Cygwin build make check log message "WARNING: UNPROTECTED PRIVATE KEY FILE!" #11244
Description
Between tests 0581 and 0584 got multiple occurrences of:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: UNPROTECTED PRIVATE KEY FILE! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Permissions 0755 for '$HOME/src/cygwin/curl/curl-8.1.2-1.x86_64/build/tests/' are too open.
It is required that your private key files are NOT accessible by others.
This private key will be ignored.
Unable to load host key "$HOME/src/cygwin/curl/curl-8.1.2-1.x86_64/build/tests/": bad permissions
Unable to load host key: $HOME/src/cygwin/curl/curl-8.1.2-1.x86_64/build/tests/
sshd: no hostkeys available -- exiting.
=== End of file $HOME/src/cygwin/curl/curl-8.1.2-1.x86_64/build/tests/log/ssh_server.log
See in:
Cygwin-curl-8.1.2-1-check.log
Script sshd-curl-config was generated under out of tree build dir .../build/tests/log/server/, as were the key files {curl_client_key,curl_host_rsa_key}{,.pub}... so it seems that directory, or another created for the keys, should have their permissions limited to 0700, as expected for ~/.ssh/ directories, and if the higher level directory specified in the message is spurious, that should also be corrected.
I did this
make check
I expected the following
Tests build and run, possibly not all successfully.
curl/libcurl version
$ curl-8.1.2-1.x86_64/inst/usr/bin/curl -V
curl 8.1.2 (x86_64-pc-cygwin) libcurl/8.1.2 OpenSSL/1.1.1t zlib/1.2.13 brotli/1.0.9 zstd/1.5.5 libidn2/2.3.4 libpsl/0.21.2 (+libidn2/2.3.4) libssh2/1.10.0 nghttp2/1.53.0 libgsasl/2.2.0
Release-Date: 2023-05-30
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: alt-svc AsynchDNS brotli gsasl GSS-API HSTS HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets zstd
operating system
Cygwin 3.4.6 under Windows 10 [20]21H2 19044