blob: 7c57ca790c6799dc1bd9b78930b9b9bde42aadbc [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 * Author: Tatu Ylonen <ylo@cs.hut.fi>
3 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
4 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11005 * Ssh client program. This program can be used to log into a remote machine.
6 * The software supports strong authentication, encryption, and forwarding
7 * of X11, TCP/IP, and authentication connections.
8 *
Damien Millere4340be2000-09-16 13:29:08 +11009 * As far as I am concerned, the code I have written for this software
10 * can be used freely for any purpose. Any derived versions of this
11 * software must be clearly marked as such, and if the derived work is
12 * incompatible with the protocol description in the RFC file, it must be
13 * called by a name other than "ssh" or "Secure Shell".
14 *
15 * Copyright (c) 1999 Niels Provos. All rights reserved.
16 *
17 * Modified to work with SSL by Niels Provos <provos@citi.umich.edu>
18 * in Canada (German citizen).
19 *
20 * Redistribution and use in source and binary forms, with or without
21 * modification, are permitted provided that the following conditions
22 * are met:
23 * 1. Redistributions of source code must retain the above copyright
24 * notice, this list of conditions and the following disclaimer.
25 * 2. Redistributions in binary form must reproduce the above copyright
26 * notice, this list of conditions and the following disclaimer in the
27 * documentation and/or other materials provided with the distribution.
28 *
29 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
30 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
31 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
32 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
33 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
34 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
35 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
36 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
37 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
38 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Damien Miller95def091999-11-25 00:26:21 +110039 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100040
41#include "includes.h"
Ben Lindstrom6328ab32002-03-22 02:54:23 +000042RCSID("$OpenBSD: ssh.c,v 1.165 2002/03/19 10:49:35 markus Exp $");
Damien Millereba71ba2000-04-29 23:57:08 +100043
44#include <openssl/evp.h>
Damien Miller0bc1bd82000-11-13 22:57:25 +110045#include <openssl/err.h>
Damien Millerd4a8b7e1999-10-27 13:42:43 +100046
Damien Millerd4a8b7e1999-10-27 13:42:43 +100047#include "ssh.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000048#include "ssh1.h"
Damien Miller1383bd82000-04-06 12:32:37 +100049#include "ssh2.h"
50#include "compat.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000051#include "cipher.h"
52#include "xmalloc.h"
53#include "packet.h"
54#include "buffer.h"
55#include "uidswap.h"
Ben Lindstromc7637672001-06-09 00:36:26 +000056#include "channels.h"
Damien Millereba71ba2000-04-29 23:57:08 +100057#include "key.h"
Damien Miller994cf142000-07-21 10:19:44 +100058#include "authfd.h"
Damien Millereba71ba2000-04-29 23:57:08 +100059#include "authfile.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000060#include "pathnames.h"
Ben Lindstrombf555ba2001-01-18 02:04:35 +000061#include "clientloop.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000062#include "log.h"
63#include "readconf.h"
64#include "sshconnect.h"
65#include "tildexpand.h"
Ben Lindstrom1e7d3062001-02-09 02:36:43 +000066#include "dispatch.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000067#include "misc.h"
Ben Lindstrom06b33aa2001-02-15 03:01:59 +000068#include "kex.h"
69#include "mac.h"
Ben Lindstromae8e2d32001-04-14 23:13:02 +000070#include "sshtty.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100071
Ben Lindstromc5b68002001-07-04 04:52:03 +000072#ifdef SMARTCARD
73#include <openssl/engine.h>
74#include "scard.h"
Ben Lindstrombcc18082001-08-06 21:59:25 +000075#endif
Ben Lindstromc5b68002001-07-04 04:52:03 +000076
Damien Miller3f905871999-11-15 17:10:57 +110077#ifdef HAVE___PROGNAME
78extern char *__progname;
Ben Lindstrom49a79c02000-11-17 03:47:20 +000079#else
80char *__progname;
81#endif
Damien Miller3f905871999-11-15 17:10:57 +110082
Damien Miller34132e52000-01-14 15:45:46 +110083/* Flag indicating whether IPv4 or IPv6. This can be set on the command line.
84 Default value is AF_UNSPEC means both IPv4 and IPv6. */
Damien Miller7d80e342000-01-19 14:36:49 +110085#ifdef IPV4_DEFAULT
86int IPv4or6 = AF_INET;
87#else
Damien Miller34132e52000-01-14 15:45:46 +110088int IPv4or6 = AF_UNSPEC;
Damien Miller7d80e342000-01-19 14:36:49 +110089#endif
Damien Miller34132e52000-01-14 15:45:46 +110090
Damien Miller95def091999-11-25 00:26:21 +110091/* Flag indicating whether debug mode is on. This can be set on the command line. */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100092int debug_flag = 0;
93
Damien Miller78928792000-04-12 20:17:38 +100094/* Flag indicating whether a tty should be allocated */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100095int tty_flag = 0;
Ben Lindstrom4dccfa52000-12-28 16:40:05 +000096int no_tty_flag = 0;
97int force_tty_flag = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100098
Damien Miller1383bd82000-04-06 12:32:37 +100099/* don't exec a shell */
100int no_shell_flag = 0;
Damien Miller1383bd82000-04-06 12:32:37 +1000101
Damien Miller5428f641999-11-25 11:54:57 +1100102/*
103 * Flag indicating that nothing should be read from stdin. This can be set
104 * on the command line.
105 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000106int stdin_null_flag = 0;
107
Damien Miller5428f641999-11-25 11:54:57 +1100108/*
109 * Flag indicating that ssh should fork after authentication. This is useful
110 * so that the pasphrase can be entered manually, and then ssh goes to the
111 * background.
112 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000113int fork_after_authentication_flag = 0;
114
Damien Miller5428f641999-11-25 11:54:57 +1100115/*
116 * General data structure for command line options and options configurable
117 * in configuration files. See readconf.h.
118 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000119Options options;
120
Ben Lindstrom14f31ab2001-09-12 17:48:04 +0000121/* optional user configfile */
122char *config = NULL;
123
Damien Miller5428f641999-11-25 11:54:57 +1100124/*
125 * Name of the host we are connecting to. This is the name given on the
126 * command line, or the HostName specified for the user-supplied name in a
127 * configuration file.
128 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000129char *host;
130
131/* socket address the host resolves to */
Damien Miller34132e52000-01-14 15:45:46 +1100132struct sockaddr_storage hostaddr;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000133
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000134/* Private host keys. */
135struct {
136 Key **keys;
137 int nkeys;
138} sensitive_data;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000139
140/* Original real UID. */
141uid_t original_real_uid;
142
Damien Miller1383bd82000-04-06 12:32:37 +1000143/* command to be executed */
144Buffer command;
145
Damien Miller832562e2001-01-30 09:30:01 +1100146/* Should we execute a command or invoke a subsystem? */
147int subsystem_flag = 0;
148
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000149/* Prints a help message to the user. This function never returns. */
150
Ben Lindstrombba81212001-06-25 05:01:22 +0000151static void
Ben Lindstrom31ca54a2001-02-09 02:11:24 +0000152usage(void)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000153{
Kevin Stevesec84dc12000-12-13 17:45:15 +0000154 fprintf(stderr, "Usage: %s [options] host [command]\n", __progname);
Damien Miller95def091999-11-25 00:26:21 +1100155 fprintf(stderr, "Options:\n");
156 fprintf(stderr, " -l user Log in using this user name.\n");
Ben Lindstrom31ca54a2001-02-09 02:11:24 +0000157 fprintf(stderr, " -n Redirect input from " _PATH_DEVNULL ".\n");
Ben Lindstrom14f31ab2001-09-12 17:48:04 +0000158 fprintf(stderr, " -F config Config file (default: ~/%s).\n",
159 _PATH_SSH_USER_CONFFILE);
Damien Millerb1715dc2000-05-30 13:44:51 +1000160 fprintf(stderr, " -A Enable authentication agent forwarding.\n");
Ben Lindstrom3b89c5e2001-06-05 20:44:16 +0000161 fprintf(stderr, " -a Disable authentication agent forwarding (default).\n");
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000162#ifdef AFS
Damien Miller95def091999-11-25 00:26:21 +1100163 fprintf(stderr, " -k Disable Kerberos ticket and AFS token forwarding.\n");
164#endif /* AFS */
Kevin Stevesef4eea92001-02-05 12:42:17 +0000165 fprintf(stderr, " -X Enable X11 connection forwarding.\n");
Ben Lindstrom3b89c5e2001-06-05 20:44:16 +0000166 fprintf(stderr, " -x Disable X11 connection forwarding (default).\n");
Ben Lindstrom0ab2a012001-03-05 06:45:21 +0000167 fprintf(stderr, " -i file Identity for public key authentication "
168 "(default: ~/.ssh/identity)\n");
Ben Lindstrom61eb9562001-08-06 21:53:42 +0000169#ifdef SMARTCARD
170 fprintf(stderr, " -I reader Set smartcard reader.\n");
Ben Lindstrombcc18082001-08-06 21:59:25 +0000171#endif
Damien Miller95def091999-11-25 00:26:21 +1100172 fprintf(stderr, " -t Tty; allocate a tty even if command is given.\n");
Damien Miller1383bd82000-04-06 12:32:37 +1000173 fprintf(stderr, " -T Do not allocate a tty.\n");
Damien Miller95def091999-11-25 00:26:21 +1100174 fprintf(stderr, " -v Verbose; display verbose debugging messages.\n");
Damien Millere4340be2000-09-16 13:29:08 +1100175 fprintf(stderr, " Multiple -v increases verbosity.\n");
Damien Miller95def091999-11-25 00:26:21 +1100176 fprintf(stderr, " -V Display version number only.\n");
177 fprintf(stderr, " -P Don't allocate a privileged port.\n");
178 fprintf(stderr, " -q Quiet; don't display any warning messages.\n");
179 fprintf(stderr, " -f Fork into background after authentication.\n");
180 fprintf(stderr, " -e char Set escape character; ``none'' = disable (default: ~).\n");
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000181
Ben Lindstrom3b89c5e2001-06-05 20:44:16 +0000182 fprintf(stderr, " -c cipher Select encryption algorithm\n");
Ben Lindstrom3d73a342001-03-05 07:39:01 +0000183 fprintf(stderr, " -m macs Specify MAC algorithms for protocol version 2.\n");
Damien Miller95def091999-11-25 00:26:21 +1100184 fprintf(stderr, " -p port Connect to this port. Server must be on the same port.\n");
185 fprintf(stderr, " -L listen-port:host:port Forward local port to remote address\n");
186 fprintf(stderr, " -R listen-port:host:port Forward remote port to local address\n");
Kevin Stevesec84dc12000-12-13 17:45:15 +0000187 fprintf(stderr, " These cause %s to listen for connections on a port, and\n", __progname);
Damien Miller95def091999-11-25 00:26:21 +1100188 fprintf(stderr, " forward them to the other side by connecting to host:port.\n");
Ben Lindstrom19ceb172001-09-12 17:54:24 +0000189 fprintf(stderr, " -D port Enable dynamic application-level port forwarding.\n");
Damien Miller95def091999-11-25 00:26:21 +1100190 fprintf(stderr, " -C Enable compression.\n");
Damien Miller1383bd82000-04-06 12:32:37 +1000191 fprintf(stderr, " -N Do not execute a shell or command.\n");
Damien Miller95def091999-11-25 00:26:21 +1100192 fprintf(stderr, " -g Allow remote hosts to connect to forwarded ports.\n");
Ben Lindstrom1e7d3062001-02-09 02:36:43 +0000193 fprintf(stderr, " -1 Force protocol version 1.\n");
194 fprintf(stderr, " -2 Force protocol version 2.\n");
Damien Miller34132e52000-01-14 15:45:46 +1100195 fprintf(stderr, " -4 Use IPv4 only.\n");
196 fprintf(stderr, " -6 Use IPv6 only.\n");
Damien Miller95def091999-11-25 00:26:21 +1100197 fprintf(stderr, " -o 'option' Process the option as if it was read from a configuration file.\n");
Damien Miller832562e2001-01-30 09:30:01 +1100198 fprintf(stderr, " -s Invoke command (mandatory) as SSH2 subsystem.\n");
Ben Lindstrom3b89c5e2001-06-05 20:44:16 +0000199 fprintf(stderr, " -b addr Local IP address.\n");
Damien Miller95def091999-11-25 00:26:21 +1100200 exit(1);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000201}
202
Damien Miller95def091999-11-25 00:26:21 +1100203/*
204 * Connects to the given host using rsh (or prints an error message and exits
205 * if rsh is not available). This function never returns.
206 */
Ben Lindstrombba81212001-06-25 05:01:22 +0000207static void
Damien Miller95def091999-11-25 00:26:21 +1100208rsh_connect(char *host, char *user, Buffer * command)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000209{
Damien Miller95def091999-11-25 00:26:21 +1100210 char *args[10];
211 int i;
212
213 log("Using rsh. WARNING: Connection will not be encrypted.");
214 /* Build argument list for rsh. */
215 i = 0;
216 args[i++] = _PATH_RSH;
217 /* host may have to come after user on some systems */
218 args[i++] = host;
219 if (user) {
220 args[i++] = "-l";
221 args[i++] = user;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000222 }
Damien Miller95def091999-11-25 00:26:21 +1100223 if (buffer_len(command) > 0) {
224 buffer_append(command, "\0", 1);
225 args[i++] = buffer_ptr(command);
226 }
227 args[i++] = NULL;
228 if (debug_flag) {
229 for (i = 0; args[i]; i++) {
230 if (i != 0)
231 fprintf(stderr, " ");
232 fprintf(stderr, "%s", args[i]);
233 }
234 fprintf(stderr, "\n");
235 }
236 execv(_PATH_RSH, args);
237 perror(_PATH_RSH);
238 exit(1);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000239}
240
Ben Lindstrombba81212001-06-25 05:01:22 +0000241static int ssh_session(void);
242static int ssh_session2(void);
243static void load_public_identity_files(void);
Damien Miller1383bd82000-04-06 12:32:37 +1000244
Damien Miller95def091999-11-25 00:26:21 +1100245/*
246 * Main program for the ssh client.
247 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000248int
249main(int ac, char **av)
250{
Ben Lindstromf9cedb92001-08-06 21:07:11 +0000251 int i, opt, exit_status, cerr;
Damien Milleraae6c611999-12-06 11:47:28 +1100252 u_short fwd_port, fwd_host_port;
Ben Lindstrom1a174712001-09-12 17:56:15 +0000253 char sfwd_port[6], sfwd_host_port[6];
Damien Millerf4614452001-07-14 12:18:10 +1000254 char *p, *cp, buf[256];
Damien Miller95def091999-11-25 00:26:21 +1100255 struct stat st;
Ben Lindstrom086cf212001-03-05 05:56:40 +0000256 struct passwd *pw;
Damien Miller1383bd82000-04-06 12:32:37 +1000257 int dummy;
Damien Miller95def091999-11-25 00:26:21 +1100258 uid_t original_effective_uid;
Ben Lindstrom5ccf63a2001-09-24 20:00:10 +0000259 extern int optind, optreset;
Damien Miller4f8e6692001-07-14 13:22:53 +1000260 extern char *optarg;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000261
Ben Lindstrom49a79c02000-11-17 03:47:20 +0000262 __progname = get_progname(av[0]);
Damien Millerf9b625c2000-07-09 22:42:32 +1000263 init_rng();
264
Damien Miller5428f641999-11-25 11:54:57 +1100265 /*
266 * Save the original real uid. It will be needed later (uid-swapping
267 * may clobber the real uid).
268 */
Damien Miller95def091999-11-25 00:26:21 +1100269 original_real_uid = getuid();
270 original_effective_uid = geteuid();
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000271
Damien Miller05dd7952000-10-01 00:42:48 +1100272#ifdef HAVE_SETRLIMIT
Damien Miller95def091999-11-25 00:26:21 +1100273 /* If we are installed setuid root be careful to not drop core. */
274 if (original_real_uid != original_effective_uid) {
275 struct rlimit rlim;
276 rlim.rlim_cur = rlim.rlim_max = 0;
277 if (setrlimit(RLIMIT_CORE, &rlim) < 0)
278 fatal("setrlimit failed: %.100s", strerror(errno));
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000279 }
Damien Millerbac2d8a2000-09-05 16:13:06 +1100280#endif
Ben Lindstrom3fcf1a22001-04-08 18:26:59 +0000281 /* Get user data. */
282 pw = getpwuid(original_real_uid);
283 if (!pw) {
284 log("You don't exist, go away!");
285 exit(1);
286 }
287 /* Take a copy of the returned structure. */
288 pw = pwcopy(pw);
289
Damien Miller5428f641999-11-25 11:54:57 +1100290 /*
291 * Use uid-swapping to give up root privileges for the duration of
292 * option processing. We will re-instantiate the rights when we are
293 * ready to create the privileged port, and will permanently drop
294 * them when the port has been created (actually, when the connection
295 * has been made, as we may need to create the port several times).
296 */
Ben Lindstrom3fcf1a22001-04-08 18:26:59 +0000297 temporarily_use_uid(pw);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000298
Damien Miller5428f641999-11-25 11:54:57 +1100299 /*
300 * Set our umask to something reasonable, as some files are created
301 * with the default umask. This will make them world-readable but
302 * writable only by the owner, which is ok for all files for which we
303 * don't set the modes explicitly.
304 */
Damien Miller95def091999-11-25 00:26:21 +1100305 umask(022);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000306
Damien Miller95def091999-11-25 00:26:21 +1100307 /* Initialize option structure to indicate that no values have been set. */
308 initialize_options(&options);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000309
Damien Miller95def091999-11-25 00:26:21 +1100310 /* Parse command-line arguments. */
311 host = NULL;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000312
Damien Millerf4614452001-07-14 12:18:10 +1000313again:
314 while ((opt = getopt(ac, av,
Ben Lindstrom14f31ab2001-09-12 17:48:04 +0000315 "1246ab:c:e:fgi:kl:m:no:p:qstvxACD:F:I:L:NPR:TVX")) != -1) {
Damien Miller95def091999-11-25 00:26:21 +1100316 switch (opt) {
Ben Lindstrom1e7d3062001-02-09 02:36:43 +0000317 case '1':
318 options.protocol = SSH_PROTO_1;
319 break;
Damien Miller4af51302000-04-16 11:18:38 +1000320 case '2':
321 options.protocol = SSH_PROTO_2;
322 break;
Damien Miller34132e52000-01-14 15:45:46 +1100323 case '4':
324 IPv4or6 = AF_INET;
325 break;
Damien Miller34132e52000-01-14 15:45:46 +1100326 case '6':
327 IPv4or6 = AF_INET6;
328 break;
Damien Miller95def091999-11-25 00:26:21 +1100329 case 'n':
330 stdin_null_flag = 1;
331 break;
Damien Miller95def091999-11-25 00:26:21 +1100332 case 'f':
333 fork_after_authentication_flag = 1;
334 stdin_null_flag = 1;
335 break;
Damien Miller95def091999-11-25 00:26:21 +1100336 case 'x':
337 options.forward_x11 = 0;
338 break;
Damien Miller95def091999-11-25 00:26:21 +1100339 case 'X':
340 options.forward_x11 = 1;
341 break;
Damien Miller95def091999-11-25 00:26:21 +1100342 case 'g':
343 options.gateway_ports = 1;
344 break;
Damien Miller95def091999-11-25 00:26:21 +1100345 case 'P':
346 options.use_privileged_port = 0;
347 break;
Damien Miller95def091999-11-25 00:26:21 +1100348 case 'a':
349 options.forward_agent = 0;
350 break;
Damien Millerb1715dc2000-05-30 13:44:51 +1000351 case 'A':
352 options.forward_agent = 1;
353 break;
Damien Miller95def091999-11-25 00:26:21 +1100354#ifdef AFS
355 case 'k':
356 options.kerberos_tgt_passing = 0;
357 options.afs_token_passing = 0;
358 break;
359#endif
360 case 'i':
361 if (stat(optarg, &st) < 0) {
Damien Millerf4614452001-07-14 12:18:10 +1000362 fprintf(stderr, "Warning: Identity file %s "
363 "does not exist.\n", optarg);
Damien Miller95def091999-11-25 00:26:21 +1100364 break;
365 }
Damien Millerf4614452001-07-14 12:18:10 +1000366 if (options.num_identity_files >=
367 SSH_MAX_IDENTITY_FILES)
368 fatal("Too many identity files specified "
369 "(max %d)", SSH_MAX_IDENTITY_FILES);
370 options.identity_files[options.num_identity_files++] =
371 xstrdup(optarg);
Damien Miller95def091999-11-25 00:26:21 +1100372 break;
Ben Lindstromc5b68002001-07-04 04:52:03 +0000373 case 'I':
374#ifdef SMARTCARD
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000375 options.smartcard_device = xstrdup(optarg);
Ben Lindstrombcc18082001-08-06 21:59:25 +0000376#else
Ben Lindstromc5b68002001-07-04 04:52:03 +0000377 fprintf(stderr, "no support for smartcards.\n");
Ben Lindstrombcc18082001-08-06 21:59:25 +0000378#endif
Ben Lindstromc5b68002001-07-04 04:52:03 +0000379 break;
Damien Miller95def091999-11-25 00:26:21 +1100380 case 't':
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000381 if (tty_flag)
382 force_tty_flag = 1;
Damien Miller95def091999-11-25 00:26:21 +1100383 tty_flag = 1;
384 break;
Damien Miller95def091999-11-25 00:26:21 +1100385 case 'v':
Damien Millere4340be2000-09-16 13:29:08 +1100386 if (0 == debug_flag) {
387 debug_flag = 1;
388 options.log_level = SYSLOG_LEVEL_DEBUG1;
389 } else if (options.log_level < SYSLOG_LEVEL_DEBUG3) {
390 options.log_level++;
391 break;
Damien Millerf4614452001-07-14 12:18:10 +1000392 } else
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000393 fatal("Too high debugging level.");
Damien Millere4340be2000-09-16 13:29:08 +1100394 /* fallthrough */
Damien Miller95def091999-11-25 00:26:21 +1100395 case 'V':
Damien Miller225736c2001-02-19 21:51:08 +1100396 fprintf(stderr,
397 "%s, SSH protocols %d.%d/%d.%d, OpenSSL 0x%8.8lx\n",
Damien Miller78928792000-04-12 20:17:38 +1000398 SSH_VERSION,
399 PROTOCOL_MAJOR_1, PROTOCOL_MINOR_1,
Damien Miller225736c2001-02-19 21:51:08 +1100400 PROTOCOL_MAJOR_2, PROTOCOL_MINOR_2,
401 SSLeay());
Damien Miller95def091999-11-25 00:26:21 +1100402 if (opt == 'V')
403 exit(0);
Damien Miller95def091999-11-25 00:26:21 +1100404 break;
Damien Miller95def091999-11-25 00:26:21 +1100405 case 'q':
406 options.log_level = SYSLOG_LEVEL_QUIET;
407 break;
Damien Miller95def091999-11-25 00:26:21 +1100408 case 'e':
409 if (optarg[0] == '^' && optarg[2] == 0 &&
Damien Millerf4614452001-07-14 12:18:10 +1000410 (u_char) optarg[1] >= 64 &&
411 (u_char) optarg[1] < 128)
Ben Lindstrom46c16222000-12-22 01:43:59 +0000412 options.escape_char = (u_char) optarg[1] & 31;
Damien Miller95def091999-11-25 00:26:21 +1100413 else if (strlen(optarg) == 1)
Ben Lindstrom46c16222000-12-22 01:43:59 +0000414 options.escape_char = (u_char) optarg[0];
Damien Miller95def091999-11-25 00:26:21 +1100415 else if (strcmp(optarg, "none") == 0)
Ben Lindstrom2b1f71b2001-06-05 20:32:21 +0000416 options.escape_char = SSH_ESCAPECHAR_NONE;
Damien Miller95def091999-11-25 00:26:21 +1100417 else {
Damien Millerf4614452001-07-14 12:18:10 +1000418 fprintf(stderr, "Bad escape character '%s'.\n",
419 optarg);
Damien Miller95def091999-11-25 00:26:21 +1100420 exit(1);
421 }
422 break;
Damien Miller95def091999-11-25 00:26:21 +1100423 case 'c':
Damien Millereba71ba2000-04-29 23:57:08 +1000424 if (ciphers_valid(optarg)) {
425 /* SSH2 only */
426 options.ciphers = xstrdup(optarg);
Damien Miller30c3d422000-05-09 11:02:59 +1000427 options.cipher = SSH_CIPHER_ILLEGAL;
Damien Millereba71ba2000-04-29 23:57:08 +1000428 } else {
429 /* SSH1 only */
Damien Millere39cacc2000-11-29 12:18:44 +1100430 options.cipher = cipher_number(optarg);
431 if (options.cipher == -1) {
Damien Millerf4614452001-07-14 12:18:10 +1000432 fprintf(stderr,
433 "Unknown cipher type '%s'\n",
434 optarg);
Damien Millereba71ba2000-04-29 23:57:08 +1000435 exit(1);
436 }
Damien Millerf4614452001-07-14 12:18:10 +1000437 if (options.cipher == SSH_CIPHER_3DES)
Damien Millere39cacc2000-11-29 12:18:44 +1100438 options.ciphers = "3des-cbc";
Damien Millerf4614452001-07-14 12:18:10 +1000439 else if (options.cipher == SSH_CIPHER_BLOWFISH)
Damien Millere39cacc2000-11-29 12:18:44 +1100440 options.ciphers = "blowfish-cbc";
Damien Millerf4614452001-07-14 12:18:10 +1000441 else
Damien Millere39cacc2000-11-29 12:18:44 +1100442 options.ciphers = (char *)-1;
Damien Miller95def091999-11-25 00:26:21 +1100443 }
444 break;
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000445 case 'm':
446 if (mac_valid(optarg))
447 options.macs = xstrdup(optarg);
448 else {
Damien Millerf4614452001-07-14 12:18:10 +1000449 fprintf(stderr, "Unknown mac type '%s'\n",
450 optarg);
Ben Lindstrom06b33aa2001-02-15 03:01:59 +0000451 exit(1);
452 }
453 break;
Damien Miller95def091999-11-25 00:26:21 +1100454 case 'p':
Ben Lindstrom19066a12001-04-12 23:39:26 +0000455 options.port = a2port(optarg);
456 if (options.port == 0) {
Ben Lindstrom146edb92001-04-11 23:06:28 +0000457 fprintf(stderr, "Bad port '%s'\n", optarg);
458 exit(1);
459 }
Damien Miller95def091999-11-25 00:26:21 +1100460 break;
Damien Miller95def091999-11-25 00:26:21 +1100461 case 'l':
462 options.user = optarg;
463 break;
Ben Lindstrom1a174712001-09-12 17:56:15 +0000464
Damien Miller95def091999-11-25 00:26:21 +1100465 case 'L':
Ben Lindstrom1a174712001-09-12 17:56:15 +0000466 case 'R':
467 if (sscanf(optarg, "%5[0-9]:%255[^:]:%5[0-9]",
468 sfwd_port, buf, sfwd_host_port) != 3 &&
469 sscanf(optarg, "%5[0-9]/%255[^/]/%5[0-9]",
470 sfwd_port, buf, sfwd_host_port) != 3) {
Damien Millerf4614452001-07-14 12:18:10 +1000471 fprintf(stderr,
Ben Lindstrom1a174712001-09-12 17:56:15 +0000472 "Bad forwarding specification '%s'\n",
Damien Millerf4614452001-07-14 12:18:10 +1000473 optarg);
Damien Miller95def091999-11-25 00:26:21 +1100474 usage();
475 /* NOTREACHED */
476 }
Ben Lindstrom1a174712001-09-12 17:56:15 +0000477 if ((fwd_port = a2port(sfwd_port)) == 0 ||
Ben Lindstrom6328ab32002-03-22 02:54:23 +0000478 (fwd_host_port = a2port(sfwd_host_port)) == 0) {
Ben Lindstrom1a174712001-09-12 17:56:15 +0000479 fprintf(stderr,
480 "Bad forwarding port(s) '%s'\n", optarg);
481 exit(1);
482 }
483 if (opt == 'L')
484 add_local_forward(&options, fwd_port, buf,
485 fwd_host_port);
486 else if (opt == 'R')
487 add_remote_forward(&options, fwd_port, buf,
Damien Miller9f0f5c62001-12-21 14:45:46 +1100488 fwd_host_port);
Damien Miller95def091999-11-25 00:26:21 +1100489 break;
Ben Lindstrom3bb4f9d2001-04-08 18:30:26 +0000490
491 case 'D':
Ben Lindstrom19066a12001-04-12 23:39:26 +0000492 fwd_port = a2port(optarg);
493 if (fwd_port == 0) {
Damien Millerf4614452001-07-14 12:18:10 +1000494 fprintf(stderr, "Bad dynamic port '%s'\n",
495 optarg);
Ben Lindstrom146edb92001-04-11 23:06:28 +0000496 exit(1);
497 }
Ben Lindstrom3bb4f9d2001-04-08 18:30:26 +0000498 add_local_forward(&options, fwd_port, "socks4", 0);
499 break;
500
Damien Miller95def091999-11-25 00:26:21 +1100501 case 'C':
502 options.compression = 1;
503 break;
Damien Miller1383bd82000-04-06 12:32:37 +1000504 case 'N':
505 no_shell_flag = 1;
506 no_tty_flag = 1;
507 break;
Damien Miller1383bd82000-04-06 12:32:37 +1000508 case 'T':
509 no_tty_flag = 1;
510 break;
Damien Miller95def091999-11-25 00:26:21 +1100511 case 'o':
512 dummy = 1;
Damien Millerf4614452001-07-14 12:18:10 +1000513 if (process_config_line(&options, host ? host : "",
514 optarg, "command-line", 0, &dummy) != 0)
Damien Miller95def091999-11-25 00:26:21 +1100515 exit(1);
516 break;
Damien Miller832562e2001-01-30 09:30:01 +1100517 case 's':
518 subsystem_flag = 1;
519 break;
Ben Lindstrome0f88042001-04-30 13:06:24 +0000520 case 'b':
521 options.bind_address = optarg;
522 break;
Ben Lindstrom14f31ab2001-09-12 17:48:04 +0000523 case 'F':
524 config = optarg;
525 break;
Damien Miller95def091999-11-25 00:26:21 +1100526 default:
527 usage();
528 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000529 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000530
Damien Millerf4614452001-07-14 12:18:10 +1000531 ac -= optind;
532 av += optind;
533
534 if (ac > 0 && !host && **av != '-') {
535 if (strchr(*av, '@')) {
536 p = xstrdup(*av);
537 cp = strchr(p, '@');
538 if (cp == NULL || cp == p)
539 usage();
540 options.user = p;
541 *cp = '\0';
542 host = ++cp;
543 } else
544 host = *av;
545 ac--, av++;
546 if (ac > 0) {
547 optind = 0;
548 optreset = 1;
549 goto again;
550 }
551 }
552
Damien Miller95def091999-11-25 00:26:21 +1100553 /* Check that we got a host name. */
554 if (!host)
555 usage();
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000556
Damien Millercb5e44a2000-09-29 12:12:36 +1100557 SSLeay_add_all_algorithms();
Damien Miller0bc1bd82000-11-13 22:57:25 +1100558 ERR_load_crypto_strings();
Ben Lindstrom908afed2001-10-03 17:34:59 +0000559 channel_set_af(IPv4or6);
Damien Millercb5e44a2000-09-29 12:12:36 +1100560
Damien Miller95def091999-11-25 00:26:21 +1100561 /* Initialize the command to execute on remote host. */
562 buffer_init(&command);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000563
Damien Miller5428f641999-11-25 11:54:57 +1100564 /*
565 * Save the command to execute on the remote host in a buffer. There
566 * is no limit on the length of the command, except by the maximum
567 * packet size. Also sets the tty flag if there is no command.
568 */
Damien Millerf4614452001-07-14 12:18:10 +1000569 if (!ac) {
Damien Miller95def091999-11-25 00:26:21 +1100570 /* No command specified - execute shell on a tty. */
571 tty_flag = 1;
Damien Miller832562e2001-01-30 09:30:01 +1100572 if (subsystem_flag) {
Damien Millerf4614452001-07-14 12:18:10 +1000573 fprintf(stderr,
574 "You must specify a subsystem to invoke.\n");
Damien Miller832562e2001-01-30 09:30:01 +1100575 usage();
576 }
Damien Miller95def091999-11-25 00:26:21 +1100577 } else {
Damien Millerf4614452001-07-14 12:18:10 +1000578 /* A command has been specified. Store it into the buffer. */
579 for (i = 0; i < ac; i++) {
580 if (i)
Damien Miller95def091999-11-25 00:26:21 +1100581 buffer_append(&command, " ", 1);
582 buffer_append(&command, av[i], strlen(av[i]));
583 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000584 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000585
Damien Miller95def091999-11-25 00:26:21 +1100586 /* Cannot fork to background if no command. */
Damien Millercaf6dd62000-08-29 11:33:50 +1100587 if (fork_after_authentication_flag && buffer_len(&command) == 0 && !no_shell_flag)
Damien Miller95def091999-11-25 00:26:21 +1100588 fatal("Cannot fork into background without a command to execute.");
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000589
Damien Miller95def091999-11-25 00:26:21 +1100590 /* Allocate a tty by default if no command specified. */
591 if (buffer_len(&command) == 0)
592 tty_flag = 1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000593
Ben Lindstromc72745a2000-12-02 19:03:54 +0000594 /* Force no tty*/
595 if (no_tty_flag)
596 tty_flag = 0;
Damien Miller95def091999-11-25 00:26:21 +1100597 /* Do not allocate a tty if stdin is not a tty. */
Ben Lindstrom4dccfa52000-12-28 16:40:05 +0000598 if (!isatty(fileno(stdin)) && !force_tty_flag) {
Damien Miller95def091999-11-25 00:26:21 +1100599 if (tty_flag)
Ben Lindstrom6df8ef42001-03-05 07:47:23 +0000600 log("Pseudo-terminal will not be allocated because stdin is not a terminal.");
Damien Miller95def091999-11-25 00:26:21 +1100601 tty_flag = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000602 }
Damien Miller1383bd82000-04-06 12:32:37 +1000603
Ben Lindstrom8a432f52001-03-05 07:24:46 +0000604 /*
605 * Initialize "log" output. Since we are the client all output
606 * actually goes to stderr.
607 */
Ben Lindstrom2b646522001-04-12 16:16:57 +0000608 log_init(av[0], options.log_level == -1 ? SYSLOG_LEVEL_INFO : options.log_level,
609 SYSLOG_FACILITY_USER, 1);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000610
Ben Lindstrom14f31ab2001-09-12 17:48:04 +0000611 /*
612 * Read per-user configuration file. Ignore the system wide config
613 * file if the user specifies a config file on the command line.
614 */
615 if (config != NULL) {
Ben Lindstromedc0cf22001-09-12 18:32:20 +0000616 if (!read_config_file(config, host, &options))
617 fatal("Can't open user config file %.100s: "
618 "%.100s", config, strerror(errno));
Ben Lindstrom14f31ab2001-09-12 17:48:04 +0000619 } else {
620 snprintf(buf, sizeof buf, "%.100s/%.100s", pw->pw_dir,
621 _PATH_SSH_USER_CONFFILE);
Ben Lindstromedc0cf22001-09-12 18:32:20 +0000622 (void)read_config_file(buf, host, &options);
Ben Lindstrom83f07d12001-10-03 17:22:29 +0000623
624 /* Read systemwide configuration file after use config. */
625 (void)read_config_file(_PATH_HOST_CONFIG_FILE, host, &options);
Ben Lindstrom14f31ab2001-09-12 17:48:04 +0000626 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000627
Damien Miller95def091999-11-25 00:26:21 +1100628 /* Fill configuration defaults. */
629 fill_default_options(&options);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000630
Damien Miller95def091999-11-25 00:26:21 +1100631 /* reinit */
Ben Lindstrom8a432f52001-03-05 07:24:46 +0000632 log_init(av[0], options.log_level, SYSLOG_FACILITY_USER, 1);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000633
Damien Miller60bc5172001-03-19 09:38:15 +1100634 seed_rng();
635
Damien Miller95def091999-11-25 00:26:21 +1100636 if (options.user == NULL)
637 options.user = xstrdup(pw->pw_name);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000638
Damien Miller95def091999-11-25 00:26:21 +1100639 if (options.hostname != NULL)
640 host = options.hostname;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000641
Damien Miller95def091999-11-25 00:26:21 +1100642 /* Disable rhosts authentication if not running as root. */
Damien Millerbac2d8a2000-09-05 16:13:06 +1100643#ifdef HAVE_CYGWIN
644 /* Ignore uid if running under Windows */
645 if (!options.use_privileged_port) {
646#else
Damien Miller95def091999-11-25 00:26:21 +1100647 if (original_effective_uid != 0 || !options.use_privileged_port) {
Damien Millerbac2d8a2000-09-05 16:13:06 +1100648#endif
Kevin Stevesfcec7f82000-12-15 19:55:48 +0000649 debug("Rhosts Authentication disabled, "
650 "originating port will not be trusted.");
Damien Miller95def091999-11-25 00:26:21 +1100651 options.rhosts_authentication = 0;
Damien Miller95def091999-11-25 00:26:21 +1100652 }
Damien Miller5428f641999-11-25 11:54:57 +1100653 /*
654 * If using rsh has been selected, exec it now (without trying
655 * anything else). Note that we must release privileges first.
656 */
Damien Miller95def091999-11-25 00:26:21 +1100657 if (options.use_rsh) {
Damien Miller5428f641999-11-25 11:54:57 +1100658 /*
659 * Restore our superuser privileges. This must be done
660 * before permanently setting the uid.
661 */
Damien Miller95def091999-11-25 00:26:21 +1100662 restore_uid();
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000663
Damien Miller95def091999-11-25 00:26:21 +1100664 /* Switch to the original uid permanently. */
Ben Lindstrom3fcf1a22001-04-08 18:26:59 +0000665 permanently_set_uid(pw);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000666
Damien Miller95def091999-11-25 00:26:21 +1100667 /* Execute rsh. */
668 rsh_connect(host, options.user, &command);
669 fatal("rsh_connect returned");
670 }
671 /* Restore our superuser privileges. */
672 restore_uid();
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000673
Kevin Stevesfcec7f82000-12-15 19:55:48 +0000674 /* Open a connection to the remote host. */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000675
Damien Miller139d4cd2001-10-10 15:07:44 +1000676 cerr = ssh_connect(host, &hostaddr, options.port, IPv4or6,
Kevin Stevesfcec7f82000-12-15 19:55:48 +0000677 options.connection_attempts,
678 original_effective_uid != 0 || !options.use_privileged_port,
Ben Lindstrom3fcf1a22001-04-08 18:26:59 +0000679 pw, options.proxy_command);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000680
Damien Miller5428f641999-11-25 11:54:57 +1100681 /*
682 * If we successfully made the connection, load the host private key
683 * in case we will need it later for combined rsa-rhosts
684 * authentication. This must be done before releasing extra
685 * privileges, because the file is only readable by root.
686 */
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000687 sensitive_data.nkeys = 0;
688 sensitive_data.keys = NULL;
Ben Lindstromf9cedb92001-08-06 21:07:11 +0000689 if (!cerr && (options.rhosts_rsa_authentication ||
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000690 options.hostbased_authentication)) {
691 sensitive_data.nkeys = 3;
692 sensitive_data.keys = xmalloc(sensitive_data.nkeys*sizeof(Key));
693 sensitive_data.keys[0] = key_load_private_type(KEY_RSA1,
Ben Lindstromd0fca422001-03-26 13:44:06 +0000694 _PATH_HOST_KEY_FILE, "", NULL);
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000695 sensitive_data.keys[1] = key_load_private_type(KEY_DSA,
696 _PATH_HOST_DSA_KEY_FILE, "", NULL);
697 sensitive_data.keys[2] = key_load_private_type(KEY_RSA,
698 _PATH_HOST_RSA_KEY_FILE, "", NULL);
Damien Miller95def091999-11-25 00:26:21 +1100699 }
Damien Miller5428f641999-11-25 11:54:57 +1100700 /*
701 * Get rid of any extra privileges that we may have. We will no
702 * longer need them. Also, extra privileges could make it very hard
703 * to read identity files and other non-world-readable files from the
704 * user's home directory if it happens to be on a NFS volume where
705 * root is mapped to nobody.
706 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000707
Damien Miller5428f641999-11-25 11:54:57 +1100708 /*
709 * Note that some legacy systems need to postpone the following call
710 * to permanently_set_uid() until the private hostkey is destroyed
711 * with RSA_free(). Otherwise the calling user could ptrace() the
712 * process, read the private hostkey and impersonate the host.
713 * OpenBSD does not allow ptracing of setuid processes.
714 */
Ben Lindstrom3fcf1a22001-04-08 18:26:59 +0000715 permanently_set_uid(pw);
Damien Miller95def091999-11-25 00:26:21 +1100716
Damien Miller5428f641999-11-25 11:54:57 +1100717 /*
718 * Now that we are back to our own permissions, create ~/.ssh
719 * directory if it doesn\'t already exist.
720 */
Ben Lindstrom930b14a2001-08-15 23:19:21 +0000721 snprintf(buf, sizeof buf, "%.100s%s%.100s", pw->pw_dir, strcmp(pw->pw_dir, "/") ? "/" : "", _PATH_SSH_USER_DIR);
Damien Miller95def091999-11-25 00:26:21 +1100722 if (stat(buf, &st) < 0)
Damien Millerbe484b52000-07-15 14:14:16 +1000723 if (mkdir(buf, 0700) < 0)
Damien Miller95def091999-11-25 00:26:21 +1100724 error("Could not create directory '%.200s'.", buf);
725
726 /* Check if the connection failed, and try "rsh" if appropriate. */
Ben Lindstromf9cedb92001-08-06 21:07:11 +0000727 if (cerr) {
728 if (!options.fallback_to_rsh)
729 exit(1);
Damien Miller95def091999-11-25 00:26:21 +1100730 if (options.port != 0)
Ben Lindstromf9cedb92001-08-06 21:07:11 +0000731 log("Secure connection to %.100s on port %hu refused; "
732 "reverting to insecure method",
733 host, options.port);
Damien Miller95def091999-11-25 00:26:21 +1100734 else
Ben Lindstromf9cedb92001-08-06 21:07:11 +0000735 log("Secure connection to %.100s refused; "
736 "reverting to insecure method.", host);
Damien Miller95def091999-11-25 00:26:21 +1100737
Ben Lindstromf9cedb92001-08-06 21:07:11 +0000738 rsh_connect(host, options.user, &command);
739 fatal("rsh_connect returned");
Damien Miller95def091999-11-25 00:26:21 +1100740 }
Ben Lindstrom266dfdf2001-03-09 00:12:22 +0000741 /* load options.identity_files */
742 load_public_identity_files();
743
744 /* Expand ~ in known host file names. */
745 /* XXX mem-leaks: */
Damien Miller0bc1bd82000-11-13 22:57:25 +1100746 options.system_hostfile =
747 tilde_expand_filename(options.system_hostfile, original_real_uid);
748 options.user_hostfile =
749 tilde_expand_filename(options.user_hostfile, original_real_uid);
750 options.system_hostfile2 =
751 tilde_expand_filename(options.system_hostfile2, original_real_uid);
752 options.user_hostfile2 =
753 tilde_expand_filename(options.user_hostfile2, original_real_uid);
Damien Miller95def091999-11-25 00:26:21 +1100754
Damien Miller07cd5892001-11-12 10:52:03 +1100755 signal(SIGPIPE, SIG_IGN); /* ignore SIGPIPE early */
756
Damien Miller95def091999-11-25 00:26:21 +1100757 /* Log into the remote system. This never returns if the login fails. */
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000758 ssh_login(sensitive_data.keys, sensitive_data.nkeys,
759 host, (struct sockaddr *)&hostaddr, pw);
Damien Miller95def091999-11-25 00:26:21 +1100760
Ben Lindstrom5eabda32001-04-12 23:34:34 +0000761 /* We no longer need the private host keys. Clear them now. */
762 if (sensitive_data.nkeys != 0) {
763 for (i = 0; i < sensitive_data.nkeys; i++) {
764 if (sensitive_data.keys[i] != NULL) {
765 /* Destroys contents safely */
766 debug3("clear hostkey %d", i);
767 key_free(sensitive_data.keys[i]);
768 sensitive_data.keys[i] = NULL;
769 }
770 }
771 xfree(sensitive_data.keys);
772 }
Ben Lindstroma6c8a8d2001-08-06 21:42:00 +0000773 for (i = 0; i < options.num_identity_files; i++) {
774 if (options.identity_files[i]) {
775 xfree(options.identity_files[i]);
776 options.identity_files[i] = NULL;
777 }
778 if (options.identity_keys[i]) {
779 key_free(options.identity_keys[i]);
780 options.identity_keys[i] = NULL;
781 }
782 }
Damien Miller95def091999-11-25 00:26:21 +1100783
Damien Miller1383bd82000-04-06 12:32:37 +1000784 exit_status = compat20 ? ssh_session2() : ssh_session();
785 packet_close();
786 return exit_status;
787}
788
Ben Lindstrombba81212001-06-25 05:01:22 +0000789static void
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000790x11_get_proto(char **_proto, char **_data)
Damien Millerbd483e72000-04-30 10:00:53 +1000791{
792 char line[512];
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000793 static char proto[512], data[512];
Damien Millerbd483e72000-04-30 10:00:53 +1000794 FILE *f;
795 int got_data = 0, i;
Damien Miller35b13d62002-02-05 12:12:09 +1100796 char *display;
Damien Millerbd483e72000-04-30 10:00:53 +1000797
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000798 *_proto = proto;
799 *_data = data;
800 proto[0] = data[0] = '\0';
Damien Miller35b13d62002-02-05 12:12:09 +1100801 if (options.xauth_location && (display = getenv("DISPLAY"))) {
Damien Millerd3a18572000-06-07 19:55:44 +1000802 /* Try to get Xauthority information for the display. */
Damien Miller35b13d62002-02-05 12:12:09 +1100803 if (strncmp(display, "localhost:", 10) == 0)
804 /*
805 * Handle FamilyLocal case where $DISPLAY does
806 * not match an authorization entry. For this we
807 * just try "xauth list unix:displaynum.screennum".
808 * XXX: "localhost" match to determine FamilyLocal
809 * is not perfect.
810 */
811 snprintf(line, sizeof line, "%.100s list unix:%s 2>"
812 _PATH_DEVNULL, options.xauth_location, display+10);
813 else
814 snprintf(line, sizeof line, "%.100s list %.200s 2>"
815 _PATH_DEVNULL, options.xauth_location, display);
816 debug2("x11_get_proto %s", line);
Damien Millerd3a18572000-06-07 19:55:44 +1000817 f = popen(line, "r");
818 if (f && fgets(line, sizeof(line), f) &&
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000819 sscanf(line, "%*s %511s %511s", proto, data) == 2)
Damien Millerd3a18572000-06-07 19:55:44 +1000820 got_data = 1;
821 if (f)
822 pclose(f);
823 }
Damien Millerbd483e72000-04-30 10:00:53 +1000824 /*
825 * If we didn't get authentication data, just make up some
826 * data. The forwarding code will check the validity of the
827 * response anyway, and substitute this data. The X11
828 * server, however, will ignore this fake data and use
829 * whatever authentication mechanisms it was using otherwise
830 * for the local connection.
831 */
832 if (!got_data) {
833 u_int32_t rand = 0;
834
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000835 strlcpy(proto, "MIT-MAGIC-COOKIE-1", sizeof proto);
Damien Millerbd483e72000-04-30 10:00:53 +1000836 for (i = 0; i < 16; i++) {
837 if (i % 4 == 0)
838 rand = arc4random();
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000839 snprintf(data + 2 * i, sizeof data - 2 * i, "%02x", rand & 0xff);
Damien Millerbd483e72000-04-30 10:00:53 +1000840 rand >>= 8;
841 }
842 }
843}
844
Ben Lindstrombba81212001-06-25 05:01:22 +0000845static void
Damien Miller0bc1bd82000-11-13 22:57:25 +1100846ssh_init_forwarding(void)
847{
Kevin Steves12057502001-02-05 14:54:34 +0000848 int success = 0;
Damien Miller0bc1bd82000-11-13 22:57:25 +1100849 int i;
Kevin Steves12057502001-02-05 14:54:34 +0000850
Damien Miller0bc1bd82000-11-13 22:57:25 +1100851 /* Initiate local TCP/IP port forwardings. */
852 for (i = 0; i < options.num_local_forwards; i++) {
853 debug("Connections to local port %d forwarded to remote address %.200s:%d",
854 options.local_forwards[i].port,
855 options.local_forwards[i].host,
856 options.local_forwards[i].host_port);
Damien Millerb16461c2002-01-22 23:29:22 +1100857 success += channel_setup_local_fwd_listener(
Damien Miller0bc1bd82000-11-13 22:57:25 +1100858 options.local_forwards[i].port,
859 options.local_forwards[i].host,
860 options.local_forwards[i].host_port,
861 options.gateway_ports);
862 }
Kevin Steves12057502001-02-05 14:54:34 +0000863 if (i > 0 && success == 0)
864 error("Could not request local forwarding.");
Damien Miller0bc1bd82000-11-13 22:57:25 +1100865
866 /* Initiate remote TCP/IP port forwardings. */
867 for (i = 0; i < options.num_remote_forwards; i++) {
868 debug("Connections to remote port %d forwarded to local address %.200s:%d",
869 options.remote_forwards[i].port,
870 options.remote_forwards[i].host,
871 options.remote_forwards[i].host_port);
872 channel_request_remote_forwarding(
873 options.remote_forwards[i].port,
874 options.remote_forwards[i].host,
875 options.remote_forwards[i].host_port);
876 }
877}
878
Ben Lindstrombba81212001-06-25 05:01:22 +0000879static void
Damien Miller0bc1bd82000-11-13 22:57:25 +1100880check_agent_present(void)
881{
882 if (options.forward_agent) {
883 /* Clear agent forwarding if we don\'t have an agent. */
884 int authfd = ssh_get_authentication_socket();
885 if (authfd < 0)
886 options.forward_agent = 0;
887 else
888 ssh_close_authentication_socket(authfd);
889 }
890}
891
Ben Lindstrombba81212001-06-25 05:01:22 +0000892static int
Damien Miller1383bd82000-04-06 12:32:37 +1000893ssh_session(void)
894{
895 int type;
Damien Miller1383bd82000-04-06 12:32:37 +1000896 int interactive = 0;
897 int have_tty = 0;
898 struct winsize ws;
Damien Miller1383bd82000-04-06 12:32:37 +1000899 char *cp;
900
Damien Miller95def091999-11-25 00:26:21 +1100901 /* Enable compression if requested. */
902 if (options.compression) {
903 debug("Requesting compression at level %d.", options.compression_level);
904
905 if (options.compression_level < 1 || options.compression_level > 9)
906 fatal("Compression level must be from 1 (fast) to 9 (slow, best).");
907
908 /* Send the request. */
909 packet_start(SSH_CMSG_REQUEST_COMPRESSION);
910 packet_put_int(options.compression_level);
911 packet_send();
912 packet_write_wait();
Damien Millerdff50992002-01-22 23:16:32 +1100913 type = packet_read();
Damien Miller95def091999-11-25 00:26:21 +1100914 if (type == SSH_SMSG_SUCCESS)
915 packet_start_compression(options.compression_level);
916 else if (type == SSH_SMSG_FAILURE)
917 log("Warning: Remote host refused compression.");
918 else
919 packet_disconnect("Protocol error waiting for compression response.");
920 }
921 /* Allocate a pseudo tty if appropriate. */
922 if (tty_flag) {
923 debug("Requesting pty.");
924
925 /* Start the packet. */
926 packet_start(SSH_CMSG_REQUEST_PTY);
927
928 /* Store TERM in the packet. There is no limit on the
929 length of the string. */
930 cp = getenv("TERM");
931 if (!cp)
932 cp = "";
Ben Lindstrom664408d2001-06-09 01:42:01 +0000933 packet_put_cstring(cp);
Damien Miller95def091999-11-25 00:26:21 +1100934
935 /* Store window size in the packet. */
936 if (ioctl(fileno(stdin), TIOCGWINSZ, &ws) < 0)
937 memset(&ws, 0, sizeof(ws));
938 packet_put_int(ws.ws_row);
939 packet_put_int(ws.ws_col);
940 packet_put_int(ws.ws_xpixel);
941 packet_put_int(ws.ws_ypixel);
942
943 /* Store tty modes in the packet. */
Ben Lindstromae8e2d32001-04-14 23:13:02 +0000944 tty_make_modes(fileno(stdin), NULL);
Damien Miller95def091999-11-25 00:26:21 +1100945
946 /* Send the packet, and wait for it to leave. */
947 packet_send();
948 packet_write_wait();
949
950 /* Read response from the server. */
Damien Millerdff50992002-01-22 23:16:32 +1100951 type = packet_read();
Damien Miller450a7a12000-03-26 13:04:51 +1000952 if (type == SSH_SMSG_SUCCESS) {
Damien Miller95def091999-11-25 00:26:21 +1100953 interactive = 1;
Damien Miller1383bd82000-04-06 12:32:37 +1000954 have_tty = 1;
Damien Miller450a7a12000-03-26 13:04:51 +1000955 } else if (type == SSH_SMSG_FAILURE)
Damien Miller95def091999-11-25 00:26:21 +1100956 log("Warning: Remote host failed or refused to allocate a pseudo tty.");
957 else
958 packet_disconnect("Protocol error waiting for pty request response.");
959 }
960 /* Request X11 forwarding if enabled and DISPLAY is set. */
961 if (options.forward_x11 && getenv("DISPLAY") != NULL) {
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000962 char *proto, *data;
Damien Millerbd483e72000-04-30 10:00:53 +1000963 /* Get reasonable local authentication information. */
Ben Lindstrom4a4bd712001-12-06 17:45:19 +0000964 x11_get_proto(&proto, &data);
Damien Millerbd483e72000-04-30 10:00:53 +1000965 /* Request forwarding with authentication spoofing. */
Damien Miller95def091999-11-25 00:26:21 +1100966 debug("Requesting X11 forwarding with authentication spoofing.");
Damien Millerbd483e72000-04-30 10:00:53 +1000967 x11_request_forwarding_with_spoofing(0, proto, data);
Damien Miller95def091999-11-25 00:26:21 +1100968
969 /* Read response from the server. */
Damien Millerdff50992002-01-22 23:16:32 +1100970 type = packet_read();
Damien Miller95def091999-11-25 00:26:21 +1100971 if (type == SSH_SMSG_SUCCESS) {
Damien Miller95def091999-11-25 00:26:21 +1100972 interactive = 1;
Damien Millerbd483e72000-04-30 10:00:53 +1000973 } else if (type == SSH_SMSG_FAILURE) {
Damien Miller95def091999-11-25 00:26:21 +1100974 log("Warning: Remote host denied X11 forwarding.");
Damien Millerbd483e72000-04-30 10:00:53 +1000975 } else {
Damien Miller95def091999-11-25 00:26:21 +1100976 packet_disconnect("Protocol error waiting for X11 forwarding");
Damien Millerbd483e72000-04-30 10:00:53 +1000977 }
Damien Miller95def091999-11-25 00:26:21 +1100978 }
979 /* Tell the packet module whether this is an interactive session. */
Ben Lindstrombf555ba2001-01-18 02:04:35 +0000980 packet_set_interactive(interactive);
Damien Miller95def091999-11-25 00:26:21 +1100981
982 /* Request authentication agent forwarding if appropriate. */
Damien Miller0bc1bd82000-11-13 22:57:25 +1100983 check_agent_present();
984
Damien Miller95def091999-11-25 00:26:21 +1100985 if (options.forward_agent) {
986 debug("Requesting authentication agent forwarding.");
987 auth_request_forwarding();
988
989 /* Read response from the server. */
Damien Millerdff50992002-01-22 23:16:32 +1100990 type = packet_read();
Damien Miller48b03fc2002-01-22 23:11:40 +1100991 packet_check_eom();
Damien Miller95def091999-11-25 00:26:21 +1100992 if (type != SSH_SMSG_SUCCESS)
993 log("Warning: Remote host denied authentication agent forwarding.");
994 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000995
Damien Miller0bc1bd82000-11-13 22:57:25 +1100996 /* Initiate port forwardings. */
997 ssh_init_forwarding();
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000998
Damien Miller5428f641999-11-25 11:54:57 +1100999 /* If requested, let ssh continue in the background. */
Damien Miller4af51302000-04-16 11:18:38 +10001000 if (fork_after_authentication_flag)
Damien Miller5428f641999-11-25 11:54:57 +11001001 if (daemon(1, 1) < 0)
1002 fatal("daemon() failed: %.200s", strerror(errno));
1003
1004 /*
1005 * If a command was specified on the command line, execute the
1006 * command now. Otherwise request the server to start a shell.
1007 */
Damien Miller95def091999-11-25 00:26:21 +11001008 if (buffer_len(&command) > 0) {
1009 int len = buffer_len(&command);
1010 if (len > 900)
1011 len = 900;
Damien Miller5a6b4fe2001-12-21 14:56:54 +11001012 debug("Sending command: %.*s", len, (u_char *)buffer_ptr(&command));
Damien Miller95def091999-11-25 00:26:21 +11001013 packet_start(SSH_CMSG_EXEC_CMD);
1014 packet_put_string(buffer_ptr(&command), buffer_len(&command));
1015 packet_send();
1016 packet_write_wait();
1017 } else {
1018 debug("Requesting shell.");
1019 packet_start(SSH_CMSG_EXEC_SHELL);
1020 packet_send();
1021 packet_write_wait();
1022 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001023
Damien Miller95def091999-11-25 00:26:21 +11001024 /* Enter the interactive session. */
Ben Lindstrom2b1f71b2001-06-05 20:32:21 +00001025 return client_loop(have_tty, tty_flag ?
1026 options.escape_char : SSH_ESCAPECHAR_NONE, 0);
Damien Miller1383bd82000-04-06 12:32:37 +10001027}
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001028
Ben Lindstrombba81212001-06-25 05:01:22 +00001029static void
Damien Miller630d6f42002-01-22 23:17:30 +11001030client_subsystem_reply(int type, u_int32_t seq, void *ctxt)
Ben Lindstrom1e7d3062001-02-09 02:36:43 +00001031{
1032 int id, len;
1033
1034 id = packet_get_int();
1035 len = buffer_len(&command);
Ben Lindstrom4040fe12001-03-05 06:52:57 +00001036 if (len > 900)
1037 len = 900;
Damien Miller48b03fc2002-01-22 23:11:40 +11001038 packet_check_eom();
Ben Lindstrom1e7d3062001-02-09 02:36:43 +00001039 if (type == SSH2_MSG_CHANNEL_FAILURE)
1040 fatal("Request for subsystem '%.*s' failed on channel %d",
Damien Miller5a6b4fe2001-12-21 14:56:54 +11001041 len, (u_char *)buffer_ptr(&command), id);
Ben Lindstrom1e7d3062001-02-09 02:36:43 +00001042}
1043
Ben Lindstromf558cf62001-09-20 23:13:49 +00001044/* request pty/x11/agent/tcpfwd/shell for channel */
Ben Lindstrombba81212001-06-25 05:01:22 +00001045static void
Ben Lindstromf558cf62001-09-20 23:13:49 +00001046ssh_session2_setup(int id, void *arg)
Damien Miller1383bd82000-04-06 12:32:37 +10001047{
1048 int len;
Ben Lindstrombf555ba2001-01-18 02:04:35 +00001049 int interactive = 0;
Ben Lindstromae8e2d32001-04-14 23:13:02 +00001050 struct termios tio;
Ben Lindstrombf555ba2001-01-18 02:04:35 +00001051
Ben Lindstromf558cf62001-09-20 23:13:49 +00001052 debug("ssh_session2_setup: id %d", id);
Damien Miller1383bd82000-04-06 12:32:37 +10001053
Damien Miller1383bd82000-04-06 12:32:37 +10001054 if (tty_flag) {
1055 struct winsize ws;
1056 char *cp;
1057 cp = getenv("TERM");
1058 if (!cp)
1059 cp = "";
1060 /* Store window size in the packet. */
1061 if (ioctl(fileno(stdin), TIOCGWINSZ, &ws) < 0)
1062 memset(&ws, 0, sizeof(ws));
1063
1064 channel_request_start(id, "pty-req", 0);
1065 packet_put_cstring(cp);
1066 packet_put_int(ws.ws_col);
1067 packet_put_int(ws.ws_row);
1068 packet_put_int(ws.ws_xpixel);
1069 packet_put_int(ws.ws_ypixel);
Ben Lindstromae8e2d32001-04-14 23:13:02 +00001070 tio = get_saved_tio();
1071 tty_make_modes(/*ignored*/ 0, &tio);
Damien Miller1383bd82000-04-06 12:32:37 +10001072 packet_send();
Ben Lindstrombf555ba2001-01-18 02:04:35 +00001073 interactive = 1;
Damien Miller1383bd82000-04-06 12:32:37 +10001074 /* XXX wait for reply */
1075 }
Damien Millerbd483e72000-04-30 10:00:53 +10001076 if (options.forward_x11 &&
1077 getenv("DISPLAY") != NULL) {
Ben Lindstrom4a4bd712001-12-06 17:45:19 +00001078 char *proto, *data;
Damien Millerbd483e72000-04-30 10:00:53 +10001079 /* Get reasonable local authentication information. */
Ben Lindstrom4a4bd712001-12-06 17:45:19 +00001080 x11_get_proto(&proto, &data);
Damien Millerbd483e72000-04-30 10:00:53 +10001081 /* Request forwarding with authentication spoofing. */
1082 debug("Requesting X11 forwarding with authentication spoofing.");
1083 x11_request_forwarding_with_spoofing(id, proto, data);
Ben Lindstrombf555ba2001-01-18 02:04:35 +00001084 interactive = 1;
Damien Millerbd483e72000-04-30 10:00:53 +10001085 /* XXX wait for reply */
1086 }
1087
Damien Miller0bc1bd82000-11-13 22:57:25 +11001088 check_agent_present();
1089 if (options.forward_agent) {
1090 debug("Requesting authentication agent forwarding.");
1091 channel_request_start(id, "auth-agent-req@openssh.com", 0);
1092 packet_send();
1093 }
1094
Damien Miller1383bd82000-04-06 12:32:37 +10001095 len = buffer_len(&command);
1096 if (len > 0) {
1097 if (len > 900)
1098 len = 900;
Damien Miller832562e2001-01-30 09:30:01 +11001099 if (subsystem_flag) {
Damien Miller5a6b4fe2001-12-21 14:56:54 +11001100 debug("Sending subsystem: %.*s", len, (u_char *)buffer_ptr(&command));
Ben Lindstrom1e7d3062001-02-09 02:36:43 +00001101 channel_request_start(id, "subsystem", /*want reply*/ 1);
1102 /* register callback for reply */
1103 /* XXX we asume that client_loop has already been called */
1104 dispatch_set(SSH2_MSG_CHANNEL_FAILURE, &client_subsystem_reply);
1105 dispatch_set(SSH2_MSG_CHANNEL_SUCCESS, &client_subsystem_reply);
Damien Miller832562e2001-01-30 09:30:01 +11001106 } else {
Damien Miller5a6b4fe2001-12-21 14:56:54 +11001107 debug("Sending command: %.*s", len, (u_char *)buffer_ptr(&command));
Damien Miller832562e2001-01-30 09:30:01 +11001108 channel_request_start(id, "exec", 0);
1109 }
Ben Lindstrom4040fe12001-03-05 06:52:57 +00001110 packet_put_string(buffer_ptr(&command), buffer_len(&command));
Damien Miller1383bd82000-04-06 12:32:37 +10001111 packet_send();
1112 } else {
Damien Millera500cd62002-02-08 22:04:26 +11001113 channel_request_start(id, "shell", 0);
1114 packet_send();
Damien Miller1383bd82000-04-06 12:32:37 +10001115 }
Ben Lindstrom1e7d3062001-02-09 02:36:43 +00001116
Ben Lindstrombf555ba2001-01-18 02:04:35 +00001117 packet_set_interactive(interactive);
Damien Miller1383bd82000-04-06 12:32:37 +10001118}
1119
Ben Lindstromf558cf62001-09-20 23:13:49 +00001120/* open new channel for a session */
Ben Lindstrombba81212001-06-25 05:01:22 +00001121static int
Ben Lindstromf558cf62001-09-20 23:13:49 +00001122ssh_session2_open(void)
Damien Miller1383bd82000-04-06 12:32:37 +10001123{
Ben Lindstrom99c73b32001-05-05 04:09:47 +00001124 Channel *c;
1125 int window, packetmax, in, out, err;
Damien Millerad833b32000-08-23 10:46:23 +10001126
Damien Millercaf6dd62000-08-29 11:33:50 +11001127 if (stdin_null_flag) {
Ben Lindstrom31ca54a2001-02-09 02:11:24 +00001128 in = open(_PATH_DEVNULL, O_RDONLY);
Damien Millercaf6dd62000-08-29 11:33:50 +11001129 } else {
1130 in = dup(STDIN_FILENO);
1131 }
1132 out = dup(STDOUT_FILENO);
1133 err = dup(STDERR_FILENO);
1134
1135 if (in < 0 || out < 0 || err < 0)
1136 fatal("dup() in/out/err failed");
1137
Damien Miller69b69aa2000-10-28 14:19:58 +11001138 /* enable nonblocking unless tty */
1139 if (!isatty(in))
1140 set_nonblock(in);
1141 if (!isatty(out))
1142 set_nonblock(out);
1143 if (!isatty(err))
1144 set_nonblock(err);
1145
Damien Millere4340be2000-09-16 13:29:08 +11001146 window = CHAN_SES_WINDOW_DEFAULT;
1147 packetmax = CHAN_SES_PACKET_DEFAULT;
Damien Miller19a59452002-02-19 15:20:57 +11001148 if (tty_flag) {
1149 window >>= 1;
1150 packetmax >>= 1;
Damien Miller1383bd82000-04-06 12:32:37 +10001151 }
Ben Lindstrom99c73b32001-05-05 04:09:47 +00001152 c = channel_new(
Damien Miller1383bd82000-04-06 12:32:37 +10001153 "session", SSH_CHANNEL_OPENING, in, out, err,
Damien Millere4340be2000-09-16 13:29:08 +11001154 window, packetmax, CHAN_EXTENDED_WRITE,
Damien Miller69b69aa2000-10-28 14:19:58 +11001155 xstrdup("client-session"), /*nonblock*/0);
Damien Miller1383bd82000-04-06 12:32:37 +10001156
Ben Lindstromf558cf62001-09-20 23:13:49 +00001157 debug3("ssh_session2_open: channel_new: %d", c->self);
Ben Lindstrom4c3f77d2001-04-05 23:37:36 +00001158
Ben Lindstrom5ec26452001-06-09 00:18:51 +00001159 channel_send_open(c->self);
Ben Lindstromf558cf62001-09-20 23:13:49 +00001160 if (!no_shell_flag)
Damien Miller67f0bc02002-02-05 12:23:08 +11001161 channel_register_confirm(c->self, ssh_session2_setup);
Damien Miller1383bd82000-04-06 12:32:37 +10001162
Ben Lindstrom99c73b32001-05-05 04:09:47 +00001163 return c->self;
Ben Lindstrom4c3f77d2001-04-05 23:37:36 +00001164}
1165
Ben Lindstrombba81212001-06-25 05:01:22 +00001166static int
Ben Lindstrom4c3f77d2001-04-05 23:37:36 +00001167ssh_session2(void)
1168{
Ben Lindstromf558cf62001-09-20 23:13:49 +00001169 int id = -1;
Ben Lindstrom4c3f77d2001-04-05 23:37:36 +00001170
1171 /* XXX should be pre-session */
1172 ssh_init_forwarding();
1173
Ben Lindstromf558cf62001-09-20 23:13:49 +00001174 if (!no_shell_flag || (datafellows & SSH_BUG_DUMMYCHAN))
1175 id = ssh_session2_open();
Ben Lindstrom4c3f77d2001-04-05 23:37:36 +00001176
1177 /* If requested, let ssh continue in the background. */
1178 if (fork_after_authentication_flag)
1179 if (daemon(1, 1) < 0)
1180 fatal("daemon() failed: %.200s", strerror(errno));
1181
Ben Lindstrom2b1f71b2001-06-05 20:32:21 +00001182 return client_loop(tty_flag, tty_flag ?
1183 options.escape_char : SSH_ESCAPECHAR_NONE, id);
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001184}
Damien Miller0bc1bd82000-11-13 22:57:25 +11001185
Ben Lindstrombba81212001-06-25 05:01:22 +00001186static void
Ben Lindstrom266dfdf2001-03-09 00:12:22 +00001187load_public_identity_files(void)
1188{
1189 char *filename;
1190 Key *public;
Ben Lindstrom711b04a2001-08-06 21:12:42 +00001191 int i = 0;
Ben Lindstrom266dfdf2001-03-09 00:12:22 +00001192
Ben Lindstrom711b04a2001-08-06 21:12:42 +00001193#ifdef SMARTCARD
Ben Lindstromf7db3bb2001-08-06 21:35:51 +00001194 if (options.smartcard_device != NULL &&
Ben Lindstrom711b04a2001-08-06 21:12:42 +00001195 options.num_identity_files + 1 < SSH_MAX_IDENTITY_FILES &&
Ben Lindstromae996bf2001-08-06 21:27:53 +00001196 (public = sc_get_key(options.smartcard_device)) != NULL ) {
Ben Lindstrom711b04a2001-08-06 21:12:42 +00001197 Key *new;
1198
1199 if (options.num_identity_files + 2 > SSH_MAX_IDENTITY_FILES)
1200 options.num_identity_files = SSH_MAX_IDENTITY_FILES - 2;
1201 memmove(&options.identity_files[2], &options.identity_files[0],
1202 sizeof(char *) * options.num_identity_files);
1203 options.num_identity_files += 2;
1204 i = 2;
1205
1206 /* XXX ssh1 vs ssh2 */
1207 new = key_new(KEY_RSA);
1208 new->flags = KEY_FLAG_EXT;
1209 BN_copy(new->rsa->n, public->rsa->n);
1210 BN_copy(new->rsa->e, public->rsa->e);
1211 RSA_set_method(new->rsa, sc_get_engine());
1212 options.identity_keys[0] = new;
1213 options.identity_files[0] = xstrdup("smartcard rsa key");;
1214
1215 new = key_new(KEY_RSA1);
1216 new->flags = KEY_FLAG_EXT;
1217 BN_copy(new->rsa->n, public->rsa->n);
1218 BN_copy(new->rsa->e, public->rsa->e);
1219 RSA_set_method(new->rsa, sc_get_engine());
1220 options.identity_keys[1] = new;
1221 options.identity_files[1] = xstrdup("smartcard rsa1 key");
1222
1223 key_free(public);
1224 }
Ben Lindstromffce1472001-08-06 21:57:31 +00001225#endif /* SMARTCARD */
Ben Lindstrom711b04a2001-08-06 21:12:42 +00001226 for (; i < options.num_identity_files; i++) {
Ben Lindstrom266dfdf2001-03-09 00:12:22 +00001227 filename = tilde_expand_filename(options.identity_files[i],
1228 original_real_uid);
Ben Lindstromd0fca422001-03-26 13:44:06 +00001229 public = key_load_public(filename, NULL);
Ben Lindstrom266dfdf2001-03-09 00:12:22 +00001230 debug("identity file %s type %d", filename,
1231 public ? public->type : -1);
1232 xfree(options.identity_files[i]);
1233 options.identity_files[i] = filename;
1234 options.identity_keys[i] = public;
1235 }
1236}