Pavol Žáčik f2f1078d6d CVE-2026-59851 tests: add gssapi authentication tests with user mismatching the principal ...

Without any special configuration (e.g., in ~/.k5login), we should not
expect the principal alice@REALM to be able to authenticate as bob
against either sshd or a libssh server.

Signed-off-by: Pavol Žáčik <pzacik@redhat.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
(cherry picked from commit 098b427c87)

2026-07-16 11:51:04 +02:00

..

CMakeLists.txt

CVE-2026-59848 sftp: handle responses with unknown request IDs

2026-07-16 11:51:04 +02:00

torture_algorithms.c

kex: Allow MLKEM key exchanges in FIPS mode

2026-07-09 17:46:04 +02:00

torture_auth_agent_forwarding.c

tests: Skip agent forwarding test if we are too deep in filesystem

2026-01-15 12:22:10 +01:00

torture_auth_cert.c

CVE-2026-59849 tests: Reproducer for infinite loops with non-default configurations

2026-07-16 11:51:04 +02:00

torture_auth_common.c

tests: Implement more negative auth tests

2023-12-05 14:45:51 +01:00

torture_auth_pkcs11.c

tests: Provide minimal openssl configuration file

2026-01-15 12:22:10 +01:00

torture_auth.c

Fix percent expand character %d to home directory

2026-02-05 15:43:11 +01:00

torture_client_callbacks.c

tests: Free dynamically allocated callbacks

2023-05-09 09:07:16 +02:00

torture_client_config.c

misc: Fix possible NULL dereference

2026-02-10 10:35:23 +01:00

torture_client_global_requests.c

tests: Introduce torture_client_global_requests

2019-06-26 17:36:46 +02:00

torture_connect.c

connect: Support AddressFamily option

2026-01-02 14:34:11 +00:00

torture_forward.c

channels: Add originator to ssh_channel_accept

2022-06-07 14:16:59 +02:00

torture_get_kex_algo.c

kex: Allow MLKEM key exchanges in FIPS mode

2026-07-09 17:46:04 +02:00

torture_gssapi_auth.c

CVE-2026-59851 tests: add gssapi authentication tests with user mismatching the principal

2026-07-16 11:51:04 +02:00

torture_gssapi_key_exchange_null.c

tests: test pubkey auth after gssapi-keyex with null host key

2026-01-05 12:24:13 +01:00

torture_gssapi_key_exchange.c

CVE-2026-59851 tests: add gssapi authentication tests with user mismatching the principal

2026-07-16 11:51:04 +02:00

torture_hostkey.c

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

torture_knownhosts_verify.c

tests: Use temporary file for known_hosts

2019-10-25 15:15:20 +02:00

torture_knownhosts.c

tests: Do not parse configuration file in torture_knownhosts

2020-06-24 11:35:23 +02:00

torture_proxycommand.c

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

torture_proxyjump.c

test: Tighten testing to make sure right user and key is used with proxyjumps

2026-02-04 18:08:25 +01:00

torture_rekey.c

Fix semantics of strchr() for C23

2026-07-09 17:53:45 +02:00

torture_request_env.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_request_pty_modes.c

ttyopts: Adjust the default TTY modes to be sane

2024-08-29 09:07:25 +02:00

torture_scp.c

tests: Ensure the mode of the created file is ...

2022-08-08 10:13:01 +02:00

torture_session.c

tests: Fix wording in comment to make sense

2025-10-01 16:04:54 +02:00

torture_sftp_aio.c

sftp_aio: Test sftp aio with libssh proxyjump

2026-02-05 17:10:51 +01:00

torture_sftp_benchmark.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_sftp_canonicalize_path.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_sftp_dir.c

tests: Prefer assert_non_null() over assert_false()

2019-01-26 13:56:22 +01:00

torture_sftp_expand_path.c

Adding expand-path@openssh.com extension for client

2023-11-22 12:19:50 +01:00

torture_sftp_ext.c

tests: Prefer assert_non_null() over assert_false()

2019-01-26 13:56:22 +01:00

torture_sftp_fsync.c

tests: Allow to generate unencrypted PCAP files from testsuite

2019-01-09 10:14:56 +01:00

torture_sftp_get_users_groups_by_id.c

tests: add tests for users-groups-by-id@openssh.com on client side

2025-02-05 17:01:40 +05:30

torture_sftp_hardlink.c

Add tests for sftp_hardlink

2023-04-24 10:29:13 +02:00

torture_sftp_home_directory.c

use internal-sftp for testing

2024-04-16 03:10:52 +05:30

torture_sftp_init.c

Reproducer for out of bounds read of SFTP extensions

2026-02-05 17:19:01 +01:00

torture_sftp_limits.c

torture_sftp_limits.c: Change the test

2024-01-15 10:47:59 +01:00

torture_sftp_packet_read.c

fix: sftp_packet_read stuck in an infinite loop in blocking mode

2024-07-01 13:22:35 +00:00

torture_sftp_read.c

Fix broken link to an issue

2022-02-10 14:06:18 +01:00

torture_sftp_recv_response_msg.c

Add tests for sftp_recv_response_msg()

2024-11-12 17:45:44 +01:00

torture_sftp_rename.c

Implement tests for sftp_rename

2023-04-25 12:13:49 +02:00

torture_sftp_request_id.c

CVE-2026-59848 sftp: handle responses with unknown request IDs

2026-07-16 11:51:04 +02:00

torture_sftp_setstat.c

tests: Describe reason for using internal-sftp

2024-08-19 13:12:27 +02:00