT respectively. I find this useful with `mkping' above to
+ generate packets, and `xxd' to inspect them. `tripe-uslip' is part
+ of TrIPE, https://git.distorted.org.uk/~mdw/tripe/.
+
+There are also pieces of configuration in a fairly random state.
+They'll need tweaking to set up your particular test.
+
+ mdw, 2017-07-13