crypto/openssh/ssh_api.c

34 int	_ssh_exchange_banner(struct ssh *);
35 int	_ssh_send_banner(struct ssh *, char **);
36 int	_ssh_read_banner(struct ssh *, char **);
37 int	_ssh_order_hostkeyalgs(struct ssh *);
38 int	_ssh_verify_host_key(struct sshkey *, struct ssh *);
39 struct sshkey *_ssh_host_public_key(int, int, struct ssh *);
40 struct sshkey *_ssh_host_private_key(int, int, struct ssh *);
73 ssh_init(struct ssh **sshp, int is_server, struct kex_params *kex_params)
76 	struct ssh *ssh;
88 	if ((ssh = ssh_packet_set_connection(NULL, -1, -1)) == NULL)
91 		ssh_packet_set_server(ssh);
95 	if ((r = kex_new(ssh, proposal, &ssh->kex)) != 0) {
96 		ssh_free(ssh);
99 	ssh->kex->server = is_server;
102 		ssh->kex->kex[KEX_DH_GRP1_SHA1] = kexdh_server;
103 		ssh->kex->kex[KEX_DH_GRP14_SHA1] = kexdh_server;
104 		ssh->kex->kex[KEX_DH_GRP14_SHA256] = kexdh_server;
105 		ssh->kex->kex[KEX_DH_GRP16_SHA512] = kexdh_server;
106 		ssh->kex->kex[KEX_DH_GRP18_SHA512] = kexdh_server;
107 		ssh->kex->kex[KEX_DH_GEX_SHA1] = kexgex_server;
108 		ssh->kex->kex[KEX_DH_GEX_SHA256] = kexgex_server;
110 		ssh->kex->kex[KEX_ECDH_SHA2] = kexecdh_server;
113 		ssh->kex->kex[KEX_C25519_SHA256] = kexc25519_server;
114 		ssh->kex->load_host_public_key=&_ssh_host_public_key;
115 		ssh->kex->load_host_private_key=&_ssh_host_private_key;
116 		ssh->kex->sign=&_ssh_host_key_sign;
119 		ssh->kex->kex[KEX_DH_GRP1_SHA1] = kexdh_client;
120 		ssh->kex->kex[KEX_DH_GRP14_SHA1] = kexdh_client;
121 		ssh->kex->kex[KEX_DH_GRP14_SHA256] = kexdh_client;
122 		ssh->kex->kex[KEX_DH_GRP16_SHA512] = kexdh_client;
123 		ssh->kex->kex[KEX_DH_GRP18_SHA512] = kexdh_client;
124 		ssh->kex->kex[KEX_DH_GEX_SHA1] = kexgex_client;
125 		ssh->kex->kex[KEX_DH_GEX_SHA256] = kexgex_client;
127 		ssh->kex->kex[KEX_ECDH_SHA2] = kexecdh_client;
130 		ssh->kex->kex[KEX_C25519_SHA256] = kexc25519_client;
131 		ssh->kex->verify_host_key =&_ssh_verify_host_key;
133 	*sshp = ssh;
138 ssh_free(struct ssh *ssh)
142 	ssh_packet_close(ssh);
147 	while ((k = TAILQ_FIRST(&ssh->public_keys)) != NULL) {
148 		TAILQ_REMOVE(&ssh->public_keys, k, next);
149 		if (ssh->kex && ssh->kex->server)
153 	while ((k = TAILQ_FIRST(&ssh->private_keys)) != NULL) {
154 		TAILQ_REMOVE(&ssh->private_keys, k, next);
157 	if (ssh->kex)
158 		kex_free(ssh->kex);
159 	free(ssh);
163 ssh_set_app_data(struct ssh *ssh, void *app_data)
165 	ssh->app_data = app_data;
169 ssh_get_app_data(struct ssh *ssh)
171 	return ssh->app_data;
176 ssh_add_hostkey(struct ssh *ssh, struct sshkey *key)
182 	if (ssh->kex->server) {
192 		TAILQ_INSERT_TAIL(&ssh->private_keys, k_prv, next);
196 		TAILQ_INSERT_TAIL(&ssh->public_keys, k, next);
202 		TAILQ_INSERT_TAIL(&ssh->public_keys, k, next);
210 ssh_set_verify_host_key_callback(struct ssh *ssh,
211     int (*cb)(struct sshkey *, struct ssh *))
213 	if (cb == NULL || ssh->kex == NULL)
216 	ssh->kex->verify_host_key = cb;
222 ssh_input_append(struct ssh *ssh, const u_char *data, size_t len)
224 	return sshbuf_put(ssh_packet_get_input(ssh), data, len);
228 ssh_packet_next(struct ssh *ssh, u_char *typep)
239 	if (ssh->kex->client_version_string == NULL ||
240 	    ssh->kex->server_version_string == NULL)
241 		return _ssh_exchange_banner(ssh);
254 		if ((r = ssh_packet_read_poll2(ssh, &type, &seqnr)) != 0)
258 		    ssh->dispatch[type] != NULL) {
259 			if ((r = (*ssh->dispatch[type])(type, seqnr, ssh)) != 0)
269 ssh_packet_payload(struct ssh *ssh, size_t *lenp)
271 	return sshpkt_ptr(ssh, lenp);
275 ssh_packet_put(struct ssh *ssh, int type, const u_char *data, size_t len)
279 	if ((r = sshpkt_start(ssh, type)) != 0 ||
280 	    (r = sshpkt_put(ssh, data, len)) != 0 ||
281 	    (r = sshpkt_send(ssh)) != 0)
287 ssh_output_ptr(struct ssh *ssh, size_t *len)
289 	struct sshbuf *output = ssh_packet_get_output(ssh);
296 ssh_output_consume(struct ssh *ssh, size_t len)
298 	return sshbuf_consume(ssh_packet_get_output(ssh), len);
302 ssh_output_space(struct ssh *ssh, size_t len)
304 	return (0 == sshbuf_check_reserve(ssh_packet_get_output(ssh), len));
308 ssh_input_space(struct ssh *ssh, size_t len)
310 	return (0 == sshbuf_check_reserve(ssh_packet_get_input(ssh), len));
315 _ssh_read_banner(struct ssh *ssh, char **bannerp)
325 	input = ssh_packet_get_input(ssh);
347 		if (ssh->kex->server || ++n > 65536) {
348 			if ((r = sshbuf_put(ssh_packet_get_output(ssh),
367 	ssh->compat = compat_datafellows(remote_version);
384 _ssh_send_banner(struct ssh *ssh, char **bannerp)
390 	if ((r = sshbuf_put(ssh_packet_get_output(ssh), buf, strlen(buf))) != 0)
400 _ssh_exchange_banner(struct ssh *ssh)
402 	struct kex *kex = ssh->kex;
413 			r = _ssh_send_banner(ssh, &kex->server_version_string);
417 			r = _ssh_read_banner(ssh, &kex->client_version_string);
420 			r = _ssh_read_banner(ssh, &kex->server_version_string);
424 			r = _ssh_send_banner(ssh, &kex->client_version_string);
431 		if ((r = _ssh_order_hostkeyalgs(ssh)) != 0 ||
432 		    (r = kex_send_kexinit(ssh)) != 0)
439 _ssh_host_public_key(int type, int nid, struct ssh *ssh)
444 	TAILQ_FOREACH(k, &ssh->public_keys, next) {
454 _ssh_host_private_key(int type, int nid, struct ssh *ssh)
459 	TAILQ_FOREACH(k, &ssh->private_keys, next) {
469 _ssh_verify_host_key(struct sshkey *hostkey, struct ssh *ssh)
474 	TAILQ_FOREACH(k, &ssh->public_keys, next) {
484 _ssh_order_hostkeyalgs(struct ssh *ssh)
492 	/* XXX we de-serialize ssh->kex->my, modify it, and change it */
493 	if ((r = kex_buf2prop(ssh->kex->my, NULL, &proposal)) != 0)
509 		TAILQ_FOREACH(k, &ssh->public_keys, next) {
521 		debug2("%s: orig/%d    %s", __func__, ssh->kex->server, orig);
522 		debug2("%s: replace/%d %s", __func__, ssh->kex->server, replace);
526 		r = kex_prop2buf(ssh->kex->my, proposal);