4f52dfbb8d
This completely removes client-side support for the SSH 1 protocol, which was already disabled in 12 but is still enabled in 11. For that reason, we will not be able to merge 7.6p1 or newer back to 11.
62 lines
1.5 KiB
Bash
62 lines
1.5 KiB
Bash
# $OpenBSD: dynamic-forward.sh,v 1.13 2017/09/21 19:18:12 markus Exp $
|
|
# Placed in the Public Domain.
|
|
|
|
tid="dynamic forwarding"
|
|
|
|
FWDPORT=`expr $PORT + 1`
|
|
|
|
if have_prog nc && nc -h 2>&1 | grep "proxy address" >/dev/null; then
|
|
proxycmd="nc -x 127.0.0.1:$FWDPORT -X"
|
|
elif have_prog connect; then
|
|
proxycmd="connect -S 127.0.0.1:$FWDPORT -"
|
|
else
|
|
echo "skipped (no suitable ProxyCommand found)"
|
|
exit 0
|
|
fi
|
|
trace "will use ProxyCommand $proxycmd"
|
|
|
|
start_sshd
|
|
|
|
for d in D R; do
|
|
n=0
|
|
error="1"
|
|
trace "start dynamic forwarding, fork to background"
|
|
|
|
while [ "$error" -ne 0 -a "$n" -lt 3 ]; do
|
|
n=`expr $n + 1`
|
|
${SSH} -F $OBJ/ssh_config -f -$d $FWDPORT -q \
|
|
-oExitOnForwardFailure=yes somehost exec sh -c \
|
|
\'"echo \$\$ > $OBJ/remote_pid; exec sleep 444"\'
|
|
error=$?
|
|
if [ "$error" -ne 0 ]; then
|
|
trace "forward failed attempt $n err $error"
|
|
sleep $n
|
|
fi
|
|
done
|
|
if [ "$error" -ne 0 ]; then
|
|
fatal "failed to start dynamic forwarding"
|
|
fi
|
|
|
|
for s in 4 5; do
|
|
for h in 127.0.0.1 localhost; do
|
|
trace "testing ssh socks version $s host $h (-$d)"
|
|
${SSH} -F $OBJ/ssh_config \
|
|
-o "ProxyCommand ${proxycmd}${s} $h $PORT" \
|
|
somehost cat ${DATA} > ${COPY}
|
|
test -f ${COPY} || fail "failed copy ${DATA}"
|
|
cmp ${DATA} ${COPY} || fail "corrupted copy of ${DATA}"
|
|
done
|
|
done
|
|
|
|
if [ -f $OBJ/remote_pid ]; then
|
|
remote=`cat $OBJ/remote_pid`
|
|
trace "terminate remote shell, pid $remote"
|
|
if [ $remote -gt 1 ]; then
|
|
kill -HUP $remote
|
|
fi
|
|
else
|
|
fail "no pid file: $OBJ/remote_pid"
|
|
fi
|
|
|
|
done
|