summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
7 daysShell syntax fix (leftover from a sync).HEADmasterrenmingshuai
Signed-off-by: renmingshuai <renmingshuai@huawei.com>
7 daysMerge flags for OpenSSL 3.x versions.Darren Tucker
OpenSSL has moved to 3.4 which we don't currently accept. Based on the OpenSSL versioning policy[0] it looks like all of the 3.x versions should work with OpenSSH, so remove the distinction in configure and accept all of them. [0] https://openssl.org/policies/general/versioning-policy.html
7 daysRemove 9.6 branch from status page.Darren Tucker
7 daysUpdate LibreSSL and OpenSSL versions tested.Darren Tucker
Update LibreSSL versions to current releases (3.8.4 & 3.9.1). Add newly-released OpenSSL 3.3.0, and add tests against the 3.1 and 3.3 branches.
2024-04-06Fix missing header for systemd notification90
2024-04-03notify systemd on listen and reloadDamien Miller
Standalone implementation that does not depend on libsystemd. With assistance from Luca Boccassi, and feedback/testing from Colin Watson. bz2641
2024-03-31Port changes from selfhosted to upstream tests.Darren Tucker
Should get them working again.
2024-03-30Check if OpenSSL implementation supports DSA.Darren Tucker
If --enable/disable-dsa-keys is not specified, set based on what OpenSSL supports. If specified as enabled, but not supported by OpenSSL error out. ok djm@
2024-03-30upstream: in OpenSSH private key format, correct type for subsequentdjm@openbsd.org
private keys in blob. From Jakub Jelen via GHPR430 OpenBSD-Commit-ID: d17dbf47554de2d752061592f95b5d772baab50b
2024-03-30Expose SSH_AUTH_INFO_0 always to PAM auth modules.Eero Häkkinen
This changes SSH_AUTH_INFO_0 to be exposed to PAM auth modules also when a password authentication method is in use and not only when a keyboard-interactive authentication method is in use.
2024-03-30Rearrange selfhosted VM scheduling.Darren Tucker
Instead of trying to infer the type of the self hosted tests in each of the driver scripts (inconsistently...), set one of the following variables to "true" in the workflow: VM: tests run in a virtual machine. EPHEMERAL: tests run on an ephemeral virtual machine. PERSISTENT: tests run on a persistent virtual machine REMOTE: tests run on a physical remote host. EPHEMERAL VMs can have multiple instances of any given VM can exist simultaneously and are run by a runner pool. The other types have a dedicated runner instance and can only run a single test at a time. Other settings: SSHFS: We need to sshfs mount over the repo so the workflow can collect build artifacts. This also implies the tests must be run over ssh. DEBUG_ACTIONS: enable "set -x" in scripts for debugging.
2024-03-30add new token-based signing key for dtucker@Damien Miller
Verified in person and via signature with old key. Will remove old key in a bit.
2024-03-30Fix OpenSSL ED25519 support detectionAlkaid
Wrong function signature in configure.ac prevents openssh from enabling the recently new support for ED25519 priv keys in PEM PKCS8 format.
2024-03-30upstream: allow WAYLAND_DISPLAY to enable SSH_ASKPASSdjm@openbsd.org
From dkg via GHPR479; ok dtucker@ OpenBSD-Commit-ID: 1ac1f9c45da44eabbae89375393c662349239257
2024-03-29upstream: Use egrep instead of grep -E.dtucker@openbsd.org
Some plaforms don't have the latter so this makes things easier in -portable. OpenBSD-Regress-ID: ff82260eb0db1f11130200b25d820cf73753bbe3
2024-03-29upstream: test -h is the POSIXly way of testing for a symlink. Reducesdtucker@openbsd.org
diff vs Portable. OpenBSD-Regress-ID: 6f31cd6e231e3b8c5c2ca0307573ccb7484bff7d
2024-03-26Fix name of OpenBSD upstream CI jobs.Darren Tucker
2024-03-26Resync with upstream: ${} around DATAFILE.Darren Tucker
2024-03-26upstream: optional debuggingdjm@openbsd.org
OpenBSD-Regress-ID: b4852bf97ac8fb2e3530f2d5f999edd66058d7bc
2024-03-26upstream: Verify string returned from local shell command.dtucker@openbsd.org
OpenBSD-Regress-ID: 5039bde24d33d809aebfa8d3ad7fe9053224e6f8
2024-03-26upstream: Improve shell portability: grep -q is not portable sodtucker@openbsd.org
redirect stdout, and use printf instead of relying on echo to do \n substitution. Reduces diff vs Portable. Also resync somewhat with upstream. OpenBSD-Regress-ID: 9ae876a8ec4c4725f1e9820a0667360ee2398337
2024-03-26upstream: Save error code from SSH for use inside case statement,dtucker@openbsd.org
from portable. In some shells, "case" will reset the value of $?, so save it first. OpenBSD-Regress-ID: da32e5be19299cb4f0f7de7f29c11257a62d6949
2024-03-26upstream: Increase timeout. Resyncs with portable where some ofdtucker@openbsd.org
the test VMs are slow enough for this to matter. OpenBSD-Regress-ID: 6a83a693602eb0312f06a4ad2cd6f40d99d24b26
2024-03-26upstream: In PuTTY interop test, don't assume the PuTTY majordtucker@openbsd.org
version is 0. Patch from cjwatson at debian.org via bz#3671. OpenBSD-Regress-ID: 835ed03c1b04ad46be82e674495521f11b840191
2024-03-26Really mkdir /usr/local/etc in CI tests.Darren Tucker
2024-03-26Better short name for OpenBSD upstream CI jobs too.Darren Tucker
2024-03-26Ensure /usr/local/etc exists before using in tests.Darren Tucker
2024-03-26Be more specific about when to rerun workflows.Darren Tucker
2024-03-26Add short names for test jobs on github CI.Darren Tucker
2024-03-26If we're using xpg4's id, remember to pass args.Darren Tucker
2024-03-26upstream: Import regenerated moduli.dtucker@openbsd.org
OpenBSD-Commit-ID: ad3d1486d105b008c93e952d158e5af4d9d4c531
2024-03-26upstream: Clarify how literal IPv6 addresses can be used in -J modejob@openbsd.org
OK djm@ OpenBSD-Commit-ID: 524ddae97746b3563ad4a887dfd0a6e6ba114c50
2024-03-25Add Mac OS X 14 test targets.Darren Tucker
2024-03-25Move xpg4 'id' handling into test-exec.sh.Darren Tucker
Handle replacement of 'id' the same way as we do other Portable specific replacements in test-exec.sh. This brings percent.sh back into sync with upstream.
2024-03-25Update branches shown on ci-status to 9.7 and 9.6.Darren Tucker
2024-03-25Improve detection of -fzero-call-used-regs=used.Darren Tucker
Should better detect problems with gcc 13 on m68k. bz#3673 from Colin Watson via bz#3673 and https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110934 Signed-off-by: Darren Tucker <dtucker@dtucker.net>
2024-03-11version number in READMEV_9_7_P1Damien Miller
2024-03-11crank RPM spec versionsDamien Miller
2024-03-11upstream: openssh-9.7djm@openbsd.org
OpenBSD-Commit-ID: 618ececf58b8cdae016b149787af06240f7b0cbc
2024-03-11Test against current OpenSSL and LibreSSL releases.Darren Tucker
Add LibreSSL 3.9.0, bump older branches to their respective current releases.
2024-03-10quote regexes used to test for algorithm supportDamien Miller
Fixes test failures on Solaris 8 reported by Tom G. Christensen
2024-03-09upstream: avoid logging in signal handler by converting mainloop todjm@openbsd.org
ppoll() bz3670, reported by Ben Hamilton; ok dtucker@ OpenBSD-Commit-ID: e58f18042b86425405ca09e6e9d7dfa1df9f5f7f
2024-03-09upstream: skip more whitespace, fixes find-principals ondjm@openbsd.org
allowed_signers files with blank lines; reported by Wiktor Kwapisiewicz OpenBSD-Commit-ID: b3a22a2afd753d70766f34bc7f309c03706b5298
2024-03-08upstream: Invoke ProxyCommand that uses stderr redirection viadtucker@openbsd.org
$TEST_SHELL. Fixes test when run by a user whose login shell is tcsh. Found by vinschen at redhat.com. OpenBSD-Regress-ID: f68d79e7f00caa8d216ebe00ee5f0adbb944062a
2024-03-07Prefer openssl binary from --with-ssl-dir directory.Darren Tucker
Use openssl in the directory specified by --with-ssl-dir as long as it's functional. Reported by The Doctor.
2024-03-06upstream: fix memory leak in mux proxy mode when requesting forwarding.djm@openbsd.org
found by RASU JSC, reported by Maks Mishin in GHPR#467 OpenBSD-Commit-ID: 97d96a166b1ad4b8d229864a553e3e56d3116860
2024-03-06upstream: wrap a few PKCS#11-specific bits in ENABLE_PKCS11djm@openbsd.org
OpenBSD-Commit-ID: 463e4a69eef3426a43a2b922c4e7b2011885d923
2024-03-06disable RSA tests when algorithm is not supportedDamien Miller
Unbreaks "make test" when compiled --without-openssl. Similar treatment to how we do DSA and ECDSA.
2024-03-06add a --without-retpoline configure optionDamien Miller
discussed with deraadt and dtucker a while ago
2024-03-04upstream: fix leak of CanonicalizePermittedCNAMEs on error path;djm@openbsd.org
spotted by Coverity (CID 438039) OpenBSD-Commit-ID: 208839699939721f452a4418afc028a9f9d3d8af
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-02 10:46:15 +0000