harbr 0.2.10 → 2.8.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.DS_Store +0 -0
- data/exe/harbr +225 -150
- data/lib/examples/container.toml +13 -0
- data/lib/harbr/container.rb +14 -10
- data/lib/harbr/host.rb +21 -0
- data/lib/harbr/version.rb +1 -1
- data/lib/harbr.rb +21 -6
- data/vendor/bundle/ruby/3.2.0/cache/dddr-1.0.8.gem +0 -0
- data/vendor/bundle/ruby/3.2.0/cache/dddr-1.1.0.gem +0 -0
- data/vendor/bundle/ruby/3.2.0/cache/dddr-1.1.1.gem +0 -0
- data/vendor/bundle/ruby/3.2.0/cache/net-ssh-7.2.1.gem +0 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/.DS_Store +0 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/.rspec +3 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/.standard.yml +3 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/CHANGELOG.md +5 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/CODE_OF_CONDUCT.md +84 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/LICENSE.txt +21 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/README.md +96 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/Rakefile +10 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/hero.png +0 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/lib/dddr/version.rb +5 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/lib/dddr.rb +205 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.0.8/sig/dddr.rbs +4 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/.DS_Store +0 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/.rspec +3 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/.standard.yml +3 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/CHANGELOG.md +5 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/CODE_OF_CONDUCT.md +84 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/LICENSE.txt +21 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/README.md +96 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/Rakefile +10 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/hero.png +0 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/lib/dddr/version.rb +5 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/lib/dddr.rb +182 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.0/sig/dddr.rbs +4 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/.DS_Store +0 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/.rspec +3 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/.standard.yml +3 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/CHANGELOG.md +5 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/CODE_OF_CONDUCT.md +84 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/LICENSE.txt +21 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/README.md +96 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/Rakefile +10 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/hero.png +0 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/lib/dddr/version.rb +5 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/lib/dddr.rb +184 -0
- data/vendor/bundle/ruby/3.2.0/gems/dddr-1.1.1/sig/dddr.rbs +4 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.dockerignore +6 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.github/FUNDING.yml +1 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.github/config/rubocop_linter_action.yml +4 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.github/workflows/ci-with-docker.yml +44 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.github/workflows/ci.yml +94 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.github/workflows/rubocop.yml +16 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.gitignore +15 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.rubocop.yml +22 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/.rubocop_todo.yml +1081 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/CHANGES.txt +738 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/DEVELOPMENT.md +23 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/Dockerfile +29 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/Dockerfile.openssl3 +17 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/Gemfile +13 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/Gemfile.noed25519 +12 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/Gemfile.norbnacl +12 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/ISSUE_TEMPLATE.md +30 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/LICENSE.txt +19 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/Manifest +132 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/README.md +298 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/Rakefile +192 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/SECURITY.md +4 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/THANKS.txt +110 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/appveyor.yml +58 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/docker-compose.yml +25 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/agent.rb +284 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/certificate.rb +183 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/constants.rb +20 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/ed25519.rb +186 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/ed25519_loader.rb +31 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/key_manager.rb +327 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/methods/abstract.rb +79 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/methods/hostbased.rb +72 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/methods/keyboard_interactive.rb +77 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/methods/none.rb +34 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/methods/password.rb +80 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/methods/publickey.rb +137 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/pageant.rb +497 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/pub_key_fingerprint.rb +43 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/authentication/session.rb +172 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/buffer.rb +449 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/buffered_io.rb +202 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/config.rb +406 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/connection/channel.rb +694 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/connection/constants.rb +33 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/connection/event_loop.rb +123 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/connection/keepalive.rb +59 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/connection/session.rb +712 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/connection/term.rb +180 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/errors.rb +106 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/key_factory.rb +218 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/known_hosts.rb +265 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/loggable.rb +62 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/packet.rb +106 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/prompt.rb +62 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/proxy/command.rb +123 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/proxy/errors.rb +16 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/proxy/http.rb +98 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/proxy/https.rb +50 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/proxy/jump.rb +54 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/proxy/socks4.rb +67 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/proxy/socks5.rb +140 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/service/forward.rb +426 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/channel.rb +147 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/extensions.rb +173 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/kex.rb +46 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/local_packet.rb +53 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/packet.rb +101 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/remote_packet.rb +40 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/script.rb +180 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test/socket.rb +65 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/test.rb +94 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/algorithms.rb +524 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/chacha20_poly1305_cipher.rb +117 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/chacha20_poly1305_cipher_loader.rb +17 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/cipher_factory.rb +128 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/constants.rb +40 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/ctr.rb +115 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/abstract.rb +97 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/md5.rb +10 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/md5_96.rb +9 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/none.rb +13 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/ripemd160.rb +11 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha1.rb +11 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha1_96.rb +9 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha2_256.rb +11 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha2_256_96.rb +9 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha2_256_etm.rb +12 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha2_512.rb +11 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha2_512_96.rb +9 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac/sha2_512_etm.rb +12 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/hmac.rb +47 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/identity_cipher.rb +65 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/abstract.rb +130 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/abstract5656.rb +72 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/curve25519_sha256.rb +39 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/curve25519_sha256_loader.rb +30 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/diffie_hellman_group14_sha1.rb +37 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/diffie_hellman_group14_sha256.rb +11 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/diffie_hellman_group1_sha1.rb +122 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha1.rb +72 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha256.rb +11 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/ecdh_sha2_nistp256.rb +39 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/ecdh_sha2_nistp384.rb +21 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/ecdh_sha2_nistp521.rb +21 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex.rb +31 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/key_expander.rb +30 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/openssl.rb +274 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/openssl_cipher_extensions.rb +8 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/packet_stream.rb +301 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/server_version.rb +77 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/session.rb +354 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/state.rb +208 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/verifiers/accept_new.rb +33 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/verifiers/accept_new_or_local_tunnel.rb +33 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/verifiers/always.rb +58 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/verifiers/never.rb +19 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/version.rb +68 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh.rb +338 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/net-ssh-public_cert.pem +20 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/net-ssh.gemspec +46 -0
- data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/support/ssh_tunnel_bug.rb +65 -0
- data/vendor/bundle/ruby/3.2.0/specifications/dddr-1.0.8.gemspec +27 -0
- data/vendor/bundle/ruby/3.2.0/specifications/dddr-1.1.0.gemspec +27 -0
- data/vendor/bundle/ruby/3.2.0/specifications/dddr-1.1.1.gemspec +27 -0
- data/vendor/bundle/ruby/3.2.0/specifications/net-ssh-7.2.1.gemspec +38 -0
- metadata +174 -9
- data/config/manifest.yml +0 -5
- data/lib/harbr/job.rb +0 -252
- data/lib/harbr/lxd/job.rb +0 -119
- data/lib/harbr/lxd/setup.rb +0 -45
@@ -0,0 +1,47 @@
|
|
1
|
+
require 'net/ssh/transport/key_expander'
|
2
|
+
require 'net/ssh/transport/hmac/md5'
|
3
|
+
require 'net/ssh/transport/hmac/md5_96'
|
4
|
+
require 'net/ssh/transport/hmac/sha1'
|
5
|
+
require 'net/ssh/transport/hmac/sha1_96'
|
6
|
+
require 'net/ssh/transport/hmac/sha2_256'
|
7
|
+
require 'net/ssh/transport/hmac/sha2_256_96'
|
8
|
+
require 'net/ssh/transport/hmac/sha2_512'
|
9
|
+
require 'net/ssh/transport/hmac/sha2_512_96'
|
10
|
+
require 'net/ssh/transport/hmac/sha2_256_etm'
|
11
|
+
require 'net/ssh/transport/hmac/sha2_512_etm'
|
12
|
+
require 'net/ssh/transport/hmac/ripemd160'
|
13
|
+
require 'net/ssh/transport/hmac/none'
|
14
|
+
|
15
|
+
# Implements a simple factory interface for fetching hmac implementations, or
|
16
|
+
# for finding the key lengths for hmac implementations.s
|
17
|
+
module Net::SSH::Transport::HMAC
|
18
|
+
# The mapping of SSH hmac algorithms to their implementations
|
19
|
+
MAP = {
|
20
|
+
'hmac-md5' => MD5,
|
21
|
+
'hmac-md5-96' => MD5_96,
|
22
|
+
'hmac-sha1' => SHA1,
|
23
|
+
'hmac-sha1-96' => SHA1_96,
|
24
|
+
'hmac-sha2-256' => SHA2_256,
|
25
|
+
'hmac-sha2-256-96' => SHA2_256_96,
|
26
|
+
'hmac-sha2-512' => SHA2_512,
|
27
|
+
'hmac-sha2-512-96' => SHA2_512_96,
|
28
|
+
'hmac-sha2-256-etm@openssh.com' => SHA2_256_Etm,
|
29
|
+
'hmac-sha2-512-etm@openssh.com' => SHA2_512_Etm,
|
30
|
+
'hmac-ripemd160' => RIPEMD160,
|
31
|
+
'hmac-ripemd160@openssh.com' => RIPEMD160,
|
32
|
+
'none' => None
|
33
|
+
}
|
34
|
+
|
35
|
+
# Retrieves a new hmac instance of the given SSH type (+name+). If +key+ is
|
36
|
+
# given, the new instance will be initialized with that key.
|
37
|
+
def self.get(name, key = "", parameters = {})
|
38
|
+
impl = MAP[name] or raise ArgumentError, "hmac not found: #{name.inspect}"
|
39
|
+
impl.new(Net::SSH::Transport::KeyExpander.expand_key(impl.key_length, key, parameters))
|
40
|
+
end
|
41
|
+
|
42
|
+
# Retrieves the key length for the hmac of the given SSH type (+name+).
|
43
|
+
def self.key_length(name)
|
44
|
+
impl = MAP[name] or raise ArgumentError, "hmac not found: #{name.inspect}"
|
45
|
+
impl.key_length
|
46
|
+
end
|
47
|
+
end
|
@@ -0,0 +1,65 @@
|
|
1
|
+
module Net
|
2
|
+
module SSH
|
3
|
+
module Transport
|
4
|
+
# A cipher that does nothing but pass the data through, unchanged. This
|
5
|
+
# keeps things in the code nice and clean when a cipher has not yet been
|
6
|
+
# determined (i.e., during key exchange).
|
7
|
+
class IdentityCipher
|
8
|
+
class << self
|
9
|
+
# A default block size of 8 is required by the SSH2 protocol.
|
10
|
+
def block_size
|
11
|
+
8
|
12
|
+
end
|
13
|
+
|
14
|
+
def key_length
|
15
|
+
0
|
16
|
+
end
|
17
|
+
|
18
|
+
# Returns an arbitrary integer.
|
19
|
+
def iv_len
|
20
|
+
4
|
21
|
+
end
|
22
|
+
|
23
|
+
# Does nothing. Returns self.
|
24
|
+
def encrypt
|
25
|
+
self
|
26
|
+
end
|
27
|
+
|
28
|
+
# Does nothing. Returns self.
|
29
|
+
def decrypt
|
30
|
+
self
|
31
|
+
end
|
32
|
+
|
33
|
+
# Passes its single argument through unchanged.
|
34
|
+
def update(text)
|
35
|
+
text
|
36
|
+
end
|
37
|
+
|
38
|
+
# Returns the empty string.
|
39
|
+
def final
|
40
|
+
""
|
41
|
+
end
|
42
|
+
|
43
|
+
# The name of this cipher, which is "identity".
|
44
|
+
def name
|
45
|
+
"identity"
|
46
|
+
end
|
47
|
+
|
48
|
+
# Does nothing. Returns nil.
|
49
|
+
def iv=(v)
|
50
|
+
nil
|
51
|
+
end
|
52
|
+
|
53
|
+
# Does nothing. Returns self.
|
54
|
+
def reset
|
55
|
+
self
|
56
|
+
end
|
57
|
+
|
58
|
+
def implicit_mac?
|
59
|
+
false
|
60
|
+
end
|
61
|
+
end
|
62
|
+
end
|
63
|
+
end
|
64
|
+
end
|
65
|
+
end
|
@@ -0,0 +1,130 @@
|
|
1
|
+
require 'net/ssh/buffer'
|
2
|
+
require 'net/ssh/errors'
|
3
|
+
require 'net/ssh/loggable'
|
4
|
+
require 'net/ssh/transport/openssl'
|
5
|
+
require 'net/ssh/transport/constants'
|
6
|
+
|
7
|
+
module Net
|
8
|
+
module SSH
|
9
|
+
module Transport
|
10
|
+
module Kex
|
11
|
+
# Abstract class that implement Diffie-Hellman Key Exchange
|
12
|
+
# See https://tools.ietf.org/html/rfc4253#page-21
|
13
|
+
class Abstract
|
14
|
+
include Loggable
|
15
|
+
include Constants
|
16
|
+
|
17
|
+
attr_reader :algorithms
|
18
|
+
attr_reader :connection
|
19
|
+
attr_reader :data
|
20
|
+
attr_reader :dh
|
21
|
+
|
22
|
+
# Create a new instance of the Diffie-Hellman Key Exchange algorithm.
|
23
|
+
# The Diffie-Hellman (DH) key exchange provides a shared secret that
|
24
|
+
# cannot be determined by either party alone. The key exchange is
|
25
|
+
# combined with a signature with the host key to provide host
|
26
|
+
# authentication.
|
27
|
+
def initialize(algorithms, connection, data)
|
28
|
+
@algorithms = algorithms
|
29
|
+
@connection = connection
|
30
|
+
|
31
|
+
@data = data.dup
|
32
|
+
@dh = generate_key
|
33
|
+
@logger = @data.delete(:logger)
|
34
|
+
end
|
35
|
+
|
36
|
+
# Perform the key-exchange for the given session, with the given
|
37
|
+
# data. This method will return a hash consisting of the
|
38
|
+
# following keys:
|
39
|
+
#
|
40
|
+
# * :session_id
|
41
|
+
# * :server_key
|
42
|
+
# * :shared_secret
|
43
|
+
# * :hashing_algorithm
|
44
|
+
#
|
45
|
+
# The caller is expected to be able to understand how to use these
|
46
|
+
# deliverables.
|
47
|
+
def exchange_keys
|
48
|
+
result = send_kexinit
|
49
|
+
verify_server_key(result[:server_key])
|
50
|
+
session_id = verify_signature(result)
|
51
|
+
confirm_newkeys
|
52
|
+
|
53
|
+
{
|
54
|
+
session_id: session_id,
|
55
|
+
server_key: result[:server_key],
|
56
|
+
shared_secret: result[:shared_secret],
|
57
|
+
hashing_algorithm: digester
|
58
|
+
}
|
59
|
+
end
|
60
|
+
|
61
|
+
def digester
|
62
|
+
raise NotImplementedError, 'abstract class: digester not implemented'
|
63
|
+
end
|
64
|
+
|
65
|
+
private
|
66
|
+
|
67
|
+
def matching?(key_ssh_type, host_key_alg)
|
68
|
+
return true if key_ssh_type == host_key_alg
|
69
|
+
return true if key_ssh_type == 'ssh-rsa' && ['rsa-sha2-512', 'rsa-sha2-256'].include?(host_key_alg)
|
70
|
+
end
|
71
|
+
|
72
|
+
# Verify that the given key is of the expected type, and that it
|
73
|
+
# really is the key for the session's host. Raise Net::SSH::Exception
|
74
|
+
# if it is not.
|
75
|
+
def verify_server_key(key) # :nodoc:
|
76
|
+
unless matching?(key.ssh_type, algorithms.host_key)
|
77
|
+
raise Net::SSH::Exception, "host key algorithm mismatch '#{key.ssh_type}' != '#{algorithms.host_key}'"
|
78
|
+
end
|
79
|
+
|
80
|
+
blob, fingerprint = generate_key_fingerprint(key)
|
81
|
+
|
82
|
+
unless connection.host_key_verifier.verify(key: key, key_blob: blob, fingerprint: fingerprint, session: connection)
|
83
|
+
raise Net::SSH::Exception, 'host key verification failed'
|
84
|
+
end
|
85
|
+
end
|
86
|
+
|
87
|
+
def generate_key_fingerprint(key)
|
88
|
+
blob = Net::SSH::Buffer.from(:key, key).to_s
|
89
|
+
|
90
|
+
fingerprint = Net::SSH::Authentication::PubKeyFingerprint.fingerprint(blob, @connection.options[:fingerprint_hash] || 'SHA256')
|
91
|
+
|
92
|
+
[blob, fingerprint]
|
93
|
+
rescue StandardError => e
|
94
|
+
[nil, "(could not generate fingerprint: #{e.message})"]
|
95
|
+
end
|
96
|
+
|
97
|
+
# Verify the signature that was received. Raise Net::SSH::Exception
|
98
|
+
# if the signature could not be verified. Otherwise, return the new
|
99
|
+
# session-id.
|
100
|
+
def verify_signature(result) # :nodoc:
|
101
|
+
response = build_signature_buffer(result)
|
102
|
+
|
103
|
+
hash = digester.digest(response.to_s)
|
104
|
+
|
105
|
+
server_key = result[:server_key]
|
106
|
+
server_sig = result[:server_sig]
|
107
|
+
unless connection.host_key_verifier.verify_signature { server_key.ssh_do_verify(server_sig, hash, host_key: algorithms.host_key) }
|
108
|
+
raise Net::SSH::Exception, 'could not verify server signature'
|
109
|
+
end
|
110
|
+
|
111
|
+
hash
|
112
|
+
end
|
113
|
+
|
114
|
+
# Send the NEWKEYS message, and expect the NEWKEYS message in
|
115
|
+
# reply.
|
116
|
+
def confirm_newkeys # :nodoc:
|
117
|
+
# send own NEWKEYS message first (the wodSSHServer won't send first)
|
118
|
+
response = Net::SSH::Buffer.new
|
119
|
+
response.write_byte(NEWKEYS)
|
120
|
+
connection.send_message(response)
|
121
|
+
|
122
|
+
# wait for the server's NEWKEYS message
|
123
|
+
buffer = connection.next_message
|
124
|
+
raise Net::SSH::Exception, 'expected NEWKEYS' unless buffer.type == NEWKEYS
|
125
|
+
end
|
126
|
+
end
|
127
|
+
end
|
128
|
+
end
|
129
|
+
end
|
130
|
+
end
|
@@ -0,0 +1,72 @@
|
|
1
|
+
require 'net/ssh/transport/kex/abstract'
|
2
|
+
|
3
|
+
module Net
|
4
|
+
module SSH
|
5
|
+
module Transport
|
6
|
+
module Kex
|
7
|
+
# Implement key-exchange algorithm from Elliptic Curve Algorithm Integration
|
8
|
+
# in the Secure Shell Transport Layer (RFC 5656)
|
9
|
+
class Abstract5656 < Abstract
|
10
|
+
alias ecdh dh
|
11
|
+
|
12
|
+
def curve_name
|
13
|
+
raise NotImplementedError, 'abstract class: curve_name not implemented'
|
14
|
+
end
|
15
|
+
|
16
|
+
private
|
17
|
+
|
18
|
+
def get_message_types
|
19
|
+
[KEXECDH_INIT, KEXECDH_REPLY]
|
20
|
+
end
|
21
|
+
|
22
|
+
def build_signature_buffer(result)
|
23
|
+
response = Net::SSH::Buffer.new
|
24
|
+
response.write_string data[:client_version_string],
|
25
|
+
data[:server_version_string],
|
26
|
+
data[:client_algorithm_packet],
|
27
|
+
data[:server_algorithm_packet],
|
28
|
+
result[:key_blob],
|
29
|
+
ecdh_public_key_bytes,
|
30
|
+
result[:server_ecdh_pubkey]
|
31
|
+
response.write_bignum result[:shared_secret]
|
32
|
+
response
|
33
|
+
end
|
34
|
+
|
35
|
+
def send_kexinit # :nodoc:
|
36
|
+
init, reply = get_message_types
|
37
|
+
|
38
|
+
# send the KEXECDH_INIT message
|
39
|
+
## byte SSH_MSG_KEX_ECDH_INIT
|
40
|
+
## string Q_C, client's ephemeral public key octet string
|
41
|
+
buffer = Net::SSH::Buffer.from(:byte, init, :mstring, ecdh_public_key_bytes)
|
42
|
+
connection.send_message(buffer)
|
43
|
+
|
44
|
+
# expect the following KEXECDH_REPLY message
|
45
|
+
## byte SSH_MSG_KEX_ECDH_REPLY
|
46
|
+
## string K_S, server's public host key
|
47
|
+
## string Q_S, server's ephemeral public key octet string
|
48
|
+
## string the signature on the exchange hash
|
49
|
+
buffer = connection.next_message
|
50
|
+
raise Net::SSH::Exception, 'expected REPLY' unless buffer.type == reply
|
51
|
+
|
52
|
+
result = {}
|
53
|
+
result[:key_blob] = buffer.read_string
|
54
|
+
result[:server_key] = Net::SSH::Buffer.new(result[:key_blob]).read_key
|
55
|
+
result[:server_ecdh_pubkey] = buffer.read_string
|
56
|
+
result[:shared_secret] = compute_shared_secret(result[:server_ecdh_pubkey])
|
57
|
+
|
58
|
+
sig_buffer = Net::SSH::Buffer.new(buffer.read_string)
|
59
|
+
sig_type = sig_buffer.read_string
|
60
|
+
if sig_type != algorithms.host_key_format
|
61
|
+
raise Net::SSH::Exception, "host key algorithm mismatch for signature '#{sig_type}' != '#{algorithms.host_key_format}'"
|
62
|
+
end
|
63
|
+
|
64
|
+
result[:server_sig] = sig_buffer.read_string
|
65
|
+
|
66
|
+
result
|
67
|
+
end
|
68
|
+
end
|
69
|
+
end
|
70
|
+
end
|
71
|
+
end
|
72
|
+
end
|
data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/curve25519_sha256.rb
ADDED
@@ -0,0 +1,39 @@
|
|
1
|
+
gem 'x25519' # raise if the gem x25519 is not installed
|
2
|
+
|
3
|
+
require 'x25519'
|
4
|
+
|
5
|
+
require 'net/ssh/transport/constants'
|
6
|
+
require 'net/ssh/transport/kex/abstract5656'
|
7
|
+
|
8
|
+
module Net
|
9
|
+
module SSH
|
10
|
+
module Transport
|
11
|
+
module Kex
|
12
|
+
# A key-exchange service implementing the "curve25519-sha256@libssh.org"
|
13
|
+
# key-exchange algorithm. (defined in https://tools.ietf.org/html/draft-ietf-curdle-ssh-curves-06)
|
14
|
+
class Curve25519Sha256 < Abstract5656
|
15
|
+
def digester
|
16
|
+
OpenSSL::Digest::SHA256
|
17
|
+
end
|
18
|
+
|
19
|
+
private
|
20
|
+
|
21
|
+
def generate_key # :nodoc:
|
22
|
+
::X25519::Scalar.generate
|
23
|
+
end
|
24
|
+
|
25
|
+
## string Q_C, client's ephemeral public key octet string
|
26
|
+
def ecdh_public_key_bytes
|
27
|
+
ecdh.public_key.to_bytes
|
28
|
+
end
|
29
|
+
|
30
|
+
# compute shared secret from server's public key and client's private key
|
31
|
+
def compute_shared_secret(server_ecdh_pubkey)
|
32
|
+
pk = ::X25519::MontgomeryU.new(server_ecdh_pubkey)
|
33
|
+
OpenSSL::BN.new(ecdh.diffie_hellman(pk).to_bytes, 2)
|
34
|
+
end
|
35
|
+
end
|
36
|
+
end
|
37
|
+
end
|
38
|
+
end
|
39
|
+
end
|
@@ -0,0 +1,30 @@
|
|
1
|
+
module Net
|
2
|
+
module SSH
|
3
|
+
module Transport
|
4
|
+
module Kex
|
5
|
+
# Loads Curve25519Sha256 support which requires optinal dependencies
|
6
|
+
module Curve25519Sha256Loader
|
7
|
+
begin
|
8
|
+
require 'net/ssh/transport/kex/curve25519_sha256'
|
9
|
+
LOADED = true
|
10
|
+
ERROR = nil
|
11
|
+
rescue LoadError => e
|
12
|
+
ERROR = e
|
13
|
+
LOADED = false
|
14
|
+
end
|
15
|
+
|
16
|
+
def self.raiseUnlessLoaded(message)
|
17
|
+
description = ERROR.is_a?(LoadError) ? dependenciesRequiredForX25519 : ''
|
18
|
+
description << "#{ERROR.class} : \"#{ERROR.message}\"\n" if ERROR
|
19
|
+
raise NotImplementedError, "#{message}\n#{description}" unless LOADED
|
20
|
+
end
|
21
|
+
|
22
|
+
def self.dependenciesRequiredForX25519
|
23
|
+
result = "net-ssh requires the following gems for x25519 support:\n"
|
24
|
+
result << " * x25519\n"
|
25
|
+
end
|
26
|
+
end
|
27
|
+
end
|
28
|
+
end
|
29
|
+
end
|
30
|
+
end
|
@@ -0,0 +1,37 @@
|
|
1
|
+
require 'net/ssh/transport/kex/diffie_hellman_group1_sha1'
|
2
|
+
|
3
|
+
module Net
|
4
|
+
module SSH
|
5
|
+
module Transport
|
6
|
+
module Kex
|
7
|
+
# A key-exchange service implementing the "diffie-hellman-group14-sha1"
|
8
|
+
# key-exchange algorithm. (defined in RFC 4253)
|
9
|
+
class DiffieHellmanGroup14SHA1 < DiffieHellmanGroup1SHA1
|
10
|
+
# The value of 'P', as a string, in hexadecimal
|
11
|
+
P_s = "FFFFFFFF" "FFFFFFFF" "C90FDAA2" "2168C234" +
|
12
|
+
"C4C6628B" "80DC1CD1" "29024E08" "8A67CC74" +
|
13
|
+
"020BBEA6" "3B139B22" "514A0879" "8E3404DD" +
|
14
|
+
"EF9519B3" "CD3A431B" "302B0A6D" "F25F1437" +
|
15
|
+
"4FE1356D" "6D51C245" "E485B576" "625E7EC6" +
|
16
|
+
"F44C42E9" "A637ED6B" "0BFF5CB6" "F406B7ED" +
|
17
|
+
"EE386BFB" "5A899FA5" "AE9F2411" "7C4B1FE6" +
|
18
|
+
"49286651" "ECE45B3D" "C2007CB8" "A163BF05" +
|
19
|
+
"98DA4836" "1C55D39A" "69163FA8" "FD24CF5F" +
|
20
|
+
"83655D23" "DCA3AD96" "1C62F356" "208552BB" +
|
21
|
+
"9ED52907" "7096966D" "670C354E" "4ABC9804" +
|
22
|
+
"F1746C08" "CA18217C" "32905E46" "2E36CE3B" +
|
23
|
+
"E39E772C" "180E8603" "9B2783A2" "EC07A28F" +
|
24
|
+
"B5C55DF0" "6F4C52C9" "DE2BCBF6" "95581718" +
|
25
|
+
"3995497C" "EA956AE5" "15D22618" "98FA0510" +
|
26
|
+
"15728E5A" "8AACAA68" "FFFFFFFF" "FFFFFFFF"
|
27
|
+
|
28
|
+
# The radix in which P_s represents the value of P
|
29
|
+
P_r = 16
|
30
|
+
|
31
|
+
# The group constant
|
32
|
+
G = 2
|
33
|
+
end
|
34
|
+
end
|
35
|
+
end
|
36
|
+
end
|
37
|
+
end
|
@@ -0,0 +1,11 @@
|
|
1
|
+
require 'net/ssh/transport/kex/diffie_hellman_group14_sha1'
|
2
|
+
|
3
|
+
module Net::SSH::Transport::Kex
|
4
|
+
# A key-exchange service implementing the "diffie-hellman-group14-sha256"
|
5
|
+
# key-exchange algorithm.
|
6
|
+
class DiffieHellmanGroup14SHA256 < DiffieHellmanGroup14SHA1
|
7
|
+
def digester
|
8
|
+
OpenSSL::Digest::SHA256
|
9
|
+
end
|
10
|
+
end
|
11
|
+
end
|
@@ -0,0 +1,122 @@
|
|
1
|
+
require 'net/ssh/transport/kex/abstract'
|
2
|
+
|
3
|
+
module Net
|
4
|
+
module SSH
|
5
|
+
module Transport
|
6
|
+
module Kex
|
7
|
+
# A key-exchange service implementing the "diffie-hellman-group1-sha1"
|
8
|
+
# key-exchange algorithm.
|
9
|
+
class DiffieHellmanGroup1SHA1 < Abstract
|
10
|
+
# The value of 'P', as a string, in hexadecimal
|
11
|
+
P_s = "FFFFFFFF" "FFFFFFFF" "C90FDAA2" "2168C234" +
|
12
|
+
"C4C6628B" "80DC1CD1" "29024E08" "8A67CC74" +
|
13
|
+
"020BBEA6" "3B139B22" "514A0879" "8E3404DD" +
|
14
|
+
"EF9519B3" "CD3A431B" "302B0A6D" "F25F1437" +
|
15
|
+
"4FE1356D" "6D51C245" "E485B576" "625E7EC6" +
|
16
|
+
"F44C42E9" "A637ED6B" "0BFF5CB6" "F406B7ED" +
|
17
|
+
"EE386BFB" "5A899FA5" "AE9F2411" "7C4B1FE6" +
|
18
|
+
"49286651" "ECE65381" "FFFFFFFF" "FFFFFFFF"
|
19
|
+
|
20
|
+
# The radix in which P_s represents the value of P
|
21
|
+
P_r = 16
|
22
|
+
|
23
|
+
# The group constant
|
24
|
+
G = 2
|
25
|
+
|
26
|
+
def digester
|
27
|
+
OpenSSL::Digest::SHA1
|
28
|
+
end
|
29
|
+
|
30
|
+
private
|
31
|
+
|
32
|
+
# Returns the DH key parameters for the current connection. [p, q]
|
33
|
+
def get_parameters
|
34
|
+
[
|
35
|
+
OpenSSL::BN.new(self.class::P_s, self.class::P_r),
|
36
|
+
self.class::G
|
37
|
+
]
|
38
|
+
end
|
39
|
+
|
40
|
+
# Returns the INIT/REPLY constants used by this algorithm.
|
41
|
+
def get_message_types
|
42
|
+
[KEXDH_INIT, KEXDH_REPLY]
|
43
|
+
end
|
44
|
+
|
45
|
+
# Build the signature buffer to use when verifying a signature from
|
46
|
+
# the server.
|
47
|
+
def build_signature_buffer(result)
|
48
|
+
response = Net::SSH::Buffer.new
|
49
|
+
response.write_string data[:client_version_string],
|
50
|
+
data[:server_version_string],
|
51
|
+
data[:client_algorithm_packet],
|
52
|
+
data[:server_algorithm_packet],
|
53
|
+
result[:key_blob]
|
54
|
+
response.write_bignum dh.pub_key,
|
55
|
+
result[:server_dh_pubkey],
|
56
|
+
result[:shared_secret]
|
57
|
+
response
|
58
|
+
end
|
59
|
+
|
60
|
+
# Generate a DH key with a private key consisting of the given
|
61
|
+
# number of bytes.
|
62
|
+
def generate_key # :nodoc:
|
63
|
+
p, g = get_parameters
|
64
|
+
|
65
|
+
asn1 = OpenSSL::ASN1::Sequence(
|
66
|
+
[
|
67
|
+
OpenSSL::ASN1::Integer(p),
|
68
|
+
OpenSSL::ASN1::Integer(g)
|
69
|
+
]
|
70
|
+
)
|
71
|
+
|
72
|
+
dh_params = OpenSSL::PKey::DH.new(asn1.to_der)
|
73
|
+
# XXX No private key size check! In theory the latter call should work but fails on OpenSSL 3.0 as
|
74
|
+
# dh_paramgen_subprime_len is now reserved for DHX algorithm
|
75
|
+
# key = OpenSSL::PKey.generate_key(dh_params, "dh_paramgen_subprime_len" => data[:need_bytes]/8)
|
76
|
+
if OpenSSL::PKey.respond_to?(:generate_key)
|
77
|
+
OpenSSL::PKey.generate_key(dh_params)
|
78
|
+
else
|
79
|
+
dh_params.generate_key!
|
80
|
+
dh_params
|
81
|
+
end
|
82
|
+
end
|
83
|
+
|
84
|
+
# Send the KEXDH_INIT message, and expect the KEXDH_REPLY. Return the
|
85
|
+
# resulting buffer.
|
86
|
+
#
|
87
|
+
# Parse the buffer from a KEXDH_REPLY message, returning a hash of
|
88
|
+
# the extracted values.
|
89
|
+
def send_kexinit # :nodoc:
|
90
|
+
init, reply = get_message_types
|
91
|
+
|
92
|
+
# send the KEXDH_INIT message
|
93
|
+
buffer = Net::SSH::Buffer.from(:byte, init, :bignum, dh.pub_key)
|
94
|
+
connection.send_message(buffer)
|
95
|
+
|
96
|
+
# expect the KEXDH_REPLY message
|
97
|
+
buffer = connection.next_message
|
98
|
+
raise Net::SSH::Exception, "expected REPLY" unless buffer.type == reply
|
99
|
+
|
100
|
+
result = Hash.new
|
101
|
+
|
102
|
+
result[:key_blob] = buffer.read_string
|
103
|
+
result[:server_key] = Net::SSH::Buffer.new(result[:key_blob]).read_key
|
104
|
+
result[:server_dh_pubkey] = buffer.read_bignum
|
105
|
+
result[:shared_secret] = OpenSSL::BN.new(dh.compute_key(result[:server_dh_pubkey]), 2)
|
106
|
+
|
107
|
+
sig_buffer = Net::SSH::Buffer.new(buffer.read_string)
|
108
|
+
sig_type = sig_buffer.read_string
|
109
|
+
if sig_type != algorithms.host_key_format
|
110
|
+
raise Net::SSH::Exception,
|
111
|
+
"host key algorithm mismatch for signature " +
|
112
|
+
"'#{sig_type}' != '#{algorithms.host_key_format}'"
|
113
|
+
end
|
114
|
+
result[:server_sig] = sig_buffer.read_string
|
115
|
+
|
116
|
+
return result
|
117
|
+
end
|
118
|
+
end
|
119
|
+
end
|
120
|
+
end
|
121
|
+
end
|
122
|
+
end
|
@@ -0,0 +1,72 @@
|
|
1
|
+
require 'net/ssh/errors'
|
2
|
+
require 'net/ssh/transport/constants'
|
3
|
+
require 'net/ssh/transport/kex/diffie_hellman_group1_sha1'
|
4
|
+
|
5
|
+
module Net::SSH::Transport::Kex
|
6
|
+
# A key-exchange service implementing the
|
7
|
+
# "diffie-hellman-group-exchange-sha1" key-exchange algorithm.
|
8
|
+
class DiffieHellmanGroupExchangeSHA1 < DiffieHellmanGroup1SHA1
|
9
|
+
MINIMUM_BITS = 1024
|
10
|
+
MAXIMUM_BITS = 8192
|
11
|
+
|
12
|
+
private
|
13
|
+
|
14
|
+
# Compute the number of bits needed for the given number of bytes.
|
15
|
+
def compute_need_bits
|
16
|
+
# for Compatibility: OpenSSH requires (need_bits * 2 + 1) length of parameter
|
17
|
+
need_bits = data[:need_bytes] * 8 * 2 + 1
|
18
|
+
|
19
|
+
data[:minimum_dh_bits] ||= MINIMUM_BITS
|
20
|
+
|
21
|
+
if need_bits < data[:minimum_dh_bits]
|
22
|
+
need_bits = data[:minimum_dh_bits]
|
23
|
+
elsif need_bits > MAXIMUM_BITS
|
24
|
+
need_bits = MAXIMUM_BITS
|
25
|
+
end
|
26
|
+
|
27
|
+
data[:need_bits] = need_bits
|
28
|
+
data[:need_bytes] = need_bits / 8
|
29
|
+
end
|
30
|
+
|
31
|
+
# Returns the DH key parameters for the given session.
|
32
|
+
def get_parameters
|
33
|
+
compute_need_bits
|
34
|
+
|
35
|
+
# request the DH key parameters for the given number of bits.
|
36
|
+
buffer = Net::SSH::Buffer.from(:byte, KEXDH_GEX_REQUEST, :long, data[:minimum_dh_bits],
|
37
|
+
:long, data[:need_bits], :long, MAXIMUM_BITS)
|
38
|
+
connection.send_message(buffer)
|
39
|
+
|
40
|
+
buffer = connection.next_message
|
41
|
+
raise Net::SSH::Exception, "expected KEXDH_GEX_GROUP, got #{buffer.type}" unless buffer.type == KEXDH_GEX_GROUP
|
42
|
+
|
43
|
+
p = buffer.read_bignum
|
44
|
+
g = buffer.read_bignum
|
45
|
+
|
46
|
+
[p, g]
|
47
|
+
end
|
48
|
+
|
49
|
+
# Returns the INIT/REPLY constants used by this algorithm.
|
50
|
+
def get_message_types
|
51
|
+
[KEXDH_GEX_INIT, KEXDH_GEX_REPLY]
|
52
|
+
end
|
53
|
+
|
54
|
+
# Build the signature buffer to use when verifying a signature from
|
55
|
+
# the server.
|
56
|
+
def build_signature_buffer(result)
|
57
|
+
response = Net::SSH::Buffer.new
|
58
|
+
response.write_string data[:client_version_string],
|
59
|
+
data[:server_version_string],
|
60
|
+
data[:client_algorithm_packet],
|
61
|
+
data[:server_algorithm_packet],
|
62
|
+
result[:key_blob]
|
63
|
+
response.write_long MINIMUM_BITS,
|
64
|
+
data[:need_bits],
|
65
|
+
MAXIMUM_BITS
|
66
|
+
response.write_bignum dh.p, dh.g, dh.pub_key,
|
67
|
+
result[:server_dh_pubkey],
|
68
|
+
result[:shared_secret]
|
69
|
+
response
|
70
|
+
end
|
71
|
+
end
|
72
|
+
end
|
@@ -0,0 +1,11 @@
|
|
1
|
+
require 'net/ssh/transport/kex/diffie_hellman_group_exchange_sha1'
|
2
|
+
|
3
|
+
module Net::SSH::Transport::Kex
|
4
|
+
# A key-exchange service implementing the
|
5
|
+
# "diffie-hellman-group-exchange-sha256" key-exchange algorithm.
|
6
|
+
class DiffieHellmanGroupExchangeSHA256 < DiffieHellmanGroupExchangeSHA1
|
7
|
+
def digester
|
8
|
+
OpenSSL::Digest::SHA256
|
9
|
+
end
|
10
|
+
end
|
11
|
+
end
|
data/vendor/bundle/ruby/3.2.0/gems/net-ssh-7.2.1/lib/net/ssh/transport/kex/ecdh_sha2_nistp256.rb
ADDED
@@ -0,0 +1,39 @@
|
|
1
|
+
require 'net/ssh/transport/kex/abstract5656'
|
2
|
+
|
3
|
+
module Net
|
4
|
+
module SSH
|
5
|
+
module Transport
|
6
|
+
module Kex
|
7
|
+
# A key-exchange service implementing the "ecdh-sha2-nistp256"
|
8
|
+
# key-exchange algorithm. (defined in RFC 5656)
|
9
|
+
class EcdhSHA2NistP256 < Abstract5656
|
10
|
+
def digester
|
11
|
+
OpenSSL::Digest::SHA256
|
12
|
+
end
|
13
|
+
|
14
|
+
def curve_name
|
15
|
+
OpenSSL::PKey::EC::CurveNameAlias['nistp256']
|
16
|
+
end
|
17
|
+
|
18
|
+
private
|
19
|
+
|
20
|
+
def generate_key # :nodoc:
|
21
|
+
OpenSSL::PKey::EC.generate(curve_name)
|
22
|
+
end
|
23
|
+
|
24
|
+
# compute shared secret from server's public key and client's private key
|
25
|
+
def compute_shared_secret(server_ecdh_pubkey)
|
26
|
+
pk = OpenSSL::PKey::EC::Point.new(OpenSSL::PKey::EC.new(curve_name).group,
|
27
|
+
OpenSSL::BN.new(server_ecdh_pubkey, 2))
|
28
|
+
OpenSSL::BN.new(ecdh.dh_compute_key(pk), 2)
|
29
|
+
end
|
30
|
+
|
31
|
+
## string Q_C, client's ephemeral public key octet string
|
32
|
+
def ecdh_public_key_bytes
|
33
|
+
ecdh.public_key.to_bn.to_s(2)
|
34
|
+
end
|
35
|
+
end
|
36
|
+
end
|
37
|
+
end
|
38
|
+
end
|
39
|
+
end
|