crypto/heimdal/lib/gssapi/gssapi_locl.h

   1 /*
   2  * Copyright (c) 1997 - 2003 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. Neither the name of the Institute nor the names of its contributors
  18  *    may be used to endorse or promote products derived from this software
  19  *    without specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31  * SUCH DAMAGE.
  32  */
  33
  34 /* $Id: gssapi_locl.h,v 1.24.2.5 2003/09/18 22:01:52 lha Exp $ */
  35 /* $FreeBSD$ */
  36
  37 #ifndef GSSAPI_LOCL_H
  38 #define GSSAPI_LOCL_H
  39
  40 #ifdef HAVE_CONFIG_H
  41 #include <config.h>
  42 #endif
  43
  44 #include <krb5_locl.h>
  45 #include "gssapi.h"
  46 #include <assert.h>
  47
  48 #include "arcfour.h"
  49
  50 extern krb5_context gssapi_krb5_context;
  51
  52 extern krb5_keytab gssapi_krb5_keytab;
  53
  54 krb5_error_code gssapi_krb5_init (void);
  55
  56 #define GSSAPI_KRB5_INIT() do {                                 \
  57     krb5_error_code kret;                                       \
  58     if((kret = gssapi_krb5_init ()) != 0) {     \
  59         *minor_status = kret;                                   \
  60         return GSS_S_FAILURE;                                   \
  61     }                                                           \
  62 } while (0)
  63
  64 OM_uint32
  65 gssapi_krb5_create_8003_checksum (
  66                       OM_uint32 *minor_status,
  67                       const gss_channel_bindings_t input_chan_bindings,
  68                       OM_uint32 flags,
  69                       const krb5_data *fwd_data,
  70                       Checksum *result);
  71
  72 OM_uint32
  73 gssapi_krb5_verify_8003_checksum (
  74                       OM_uint32 *minor_status,
  75                       const gss_channel_bindings_t input_chan_bindings,
  76                       const Checksum *cksum,
  77                       OM_uint32 *flags,
  78                       krb5_data *fwd_data);
  79
  80 OM_uint32
  81 gssapi_krb5_encapsulate(
  82                         OM_uint32 *minor_status,
  83                         const krb5_data *in_data,
  84                         gss_buffer_t output_token,
  85                         u_char *type);
  86
  87 u_char *
  88 _gssapi_make_mech_header(u_char *p,
  89                          size_t len);
  90
  91 OM_uint32
  92 gssapi_krb5_decapsulate(
  93                         OM_uint32 *minor_status,
  94                         gss_buffer_t input_token_buffer,
  95                         krb5_data *out_data,
  96                         char *type);
  97
  98 void
  99 gssapi_krb5_encap_length (size_t data_len,
 100                           size_t *len,
 101                           size_t *total_len);
 102
 103 u_char *
 104 gssapi_krb5_make_header (u_char *p,
 105                          size_t len,
 106                          u_char *type);
 107
 108 OM_uint32
 109 gssapi_krb5_verify_header(u_char **str,
 110                           size_t total_len,
 111                           char *type);
 112
 113
 114 OM_uint32
 115 _gssapi_verify_mech_header(u_char **str,
 116                            size_t total_len);
 117
 118 OM_uint32
 119 _gssapi_verify_pad(gss_buffer_t, size_t, size_t *);
 120
 121 OM_uint32
 122 gss_verify_mic_internal(OM_uint32 * minor_status,
 123                         const gss_ctx_id_t context_handle,
 124                         const gss_buffer_t message_buffer,
 125                         const gss_buffer_t token_buffer,
 126                         gss_qop_t * qop_state,
 127                         char * type);
 128
 129 OM_uint32
 130 gss_krb5_get_remotekey(const gss_ctx_id_t context_handle,
 131                        krb5_keyblock **key);
 132
 133 OM_uint32
 134 gss_krb5_get_localkey(const gss_ctx_id_t context_handle,
 135                       krb5_keyblock **key);
 136
 137 krb5_error_code
 138 gss_address_to_krb5addr(OM_uint32 gss_addr_type,
 139                         gss_buffer_desc *gss_addr,
 140                         int16_t port,
 141                         krb5_address *address);
 142
 143 /* sec_context flags */
 144
 145 #define SC_LOCAL_ADDRESS  0x01
 146 #define SC_REMOTE_ADDRESS 0x02
 147 #define SC_KEYBLOCK       0x04
 148 #define SC_LOCAL_SUBKEY   0x08
 149 #define SC_REMOTE_SUBKEY  0x10
 150
 151 int
 152 gss_oid_equal(const gss_OID a, const gss_OID b);
 153
 154 void
 155 gssapi_krb5_set_error_string (void);
 156
 157 char *
 158 gssapi_krb5_get_error_string (void);
 159
 160 OM_uint32
 161 _gss_DES3_get_mic_compat(OM_uint32 *minor_status, gss_ctx_id_t ctx);
 162
 163 OM_uint32
 164 gssapi_lifetime_left(OM_uint32 *, OM_uint32, OM_uint32 *);
 165
 166 /* 8003 */
 167
 168 krb5_error_code
 169 gssapi_encode_om_uint32(OM_uint32, u_char *);
 170
 171 krb5_error_code
 172 gssapi_encode_be_om_uint32(OM_uint32, u_char *);
 173
 174 krb5_error_code
 175 gssapi_decode_om_uint32(u_char *, OM_uint32 *);
 176
 177 krb5_error_code
 178 gssapi_decode_be_om_uint32(u_char *, OM_uint32 *);
 179
 180 #endif