19261079b7
Some notable changes, from upstream's release notes: - sshd(8): Remove support for obsolete "host/port" syntax. - ssh(1): When prompting whether to record a new host key, accept the key fingerprint as a synonym for "yes". - ssh-keygen(1): when acting as a CA and signing certificates with an RSA key, default to using the rsa-sha2-512 signature algorithm. - ssh(1), sshd(8), ssh-keygen(1): this release removes the "ssh-rsa" (RSA/SHA1) algorithm from those accepted for certificate signatures. - ssh-sk-helper(8): this is a new binary. It is used by the FIDO/U2F support to provide address-space isolation for token middleware libraries (including the internal one). - ssh(1): this release enables UpdateHostkeys by default subject to some conservative preconditions. - scp(1): this release changes the behaviour of remote to remote copies (e.g. "scp host-a:/path host-b:") to transfer through the local host by default. - scp(1): experimental support for transfers using the SFTP protocol as a replacement for the venerable SCP/RCP protocol that it has traditionally used. Additional integration work is needed to support FIDO/U2F in the base system. Deprecation Notice ------------------ OpenSSH will disable the ssh-rsa signature scheme by default in the next release. Reviewed by: imp MFC after: 1 month Relnotes: Yes Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D29985
66 lines
2.2 KiB
Bash
66 lines
2.2 KiB
Bash
# $OpenBSD: sftp-badcmds.sh,v 1.7 2020/03/13 03:18:45 djm Exp $
|
|
# Placed in the Public Domain.
|
|
|
|
tid="sftp invalid commands"
|
|
|
|
DATA2=/bin/sh${EXEEXT}
|
|
NONEXIST=/NONEXIST.$$
|
|
GLOBFILES=`(cd /bin;echo l*)`
|
|
|
|
rm -rf ${COPY} ${COPY}.1 ${COPY}.2 ${COPY}.dd
|
|
|
|
rm -f ${COPY}
|
|
verbose "$tid: get nonexistent"
|
|
echo "get $NONEXIST $COPY" | ${SFTP} -D ${SFTPSERVER} >/dev/null 2>&1 \
|
|
|| fail "get nonexistent failed"
|
|
test -f ${COPY} && fail "existing copy after get nonexistent"
|
|
|
|
rm -f ${COPY}.dd/*
|
|
verbose "$tid: glob get to nonexistent directory"
|
|
echo "get /bin/l* $NONEXIST" | ${SFTP} -D ${SFTPSERVER} >/dev/null 2>&1 \
|
|
|| fail "get nonexistent failed"
|
|
for x in $GLOBFILES; do
|
|
test -f ${COPY}.dd/$x && fail "existing copy after get nonexistent"
|
|
done
|
|
|
|
rm -f ${COPY}
|
|
verbose "$tid: put nonexistent"
|
|
echo "put $NONEXIST $COPY" | ${SFTP} -D ${SFTPSERVER} >/dev/null 2>&1 \
|
|
|| fail "put nonexistent failed"
|
|
test -f ${COPY} && fail "existing copy after put nonexistent"
|
|
|
|
rm -f ${COPY}.dd/*
|
|
verbose "$tid: glob put to nonexistent directory"
|
|
echo "put /bin/l* ${COPY}.dd" | ${SFTP} -D ${SFTPSERVER} >/dev/null 2>&1 \
|
|
|| fail "put nonexistent failed"
|
|
for x in $GLOBFILES; do
|
|
test -f ${COPY}.dd/$x && fail "existing copy after nonexistent"
|
|
done
|
|
|
|
rm -f ${COPY}
|
|
verbose "$tid: rename nonexistent"
|
|
echo "rename $NONEXIST ${COPY}.1" | ${SFTP} -D ${SFTPSERVER} >/dev/null 2>&1 \
|
|
|| fail "rename nonexist failed"
|
|
test -f ${COPY}.1 && fail "file exists after rename nonexistent"
|
|
|
|
rm -rf ${COPY} ${COPY}.dd
|
|
cp $DATA $COPY
|
|
mkdir ${COPY}.dd
|
|
verbose "$tid: rename target exists (directory)"
|
|
echo "rename $COPY ${COPY}.dd" | ${SFTP} -D ${SFTPSERVER} >/dev/null 2>&1 \
|
|
|| fail "rename target exists (directory) failed"
|
|
test -f ${COPY} || fail "oldname missing after rename target exists (directory)"
|
|
test -d ${COPY}.dd || fail "newname missing after rename target exists (directory)"
|
|
cmp $DATA ${COPY} >/dev/null 2>&1 || fail "corrupted oldname after rename target exists (directory)"
|
|
|
|
rm -f ${COPY}.dd/*
|
|
rm -rf ${COPY}
|
|
cp ${DATA2} ${COPY}
|
|
verbose "$tid: glob put files to local file"
|
|
echo "put /bin/l* $COPY" | ${SFTP} -D ${SFTPSERVER} >/dev/null 2>&1
|
|
cmp ${DATA2} ${COPY} || fail "put succeeded when it should have failed"
|
|
|
|
rm -rf ${COPY} ${COPY}.1 ${COPY}.2 ${COPY}.dd
|
|
|
|
|