similar to: [Bug 2404] New: scp skips file/directory on permissions error

Hi, OpenSSH 8.3p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. This is a bugfix release. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is also available via git using the instructions at

As background, I read: http://therowes.net/~greg/2011/03/23/ssh-trusted-ca-key/ http://www.ibm.com/developerworks/aix/library/au-sshsecurity/ http://bryanhinton.com/blog/openssh-security http://www.linuxhowtos.org/manpages/5/sshd_config.htm

Debian GNU/Linux 8.0 (jessie) OpenSSL 1.0.1k gcc (Debian 4.9.2-10) 4.9.2 "make tests" fails here: /usr/src/INET/openssh/ssh-keygen -lf /usr/src/INET/openssh/regress//t12.out.pub | grep test-comment-1234 >/dev/null run test connect.sh ... ssh connect with protocol 1 failed ssh connect with protocol 2 failed failed simple connect Makefile:192: recipe for target 't-exec' failed

On Wed, 13 May 2020 at 02:00, Kevin Brott <kevin.brott at gmail.com> wrote: [...] > Latest snapshot is openssh-SNAP-20200502.tar.gz 02-May-2020 00:30 - is this the 8.3p1 candidate? No, it looks like the snapshot updater stopped updating. Damien's onto it. [...] > Using git-clone: > > *Linux Mint 19.3 / gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0 ** > fail tests here:* >

On 8 June 2018 at 11:21, PGNet Dev <pgnet.dev at gmail.com> wrote: > fyi > > add'l -- and looks unrelated -- issue > /usr/include/pthread.h:251:12: note: previous declaration of ?pthread_join? was here > extern int pthread_join (pthread_t __th, void **__thread_return); What included pthread.h? That's explicitly not supported by sshd: $ grep THREAD

Must have bolluxed something up in the compile environment - that or http://www.mindrot.org/openssh_snap/openssh-SNAP-20140828.tar.gz had a configure tweak that fixed it. All systems tested now build and pass all tests. That said - the stupid race condition in that one test is cropping up sporadically still - I think it's related to the load (or lack thereof) on the VM host. With, of

https://bugzilla.mindrot.org/show_bug.cgi?id=1904 Summary: sshd refuses certificate-based authentication if password has expired Product: Portable OpenSSH Version: 4.3p2 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo:

On Tue, 24 Feb 2015, Darren Tucker wrote: | On Tue, Feb 24, 2015 at 3:11 PM, Kevin Brott <kevin.brott at gmail.com> wrote: | | > [...] | > "cipher-aesctr.c", line 30: warning #2260-D: explicit type is missing | > ("int" assumed) | > static inline void | > | | does replacing "inline" with "__inline__" work? Failing that,

On Mon, 23 Feb 2015, Kevin Brott wrote: > Stock - Debian GNU/Linux 7.8 (wheezy) - all tests passed > > > build failure on: > * AIX 6.1 (6100-09-03-1415) IBM XL C/C++ Compiler (11.1.0.16) > * AIX 7.1 (7100-03-04-1441) IBM XL C/C++ Compiler (12.1.0.6) > > ./configure && make tests > > -DHAVE_CONFIG_H -c ssh_api.c -o ssh_api.o > "ssh_api.c",

HP-UX 11.23/11.31 build failures OS Build_Target CC OpenSSL BUILD TEST ============== =========================== ================ ============= ====== ================= HP-UX 11.23 ia64-hp-hpux11.23 C/aC++ C.11.23.12 0.9.8zb *F1 HP-UX 11.23 ia64-hp-hpux11.23 gcc 4.3.1 0.9.8zb *F2 HP-UX 11.31 ia64-hp-hpux11.31

On Mon, Aug 25, 2014 at 3:42 PM, Damien Miller <djm at mindrot.org> wrote: > On Mon, 25 Aug 2014, Kevin Brott wrote: > > > Slightly better results this time 'round ... still having non-ec.h build > > issues, what I think is a race condition on RHEL 3, and PIE issues (fixed > > with --without-pie config option) on RHEL 5 64-bit systems with a > just-built >

On Wed, Feb 25, 2015 at 11:50 AM, Kevin Brott <kevin.brott at gmail.com> wrote: > > Interestingly enough if I re-run 'make tests' using HP-UX cc it continues > into the tests because it actuall did build regress netcat! (not executable > - but it's there) ... > > run test connect.sh ... > ssh connect with protocol 1 failed > ssh connect with protocol 2

On Tue, Feb 24, 2015 at 2:20 PM, Darren Tucker <dtucker at zip.com.au> wrote: > On Wed, Feb 25, 2015 at 09:13:22AM +1100, Darren Tucker wrote: > > On Wed, Feb 25, 2015 at 09:04:57AM +1100, Darren Tucker wrote: > > > On Tue, Feb 24, 2015 at 12:11:16PM -0800, Kevin Brott wrote: > > > > ld: Unsatisfied symbol "xstrdup" in file > > > >

On Mon, 1 Apr 2019 at 23:23, Kevin Brott <kevin.brott at gmail.com> wrote: [...] > port-aix.c:316:1: error: conflicting types for 'record_failed_login' > record_failed_login(const char *user, const char *hostname, const char *ttyname) I think I just fixed that by changing the function to match the new prototype. Unfortunately I can't currently test it myself. Please

On Sun, 31 Mar 2019 at 19:01, Kevin Brott <kevin.brott at gmail.com> wrote: [...] > Using openssh-SNAP-20190401.tar.gz > AIX 7200-03-02-1846 > OpenSSL 1.0.2p 14 Aug 2018 > gcc (GCC) 8.1.0 > GNU Make 4.2.1 [...] > sshkey.c: In function 'sshkey_format_cert_validity': > sshkey.c:2750:42: warning: '%s' directive output may be truncated writing up to 31 bytes

On Sun, Sep 20, 2020 at 09:34:50AM -0700, Kevin Brott wrote: > On 9/19/20 11:02 PM, Damien Miller wrote: > > OpenSSH 8.4p1 is almost ready for release, so we would appreciate testing > > on as many platforms and systems as possible. This is a bugfix release. > > Debian GNU/Linux 10 (buster) > gcc version 8.3.0 (Debian 8.3.0-6) > OpenSSL 1.1.1d? 10 Sep 2019 > >

On Tue, Aug 26, 2014 at 11:02 AM, Damien Miller <djm at mindrot.org> wrote: > The other good news is that it has made it to unittests :) > > Indeed ... patch applied - and everything builds (yay!) - waiting on test suite to complete. Will go test on the RHEL 5 VM's and see how the 1.0.0-fipsmsystems fare. full report later today.

On Tue, 24 Feb 2015, Kevin Brott wrote: > > On Mon, Feb 23, 2015 at 4:53 PM, Damien Miller <djm at mindrot.org> wrote: > > This should fix it: > > diff --git a/regress/netcat.c b/regress/netcat.c > index 84efe11..4b8c51c 100644 > --- a/regress/netcat.c > +++ b/regress/netcat.c > [sniip] > > > > This patch

On Mon, 23 Feb 2015, Kevin Brott wrote: > Hrm - I'll have to run this on one of my linux boxxen and then schlep the > source over - the AIX/HP-UX boxenn have an older version of the autoconf > tools and autoreconf is broken/missing ... and that seems to work. > > Now the build fails here on AIX 6.1/7.1 ... > > xlc_r -O2 -qarch=ppc -qalloca -I/usr/include

On Mon, Feb 23, 2015 at 04:17:37PM -0800, Kevin Brott wrote: > Hrm - must have been a timing issue or my user error. In any case, just > pulled the latest commits ... > > *AIX 6.1/7.1 now fails here:* > *...* > xlc_r -O2 -qarch=ppc -qalloca -I/usr/include > -I/opt/freeware/include -I. -I. -O2 -qarch=ppc -qalloca -I/usr/include > -I/opt/freeware/include