xref: /freebsd/crypto/openssh/ssh2.h (revision 2be1a816b9ff69588e55be0a84cbe2a31efc0f2f)
1 /* $OpenBSD: ssh2.h,v 1.10 2006/03/25 22:22:43 djm Exp $ */
2 
3 /*
4  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  *
15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25  */
26 
27 /*
28  * draft-ietf-secsh-architecture-05.txt
29  *
30  *   Transport layer protocol:
31  *
32  *     1-19     Transport layer generic (e.g. disconnect, ignore, debug,
33  *              etc)
34  *     20-29    Algorithm negotiation
35  *     30-49    Key exchange method specific (numbers can be reused for
36  *              different authentication methods)
37  *
38  *   User authentication protocol:
39  *
40  *     50-59    User authentication generic
41  *     60-79    User authentication method specific (numbers can be reused
42  *              for different authentication methods)
43  *
44  *   Connection protocol:
45  *
46  *     80-89    Connection protocol generic
47  *     90-127   Channel related messages
48  *
49  *   Reserved for client protocols:
50  *
51  *     128-191  Reserved
52  *
53  *   Local extensions:
54  *
55  *     192-255  Local extensions
56  */
57 
58 /* ranges */
59 
60 #define SSH2_MSG_TRANSPORT_MIN				1
61 #define SSH2_MSG_TRANSPORT_MAX				49
62 #define SSH2_MSG_USERAUTH_MIN				50
63 #define SSH2_MSG_USERAUTH_MAX				79
64 #define SSH2_MSG_USERAUTH_PER_METHOD_MIN		60
65 #define SSH2_MSG_USERAUTH_PER_METHOD_MAX		SSH2_MSG_USERAUTH_MAX
66 #define SSH2_MSG_CONNECTION_MIN				80
67 #define SSH2_MSG_CONNECTION_MAX				127
68 #define SSH2_MSG_RESERVED_MIN				128
69 #define SSH2_MSG_RESERVED_MAX				191
70 #define SSH2_MSG_LOCAL_MIN				192
71 #define SSH2_MSG_LOCAL_MAX				255
72 #define SSH2_MSG_MIN					1
73 #define SSH2_MSG_MAX					255
74 
75 /* transport layer: generic */
76 
77 #define SSH2_MSG_DISCONNECT				1
78 #define SSH2_MSG_IGNORE					2
79 #define SSH2_MSG_UNIMPLEMENTED				3
80 #define SSH2_MSG_DEBUG					4
81 #define SSH2_MSG_SERVICE_REQUEST			5
82 #define SSH2_MSG_SERVICE_ACCEPT				6
83 
84 /* transport layer: alg negotiation */
85 
86 #define SSH2_MSG_KEXINIT				20
87 #define SSH2_MSG_NEWKEYS				21
88 
89 /* transport layer: kex specific messages, can be reused */
90 
91 #define SSH2_MSG_KEXDH_INIT				30
92 #define SSH2_MSG_KEXDH_REPLY				31
93 
94 /* dh-group-exchange */
95 #define SSH2_MSG_KEX_DH_GEX_REQUEST_OLD			30
96 #define SSH2_MSG_KEX_DH_GEX_GROUP			31
97 #define SSH2_MSG_KEX_DH_GEX_INIT			32
98 #define SSH2_MSG_KEX_DH_GEX_REPLY			33
99 #define SSH2_MSG_KEX_DH_GEX_REQUEST			34
100 
101 /* user authentication: generic */
102 
103 #define SSH2_MSG_USERAUTH_REQUEST			50
104 #define SSH2_MSG_USERAUTH_FAILURE			51
105 #define SSH2_MSG_USERAUTH_SUCCESS			52
106 #define SSH2_MSG_USERAUTH_BANNER			53
107 
108 /* user authentication: method specific, can be reused */
109 
110 #define SSH2_MSG_USERAUTH_PK_OK				60
111 #define SSH2_MSG_USERAUTH_PASSWD_CHANGEREQ		60
112 #define SSH2_MSG_USERAUTH_INFO_REQUEST			60
113 #define SSH2_MSG_USERAUTH_INFO_RESPONSE			61
114 
115 /* connection protocol: generic */
116 
117 #define SSH2_MSG_GLOBAL_REQUEST				80
118 #define SSH2_MSG_REQUEST_SUCCESS			81
119 #define SSH2_MSG_REQUEST_FAILURE			82
120 
121 /* channel related messages */
122 
123 #define SSH2_MSG_CHANNEL_OPEN				90
124 #define SSH2_MSG_CHANNEL_OPEN_CONFIRMATION		91
125 #define SSH2_MSG_CHANNEL_OPEN_FAILURE			92
126 #define SSH2_MSG_CHANNEL_WINDOW_ADJUST			93
127 #define SSH2_MSG_CHANNEL_DATA				94
128 #define SSH2_MSG_CHANNEL_EXTENDED_DATA			95
129 #define SSH2_MSG_CHANNEL_EOF				96
130 #define SSH2_MSG_CHANNEL_CLOSE				97
131 #define SSH2_MSG_CHANNEL_REQUEST			98
132 #define SSH2_MSG_CHANNEL_SUCCESS			99
133 #define SSH2_MSG_CHANNEL_FAILURE			100
134 
135 /* disconnect reason code */
136 
137 #define SSH2_DISCONNECT_HOST_NOT_ALLOWED_TO_CONNECT	1
138 #define SSH2_DISCONNECT_PROTOCOL_ERROR			2
139 #define SSH2_DISCONNECT_KEY_EXCHANGE_FAILED		3
140 #define SSH2_DISCONNECT_HOST_AUTHENTICATION_FAILED	4
141 #define SSH2_DISCONNECT_RESERVED			4
142 #define SSH2_DISCONNECT_MAC_ERROR			5
143 #define SSH2_DISCONNECT_COMPRESSION_ERROR		6
144 #define SSH2_DISCONNECT_SERVICE_NOT_AVAILABLE		7
145 #define SSH2_DISCONNECT_PROTOCOL_VERSION_NOT_SUPPORTED	8
146 #define SSH2_DISCONNECT_HOST_KEY_NOT_VERIFIABLE		9
147 #define SSH2_DISCONNECT_CONNECTION_LOST			10
148 #define SSH2_DISCONNECT_BY_APPLICATION			11
149 #define SSH2_DISCONNECT_TOO_MANY_CONNECTIONS		12
150 #define SSH2_DISCONNECT_AUTH_CANCELLED_BY_USER		13
151 #define SSH2_DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLE	14
152 #define SSH2_DISCONNECT_ILLEGAL_USER_NAME		15
153 
154 /* misc */
155 
156 #define SSH2_OPEN_ADMINISTRATIVELY_PROHIBITED		1
157 #define SSH2_OPEN_CONNECT_FAILED			2
158 #define SSH2_OPEN_UNKNOWN_CHANNEL_TYPE			3
159 #define SSH2_OPEN_RESOURCE_SHORTAGE			4
160 
161 #define SSH2_EXTENDED_DATA_STDERR			1
162