TCP alias rejecting uppercase letters

[blop]

Hello,

It seems that the named TCP alias feature doesn't accept any uppercase letter.

The following commands are working :

ssh -R local:22:127.0.0.1:22 sish.server
ssh -R loc-al:22:127.0.0.1:22 sish.server
ssh -R local123:22:127.0.0.1:22 sish.server

The following commands are NOT working ("remote port forwarding failed for listen port") :

ssh -R Local:22:127.0.0.1:22 sish.server
ssh -R locAl:22:127.0.0.1:22 sish.server
ssh -R LOCAL:22:127.0.0.1:22 sish.server

As hostnames are case insensitive and we need to avoid collisions, shouldn't sish just lowercase the user input instead of throwing an error ? (same for -L tunnels)

Thank you!

Olivier

[antoniomika]

Hey @blop,

Hrm this is actually how the functionality is currently implemented (and works for me as well). What version of sish are you running?

PS: hope you’ve been well! Haven’t seen you around here in a bit!

Best,

[blop]

I'm fine thank you ;)
And our sish instance is running great too !

We are currently using the docker image antoniomika/sish:2.3.0.
I didn't check the latest releases yet ;-)

It might be related to our config ?

--ssh-address=*.*.*.*:22
--tcp-address=*.*.*.*
--http-address=*.*.*.*:80
--https-address=*.*.*.*:443
--https=true
--https-certificate-directory=/https-certificates
--redirect-root=true
--redirect-root-location=https://****/
--admin-console
--admin-console-token=****
--private-keys-directory=/private-keys/
--authentication
--authentication-keys-directory=/authentication-keys/
--authentication-password=""
--domain=****
--bind-hosts=****
--bind-random-aliases=false
--bind-random-ports=false
--bind-random-subdomains=false
--force-requested-aliases
--force-requested-ports
--force-requested-subdomains
--force-tcp-address
--tcp-aliases
--cleanup-unauthed=true
--cleanup-unauthed-timeout=30s
--idle-connection=true
--idle-connection-timeout=1h
--verify-ssl=false

[antoniomika]

Awesome, good to hear!

I see the issue now, it's because of force-requested-aliases. That function also needs to lowercase the addresses (which is wasn't). I pushed the fix and it'll be released as v2.4.1!

[blop]

Thank you !
It works in 2.4.1.

[blop]

@antoniomika It seems to be broken again since version 2.5.0, and still in 2.8.1 :o

WARNING: Server requests forwarding for unknown listen_port 22
ssh: rejected: administratively prohibited (open failed)

[antoniomika]

Should be fixed in v2.9.1!

[blop]

@antoniomika Still not working in v2.9.1 :'(

[antoniomika]

ssh -R aSDF:22:localhost:22 ssi.sh
Press Ctrl-C to close the session.

Starting SSH Forwarding service for tcp:22. Forwarded connections can be accessed via the following methods:
TCP Alias: asdf:22

Connection to ssi.sh closed by remote host.
Connection to ssi.sh closed.

Works for me! What's the configuration you're using?

[blop]

It fails when trying to actually connect to the TCP alias, not when setting it up.

tunnel side we get :
WARNING: Server requests forwarding for unknown listen_port 22 ssh: rejected: administratively prohibited (open failed)

client side we get :
kex_exchange_identification: Connection closed by remote host Connection closed by UNKNOWN port 65535

Same configuration as above ;-)

[antoniomika]

@blop Now this is fixed :)

[blop]

Yeah! It's working fine in v2.9.2 ;-)
Thanks !