Recent commits to derivepassphrase.git (a094d1c97e9516f9ea2035c909991ffd26bb7a50)

Use "overlapped I/O" for Windows named pipe communication

2025-12-28T18:53:33+01:00

(... or, as the rest of the world calls it: non-blocking I/O.)

We previously avoided using the overlapped I/O interface, for multiple
reasons:

  - It requires C structs which are not already natively wrapped by
    `ctypes` on The Annoying OS, and are fairly verbose to implement
    manually.

  - The notification that the I/O operation has completed requires
    further types and functions to be wrapped.

  - The C structs are documented reasonably well, but the bit flags used
    in this interface are sometimes only given by name, not by value,
    and thus need to be looked up in actual pre-existing code.

However, Pageant also internally uses overlapped I/O, and the behavior
observed in 5bcd2c39308880309286a2243e3795833817d1a5 may be due to
a mismatch between the I/O channel we see (non-overlapped) and the
channel Pageant sees (overlapped).  So, for consistency and
compatibility, we also use the overlapped I/O interface.
</pre>

Fix the fallback variant of the Windows named pipe handling code

2025-12-28T18:47:21+01:00

The fallback implementation for systems other than The Annoying OS was
incomplete.
</pre>

Retry connecting to a named pipe if the pipe is busy

2025-12-28T12:05:37+01:00

In the `WindowsNamedPipeHandle` constructor, if connecting the named
pipe fails with the Windows error 231 (`ERROR_PIPE_BUSY`), retry the
operation.  (For expected future compatibility, we treat
`BlockingIOError` the same way.)  This behavior roughly corresponds to
how system calls on POSIX should usually be retried if they return with
`EINTR`.
</pre>

Do not suppress OSError when constructing Windows named pipes in test fixtures

2025-12-27T18:52:29+01:00

Let any OSError that occurs when opening the named pipe bubble to the
top of the test fixture, instead of suppressing it and indicating that
the named pipe is unavailable.  At the top level, the test fixture can
then incorporate the error text into the failure or skip message (which
would otherwise be invisible if suppressed further down).
</pre>

In the test suite, correctly calculate if an SSH agent is isolated

2025-12-27T18:42:06+01:00

In particular, pay consideration to interfaced agents, not just spawned ones.
</pre>

Fix recognition of Pageant in the test fixtures

2025-12-27T18:26:50+01:00

When reacting to failures uploading a test key into an agent, both the
agent type `KnownSSHAgent.UNIXPageant` and the type
`KnownSSHAgent.Pageant` should be treated the same.  However, the
`ssh_agent_client_with_loaded_test_keys` only treated the former agent
type specially.  Now it also treats the latter type the same.
</pre>

Unload loaded test keys in the fixture more efficiently

2025-12-27T17:33:06+01:00

Instead of iterating over all test keys and testing whether the agent is
not isolated and the key is a successfully loaded key, first check
whether the agent is isolated or not, *then* iterate over the
successfully loaded key names and extract the relevant test key from the
test key table.  The efficiency per operation is similar, but the
previous setup always iterated the whole test key table unconditionally,
whereas the new setup only iterates the successfully loaded key name set
(fewer entries than the test key table), and only conditionally.
</pre>

Document the "test key uploading" helper functions

2025-12-27T17:19:38+01:00

Add docstrings to the `_prepare_payload` and `_load_key_optimistically`
helper functions.

Also change the signature of `_load_key_optimistically` to take the test
key structure directly, instead of taking a (dict) key to lookup the
structure.  (These types of things become apparent when writing
docstrings, even for otherwise internal functions.)
</pre>

Auto-format the "test key uploading" fixture and helper functions, again

2025-12-27T17:10:07+01:00

</pre>

Convert the helper function `_load_keys_optimistically` into a per-key function

2025-12-27T17:01:22+01:00

The function is now called `_load_key_optimistically`, and returns a
success indication whether the key was (potentially already) loaded or
not.  Also, the private key blob cannot be `None` anymore, so the
function no longer has degenerate cases.
</pre>