Commit Graph

76 Commits (c11c7e3bbdd9db5c21c347c5a861e556ab742675)

Author SHA1 Message Date
Jacob Barthelmeh b0e042b3fa change to adjust include.am include path instead of source code 2022-09-23 15:31:38 -06:00
JacobBarthelmeh f0e3822b13 update test include path, needed for Yocto builds 2022-09-22 08:15:13 -07:00
JacobBarthelmeh 8399f78111
Merge pull request #461 from ejohnstown/clear-alarm
Clear Alarm
2022-09-20 11:57:02 -06:00
John Safranek d61cb264e5
Clear Alarm
1. Add a user auth result callback function to clear the alarm on
   successful user authentication.
2022-09-19 09:22:46 -07:00
JacobBarthelmeh 3d7c766906 fix test case for building with QNX 2022-09-15 15:04:17 -07:00
John Safranek 66be47acfe
Merge pull request #453 from JacobBarthelmeh/sshd-certs
adding X509 authentication of host
2022-09-08 11:11:05 -07:00
JacobBarthelmeh c6df8f6164
Merge pull request #457 from ejohnstown/child-listen
Child Listener
2022-09-08 11:47:22 -06:00
John Safranek 95431c3de1
Child Listener
1. Stash a copy of wolfsshd's listenFd in the connection record.
2. After the fork, the child now closes the listenFd.
3. After the fork, the parent now closes the fd.
2022-09-08 10:05:58 -07:00
JacobBarthelmeh af3658cd6c use abstract file calls 2022-09-08 09:38:29 -07:00
JacobBarthelmeh 657db7cd7e allow verify of public key with no authorized keys file if using a CA 2022-09-07 14:40:55 -07:00
JacobBarthelmeh 3e1a6ff342 add mutual X509 auth of host key and sshd_config parsing additions 2022-09-06 16:15:34 -07:00
Hayden Roche 7c486e518a initial openssh-style certificate parsing 2022-09-06 15:56:42 -07:00
John Safranek c1aabbdd87
Old Compiler Warning Cleanup (GCC 4.0.2)
Fixed a few "possibly used uninialized variable" warnings.
2022-09-06 09:10:50 -07:00
John Safranek c1f473d52b
Merge pull request #449 from JacobBarthelmeh/qnx
fix for DIR with QNX
2022-09-01 13:32:41 -07:00
John Safranek c8bdf7d3d2
Merge pull request #441 from JacobBarthelmeh/sshd
add chroot jailing to sshd
2022-09-01 13:28:52 -07:00
JacobBarthelmeh 331753c776 fix up if statement after cherry pick 2022-09-01 13:08:05 -07:00
JacobBarthelmeh fb0d3ba3d1 fix for DIR with QNX 2022-09-01 12:56:50 -07:00
JacobBarthelmeh ee68ef9333 change default path with sftp and chroot 2022-09-01 12:39:36 -07:00
JacobBarthelmeh c4efae1f5d adjust chdir in the case of chroot 2022-09-01 10:18:01 -07:00
JacobBarthelmeh 887edc29e3 do not fail out on chdir if chroot is used 2022-08-31 13:27:10 -07:00
JacobBarthelmeh e1f72a00e1 chroot and reduce permissions after forkpty 2022-08-31 10:34:13 -07:00
Hayden Roche 8cda0c4cc9
Merge pull request #445 from ejohnstown/wildcard 2022-08-29 17:44:45 -07:00
John Safranek 76417aca88
Wildcard Config
1. Modify HandleInclude() to have a single return point, and minimize
   the places where free() needs to be called.
2. Modify the config test wildcard include test file creation to return
   error similar other test functions.
3. Fix leak of the test configuration object in the wolfSSHd
   configuration test.
2022-08-29 17:12:55 -07:00
David Garske 86360a4fe2
Merge pull request #415 from ejohnstown/cert
Add support for X509 certificates
2022-08-29 15:51:28 -07:00
John Safranek 4d43d8406e
Wildcard Config
1. Update WMALLOCs to use the config's heap and proper DYNTYPE values.
2. Covert more STDC functions to use the wrapper macros.
3. Check some missed return values on mallocs, and make sure to free
   all allocated buffers.
2022-08-29 13:45:45 -07:00
JacobBarthelmeh 0ef7ca2145 refactor chroot call 2022-08-29 13:17:26 -07:00
JacobBarthelmeh 8a286ad727 remove duplicate code and raise permissions for chroot 2022-08-29 09:27:42 -07:00
JacobBarthelmeh e1f0a67c38 add chroot jailing to sshd 2022-08-29 09:27:42 -07:00
JacobBarthelmeh 0830b56fab fix for permissions level seperation 2022-08-26 23:07:32 -07:00
John Safranek a01d31592c
Wildcard
1. Revise to use the porting functions.
2. Add test cases to check the config wildcards.
3. Generate test files for the wildcard test, and delete them after.
2022-08-26 12:41:00 -07:00
John Safranek c42f8fc2fe
Wildcard Config
1. Process the included config files in strcmp order.
2022-08-25 14:08:34 -07:00
John Safranek 85069b816e
Wildcard Config
1. Fix the wildcard config file include.
2. Update the guard flags so macOS can also use wildcards.
3. Change the user priviledge separating setting to a bitfield.
4. Add test_configuration test to gitignore.
2022-08-25 10:58:10 -07:00
JacobBarthelmeh 2abce6326e turn off FPKI if not enabled, check CERTMAN log in SSHD 2022-08-24 06:55:25 -07:00
JacobBarthelmeh 20ace73349 fix new scan-build warning 2022-08-22 18:09:07 -06:00
JacobBarthelmeh 3f52af5e45 g++ fix warning on define 2022-08-22 17:34:49 -06:00
JacobBarthelmeh 0a93923067 g++ warning fixes 2022-08-22 17:31:02 -06:00
Jacob Barthelmeh 5a1f42ba07 update copyright, wrap isspace, fix formating 2022-08-16 13:28:06 -06:00
Jacob Barthelmeh 387ac299b0 fix for compiler warnings 2022-08-12 10:22:18 -06:00
JacobBarthelmeh ebd0e51e53 handle basic absolute paths for authorized keys file 2022-08-11 15:40:22 -07:00
Jacob Barthelmeh 17f3a029e3 cast on values and adjust isspace check 2022-08-10 14:58:02 -06:00
Andrew Hutchings 97974e9af2 Better wildcard support for Include
Check the prefix and postfix for a filename when a wildcard is used.
2022-08-09 13:51:14 +01:00
Andrew Hutchings d2327d5acd Fix syslog priority 2022-08-08 16:12:35 +01:00
Andrew Hutchings b1f26c84d0 Add syslog support
When going into daemon mode on a POSIX system, use syslog
2022-08-08 15:43:17 +01:00
Andrew Hutchings bef771b693 Implement Include directive
Includes single files or directories, only in POSIX for now.
2022-08-08 14:48:02 +01:00
Jacob Barthelmeh 8f3cdc8230 infer fixes, clang build fixes, initial build on OSX 2022-08-05 12:05:07 -06:00
JacobBarthelmeh f51375802b add more comments and always print out error messages 2022-08-03 15:04:34 -07:00
JacobBarthelmeh 7d58486a42 QNX shell login as user 2022-07-30 01:26:56 -07:00
JacobBarthelmeh 87a9bd4325 cleanup some debug messages and start to actual daemon 2022-07-30 00:46:11 -07:00
JacobBarthelmeh 4d90993e16 stub UseDNS, add checking config UsePrivilegeSeparation, scan-build warning fixes 2022-07-29 23:08:19 -07:00
JacobBarthelmeh c978b83c28 add check for PermitRootLogin config 2022-07-29 16:32:39 -07:00