4 SPDX-License-Identifier: BSD-3-Clause
6 Copyright (c) 2000 The Regents of the University of Michigan.
9 Copyright (c) 2000 Dug Song <dugsong@UMICH.EDU>.
10 All rights reserved, all wrongs reversed.
12 Redistribution and use in source and binary forms, with or without
13 modification, are permitted provided that the following conditions
16 1. Redistributions of source code must retain the above copyright
17 notice, this list of conditions and the following disclaimer.
18 2. Redistributions in binary form must reproduce the above copyright
19 notice, this list of conditions and the following disclaimer in the
20 documentation and/or other materials provided with the distribution.
21 3. Neither the name of the University nor the names of its
22 contributors may be used to endorse or promote products derived
23 from this software without specific prior written permission.
25 THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
26 WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
27 MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
28 DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
29 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
30 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
31 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
32 BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
33 LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
34 NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
35 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
37 $Id: authgss_prot.c,v 1.18 2000/09/01 04:14:03 dugsong Exp $
40 #include <sys/cdefs.h>
41 __FBSDID("$FreeBSD$");
43 #include <sys/param.h>
44 #include <sys/systm.h>
47 #include <sys/malloc.h>
49 #include <sys/mutex.h>
52 #include <rpc/rpcsec_gss.h>
54 #include "rpcsec_gss_int.h"
56 #define MAX_GSS_SIZE 10240 /* XXX */
58 #if 0 /* use the one from kgssapi */
60 xdr_gss_buffer_desc(XDR *xdrs, gss_buffer_desc *p)
68 ret = xdr_bytes(xdrs, &val, &len, MAX_GSS_SIZE);
77 xdr_rpc_gss_cred(XDR *xdrs, struct rpc_gss_cred *p)
84 ret = (xdr_u_int(xdrs, &p->gc_version) &&
85 xdr_enum(xdrs, &proc) &&
86 xdr_u_int(xdrs, &p->gc_seq) &&
87 xdr_enum(xdrs, &svc) &&
88 xdr_gss_buffer_desc(xdrs, &p->gc_handle));
96 xdr_rpc_gss_init_res(XDR *xdrs, struct rpc_gss_init_res *p)
99 return (xdr_gss_buffer_desc(xdrs, &p->gr_handle) &&
100 xdr_u_int(xdrs, &p->gr_major) &&
101 xdr_u_int(xdrs, &p->gr_minor) &&
102 xdr_u_int(xdrs, &p->gr_win) &&
103 xdr_gss_buffer_desc(xdrs, &p->gr_token));
107 put_uint32(struct mbuf **mp, uint32_t v)
109 struct mbuf *m = *mp;
112 M_PREPEND(m, sizeof(uint32_t), M_WAITOK);
114 bcopy(&n, mtod(m, uint32_t *), sizeof(uint32_t));
119 xdr_rpc_gss_wrap_data(struct mbuf **argsp,
120 gss_ctx_id_t ctx, gss_qop_t qop,
121 rpc_gss_service_t svc, u_int seq)
123 struct mbuf *args, *mic;
124 OM_uint32 maj_stat, min_stat;
132 * Prepend the sequence number before calling gss_get_mic or gss_wrap.
134 put_uint32(&args, seq);
135 len = m_length(args, NULL);
137 if (svc == rpc_gss_svc_integrity) {
138 /* Checksum rpc_gss_data_t. */
139 maj_stat = gss_get_mic_mbuf(&min_stat, ctx, qop, args, &mic);
140 if (maj_stat != GSS_S_COMPLETE) {
141 rpc_gss_log_debug("gss_get_mic failed");
147 * Marshal databody_integ. Note that since args is
148 * already RPC encoded, there will be no padding.
150 put_uint32(&args, len);
153 * Marshal checksum. This is likely to need padding.
155 len = m_length(mic, NULL);
156 put_uint32(&mic, len);
157 if (len != RNDUP(len)) {
158 m_append(mic, RNDUP(len) - len, zpad);
162 * Concatenate databody_integ with checksum.
165 } else if (svc == rpc_gss_svc_privacy) {
166 /* Encrypt rpc_gss_data_t. */
167 maj_stat = gss_wrap_mbuf(&min_stat, ctx, TRUE, qop,
169 if (maj_stat != GSS_S_COMPLETE) {
170 rpc_gss_log_status("gss_wrap", NULL,
176 * Marshal databody_priv and deal with RPC padding.
178 len = m_length(args, NULL);
179 put_uint32(&args, len);
180 if (len != RNDUP(len)) {
181 m_append(args, RNDUP(len) - len, zpad);
189 get_uint32(struct mbuf **mp)
191 struct mbuf *m = *mp;
194 if (m->m_len < sizeof(uint32_t)) {
195 m = m_pullup(m, sizeof(uint32_t));
201 bcopy(mtod(m, uint32_t *), &n, sizeof(uint32_t));
202 m_adj(m, sizeof(uint32_t));
208 m_trim(struct mbuf *m, int len)
215 n = m_getptr(m, len, &off);
226 xdr_rpc_gss_unwrap_data(struct mbuf **resultsp,
227 gss_ctx_id_t ctx, gss_qop_t qop,
228 rpc_gss_service_t svc, u_int seq)
230 struct mbuf *results, *message, *mic;
232 OM_uint32 maj_stat, min_stat;
233 u_int seq_num, conf_state, qop_state;
239 if (svc == rpc_gss_svc_integrity) {
241 * Extract the seq+message part. Remember that there
242 * may be extra RPC padding in the checksum. The
243 * message part is RPC encoded already so no
246 len = get_uint32(&results);
248 results = m_split(results, len, M_WAITOK);
255 * Extract the MIC and make it contiguous.
257 cklen = get_uint32(&results);
262 KASSERT(cklen <= MHLEN, ("unexpected large GSS-API checksum"));
264 if (cklen > mic->m_len) {
265 mic = m_pullup(mic, cklen);
271 if (cklen != RNDUP(cklen))
274 /* Verify checksum and QOP. */
275 maj_stat = gss_verify_mic_mbuf(&min_stat, ctx,
276 message, mic, &qop_state);
279 if (maj_stat != GSS_S_COMPLETE || qop_state != qop) {
281 rpc_gss_log_status("gss_verify_mic", NULL,
285 } else if (svc == rpc_gss_svc_privacy) {
286 /* Decode databody_priv. */
287 len = get_uint32(&results);
291 /* Decrypt databody. */
293 if (len != RNDUP(len))
294 m_trim(message, len);
295 maj_stat = gss_unwrap_mbuf(&min_stat, ctx, &message,
296 &conf_state, &qop_state);
298 /* Verify encryption and QOP. */
299 if (maj_stat != GSS_S_COMPLETE) {
300 rpc_gss_log_status("gss_unwrap", NULL,
304 if (qop_state != qop || conf_state != TRUE) {
310 /* Decode rpc_gss_data_t (sequence number + arguments). */
311 seq_num = get_uint32(&message);
315 /* Verify sequence number. */
316 if (seq_num != seq) {
317 rpc_gss_log_debug("wrong sequence number in databody");
327 #include <machine/stdarg.h>
330 rpc_gss_log_debug(const char *fmt, ...)
335 printf("rpcsec_gss: ");
342 rpc_gss_log_status(const char *m, gss_OID mech, OM_uint32 maj_stat, OM_uint32 min_stat)
348 printf("rpcsec_gss: %s: ", m);
350 gss_display_status(&min, maj_stat, GSS_C_GSS_CODE, GSS_C_NULL_OID,
352 printf("%s - ", (char *)msg.value);
353 gss_release_buffer(&min, &msg);
355 gss_display_status(&min, min_stat, GSS_C_MECH_CODE, mech,
357 printf("%s\n", (char *)msg.value);
358 gss_release_buffer(&min, &msg);
364 rpc_gss_log_debug(__unused const char *fmt, ...)
369 rpc_gss_log_status(__unused const char *m, __unused gss_OID mech,
370 __unused OM_uint32 maj_stat, __unused OM_uint32 min_stat)