Commit Graph

1609 Commits (61fdf5cb0b66d1ae97c967d8b89acca9235f614d)

Author SHA1 Message Date
Hayden Roche 6f57587249
Merge pull request #436 from ejohnstown/sftp-list 2022-09-27 16:31:57 -07:00
John Safranek fe2d68619c
SFTP List
More Updates from peer review comments.
2022-09-23 16:25:51 -07:00
Hayden Roche 43dce94c4d
Merge pull request #464 from JacobBarthelmeh/testing 2022-09-23 14:56:16 -07:00
Jacob Barthelmeh b0e042b3fa change to adjust include.am include path instead of source code 2022-09-23 15:31:38 -06:00
JacobBarthelmeh f0e3822b13 update test include path, needed for Yocto builds 2022-09-22 08:15:13 -07:00
JacobBarthelmeh acd857fdfa
Merge pull request #462 from ejohnstown/fuzz-fix
Fuzzing and Scan Build Fixes
2022-09-21 09:12:45 -06:00
John Safranek 24c5ffd660
Fuzzing and Scan Build Fixes
1. Fuzzing found a bad read when processing an X.509 certificate chain.
   Use the correct bounds when checking value reads.
2. Fix a potential NULL dereference with the ssh-agent. Move the check
   inside an everything-ok check.
3. Fix a couple dead writes.
2022-09-20 20:50:45 -07:00
John Safranek b816ac5fe8
SFTP List
Updated from peer review comments.
2022-09-20 11:53:56 -07:00
JacobBarthelmeh 8399f78111
Merge pull request #461 from ejohnstown/clear-alarm
Clear Alarm
2022-09-20 11:57:02 -06:00
John Safranek d61cb264e5
Clear Alarm
1. Add a user auth result callback function to clear the alarm on
   successful user authentication.
2022-09-19 09:22:46 -07:00
John Safranek 54de7185ee
Merge pull request #460 from JacobBarthelmeh/qnx
fix test case for building with QNX
2022-09-16 15:44:46 -07:00
John Safranek a48926b0dd
SFTP List
1. Update wolfSSH_SFTPNAME_readdir() to have a special case getting
   the drive letters at root in Windows.
2. The Win32 APIs can use forward slashes, but cannot have one at the
   beginning of the path before the drive letter. Add a trim function
   to remove the leading slash in the SFTP paths.
3. Update echoserver to always set the default SFTP path to either the
   provided command line option or to the CWD for the echoserver run.
4.  Get the RealPath for the default path
5. Tweak wolfSSH_RealPath() to handle some Windows cases.
6. Added more test cases.
2022-09-16 14:17:31 -07:00
John Safranek 2d3f11634a
SFTP List
In SFTP, change all references to the function wolfSSH_CleanPath() to
wolfSSH_RealPath().
2022-09-16 14:11:40 -07:00
John Safranek 607b6bc89a
SFTP List
1. Update wolfSSH_SFTP_RecvRealPath() to use wolfSSH_RealPath().
2. Whitespace.
2022-09-16 14:11:40 -07:00
John Safranek 3aaa0d4689
SFTP List
1. Add some more test cases to the RealPath() test.
2. Change the API for the function wolfSSH_RealPath(). It doesn't need
   the currentPath. Non-absolute paths are relative to defaultPath.
3. If defaultPath isn't present, use "/".
2022-09-16 14:11:40 -07:00
John Safranek 61492ecc20
SFTP List
1. In Windows build, when getting the file list for "/", cache a copy of
   the known drive letters.
2. When supplying the drives for Windows, use the cached copies.
2022-09-16 14:11:40 -07:00
John Safranek 2be99a25f6
SFTP List
Fixes listing the contents of C:\ on Windows when running the wolfSFTP
server. (ZD14607)

1. Change RecvOpenDir to look up the directory the way SFTPNAME_readdir.
2. Removed the calls to CleanPath in RecvOpenDir and SFTPNAME_readdir as
   it was adding backslashes to the dirName.
2022-09-16 14:11:35 -07:00
JacobBarthelmeh 3d7c766906 fix test case for building with QNX 2022-09-15 15:04:17 -07:00
JacobBarthelmeh cace79e915
Merge pull request #459 from embhorn/zd14816
Fix wolfSSH client: freeing uninitialized data
2022-09-15 10:06:07 -06:00
Eric Blankenhorn 8cff8a5895 Fix wolfSSH client: freeing uninitialized data 2022-09-12 19:48:21 -05:00
JacobBarthelmeh 8d0c8a58ad
Merge pull request #458 from ejohnstown/ocsp-fix
OCSP Fix
2022-09-08 14:56:38 -06:00
John Safranek 8ef49e1ff0
OCSP
The clause where we read the size of the OCSP blob and skip it, needs
to make sure there isn't an existing error. (ZD 14803)
2022-09-08 13:13:01 -07:00
John Safranek 66be47acfe
Merge pull request #453 from JacobBarthelmeh/sshd-certs
adding X509 authentication of host
2022-09-08 11:11:05 -07:00
JacobBarthelmeh c6df8f6164
Merge pull request #457 from ejohnstown/child-listen
Child Listener
2022-09-08 11:47:22 -06:00
John Safranek 95431c3de1
Child Listener
1. Stash a copy of wolfsshd's listenFd in the connection record.
2. After the fork, the child now closes the listenFd.
3. After the fork, the parent now closes the fd.
2022-09-08 10:05:58 -07:00
JacobBarthelmeh af3658cd6c use abstract file calls 2022-09-08 09:38:29 -07:00
John Safranek 57247a1abd
Merge pull request #455 from JacobBarthelmeh/testing
sanity check on number of certs in chain
2022-09-07 14:51:36 -07:00
JacobBarthelmeh 657db7cd7e allow verify of public key with no authorized keys file if using a CA 2022-09-07 14:40:55 -07:00
David Garske 8aa4aaca0b
Merge pull request #456 from anhu/ecdh-nistp256-kyber-512-sha256
Correction to KEX name.
2022-09-07 11:10:26 -07:00
Anthony Hu 2457fa2570 Correction to kex name. 2022-09-07 13:31:17 -04:00
JacobBarthelmeh 28d12a82d5
Merge pull request #454 from embhorn/zd14775
Fix DoUserAuthRequestEccCert to only call mp_clear on vars that have been init'd
2022-09-07 10:48:16 -06:00
JacobBarthelmeh 879a72ce13 sanity check on number of certs in chain 2022-09-07 09:41:07 -07:00
Eric Blankenhorn f8e8052bd4 Fix DoUserAuthRequestEccCert to only call mp_clear on vars that have been init'd 2022-09-07 11:07:54 -05:00
JacobBarthelmeh 3e1a6ff342 add mutual X509 auth of host key and sshd_config parsing additions 2022-09-06 16:15:34 -07:00
Hayden Roche 7c486e518a initial openssh-style certificate parsing 2022-09-06 15:56:42 -07:00
JacobBarthelmeh 543e5c89e3
Merge pull request #452 from ejohnstown/gcc-warn
Old Compiler Warning Cleanup (GCC 4.0.2)
2022-09-06 10:22:04 -06:00
John Safranek c1aabbdd87
Old Compiler Warning Cleanup (GCC 4.0.2)
Fixed a few "possibly used uninialized variable" warnings.
2022-09-06 09:10:50 -07:00
David Garske 5b3b5e60e1
Merge pull request #437 from anhu/p256_kyber_level1
Replace Saber Level1 with hybrid ECDH-P256 Kyber-Level1.
2022-09-02 11:56:04 -07:00
Anthony Hu 6ad773fdb3 Changes from peer feedback. 2022-09-02 14:13:10 -04:00
John Safranek 1d466823f3
Merge pull request #450 from JacobBarthelmeh/auth
fix for connecting to servers that only offer public key
2022-09-01 13:56:20 -07:00
John Safranek c1f473d52b
Merge pull request #449 from JacobBarthelmeh/qnx
fix for DIR with QNX
2022-09-01 13:32:41 -07:00
John Safranek c8bdf7d3d2
Merge pull request #441 from JacobBarthelmeh/sshd
add chroot jailing to sshd
2022-09-01 13:28:52 -07:00
JacobBarthelmeh 331753c776 fix up if statement after cherry pick 2022-09-01 13:08:05 -07:00
JacobBarthelmeh 0ce976a802 fix for connecting to servers that only offer public key 2022-09-01 12:58:36 -07:00
JacobBarthelmeh fb0d3ba3d1 fix for DIR with QNX 2022-09-01 12:56:50 -07:00
JacobBarthelmeh ee68ef9333 change default path with sftp and chroot 2022-09-01 12:39:36 -07:00
JacobBarthelmeh c4efae1f5d adjust chdir in the case of chroot 2022-09-01 10:18:01 -07:00
JacobBarthelmeh d4c5bb4c2f add checking for /. with real path 2022-08-31 15:55:58 -07:00
JacobBarthelmeh 67878bbec2
Merge pull request #448 from ejohnstown/old-gcc
Old Compiler Warning Cleanup (GCC 4.0.2)
2022-08-31 16:36:22 -06:00
JacobBarthelmeh d1171d417e
Merge pull request #447 from ejohnstown/certs-keys
Update CA Key
2022-08-31 16:36:04 -06:00