1 /*
2 * Copyright (c) 1997 - 2003 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34 #include "gsskrb5_locl.h"
35
36 void
_gssapi_encap_length(size_t data_len,size_t * len,size_t * total_len,const gss_OID mech)37 _gssapi_encap_length (size_t data_len,
38 size_t *len,
39 size_t *total_len,
40 const gss_OID mech)
41 {
42 size_t len_len;
43
44 *len = 1 + 1 + mech->length + data_len;
45
46 len_len = der_length_len(*len);
47
48 *total_len = 1 + len_len + *len;
49 }
50
51 void
_gsskrb5_encap_length(size_t data_len,size_t * len,size_t * total_len,const gss_OID mech)52 _gsskrb5_encap_length (size_t data_len,
53 size_t *len,
54 size_t *total_len,
55 const gss_OID mech)
56 {
57 _gssapi_encap_length(data_len + 2, len, total_len, mech);
58 }
59
60 void *
_gsskrb5_make_header(void * ptr,size_t len,const void * type,const gss_OID mech)61 _gsskrb5_make_header (void *ptr,
62 size_t len,
63 const void *type,
64 const gss_OID mech)
65 {
66 u_char *p = ptr;
67 p = _gssapi_make_mech_header(p, len, mech);
68 memcpy (p, type, 2);
69 p += 2;
70 return p;
71 }
72
73 void *
_gssapi_make_mech_header(void * ptr,size_t len,const gss_OID mech)74 _gssapi_make_mech_header(void *ptr,
75 size_t len,
76 const gss_OID mech)
77 {
78 u_char *p = ptr;
79 int e;
80 size_t len_len, foo;
81
82 *p++ = 0x60;
83 len_len = der_length_len(len);
84 e = der_put_length (p + len_len - 1, len_len, len, &foo);
85 if(e || foo != len_len)
86 abort ();
87 p += len_len;
88 *p++ = 0x06;
89 *p++ = mech->length;
90 memcpy (p, mech->elements, mech->length);
91 p += mech->length;
92 return p;
93 }
94
95 /*
96 * Give it a krb5_data and it will encapsulate with extra GSS-API wrappings.
97 */
98
99 OM_uint32
_gssapi_encapsulate(OM_uint32 * minor_status,const krb5_data * in_data,gss_buffer_t output_token,const gss_OID mech)100 _gssapi_encapsulate(
101 OM_uint32 *minor_status,
102 const krb5_data *in_data,
103 gss_buffer_t output_token,
104 const gss_OID mech
105 )
106 {
107 size_t len, outer_len;
108 void *p;
109
110 _gssapi_encap_length (in_data->length, &len, &outer_len, mech);
111
112 output_token->length = outer_len;
113 output_token->value = malloc (outer_len);
114 if (output_token->value == NULL) {
115 *minor_status = ENOMEM;
116 return GSS_S_FAILURE;
117 }
118
119 p = _gssapi_make_mech_header (output_token->value, len, mech);
120 memcpy (p, in_data->data, in_data->length);
121 return GSS_S_COMPLETE;
122 }
123
124 /*
125 * Give it a krb5_data and it will encapsulate with extra GSS-API krb5
126 * wrappings.
127 */
128
129 OM_uint32
_gsskrb5_encapsulate(OM_uint32 * minor_status,const krb5_data * in_data,gss_buffer_t output_token,const void * type,const gss_OID mech)130 _gsskrb5_encapsulate(
131 OM_uint32 *minor_status,
132 const krb5_data *in_data,
133 gss_buffer_t output_token,
134 const void *type,
135 const gss_OID mech
136 )
137 {
138 size_t len, outer_len;
139 u_char *p;
140
141 _gsskrb5_encap_length (in_data->length, &len, &outer_len, mech);
142
143 output_token->length = outer_len;
144 output_token->value = malloc (outer_len);
145 if (output_token->value == NULL) {
146 *minor_status = ENOMEM;
147 return GSS_S_FAILURE;
148 }
149
150 p = _gsskrb5_make_header (output_token->value, len, type, mech);
151 memcpy (p, in_data->data, in_data->length);
152 return GSS_S_COMPLETE;
153 }
154