ClearML/dropbear
1
0
Fork 0
mirror of https://github.com/clearml/dropbear synced 2025-01-31 02:46:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,867 Commits 5 Branches 63 Tags 14 MiB
cf7f9350b8
Commit Graph

15 Commits

Author SHA1 Message Date
Matt Johnston
81e3977360 Add ecdsa OpenSSH format for dropbearconvert 2022-03-29 23:27:55 +08:00
Matt Johnston
ee3828b3f8 Add tests for dropbearconvert 2022-03-29 22:29:17 +08:00
Matt Johnston
678cc6fcc0 Fix pytest incorrect skip "reason" string 
No change to functionality
 2022-03-16 17:32:43 +08:00
Matt Johnston
10875e8524 Fix SSH_PUBKEYINFO, limit characters, add tests 
We fix a bad_bufptr() failure from a previous commit. We now limit
the allowed characters to those that will definitely be safe
in a shell. Some scripts/programs may use arbitrary environment
variables without escaping correctly - that could be a problem
in a restricted environment.

The current allowed set is a-z A-Z 0-9 .,_-+@

This also adds a test for SSH_PUBKEYINFO, by default it only runs
under github actions (or "act -j build").
 2022-03-16 17:23:58 +08:00
Matt Johnston
ae8a0abc34 test: Set allow_reuse_addr 
This avoids intermittent "Address already in use" failure
 2022-03-15 15:38:46 +08:00
Matt Johnston
26feb8f13e Handle /proc/.../maps being reordered 
We now search for the first r-xp line in the file
 2022-02-03 22:13:06 +08:00
Matt Johnston
3939321750 Make re-exec work with "dropbearmulti dropbear" 
The re-exec needs to know to use the dropbearmulti binary instead.
Add a test for this case.
 2022-02-01 22:19:49 +08:00
Matt Johnston
3fb2406717 Fix testing with dropbearmulti 2022-01-30 13:46:52 +08:00
Matt Johnston
d367503fb0 Remove extraneous print 2022-01-30 13:46:20 +08:00
Matt Johnston
2a6dac19b5 Use venv for test_aslr 
Otherwise we can't find the psutil dependency
 2022-01-30 13:37:20 +08:00
Matt Johnston
c7b7c9a99d Add re-exec for server 
This allows ASLR to re-randomize the address
space for every connection, preventing some
vulnerabilities from being exploitable by
repeated probing.

Overhead (memory and time) is yet to be confirmed.

At present this is only enabled on Linux. Other BSD platforms
with fexecve() would probably also work though have not been tested.
 2022-01-30 10:14:56 +08:00
Matt Johnston
27ffea3223 Debug pytest password auth failing 2021-10-19 13:30:58 +08:00
Matt Johnston
e05945f67a Add a default 10 second timeout for tests 2021-10-18 23:20:32 +08:00
Matt Johnston
8b0d31ab20 Add "make test" target to run pytest 
This will create a virtualenv if required.

There is a bit of churn here reverting to autoconf 2.59 in generated
config.h.in and configure
 2021-10-18 14:24:32 +08:00
Matt Johnston
65f6e48a06 Add first channel tests 
These initial tests are checking various edge cases of channel handling
that have cropped up over the years.
 2021-10-18 14:22:37 +08:00