gbucchino/openssh-portable
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
13,852 Commits 76 Branches 165 Tags
master
Commit Graph
156 Commits
Author SHA1 Message Date
Darren Tucker b1000abf54 Run tests on regress Makefile changes too. 2026-08-04 14:23:59 +10:00
Darren Tucker e416edf1b2 Remove support for libcrypto w/out ECC. 
Since 2010, we have supported building against an OpenSSL that did not
have any ECC support, since at the time many systems still shipped with
OpenSSL versions prior to ECC being added.  We no longer support OpenSSL
versions that old, and while it's possible to build a modern libcrypto
without ECC, doing so seems very uncommon.

Having OPENSSL_HAS_ECC sprinkled throughout the code increases the
cost of syncing changes and is a maintenance burden, so this has now
outlived its usefulness and is being removed.  It is still possible to
build --without-openssl on such systems if required.

This includes a few whitespace and header order changes to bring
Portable back into sync with OpenBSD in those places, and removes the
corresponding test.

ok djm@
 2026-07-31 21:41:10 +10:00
Darren Tucker 7c70c3d352 Fix handling of rh-allow-sha1-signatures on Cygwin 
The format of openssl.cnf has changed, so append to it instead of trying
to insert into it.  Test that openssl can sign RSA with SHA1 before
proceeding.
 2026-06-24 21:25:25 +10:00
Darren Tucker a4c5d09657 Make -j2 for faster builds. 2026-06-24 21:25:22 +10:00
Darren Tucker 110117accb Set CYGWIN at top-level. 
The ensures the symlinks created in any step (eg, logs) are native
symlinks and can be understood by the log upload step.
 2026-06-24 19:16:57 +10:00
Darren Tucker 01404fa5da Add script to lookup and pin Actions to hashes. 
Update recently changed Cygwin Actions and pin remaining unpinned ones.
 2026-06-22 19:32:25 +10:00
El Mehdi Abenhazou 983096a7b2 ci: pin GitHub Actions to full commit SHAs 
Pinning actions/checkout, actions/upload-artifact, and
cygwin/cygwin-install-action to their full commit SHA instead of
mutable branch/tag references (main, master).

Using mutable refs means a compromised or malicious update to the
action repository could silently alter the workflow behavior.
Pinning to SHA makes the exact version immutable and auditable.

Signed-off-by: El Mehdi Abenhazou <[email protected]>
 2026-06-22 18:54:58 +10:00
Darren Tucker c9ebebb22f Reformat setup_ci command line. 
This prevents setup_ci from running twice on Cygwin due to different
parsing of the command line since on Windows it's run via Powershell.
 2026-06-02 23:28:52 +10:00
Darren Tucker 7e5590cf8f Replace shell-level timeout with dedicated command. 
It turns out the systems we run this workflow on all have timeout(1),
 2026-06-02 18:57:23 +10:00
Darren Tucker 7b776066bc Update LibreSSL test 4.3.1->4.3.2. 2026-06-01 17:39:40 +10:00
Darren Tucker 0a561f9067 Run hardenedmalloc test on ubuntu-latest. 
Needed for newer clang that supports -std=c23.
 2026-05-26 10:48:19 +10:00
Darren Tucker 18b9db789e Add interop tests against Dropbear >= 2020.79 2026-05-21 18:01:01 +10:00
Darren Tucker 2be9cec2fc Update OpenSSL tested versions. 2026-04-27 21:53:36 +10:00
Darren Tucker b41203e500 Comment out new PAM valgrind test until debugged. 2026-04-27 21:47:55 +10:00
Darren Tucker 6c5235cb66 Reorder steps to change perms before displaying. 2026-04-27 21:47:49 +10:00
Darren Tucker ba110a56a7 Allow setting TEST_SSH_TRACE via Github. 2026-04-27 21:47:48 +10:00
Darren Tucker 8751cd9c5c Add tests for libressl-4.3.1. 2026-04-27 21:47:47 +10:00
Darren Tucker 713ec5c5ae Test against OpenSSL 3.6.2, 4.0.0 and 4.0-stable. 2026-04-16 20:55:23 +10:00
Darren Tucker 4bb4f1601e Add a Valgrind test of the PAM config. 2026-03-26 18:56:15 +11:00
Darren Tucker 75faa8a167 Update LibreSSL versions and add 4.2.0. 2025-10-20 18:29:24 +11:00
Darren Tucker a204650386 Retire macos-13 runners, add Intel-specific ones. 2025-10-17 16:32:40 +11:00
Darren Tucker d478e25023 Update OpenSSL & LibreSSL versions we test against. 2025-10-01 12:17:54 +10:00
Darren Tucker b4ceca952b Shorten workflow names to fit in a single line. 2025-09-26 22:28:13 +10:00
Darren Tucker 7ce3823547 Merge all putty tests into a single test. 
The lets us reuse the built OpenSSH binaries and replaces 12*4min of
tests with a single 14min one.
 2025-09-25 18:24:02 +10:00
Darren Tucker d00015d211 Test openssl-3.6 branch not beta1. 2025-09-23 16:38:45 +10:00
Darren Tucker 31fce4fc5a Test openssl-3.6.0-beta1. 2025-09-23 15:51:14 +10:00
Darren Tucker b94e7251a1 Specify rpath when building OpenSSL. 2025-09-23 15:35:19 +10:00
Darren Tucker 83853aa5e3 Factor out OpenSSL install and test more versions. 
Move OpenSSL installation into its own script with a "-a" option to
install the "next" version to test for ABI compatibility.
 2025-09-22 18:21:05 +10:00
Darren Tucker c682c9f45a Add tests for OpenSSL 3.4 and 3.5 versions. 2025-09-20 16:25:21 +10:00
Darren Tucker ca9ac1109e Rerun tests if run_tests.sh changes. 2025-09-20 16:25:12 +10:00
Darren Tucker 700205bd86 Fix env again. 2025-06-29 11:27:17 +10:00
Darren Tucker 223a1beac7 Move env again. 2025-06-29 11:24:42 +10:00
Darren Tucker d32614b448 Move env to where it (hopefully) belongs. 2025-06-29 11:22:00 +10:00
Darren Tucker 8a9384de48 Enable password tests on Github ephemeral VMs. 2025-06-29 11:14:18 +10:00
Darren Tucker 5530e5f83b Replace Windows 2019 runners with 2025 ones. 
The windows-2019 runners are being decomissioned.
 2025-06-10 18:42:10 +10:00
Darren Tucker 7674c03cae Allow setting LTESTS in repo variables. 2025-05-23 17:04:55 +10:00
Darren Tucker d8b5bd3607 Rename debugging variable RUN_ONLY_TEST. 
to RUN_ONLY_TARGET_CONFIG to make it more obvious what it matches.
 2025-05-23 17:04:51 +10:00
Darren Tucker a79a2c1190 chown regress logs before uploading. 2025-05-23 17:04:49 +10:00
Darren Tucker 450a8a1df1 Collect all of regress dir on failure. 
This may allow us to sort through its entrails and determine the cause
of some types of failures.
 2025-05-22 21:18:08 +10:00
Darren Tucker fc8c56ade8 Set runner pasword to random string. 
The most recent version of the Github ubuntu-latest image sets the
password field to "!" which sshd considers to be a locked account,
breaking most of the tests.
 2025-05-20 15:29:34 +10:00
Darren Tucker ee1d31781c Move debug log output into separate workflow step. 
Should reduce the need to scroll back to find out which test actually
failed.
 2025-05-11 17:45:06 +10:00
Darren Tucker 8846caccb8 Remove CYGWIN binmode as it's now obsolete. 2025-05-10 22:17:53 +10:00
Darren Tucker d1b28639c1 Tell Cygwin to use native symlinks. 2025-05-10 08:54:31 +10:00
Darren Tucker d5cbac2364 Pass Cygwin setup location to CI setup. 
(instead of hard coding it, wrongly).
 2025-05-10 08:11:50 +10:00
Darren Tucker 82f1f52c55 Add RUN_ONLY_TEST to limit which tests are run. 
For testing, you can set the repo variable RUN_ONLY_TEST in your repo
(Repo -> Settings -> Security -> Actions -> Variables) to run only that test.
 2025-05-10 07:44:48 +10:00
Darren Tucker a73890e340 Add PuTTY 0.81, 0.82 and 0.83 to tests. 2025-03-27 23:04:44 +11:00
Damien Miller 922e54bbfe cleanup last mention of ubuntu-20.04 2025-02-21 13:44:35 +11:00
Damien Miller bc4b3f6dc1 prune gcc/clang versions to be tested 
Test only the oldest and latest versions of each
 2025-02-21 13:44:13 +11:00
Damien Miller 6887099fae adjust workflows for ubuntu version transition 
remove workflows for unsupported compilers, add a few for additional
supported compilers, move some workflows to run on ubuntu-latest
 2025-02-21 11:22:34 +11:00
Damien Miller 33bb47e6f7 Add ubuntu-*-arm test runners 2025-02-20 17:10:32 +11:00