net-ssh 4.2.0 → 7.0.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- checksums.yaml.gz.sig +0 -0
- data/.dockerignore +6 -0
- data/.github/config/rubocop_linter_action.yml +4 -0
- data/.github/workflows/ci-with-docker.yml +44 -0
- data/.github/workflows/ci.yml +87 -0
- data/.github/workflows/rubocop.yml +13 -0
- data/.gitignore +7 -0
- data/.rubocop.yml +19 -2
- data/.rubocop_todo.yml +619 -667
- data/CHANGES.txt +110 -1
- data/Dockerfile +27 -0
- data/Dockerfile.openssl3 +17 -0
- data/Gemfile +3 -7
- data/{Gemfile.norbnacl → Gemfile.noed25519} +3 -1
- data/Manifest +4 -5
- data/README.md +293 -0
- data/Rakefile +45 -29
- data/appveyor.yml +8 -6
- data/docker-compose.yml +23 -0
- data/lib/net/ssh/authentication/agent.rb +248 -223
- data/lib/net/ssh/authentication/certificate.rb +178 -164
- data/lib/net/ssh/authentication/constants.rb +17 -15
- data/lib/net/ssh/authentication/ed25519.rb +141 -116
- data/lib/net/ssh/authentication/ed25519_loader.rb +28 -28
- data/lib/net/ssh/authentication/key_manager.rb +79 -36
- data/lib/net/ssh/authentication/methods/abstract.rb +62 -47
- data/lib/net/ssh/authentication/methods/hostbased.rb +34 -37
- data/lib/net/ssh/authentication/methods/keyboard_interactive.rb +3 -3
- data/lib/net/ssh/authentication/methods/none.rb +16 -19
- data/lib/net/ssh/authentication/methods/password.rb +15 -16
- data/lib/net/ssh/authentication/methods/publickey.rb +96 -55
- data/lib/net/ssh/authentication/pageant.rb +468 -465
- data/lib/net/ssh/authentication/pub_key_fingerprint.rb +43 -0
- data/lib/net/ssh/authentication/session.rb +131 -122
- data/lib/net/ssh/buffer.rb +385 -332
- data/lib/net/ssh/buffered_io.rb +150 -151
- data/lib/net/ssh/config.rb +316 -239
- data/lib/net/ssh/connection/channel.rb +635 -613
- data/lib/net/ssh/connection/constants.rb +29 -29
- data/lib/net/ssh/connection/event_loop.rb +104 -95
- data/lib/net/ssh/connection/keepalive.rb +55 -51
- data/lib/net/ssh/connection/session.rb +614 -611
- data/lib/net/ssh/connection/term.rb +125 -123
- data/lib/net/ssh/errors.rb +101 -99
- data/lib/net/ssh/key_factory.rb +194 -108
- data/lib/net/ssh/known_hosts.rb +212 -134
- data/lib/net/ssh/loggable.rb +50 -49
- data/lib/net/ssh/packet.rb +83 -79
- data/lib/net/ssh/prompt.rb +51 -51
- data/lib/net/ssh/proxy/command.rb +105 -91
- data/lib/net/ssh/proxy/errors.rb +12 -10
- data/lib/net/ssh/proxy/http.rb +81 -81
- data/lib/net/ssh/proxy/https.rb +37 -36
- data/lib/net/ssh/proxy/jump.rb +49 -48
- data/lib/net/ssh/proxy/socks4.rb +2 -6
- data/lib/net/ssh/proxy/socks5.rb +14 -17
- data/lib/net/ssh/service/forward.rb +365 -362
- data/lib/net/ssh/test/channel.rb +145 -143
- data/lib/net/ssh/test/extensions.rb +131 -127
- data/lib/net/ssh/test/kex.rb +34 -32
- data/lib/net/ssh/test/local_packet.rb +46 -44
- data/lib/net/ssh/test/packet.rb +87 -84
- data/lib/net/ssh/test/remote_packet.rb +32 -30
- data/lib/net/ssh/test/script.rb +155 -155
- data/lib/net/ssh/test/socket.rb +49 -48
- data/lib/net/ssh/test.rb +82 -80
- data/lib/net/ssh/transport/algorithms.rb +433 -364
- data/lib/net/ssh/transport/cipher_factory.rb +95 -91
- data/lib/net/ssh/transport/constants.rb +32 -24
- data/lib/net/ssh/transport/ctr.rb +37 -15
- data/lib/net/ssh/transport/hmac/abstract.rb +81 -63
- data/lib/net/ssh/transport/hmac/md5.rb +0 -2
- data/lib/net/ssh/transport/hmac/md5_96.rb +0 -2
- data/lib/net/ssh/transport/hmac/none.rb +0 -2
- data/lib/net/ssh/transport/hmac/ripemd160.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha1.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha1_96.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha2_256.rb +7 -11
- data/lib/net/ssh/transport/hmac/sha2_256_96.rb +4 -8
- data/lib/net/ssh/transport/hmac/sha2_256_etm.rb +12 -0
- data/lib/net/ssh/transport/hmac/sha2_512.rb +6 -9
- data/lib/net/ssh/transport/hmac/sha2_512_96.rb +4 -8
- data/lib/net/ssh/transport/hmac/sha2_512_etm.rb +12 -0
- data/lib/net/ssh/transport/hmac.rb +14 -12
- data/lib/net/ssh/transport/identity_cipher.rb +54 -52
- data/lib/net/ssh/transport/kex/abstract.rb +130 -0
- data/lib/net/ssh/transport/kex/abstract5656.rb +72 -0
- data/lib/net/ssh/transport/kex/curve25519_sha256.rb +39 -0
- data/lib/net/ssh/transport/kex/curve25519_sha256_loader.rb +30 -0
- data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha1.rb +33 -40
- data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha256.rb +11 -0
- data/lib/net/ssh/transport/kex/diffie_hellman_group1_sha1.rb +112 -217
- data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha1.rb +53 -63
- data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha256.rb +5 -9
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp256.rb +36 -90
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp384.rb +18 -10
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp521.rb +18 -10
- data/lib/net/ssh/transport/kex.rb +15 -12
- data/lib/net/ssh/transport/key_expander.rb +24 -21
- data/lib/net/ssh/transport/openssl.rb +158 -133
- data/lib/net/ssh/transport/packet_stream.rb +223 -191
- data/lib/net/ssh/transport/server_version.rb +55 -56
- data/lib/net/ssh/transport/session.rb +306 -259
- data/lib/net/ssh/transport/state.rb +178 -176
- data/lib/net/ssh/verifiers/accept_new.rb +33 -0
- data/lib/net/ssh/verifiers/accept_new_or_local_tunnel.rb +33 -0
- data/lib/net/ssh/verifiers/always.rb +58 -0
- data/lib/net/ssh/verifiers/never.rb +19 -0
- data/lib/net/ssh/version.rb +55 -53
- data/lib/net/ssh.rb +47 -34
- data/net-ssh-public_cert.pem +18 -19
- data/net-ssh.gemspec +12 -11
- data/support/ssh_tunnel_bug.rb +5 -5
- data.tar.gz.sig +0 -0
- metadata +78 -73
- metadata.gz.sig +0 -0
- data/.travis.yml +0 -51
- data/Gemfile.norbnacl.lock +0 -41
- data/README.rdoc +0 -169
- data/lib/net/ssh/ruby_compat.rb +0 -24
- data/lib/net/ssh/verifiers/lenient.rb +0 -30
- data/lib/net/ssh/verifiers/null.rb +0 -12
- data/lib/net/ssh/verifiers/secure.rb +0 -52
- data/lib/net/ssh/verifiers/strict.rb +0 -24
- data/support/arcfour_check.rb +0 -20
@@ -1,33 +1,33 @@
|
|
1
|
-
module Net
|
1
|
+
module Net
|
2
|
+
module SSH
|
3
|
+
module Connection
|
4
|
+
# Definitions of constants that are specific to the connection layer of the
|
5
|
+
# SSH protocol.
|
6
|
+
module Constants
|
7
|
+
#--
|
8
|
+
# Connection protocol generic messages
|
9
|
+
#++
|
2
10
|
|
3
|
-
|
4
|
-
|
5
|
-
|
11
|
+
GLOBAL_REQUEST = 80
|
12
|
+
REQUEST_SUCCESS = 81
|
13
|
+
REQUEST_FAILURE = 82
|
6
14
|
|
7
|
-
|
8
|
-
|
9
|
-
|
10
|
-
|
11
|
-
GLOBAL_REQUEST = 80
|
12
|
-
REQUEST_SUCCESS = 81
|
13
|
-
REQUEST_FAILURE = 82
|
14
|
-
|
15
|
-
#--
|
16
|
-
# Channel related messages
|
17
|
-
#++
|
18
|
-
|
19
|
-
CHANNEL_OPEN = 90
|
20
|
-
CHANNEL_OPEN_CONFIRMATION = 91
|
21
|
-
CHANNEL_OPEN_FAILURE = 92
|
22
|
-
CHANNEL_WINDOW_ADJUST = 93
|
23
|
-
CHANNEL_DATA = 94
|
24
|
-
CHANNEL_EXTENDED_DATA = 95
|
25
|
-
CHANNEL_EOF = 96
|
26
|
-
CHANNEL_CLOSE = 97
|
27
|
-
CHANNEL_REQUEST = 98
|
28
|
-
CHANNEL_SUCCESS = 99
|
29
|
-
CHANNEL_FAILURE = 100
|
15
|
+
#--
|
16
|
+
# Channel related messages
|
17
|
+
#++
|
30
18
|
|
19
|
+
CHANNEL_OPEN = 90
|
20
|
+
CHANNEL_OPEN_CONFIRMATION = 91
|
21
|
+
CHANNEL_OPEN_FAILURE = 92
|
22
|
+
CHANNEL_WINDOW_ADJUST = 93
|
23
|
+
CHANNEL_DATA = 94
|
24
|
+
CHANNEL_EXTENDED_DATA = 95
|
25
|
+
CHANNEL_EOF = 96
|
26
|
+
CHANNEL_CLOSE = 97
|
27
|
+
CHANNEL_REQUEST = 98
|
28
|
+
CHANNEL_SUCCESS = 99
|
29
|
+
CHANNEL_FAILURE = 100
|
30
|
+
end
|
31
|
+
end
|
31
32
|
end
|
32
|
-
|
33
|
-
end; end end
|
33
|
+
end
|
@@ -1,114 +1,123 @@
|
|
1
1
|
require 'net/ssh/loggable'
|
2
|
-
require 'net/ssh/ruby_compat'
|
3
|
-
|
4
|
-
module Net; module SSH; module Connection
|
5
|
-
# EventLoop can be shared across multiple sessions
|
6
|
-
#
|
7
|
-
# one issue is with blocks passed to loop, etc.
|
8
|
-
# they should get current session as parameter, but in
|
9
|
-
# case you're using multiple sessions in an event loop it doesnt makes sense
|
10
|
-
# and we don't pass session.
|
11
|
-
class EventLoop
|
12
|
-
include Loggable
|
13
|
-
|
14
|
-
def initialize(logger=nil)
|
15
|
-
self.logger = logger
|
16
|
-
@sessions = []
|
17
|
-
end
|
18
2
|
|
19
|
-
|
20
|
-
|
21
|
-
|
3
|
+
module Net
|
4
|
+
module SSH
|
5
|
+
module Connection
|
6
|
+
# EventLoop can be shared across multiple sessions
|
7
|
+
#
|
8
|
+
# one issue is with blocks passed to loop, etc.
|
9
|
+
# they should get current session as parameter, but in
|
10
|
+
# case you're using multiple sessions in an event loop it doesnt makes sense
|
11
|
+
# and we don't pass session.
|
12
|
+
class EventLoop
|
13
|
+
include Loggable
|
14
|
+
|
15
|
+
def initialize(logger = nil)
|
16
|
+
self.logger = logger
|
17
|
+
@sessions = []
|
18
|
+
end
|
22
19
|
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
def process(wait = nil, &block)
|
27
|
-
return false unless ev_preprocess(&block)
|
20
|
+
def register(session)
|
21
|
+
@sessions << session
|
22
|
+
end
|
28
23
|
|
29
|
-
|
30
|
-
|
24
|
+
# process until timeout
|
25
|
+
# if a block is given a session will be removed from loop
|
26
|
+
# if block returns false for that session
|
27
|
+
def process(wait = nil, &block)
|
28
|
+
return false unless ev_preprocess(&block)
|
31
29
|
|
32
|
-
|
33
|
-
|
34
|
-
orig_sessions = @sessions
|
35
|
-
begin
|
36
|
-
@sessions = [session]
|
37
|
-
return false unless ev_preprocess
|
38
|
-
ev_select_and_postprocess(wait)
|
39
|
-
ensure
|
40
|
-
@sessions = orig_sessions
|
41
|
-
end
|
42
|
-
end
|
43
|
-
|
44
|
-
# Call preprocess on each session. If block given and that
|
45
|
-
# block retuns false then we exit the processing
|
46
|
-
def ev_preprocess(&block)
|
47
|
-
return false if block_given? && !yield(self)
|
48
|
-
@sessions.each(&:ev_preprocess)
|
49
|
-
return false if block_given? && !yield(self)
|
50
|
-
return true
|
51
|
-
end
|
30
|
+
ev_select_and_postprocess(wait)
|
31
|
+
end
|
52
32
|
|
53
|
-
|
54
|
-
|
55
|
-
|
56
|
-
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
62
|
-
|
63
|
-
|
64
|
-
|
65
|
-
end
|
33
|
+
# process the event loop but only for the sepcified session
|
34
|
+
def process_only(session, wait = nil)
|
35
|
+
orig_sessions = @sessions
|
36
|
+
begin
|
37
|
+
@sessions = [session]
|
38
|
+
return false unless ev_preprocess
|
39
|
+
|
40
|
+
ev_select_and_postprocess(wait)
|
41
|
+
ensure
|
42
|
+
@sessions = orig_sessions
|
43
|
+
end
|
44
|
+
end
|
66
45
|
|
67
|
-
|
46
|
+
# Call preprocess on each session. If block given and that
|
47
|
+
# block retuns false then we exit the processing
|
48
|
+
def ev_preprocess(&block)
|
49
|
+
return false if block_given? && !yield(self)
|
68
50
|
|
69
|
-
|
51
|
+
@sessions.each(&:ev_preprocess)
|
52
|
+
return false if block_given? && !yield(self)
|
70
53
|
|
71
|
-
|
72
|
-
readers.each do |reader|
|
73
|
-
session = owners[reader]
|
74
|
-
(fired_sessions[session] ||= {r: [],w: []})[:r] << reader
|
54
|
+
return true
|
75
55
|
end
|
76
|
-
|
77
|
-
|
78
|
-
|
79
|
-
|
80
|
-
|
56
|
+
|
57
|
+
def ev_select_and_postprocess(wait)
|
58
|
+
owners = {}
|
59
|
+
r = []
|
60
|
+
w = []
|
61
|
+
minwait = nil
|
62
|
+
@sessions.each do |session|
|
63
|
+
sr, sw, actwait = session.ev_do_calculate_rw_wait(wait)
|
64
|
+
minwait = actwait if actwait && (minwait.nil? || actwait < minwait)
|
65
|
+
r.push(*sr)
|
66
|
+
w.push(*sw)
|
67
|
+
sr.each { |ri| owners[ri] = session }
|
68
|
+
sw.each { |wi| owners[wi] = session }
|
69
|
+
end
|
70
|
+
|
71
|
+
readers, writers, = IO.select(r, w, nil, minwait)
|
72
|
+
|
73
|
+
fired_sessions = {}
|
74
|
+
|
75
|
+
if readers
|
76
|
+
readers.each do |reader|
|
77
|
+
session = owners[reader]
|
78
|
+
(fired_sessions[session] ||= { r: [], w: [] })[:r] << reader
|
79
|
+
end
|
80
|
+
end
|
81
|
+
if writers
|
82
|
+
writers.each do |writer|
|
83
|
+
session = owners[writer]
|
84
|
+
(fired_sessions[session] ||= { r: [], w: [] })[:w] << writer
|
85
|
+
end
|
86
|
+
end
|
87
|
+
|
88
|
+
fired_sessions.each do |s, rw|
|
89
|
+
s.ev_do_handle_events(rw[:r], rw[:w])
|
90
|
+
end
|
91
|
+
|
92
|
+
@sessions.each { |s| s.ev_do_postprocess(fired_sessions.key?(s)) }
|
93
|
+
true
|
81
94
|
end
|
82
95
|
end
|
83
96
|
|
84
|
-
|
85
|
-
|
86
|
-
|
97
|
+
# optimized version for a single session
|
98
|
+
class SingleSessionEventLoop < EventLoop
|
99
|
+
# Compatibility for original single session event loops:
|
100
|
+
# we call block with session as argument
|
101
|
+
def ev_preprocess(&block)
|
102
|
+
return false if block_given? && !yield(@sessions.first)
|
87
103
|
|
88
|
-
|
89
|
-
|
90
|
-
end
|
91
|
-
end
|
104
|
+
@sessions.each(&:ev_preprocess)
|
105
|
+
return false if block_given? && !yield(@sessions.first)
|
92
106
|
|
93
|
-
|
94
|
-
|
95
|
-
|
96
|
-
|
97
|
-
|
98
|
-
return false if block_given? && !yield(@sessions.first)
|
99
|
-
@sessions.each(&:ev_preprocess)
|
100
|
-
return false if block_given? && !yield(@sessions.first)
|
101
|
-
return true
|
102
|
-
end
|
107
|
+
return true
|
108
|
+
end
|
109
|
+
|
110
|
+
def ev_select_and_postprocess(wait)
|
111
|
+
raise "Only one session expected" unless @sessions.count == 1
|
103
112
|
|
104
|
-
|
105
|
-
|
106
|
-
|
107
|
-
sr,sw,actwait = session.ev_do_calculate_rw_wait(wait)
|
108
|
-
readers, writers, = Net::SSH::Compat.io_select(sr, sw, nil, actwait)
|
113
|
+
session = @sessions.first
|
114
|
+
sr, sw, actwait = session.ev_do_calculate_rw_wait(wait)
|
115
|
+
readers, writers, = IO.select(sr, sw, nil, actwait)
|
109
116
|
|
110
|
-
|
111
|
-
|
117
|
+
session.ev_do_handle_events(readers, writers)
|
118
|
+
session.ev_do_postprocess(!((readers.nil? || readers.empty?) && (writers.nil? || writers.empty?)))
|
119
|
+
end
|
120
|
+
end
|
112
121
|
end
|
113
122
|
end
|
114
|
-
end
|
123
|
+
end
|
@@ -1,55 +1,59 @@
|
|
1
1
|
require 'net/ssh/loggable'
|
2
|
-
module Net
|
3
|
-
|
4
|
-
|
5
|
-
|
6
|
-
|
7
|
-
|
8
|
-
|
9
|
-
|
10
|
-
|
11
|
-
|
12
|
-
|
13
|
-
|
14
|
-
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
33
|
-
|
34
|
-
|
35
|
-
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
|
40
|
-
|
41
|
-
|
42
|
-
|
43
|
-
|
44
|
-
|
45
|
-
|
46
|
-
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
2
|
+
module Net
|
3
|
+
module SSH
|
4
|
+
module Connection
|
5
|
+
class Keepalive
|
6
|
+
include Loggable
|
7
|
+
|
8
|
+
def initialize(session)
|
9
|
+
@last_keepalive_sent_at = nil
|
10
|
+
@unresponded_keepalive_count = 0
|
11
|
+
@session = session
|
12
|
+
self.logger = session.logger
|
13
|
+
end
|
14
|
+
|
15
|
+
def options
|
16
|
+
@session.options
|
17
|
+
end
|
18
|
+
|
19
|
+
def enabled?
|
20
|
+
options[:keepalive]
|
21
|
+
end
|
22
|
+
|
23
|
+
def interval
|
24
|
+
options[:keepalive_interval] || Session::DEFAULT_IO_SELECT_TIMEOUT
|
25
|
+
end
|
26
|
+
|
27
|
+
def should_send?
|
28
|
+
return false unless enabled?
|
29
|
+
return true unless @last_keepalive_sent_at
|
30
|
+
|
31
|
+
Time.now - @last_keepalive_sent_at >= interval
|
32
|
+
end
|
33
|
+
|
34
|
+
def keepalive_maxcount
|
35
|
+
(options[:keepalive_maxcount] || 3).to_i
|
36
|
+
end
|
37
|
+
|
38
|
+
def send_as_needed(was_events)
|
39
|
+
return if was_events
|
40
|
+
return unless should_send?
|
41
|
+
|
42
|
+
info { "sending keepalive #{@unresponded_keepalive_count}" }
|
43
|
+
|
44
|
+
@unresponded_keepalive_count += 1
|
45
|
+
@session.send_global_request("keepalive@openssh.com") { |success, response|
|
46
|
+
debug { "keepalive response successful. Missed #{@unresponded_keepalive_count - 1} keepalives" }
|
47
|
+
@unresponded_keepalive_count = 0
|
48
|
+
}
|
49
|
+
@last_keepalive_sent_at = Time.now
|
50
|
+
if keepalive_maxcount > 0 && @unresponded_keepalive_count > keepalive_maxcount
|
51
|
+
error { "Timeout, server #{@session.host} not responding. Missed #{@unresponded_keepalive_count - 1} timeouts." }
|
52
|
+
@unresponded_keepalive_count = 0
|
53
|
+
raise Net::SSH::Timeout, "Timeout, server #{@session.host} not responding."
|
54
|
+
end
|
55
|
+
end
|
56
|
+
end
|
51
57
|
end
|
52
58
|
end
|
53
59
|
end
|
54
|
-
|
55
|
-
end; end; end
|