[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #15 from Graham Bloice  ---
That looks interesting, an ssh-agent replacement that proxies pageant.  I'll
have to test that to see if it can co-exist with the ssh-agent from Git that I
normally have running, but I suspect there might be a clash over environment
variables (SSH_AUTH_SOCK).

There's also Charade that does a very similar thing:
https://github.com/wesleyd/charade

Overall I still think I'd like libssh to try both an ssh-agent on a socket and
pageant over it's IPC mechanism.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #14 from Dario Lombardo  ---
(In reply to Graham Bloice from comment #13)
> 
> I have that on my long list of rainy day projects.
> 

"Rainy day projects" ... I like it!

For completeness, I found a code that could be useful.

https://github.com/cuviper/ssh-pageant

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Roland Knall  changed:

   What|Removed |Added

 Status|CONFIRMED   |RESOLVED
 Resolution|--- |WONTFIX

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #13 from Graham Bloice  ---
Pageant support will require modifications to libssh, as it doesn't use a
socket interface, instead it uses a shared memory mapped file for the data and
Windows messages for control.

I have that on my long list of rainy day projects.

I'm also happy to close out this bug as WON'T FIX.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #12 from Roland Knall  ---
(In reply to Dario Lombardo from comment #11)
> (In reply to Roland Knall from comment #8)
> > So I think, support for ssh-agent and pageant (putty's ssh agent) is the
> > right way forward.
> 
> ssh-agent support is already in place. Pageant support should be added,
> since it seems to have a different interface. By the way I'd close this bug
> (sshdump will not save any password) and I'd open a new enhancement for
> pageant support.

agreed.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #11 from Dario Lombardo  ---
(In reply to Roland Knall from comment #8)
> So I think, support for ssh-agent and pageant (putty's ssh agent) is the
> right way forward.

ssh-agent support is already in place. Pageant support should be added, since
it seems to have a different interface. By the way I'd close this bug (sshdump
will not save any password) and I'd open a new enhancement for pageant support.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Roland Knall  changed:

   What|Removed |Added

 Status|UNCONFIRMED |CONFIRMED
 Ever confirmed|0   |1

--- Comment #10 from Roland Knall  ---
It should be resolved, once there is a solution in place. As long as there is
none, it should stay open.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Roland Knall  changed:

   What|Removed |Added

 Status|VERIFIED|UNCONFIRMED
 Resolution|NOTABUG |---

--- Comment #9 from Roland Knall  ---
Sorry, wrong status change

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Roland Knall  changed:

   What|Removed |Added

 Status|RESOLVED|VERIFIED

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #8 from Roland Knall  ---
Personally I think that, to not store a password in 2016 should be a
no-brainer. It is simply the right thing to do. 

That being said, I acknowledge, that many people don't want to do the hassle of
entering the password every single time. But that is, what ssh-agents are for.

So I think, support for ssh-agent and pageant (putty's ssh agent) is the right
way forward.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Graham Bloice  changed:

   What|Removed |Added

 CC||graham.blo...@trihedral.com

--- Comment #7 from Graham Bloice  ---
Personally I'm happy with not storing the password.

I aim to add support for Windows ssh-agent (or even the PuTTY equivalent
pagent) at some time in the future.  I need to have a look at the code to see
if the password lingers in process memory and see if there's a way to avoid
that.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #6 from Jörg Mayer  ---
I personally find the lack to provide a password on the openssh command line
(or at least the config file) to be very patronizing. There are environments
where using key simply isn't an option, and in some environments typing in a
password is a way higher risk of compromising it than having it stored in a
file. So nowadays there are wrappers around the ssh client only to work around
this restriction. Also, on single user systems there is not really any security
advantage compared to live typing the password, or is there?

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Dario Lombardo  changed:

   What|Removed |Added

 CC||rkn...@gmail.com

--- Comment #5 from Dario Lombardo  ---
I'd add Roland to express his opinion, since it's more of a extcap framework
stuff than a extcap tool stuff.
Facts:
- openssh client doesn't offer such an option
- filezilla does
My opinion: since there's an alternative, I'd avoid to add that, but I'd like
to have other opinions.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #4 from djcanadianj...@gmail.com ---
even if it had a checkbox to offer to save the password?

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #3 from Dario Lombardo  ---
This is a bad practice in security. Home made solutions don't fit well. The
solution for ssh authentication without re-enter the password is key or agent.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Stig Bjørlykke  changed:

   What|Removed |Added

 CC||s...@bjorlykke.org

--- Comment #2 from Stig Bjørlykke  ---
The password could be saved in memory while capturing to support restart
capture.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Dario Lombardo  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 Resolution|--- |NOTABUG

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

--- Comment #1 from Dario Lombardo  ---
It's exactly what expected. A saved password would mean a password on a text
file. A security flaw. If you want to repeatedly capture without enter the
password use the certificates or ssh-agent. They're fully supported.

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

[Wireshark-bugs] [Bug 13012] sshdump does not save password

[bugzilla-daemon]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13012

Alexis La Goutte  changed:

   What|Removed |Added

 CC||alexis.lagou...@gmail.com,
   ||lom...@gmail.com

-- 
You are receiving this mail because:
You are watching all bug changes.
___
Sent via:Wireshark-bugs mailing list 
Archives:https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
 mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe