Anderson Toshiyuki Sasaki
f1d57223db
CVE-2018-10933: Add tests for packet filtering
...
Created the test torture_packet_filter.c which tests if packets are
being correctly filtered.
Fixes T101
Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com >
2018-10-09 11:45:59 +02:00
Jakub Jelen
c977a97093
Assorted changes to make the proxycommand test pass
...
Cherry-picked from the following commit:
e4653b82bd
2018-10-05 12:09:45 +02:00
Jakub Jelen
743a34ad9f
Assorted changes to make the sftp_read test working
...
CHerry-picked from the following commit:
571f547556
2018-10-05 12:09:45 +02:00
Jakub Jelen
0f9e6598ef
Assorted changes to make the sftp_dir test working
...
Cherry-picked from the following commit:
af3de262b6
2018-10-05 12:09:45 +02:00
Jakub Jelen
f8007d7147
Assorted changes to make the torture_forward test pass
...
Cherry-picked from the following commit:
be25b58380
2018-10-05 12:09:45 +02:00
Jakub Jelen
3d70d4f08d
Assorted changes to make torture_request_env pass
...
Cherry-picked from the following commit:
4bc6af6c17
2018-10-05 12:09:45 +02:00
Andreas Schneider
bade29d3d5
torture: Fix torture_ssh_session() for cwrap testing
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 66f51df9
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
399ff6bbde
tests: Add public keys for bob
...
This also allows bob to auth as alice.
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit ee866441
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
c0d9aeda18
Assorted changes to make knownhosts test work
...
Cherry-picked from the following commit:
b65dcb3a35
2018-10-05 12:09:45 +02:00
Andreas Schneider
82b2d31c29
tortrue: Add ed25519 hostkey to sshd
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 250bf37a
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
74102dfd7a
Assorted changes from master to make torture_algorithms test working
...
Cherry-picked from the following commits:
cbd75c3e35
3014e3c458
2018-10-05 12:09:45 +02:00
Andreas Schneider
d678f6a9ea
torture: Fix building on Windows
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit b74a1841
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
00b8e6d1f0
tests: UsePrivilegeSeparation has no effect since OpenSSH 7.5
...
Additionally, we can already work around the privilege separation.
http://www.openssh.com/txt/release-7.5
Signed-off-by: Jakub Jelen <jjelen@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 56317caa
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
aeb859e130
tests: Do not trace sshd
...
OpenSSH's sshd does not work well under valgrind so lets avoid tracing it.
Signed-off-by: Jakub Jelen <jjelen@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit ca4fb9c6
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
b393f7e5e9
tests: Temporarily build chroot_wrapper
...
(cherry-picked from commit 094aa5eb
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
2004617fd0
tests: Always start tests as root so we can switch to a user
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 1729d4a1
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
c5fe7c5a72
tests: Do not generate pcap file by default
...
pcap file is generated by the processes writing to the sockets,
which is not allowed for privilege-separated process in new
OpenSSH servers (confined by seccomp filter).
Signed-off-by: Jakub Jelen <jjelen@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 5d3ab421
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
fec4dc4eff
tests: Give server more time to start
...
Signed-off-by: Jakub Jelen <jjelen@redhat.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit f8f7989c
)
2018-10-05 12:09:45 +02:00
Jakub Jelen
3d0c9cc6b5
tests: Do not test blowfish ciphers with OpenSSH 7.6 and newer
...
(cherry-picked from commit b92c4996
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
4d6048ef88
torture: Add support to specify verbosity level via env variable
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 2a9c3966
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
3d2d777e26
torture: Fix a warning
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 2bd65015
)
2018-10-05 12:09:45 +02:00
Aris Adamantiadis
8520adf609
osx: fix compilation
...
(cherry-picked from commit 886fdc8b
)
2018-10-05 12:09:45 +02:00
Justus Winter
c0be59f876
tests: Make test suite work out of the box on Debian
...
* tests/torture.c (torture_setup_create_sshd_config): Rework how the
location of the sftp server is discovered, and add the Debian-specific
location.
Signed-off-by: Justus Winter <justus@g10code.com >
Reviewed-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit e37fd832
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
2983b21996
torture: Fix ssh version detection
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit de309c51
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
88ae595583
torture: Set sshd debug level to DEBUG3
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 06343074
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
a228c3f728
torture: Also write stderr to a file
...
This allows to capture debug information of the wrappers.
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit c365ff3d
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
53ed121a9c
torture: Add additional sftp-server path for BSD
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 1bbfe058
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
5a1ebdec9d
tests: Wait for sshd to start before connecting
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit a3557b81
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
bf2a33b21e
tests: Turn on PAM support in sshd with pam_wrapper
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 7aa84318
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
130194aa0e
torture: Improve process termination function
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 0e98f121
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
1ebfd3834a
tests: Support other openssh versions ...
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 6e7eae96
)
2018-10-05 12:09:45 +02:00
Andreas Schneider
1eeeace975
cmake: Configure nss_wrapper and uid_wrapper
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 21b0d29e
)
2018-10-02 16:35:28 +02:00
Andreas Schneider
73ebcb3ab8
torture: Start sshd as root
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit a30d16c4
)
2018-10-02 16:35:08 +02:00
Andreas Schneider
bd7b509278
torture: Enable old host key algos for testing
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit c1fb9483
)
2018-10-02 16:34:49 +02:00
Andreas Schneider
652acbeb21
torture: Enable old cipher and kex algos in sshd
...
We need to test them, so enable them in the sshd.
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit dd0d04ae
)
2018-10-02 16:34:23 +02:00
Andreas Schneider
96e04d4691
torture: Create a torture_terminate_process() function
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit ae89b6c0
)
2018-10-02 16:34:02 +02:00
Andreas Schneider
7113074ae4
torture: Add torture_teardown_sshd_server().
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 14f1ce2e
)
2018-10-02 16:33:40 +02:00
Andreas Schneider
2db325eb74
torture: Restrict files to we write to our user.
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 62b0f58d
)
2018-10-02 16:33:18 +02:00
Andreas Schneider
9937d0b552
torture: Add function to setup sshd server
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit c3f963e7
)
2018-10-02 16:32:45 +02:00
Andreas Schneider
ae3e2a19c8
torture: Add torture_teardown_socket_dir().
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit fd09c4cb
)
2018-10-02 16:32:04 +02:00
Andreas Schneider
3567524fb2
torture: Add torture_setup_socket_dir().
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 13f68fc2
)
2018-10-02 16:31:32 +02:00
Andreas Schneider
4814c188eb
tests: Add ssh host keys for test environment.
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit c2d63627
)
2018-10-02 16:31:16 +02:00
Andreas Schneider
a317188cb7
cmake: Search for cwrap and sshd.
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry-picked from commit 6596d27e
)
2018-10-02 16:29:17 +02:00
Fabiano Fidêncio
b470dd943f
Fix a bunch of -Wmaybe-uninitialized
...
Reviewed-By: Aris Adamantiadis <aris@0xbadc0de.be >
2015-12-17 15:02:01 +01:00
Andreas Schneider
91b513798e
cmake: Handle libssh threas library correctly
...
This should fix the build on Windows and would not install pkg files.
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry picked from commit 5b586fdfec
)
2015-09-08 17:32:57 +02:00
Andreas Schneider
f718b50b3f
tests: Add checks for ssh_key_is_private()
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry picked from commit d54a1ab798
)
2015-08-10 13:58:51 +02:00
Andreas Schneider
f3620bbbad
cmake: Fix zlib include directory
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
(cherry picked from commit 728c2fbd01
)
2015-07-03 12:36:53 +02:00
Douglas Heriot
1accbcb98b
cmake: Do not use CMAKE_(SOURCE|BINARY)_DIR
...
(cherry picked from commit a65af1b3b8
)
2015-06-24 18:36:08 +02:00
Andreas Schneider
90e4786523
valgrind: Add suppression for openssl FIPS dlopen leak
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
2015-05-06 10:27:09 +02:00
Andreas Schneider
f65f41acc2
valgrind: Ignore valgrind free bug on exit
...
Signed-off-by: Andreas Schneider <asn@cryptomilk.org >
2015-05-06 10:23:27 +02:00