82fef71e20
Allow (but return EACCES) fstatat64 in sandbox.
...
This is apparently used in some configurations of OpenSSL when glibc
has getrandom(). bz#3276, patch from Kris Karas, ok djm@
2021-03-12 15:58:57 +11:00
1cd67ee15c
Move generic includes outside of ifdef.
...
This ensures that the macros in log.h are defined in the case where
either of --with-solaris-projects or --with-solaris-privs are used
without --with-solaris-contracts. bz#3278.
2021-03-12 13:16:10 +11:00
2421a567a8
Import regenerated moduli file.
2021-03-10 17:44:16 +11:00
e99080c05d
upstream: Fix PRINT macro, the suffix param to sshlog() was missing.
...
Also remove redundant __func__ prefix from PRINT calls as the macro already
adds __FILE__, __func__ and __LINE__. From Christos Zoulas. OK dtucker@
OpenBSD-Commit-ID: 01fdfa9c5541151b5461d9d7d6ca186a3413d949
2021-03-10 10:14:26 +11:00
160db17fc6
upstream: don't sshbuf_get_u32() into an enum; reported by goetze
...
AT dovetail.com via bz3269
OpenBSD-Commit-ID: 99a30a8f1df9bd72be54e21eee5c56a0f050921a
2021-03-04 09:43:28 +11:00
cffd033817
upstream: typo in other_hostkeys_message() display output, ok djm
...
OpenBSD-Commit-ID: 276f58afc97b6f5826e0be58380b737603dbf5f5
2021-03-04 09:43:28 +11:00
7fe141b96b
upstream: needs FILE*; from Mike Frysinger
...
OpenBSD-Commit-ID: dddb3aa9cb5792eeeaa37a1af67b5a3f25ded41d
2021-03-03 19:43:59 +11:00
d2afd717e6
update depend
2021-03-02 21:31:47 +11:00
f0c4eddf7c
update relnotes URL
2021-03-02 21:30:14 +11:00
67a8bb7fe6
update RPM spec version numbers
2021-03-02 21:29:54 +11:00
0a4b23b11b
upstream: openssh-8.5
...
OpenBSD-Commit-ID: 185e85d60fe042b8f8fa1ef29d4ef637bdf397d6
2021-03-02 16:43:01 +11:00
de3866383b
Only upload config logs if configure fails.
2021-03-01 21:13:24 +11:00
85ff2a564c
upstream: Add %k to list of keywords. From
...
=?UTF-8?q?=20Eero=20H=C3=A4kkinenvia=20bz#3267?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
OpenBSD-Commit-ID: 9c87f39a048cee2a7d1c8bab951b2f716256865e
2021-03-01 10:20:42 +11:00
e774bac359
upstream: Do not try to reset signal handler for signal 0 in
...
subprocess. Prevents spurious debug message. ok djm@
OpenBSD-Commit-ID: 7f9785e292dcf304457566ad4637effd27ad1d46
2021-02-28 13:01:20 +11:00
351c5dbbd7
upstream: fix alphabetic ordering of options; spotted by Iain Morgan
...
OpenBSD-Commit-ID: f955fec617d74af0feb5b275831a9fee813d7ad5
2021-02-28 10:54:19 +11:00
0d1c9dbe57
zlib is now optional.
2021-02-27 12:26:08 +11:00
b7c6ee7b43
Fix punctuatio and typo in README.md.
...
Some very minor fixes, missing 's' and punctuation.
2021-02-27 12:26:08 +11:00
6248b86074
Revert "ssh: optional bind interface if bind address specified."
...
This reverts commit 5a878a71a3
2021-02-26 16:45:50 +11:00
493339a940
detech BSD libc hash functions in libbsd / libmd
...
Some Linux distributions are shipping the BSD-style hashing functions
(e.g. SHA256Update) in libbsd and/or libmd. Detect this situation to
avoid header/replacement clashes later. ok dtucker@
2021-02-26 15:46:47 +11:00
5a878a71a3
ssh: optional bind interface if bind address specified.
...
Allows the -b and -B options to be used together.
For example, when the interface is in the VRF.
2021-02-26 15:46:47 +11:00
1fe4d70df9
upstream: remove this KEX fuzzer; it's awkward to use and doesn't play
...
nice with popular fuzzing drivers like libfuzzer. AFAIK nobody has used it
but me.
OpenBSD-Regress-ID: cad919522b3ce90c147c95abaf81b0492ac296c9
2021-02-26 15:23:42 +11:00
24a3a67bd7
Remove macos-11.00 PAM test target too.
...
These are failing apparently due to some kind of infrastructure problem,
making it look like every commit is busted.
2021-02-26 11:50:37 +11:00
473201783f
upstream: a bit more debugging behind #ifdef DEBUG_SK
...
OpenBSD-Commit-ID: d9fbce14945721061cb322f0084c2165d33d1993
2021-02-26 11:18:26 +11:00
fd9fa76a34
Remove macos-11.0 from the test target list.
...
It has been consistently failing for the past few days with a github
actions internal error.
2021-02-26 01:15:10 +11:00
476ac8e9d3
tidy the $INSTALLKEY_SH code layout a little
...
SSH-Copy-ID-Upstream: 78178aa5017222773e4c23d9001391eeaeca8983
2021-02-26 01:06:15 +11:00
983e05ef3b
if unable to add a missing newline, fail
...
SSH-Copy-ID-Upstream: 76b25e18f55499ea9edb4c4d6dc4a80bebc36d95
2021-02-26 01:06:15 +11:00
3594b3b015
use $AUTH_KEY_DIR, now that we have it
...
since that was a change made since jjelen's commit was written
also, quote the variables
SSH-Copy-ID-Upstream: 588cd8e5cbf95f3443d92b9ab27c5d73ceaf6616
2021-02-26 01:06:15 +11:00
333e25f7bc
restorecon the correct directory
...
if using different path for authorized_keys file
SSH-Copy-ID-Upstream: 791a3df47b48412c726bff6f7b1d190721e65d51
2021-02-26 01:06:15 +11:00
9beeab8a37
upstream: s/PubkeyAcceptedKeyTypes/PubkeyAcceptedAlgorithms/
...
OpenBSD-Regress-ID: 3dbc005fa29f69dc23d97e433b6dffed6fe7cb69
2021-02-25 15:15:46 +11:00
2dd9870c16
upstream: Rename pubkeyacceptedkeytypes to pubkeyacceptedalgorithms in
...
test to match change to config-dump output.
OpenBSD-Regress-ID: 74c9a4ad50306be873d032819d5e55c24eb74d5d
2021-02-25 10:31:47 +11:00
b9225c3a1c
upstream: Put obsolete aliases for hostbasedalgorithms and
...
pubkeyacceptedalgorithms after their current names so that the config-dump
mode finds and uses the current names. Spotted by Phil Pennock.
OpenBSD-Commit-ID: 5dd10e93cccfaff3aaaa09060c917adff04a9b15
2021-02-25 00:28:45 +11:00
8b8b60542d
upstream: lots more s/key types/signature algorithms/ mostly in
...
HostbasedAcceptedAlgorithms and HostKeyAlgorithms; prompted by Jakub Jelen
OpenBSD-Commit-ID: 3f719de4385b1a89e4323b2549c66aae050129cb
2021-02-24 08:56:22 +11:00
0aeb508aaa
upstream: Correct reference to signature algorithms as keys; from
...
Jakub Jelen
OpenBSD-Commit-ID: 36f7ecee86fc811aa0f8e21e7a872eee044b4be5
2021-02-24 08:56:22 +11:00
f186a020f2
Add a couple more test VMs.
2021-02-23 16:05:22 +11:00
ffcdd3d90e
Valgrind test: split and move up list.
...
Since the valgrind test takes so long it approaches the limit allowed by
github, move it to the head of the list so it's the first one started and
split the longest tests out into a second instance that runs concurrently
with the first.
2021-02-23 11:18:49 +11:00
c3b1636770
upstream: warn when the user specifies a ForwardAgent path that does
...
not exist and exit if ExitOnForwardFailure is set; bz3264
OpenBSD-Commit-ID: 72f7875865e723e464c71bf8692e83110699bf26
2021-02-23 11:09:07 +11:00
5fcb051494
Disable rlimit sandbox, doesn't work with valgrind
...
Only run regress tests, runing unit tests as well makes it run longer
than allowed y github.
2021-02-21 15:39:01 +11:00
bb0b9bf453
Upload valgrind logs on failure.
2021-02-20 13:29:41 +11:00
ebb3b75e97
Rename "vm" to "os" in selfhosted to match c-cpp.
...
Should make it easier to share code or maybe merge at some point.
2021-02-19 22:20:00 +11:00
76c0be0fe0
Upload regress failure logs in c-cpp too.
2021-02-19 22:19:38 +11:00
8751b6c313
Comment out Solaris 64bit PAM build...
...
until I can figure out why it's failing.
2021-02-19 22:13:36 +11:00
e9f6d563c0
Actually run Valgrind tests.
2021-02-19 10:20:17 +11:00
41d232e226
Add test against Valgrind.
2021-02-19 10:16:56 +11:00
e6528d91f1
Add fbsd12 test target.
2021-02-18 16:30:01 +11:00
6506cb2798
Remove unused arg.
2021-02-18 15:21:13 +11:00
93c31a6239
Add DEBUG_SK to kitchensink builds.
2021-02-18 14:54:07 +11:00
65085740d3
Add bbone test target (arm32).
2021-02-18 14:53:14 +11:00
63238f5aed
upstream: Fix the hostkeys rotation extension documentation
...
The documentation was lacking the needed want-reply field in the initial
global request.
https://github.com/openssh/openssh-portable/pull/218 by dbussink
OpenBSD-Commit-ID: 051824fd78edf6d647a0b9ac011bf88e28775054
2021-02-18 13:50:37 +11:00
34c5ef6e2d
upstream: make names in function prototypes match those in
...
definition from https://github.com/openssh/openssh-portable/pull/225 by
ZenithalHourlyRate
OpenBSD-Commit-ID: 7c736307bf3f2c7cb24d6f82f244eee959485acd
2021-02-18 13:17:43 +11:00
88e3d4de31
upstream: unbreak SK_DEBUG builds
...
from https://github.com/openssh/openssh-portable/pull/225 by
ZenithalHourlyRate
OpenBSD-Commit-ID: 28d7259ce1b04d025411464decfa2f1a097b43eb
2021-02-18 13:17:43 +11:00
Darren Tucker
millert@openbsd.org
djm@openbsd.org
sthen@openbsd.org
Damien Miller
dtucker@openbsd.org
Jeffrey H. Johnson
Dmitrii Turlupov
Philip Hands
Jakub Jelen