net-ssh 3.2.0 → 7.2.0.rc1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- checksums.yaml.gz.sig +0 -0
- data/.dockerignore +6 -0
- data/.github/FUNDING.yml +1 -0
- data/.github/config/rubocop_linter_action.yml +4 -0
- data/.github/workflows/ci-with-docker.yml +44 -0
- data/.github/workflows/ci.yml +93 -0
- data/.github/workflows/rubocop.yml +16 -0
- data/.gitignore +13 -0
- data/.rubocop.yml +22 -0
- data/.rubocop_todo.yml +1081 -0
- data/CHANGES.txt +237 -7
- data/DEVELOPMENT.md +23 -0
- data/Dockerfile +27 -0
- data/Dockerfile.openssl3 +17 -0
- data/Gemfile +13 -0
- data/Gemfile.noed25519 +12 -0
- data/Gemfile.norbnacl +12 -0
- data/ISSUE_TEMPLATE.md +30 -0
- data/Manifest +4 -5
- data/README.md +298 -0
- data/Rakefile +125 -74
- data/SECURITY.md +4 -0
- data/appveyor.yml +58 -0
- data/docker-compose.yml +23 -0
- data/lib/net/ssh/authentication/agent.rb +279 -18
- data/lib/net/ssh/authentication/certificate.rb +183 -0
- data/lib/net/ssh/authentication/constants.rb +17 -15
- data/lib/net/ssh/authentication/ed25519.rb +186 -0
- data/lib/net/ssh/authentication/ed25519_loader.rb +31 -0
- data/lib/net/ssh/authentication/key_manager.rb +86 -39
- data/lib/net/ssh/authentication/methods/abstract.rb +67 -48
- data/lib/net/ssh/authentication/methods/hostbased.rb +34 -37
- data/lib/net/ssh/authentication/methods/keyboard_interactive.rb +13 -13
- data/lib/net/ssh/authentication/methods/none.rb +16 -19
- data/lib/net/ssh/authentication/methods/password.rb +27 -17
- data/lib/net/ssh/authentication/methods/publickey.rb +96 -55
- data/lib/net/ssh/authentication/pageant.rb +471 -367
- data/lib/net/ssh/authentication/pub_key_fingerprint.rb +43 -0
- data/lib/net/ssh/authentication/session.rb +131 -121
- data/lib/net/ssh/buffer.rb +399 -300
- data/lib/net/ssh/buffered_io.rb +154 -150
- data/lib/net/ssh/config.rb +308 -185
- data/lib/net/ssh/connection/channel.rb +635 -613
- data/lib/net/ssh/connection/constants.rb +29 -29
- data/lib/net/ssh/connection/event_loop.rb +123 -0
- data/lib/net/ssh/connection/keepalive.rb +55 -51
- data/lib/net/ssh/connection/session.rb +620 -551
- data/lib/net/ssh/connection/term.rb +125 -123
- data/lib/net/ssh/errors.rb +101 -99
- data/lib/net/ssh/key_factory.rb +197 -105
- data/lib/net/ssh/known_hosts.rb +214 -127
- data/lib/net/ssh/loggable.rb +50 -49
- data/lib/net/ssh/packet.rb +83 -79
- data/lib/net/ssh/prompt.rb +50 -81
- data/lib/net/ssh/proxy/command.rb +105 -90
- data/lib/net/ssh/proxy/errors.rb +12 -10
- data/lib/net/ssh/proxy/http.rb +82 -79
- data/lib/net/ssh/proxy/https.rb +50 -0
- data/lib/net/ssh/proxy/jump.rb +54 -0
- data/lib/net/ssh/proxy/socks4.rb +2 -6
- data/lib/net/ssh/proxy/socks5.rb +14 -17
- data/lib/net/ssh/service/forward.rb +370 -317
- data/lib/net/ssh/test/channel.rb +145 -136
- data/lib/net/ssh/test/extensions.rb +131 -110
- data/lib/net/ssh/test/kex.rb +34 -32
- data/lib/net/ssh/test/local_packet.rb +46 -44
- data/lib/net/ssh/test/packet.rb +89 -70
- data/lib/net/ssh/test/remote_packet.rb +32 -30
- data/lib/net/ssh/test/script.rb +156 -142
- data/lib/net/ssh/test/socket.rb +49 -48
- data/lib/net/ssh/test.rb +82 -77
- data/lib/net/ssh/transport/algorithms.rb +462 -359
- data/lib/net/ssh/transport/chacha20_poly1305_cipher.rb +117 -0
- data/lib/net/ssh/transport/chacha20_poly1305_cipher_loader.rb +17 -0
- data/lib/net/ssh/transport/cipher_factory.rb +122 -99
- data/lib/net/ssh/transport/constants.rb +32 -24
- data/lib/net/ssh/transport/ctr.rb +42 -22
- data/lib/net/ssh/transport/hmac/abstract.rb +81 -63
- data/lib/net/ssh/transport/hmac/md5.rb +0 -2
- data/lib/net/ssh/transport/hmac/md5_96.rb +0 -2
- data/lib/net/ssh/transport/hmac/none.rb +0 -2
- data/lib/net/ssh/transport/hmac/ripemd160.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha1.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha1_96.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha2_256.rb +7 -11
- data/lib/net/ssh/transport/hmac/sha2_256_96.rb +4 -8
- data/lib/net/ssh/transport/hmac/sha2_256_etm.rb +12 -0
- data/lib/net/ssh/transport/hmac/sha2_512.rb +6 -9
- data/lib/net/ssh/transport/hmac/sha2_512_96.rb +4 -8
- data/lib/net/ssh/transport/hmac/sha2_512_etm.rb +12 -0
- data/lib/net/ssh/transport/hmac.rb +14 -12
- data/lib/net/ssh/transport/identity_cipher.rb +54 -44
- data/lib/net/ssh/transport/kex/abstract.rb +130 -0
- data/lib/net/ssh/transport/kex/abstract5656.rb +72 -0
- data/lib/net/ssh/transport/kex/curve25519_sha256.rb +39 -0
- data/lib/net/ssh/transport/kex/curve25519_sha256_loader.rb +30 -0
- data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha1.rb +33 -40
- data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha256.rb +11 -0
- data/lib/net/ssh/transport/kex/diffie_hellman_group1_sha1.rb +119 -213
- data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha1.rb +53 -61
- data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha256.rb +5 -9
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp256.rb +36 -90
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp384.rb +18 -10
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp521.rb +18 -10
- data/lib/net/ssh/transport/kex.rb +15 -12
- data/lib/net/ssh/transport/key_expander.rb +24 -20
- data/lib/net/ssh/transport/openssl.rb +161 -124
- data/lib/net/ssh/transport/openssl_cipher_extensions.rb +8 -0
- data/lib/net/ssh/transport/packet_stream.rb +246 -185
- data/lib/net/ssh/transport/server_version.rb +55 -56
- data/lib/net/ssh/transport/session.rb +306 -255
- data/lib/net/ssh/transport/state.rb +178 -176
- data/lib/net/ssh/verifiers/accept_new.rb +33 -0
- data/lib/net/ssh/verifiers/accept_new_or_local_tunnel.rb +33 -0
- data/lib/net/ssh/verifiers/always.rb +58 -0
- data/lib/net/ssh/verifiers/never.rb +19 -0
- data/lib/net/ssh/version.rb +55 -53
- data/lib/net/ssh.rb +111 -47
- data/net-ssh-public_cert.pem +18 -18
- data/net-ssh.gemspec +38 -205
- data/support/ssh_tunnel_bug.rb +5 -5
- data.tar.gz.sig +0 -0
- metadata +173 -118
- metadata.gz.sig +0 -0
- data/.travis.yml +0 -18
- data/README.rdoc +0 -182
- data/lib/net/ssh/authentication/agent/java_pageant.rb +0 -85
- data/lib/net/ssh/authentication/agent/socket.rb +0 -178
- data/lib/net/ssh/ruby_compat.rb +0 -46
- data/lib/net/ssh/verifiers/lenient.rb +0 -30
- data/lib/net/ssh/verifiers/null.rb +0 -12
- data/lib/net/ssh/verifiers/secure.rb +0 -52
- data/lib/net/ssh/verifiers/strict.rb +0 -24
- data/setup.rb +0 -1585
- data/support/arcfour_check.rb +0 -20
- data/test/README.txt +0 -18
- data/test/authentication/methods/common.rb +0 -28
- data/test/authentication/methods/test_abstract.rb +0 -51
- data/test/authentication/methods/test_hostbased.rb +0 -114
- data/test/authentication/methods/test_keyboard_interactive.rb +0 -121
- data/test/authentication/methods/test_none.rb +0 -41
- data/test/authentication/methods/test_password.rb +0 -95
- data/test/authentication/methods/test_publickey.rb +0 -148
- data/test/authentication/test_agent.rb +0 -232
- data/test/authentication/test_key_manager.rb +0 -240
- data/test/authentication/test_session.rb +0 -107
- data/test/common.rb +0 -125
- data/test/configs/auth_off +0 -5
- data/test/configs/auth_on +0 -4
- data/test/configs/empty +0 -0
- data/test/configs/eqsign +0 -3
- data/test/configs/exact_match +0 -8
- data/test/configs/host_plus +0 -10
- data/test/configs/multihost +0 -4
- data/test/configs/negative_match +0 -6
- data/test/configs/nohost +0 -19
- data/test/configs/numeric_host +0 -4
- data/test/configs/proxy_remote_user +0 -2
- data/test/configs/send_env +0 -2
- data/test/configs/substitutes +0 -8
- data/test/configs/wild_cards +0 -14
- data/test/connection/test_channel.rb +0 -487
- data/test/connection/test_session.rb +0 -564
- data/test/integration/README.txt +0 -17
- data/test/integration/Vagrantfile +0 -12
- data/test/integration/common.rb +0 -63
- data/test/integration/playbook.yml +0 -56
- data/test/integration/test_forward.rb +0 -637
- data/test/integration/test_id_rsa_keys.rb +0 -96
- data/test/integration/test_proxy.rb +0 -93
- data/test/known_hosts/github +0 -1
- data/test/known_hosts/github_hash +0 -1
- data/test/manual/test_pageant.rb +0 -37
- data/test/start/test_connection.rb +0 -53
- data/test/start/test_options.rb +0 -57
- data/test/start/test_transport.rb +0 -28
- data/test/start/test_user_nil.rb +0 -27
- data/test/test_all.rb +0 -12
- data/test/test_buffer.rb +0 -433
- data/test/test_buffered_io.rb +0 -63
- data/test/test_config.rb +0 -268
- data/test/test_key_factory.rb +0 -191
- data/test/test_known_hosts.rb +0 -66
- data/test/transport/hmac/test_md5.rb +0 -41
- data/test/transport/hmac/test_md5_96.rb +0 -27
- data/test/transport/hmac/test_none.rb +0 -34
- data/test/transport/hmac/test_ripemd160.rb +0 -36
- data/test/transport/hmac/test_sha1.rb +0 -36
- data/test/transport/hmac/test_sha1_96.rb +0 -27
- data/test/transport/hmac/test_sha2_256.rb +0 -37
- data/test/transport/hmac/test_sha2_256_96.rb +0 -27
- data/test/transport/hmac/test_sha2_512.rb +0 -37
- data/test/transport/hmac/test_sha2_512_96.rb +0 -27
- data/test/transport/kex/test_diffie_hellman_group14_sha1.rb +0 -13
- data/test/transport/kex/test_diffie_hellman_group1_sha1.rb +0 -150
- data/test/transport/kex/test_diffie_hellman_group_exchange_sha1.rb +0 -96
- data/test/transport/kex/test_diffie_hellman_group_exchange_sha256.rb +0 -19
- data/test/transport/kex/test_ecdh_sha2_nistp256.rb +0 -161
- data/test/transport/kex/test_ecdh_sha2_nistp384.rb +0 -38
- data/test/transport/kex/test_ecdh_sha2_nistp521.rb +0 -38
- data/test/transport/test_algorithms.rb +0 -328
- data/test/transport/test_cipher_factory.rb +0 -443
- data/test/transport/test_hmac.rb +0 -34
- data/test/transport/test_identity_cipher.rb +0 -40
- data/test/transport/test_packet_stream.rb +0 -1762
- data/test/transport/test_server_version.rb +0 -74
- data/test/transport/test_session.rb +0 -331
- data/test/transport/test_state.rb +0 -181
- data/test/verifiers/test_secure.rb +0 -40
@@ -0,0 +1,43 @@
|
|
1
|
+
require 'openssl'
|
2
|
+
|
3
|
+
module Net
|
4
|
+
module SSH
|
5
|
+
module Authentication
|
6
|
+
# Public key fingerprinting utility module - internal not part of API.
|
7
|
+
# This is included in pubkey classes and called from there. All RSA, DSA, and ECC keys
|
8
|
+
# are supported.
|
9
|
+
#
|
10
|
+
# require 'net/ssh'
|
11
|
+
# my_pubkey_text = File.read('/path/to/id_ed25519.pub')
|
12
|
+
# #=> "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDB2NBh4GJPPUN1kXPMu8b633Xcv55WoKC3OkBjFAbzJ alice@example.com"
|
13
|
+
# my_pubkey = Net::SSH::KeyFactory.load_data_public_key(my_pubkey_text)
|
14
|
+
# #=> #<Net::SSH::Authentication::ED25519::PubKey:0x00007fc8e91819b0
|
15
|
+
# my_pubkey.fingerprint
|
16
|
+
# #=> "2f:7f:97:21:76:a4:0f:38:c4:fe:d8:b4:6a:39:72:30"
|
17
|
+
# my_pubkey.fingerprint('SHA256')
|
18
|
+
# #=> "SHA256:u6mXnY8P1b0FODGp8mckqOB33u8+jvkSCtJbD5Q9klg"
|
19
|
+
module PubKeyFingerprint # :nodoc:
|
20
|
+
# Return the key's fingerprint. Algorithm may be either +MD5+ (default),
|
21
|
+
# or +SHA256+. For +SHA256+, fingerprints are in the same format
|
22
|
+
# returned by OpenSSH's <tt>`ssh-add -l -E SHA256`</tt>, i.e.,
|
23
|
+
# trailing base64 padding '=' characters are stripped and the
|
24
|
+
# literal string +SHA256:+ is prepended.
|
25
|
+
def fingerprint(algorithm = 'MD5')
|
26
|
+
@fingerprint ||= {}
|
27
|
+
@fingerprint[algorithm] ||= PubKeyFingerprint.fingerprint(to_blob, algorithm)
|
28
|
+
end
|
29
|
+
|
30
|
+
def self.fingerprint(blob, algorithm = 'MD5')
|
31
|
+
case algorithm.to_s.upcase
|
32
|
+
when 'MD5'
|
33
|
+
OpenSSL::Digest.hexdigest(algorithm, blob).scan(/../).join(":")
|
34
|
+
when 'SHA256'
|
35
|
+
"SHA256:#{Base64.encode64(OpenSSL::Digest.digest(algorithm, blob)).chomp.gsub(/=+\z/, '')}"
|
36
|
+
else
|
37
|
+
raise OpenSSL::Digest::DigestError, "unsupported ssh key digest #{algorithm}"
|
38
|
+
end
|
39
|
+
end
|
40
|
+
end
|
41
|
+
end
|
42
|
+
end
|
43
|
+
end
|
@@ -8,148 +8,158 @@ require 'net/ssh/authentication/methods/hostbased'
|
|
8
8
|
require 'net/ssh/authentication/methods/password'
|
9
9
|
require 'net/ssh/authentication/methods/keyboard_interactive'
|
10
10
|
|
11
|
-
module Net
|
12
|
-
|
13
|
-
|
14
|
-
|
15
|
-
|
16
|
-
|
17
|
-
# Represents an authentication session. It manages the authentication of
|
18
|
-
# a user over an established connection (the "transport" object, see
|
19
|
-
# Net::SSH::Transport::Session).
|
20
|
-
#
|
21
|
-
# The use of an authentication session to manage user authentication is
|
22
|
-
# internal to Net::SSH (specifically Net::SSH.start). Consumers of the
|
23
|
-
# Net::SSH library will never need to access this class directly.
|
24
|
-
class Session
|
25
|
-
include Transport::Constants, Constants, Loggable
|
26
|
-
|
27
|
-
# transport layer abstraction
|
28
|
-
attr_reader :transport
|
29
|
-
|
30
|
-
# the list of authentication methods to try
|
31
|
-
attr_reader :auth_methods
|
32
|
-
|
33
|
-
# the list of authentication methods that are allowed
|
34
|
-
attr_reader :allowed_auth_methods
|
35
|
-
|
36
|
-
# a hash of options, given at construction time
|
37
|
-
attr_reader :options
|
11
|
+
module Net
|
12
|
+
module SSH
|
13
|
+
module Authentication
|
14
|
+
# Raised if the current authentication method is not allowed
|
15
|
+
class DisallowedMethod < Net::SSH::Exception
|
16
|
+
end
|
38
17
|
|
39
|
-
|
40
|
-
|
41
|
-
|
42
|
-
|
43
|
-
|
18
|
+
# Represents an authentication session. It manages the authentication of
|
19
|
+
# a user over an established connection (the "transport" object, see
|
20
|
+
# Net::SSH::Transport::Session).
|
21
|
+
#
|
22
|
+
# The use of an authentication session to manage user authentication is
|
23
|
+
# internal to Net::SSH (specifically Net::SSH.start). Consumers of the
|
24
|
+
# Net::SSH library will never need to access this class directly.
|
25
|
+
class Session
|
26
|
+
include Loggable
|
27
|
+
include Constants
|
28
|
+
include Transport::Constants
|
44
29
|
|
45
|
-
|
46
|
-
|
30
|
+
# transport layer abstraction
|
31
|
+
attr_reader :transport
|
47
32
|
|
48
|
-
|
49
|
-
|
33
|
+
# the list of authentication methods to try
|
34
|
+
attr_reader :auth_methods
|
50
35
|
|
51
|
-
|
52
|
-
|
53
|
-
# authenticating the user, and false otherwise.
|
54
|
-
def authenticate(next_service, username, password=nil)
|
55
|
-
debug { "beginning authentication of `#{username}'" }
|
36
|
+
# the list of authentication methods that are allowed
|
37
|
+
attr_reader :allowed_auth_methods
|
56
38
|
|
57
|
-
|
58
|
-
|
39
|
+
# a hash of options, given at construction time
|
40
|
+
attr_reader :options
|
59
41
|
|
60
|
-
|
61
|
-
|
62
|
-
|
42
|
+
# Instantiates a new Authentication::Session object over the given
|
43
|
+
# transport layer abstraction.
|
44
|
+
def initialize(transport, options = {})
|
45
|
+
self.logger = transport.logger
|
46
|
+
@transport = transport
|
63
47
|
|
64
|
-
|
48
|
+
@auth_methods = options[:auth_methods] || Net::SSH::Config.default_auth_methods
|
49
|
+
@options = options
|
65
50
|
|
66
|
-
|
67
|
-
|
68
|
-
next unless @allowed_auth_methods.include?(name)
|
69
|
-
attempted << name
|
51
|
+
@allowed_auth_methods = @auth_methods
|
52
|
+
end
|
70
53
|
|
71
|
-
|
72
|
-
|
73
|
-
|
74
|
-
|
75
|
-
|
76
|
-
|
54
|
+
# Attempts to authenticate the given user, in preparation for the next
|
55
|
+
# service request. Returns true if an authentication method succeeds in
|
56
|
+
# authenticating the user, and false otherwise.
|
57
|
+
def authenticate(next_service, username, password = nil)
|
58
|
+
debug { "beginning authentication of `#{username}'" }
|
59
|
+
|
60
|
+
transport.send_message(transport.service_request("ssh-userauth"))
|
61
|
+
expect_message(SERVICE_ACCEPT)
|
62
|
+
|
63
|
+
key_manager = KeyManager.new(logger, options)
|
64
|
+
keys.each { |key| key_manager.add(key) } unless keys.empty?
|
65
|
+
keycerts.each { |keycert| key_manager.add_keycert(keycert) } unless keycerts.empty?
|
66
|
+
key_data.each { |key2| key_manager.add_key_data(key2) } unless key_data.empty?
|
67
|
+
default_keys.each { |key| key_manager.add(key) } unless options.key?(:keys) || options.key?(:key_data)
|
68
|
+
|
69
|
+
attempted = []
|
70
|
+
|
71
|
+
@auth_methods.each do |name|
|
72
|
+
next unless @allowed_auth_methods.include?(name)
|
73
|
+
|
74
|
+
attempted << name
|
75
|
+
|
76
|
+
debug { "trying #{name}" }
|
77
|
+
begin
|
78
|
+
auth_class = Methods.const_get(name.split(/\W+/).map { |p| p.capitalize }.join)
|
79
|
+
method = auth_class.new(self,
|
80
|
+
key_manager: key_manager, password_prompt: options[:password_prompt],
|
81
|
+
pubkey_algorithms: options[:pubkey_algorithms] || nil)
|
82
|
+
rescue NameError
|
83
|
+
debug {"Mechanism #{name} was requested, but isn't a known type. Ignoring it."}
|
84
|
+
next
|
85
|
+
end
|
86
|
+
|
87
|
+
return true if method.authenticate(next_service, username, password)
|
88
|
+
rescue Net::SSH::Authentication::DisallowedMethod
|
77
89
|
end
|
78
90
|
|
79
|
-
|
80
|
-
|
91
|
+
error { "all authorization methods failed (tried #{attempted.join(', ')})" }
|
92
|
+
return false
|
93
|
+
ensure
|
94
|
+
key_manager.finish if key_manager
|
81
95
|
end
|
82
|
-
end
|
83
|
-
|
84
|
-
error { "all authorization methods failed (tried #{attempted.join(', ')})" }
|
85
|
-
return false
|
86
|
-
ensure
|
87
|
-
key_manager.finish if key_manager
|
88
|
-
end
|
89
|
-
|
90
|
-
# Blocks until a packet is received. It silently handles USERAUTH_BANNER
|
91
|
-
# packets, and will raise an error if any packet is received that is not
|
92
|
-
# valid during user authentication.
|
93
|
-
def next_message
|
94
|
-
loop do
|
95
|
-
packet = transport.next_message
|
96
96
|
|
97
|
-
|
98
|
-
|
99
|
-
|
100
|
-
|
101
|
-
|
102
|
-
|
103
|
-
|
104
|
-
|
105
|
-
|
106
|
-
|
107
|
-
|
108
|
-
|
97
|
+
# Blocks until a packet is received. It silently handles USERAUTH_BANNER
|
98
|
+
# packets, and will raise an error if any packet is received that is not
|
99
|
+
# valid during user authentication.
|
100
|
+
def next_message
|
101
|
+
loop do
|
102
|
+
packet = transport.next_message
|
103
|
+
|
104
|
+
case packet.type
|
105
|
+
when USERAUTH_BANNER
|
106
|
+
info { packet[:message] }
|
107
|
+
# TODO add a hook for people to retrieve the banner when it is sent
|
108
|
+
|
109
|
+
when USERAUTH_FAILURE
|
110
|
+
@allowed_auth_methods = packet[:authentications].split(/,/)
|
111
|
+
debug { "allowed methods: #{packet[:authentications]}" }
|
112
|
+
return packet
|
113
|
+
|
114
|
+
when USERAUTH_METHOD_RANGE, SERVICE_ACCEPT
|
115
|
+
return packet
|
116
|
+
|
117
|
+
when USERAUTH_SUCCESS
|
118
|
+
transport.hint :authenticated
|
119
|
+
return packet
|
120
|
+
|
121
|
+
else
|
122
|
+
raise Net::SSH::Exception, "unexpected message #{packet.type} (#{packet})"
|
123
|
+
end
|
124
|
+
end
|
125
|
+
end
|
109
126
|
|
110
|
-
|
111
|
-
|
112
|
-
|
127
|
+
# Blocks until a packet is received, and returns it if it is of the given
|
128
|
+
# type. If it is not, an exception is raised.
|
129
|
+
def expect_message(type)
|
130
|
+
message = next_message
|
131
|
+
raise Net::SSH::Exception, "expected #{type}, got #{message.type} (#{message})" unless message.type == type
|
113
132
|
|
114
|
-
|
115
|
-
raise Net::SSH::Exception, "unexpected message #{packet.type} (#{packet})"
|
133
|
+
message
|
116
134
|
end
|
117
|
-
end
|
118
|
-
end
|
119
135
|
|
120
|
-
|
121
|
-
# type. If it is not, an exception is raised.
|
122
|
-
def expect_message(type)
|
123
|
-
message = next_message
|
124
|
-
unless message.type == type
|
125
|
-
raise Net::SSH::Exception, "expected #{type}, got #{message.type} (#{message})"
|
126
|
-
end
|
127
|
-
message
|
128
|
-
end
|
136
|
+
private
|
129
137
|
|
130
|
-
|
138
|
+
# Returns an array of paths to the key files usually defined
|
139
|
+
# by system default.
|
140
|
+
def default_keys
|
141
|
+
%w[~/.ssh/id_ed25519 ~/.ssh/id_rsa ~/.ssh/id_dsa ~/.ssh/id_ecdsa
|
142
|
+
~/.ssh2/id_ed25519 ~/.ssh2/id_rsa ~/.ssh2/id_dsa ~/.ssh2/id_ecdsa]
|
143
|
+
end
|
131
144
|
|
132
|
-
|
133
|
-
|
134
|
-
|
135
|
-
|
136
|
-
%w(~/.ssh/id_ed25519 ~/.ssh/id_rsa ~/.ssh/id_dsa ~/.ssh/id_ecdsa
|
137
|
-
~/.ssh2/id_ed25519 ~/.ssh2/id_rsa ~/.ssh2/id_dsa ~/.ssh2/id_ecdsa)
|
138
|
-
else
|
139
|
-
%w(~/.ssh/id_dsa ~/.ssh/id_rsa ~/.ssh2/id_dsa ~/.ssh2/id_rsa)
|
145
|
+
# Returns an array of paths to the key files that should be used when
|
146
|
+
# attempting any key-based authentication mechanism.
|
147
|
+
def keys
|
148
|
+
Array(options[:keys])
|
140
149
|
end
|
141
|
-
end
|
142
150
|
|
143
|
-
|
144
|
-
|
145
|
-
|
146
|
-
|
147
|
-
|
151
|
+
# Returns an array of paths to the keycert files that should be used when
|
152
|
+
# attempting any key-based authentication mechanism.
|
153
|
+
def keycerts
|
154
|
+
Array(options[:keycerts])
|
155
|
+
end
|
148
156
|
|
149
|
-
|
150
|
-
|
151
|
-
|
152
|
-
|
157
|
+
# Returns an array of the key data that should be used when
|
158
|
+
# attempting any key-based authentication mechanism.
|
159
|
+
def key_data
|
160
|
+
Array(options[:key_data])
|
161
|
+
end
|
153
162
|
end
|
163
|
+
end
|
154
164
|
end
|
155
|
-
end
|
165
|
+
end
|