blob: 8f6ab0ea09843de02743b867e10be15559c9ac45 [file] [log] [blame]
Damien Miller040f3832000-04-03 14:50:43 +10001/*
Damien Miller62116dc2001-12-24 01:41:47 +11002 * Copyright (c) 2001 Damien Miller. All rights reserved.
Damien Miller040f3832000-04-03 14:50:43 +10003 *
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions
6 * are met:
7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the
11 * documentation and/or other materials provided with the distribution.
Damien Miller040f3832000-04-03 14:50:43 +100012 *
13 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
14 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
15 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
16 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
17 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
18 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
19 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
20 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
21 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
22 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23 */
24
25#include "includes.h"
26
Damien Miller5f056372000-04-16 12:31:48 +100027#include <openssl/rand.h>
Damien Miller767c7fc2001-02-27 09:20:57 +110028#include <openssl/crypto.h>
Damien Miller040f3832000-04-03 14:50:43 +100029
Ben Lindstrom226cfa02001-01-22 05:34:40 +000030#include "ssh.h"
Damien Millera1072a82001-02-18 15:28:11 +110031#include "misc.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000032#include "xmalloc.h"
33#include "atomicio.h"
Ben Lindstromcb577332001-01-22 21:06:19 +000034#include "pathnames.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000035#include "log.h"
36
Damien Miller14c12cb2000-06-07 22:20:23 +100037/*
Damien Miller62116dc2001-12-24 01:41:47 +110038 * Portable OpenSSH PRNG seeding:
39 * If OpenSSL has not "internally seeded" itself (e.g. pulled data from
40 * /dev/random), then we execute a "ssh-rand-helper" program which
41 * collects entropy and writes it to stdout. The child program must
42 * write at least RANDOM_SEED_SIZE bytes. The child is run with stderr
43 * attached, so error/debugging output should be visible.
44 *
45 * XXX: we should tell the child how many bytes we need.
Damien Miller14c12cb2000-06-07 22:20:23 +100046 */
Damien Miller62116dc2001-12-24 01:41:47 +110047
Kevin Steves58193072002-03-11 00:16:34 +000048RCSID("$Id: entropy.c,v 1.41 2002/03/11 00:16:35 stevesk Exp $");
Damien Miller6c21c512002-01-22 21:57:53 +110049
50#ifndef OPENSSL_PRNG_ONLY
Damien Miller62116dc2001-12-24 01:41:47 +110051#define RANDOM_SEED_SIZE 48
Damien Miller62116dc2001-12-24 01:41:47 +110052static uid_t original_uid, original_euid;
Damien Miller6c21c512002-01-22 21:57:53 +110053#endif
Damien Miller62116dc2001-12-24 01:41:47 +110054
Damien Miller14c12cb2000-06-07 22:20:23 +100055void
56seed_rng(void)
57{
Damien Miller6c21c512002-01-22 21:57:53 +110058#ifndef OPENSSL_PRNG_ONLY
Damien Miller62116dc2001-12-24 01:41:47 +110059 int devnull;
60 int p[2];
61 pid_t pid;
62 int ret;
63 unsigned char buf[RANDOM_SEED_SIZE];
Kevin Stevesef4eea92001-02-05 12:42:17 +000064
Damien Miller62116dc2001-12-24 01:41:47 +110065 if (RAND_status() == 1) {
66 debug3("RNG is ready, skipping seeding");
67 return;
Damien Miller08006472000-06-26 13:55:31 +100068 }
Kevin Stevesef4eea92001-02-05 12:42:17 +000069
Kevin Steves58193072002-03-11 00:16:34 +000070 debug3("Seeding PRNG from %s", SSH_RAND_HELPER);
Damien Miller62116dc2001-12-24 01:41:47 +110071
72 if ((devnull = open("/dev/null", O_RDWR)) == -1)
73 fatal("Couldn't open /dev/null: %s", strerror(errno));
74 if (pipe(p) == -1)
75 fatal("pipe: %s", strerror(errno));
76
77 if ((pid = fork()) == -1)
78 fatal("Couldn't fork: %s", strerror(errno));
79 if (pid == 0) {
80 dup2(devnull, STDIN_FILENO);
81 dup2(p[1], STDOUT_FILENO);
82 /* Keep stderr open for errors */
83 close(p[0]);
84 close(p[1]);
85 close(devnull);
86
87 if (original_uid != original_euid &&
88 setuid(original_uid) == -1) {
89 fprintf(stderr, "(rand child) setuid: %s\n",
90 strerror(errno));
91 _exit(1);
92 }
93
94 execl(SSH_RAND_HELPER, "ssh-rand-helper", NULL);
95 fprintf(stderr, "(rand child) Couldn't exec '%s': %s\n",
96 SSH_RAND_HELPER, strerror(errno));
97 _exit(1);
98 }
99
100 close(devnull);
101 close(p[1]);
102
103 memset(buf, '\0', sizeof(buf));
104 ret = atomicio(read, p[0], buf, sizeof(buf));
105 if (ret == -1)
106 fatal("Couldn't read from ssh-rand-helper: %s",
107 strerror(errno));
108 if (ret != sizeof(buf))
109 fatal("ssh-rand-helper child produced insufficient data");
110
111 close(p[0]);
112
113 if (waitpid(pid, &ret, 0) == -1)
114 fatal("Couldn't wait for ssh-rand-helper completion: %s",
115 strerror(errno));
116
117 /* We don't mind if the child exits upon a SIGPIPE */
118 if (!WIFEXITED(ret) &&
119 (!WIFSIGNALED(ret) || WTERMSIG(ret) != SIGPIPE))
120 fatal("ssh-rand-helper terminated abnormally");
121 if (WEXITSTATUS(ret) != 0)
122 fatal("ssh-rand-helper exit with exit status %d", ret);
123
124 RAND_add(buf, sizeof(buf), sizeof(buf));
Damien Miller14c12cb2000-06-07 22:20:23 +1000125 memset(buf, '\0', sizeof(buf));
Damien Miller6c21c512002-01-22 21:57:53 +1100126
127#endif /* OPENSSL_PRNG_ONLY */
128 if (RAND_status() != 1)
129 fatal("PRNG is not seeded");
Damien Miller14c12cb2000-06-07 22:20:23 +1000130}
131
Damien Miller60bc5172001-03-19 09:38:15 +1100132void
133init_rng(void)
Damien Miller767c7fc2001-02-27 09:20:57 +1100134{
Damien Millerbb7c9762001-02-26 20:49:58 +1100135 /*
Damien Miller62116dc2001-12-24 01:41:47 +1100136 * OpenSSL version numbers: MNNFFPPS: major minor fix patch status
137 * We match major, minor, fix and status (not patch)
Damien Millerbb7c9762001-02-26 20:49:58 +1100138 */
Damien Miller62116dc2001-12-24 01:41:47 +1100139 if ((SSLeay() ^ OPENSSL_VERSION_NUMBER) & ~0xff0L)
140 fatal("OpenSSL version mismatch. Built against %lx, you "
141 "have %lx", OPENSSL_VERSION_NUMBER, SSLeay());
Kevin Stevesef4eea92001-02-05 12:42:17 +0000142
Damien Miller6c21c512002-01-22 21:57:53 +1100143#ifndef OPENSSL_PRNG_ONLY
Damien Miller62116dc2001-12-24 01:41:47 +1100144 if ((original_uid = getuid()) == -1)
145 fatal("getuid: %s", strerror(errno));
146 if ((original_euid = geteuid()) == -1)
147 fatal("geteuid: %s", strerror(errno));
Damien Miller6c21c512002-01-22 21:57:53 +1100148#endif
Damien Millerf9b625c2000-07-09 22:42:32 +1000149}
Damien Miller6c21c512002-01-22 21:57:53 +1100150