- updated to 8.1p1

diff --git a/openssh-no-pty-tests.patch b/openssh-no-pty-tests.patch
new file mode 100644 (file)
index 0000000..a620c69
--- /dev/null
+++ b/openssh-no-pty-tests.patch
@@ -0,0 +1,16 @@
+diff -urN openssh-8.1p1.orig/regress/key-options.sh openssh-8.1p1/regress/key-options.sh
+--- openssh-8.1p1.orig/regress/key-options.sh  2019-10-09 02:31:03.000000000 +0200
++++ openssh-8.1p1/regress/key-options.sh       2019-10-17 17:00:24.947221081 +0200
+@@ -59,10 +59,10 @@
+       fi
+ }
+ # First ensure that we can allocate a pty by default.
+-expect_pty_succeed "default" ""
++#expect_pty_succeed "default" ""
+ expect_pty_fail "no-pty" "no-pty"
+ expect_pty_fail "restrict" "restrict"
+-expect_pty_succeed "restrict,pty" "restrict,pty"
++#expect_pty_succeed "restrict,pty" "restrict,pty"
+ 
+ # Test environment=
+ # XXX this can fail if ~/.ssh/environment exists for the user running the test

diff --git a/openssh-skip-interop-tests.patch b/openssh-skip-interop-tests.patch
new file mode 100644 (file)
index 0000000..d926d35
--- /dev/null
+++ b/openssh-skip-interop-tests.patch
@@ -0,0 +1,20 @@
+diff -urN openssh-8.1p1.orig/regress/Makefile openssh-8.1p1/regress/Makefile
+--- openssh-8.1p1.orig/regress/Makefile        2019-10-17 20:31:40.094507942 +0200
++++ openssh-8.1p1/regress/Makefile     2019-10-17 20:30:38.567986269 +0200
+@@ -225,8 +225,14 @@
+ t-exec-interop:       ${INTEROP_TESTS:=.sh}
+       @if [ "x$?" = "x" ]; then exit 0; fi; \
+       for TEST in ""$?; do \
+-              echo "run test $${TEST}" ... 1>&2; \
+-              (env SUDO="${SUDO}" TEST_ENV=${TEST_ENV} ${TEST_SHELL} ${.CURDIR}/test-exec.sh ${.OBJDIR} ${.CURDIR}/$${TEST}) || exit $$?; \
++              skip=no; \
++              for t in ""$${SKIP_LTESTS}; do \
++                      if [ "x$${t}.sh" = "x$${TEST}" ]; then skip=yes; fi; \
++              done; \
++              if [ "x$${skip}" = "xno" ]; then \
++                      echo "run test $${TEST}" ... 1>&2; \
++                      (env SUDO="${SUDO}" TEST_ENV=${TEST_ENV} ${TEST_SHELL} ${.CURDIR}/test-exec.sh ${.OBJDIR} ${.CURDIR}/$${TEST}) || exit $$?; \
++              fi; \
+       done
+ 
+ t-extra:      ${EXTRA_TESTS:=.sh}

diff --git a/openssh.spec b/openssh.spec
index 3224c8f98f9bc3566d1620e925cc6c9aa3393e24..78c1c1ff70a98cff001f9ccc19a67217e01e27ac 100644 (file)
--- a/openssh.spec
+++ b/openssh.spec
@@ -15,6 +15,7 @@
 %bcond_without libseccomp      # use libseccomp for seccomp privsep (requires 3.5 kernel)
 %bcond_with    hpn             # High Performance SSH/SCP - HPN-SSH including Cipher NONE (broken too often)
 %bcond_without tests           # test suite
+%bcond_with    tests_conch     # run conch interoperability tests
 
 # gtk2-based gnome-askpass means no gnome1-based
 %{?with_gtk:%undefine with_gnome}
@@ -42,13 +43,13 @@ Summary(pt_BR.UTF-8):       Implementação livre do SSH
 Summary(ru.UTF-8):     OpenSSH - свободная реализация протокола Secure Shell (SSH)
 Summary(uk.UTF-8):     OpenSSH - вільна реалізація протоколу Secure Shell (SSH)
 Name:          openssh
-Version:       8.0p1
-Release:       5
+Version:       8.1p1
+Release:       1
 Epoch:         2
 License:       BSD
 Group:         Applications/Networking
 Source0:       http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/%{name}-%{version}.tar.gz
-# Source0-md5: bf050f002fe510e1daecd39044e1122d
+# Source0-md5: 513694343631a99841e815306806edf0
 Source1:       http://www.mif.pg.gda.pl/homepages/ankry/man-PLD/%{name}-non-english-man-pages.tar.bz2
 # Source1-md5: 66943d481cc422512b537bcc2c7400d1
 Source2:       %{name}d.init
@@ -58,6 +59,7 @@ Source5:      ssh-agent.sh
 Source6:       ssh-agent.conf
 Source7:       %{name}-lpk.schema
 Source10:      sshd-keygen
+Patch0:                %{name}-no-pty-tests.patch
 Patch1:                %{name}-tests-reuseport.patch
 Patch2:                %{name}-pam_misc.patch
 Patch3:                %{name}-sigpipe.patch
@@ -76,6 +78,7 @@ Patch12:      %{name}-vulnkey-compat.patch
 Patch13:       %{name}-kuserok.patch
 Patch14:       %{name}-bind.patch
 Patch15:       %{name}-disable_ldap.patch
+Patch16:       %{name}-skip-interop-tests.patch
 URL:           http://www.openssh.com/portable.html
 BuildRequires: %{__perl}
 %{?with_audit:BuildRequires:   audit-libs-devel}
@@ -92,6 +95,9 @@ BuildRequires:        libseccomp-devel
 BuildRequires: openssl-devel >= 1.0.1
 BuildRequires: pam-devel
 %{?with_gtk:BuildRequires:     pkgconfig}
+%if %{with tests} && %{with tests_conch}
+BuildRequires: python-TwistedConch
+%endif
 BuildRequires: rpm >= 4.4.9-56
 BuildRequires: rpmbuild(macros) >= 1.627
 BuildRequires: sed >= 4.0
@@ -519,6 +525,7 @@ openldap-a.
 %prep
 %setup -q
 
+%patch0 -p1
 %patch1 -p1
 %patch2 -p1
 %patch3 -p1
@@ -535,6 +542,7 @@ openldap-a.
 %patch13 -p1
 %patch14 -p1
 %{!?with_ldap:%patch15 -p1}
+%patch16 -p1
 
 # hack since arc4random from openbsd-compat needs symbols from libssh and vice versa
 sed -i -e 's#-lssh -lopenbsd-compat#-lssh -lopenbsd-compat -lssh -lopenbsd-compat#g' Makefile*
@@ -581,6 +589,9 @@ echo '#define LOGIN_PROGRAM            "/bin/login"' >>config.h
 %{__make} -j1 tests \
        TEST_SSH_PORT=$((4242 + ${RANDOM:-$$} % 1000)) \
        TEST_SSH_TRACE="yes"
+%if %{without tests_conch}
+       SKIP_LTESTS="conch-ciphers"
+%endif
 %endif
 
 cd contrib