net-ssh 4.2.0 → 7.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (126) hide show
  1. checksums.yaml +5 -5
  2. checksums.yaml.gz.sig +0 -0
  3. data/.dockerignore +6 -0
  4. data/.github/config/rubocop_linter_action.yml +4 -0
  5. data/.github/workflows/ci-with-docker.yml +44 -0
  6. data/.github/workflows/ci.yml +87 -0
  7. data/.github/workflows/rubocop.yml +13 -0
  8. data/.gitignore +7 -0
  9. data/.rubocop.yml +19 -2
  10. data/.rubocop_todo.yml +619 -667
  11. data/CHANGES.txt +110 -1
  12. data/Dockerfile +27 -0
  13. data/Dockerfile.openssl3 +17 -0
  14. data/Gemfile +3 -7
  15. data/{Gemfile.norbnacl → Gemfile.noed25519} +3 -1
  16. data/Manifest +4 -5
  17. data/README.md +293 -0
  18. data/Rakefile +45 -29
  19. data/appveyor.yml +8 -6
  20. data/docker-compose.yml +23 -0
  21. data/lib/net/ssh/authentication/agent.rb +248 -223
  22. data/lib/net/ssh/authentication/certificate.rb +178 -164
  23. data/lib/net/ssh/authentication/constants.rb +17 -15
  24. data/lib/net/ssh/authentication/ed25519.rb +141 -116
  25. data/lib/net/ssh/authentication/ed25519_loader.rb +28 -28
  26. data/lib/net/ssh/authentication/key_manager.rb +79 -36
  27. data/lib/net/ssh/authentication/methods/abstract.rb +62 -47
  28. data/lib/net/ssh/authentication/methods/hostbased.rb +34 -37
  29. data/lib/net/ssh/authentication/methods/keyboard_interactive.rb +3 -3
  30. data/lib/net/ssh/authentication/methods/none.rb +16 -19
  31. data/lib/net/ssh/authentication/methods/password.rb +15 -16
  32. data/lib/net/ssh/authentication/methods/publickey.rb +96 -55
  33. data/lib/net/ssh/authentication/pageant.rb +468 -465
  34. data/lib/net/ssh/authentication/pub_key_fingerprint.rb +43 -0
  35. data/lib/net/ssh/authentication/session.rb +131 -122
  36. data/lib/net/ssh/buffer.rb +385 -332
  37. data/lib/net/ssh/buffered_io.rb +150 -151
  38. data/lib/net/ssh/config.rb +316 -239
  39. data/lib/net/ssh/connection/channel.rb +635 -613
  40. data/lib/net/ssh/connection/constants.rb +29 -29
  41. data/lib/net/ssh/connection/event_loop.rb +104 -95
  42. data/lib/net/ssh/connection/keepalive.rb +55 -51
  43. data/lib/net/ssh/connection/session.rb +614 -611
  44. data/lib/net/ssh/connection/term.rb +125 -123
  45. data/lib/net/ssh/errors.rb +101 -99
  46. data/lib/net/ssh/key_factory.rb +194 -108
  47. data/lib/net/ssh/known_hosts.rb +212 -134
  48. data/lib/net/ssh/loggable.rb +50 -49
  49. data/lib/net/ssh/packet.rb +83 -79
  50. data/lib/net/ssh/prompt.rb +51 -51
  51. data/lib/net/ssh/proxy/command.rb +105 -91
  52. data/lib/net/ssh/proxy/errors.rb +12 -10
  53. data/lib/net/ssh/proxy/http.rb +81 -81
  54. data/lib/net/ssh/proxy/https.rb +37 -36
  55. data/lib/net/ssh/proxy/jump.rb +49 -48
  56. data/lib/net/ssh/proxy/socks4.rb +2 -6
  57. data/lib/net/ssh/proxy/socks5.rb +14 -17
  58. data/lib/net/ssh/service/forward.rb +365 -362
  59. data/lib/net/ssh/test/channel.rb +145 -143
  60. data/lib/net/ssh/test/extensions.rb +131 -127
  61. data/lib/net/ssh/test/kex.rb +34 -32
  62. data/lib/net/ssh/test/local_packet.rb +46 -44
  63. data/lib/net/ssh/test/packet.rb +87 -84
  64. data/lib/net/ssh/test/remote_packet.rb +32 -30
  65. data/lib/net/ssh/test/script.rb +155 -155
  66. data/lib/net/ssh/test/socket.rb +49 -48
  67. data/lib/net/ssh/test.rb +82 -80
  68. data/lib/net/ssh/transport/algorithms.rb +433 -364
  69. data/lib/net/ssh/transport/cipher_factory.rb +95 -91
  70. data/lib/net/ssh/transport/constants.rb +32 -24
  71. data/lib/net/ssh/transport/ctr.rb +37 -15
  72. data/lib/net/ssh/transport/hmac/abstract.rb +81 -63
  73. data/lib/net/ssh/transport/hmac/md5.rb +0 -2
  74. data/lib/net/ssh/transport/hmac/md5_96.rb +0 -2
  75. data/lib/net/ssh/transport/hmac/none.rb +0 -2
  76. data/lib/net/ssh/transport/hmac/ripemd160.rb +0 -2
  77. data/lib/net/ssh/transport/hmac/sha1.rb +0 -2
  78. data/lib/net/ssh/transport/hmac/sha1_96.rb +0 -2
  79. data/lib/net/ssh/transport/hmac/sha2_256.rb +7 -11
  80. data/lib/net/ssh/transport/hmac/sha2_256_96.rb +4 -8
  81. data/lib/net/ssh/transport/hmac/sha2_256_etm.rb +12 -0
  82. data/lib/net/ssh/transport/hmac/sha2_512.rb +6 -9
  83. data/lib/net/ssh/transport/hmac/sha2_512_96.rb +4 -8
  84. data/lib/net/ssh/transport/hmac/sha2_512_etm.rb +12 -0
  85. data/lib/net/ssh/transport/hmac.rb +14 -12
  86. data/lib/net/ssh/transport/identity_cipher.rb +54 -52
  87. data/lib/net/ssh/transport/kex/abstract.rb +130 -0
  88. data/lib/net/ssh/transport/kex/abstract5656.rb +72 -0
  89. data/lib/net/ssh/transport/kex/curve25519_sha256.rb +39 -0
  90. data/lib/net/ssh/transport/kex/curve25519_sha256_loader.rb +30 -0
  91. data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha1.rb +33 -40
  92. data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha256.rb +11 -0
  93. data/lib/net/ssh/transport/kex/diffie_hellman_group1_sha1.rb +112 -217
  94. data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha1.rb +53 -63
  95. data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha256.rb +5 -9
  96. data/lib/net/ssh/transport/kex/ecdh_sha2_nistp256.rb +36 -90
  97. data/lib/net/ssh/transport/kex/ecdh_sha2_nistp384.rb +18 -10
  98. data/lib/net/ssh/transport/kex/ecdh_sha2_nistp521.rb +18 -10
  99. data/lib/net/ssh/transport/kex.rb +15 -12
  100. data/lib/net/ssh/transport/key_expander.rb +24 -21
  101. data/lib/net/ssh/transport/openssl.rb +158 -133
  102. data/lib/net/ssh/transport/packet_stream.rb +223 -191
  103. data/lib/net/ssh/transport/server_version.rb +55 -56
  104. data/lib/net/ssh/transport/session.rb +306 -259
  105. data/lib/net/ssh/transport/state.rb +178 -176
  106. data/lib/net/ssh/verifiers/accept_new.rb +33 -0
  107. data/lib/net/ssh/verifiers/accept_new_or_local_tunnel.rb +33 -0
  108. data/lib/net/ssh/verifiers/always.rb +58 -0
  109. data/lib/net/ssh/verifiers/never.rb +19 -0
  110. data/lib/net/ssh/version.rb +55 -53
  111. data/lib/net/ssh.rb +47 -34
  112. data/net-ssh-public_cert.pem +18 -19
  113. data/net-ssh.gemspec +12 -11
  114. data/support/ssh_tunnel_bug.rb +5 -5
  115. data.tar.gz.sig +0 -0
  116. metadata +78 -73
  117. metadata.gz.sig +0 -0
  118. data/.travis.yml +0 -51
  119. data/Gemfile.norbnacl.lock +0 -41
  120. data/README.rdoc +0 -169
  121. data/lib/net/ssh/ruby_compat.rb +0 -24
  122. data/lib/net/ssh/verifiers/lenient.rb +0 -30
  123. data/lib/net/ssh/verifiers/null.rb +0 -12
  124. data/lib/net/ssh/verifiers/secure.rb +0 -52
  125. data/lib/net/ssh/verifiers/strict.rb +0 -24
  126. data/support/arcfour_check.rb +0 -20
@@ -1,33 +1,33 @@
1
- module Net; module SSH; module Connection
1
+ module Net
2
+ module SSH
3
+ module Connection
4
+ # Definitions of constants that are specific to the connection layer of the
5
+ # SSH protocol.
6
+ module Constants
7
+ #--
8
+ # Connection protocol generic messages
9
+ #++
2
10
 
3
- # Definitions of constants that are specific to the connection layer of the
4
- # SSH protocol.
5
- module Constants
11
+ GLOBAL_REQUEST = 80
12
+ REQUEST_SUCCESS = 81
13
+ REQUEST_FAILURE = 82
6
14
 
7
- #--
8
- # Connection protocol generic messages
9
- #++
10
-
11
- GLOBAL_REQUEST = 80
12
- REQUEST_SUCCESS = 81
13
- REQUEST_FAILURE = 82
14
-
15
- #--
16
- # Channel related messages
17
- #++
18
-
19
- CHANNEL_OPEN = 90
20
- CHANNEL_OPEN_CONFIRMATION = 91
21
- CHANNEL_OPEN_FAILURE = 92
22
- CHANNEL_WINDOW_ADJUST = 93
23
- CHANNEL_DATA = 94
24
- CHANNEL_EXTENDED_DATA = 95
25
- CHANNEL_EOF = 96
26
- CHANNEL_CLOSE = 97
27
- CHANNEL_REQUEST = 98
28
- CHANNEL_SUCCESS = 99
29
- CHANNEL_FAILURE = 100
15
+ #--
16
+ # Channel related messages
17
+ #++
30
18
 
19
+ CHANNEL_OPEN = 90
20
+ CHANNEL_OPEN_CONFIRMATION = 91
21
+ CHANNEL_OPEN_FAILURE = 92
22
+ CHANNEL_WINDOW_ADJUST = 93
23
+ CHANNEL_DATA = 94
24
+ CHANNEL_EXTENDED_DATA = 95
25
+ CHANNEL_EOF = 96
26
+ CHANNEL_CLOSE = 97
27
+ CHANNEL_REQUEST = 98
28
+ CHANNEL_SUCCESS = 99
29
+ CHANNEL_FAILURE = 100
30
+ end
31
+ end
31
32
  end
32
-
33
- end; end end
33
+ end
@@ -1,114 +1,123 @@
1
1
  require 'net/ssh/loggable'
2
- require 'net/ssh/ruby_compat'
3
-
4
- module Net; module SSH; module Connection
5
- # EventLoop can be shared across multiple sessions
6
- #
7
- # one issue is with blocks passed to loop, etc.
8
- # they should get current session as parameter, but in
9
- # case you're using multiple sessions in an event loop it doesnt makes sense
10
- # and we don't pass session.
11
- class EventLoop
12
- include Loggable
13
-
14
- def initialize(logger=nil)
15
- self.logger = logger
16
- @sessions = []
17
- end
18
2
 
19
- def register(session)
20
- @sessions << session
21
- end
3
+ module Net
4
+ module SSH
5
+ module Connection
6
+ # EventLoop can be shared across multiple sessions
7
+ #
8
+ # one issue is with blocks passed to loop, etc.
9
+ # they should get current session as parameter, but in
10
+ # case you're using multiple sessions in an event loop it doesnt makes sense
11
+ # and we don't pass session.
12
+ class EventLoop
13
+ include Loggable
14
+
15
+ def initialize(logger = nil)
16
+ self.logger = logger
17
+ @sessions = []
18
+ end
22
19
 
23
- # process until timeout
24
- # if a block is given a session will be removed from loop
25
- # if block returns false for that session
26
- def process(wait = nil, &block)
27
- return false unless ev_preprocess(&block)
20
+ def register(session)
21
+ @sessions << session
22
+ end
28
23
 
29
- ev_select_and_postprocess(wait)
30
- end
24
+ # process until timeout
25
+ # if a block is given a session will be removed from loop
26
+ # if block returns false for that session
27
+ def process(wait = nil, &block)
28
+ return false unless ev_preprocess(&block)
31
29
 
32
- # process the event loop but only for the sepcified session
33
- def process_only(session, wait = nil)
34
- orig_sessions = @sessions
35
- begin
36
- @sessions = [session]
37
- return false unless ev_preprocess
38
- ev_select_and_postprocess(wait)
39
- ensure
40
- @sessions = orig_sessions
41
- end
42
- end
43
-
44
- # Call preprocess on each session. If block given and that
45
- # block retuns false then we exit the processing
46
- def ev_preprocess(&block)
47
- return false if block_given? && !yield(self)
48
- @sessions.each(&:ev_preprocess)
49
- return false if block_given? && !yield(self)
50
- return true
51
- end
30
+ ev_select_and_postprocess(wait)
31
+ end
52
32
 
53
- def ev_select_and_postprocess(wait)
54
- owners = {}
55
- r = []
56
- w = []
57
- minwait = nil
58
- @sessions.each do |session|
59
- sr,sw,actwait = session.ev_do_calculate_rw_wait(wait)
60
- minwait = actwait if actwait && (minwait.nil? || actwait < minwait)
61
- r.push(*sr)
62
- w.push(*sw)
63
- sr.each { |ri| owners[ri] = session }
64
- sw.each { |wi| owners[wi] = session }
65
- end
33
+ # process the event loop but only for the sepcified session
34
+ def process_only(session, wait = nil)
35
+ orig_sessions = @sessions
36
+ begin
37
+ @sessions = [session]
38
+ return false unless ev_preprocess
39
+
40
+ ev_select_and_postprocess(wait)
41
+ ensure
42
+ @sessions = orig_sessions
43
+ end
44
+ end
66
45
 
67
- readers, writers, = Net::SSH::Compat.io_select(r, w, nil, minwait)
46
+ # Call preprocess on each session. If block given and that
47
+ # block retuns false then we exit the processing
48
+ def ev_preprocess(&block)
49
+ return false if block_given? && !yield(self)
68
50
 
69
- fired_sessions = {}
51
+ @sessions.each(&:ev_preprocess)
52
+ return false if block_given? && !yield(self)
70
53
 
71
- if readers
72
- readers.each do |reader|
73
- session = owners[reader]
74
- (fired_sessions[session] ||= {r: [],w: []})[:r] << reader
54
+ return true
75
55
  end
76
- end
77
- if writers
78
- writers.each do |writer|
79
- session = owners[writer]
80
- (fired_sessions[session] ||= {r: [],w: []})[:w] << writer
56
+
57
+ def ev_select_and_postprocess(wait)
58
+ owners = {}
59
+ r = []
60
+ w = []
61
+ minwait = nil
62
+ @sessions.each do |session|
63
+ sr, sw, actwait = session.ev_do_calculate_rw_wait(wait)
64
+ minwait = actwait if actwait && (minwait.nil? || actwait < minwait)
65
+ r.push(*sr)
66
+ w.push(*sw)
67
+ sr.each { |ri| owners[ri] = session }
68
+ sw.each { |wi| owners[wi] = session }
69
+ end
70
+
71
+ readers, writers, = IO.select(r, w, nil, minwait)
72
+
73
+ fired_sessions = {}
74
+
75
+ if readers
76
+ readers.each do |reader|
77
+ session = owners[reader]
78
+ (fired_sessions[session] ||= { r: [], w: [] })[:r] << reader
79
+ end
80
+ end
81
+ if writers
82
+ writers.each do |writer|
83
+ session = owners[writer]
84
+ (fired_sessions[session] ||= { r: [], w: [] })[:w] << writer
85
+ end
86
+ end
87
+
88
+ fired_sessions.each do |s, rw|
89
+ s.ev_do_handle_events(rw[:r], rw[:w])
90
+ end
91
+
92
+ @sessions.each { |s| s.ev_do_postprocess(fired_sessions.key?(s)) }
93
+ true
81
94
  end
82
95
  end
83
96
 
84
- fired_sessions.each do |s,rw|
85
- s.ev_do_handle_events(rw[:r],rw[:w])
86
- end
97
+ # optimized version for a single session
98
+ class SingleSessionEventLoop < EventLoop
99
+ # Compatibility for original single session event loops:
100
+ # we call block with session as argument
101
+ def ev_preprocess(&block)
102
+ return false if block_given? && !yield(@sessions.first)
87
103
 
88
- @sessions.each { |s| s.ev_do_postprocess(fired_sessions.key?(s)) }
89
- true
90
- end
91
- end
104
+ @sessions.each(&:ev_preprocess)
105
+ return false if block_given? && !yield(@sessions.first)
92
106
 
93
- # optimized version for a single session
94
- class SingleSessionEventLoop < EventLoop
95
- # Compatibility for original single session event loops:
96
- # we call block with session as argument
97
- def ev_preprocess(&block)
98
- return false if block_given? && !yield(@sessions.first)
99
- @sessions.each(&:ev_preprocess)
100
- return false if block_given? && !yield(@sessions.first)
101
- return true
102
- end
107
+ return true
108
+ end
109
+
110
+ def ev_select_and_postprocess(wait)
111
+ raise "Only one session expected" unless @sessions.count == 1
103
112
 
104
- def ev_select_and_postprocess(wait)
105
- raise "Only one session expected" unless @sessions.count == 1
106
- session = @sessions.first
107
- sr,sw,actwait = session.ev_do_calculate_rw_wait(wait)
108
- readers, writers, = Net::SSH::Compat.io_select(sr, sw, nil, actwait)
113
+ session = @sessions.first
114
+ sr, sw, actwait = session.ev_do_calculate_rw_wait(wait)
115
+ readers, writers, = IO.select(sr, sw, nil, actwait)
109
116
 
110
- session.ev_do_handle_events(readers,writers)
111
- session.ev_do_postprocess(!((readers.nil? || readers.empty?) && (writers.nil? || writers.empty?)))
117
+ session.ev_do_handle_events(readers, writers)
118
+ session.ev_do_postprocess(!((readers.nil? || readers.empty?) && (writers.nil? || writers.empty?)))
119
+ end
120
+ end
112
121
  end
113
122
  end
114
- end; end; end
123
+ end
@@ -1,55 +1,59 @@
1
1
  require 'net/ssh/loggable'
2
- module Net; module SSH; module Connection
3
-
4
- class Keepalive
5
- include Loggable
6
-
7
- def initialize(session)
8
- @last_keepalive_sent_at = nil
9
- @unresponded_keepalive_count = 0
10
- @session = session
11
- self.logger = session.logger
12
- end
13
-
14
- def options
15
- @session.options
16
- end
17
-
18
- def enabled?
19
- options[:keepalive]
20
- end
21
-
22
- def interval
23
- options[:keepalive_interval] || Session::DEFAULT_IO_SELECT_TIMEOUT
24
- end
25
-
26
- def should_send?
27
- return false unless enabled?
28
- return true unless @last_keepalive_sent_at
29
- Time.now - @last_keepalive_sent_at >= interval
30
- end
31
-
32
- def keepalive_maxcount
33
- (options[:keepalive_maxcount] || 3).to_i
34
- end
35
-
36
- def send_as_needed(was_events)
37
- return if was_events
38
- return unless should_send?
39
- info { "sending keepalive #{@unresponded_keepalive_count}" }
40
-
41
- @unresponded_keepalive_count += 1
42
- @session.send_global_request("keepalive@openssh.com") { |success, response|
43
- debug { "keepalive response successful. Missed #{@unresponded_keepalive_count-1} keepalives" }
44
- @unresponded_keepalive_count = 0
45
- }
46
- @last_keepalive_sent_at = Time.now
47
- if keepalive_maxcount > 0 && @unresponded_keepalive_count > keepalive_maxcount
48
- error { "Timeout, server #{@session.host} not responding. Missed #{@unresponded_keepalive_count-1} timeouts." }
49
- @unresponded_keepalive_count = 0
50
- raise Net::SSH::Timeout, "Timeout, server #{@session.host} not responding."
2
+ module Net
3
+ module SSH
4
+ module Connection
5
+ class Keepalive
6
+ include Loggable
7
+
8
+ def initialize(session)
9
+ @last_keepalive_sent_at = nil
10
+ @unresponded_keepalive_count = 0
11
+ @session = session
12
+ self.logger = session.logger
13
+ end
14
+
15
+ def options
16
+ @session.options
17
+ end
18
+
19
+ def enabled?
20
+ options[:keepalive]
21
+ end
22
+
23
+ def interval
24
+ options[:keepalive_interval] || Session::DEFAULT_IO_SELECT_TIMEOUT
25
+ end
26
+
27
+ def should_send?
28
+ return false unless enabled?
29
+ return true unless @last_keepalive_sent_at
30
+
31
+ Time.now - @last_keepalive_sent_at >= interval
32
+ end
33
+
34
+ def keepalive_maxcount
35
+ (options[:keepalive_maxcount] || 3).to_i
36
+ end
37
+
38
+ def send_as_needed(was_events)
39
+ return if was_events
40
+ return unless should_send?
41
+
42
+ info { "sending keepalive #{@unresponded_keepalive_count}" }
43
+
44
+ @unresponded_keepalive_count += 1
45
+ @session.send_global_request("keepalive@openssh.com") { |success, response|
46
+ debug { "keepalive response successful. Missed #{@unresponded_keepalive_count - 1} keepalives" }
47
+ @unresponded_keepalive_count = 0
48
+ }
49
+ @last_keepalive_sent_at = Time.now
50
+ if keepalive_maxcount > 0 && @unresponded_keepalive_count > keepalive_maxcount
51
+ error { "Timeout, server #{@session.host} not responding. Missed #{@unresponded_keepalive_count - 1} timeouts." }
52
+ @unresponded_keepalive_count = 0
53
+ raise Net::SSH::Timeout, "Timeout, server #{@session.host} not responding."
54
+ end
55
+ end
56
+ end
51
57
  end
52
58
  end
53
59
  end
54
-
55
- end; end; end