summaryrefslogtreecommitdiffhomepage
path: root/tests
AgeCommit message (Collapse)Author
2017-09-22Comment re: cert testsJeff Forcier
2017-09-22Move cert tests & copies of related keys into separate folder.Jeff Forcier
This prevents non-cert-related tests from incidentally loading the certs, which was masking issues (re #1071)
2017-09-18Merge branch '2.2'Jeff Forcier
2017-09-18Fix rekeying with GSS-API key exchangeSebastian Deiss
When GSS-API key exchange is used a rekey caused a GSS-API MIC failure and closed the transport. This happened because the MIC of the transport session ID (H of the initial kex) was checked against the MIC of the new H created during rekey.
2017-09-12Merge branch '2.1' into 2.2Jeff Forcier
2017-09-12Merge branch '2.2'Jeff Forcier
2017-09-12Merge branch '2.0' into 2.1Jeff Forcier
2017-09-12Merge branch '2.0' into 1061-intJeff Forcier
2017-09-12Merge branch '2.2'Jeff Forcier
2017-09-05Merge branch 'master' into 1026-intJeff Forcier
2017-09-02Python 2.6 fixesJeff Forcier
Fixes #1049
2017-08-28Python 3 fixes re #1042Jeff Forcier
2017-08-28Implement ECDSA certs.Jeff Forcier
So mad at that frickin typo'd specification...
2017-08-28Update recent tests to try all main key families.Jeff Forcier
Includes some dummy certificates. Not sure exactly how @radssh generated the RSA one but I'm using ssh-keygen + a randomly made CA key.
2017-08-28God damn it, really? Whatever.Jeff Forcier
2017-08-28Update first few stub tests + required test-server and PublicBlob impl bitsJeff Forcier
2017-08-28Overhaul PublicBlob and use it better within RSAKey.Jeff Forcier
This allows server-side Paramiko code to correctly create cert-bearing RSAKey objects and thus verify client signatures, and now the test suite passes again, barring the stub tests. Re #1042
2017-08-28Stub tests and partly-working implementation of 'load certs found alongside ↵Jeff Forcier
key_filenames' behavior re #1042 This actually breaks existing tests due to test server not supporting certs...bah
2017-08-22Generic certificate supportPaul Kapp
Roll agnostic certificate support into PKey, and tweak publickey authentication to use it only if set. Requires explicit call to PKey.load_certificate() in order to alter the authentication behavior.
2017-08-04Merge branch '2.1-gsskex-hostkeycheck-fix' into 2.2-gsskex-hostkeycheck-fixAnselm Kruis
2017-08-04AuthHandler: fix the server-mode "gssapi-with-mic" logicAnselm Kruis
A paramiko server is now able to handle a restart of the user authentication during the GSS-API token exchange. This may occur, if the client detects a local GSSAPI problem (e.g. a missing kerberos ticket) and continues with another authentication method. The added test case test_2_auth_trickledown still fails, because the paramiko client contains a bug too.
2017-08-04Merge branch '2.0-gsskex-hostkeycheck-fix' into 2.1-gsskex-hostkeycheck-fixAnselm Kruis
2017-08-04SSHClient: fix the host key testAnselm Kruis
Skip the host key check only, if the transport actually used gssapi-keyex. Add tests for the missing-host-key RejectPolicy. Before this change, a man-in-the-middle attack on the paramiko ssh client with gss_kex=True was possible by having a server that does not support gssapi-keyex and gives any or no host key.
2017-07-28Move assertions outside of the open context managerMichal Kuffa
2017-07-28Add file_obj handling to the Ed25519Key constructorMichal Kuffa
2017-06-13WhitespaceJeff Forcier
2017-06-13implement __hash__() method for Ed25519KeyPierce Lopez
makes Ed25519Key objs comparable, needed for host keys
2017-06-09Merge branch '2.1'Jeff Forcier
2017-06-09Merge branch '2.1' into 910-intJeff Forcier
2017-06-09Merge branch '2.1'Jeff Forcier
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Flake8/etc tweaks re #971 in 2.xJeff Forcier
2017-06-09Allow any buffer type to be written to SFTPFileMartin Packman
Fixes #967 #968 Rollup of earlier branches proposed as #969 and #970 with additional fix inside sftp_client. Includes new tests for SFTPFile usage. Change against the 1.17 branch.
2017-06-09Allow any buffer type to be sent to ChannelMartin Packman
Fixes #968 Changes the behaviour of the underlying asbytes helper to pass along unknown types. Most callers already handle this by passing the bytes along to a file or socket-like object which will raise TypeError anyway. Adds test coverage through the Transport implementation. Change against the 1.17 branch.
2017-06-09Import from py3compat directly in test_clientMartin Packman
2017-06-09Allow any buffer type to written to BufferedFileMartin Packman
Fixes #967 Also adds test coverage for writing various types to BufferedFile which required some small changes to the test LoopbackFile subclass. Change against the 1.17 branch.
2017-06-09Add new skipUnlessBuiltin function for testingMartin Packman
2017-06-09Merge branch '2.1'Jeff Forcier
2017-06-09Merge branch '2.0' into 2.1Jeff Forcier
2017-06-09Merge branch '2.0' into 952-intJeff Forcier
2017-06-07Merge pull request #988 from ploxiln/auth_timeout_tests_cleanupJeff Forcier
cleanup/simplify auth_timeout tests
2017-06-07tests for host key negotiation when there are multiplePierce Lopez
2017-06-07cleanup/simplify auth_timeout testsPierce Lopez
2017-06-06Missed a merge conflict lololJeff Forcier
2017-06-06Merge branch '2.1'Jeff Forcier
2017-06-06Merge branch '2.0' into 2.1Jeff Forcier
2017-06-06Hand-picked backport of #912, fixes #741Jeff Forcier
2017-06-06Merge branch 'master' into 471-intJeff Forcier
2017-06-06Merge branch 'master' into 869-intJeff Forcier
2017-06-06Failing test proving need for #857Jeff Forcier