blob: ecdd869abf01b10b8f2fb0254d4aafb66420fe12 [file] [log] [blame]
markus@openbsd.org49f47e62018-07-09 21:59:10 +00001/* $OpenBSD: authfd.c,v 1.111 2018/07/09 21:59:10 markus Exp $ */
Damien Millerd4a8b7e1999-10-27 13:42:43 +10002/*
Damien Miller95def091999-11-25 00:26:21 +11003 * Author: Tatu Ylonen <ylo@cs.hut.fi>
Damien Miller95def091999-11-25 00:26:21 +11004 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
5 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11006 * Functions for connecting the local authentication agent.
Damien Miller4af51302000-04-16 11:18:38 +10007 *
Damien Millere4340be2000-09-16 13:29:08 +11008 * As far as I am concerned, the code I have written for this software
9 * can be used freely for any purpose. Any derived versions of this
10 * software must be clearly marked as such, and if the derived work is
11 * incompatible with the protocol description in the RFC file, it must be
12 * called by a name other than "ssh" or "Secure Shell".
Damien Millerad833b32000-08-23 10:46:23 +100013 *
Damien Millere4340be2000-09-16 13:29:08 +110014 * SSH2 implementation,
15 * Copyright (c) 2000 Markus Friedl. All rights reserved.
16 *
17 * Redistribution and use in source and binary forms, with or without
18 * modification, are permitted provided that the following conditions
19 * are met:
20 * 1. Redistributions of source code must retain the above copyright
21 * notice, this list of conditions and the following disclaimer.
22 * 2. Redistributions in binary form must reproduce the above copyright
23 * notice, this list of conditions and the following disclaimer in the
24 * documentation and/or other materials provided with the distribution.
25 *
26 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
27 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
28 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
29 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
30 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
31 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
32 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
33 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
34 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Damien Miller95def091999-11-25 00:26:21 +110036 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100037
38#include "includes.h"
Damien Miller574c41f2006-03-15 11:40:10 +110039
40#include <sys/types.h>
41#include <sys/un.h>
Damien Millere3b60b52006-07-10 21:08:03 +100042#include <sys/socket.h>
Ben Lindstrom226cfa02001-01-22 05:34:40 +000043
Damien Miller57cf6382006-07-10 21:13:46 +100044#include <fcntl.h>
Damien Millere7a1e5c2006-08-05 11:34:19 +100045#include <stdlib.h>
Damien Millerd7834352006-08-05 12:39:39 +100046#include <signal.h>
Damien Millerded319c2006-09-01 15:38:36 +100047#include <stdarg.h>
Damien Millere3476ed2006-07-24 14:13:33 +100048#include <string.h>
Damien Millere6b3b612006-07-24 14:01:23 +100049#include <unistd.h>
djm@openbsd.org141efe42015-01-14 20:05:27 +000050#include <errno.h>
Damien Miller57cf6382006-07-10 21:13:46 +100051
Damien Millerd7834352006-08-05 12:39:39 +100052#include "xmalloc.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100053#include "ssh.h"
djm@openbsd.org141efe42015-01-14 20:05:27 +000054#include "sshbuf.h"
55#include "sshkey.h"
Damien Miller994cf142000-07-21 10:19:44 +100056#include "authfd.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000057#include "cipher.h"
Damien Miller62cee002000-09-23 17:15:56 +110058#include "compat.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000059#include "log.h"
60#include "atomicio.h"
Damien Miller3f941882006-03-31 23:13:02 +110061#include "misc.h"
djm@openbsd.org141efe42015-01-14 20:05:27 +000062#include "ssherr.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100063
djm@openbsd.org141efe42015-01-14 20:05:27 +000064#define MAX_AGENT_IDENTITIES 2048 /* Max keys in agent reply */
65#define MAX_AGENT_REPLY_LEN (256 * 1024) /* Max bytes in agent reply */
Damien Miller37023962000-07-11 17:31:38 +100066
Damien Miller874d77b2000-10-14 16:23:11 +110067/* macro to check for "agent failure" message */
68#define agent_failed(x) \
djm@openbsd.org141efe42015-01-14 20:05:27 +000069 ((x == SSH_AGENT_FAILURE) || \
70 (x == SSH_COM_AGENT2_FAILURE) || \
Ben Lindstromcb72e4f2002-06-21 00:41:51 +000071 (x == SSH2_AGENT_FAILURE))
Damien Miller874d77b2000-10-14 16:23:11 +110072
djm@openbsd.org141efe42015-01-14 20:05:27 +000073/* Convert success/failure response from agent to a err.h status */
74static int
75decode_reply(u_char type)
Damien Miller789e95d2002-09-12 09:52:46 +100076{
djm@openbsd.org141efe42015-01-14 20:05:27 +000077 if (agent_failed(type))
78 return SSH_ERR_AGENT_FAILURE;
79 else if (type == SSH_AGENT_SUCCESS)
Damien Miller789e95d2002-09-12 09:52:46 +100080 return 0;
djm@openbsd.org141efe42015-01-14 20:05:27 +000081 else
82 return SSH_ERR_INVALID_FORMAT;
Damien Miller789e95d2002-09-12 09:52:46 +100083}
84
Damien Millerd4a8b7e1999-10-27 13:42:43 +100085/* Returns the number of the authentication fd, or -1 if there is none. */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100086int
djm@openbsd.org141efe42015-01-14 20:05:27 +000087ssh_get_authentication_socket(int *fdp)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100088{
Damien Miller95def091999-11-25 00:26:21 +110089 const char *authsocket;
djm@openbsd.org141efe42015-01-14 20:05:27 +000090 int sock, oerrno;
Damien Miller95def091999-11-25 00:26:21 +110091 struct sockaddr_un sunaddr;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100092
djm@openbsd.org141efe42015-01-14 20:05:27 +000093 if (fdp != NULL)
94 *fdp = -1;
95
Damien Miller95def091999-11-25 00:26:21 +110096 authsocket = getenv(SSH_AUTHSOCKET_ENV_NAME);
97 if (!authsocket)
djm@openbsd.org141efe42015-01-14 20:05:27 +000098 return SSH_ERR_AGENT_NOT_PRESENT;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100099
Damien Miller1d2c4562014-02-04 11:18:20 +1100100 memset(&sunaddr, 0, sizeof(sunaddr));
Damien Miller95def091999-11-25 00:26:21 +1100101 sunaddr.sun_family = AF_UNIX;
102 strlcpy(sunaddr.sun_path, authsocket, sizeof(sunaddr.sun_path));
Damien Miller10f6f6b1999-11-17 17:29:08 +1100103
djm@openbsd.org141efe42015-01-14 20:05:27 +0000104 if ((sock = socket(AF_UNIX, SOCK_STREAM, 0)) < 0)
105 return SSH_ERR_SYSTEM_ERROR;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000106
Damien Miller95def091999-11-25 00:26:21 +1100107 /* close on exec */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000108 if (fcntl(sock, F_SETFD, FD_CLOEXEC) == -1 ||
109 connect(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) < 0) {
110 oerrno = errno;
Damien Miller95def091999-11-25 00:26:21 +1100111 close(sock);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000112 errno = oerrno;
113 return SSH_ERR_SYSTEM_ERROR;
Damien Miller95def091999-11-25 00:26:21 +1100114 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000115 if (fdp != NULL)
116 *fdp = sock;
117 else
Damien Miller95def091999-11-25 00:26:21 +1100118 close(sock);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000119 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000120}
121
djm@openbsd.org141efe42015-01-14 20:05:27 +0000122/* Communicate with agent: send request and read reply */
Ben Lindstrombba81212001-06-25 05:01:22 +0000123static int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000124ssh_request_reply(int sock, struct sshbuf *request, struct sshbuf *reply)
Damien Miller942da032000-08-18 13:59:06 +1000125{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000126 int r;
127 size_t l, len;
Damien Miller942da032000-08-18 13:59:06 +1000128 char buf[1024];
129
130 /* Get the length of the message, and format it in the buffer. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000131 len = sshbuf_len(request);
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000132 POKE_U32(buf, len);
Damien Miller942da032000-08-18 13:59:06 +1000133
134 /* Send the length and then the packet to the agent. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000135 if (atomicio(vwrite, sock, buf, 4) != 4 ||
markus@openbsd.org49f47e62018-07-09 21:59:10 +0000136 atomicio(vwrite, sock, sshbuf_mutable_ptr(request),
djm@openbsd.org141efe42015-01-14 20:05:27 +0000137 sshbuf_len(request)) != sshbuf_len(request))
138 return SSH_ERR_AGENT_COMMUNICATION;
Damien Miller942da032000-08-18 13:59:06 +1000139 /*
140 * Wait for response from the agent. First read the length of the
141 * response packet.
142 */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000143 if (atomicio(read, sock, buf, 4) != 4)
144 return SSH_ERR_AGENT_COMMUNICATION;
Damien Miller942da032000-08-18 13:59:06 +1000145
146 /* Extract the length, and check it for sanity. */
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000147 len = PEEK_U32(buf);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000148 if (len > MAX_AGENT_REPLY_LEN)
149 return SSH_ERR_INVALID_FORMAT;
Damien Miller942da032000-08-18 13:59:06 +1000150
151 /* Read the rest of the response in to the buffer. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000152 sshbuf_reset(reply);
Damien Miller942da032000-08-18 13:59:06 +1000153 while (len > 0) {
154 l = len;
155 if (l > sizeof(buf))
156 l = sizeof(buf);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000157 if (atomicio(read, sock, buf, l) != l)
158 return SSH_ERR_AGENT_COMMUNICATION;
159 if ((r = sshbuf_put(reply, buf, l)) != 0)
160 return r;
Damien Miller942da032000-08-18 13:59:06 +1000161 len -= l;
162 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000163 return 0;
Damien Miller942da032000-08-18 13:59:06 +1000164}
165
Damien Miller5428f641999-11-25 11:54:57 +1100166/*
167 * Closes the agent socket if it should be closed (depends on how it was
168 * obtained). The argument must have been returned by
169 * ssh_get_authentication_socket().
170 */
Damien Miller4af51302000-04-16 11:18:38 +1000171void
Damien Miller95def091999-11-25 00:26:21 +1100172ssh_close_authentication_socket(int sock)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000173{
Damien Miller95def091999-11-25 00:26:21 +1100174 if (getenv(SSH_AUTHSOCKET_ENV_NAME))
175 close(sock);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000176}
177
Ben Lindstrom2f717042002-06-06 21:52:03 +0000178/* Lock/unlock agent */
179int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000180ssh_lock_agent(int sock, int lock, const char *password)
Ben Lindstrom2f717042002-06-06 21:52:03 +0000181{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000182 int r;
183 u_char type = lock ? SSH_AGENTC_LOCK : SSH_AGENTC_UNLOCK;
184 struct sshbuf *msg;
Ben Lindstrom2f717042002-06-06 21:52:03 +0000185
djm@openbsd.org141efe42015-01-14 20:05:27 +0000186 if ((msg = sshbuf_new()) == NULL)
187 return SSH_ERR_ALLOC_FAIL;
188 if ((r = sshbuf_put_u8(msg, type)) != 0 ||
189 (r = sshbuf_put_cstring(msg, password)) != 0)
190 goto out;
191 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
192 goto out;
193 if ((r = sshbuf_get_u8(msg, &type)) != 0)
194 goto out;
195 r = decode_reply(type);
196 out:
197 sshbuf_free(msg);
198 return r;
199}
Ben Lindstrom2f717042002-06-06 21:52:03 +0000200
djm@openbsd.org141efe42015-01-14 20:05:27 +0000201
202static int
203deserialise_identity2(struct sshbuf *ids, struct sshkey **keyp, char **commentp)
204{
205 int r;
206 char *comment = NULL;
207 const u_char *blob;
208 size_t blen;
209
210 if ((r = sshbuf_get_string_direct(ids, &blob, &blen)) != 0 ||
211 (r = sshbuf_get_cstring(ids, &comment, NULL)) != 0)
212 goto out;
213 if ((r = sshkey_from_blob(blob, blen, keyp)) != 0)
214 goto out;
215 if (commentp != NULL) {
216 *commentp = comment;
217 comment = NULL;
218 }
219 r = 0;
220 out:
221 free(comment);
222 return r;
Ben Lindstrom2f717042002-06-06 21:52:03 +0000223}
224
Damien Miller5428f641999-11-25 11:54:57 +1100225/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000226 * Fetch list of identities held by the agent.
Damien Miller5428f641999-11-25 11:54:57 +1100227 */
Damien Miller0bc1bd82000-11-13 22:57:25 +1100228int
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000229ssh_fetch_identitylist(int sock, struct ssh_identitylist **idlp)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000230{
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000231 u_char type;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000232 u_int32_t num, i;
233 struct sshbuf *msg;
234 struct ssh_identitylist *idl = NULL;
235 int r;
Damien Millerad833b32000-08-23 10:46:23 +1000236
Damien Miller5428f641999-11-25 11:54:57 +1100237 /*
238 * Send a message to the agent requesting for a list of the
239 * identities it can represent.
240 */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000241 if ((msg = sshbuf_new()) == NULL)
242 return SSH_ERR_ALLOC_FAIL;
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000243 if ((r = sshbuf_put_u8(msg, SSH2_AGENTC_REQUEST_IDENTITIES)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000244 goto out;
Damien Miller942da032000-08-18 13:59:06 +1000245
djm@openbsd.org141efe42015-01-14 20:05:27 +0000246 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
247 goto out;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000248
Damien Miller95def091999-11-25 00:26:21 +1100249 /* Get message type, and verify that we got a proper answer. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000250 if ((r = sshbuf_get_u8(msg, &type)) != 0)
251 goto out;
Damien Miller874d77b2000-10-14 16:23:11 +1100252 if (agent_failed(type)) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000253 r = SSH_ERR_AGENT_FAILURE;
254 goto out;
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000255 } else if (type != SSH2_AGENT_IDENTITIES_ANSWER) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000256 r = SSH_ERR_INVALID_FORMAT;
257 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000258 }
Damien Miller95def091999-11-25 00:26:21 +1100259
260 /* Get the number of entries in the response and check it for sanity. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000261 if ((r = sshbuf_get_u32(msg, &num)) != 0)
262 goto out;
263 if (num > MAX_AGENT_IDENTITIES) {
264 r = SSH_ERR_INVALID_FORMAT;
265 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000266 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000267 if (num == 0) {
268 r = SSH_ERR_AGENT_NO_IDENTITIES;
269 goto out;
270 }
271
272 /* Deserialise the response into a list of keys/comments */
273 if ((idl = calloc(1, sizeof(*idl))) == NULL ||
274 (idl->keys = calloc(num, sizeof(*idl->keys))) == NULL ||
275 (idl->comments = calloc(num, sizeof(*idl->comments))) == NULL) {
276 r = SSH_ERR_ALLOC_FAIL;
277 goto out;
278 }
279 for (i = 0; i < num;) {
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000280 if ((r = deserialise_identity2(msg, &(idl->keys[i]),
281 &(idl->comments[i]))) != 0) {
282 if (r == SSH_ERR_KEY_TYPE_UNKNOWN) {
283 /* Gracefully skip unknown key types */
284 num--;
285 continue;
286 } else
287 goto out;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000288 }
289 i++;
290 }
291 idl->nkeys = num;
292 *idlp = idl;
293 idl = NULL;
294 r = 0;
295 out:
296 sshbuf_free(msg);
297 if (idl != NULL)
298 ssh_free_identitylist(idl);
299 return r;
300}
301
302void
303ssh_free_identitylist(struct ssh_identitylist *idl)
304{
305 size_t i;
306
307 if (idl == NULL)
308 return;
309 for (i = 0; i < idl->nkeys; i++) {
310 if (idl->keys != NULL)
311 sshkey_free(idl->keys[i]);
312 if (idl->comments != NULL)
313 free(idl->comments[i]);
314 }
315 free(idl);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000316}
317
Damien Miller5428f641999-11-25 11:54:57 +1100318/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000319 * Sends a challenge (typically from a server via ssh(1)) to the agent,
320 * and waits for a response from the agent.
321 * Returns true (non-zero) if the agent gave the correct answer, zero
322 * otherwise.
Damien Miller5428f641999-11-25 11:54:57 +1100323 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000324
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000325
djm@openbsd.org001aa552018-04-10 00:10:49 +0000326/* encode signature algorithm in flag bits, so we can keep the msg format */
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000327static u_int
djm@openbsd.orga98339e2017-06-28 01:09:22 +0000328agent_encode_alg(const struct sshkey *key, const char *alg)
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000329{
330 if (alg != NULL && key->type == KEY_RSA) {
331 if (strcmp(alg, "rsa-sha2-256") == 0)
332 return SSH_AGENT_RSA_SHA2_256;
333 else if (strcmp(alg, "rsa-sha2-512") == 0)
334 return SSH_AGENT_RSA_SHA2_512;
335 }
336 return 0;
337}
338
djm@openbsd.org141efe42015-01-14 20:05:27 +0000339/* ask agent to sign data, returns err.h code on error, 0 on success */
Damien Millerad833b32000-08-23 10:46:23 +1000340int
djm@openbsd.orga98339e2017-06-28 01:09:22 +0000341ssh_agent_sign(int sock, const struct sshkey *key,
djm@openbsd.org141efe42015-01-14 20:05:27 +0000342 u_char **sigp, size_t *lenp,
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000343 const u_char *data, size_t datalen, const char *alg, u_int compat)
Damien Millerad833b32000-08-23 10:46:23 +1000344{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000345 struct sshbuf *msg;
djm@openbsd.org4ba0d542018-07-03 11:39:54 +0000346 u_char *sig = NULL, type = 0;
347 size_t len = 0;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000348 u_int flags = 0;
349 int r = SSH_ERR_INTERNAL_ERROR;
Damien Millerad833b32000-08-23 10:46:23 +1000350
markus@openbsd.orgfecede02015-03-26 19:32:19 +0000351 *sigp = NULL;
352 *lenp = 0;
Damien Millerad833b32000-08-23 10:46:23 +1000353
djm@openbsd.org141efe42015-01-14 20:05:27 +0000354 if (datalen > SSH_KEY_MAX_SIGN_DATA_SIZE)
355 return SSH_ERR_INVALID_ARGUMENT;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000356 if ((msg = sshbuf_new()) == NULL)
357 return SSH_ERR_ALLOC_FAIL;
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000358 flags |= agent_encode_alg(key, alg);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000359 if ((r = sshbuf_put_u8(msg, SSH2_AGENTC_SIGN_REQUEST)) != 0 ||
djm@openbsd.org4ba0d542018-07-03 11:39:54 +0000360 (r = sshkey_puts(key, msg)) != 0 ||
djm@openbsd.org141efe42015-01-14 20:05:27 +0000361 (r = sshbuf_put_string(msg, data, datalen)) != 0 ||
362 (r = sshbuf_put_u32(msg, flags)) != 0)
363 goto out;
jsg@openbsd.orgf3a3ea12015-09-02 07:51:12 +0000364 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000365 goto out;
366 if ((r = sshbuf_get_u8(msg, &type)) != 0)
367 goto out;
Damien Miller874d77b2000-10-14 16:23:11 +1100368 if (agent_failed(type)) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000369 r = SSH_ERR_AGENT_FAILURE;
370 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000371 } else if (type != SSH2_AGENT_SIGN_RESPONSE) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000372 r = SSH_ERR_INVALID_FORMAT;
373 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000374 }
djm@openbsd.org4ba0d542018-07-03 11:39:54 +0000375 if ((r = sshbuf_get_string(msg, &sig, &len)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000376 goto out;
djm@openbsd.org4ba0d542018-07-03 11:39:54 +0000377 /* Check what we actually got back from the agent. */
378 if ((r = sshkey_check_sigtype(sig, len, alg)) != 0)
379 goto out;
380 /* success */
381 *sigp = sig;
markus@openbsd.orgfecede02015-03-26 19:32:19 +0000382 *lenp = len;
djm@openbsd.org4ba0d542018-07-03 11:39:54 +0000383 sig = NULL;
384 len = 0;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000385 r = 0;
386 out:
djm@openbsd.org4ba0d542018-07-03 11:39:54 +0000387 freezero(sig, len);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000388 sshbuf_free(msg);
389 return r;
Damien Millerad833b32000-08-23 10:46:23 +1000390}
391
Damien Miller994cf142000-07-21 10:19:44 +1000392/* Encode key for a message to the agent. */
393
Damien Miller994cf142000-07-21 10:19:44 +1000394
djm@openbsd.org141efe42015-01-14 20:05:27 +0000395static int
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000396encode_constraints(struct sshbuf *m, u_int life, u_int confirm, u_int maxsign)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000397{
398 int r;
399
400 if (life != 0) {
401 if ((r = sshbuf_put_u8(m, SSH_AGENT_CONSTRAIN_LIFETIME)) != 0 ||
402 (r = sshbuf_put_u32(m, life)) != 0)
403 goto out;
404 }
405 if (confirm != 0) {
406 if ((r = sshbuf_put_u8(m, SSH_AGENT_CONSTRAIN_CONFIRM)) != 0)
407 goto out;
408 }
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000409 if (maxsign != 0) {
410 if ((r = sshbuf_put_u8(m, SSH_AGENT_CONSTRAIN_MAXSIGN)) != 0 ||
411 (r = sshbuf_put_u32(m, maxsign)) != 0)
412 goto out;
413 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000414 r = 0;
415 out:
416 return r;
Damien Miller994cf142000-07-21 10:19:44 +1000417}
418
Damien Miller5428f641999-11-25 11:54:57 +1100419/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000420 * Adds an identity to the authentication server.
421 * This call is intended only for use by ssh-add(1) and like applications.
Damien Miller5428f641999-11-25 11:54:57 +1100422 */
Damien Miller4af51302000-04-16 11:18:38 +1000423int
djm@openbsd.orgd9e5cf02018-02-10 09:25:34 +0000424ssh_add_identity_constrained(int sock, const struct sshkey *key,
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000425 const char *comment, u_int life, u_int confirm, u_int maxsign)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000426{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000427 struct sshbuf *msg;
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000428 int r, constrained = (life || confirm || maxsign);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000429 u_char type;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000430
djm@openbsd.org141efe42015-01-14 20:05:27 +0000431 if ((msg = sshbuf_new()) == NULL)
432 return SSH_ERR_ALLOC_FAIL;
Damien Miller994cf142000-07-21 10:19:44 +1000433
434 switch (key->type) {
Damien Miller1f0311c2014-05-15 14:24:09 +1000435#ifdef WITH_OPENSSL
Damien Miller0bc1bd82000-11-13 22:57:25 +1100436 case KEY_RSA:
Damien Miller0a80ca12010-02-27 07:55:05 +1100437 case KEY_RSA_CERT:
Damien Miller994cf142000-07-21 10:19:44 +1000438 case KEY_DSA:
Damien Miller0a80ca12010-02-27 07:55:05 +1100439 case KEY_DSA_CERT:
Damien Millereb8b60e2010-08-31 22:41:14 +1000440 case KEY_ECDSA:
441 case KEY_ECDSA_CERT:
Damien Miller1f0311c2014-05-15 14:24:09 +1000442#endif
Damien Miller5be9d9e2013-12-07 11:24:01 +1100443 case KEY_ED25519:
444 case KEY_ED25519_CERT:
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000445 case KEY_XMSS:
446 case KEY_XMSS_CERT:
Ben Lindstrom2b266b72002-06-21 00:08:39 +0000447 type = constrained ?
448 SSH2_AGENTC_ADD_ID_CONSTRAINED :
449 SSH2_AGENTC_ADD_IDENTITY;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000450 if ((r = sshbuf_put_u8(msg, type)) != 0 ||
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000451 (r = sshkey_private_serialize_maxsign(key, msg, maxsign,
452 NULL)) != 0 ||
453 (r = sshbuf_put_cstring(msg, comment)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000454 goto out;
Damien Miller994cf142000-07-21 10:19:44 +1000455 break;
456 default:
djm@openbsd.org141efe42015-01-14 20:05:27 +0000457 r = SSH_ERR_INVALID_ARGUMENT;
458 goto out;
Damien Miller994cf142000-07-21 10:19:44 +1000459 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000460 if (constrained &&
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000461 (r = encode_constraints(msg, life, confirm, maxsign)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000462 goto out;
463 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
464 goto out;
465 if ((r = sshbuf_get_u8(msg, &type)) != 0)
466 goto out;
467 r = decode_reply(type);
468 out:
469 sshbuf_free(msg);
470 return r;
Damien Miller95def091999-11-25 00:26:21 +1100471}
472
Damien Miller5428f641999-11-25 11:54:57 +1100473/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000474 * Removes an identity from the authentication server.
475 * This call is intended only for use by ssh-add(1) and like applications.
Damien Miller5428f641999-11-25 11:54:57 +1100476 */
Damien Miller4af51302000-04-16 11:18:38 +1000477int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000478ssh_remove_identity(int sock, struct sshkey *key)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000479{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000480 struct sshbuf *msg;
481 int r;
482 u_char type, *blob = NULL;
483 size_t blen;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000484
djm@openbsd.org141efe42015-01-14 20:05:27 +0000485 if ((msg = sshbuf_new()) == NULL)
486 return SSH_ERR_ALLOC_FAIL;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000487
Damien Miller1f0311c2014-05-15 14:24:09 +1000488 if (key->type != KEY_UNSPEC) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000489 if ((r = sshkey_to_blob(key, &blob, &blen)) != 0)
490 goto out;
491 if ((r = sshbuf_put_u8(msg,
492 SSH2_AGENTC_REMOVE_IDENTITY)) != 0 ||
493 (r = sshbuf_put_string(msg, blob, blen)) != 0)
494 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000495 } else {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000496 r = SSH_ERR_INVALID_ARGUMENT;
497 goto out;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000498 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000499 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
500 goto out;
501 if ((r = sshbuf_get_u8(msg, &type)) != 0)
502 goto out;
503 r = decode_reply(type);
504 out:
505 if (blob != NULL) {
506 explicit_bzero(blob, blen);
507 free(blob);
Damien Millerad833b32000-08-23 10:46:23 +1000508 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000509 sshbuf_free(msg);
510 return r;
Damien Miller95def091999-11-25 00:26:21 +1100511}
512
djm@openbsd.org141efe42015-01-14 20:05:27 +0000513/*
514 * Add/remove an token-based identity from the authentication server.
515 * This call is intended only for use by ssh-add(1) and like applications.
516 */
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000517int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000518ssh_update_card(int sock, int add, const char *reader_id, const char *pin,
519 u_int life, u_int confirm)
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000520{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000521 struct sshbuf *msg;
522 int r, constrained = (life || confirm);
523 u_char type;
Damien Millerd94f20d2003-06-11 22:06:33 +1000524
525 if (add) {
526 type = constrained ?
527 SSH_AGENTC_ADD_SMARTCARD_KEY_CONSTRAINED :
528 SSH_AGENTC_ADD_SMARTCARD_KEY;
529 } else
530 type = SSH_AGENTC_REMOVE_SMARTCARD_KEY;
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000531
djm@openbsd.org141efe42015-01-14 20:05:27 +0000532 if ((msg = sshbuf_new()) == NULL)
533 return SSH_ERR_ALLOC_FAIL;
534 if ((r = sshbuf_put_u8(msg, type)) != 0 ||
535 (r = sshbuf_put_cstring(msg, reader_id)) != 0 ||
536 (r = sshbuf_put_cstring(msg, pin)) != 0)
537 goto out;
538 if (constrained &&
markus@openbsd.org1b11ea72018-02-23 15:58:37 +0000539 (r = encode_constraints(msg, life, confirm, 0)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000540 goto out;
541 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
542 goto out;
543 if ((r = sshbuf_get_u8(msg, &type)) != 0)
544 goto out;
545 r = decode_reply(type);
546 out:
547 sshbuf_free(msg);
548 return r;
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000549}
550
Damien Miller5428f641999-11-25 11:54:57 +1100551/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000552 * Removes all identities from the agent.
553 * This call is intended only for use by ssh-add(1) and like applications.
djm@openbsd.org744bde72017-05-04 06:10:57 +0000554 *
555 * This supports the SSH protocol 1 message to because, when clearing all
556 * keys from an agent, we generally want to clear both protocol v1 and v2
557 * keys.
Damien Miller5428f641999-11-25 11:54:57 +1100558 */
Damien Miller4af51302000-04-16 11:18:38 +1000559int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000560ssh_remove_all_identities(int sock, int version)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000561{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000562 struct sshbuf *msg;
563 u_char type = (version == 1) ?
564 SSH_AGENTC_REMOVE_ALL_RSA_IDENTITIES :
565 SSH2_AGENTC_REMOVE_ALL_IDENTITIES;
566 int r;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000567
djm@openbsd.org141efe42015-01-14 20:05:27 +0000568 if ((msg = sshbuf_new()) == NULL)
569 return SSH_ERR_ALLOC_FAIL;
570 if ((r = sshbuf_put_u8(msg, type)) != 0)
571 goto out;
572 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
573 goto out;
574 if ((r = sshbuf_get_u8(msg, &type)) != 0)
575 goto out;
576 r = decode_reply(type);
577 out:
578 sshbuf_free(msg);
579 return r;
Damien Miller95def091999-11-25 00:26:21 +1100580}