fscheiner
fscheiner
/ openssh-8.0p1-unbreak-gss-kex-for-gsi.patch
Created
March 12, 2021 14:12
This fix unbreaks GSS KEX for GSI-OpenSSH 8.0p1-6.el8
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff -Nur openssh-8.0p1.orig/kexgssc.c openssh-8.0p1/kexgssc.c | |
| --- openssh-8.0p1.orig/kexgssc.c 2021-03-03 12:35:48.356269671 +0100 | |
| +++ openssh-8.0p1/kexgssc.c 2021-03-03 13:39:31.000000000 +0100 | |
| @@ -162,11 +162,16 @@ | |
| do { | |
| type = ssh_packet_read(ssh); | |
| if (type == SSH2_MSG_KEXGSS_HOSTKEY) { | |
| + char *tmp = NULL; | |
| + size_t tmp_len = 0; | |
| + |
fscheiner
/ test-gss-kex-for-gsi-openssh.bash
Last active
July 21, 2023 07:06
Test GSS KEX/GEX methods for GSI-OpenSSH
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # Test GSS KEX/GEX for GSI-OpenSSH | |
| # Requirements | |
| # ############ | |
| # | |
| # * Needs to be run as root (e.g. with `sudo`) | |
| # * Needs preconfigured and working GSI authentication (certs, keys, | |
| # grid-mapfile, etc. in `/etc/grid-security` and valid GSI proxy certificate) |