net-ssh 5.0.2 → 7.0.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- checksums.yaml.gz.sig +0 -0
- data/.dockerignore +6 -0
- data/.github/config/rubocop_linter_action.yml +4 -0
- data/.github/workflows/ci-with-docker.yml +44 -0
- data/.github/workflows/ci.yml +87 -0
- data/.github/workflows/rubocop.yml +13 -0
- data/.gitignore +3 -0
- data/.rubocop.yml +19 -2
- data/.rubocop_todo.yml +623 -511
- data/CHANGES.txt +76 -0
- data/Dockerfile +27 -0
- data/Dockerfile.openssl3 +17 -0
- data/Gemfile +2 -0
- data/Gemfile.noed25519 +2 -0
- data/Manifest +0 -1
- data/README.md +293 -0
- data/Rakefile +6 -2
- data/appveyor.yml +4 -2
- data/docker-compose.yml +23 -0
- data/lib/net/ssh/authentication/agent.rb +36 -14
- data/lib/net/ssh/authentication/certificate.rb +19 -7
- data/lib/net/ssh/authentication/constants.rb +0 -1
- data/lib/net/ssh/authentication/ed25519.rb +83 -50
- data/lib/net/ssh/authentication/ed25519_loader.rb +5 -8
- data/lib/net/ssh/authentication/key_manager.rb +74 -33
- data/lib/net/ssh/authentication/methods/abstract.rb +12 -3
- data/lib/net/ssh/authentication/methods/hostbased.rb +3 -5
- data/lib/net/ssh/authentication/methods/keyboard_interactive.rb +5 -3
- data/lib/net/ssh/authentication/methods/none.rb +6 -9
- data/lib/net/ssh/authentication/methods/password.rb +2 -3
- data/lib/net/ssh/authentication/methods/publickey.rb +58 -16
- data/lib/net/ssh/authentication/pageant.rb +97 -97
- data/lib/net/ssh/authentication/pub_key_fingerprint.rb +2 -3
- data/lib/net/ssh/authentication/session.rb +27 -23
- data/lib/net/ssh/buffer.rb +91 -40
- data/lib/net/ssh/buffered_io.rb +24 -26
- data/lib/net/ssh/config.rb +99 -53
- data/lib/net/ssh/connection/channel.rb +101 -87
- data/lib/net/ssh/connection/constants.rb +0 -4
- data/lib/net/ssh/connection/event_loop.rb +30 -25
- data/lib/net/ssh/connection/keepalive.rb +12 -12
- data/lib/net/ssh/connection/session.rb +115 -111
- data/lib/net/ssh/connection/term.rb +56 -58
- data/lib/net/ssh/errors.rb +12 -12
- data/lib/net/ssh/key_factory.rb +108 -22
- data/lib/net/ssh/known_hosts.rb +120 -36
- data/lib/net/ssh/loggable.rb +10 -11
- data/lib/net/ssh/packet.rb +1 -1
- data/lib/net/ssh/prompt.rb +9 -11
- data/lib/net/ssh/proxy/command.rb +1 -2
- data/lib/net/ssh/proxy/errors.rb +2 -4
- data/lib/net/ssh/proxy/http.rb +18 -20
- data/lib/net/ssh/proxy/https.rb +8 -10
- data/lib/net/ssh/proxy/jump.rb +8 -10
- data/lib/net/ssh/proxy/socks4.rb +2 -4
- data/lib/net/ssh/proxy/socks5.rb +3 -6
- data/lib/net/ssh/service/forward.rb +9 -8
- data/lib/net/ssh/test/channel.rb +24 -26
- data/lib/net/ssh/test/extensions.rb +37 -35
- data/lib/net/ssh/test/kex.rb +6 -8
- data/lib/net/ssh/test/local_packet.rb +0 -2
- data/lib/net/ssh/test/packet.rb +3 -3
- data/lib/net/ssh/test/remote_packet.rb +6 -8
- data/lib/net/ssh/test/script.rb +25 -27
- data/lib/net/ssh/test/socket.rb +12 -15
- data/lib/net/ssh/test.rb +12 -12
- data/lib/net/ssh/transport/algorithms.rb +177 -118
- data/lib/net/ssh/transport/cipher_factory.rb +34 -50
- data/lib/net/ssh/transport/constants.rb +13 -9
- data/lib/net/ssh/transport/ctr.rb +8 -14
- data/lib/net/ssh/transport/hmac/abstract.rb +20 -5
- data/lib/net/ssh/transport/hmac/md5.rb +0 -2
- data/lib/net/ssh/transport/hmac/md5_96.rb +0 -2
- data/lib/net/ssh/transport/hmac/none.rb +0 -2
- data/lib/net/ssh/transport/hmac/ripemd160.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha1.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha1_96.rb +0 -2
- data/lib/net/ssh/transport/hmac/sha2_256.rb +7 -11
- data/lib/net/ssh/transport/hmac/sha2_256_96.rb +4 -8
- data/lib/net/ssh/transport/hmac/sha2_256_etm.rb +12 -0
- data/lib/net/ssh/transport/hmac/sha2_512.rb +6 -9
- data/lib/net/ssh/transport/hmac/sha2_512_96.rb +4 -8
- data/lib/net/ssh/transport/hmac/sha2_512_etm.rb +12 -0
- data/lib/net/ssh/transport/hmac.rb +13 -11
- data/lib/net/ssh/transport/identity_cipher.rb +11 -13
- data/lib/net/ssh/transport/kex/abstract.rb +130 -0
- data/lib/net/ssh/transport/kex/abstract5656.rb +72 -0
- data/lib/net/ssh/transport/kex/curve25519_sha256.rb +39 -0
- data/lib/net/ssh/transport/kex/curve25519_sha256_loader.rb +30 -0
- data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha1.rb +5 -19
- data/lib/net/ssh/transport/kex/diffie_hellman_group14_sha256.rb +11 -0
- data/lib/net/ssh/transport/kex/diffie_hellman_group1_sha1.rb +30 -139
- data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha1.rb +1 -8
- data/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha256.rb +5 -9
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp256.rb +20 -81
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp384.rb +5 -4
- data/lib/net/ssh/transport/kex/ecdh_sha2_nistp521.rb +5 -4
- data/lib/net/ssh/transport/kex.rb +15 -10
- data/lib/net/ssh/transport/key_expander.rb +7 -8
- data/lib/net/ssh/transport/openssl.rb +149 -111
- data/lib/net/ssh/transport/packet_stream.rb +53 -22
- data/lib/net/ssh/transport/server_version.rb +17 -16
- data/lib/net/ssh/transport/session.rb +35 -11
- data/lib/net/ssh/transport/state.rb +44 -44
- data/lib/net/ssh/verifiers/accept_new.rb +7 -2
- data/lib/net/ssh/verifiers/accept_new_or_local_tunnel.rb +1 -2
- data/lib/net/ssh/verifiers/always.rb +10 -4
- data/lib/net/ssh/verifiers/never.rb +4 -2
- data/lib/net/ssh/version.rb +2 -2
- data/lib/net/ssh.rb +17 -9
- data/net-ssh-public_cert.pem +18 -19
- data/net-ssh.gemspec +9 -7
- data/support/ssh_tunnel_bug.rb +3 -3
- data.tar.gz.sig +0 -0
- metadata +65 -41
- metadata.gz.sig +0 -0
- data/.travis.yml +0 -52
- data/Gemfile.noed25519.lock +0 -41
- data/README.rdoc +0 -169
- data/lib/net/ssh/ruby_compat.rb +0 -13
- data/support/arcfour_check.rb +0 -20
@@ -1,8 +1,7 @@
|
|
1
1
|
require 'net/ssh/loggable'
|
2
|
-
require 'net/ssh/ruby_compat'
|
3
2
|
|
4
|
-
module Net
|
5
|
-
module SSH
|
3
|
+
module Net
|
4
|
+
module SSH
|
6
5
|
module Connection
|
7
6
|
# EventLoop can be shared across multiple sessions
|
8
7
|
#
|
@@ -12,81 +11,84 @@ module Net
|
|
12
11
|
# and we don't pass session.
|
13
12
|
class EventLoop
|
14
13
|
include Loggable
|
15
|
-
|
16
|
-
def initialize(logger=nil)
|
14
|
+
|
15
|
+
def initialize(logger = nil)
|
17
16
|
self.logger = logger
|
18
17
|
@sessions = []
|
19
18
|
end
|
20
|
-
|
19
|
+
|
21
20
|
def register(session)
|
22
21
|
@sessions << session
|
23
22
|
end
|
24
|
-
|
23
|
+
|
25
24
|
# process until timeout
|
26
25
|
# if a block is given a session will be removed from loop
|
27
26
|
# if block returns false for that session
|
28
27
|
def process(wait = nil, &block)
|
29
28
|
return false unless ev_preprocess(&block)
|
30
|
-
|
29
|
+
|
31
30
|
ev_select_and_postprocess(wait)
|
32
31
|
end
|
33
|
-
|
32
|
+
|
34
33
|
# process the event loop but only for the sepcified session
|
35
34
|
def process_only(session, wait = nil)
|
36
35
|
orig_sessions = @sessions
|
37
36
|
begin
|
38
37
|
@sessions = [session]
|
39
38
|
return false unless ev_preprocess
|
39
|
+
|
40
40
|
ev_select_and_postprocess(wait)
|
41
41
|
ensure
|
42
42
|
@sessions = orig_sessions
|
43
43
|
end
|
44
44
|
end
|
45
|
-
|
45
|
+
|
46
46
|
# Call preprocess on each session. If block given and that
|
47
47
|
# block retuns false then we exit the processing
|
48
48
|
def ev_preprocess(&block)
|
49
49
|
return false if block_given? && !yield(self)
|
50
|
+
|
50
51
|
@sessions.each(&:ev_preprocess)
|
51
52
|
return false if block_given? && !yield(self)
|
53
|
+
|
52
54
|
return true
|
53
55
|
end
|
54
|
-
|
56
|
+
|
55
57
|
def ev_select_and_postprocess(wait)
|
56
58
|
owners = {}
|
57
59
|
r = []
|
58
60
|
w = []
|
59
61
|
minwait = nil
|
60
62
|
@sessions.each do |session|
|
61
|
-
sr,sw,actwait = session.ev_do_calculate_rw_wait(wait)
|
63
|
+
sr, sw, actwait = session.ev_do_calculate_rw_wait(wait)
|
62
64
|
minwait = actwait if actwait && (minwait.nil? || actwait < minwait)
|
63
65
|
r.push(*sr)
|
64
66
|
w.push(*sw)
|
65
67
|
sr.each { |ri| owners[ri] = session }
|
66
68
|
sw.each { |wi| owners[wi] = session }
|
67
69
|
end
|
68
|
-
|
70
|
+
|
69
71
|
readers, writers, = IO.select(r, w, nil, minwait)
|
70
|
-
|
72
|
+
|
71
73
|
fired_sessions = {}
|
72
|
-
|
74
|
+
|
73
75
|
if readers
|
74
76
|
readers.each do |reader|
|
75
77
|
session = owners[reader]
|
76
|
-
(fired_sessions[session] ||= { r: [],w: [] })[:r] << reader
|
78
|
+
(fired_sessions[session] ||= { r: [], w: [] })[:r] << reader
|
77
79
|
end
|
78
80
|
end
|
79
81
|
if writers
|
80
82
|
writers.each do |writer|
|
81
83
|
session = owners[writer]
|
82
|
-
(fired_sessions[session] ||= { r: [],w: [] })[:w] << writer
|
84
|
+
(fired_sessions[session] ||= { r: [], w: [] })[:w] << writer
|
83
85
|
end
|
84
86
|
end
|
85
|
-
|
86
|
-
fired_sessions.each do |s,rw|
|
87
|
-
s.ev_do_handle_events(rw[:r],rw[:w])
|
87
|
+
|
88
|
+
fired_sessions.each do |s, rw|
|
89
|
+
s.ev_do_handle_events(rw[:r], rw[:w])
|
88
90
|
end
|
89
|
-
|
91
|
+
|
90
92
|
@sessions.each { |s| s.ev_do_postprocess(fired_sessions.key?(s)) }
|
91
93
|
true
|
92
94
|
end
|
@@ -98,18 +100,21 @@ module Net
|
|
98
100
|
# we call block with session as argument
|
99
101
|
def ev_preprocess(&block)
|
100
102
|
return false if block_given? && !yield(@sessions.first)
|
103
|
+
|
101
104
|
@sessions.each(&:ev_preprocess)
|
102
105
|
return false if block_given? && !yield(@sessions.first)
|
106
|
+
|
103
107
|
return true
|
104
108
|
end
|
105
|
-
|
109
|
+
|
106
110
|
def ev_select_and_postprocess(wait)
|
107
111
|
raise "Only one session expected" unless @sessions.count == 1
|
112
|
+
|
108
113
|
session = @sessions.first
|
109
|
-
sr,sw,actwait = session.ev_do_calculate_rw_wait(wait)
|
114
|
+
sr, sw, actwait = session.ev_do_calculate_rw_wait(wait)
|
110
115
|
readers, writers, = IO.select(sr, sw, nil, actwait)
|
111
|
-
|
112
|
-
session.ev_do_handle_events(readers,writers)
|
116
|
+
|
117
|
+
session.ev_do_handle_events(readers, writers)
|
113
118
|
session.ev_do_postprocess(!((readers.nil? || readers.empty?) && (writers.nil? || writers.empty?)))
|
114
119
|
end
|
115
120
|
end
|
@@ -1,45 +1,46 @@
|
|
1
1
|
require 'net/ssh/loggable'
|
2
|
-
module Net
|
3
|
-
module SSH
|
2
|
+
module Net
|
3
|
+
module SSH
|
4
4
|
module Connection
|
5
|
-
|
6
5
|
class Keepalive
|
7
6
|
include Loggable
|
8
|
-
|
7
|
+
|
9
8
|
def initialize(session)
|
10
9
|
@last_keepalive_sent_at = nil
|
11
10
|
@unresponded_keepalive_count = 0
|
12
11
|
@session = session
|
13
12
|
self.logger = session.logger
|
14
13
|
end
|
15
|
-
|
14
|
+
|
16
15
|
def options
|
17
16
|
@session.options
|
18
17
|
end
|
19
|
-
|
18
|
+
|
20
19
|
def enabled?
|
21
20
|
options[:keepalive]
|
22
21
|
end
|
23
|
-
|
22
|
+
|
24
23
|
def interval
|
25
24
|
options[:keepalive_interval] || Session::DEFAULT_IO_SELECT_TIMEOUT
|
26
25
|
end
|
27
|
-
|
26
|
+
|
28
27
|
def should_send?
|
29
28
|
return false unless enabled?
|
30
29
|
return true unless @last_keepalive_sent_at
|
30
|
+
|
31
31
|
Time.now - @last_keepalive_sent_at >= interval
|
32
32
|
end
|
33
|
-
|
33
|
+
|
34
34
|
def keepalive_maxcount
|
35
35
|
(options[:keepalive_maxcount] || 3).to_i
|
36
36
|
end
|
37
|
-
|
37
|
+
|
38
38
|
def send_as_needed(was_events)
|
39
39
|
return if was_events
|
40
40
|
return unless should_send?
|
41
|
+
|
41
42
|
info { "sending keepalive #{@unresponded_keepalive_count}" }
|
42
|
-
|
43
|
+
|
43
44
|
@unresponded_keepalive_count += 1
|
44
45
|
@session.send_global_request("keepalive@openssh.com") { |success, response|
|
45
46
|
debug { "keepalive response successful. Missed #{@unresponded_keepalive_count - 1} keepalives" }
|
@@ -53,7 +54,6 @@ module Net
|
|
53
54
|
end
|
54
55
|
end
|
55
56
|
end
|
56
|
-
|
57
57
|
end
|
58
58
|
end
|
59
59
|
end
|