Bug 212151
| Summary: | [security/openssh-portable] GSSAPI kex strange new behavior | ||
|---|---|---|---|
| Product: | Ports & Packages | Reporter: | Garrett Wollman <wollman> |
| Component: | Individual Port(s) | Assignee: | Bryan Drewery <bdrewery> |
| Status: | Closed Overcome By Events | ||
| Severity: | Affects Only Me | CC: | w.schwarzenfeld |
| Priority: | --- | Flags: | bugzilla:
maintainer-feedback?
(bdrewery) |
| Version: | Latest | ||
| Hardware: | Any | ||
| OS: | Any | ||
|
Description
Garrett Wollman
2016-08-25 15:53:49 UTC
Actually seems to be a more general problem with rekeying and GSSAPI kex -- I get the same failure mode if I manually rekey using the ~R escape. My TDL is quite large, I'll try to look at this in the next few weeks. It seems that GSSAPI kex is just completely broken for rekeying. Even on a fresh connection, ~R to rekey goes straight to public-key rather than doing GSSAPI. We have version 7.9p1. Is this still relevant? (In reply to w.schwarzenfeld from comment #4) I don't know, I had to disable the feature in order to be able to get my work done. A commit references this bug: Author: bdrewery Date: Tue Nov 24 20:46:21 UTC 2020 New revision: 556185 URL: https://svnweb.freebsd.org/changeset/ports/556185 Log: - Fix KERB_GSSAPI build; missing prototypes for DH openssl-compat. PR: 212151 (maybe) Changes: head/security/openssh-portable/Makefile head/security/openssh-portable/files/extra-patch-gssapi-kexgssc.c head/security/openssh-portable/files/extra-patch-gssapi-kexgsss.c kexgssc.c:392:2: error: implicit declaration of function 'DH_get0_key' is invalid in C99 [-Werror,-Wimplicit-function-declaration]
DH_get0_key(kex->dh, &pub_key, NULL);
^
kexgssc.c:550:2: error: implicit declaration of function 'DH_get0_pqg' is invalid in C99 [-Werror,-Wimplicit-function-declaration]
DH_get0_pqg(kex->dh, &dh_p, NULL, &dh_g);
^
kexgssc.c:550:2: note: did you mean 'DH_get0_key'?
There's a prototype missing here in kexgssgex_client which may explain it. Sounds like the key exchange client code. So it will never get the key right.
Please try r556185?
openssh-portable-gssapi-8.4.p1_3,1
Spotted this as I recently enabled -Werror in the port. Closing per lack of feedback and no other reports since last fix. |