archive/libwebsockets
1
0
Fork 0
mirror of https://libwebsockets.org/repo/libwebsockets synced 2024-11-22 09:02:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
main
libwebsockets/plugins/ssh-base/include/lws-ssh.h

617 lines
16 KiB
C
Raw Permalink Blame History

/*
* libwebsockets - small server side websockets and web server implementation
*
* Copyright (C) 2010 - 2019 Andy Green <andy@warmcat.com>
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to
* deal in the Software without restriction, including without limitation the
* rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
* sell copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in
* all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
* IN THE SOFTWARE.
*/
#if !defined(__LWS_SSH_H__)
#define __LWS_SSH_H__
#if defined(LWS_HAVE_SYS_TYPES_H)
#include <sys/types.h>
#endif
#if defined(LWS_WITH_MBEDTLS)
#include "mbedtls/sha1.h"
#include "mbedtls/sha256.h"
#include "mbedtls/sha512.h"
#include "mbedtls/rsa.h"
#endif
#include "lws-plugin-ssh.h"
#define LWS_SIZE_EC25519 32
#define LWS_SIZE_EC25519_PUBKEY 32
#define LWS_SIZE_EC25519_PRIKEY 64
#define LWS_SIZE_SHA256 32
#define LWS_SIZE_SHA512 64
#define LWS_SIZE_AES256_KEY 32
#define LWS_SIZE_AES256_IV 12
#define LWS_SIZE_AES256_MAC 16
#define LWS_SIZE_AES256_BLOCK 16
#define LWS_SIZE_CHACHA256_KEY (2 * 32)
#define POLY1305_TAGLEN 16
#define POLY1305_KEYLEN 32
#define crypto_hash_sha512_BYTES 64U
#define PEEK_U64(p) \
(((uint64_t)(((const uint8_t *)(p))[0]) << 56) | \
((uint64_t)(((const uint8_t *)(p))[1]) << 48) | \
((uint64_t)(((const uint8_t *)(p))[2]) << 40) | \
((uint64_t)(((const uint8_t *)(p))[3]) << 32) | \
((uint64_t)(((const uint8_t *)(p))[4]) << 24) | \
((uint64_t)(((const uint8_t *)(p))[5]) << 16) | \
((uint64_t)(((const uint8_t *)(p))[6]) << 8) | \
(uint64_t)(((const uint8_t *)(p))[7]))
#define PEEK_U32(p) \
(((uint32_t)(((const uint8_t *)(p))[0]) << 24) | \
((uint32_t)(((const uint8_t *)(p))[1]) << 16) | \
((uint32_t)(((const uint8_t *)(p))[2]) << 8) | \
(uint32_t)(((const uint8_t *)(p))[3]))
#define PEEK_U16(p) \
(((uint16_t)(((const uint8_t *)(p))[0]) << 8) | \
(uint16_t)(((const uint8_t *)(p))[1]))
#define POKE_U64(p, v) \
do { \
const uint64_t __v = (v); \
((uint8_t *)(p))[0] = (uint8_t)((__v >> 56) & 0xff); \
((uint8_t *)(p))[1] = (uint8_t)((__v >> 48) & 0xff); \
((uint8_t *)(p))[2] = (uint8_t)((__v >> 40) & 0xff); \
((uint8_t *)(p))[3] = (uint8_t)((__v >> 32) & 0xff); \
((uint8_t *)(p))[4] = (uint8_t)((__v >> 24) & 0xff); \
((uint8_t *)(p))[5] = (uint8_t)((__v >> 16) & 0xff); \
((uint8_t *)(p))[6] = (uint8_t)((__v >> 8) & 0xff); \
((uint8_t *)(p))[7] = (uint8_t)(__v & 0xff); \
} while (0)
#define POKE_U32(p, v) \
do { \
const uint32_t __v = (v); \
((uint8_t *)(p))[0] = (uint8_t)((__v >> 24) & 0xff); \
((uint8_t *)(p))[1] = (uint8_t)((__v >> 16) & 0xff); \
((uint8_t *)(p))[2] = (uint8_t)((__v >> 8) & 0xff); \
((uint8_t *)(p))[3] = (uint8_t)(__v & 0xff); \
} while (0)
#define POKE_U16(p, v) \
do { \
const uint16_t __v = (v); \
((uint8_t *)(p))[0] = (__v >> 8) & 0xff; \
((uint8_t *)(p))[1] = __v & 0xff; \
} while (0)
enum {
SSH_MSG_DISCONNECT = 1,
SSH_MSG_IGNORE = 2,
SSH_MSG_UNIMPLEMENTED = 3,
SSH_MSG_DEBUG = 4,
SSH_MSG_SERVICE_REQUEST = 5,
SSH_MSG_SERVICE_ACCEPT = 6,
SSH_MSG_KEXINIT = 20,
SSH_MSG_NEWKEYS = 21,
/* 30 .. 49: KEX messages specific to KEX protocol */
SSH_MSG_KEX_ECDH_INIT = 30,
SSH_MSG_KEX_ECDH_REPLY = 31,
/* 50... userauth */
SSH_MSG_USERAUTH_REQUEST = 50,
SSH_MSG_USERAUTH_FAILURE = 51,
SSH_MSG_USERAUTH_SUCCESS = 52,
SSH_MSG_USERAUTH_BANNER = 53,
/* 60... publickey */
SSH_MSG_USERAUTH_PK_OK = 60,
/* 80... connection */
SSH_MSG_GLOBAL_REQUEST = 80,
SSH_MSG_REQUEST_SUCCESS = 81,
SSH_MSG_REQUEST_FAILURE = 82,
SSH_MSG_CHANNEL_OPEN = 90,
SSH_MSG_CHANNEL_OPEN_CONFIRMATION = 91,
SSH_MSG_CHANNEL_OPEN_FAILURE = 92,
SSH_MSG_CHANNEL_WINDOW_ADJUST = 93,
SSH_MSG_CHANNEL_DATA = 94,
SSH_MSG_CHANNEL_EXTENDED_DATA = 95,
SSH_MSG_CHANNEL_EOF = 96,
SSH_MSG_CHANNEL_CLOSE = 97,
SSH_MSG_CHANNEL_REQUEST = 98,
SSH_MSG_CHANNEL_SUCCESS = 99,
SSH_MSG_CHANNEL_FAILURE = 100,
SSH_EXTENDED_DATA_STDERR = 1,
SSH_CH_TYPE_SESSION = 1,
SSH_CH_TYPE_SCP = 2,
SSH_CH_TYPE_SFTP = 3,
SSH_DISCONNECT_HOST_NOT_ALLOWED_TO_CONNECT = 1,
SSH_DISCONNECT_PROTOCOL_ERROR = 2,
SSH_DISCONNECT_KEY_EXCHANGE_FAILED = 3,
SSH_DISCONNECT_RESERVED = 4,
SSH_DISCONNECT_MAC_ERROR = 5,
SSH_DISCONNECT_COMPRESSION_ERROR = 6,
SSH_DISCONNECT_SERVICE_NOT_AVAILABLE = 7,
SSH_DISCONNECT_PROTOCOL_VERSION_NOT_SUPPORTED = 8,
SSH_DISCONNECT_HOST_KEY_NOT_VERIFIABLE = 9,
SSH_DISCONNECT_CONNECTION_LOST = 10,
SSH_DISCONNECT_BY_APPLICATION = 11,
SSH_DISCONNECT_TOO_MANY_CONNECTIONS = 12,
SSH_DISCONNECT_AUTH_CANCELLED_BY_USER = 13,
SSH_DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLE = 14,
SSH_DISCONNECT_ILLEGAL_USER_NAME = 15,
SSH_OPEN_ADMINISTRATIVELY_PROHIBITED = 1,
SSH_OPEN_CONNECT_FAILED = 2,
SSH_OPEN_UNKNOWN_CHANNEL_TYPE = 3,
SSH_OPEN_RESOURCE_SHORTAGE = 4,
KEX_STATE_EXPECTING_CLIENT_OFFER = 0,
KEX_STATE_REPLIED_TO_OFFER,
KEX_STATE_CRYPTO_INITIALIZED,
SSH_KEYIDX_IV = 0,
SSH_KEYIDX_ENC,
SSH_KEYIDX_INTEG,
/* things we may write on the connection */
SSH_WT_NONE = 0,
SSH_WT_VERSION,
SSH_WT_OFFER,
SSH_WT_OFFER_REPLY,
SSH_WT_SEND_NEWKEYS,
SSH_WT_UA_ACCEPT,
SSH_WT_UA_FAILURE,
SSH_WT_UA_BANNER,
SSH_WT_UA_PK_OK,
SSH_WT_UA_SUCCESS,
SSH_WT_CH_OPEN_CONF,
SSH_WT_CH_FAILURE,
SSH_WT_CHRQ_SUCC,
SSH_WT_CHRQ_FAILURE,
SSH_WT_SCP_ACK_OKAY,
SSH_WT_SCP_ACK_ERROR,
SSH_WT_CH_CLOSE,
SSH_WT_CH_EOF,
SSH_WT_WINDOW_ADJUST,
SSH_WT_EXIT_STATUS,
/* RX parser states */
SSH_INITIALIZE_TRANSIENT = 0,
SSHS_IDSTRING,
SSHS_IDSTRING_CR,
SSHS_MSG_LEN,
SSHS_MSG_PADDING,
SSHS_MSG_ID,
SSH_KEX_STATE_COOKIE,
SSH_KEX_NL_KEX_ALGS_LEN,
SSH_KEX_NL_KEX_ALGS,
SSH_KEX_NL_SHK_ALGS_LEN,
SSH_KEX_NL_SHK_ALGS,
SSH_KEX_NL_EACTS_ALGS_LEN,
SSH_KEX_NL_EACTS_ALGS,
SSH_KEX_NL_EASTC_ALGS_LEN,
SSH_KEX_NL_EASTC_ALGS,
SSH_KEX_NL_MACTS_ALGS_LEN,
SSH_KEX_NL_MACTS_ALGS,
SSH_KEX_NL_MASTC_ALGS_LEN,
SSH_KEX_NL_MASTC_ALGS,
SSH_KEX_NL_CACTS_ALGS_LEN,
SSH_KEX_NL_CACTS_ALGS,
SSH_KEX_NL_CASTC_ALGS_LEN,
SSH_KEX_NL_CASTC_ALGS,
SSH_KEX_NL_LCTS_ALGS_LEN,
SSH_KEX_NL_LCTS_ALGS,
SSH_KEX_NL_LSTC_ALGS_LEN,
SSH_KEX_NL_LSTC_ALGS,
SSH_KEX_FIRST_PKT,
SSH_KEX_RESERVED,
SSH_KEX_STATE_ECDH_KEYLEN,
SSH_KEX_STATE_ECDH_Q_C,
SSHS_MSG_EAT_PADDING,
SSH_KEX_STATE_SKIP,
SSHS_GET_STRING_LEN,
SSHS_GET_STRING,
SSHS_GET_STRING_LEN_ALLOC,
SSHS_GET_STRING_ALLOC,
SSHS_DO_SERVICE_REQUEST,
SSHS_DO_UAR_SVC,
SSHS_DO_UAR_PUBLICKEY,
SSHS_NVC_DO_UAR_CHECK_PUBLICKEY,
SSHS_DO_UAR_SIG_PRESENT,
SSHS_NVC_DO_UAR_ALG,
SSHS_NVC_DO_UAR_PUBKEY_BLOB,
SSHS_NVC_DO_UAR_SIG,
SSHS_GET_U32,
SSHS_NVC_CHOPEN_TYPE,
SSHS_NVC_CHOPEN_SENDER_CH,
SSHS_NVC_CHOPEN_WINSIZE,
SSHS_NVC_CHOPEN_PKTSIZE,
SSHS_NVC_CHRQ_RECIP,
SSHS_NVC_CHRQ_TYPE,
SSHS_CHRQ_WANT_REPLY,
SSHS_NVC_CHRQ_TERM,
SSHS_NVC_CHRQ_TW,
SSHS_NVC_CHRQ_TH,
SSHS_NVC_CHRQ_TWP,
SSHS_NVC_CHRQ_THP,
SSHS_NVC_CHRQ_MODES,
SSHS_NVC_CHRQ_ENV_NAME,
SSHS_NVC_CHRQ_ENV_VALUE,
SSHS_NVC_CHRQ_EXEC_CMD,
SSHS_NVC_CHRQ_SUBSYSTEM,
SSHS_NVC_CHRQ_WNDCHANGE_TW,
SSHS_NVC_CHRQ_WNDCHANGE_TH,
SSHS_NVC_CHRQ_WNDCHANGE_TWP,
SSHS_NVC_CHRQ_WNDCHANGE_THP,
SSHS_NVC_CH_EOF,
SSHS_NVC_CH_CLOSE,
SSHS_NVC_CD_RECIP,
SSHS_NVC_CD_DATA,
SSHS_NVC_CD_DATA_ALLOC,
SSHS_NVC_WA_RECIP,
SSHS_NVC_WA_ADD,
SSHS_NVC_DISCONNECT_REASON,
SSHS_NVC_DISCONNECT_DESC,
SSHS_NVC_DISCONNECT_LANG,
SSHS_SCP_COLLECTSTR = 0,
SSHS_SCP_PAYLOADIN = 1,
/* from https://tools.ietf.org/html/draft-ietf-secsh-filexfer-13 */
SECSH_FILEXFER_VERSION = 6,
/* sftp packet types */
SSH_FXP_INIT = 1,
SSH_FXP_VERSION = 2,
SSH_FXP_OPEN = 3,
SSH_FXP_CLOSE = 4,
SSH_FXP_READ = 5,
SSH_FXP_WRITE = 6,
SSH_FXP_LSTAT = 7,
SSH_FXP_FSTAT = 8,
SSH_FXP_SETSTAT = 9,
SSH_FXP_FSETSTAT = 10,
SSH_FXP_OPENDIR = 11,
SSH_FXP_READDIR = 12,
SSH_FXP_REMOVE = 13,
SSH_FXP_MKDIR = 14,
SSH_FXP_RMDIR = 15,
SSH_FXP_REALPATH = 16,
SSH_FXP_STAT = 17,
SSH_FXP_RENAME = 18,
SSH_FXP_READLINK = 19,
SSH_FXP_LINK = 21,
SSH_FXP_BLOCK = 22,
SSH_FXP_UNBLOCK = 23,
SSH_FXP_STATUS = 101,
SSH_FXP_HANDLE = 102,
SSH_FXP_DATA = 103,
SSH_FXP_NAME = 104,
SSH_FXP_ATTRS = 105,
SSH_FXP_EXTENDED = 200,
SSH_FXP_EXTENDED_REPLY = 201,
/* sftp return codes */
SSH_FX_OK = 0,
SSH_FX_EOF = 1,
SSH_FX_NO_SUCH_FILE = 2,
SSH_FX_PERMISSION_DENIED = 3,
SSH_FX_FAILURE = 4,
SSH_FX_BAD_MESSAGE = 5,
SSH_FX_NO_CONNECTION = 6,
SSH_FX_CONNECTION_LOST = 7,
SSH_FX_OP_UNSUPPORTED = 8,
SSH_FX_INVALID_HANDLE = 9,
SSH_FX_NO_SUCH_PATH = 10,
SSH_FX_FILE_ALREADY_EXISTS = 11,
SSH_FX_WRITE_PROTECT = 12,
SSH_FX_NO_MEDIA = 13,
SSH_FX_NO_SPACE_ON_FILESYSTEM = 14,
SSH_FX_QUOTA_EXCEEDED = 15,
SSH_FX_UNKNOWN_PRINCIPAL = 16,
SSH_FX_LOCK_CONFLICT = 17,
SSH_FX_DIR_NOT_EMPTY = 18,
SSH_FX_NOT_A_DIRECTORY = 19,
SSH_FX_INVALID_FILENAME = 20,
SSH_FX_LINK_LOOP = 21,
SSH_FX_CANNOT_DELETE = 22,
SSH_FX_INVALID_PARAMETER = 23,
SSH_FX_FILE_IS_A_DIRECTORY = 24,
SSH_FX_BYTE_RANGE_LOCK_CONFLICT = 25,
SSH_FX_BYTE_RANGE_LOCK_REFUSED = 26,
SSH_FX_DELETE_PENDING = 27,
SSH_FX_FILE_CORRUPT = 28,
SSH_FX_OWNER_INVALID = 29,
SSH_FX_GROUP_INVALID = 30,
SSH_FX_NO_MATCHING_BYTE_RANGE_LOCK = 31,
SSH_PENDING_TIMEOUT_CONNECT_TO_SUCCESSFUL_AUTH =
PENDING_TIMEOUT_USER_REASON_BASE + 0,
SSH_AUTH_STATE_NO_AUTH = 0,
SSH_AUTH_STATE_GAVE_AUTH_IGNORE_REQS = 1,
};
#define LWS_SSH_INITIAL_WINDOW 16384
struct lws_ssh_userauth {
struct lws_genhash_ctx hash_ctx;
char *username;
char *service;
char *alg;
uint8_t *pubkey;
uint32_t pubkey_len;
uint8_t *sig;
uint32_t sig_len;
char sig_present;
};
struct lws_ssh_keys {
/* 3 == SSH_KEYIDX_IV (len=4), SSH_KEYIDX_ENC, SSH_KEYIDX_INTEG */
uint8_t key[3][LWS_SIZE_CHACHA256_KEY];
/* opaque allocation made when cipher activated */
void *cipher;
uint8_t MAC_length;
uint8_t padding_alignment; /* block size */
uint8_t valid:1;
uint8_t full_length:1;
};
struct lws_kex {
uint8_t kex_r[256];
uint8_t Q_C[LWS_SIZE_EC25519]; /* client eph public key aka 'e' */
uint8_t eph_pri_key[LWS_SIZE_EC25519]; /* server eph private key */
uint8_t Q_S[LWS_SIZE_EC25519]; /* server ephemeral public key */
uint8_t kex_cookie[16];
uint8_t *I_C; /* malloc'd copy of client KEXINIT payload */
uint8_t *I_S; /* malloc'd copy of server KEXINIT payload */
uint32_t I_C_payload_len;
uint32_t I_C_alloc_len;
uint32_t I_S_payload_len;
uint32_t kex_r_len;
uint8_t match_bitfield;
uint8_t newkeys; /* which sides newkeys have been applied */
struct lws_ssh_keys keys_next_cts;
struct lws_ssh_keys keys_next_stc;
};
struct lws_subprotocol_scp {
char fp[128];
uint64_t len;
uint32_t attr;
char cmd;
char ips;
};
typedef union {
struct lws_subprotocol_scp scp;
} lws_subprotocol;
struct per_session_data__sshd;
struct lws_ssh_channel {
struct lws_ssh_channel *next;
struct per_session_data__sshd *pss;
lws_subprotocol *sub; /* NULL, or allocated subprotocol state */
void *priv; /* owned by user code */
int type;
uint32_t server_ch;
uint32_t sender_ch;
int32_t window;
int32_t peer_window_est;
uint32_t max_pkt;
uint32_t spawn_pid;
int retcode;
uint8_t scheduled_close:1;
uint8_t sent_close:1;
uint8_t received_close:1;
};
struct per_vhost_data__sshd;
struct per_session_data__sshd {
struct per_session_data__sshd *next;
struct per_vhost_data__sshd *vhd;
struct lws *wsi;
struct lws_kex *kex;
char *disconnect_desc;
uint8_t K[LWS_SIZE_EC25519]; /* shared secret */
uint8_t session_id[LWS_SIZE_SHA256]; /* H from first working KEX */
char name[64];
char last_auth_req_username[32];
char last_auth_req_service[32];
struct lws_ssh_keys active_keys_cts;
struct lws_ssh_keys active_keys_stc;
struct lws_ssh_userauth *ua;
struct lws_ssh_channel *ch_list;
struct lws_ssh_channel *ch_temp;
uint8_t *last_alloc;
union {
struct lws_ssh_pty pty;
char aux[64];
} args;
uint32_t ssh_sequence_ctr_cts;
uint32_t ssh_sequence_ctr_stc;
uint64_t payload_bytes_cts;
uint64_t payload_bytes_stc;
uint32_t disconnect_reason;
char V_C[64]; /* Client version String */
uint8_t packet_assembly[2048];
uint32_t pa_pos;
uint32_t msg_len;
uint32_t pos;
uint32_t len;
uint32_t ctr;
uint32_t npos;
uint32_t reason;
uint32_t channel_doing_spawn;
int next_ch_num;
uint8_t K_S[LWS_SIZE_EC25519]; /* server public key */
uint32_t copy_to_I_C:1;
uint32_t okayed_userauth:1;
uint32_t sent_banner:1;
uint32_t seen_auth_req_before:1;
uint32_t serviced_stderr_last:1;
uint32_t kex_state;
uint32_t chrq_server_port;
uint32_t ch_recip;
uint32_t count_auth_attempts;
char parser_state;
char state_after_string;
char first_coming;
uint8_t rq_want_reply;
uint8_t ssh_auth_state;
uint8_t msg_id;
uint8_t msg_padding;
uint8_t write_task[8];
struct lws_ssh_channel *write_channel[8];
uint8_t wt_head, wt_tail;
};
struct per_vhost_data__sshd {
struct lws_context *context;
struct lws_vhost *vhost;
const struct lws_protocols *protocol;
struct per_session_data__sshd *live_pss_list;
const struct lws_ssh_ops *ops;
};
struct host_keys {
uint8_t *data;
uint32_t len;
};
extern struct host_keys host_keys[];
extern int
crypto_scalarmult_curve25519(unsigned char *q, const unsigned char *n,
const unsigned char *p);
extern int
ed25519_key_parse(uint8_t *p, size_t len, char *type, size_t type_len,
uint8_t *pub, uint8_t *pri);
extern int
kex_ecdh(struct per_session_data__sshd *pss, uint8_t *result, uint32_t *plen);
extern uint32_t
lws_g32(uint8_t **p);
extern uint32_t
lws_p32(uint8_t *p, uint32_t v);
extern int
lws_timingsafe_bcmp(const void *a, const void *b, uint32_t len);
extern const char *lws_V_S;
extern int
lws_chacha_activate(struct lws_ssh_keys *keys);
extern void
lws_chacha_destroy(struct lws_ssh_keys *keys);
extern uint32_t
lws_chachapoly_get_length(struct lws_ssh_keys *keys, uint32_t seq,
const uint8_t *in4);
extern void
poly1305_auth(u_char out[POLY1305_TAGLEN], const u_char *m, size_t inlen,
const u_char key[POLY1305_KEYLEN]);
extern int
lws_chacha_decrypt(struct lws_ssh_keys *keys, uint32_t seq,
const uint8_t *ct, uint32_t len, uint8_t *pt);
extern int
lws_chacha_encrypt(struct lws_ssh_keys *keys, uint32_t seq,
const uint8_t *ct, uint32_t len, uint8_t *pt);
extern void
lws_pad_set_length(struct per_session_data__sshd *pss, void *start, uint8_t **p,
struct lws_ssh_keys *keys);
extern size_t
get_gen_server_key_25519(struct per_session_data__sshd *pss, uint8_t *b, size_t len);
extern int
crypto_sign_ed25519(unsigned char *sm, unsigned long long *smlen,
const unsigned char *m, size_t mlen,
const unsigned char *sk);
extern int
crypto_sign_ed25519_keypair(struct lws_context *context, uint8_t *pk,
uint8_t *sk);
#endif
Reference in New Issue View Git Blame Copy Permalink