dtucker@openbsd.org
395d8fbdb0
upstream: Make diff invocation more portable.
...
POSIX does not require diff to have -N, so compare in both directions
with just -r, which should catch missing files in either directory.
OpenBSD-Regress-ID: 0e2ec8594556a6f369ed5a0a90c6806419b845f7
2021-08-06 19:33:31 +10:00
djm@openbsd.org
d247a73ce2
upstream: regression test for scp -3
...
OpenBSD-Regress-ID: b44375d125c827754a1f722ec6b6b75b634de05d
2021-08-06 16:57:37 +10:00
djm@openbsd.org
af5d8094d8
upstream: regression tests for scp SFTP protocol support; mostly by
...
Jakub Jelen in GHPR#194 ok markus
OpenBSD-Regress-ID: 36f1458525bcb111741ec8547eaf58b13cddc715
2021-08-03 11:15:06 +10:00
anton@openbsd.org
e4673b7f67
upstream: Treat doas with arguments as a valid SUDO variable.
...
Allows one to specify SUDO="doas -n" which I do while running make regress.
ok dtucker@
OpenBSD-Regress-ID: 4fe5814b5010dbf0885500d703bea06048d11005
2021-08-03 11:08:46 +10:00
dtucker@openbsd.org
b398f499c6
upstream: Skip unit and makefile-based key conversion tests when
...
we're building with OPENSSL=no.
OpenBSD-Regress-ID: 20455ed9a977c93f846059d1fcb48e29e2c8d732
2021-07-25 22:37:19 +10:00
dtucker@openbsd.org
727ce36c8c
upstream: Replace OPENSSL as the variable that points to the
...
openssl binary with OPENSSL_BIN. This will allow us to use the OPENSSL
variable from mk.conf or the make(1) command line indicating if we're
building with our without OpenSSL, and ultimately get the regress tests
working in the OPENSSL=no configuration.
OpenBSD-Regress-ID: 2d788fade3264d7803e5b54cae8875963f688c4e
2021-07-25 22:35:24 +10:00
dtucker@openbsd.org
55e17101a9
upstream: Skip RFC4716 format import and export tests when built
...
without OpenSSL.
OpenBSD-Regress-ID: d2c2d5d38c1acc2b88cc99cfe00a2eb8bb39dfa4
2021-07-24 14:22:45 +10:00
djm@openbsd.org
9d38074b54
upstream: test for first-match-wins in authorized_keys environment=
...
options
OpenBSD-Regress-ID: 1517c90276fe84b5dc5821c59f88877fcc34c0e8
2021-07-24 12:31:05 +10:00
dtucker@openbsd.org
2b76f1dd19
upstream: Simplify keygen-convert by using $SSH_KEYTYPES directly.
...
OpenBSD-Regress-ID: cdbe408ec3671ea9ee9b55651ee551370d2a4108
2021-07-24 12:31:05 +10:00
dtucker@openbsd.org
1653ece683
upstream: Test conversion of ed25519 and ecdsa keys too.
...
OpenBSD-Regress-ID: 3676d2d00e58e0d6d37f2878f108cc2b83bbe4bb
2021-07-23 15:25:34 +10:00
dtucker@openbsd.org
8b7af02dcf
upstream: Add test for exporting pubkey from a passphrase-protected
...
private key.
OpenBSD-Regress-ID: da99d93e7b235fbd5b5aaa01efc411225e6ba8ac
2021-07-23 15:25:34 +10:00
djm@openbsd.org
441095d4a3
upstream: regression test for time-limited signature keys
...
OpenBSD-Regress-ID: 2a6f3bd900dbee0a3c96f1ff23e032c93ab392bc
2021-07-23 15:25:34 +10:00
dtucker@openbsd.org
44142068dc
upstream: Use SUDO when setting up hostkey.
...
OpenBSD-Regress-ID: 990cf4481cab8dad62e90818a9b4b36c533851a7
2021-07-19 19:20:33 +10:00
dtucker@openbsd.org
6b67f3f1d1
upstream: Increase time margin for rekey tests. Should help
...
reliability on very heavily loaded hosts.
OpenBSD-Regress-ID: 4c28a0fce3ea89ebde441d7091464176e9730533
2021-07-19 17:08:56 +10:00
Darren Tucker
7953e1bfce
Add sshfp-connect.sh file missed in previous.
2021-07-19 13:47:51 +10:00
dtucker@openbsd.org
33abbe2f41
upstream: Add test for host key verification via SSHFP records. This
...
requires some external setup to operate so is disabled by default (see
comments in sshfp-connect.sh).
OpenBSD-Regress-ID: c52c461bd1df3a803d17498917d156ef64512fd9
2021-07-19 13:02:55 +10:00
dtucker@openbsd.org
f0cd000d8e
upstream: Add ed25519 key and test SSHFP export of it. Only test
...
RSA SSHFP export if we have RSA functionality compiled in.
OpenBSD-Regress-ID: b4ff5181b8c9a5862e7f0ecdd96108622333a9af
2021-07-19 12:50:51 +10:00
dtucker@openbsd.org
0075511e27
upstream: Group keygen tests together.
...
OpenBSD-Regress-ID: 07e2d25c527bb44f03b7c329d893a1f2d6c5c40c
2021-07-19 12:50:12 +10:00
dtucker@openbsd.org
034828820c
upstream: Add test for ssh-keygen printing of SSHFP records.
...
OpenBSD-Regress-ID: fde9566b56eeb980e149bbe157a884838507c46b
2021-07-19 09:23:57 +10:00
djm@openbsd.org
7ae69f2628
upstream: fix some broken tests; clean up output
...
OpenBSD-Regress-ID: 1d5038edb511dc4ce1622344c1e724626a253566
2021-07-14 09:20:56 +10:00
dtucker@openbsd.org
31fac20c94
upstream: Use $SUDO when reading sshd's pidfile here too.
...
OpenBSD-Regress-ID: 6bfb0d455d493f24839034a629c5306f84dbd409
2021-06-10 20:15:20 +10:00
dtucker@openbsd.org
a3a58acffc
upstream: Use $SUDO when reading sshd's pidfile in case it was
...
created with a very restrictive umask. This resyncs with -portable.
OpenBSD-Regress-ID: 07fd2af06df759d4f64b82c59094accca1076a5d
2021-06-10 20:14:56 +10:00
dtucker@openbsd.org
249ad4ae51
upstream: Set umask when creating hostkeys to prevent excessive
...
permissions warning.
OpenBSD-Regress-ID: 382841db0ee28dfef7f7bffbd511803e1b8ab0ef
2021-06-10 20:13:09 +10:00
dtucker@openbsd.org
9d0892153c
upstream: Add regress test for SIGHUP restart
...
while handling active and unauthenticated clients. Should catch anything
similar to the pselect bug just fixed in sshd.c.
OpenBSD-Regress-ID: 3b3c19b5e75e43af1ebcb9586875b3ae3a4cac73
2021-06-10 19:49:13 +10:00
djm@openbsd.org
c785c0ae13
upstream: test that UserKnownHostsFile correctly accepts multiple
...
arguments; would have caught readconf.c r1.356 regression
OpenBSD-Regress-ID: 71ca54e66c2a0211b04999263e56390b1f323a6a
2021-06-09 08:38:51 +10:00
djm@openbsd.org
78e30af3e2
upstream: test argv_split() optional termination on comments
...
OpenBSD-Regress-ID: 9fd1c4a27a409897437c010cfd79c54b639a059c
2021-06-08 17:41:56 +10:00
dtucker@openbsd.org
a023138957
upstream: Add testcases from bz#3319 for IPQoS and TunnelDevice
...
being overridden on the command line.
OpenBSD-Regress-ID: 801674d5d2d02abd58274a78cab2711f11de14a8
2021-06-08 17:17:24 +10:00
djm@openbsd.org
660cea10b2
upstream: sprinkle some "# comment" at end of configuration lines
...
to test comment handling
OpenBSD-Regress-ID: cb82fbf40bda5c257a9f742c63b1798e5a8fdda7
2021-06-08 17:17:24 +10:00
djm@openbsd.org
acc9c32dcb
upstream: more descriptive failure message
...
OpenBSD-Regress-ID: 5300f6faf1d9e99c0cd10827b51756c5510e3509
2021-06-08 17:17:24 +10:00
djm@openbsd.org
ce04dd4eae
upstream: test AuthenticationMethods inside a Match block as well
...
as in the main config section
OpenBSD-Regress-ID: ebe0a686621b7cb8bb003ac520975279c28747f7
2021-06-08 17:17:24 +10:00
djm@openbsd.org
9018bd821f
upstream: prepare for stricter sshd_config parsing that will refuse
...
a config that has {Allow,Deny}{Users,Groups} on a line with no subsequent
arguments. Such lines are permitted but are nonsensical noops ATM
OpenBSD-Regress-ID: ef65463fcbc0bd044e27f3fe400ea56eb4b8f650
2021-06-08 17:17:24 +10:00
Darren Tucker
5de0867b82
Check for $OPENSSL in md5 fallback too.
2021-06-02 11:22:12 +10:00
dtucker@openbsd.org
a3f2dd955f
upstream: Merge back shell portability changes
...
bringing it back in sync with -portable.
OpenBSD-Regress-ID: c07905ba931e66ad7d849b87b7d19648007175d1
2021-06-02 10:33:46 +10:00
dtucker@openbsd.org
9d482295c9
upstream: Use a default value for $OPENSSL,
...
allowing it to be overridden. Do the same in the PuTTY tests since it's
needed there and not exported by test-exec.sh.
OpenBSD-Regress-ID: c49dcd6aa7602a8606b7afa192196ca1fa65de16
2021-06-02 10:11:25 +10:00
dtucker@openbsd.org
07660b3c99
upstream: Find openssl binary via environment variable. This
...
allows overriding if necessary (eg in -portable where we're testing against a
specific version of OpenSSL).
OpenBSD-Regress-ID: 491f39cae9e762c71aa4bf045803d077139815c5
2021-06-01 14:38:41 +10:00
djm@openbsd.org
1a4d1da918
upstream: fix memleak in test
...
OpenBSD-Regress-ID: 5e529d0982aa04666604936df43242e97a7a6f81
2021-06-01 14:38:41 +10:00
djm@openbsd.org
60455a5d98
upstream: also check contents of remaining string
...
OpenBSD-Regress-ID: d526fa07253f4eebbc7d6205a0ab3d491ec71a28
2021-06-01 14:38:41 +10:00
djm@openbsd.org
39f6cd2078
upstream: unit test for misc.c:strdelim() that mostly servces to
...
highlight its inconsistencies
OpenBSD-Regress-ID: 8d2bf970fcc01ccc6e36a5065f89b9c7fa934195
2021-06-01 14:38:41 +10:00
dtucker@openbsd.org
a4039724a3
upstream: Increase ConnectionAttempts from 4 to 10 as the tests
...
occasionally time out on heavily loaded hosts.
OpenBSD-Regress-ID: 29a8cdef354fc9da471a301f7f65184770434f3a
2021-05-07 19:42:35 +10:00
djm@openbsd.org
c0d7e36e97
upstream: dump out a usable private key string too; inspired by Tyson
...
Whitehead
OpenBSD-Regress-ID: 65572d5333801cb2f650ebc778cbdc955e372058
2021-05-07 12:36:24 +10:00
Darren Tucker
ae5f9b0d5c
Wrap sntrup761x25519 inside ifdef.
...
From balu.gajjala at gmail.com via bz#3306.
2021-04-29 13:01:50 +10:00
Darren Tucker
bfa5405da0
Ensure valgrind-out exists.
...
Normally the regress tests would create it, but running the unit tests
on their own would fail because the directory did not exist.
2021-04-08 15:18:15 +10:00
Darren Tucker
d1bd184046
Remove only use of warn().
...
The warn() function is only used in one place in portable and does not
exist upstream. Upgrade the only instance it's used to fail()
(the privsep/sandbox+proxyconnect, from back when that was new) and
remove the now-unused function.
2021-04-07 17:02:51 +10:00
Darren Tucker
fea8f4b1aa
Move make_tmpdir() into portable-specific area.
...
Reduces diff vs OpenBSD and makes it more likely diffs will apply
cleanly.
2021-04-07 17:02:51 +10:00
dtucker@openbsd.org
13e5fa2acf
upstream: Add TEST_SSH_ELAPSED_TIMES environment variable to print the
...
elapsed time in seconds of each test. This depends on "date +%s" which is
not specified by POSIX but is commonly implemented.
OpenBSD-Regress-ID: ec3c8c19ff49b2192116a0a646ee7c9b944e8a9c
2021-04-07 17:02:51 +10:00
Darren Tucker
ef4f46ab43
Move the TEST_SSH_PORT section down a bit.
...
This groups the portable-specific changes together and makes it a
little more likely that patches will apply cleanly.
2021-04-07 17:02:51 +10:00
dtucker@openbsd.org
679bdc4a5c
upstream: Don't check return value of unsetenv(). It's part of the
...
environment setup and not part of the actual test, and some platforms
-portable runs on declare it as returning void, which prevents the test from
compiling.
OpenBSD-Regress-ID: 24f08543ee3cdebc404f2951f3e388cc82b844a1
2021-04-06 19:31:18 +10:00
Damien Miller
f3ca8af87a
enable authopt and misc unit tests
...
Neither were wired into the build, both required some build
adaptations for -portable
2021-04-03 18:21:08 +11:00
Damien Miller
f75bcbba58
missing bits from 259d648e
2021-04-03 16:22:48 +11:00
djm@openbsd.org
4cbc4a7228
upstream: cannot effectively test posix-rename extension after
...
changes in feature advertisment.
OpenBSD-Regress-ID: 5e390bf88d379162aaa81b60ed86b34cb0c54d29
2021-04-01 09:22:53 +11:00
djm@openbsd.org
259d648e63
upstream: add a test for misc.c:argv_split(), currently fails
...
OpenBSD-Regress-ID: ad6b96d6ebeb9643b698b3575bdd6f78bb144200
2021-04-01 09:22:53 +11:00
djm@openbsd.org
473ddfc2d6
upstream: split
...
OpenBSD-Regress-ID: f6c03c0e4c58b3b9e04b161757b8c10dc8378c34
2021-04-01 09:22:31 +11:00
dtucker@openbsd.org
721948e674
upstream: Add TEST_SSH_MODULI_FILE variable to allow overriding of the
...
moduli file used during the test run.
OpenBSD-Regress-ID: be10f785263120edb64fc87db0e0d6570a10220a
2021-03-13 13:02:51 +11:00
djm@openbsd.org
1fe4d70df9
upstream: remove this KEX fuzzer; it's awkward to use and doesn't play
...
nice with popular fuzzing drivers like libfuzzer. AFAIK nobody has used it
but me.
OpenBSD-Regress-ID: cad919522b3ce90c147c95abaf81b0492ac296c9
2021-02-26 15:23:42 +11:00
djm@openbsd.org
9beeab8a37
upstream: s/PubkeyAcceptedKeyTypes/PubkeyAcceptedAlgorithms/
...
OpenBSD-Regress-ID: 3dbc005fa29f69dc23d97e433b6dffed6fe7cb69
2021-02-25 15:15:46 +11:00
dtucker@openbsd.org
2dd9870c16
upstream: Rename pubkeyacceptedkeytypes to pubkeyacceptedalgorithms in
...
test to match change to config-dump output.
OpenBSD-Regress-ID: 74c9a4ad50306be873d032819d5e55c24eb74d5d
2021-02-25 10:31:47 +11:00
dtucker@openbsd.org
64bbd7444d
upstream: Make sure puttygen is new enough to successfully run the
...
PuTTY interop tests, otherwise skip them.
OpenBSD-Regress-ID: 34565bb50b8aec58331ed02a5e9e0a9a929bef51
2021-02-17 15:08:29 +11:00
Darren Tucker
f88a7a4312
Add a hostname function for systems that don't have it.
...
Some systems don't have a hostname command (it's not required by POSIX).
The do have uname -n (which is), but as found by tim@ some others (eg
UnixWare) do not report the FQDN from uname -n.
2021-02-06 09:37:01 +11:00
dtucker@openbsd.org
5e385a71ef
upstream: Roll back the hostname->uname change in rev 1.10. It turns
...
out uname -n doesn't do what we need for some platforms in portable, so we'll
fix the original problem (that some other platforms don't have hostname at
all) by providing wrapper function to implement it.
OpenBSD-Regress-ID: 827a707d6201d5a8e196a8c28aec1d2c76c52341
2021-02-06 09:35:14 +11:00
dtucker@openbsd.org
b446c21427
upstream: hostname is not specified by POSIX but uname -n is, so use
...
the latter for portability. Patch from Geert Hendrickx via github PR#208.
OpenBSD-Regress-ID: d6a79c7c4d141a0d05ade4a042eb57dddbce89f3
2021-02-05 17:38:19 +11:00
Damien Miller
a5dfc5bae8
allow a fuzz case to contain more than one request
...
loop until input buffer empty, no message consumed or 256 messages
processed
2021-01-30 16:32:29 +11:00
Damien Miller
0ef24ad602
expect fuzz cases to have length prefix
...
might make life a little easier for the fuzzer, e.g. it can now
produce valid (multi-request) messages by smashing two cases together.
2021-01-30 16:28:23 +11:00
Damien Miller
de613f2713
ssh-agent fuzzer
2021-01-30 13:18:30 +11:00
Damien Miller
7e96c877bc
move keys out of kex_fuzz.cc into separate header
...
add certificates and missing key types
2021-01-30 12:02:46 +11:00
Damien Miller
76f46d7566
some fixed test data (mostly keys) for fuzzing
2021-01-30 12:02:10 +11:00
djm@openbsd.org
7c2e3d6de1
upstream: add a SK_DUMMY_INTEGRATE define that allows the dummy
...
security key middleware to be directly linked; useful for writing fuzzers,
etc.
OpenBSD-Regress-ID: 0ebd00159b58ebd85e61d8270fc02f1e45df1544
2021-01-30 11:58:38 +11:00
Damien Miller
1e660115f0
fuzz diffie-hellman-group-exchange-sha1 kex too
2021-01-29 11:09:14 +11:00
Damien Miller
be5f0048ea
support for running kex fuzzer with null cipher
2021-01-29 11:03:35 +11:00
Damien Miller
1134a48cdc
correct kex name in disabled code
2021-01-28 08:57:31 +11:00
dtucker@openbsd.org
6ffdcdda12
upstream: Fix long->int for convtime tests here too. Spotted by
...
tobhe@.
OpenBSD-Regress-ID: a87094f5863312d00938afba771d25f788c849d0
2021-01-22 16:07:02 +11:00
dtucker@openbsd.org
a8e798feab
upstream: Change types in convtime() unit test to int to match change
...
its new type. Add tests for boundary conditions and fix convtime to work up
to INT_MAX. ok djm@
OpenBSD-Regress-ID: ba2b81e9a3257fff204b020affe85b604a44f97e
2021-01-18 18:44:03 +11:00
anatasluo
1050109b4b
Remove duplicated declaration in fatal.c .
2021-01-12 07:08:26 +11:00
dtucker@openbsd.org
ba328bd7a6
upstream: Adjust kexfuzz to addr.c/addrmatch.c split.
...
OpenBSD-Regress-ID: 1d8d23bb548078020be2fb52c4c643efb190f0eb
2021-01-11 15:24:31 +11:00
dtucker@openbsd.org
b08ef25552
upstream: Update unittests for addr.c/addrmatch.c split.
...
OpenBSD-Regress-ID: de2b415fb7af084a91c6ef147a90482d8f771eef
2021-01-11 15:24:31 +11:00
Damien Miller
5c1953bf98
adapt KEX fuzzer to PQ kex change
2020-12-29 12:40:54 +11:00
djm@openbsd.org
659864fe81
upstream: Adapt to replacement of
...
sntrup4591761x25519-sha512@tinyssh.org with
sntrup761x25519-sha512@openssh.com .
Also test sntrup761x25519-sha512@openssh.com in unittests/kex
OpenBSD-Regress-ID: cfa3506b2b077a9cac1877fb521efd2641b6030c
2020-12-29 12:39:40 +11:00
Damien Miller
3e9811e57b
ensure $LOGNAME is set in tests
2020-12-22 18:31:50 +11:00
djm@openbsd.org
3eb647cbb3
upstream: more detail for failing tests
...
OpenBSD-Regress-ID: c68c0e5a521cad7e7f68e54c54ebf86d6c10ee1d
2020-12-22 17:48:31 +11:00
djm@openbsd.org
2873f19570
upstream: regress test for KnownHostsCommand
...
OpenBSD-Regress-ID: ffc77464320b6dabdcfa0a72e0df02659233a38a
2020-12-22 17:07:38 +11:00
dtucker@openbsd.org
649205fe38
upstream: Remove explicit rijndael-cbc@lysator.liu.se test since the
...
cipher was removed.
OpenBSD-Regress-ID: aa93cddb4ecd9bc21446a79008a1a53050e64f17
2020-12-22 10:30:23 +11:00
djm@openbsd.org
d97fb87972
upstream: adapt to API change in hostkeys_foreach()/load_hostkeys()
...
OpenBSD-Regress-ID: dcb468514f32da49a446372453497dc6eeafdbf3
2020-12-21 14:04:08 +11:00
djm@openbsd.org
bf7eb3c266
upstream: few more things needs match.c and addrmatch.c now that
...
log.c calls match_pattern_list()
OpenBSD-Regress-ID: f7c95c76b150d0aeb00a67858b9579b7d1b2db74
2020-12-21 14:04:08 +11:00
Darren Tucker
2c64f24e27
Pull in missing rev 1.2.
2020-12-21 14:02:56 +11:00
Damien Miller
a5ab499bd2
basic KEX fuzzer; adapted from Markus' unittest
2020-12-04 14:01:27 +11:00
Damien Miller
021ff33e38
use options that work with recent clang
2020-12-04 13:57:43 +11:00
Darren Tucker
637017a7dd
Use "=" not "==" in string test.
...
POSIX says "=" is string comparison and some shells (eg HP-UX) will
complain about "==".
2020-11-25 17:38:46 +11:00
djm@openbsd.org
816036f142
upstream: use the new variant log macros instead of prepending
...
__func__ and appending ssh_err(r) manually; ok markus@
OpenBSD-Commit-ID: 1f14b80bcfa85414b2a1a6ff714fb5362687ace8
2020-10-18 23:46:29 +11:00
Damien Miller
d55dfed34e
missing header
2020-10-17 22:55:24 +11:00
Damien Miller
999d7cb79a
sync regress/misc/sk-dummy/fatal.c
2020-10-17 22:47:52 +11:00
Damien Miller
0f938f9986
adapt sk-dummy's fatal implementation to changes
2020-10-17 11:42:26 +11:00
Damien Miller
afbd9ec9e2
fix netcat build problem
2020-10-17 11:33:13 +11:00
wangxp006
67146c7d02
fix TEST_MALLOC_OPTIONS var
2020-10-08 21:15:17 +11:00
djm@openbsd.org
e8dfca9bfe
upstream: remove GlobalKnownHostsFile for this test after
...
UpdateHostkeys change
OpenBSD-Regress-ID: a940ad79d59343319613ba8fc46b6ef24aa3f8e1
2020-10-07 17:39:17 +11:00
djm@openbsd.org
bbf20ac806
upstream: adapt to SSH_SK_VERSION_MAJOR crank
...
OpenBSD-Regress-ID: 0f3e76bdc8f9dbd9d22707c7bdd86051d5112ab8
2020-09-09 13:12:29 +10:00
dtucker@openbsd.org
9afe2a1508
upstream: Ensure that address/mask mismatches are flagged at
...
config-check time. ok djm@
OpenBSD-Regress-ID: 8f5f4c2c0bf00e6ceae7a1755a444666de0ea5c2
2020-09-09 13:12:29 +10:00
djm@openbsd.org
e32479645c
upstream: adapt to API changes
...
OpenBSD-Regress-ID: 5f147990cb67094fe554333782ab268a572bb2dd
2020-08-27 13:58:23 +10:00
djm@openbsd.org
9cbbdc12cb
upstream: dummy firmware needs to match API version numner crank (for
...
verify-required resident keys) even though it doesn't implement this feature
OpenBSD-Regress-ID: 86579ea2891e18e822e204413d011b2ae0e59657
2020-08-27 12:16:23 +10:00
Darren Tucker
62c81ef531
Skip ECDSA-SK webauthn test when built w/out ECC
2020-07-20 22:12:07 +10:00
dtucker@openbsd.org
40649bd082
upstream: Add test for '%k' (HostKeyAlias) TOKEN.
...
OpenBSD-Regress-ID: 8ed1ba1a811790031aad3fcea860a34ad7910456
2020-07-17 18:03:12 +10:00
dtucker@openbsd.org
6736fe6807
upstream: Add tests for expansions on UserKnownHostsFile.
...
OpenBSD-Regress-ID: bccf8060306c841bbcceb1392644f906a4d6ca51
2020-07-17 13:53:04 +10:00