Skip to content
This repository was archived by the owner on Jan 26, 2026. It is now read-only.

Commit afa77c1

Browse files
committed
test: Workaround the new OpenSSH failure rate limiting
The new OpenSSH rate limits the failed authentication attempts per source address and drops connection when the amount is reached, which is happening in our testsuite. By whitelisting the IP address of the client on the socket wrapper, this allows the tests to pass. https://man.openbsd.org/sshd_config.5#PerSourcePenaltyExemptList Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org> (cherry picked from commit 7b89ff760a2c7119916eaa8fd6a62afbd15fc3ad)
1 parent 825de35 commit afa77c1

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

tests/torture.c

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -755,6 +755,9 @@ static void torture_setup_create_sshd_config(void **state, bool pam)
755755
"HostKeyAlgorithms " OPENSSH_KEYS "\n"
756756
#if OPENSSH_VERSION_MAJOR == 8 && OPENSSH_VERSION_MINOR >= 2
757757
"CASignatureAlgorithms " OPENSSH_KEYS "\n"
758+
#endif
759+
#if (OPENSSH_VERSION_MAJOR == 9 && OPENSSH_VERSION_MINOR >= 8) || OPENSSH_VERSION_MAJOR > 9
760+
"PerSourcePenaltyExemptList 127.0.0.21\n"
758761
#endif
759762
"Ciphers " OPENSSH_CIPHERS "\n"
760763
"KexAlgorithms " OPENSSH_KEX "\n"
@@ -786,6 +789,9 @@ static void torture_setup_create_sshd_config(void **state, bool pam)
786789
"%s\n" /* Here comes UsePam */
787790
"%s" /* The space for test-specific options */
788791
"\n"
792+
#if (OPENSSH_VERSION_MAJOR == 9 && OPENSSH_VERSION_MINOR >= 8) || OPENSSH_VERSION_MAJOR > 9
793+
"PerSourcePenaltyExemptList 127.0.0.21\n"
794+
#endif
789795
"Ciphers "
790796
"aes256-gcm@openssh.com,aes256-ctr,aes256-cbc,"
791797
"aes128-gcm@openssh.com,aes128-ctr,aes128-cbc"

0 commit comments

Comments
 (0)