WolfSSL
/
wolfssh
mirror of https://github.com/wolfSSL/wolfssh.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,363 Commits
1 Branch
32 Tags
67 MiB
Commit Graph

1363 Commits (7e99fb3aae6e1df35dc1dce51056b02ff8648ce8)

Author SHA1 Message Date
John Safranek 7e99fb3aae
API Test Fix 
The echoserver will check the return on the shutdown function for
success and socket error. Socket error is for the peer already having
shut down their socket. This is mapped back to success so it shuts down
cleanly. Add this behavior to the API test client in the test for SFTP
recv read command test.
 2022-10-10 10:50:50 -07:00
John Safranek e983ae0ad9
Multiple Server Keys 
1. Allow user to add multiple server keys to the CTX up to a limit.
2. Clear the list of server's keys when releasing the CTX.
3. Update the API test case.
4. Server key algo list based on keys loaded.
5. Server uses key requested by client.
6. Change echoserver to load ECC and RSA key, -E option to select order.
7. Added a function to identify keys, and another to identify certs.
8. Added a function to add keys or certs to the list of keys and certs.
9. Fix return value for MAC Algo C2S match fail to the correct value.
 2022-10-07 15:35:35 -07:00
John Safranek abd1b6f888
Merge pull request #466 from haydenroche5/infinite_from_wolfssl 
Remove infinite macro (provided by wolfSSL types.h now).
 2022-10-04 16:21:52 -07:00
Hayden Roche 743d5dd61b Remove infinite macro (provided by wolfSSL types.h now). 2022-10-04 16:00:46 -07:00
Hayden Roche 6f57587249
Merge pull request #436 from ejohnstown/sftp-list 2022-09-27 16:31:57 -07:00
John Safranek fe2d68619c
SFTP List 
More Updates from peer review comments.
 2022-09-23 16:25:51 -07:00
Hayden Roche 43dce94c4d
Merge pull request #464 from JacobBarthelmeh/testing 2022-09-23 14:56:16 -07:00
Jacob Barthelmeh b0e042b3fa change to adjust include.am include path instead of source code 2022-09-23 15:31:38 -06:00
JacobBarthelmeh f0e3822b13 update test include path, needed for Yocto builds 2022-09-22 08:15:13 -07:00
JacobBarthelmeh acd857fdfa
Merge pull request #462 from ejohnstown/fuzz-fix 
Fuzzing and Scan Build Fixes
 2022-09-21 09:12:45 -06:00
John Safranek 24c5ffd660
Fuzzing and Scan Build Fixes 
1. Fuzzing found a bad read when processing an X.509 certificate chain.
   Use the correct bounds when checking value reads.
2. Fix a potential NULL dereference with the ssh-agent. Move the check
   inside an everything-ok check.
3. Fix a couple dead writes.
 2022-09-20 20:50:45 -07:00
John Safranek b816ac5fe8
SFTP List 
Updated from peer review comments.
 2022-09-20 11:53:56 -07:00
JacobBarthelmeh 8399f78111
Merge pull request #461 from ejohnstown/clear-alarm 
Clear Alarm
 2022-09-20 11:57:02 -06:00
John Safranek d61cb264e5
Clear Alarm 
1. Add a user auth result callback function to clear the alarm on
   successful user authentication.
 2022-09-19 09:22:46 -07:00
John Safranek 54de7185ee
Merge pull request #460 from JacobBarthelmeh/qnx 
fix test case for building with QNX
 2022-09-16 15:44:46 -07:00
John Safranek a48926b0dd
SFTP List 
1. Update wolfSSH_SFTPNAME_readdir() to have a special case getting
   the drive letters at root in Windows.
2. The Win32 APIs can use forward slashes, but cannot have one at the
   beginning of the path before the drive letter. Add a trim function
   to remove the leading slash in the SFTP paths.
3. Update echoserver to always set the default SFTP path to either the
   provided command line option or to the CWD for the echoserver run.
4.  Get the RealPath for the default path
5. Tweak wolfSSH_RealPath() to handle some Windows cases.
6. Added more test cases.
 2022-09-16 14:17:31 -07:00
John Safranek 2d3f11634a
SFTP List 
In SFTP, change all references to the function wolfSSH_CleanPath() to
wolfSSH_RealPath().
 2022-09-16 14:11:40 -07:00
John Safranek 607b6bc89a
SFTP List 
1. Update wolfSSH_SFTP_RecvRealPath() to use wolfSSH_RealPath().
2. Whitespace.
 2022-09-16 14:11:40 -07:00
John Safranek 3aaa0d4689
SFTP List 
1. Add some more test cases to the RealPath() test.
2. Change the API for the function wolfSSH_RealPath(). It doesn't need
   the currentPath. Non-absolute paths are relative to defaultPath.
3. If defaultPath isn't present, use "/".
 2022-09-16 14:11:40 -07:00
John Safranek 61492ecc20
SFTP List 
1. In Windows build, when getting the file list for "/", cache a copy of
   the known drive letters.
2. When supplying the drives for Windows, use the cached copies.
 2022-09-16 14:11:40 -07:00
John Safranek 2be99a25f6
SFTP List 
Fixes listing the contents of C:\ on Windows when running the wolfSFTP
server. (ZD14607)

1. Change RecvOpenDir to look up the directory the way SFTPNAME_readdir.
2. Removed the calls to CleanPath in RecvOpenDir and SFTPNAME_readdir as
   it was adding backslashes to the dirName.
 2022-09-16 14:11:35 -07:00
JacobBarthelmeh 3d7c766906 fix test case for building with QNX 2022-09-15 15:04:17 -07:00
JacobBarthelmeh cace79e915
Merge pull request #459 from embhorn/zd14816 
Fix wolfSSH client: freeing uninitialized data
 2022-09-15 10:06:07 -06:00
Eric Blankenhorn 8cff8a5895 Fix wolfSSH client: freeing uninitialized data 2022-09-12 19:48:21 -05:00
JacobBarthelmeh 8d0c8a58ad
Merge pull request #458 from ejohnstown/ocsp-fix 
OCSP Fix
 2022-09-08 14:56:38 -06:00
John Safranek 8ef49e1ff0
OCSP 
The clause where we read the size of the OCSP blob and skip it, needs
to make sure there isn't an existing error. (ZD 14803)
 2022-09-08 13:13:01 -07:00
John Safranek 66be47acfe
Merge pull request #453 from JacobBarthelmeh/sshd-certs 
adding X509 authentication of host
 2022-09-08 11:11:05 -07:00
JacobBarthelmeh c6df8f6164
Merge pull request #457 from ejohnstown/child-listen 
Child Listener
 2022-09-08 11:47:22 -06:00
John Safranek 95431c3de1
Child Listener 
1. Stash a copy of wolfsshd's listenFd in the connection record.
2. After the fork, the child now closes the listenFd.
3. After the fork, the parent now closes the fd.
 2022-09-08 10:05:58 -07:00
JacobBarthelmeh af3658cd6c use abstract file calls 2022-09-08 09:38:29 -07:00
John Safranek 57247a1abd
Merge pull request #455 from JacobBarthelmeh/testing 
sanity check on number of certs in chain
 2022-09-07 14:51:36 -07:00
JacobBarthelmeh 657db7cd7e allow verify of public key with no authorized keys file if using a CA 2022-09-07 14:40:55 -07:00
David Garske 8aa4aaca0b
Merge pull request #456 from anhu/ecdh-nistp256-kyber-512-sha256 
Correction to KEX name.
 2022-09-07 11:10:26 -07:00
Anthony Hu 2457fa2570 Correction to kex name. 2022-09-07 13:31:17 -04:00
JacobBarthelmeh 28d12a82d5
Merge pull request #454 from embhorn/zd14775 
Fix DoUserAuthRequestEccCert to only call mp_clear on vars that have been init'd
 2022-09-07 10:48:16 -06:00
JacobBarthelmeh 879a72ce13 sanity check on number of certs in chain 2022-09-07 09:41:07 -07:00
Eric Blankenhorn f8e8052bd4 Fix DoUserAuthRequestEccCert to only call mp_clear on vars that have been init'd 2022-09-07 11:07:54 -05:00
JacobBarthelmeh 3e1a6ff342 add mutual X509 auth of host key and sshd_config parsing additions 2022-09-06 16:15:34 -07:00
Hayden Roche 7c486e518a initial openssh-style certificate parsing 2022-09-06 15:56:42 -07:00
JacobBarthelmeh 543e5c89e3
Merge pull request #452 from ejohnstown/gcc-warn 
Old Compiler Warning Cleanup (GCC 4.0.2)
 2022-09-06 10:22:04 -06:00
John Safranek c1aabbdd87
Old Compiler Warning Cleanup (GCC 4.0.2) 
Fixed a few "possibly used uninialized variable" warnings.
 2022-09-06 09:10:50 -07:00
David Garske 5b3b5e60e1
Merge pull request #437 from anhu/p256_kyber_level1 
Replace Saber Level1 with hybrid ECDH-P256 Kyber-Level1.
 2022-09-02 11:56:04 -07:00
Anthony Hu 6ad773fdb3 Changes from peer feedback. 2022-09-02 14:13:10 -04:00
John Safranek 1d466823f3
Merge pull request #450 from JacobBarthelmeh/auth 
fix for connecting to servers that only offer public key
 2022-09-01 13:56:20 -07:00
John Safranek c1f473d52b
Merge pull request #449 from JacobBarthelmeh/qnx 
fix for DIR with QNX
 2022-09-01 13:32:41 -07:00
John Safranek c8bdf7d3d2
Merge pull request #441 from JacobBarthelmeh/sshd 
add chroot jailing to sshd
 2022-09-01 13:28:52 -07:00
JacobBarthelmeh 331753c776 fix up if statement after cherry pick 2022-09-01 13:08:05 -07:00
JacobBarthelmeh 0ce976a802 fix for connecting to servers that only offer public key 2022-09-01 12:58:36 -07:00
JacobBarthelmeh fb0d3ba3d1 fix for DIR with QNX 2022-09-01 12:56:50 -07:00
JacobBarthelmeh ee68ef9333 change default path with sftp and chroot 2022-09-01 12:39:36 -07:00