blob: 831ac592fe9703877840ae9185e4557605988081 [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 *
3 * hostfile.c
4 *
5 * Author: Tatu Ylonen <ylo@cs.hut.fi>
6 *
7 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
8 * All rights reserved
9 *
10 * Created: Thu Jun 29 07:10:56 1995 ylo
11 *
12 * Functions for manipulating the known hosts files.
13 *
14 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100015
16#include "includes.h"
Damien Miller34132e52000-01-14 15:45:46 +110017RCSID("$OpenBSD: hostfile.c,v 1.11 2000/01/04 00:07:59 markus Exp $");
Damien Millerd4a8b7e1999-10-27 13:42:43 +100018
19#include "packet.h"
20#include "ssh.h"
21
Damien Miller5428f641999-11-25 11:54:57 +110022/*
23 * Reads a multiple-precision integer in hex from the buffer, and advances
24 * the pointer. The integer must already be initialized. This function is
25 * permitted to modify the buffer. This leaves *cpp to point just beyond the
26 * last processed (and maybe modified) character. Note that this may modify
27 * the buffer containing the number.
28 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100029
30int
Damien Miller95def091999-11-25 00:26:21 +110031auth_rsa_read_bignum(char **cpp, BIGNUM * value)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100032{
Damien Miller95def091999-11-25 00:26:21 +110033 char *cp = *cpp;
34 int len, old;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100035
Damien Miller95def091999-11-25 00:26:21 +110036 /* Skip any leading whitespace. */
Damien Miller5428f641999-11-25 11:54:57 +110037 for (; *cp == ' ' || *cp == '\t'; cp++)
38 ;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100039
Damien Miller95def091999-11-25 00:26:21 +110040 /* Check that it begins with a hex digit. */
41 if (*cp < '0' || *cp > '9')
42 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100043
Damien Miller95def091999-11-25 00:26:21 +110044 /* Save starting position. */
45 *cpp = cp;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100046
Damien Miller95def091999-11-25 00:26:21 +110047 /* Move forward until all hex digits skipped. */
Damien Miller5428f641999-11-25 11:54:57 +110048 for (; *cp >= '0' && *cp <= '9'; cp++)
49 ;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100050
Damien Miller95def091999-11-25 00:26:21 +110051 /* Compute the length of the hex number. */
52 len = cp - *cpp;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100053
Damien Miller95def091999-11-25 00:26:21 +110054 /* Save the old terminating character, and replace it by \0. */
55 old = *cp;
56 *cp = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100057
Damien Miller95def091999-11-25 00:26:21 +110058 /* Parse the number. */
59 if (BN_dec2bn(&value, *cpp) == 0)
60 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100061
Damien Miller95def091999-11-25 00:26:21 +110062 /* Restore old terminating character. */
63 *cp = old;
64
65 /* Move beyond the number and return success. */
66 *cpp = cp;
67 return 1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100068}
69
Damien Miller5428f641999-11-25 11:54:57 +110070/*
71 * Parses an RSA key (number of bits, e, n) from a string. Moves the pointer
72 * over the key. Skips any whitespace at the beginning and at end.
73 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100074
75int
Damien Miller95def091999-11-25 00:26:21 +110076auth_rsa_read_key(char **cpp, unsigned int *bitsp, BIGNUM * e, BIGNUM * n)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100077{
Damien Miller95def091999-11-25 00:26:21 +110078 unsigned int bits;
79 char *cp;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100080
Damien Miller95def091999-11-25 00:26:21 +110081 /* Skip leading whitespace. */
Damien Miller5428f641999-11-25 11:54:57 +110082 for (cp = *cpp; *cp == ' ' || *cp == '\t'; cp++)
83 ;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100084
Damien Miller95def091999-11-25 00:26:21 +110085 /* Get number of bits. */
86 if (*cp < '0' || *cp > '9')
87 return 0; /* Bad bit count... */
88 for (bits = 0; *cp >= '0' && *cp <= '9'; cp++)
89 bits = 10 * bits + *cp - '0';
Damien Millerd4a8b7e1999-10-27 13:42:43 +100090
Damien Miller95def091999-11-25 00:26:21 +110091 /* Get public exponent. */
92 if (!auth_rsa_read_bignum(&cp, e))
93 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100094
Damien Miller95def091999-11-25 00:26:21 +110095 /* Get public modulus. */
96 if (!auth_rsa_read_bignum(&cp, n))
97 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100098
Damien Miller95def091999-11-25 00:26:21 +110099 /* Skip trailing whitespace. */
Damien Miller5428f641999-11-25 11:54:57 +1100100 for (; *cp == ' ' || *cp == '\t'; cp++)
101 ;
Damien Miller95def091999-11-25 00:26:21 +1100102
103 /* Return results. */
104 *cpp = cp;
105 *bitsp = bits;
106 return 1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000107}
108
Damien Miller5428f641999-11-25 11:54:57 +1100109/*
110 * Tries to match the host name (which must be in all lowercase) against the
111 * comma-separated sequence of subpatterns (each possibly preceded by ! to
112 * indicate negation). Returns true if there is a positive match; zero
113 * otherwise.
114 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000115
116int
117match_hostname(const char *host, const char *pattern, unsigned int len)
118{
Damien Miller95def091999-11-25 00:26:21 +1100119 char sub[1024];
120 int negated;
121 int got_positive;
122 unsigned int i, subi;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000123
Damien Miller95def091999-11-25 00:26:21 +1100124 got_positive = 0;
125 for (i = 0; i < len;) {
126 /* Check if the subpattern is negated. */
127 if (pattern[i] == '!') {
128 negated = 1;
129 i++;
130 } else
131 negated = 0;
132
Damien Miller5428f641999-11-25 11:54:57 +1100133 /*
134 * Extract the subpattern up to a comma or end. Convert the
135 * subpattern to lowercase.
136 */
Damien Miller95def091999-11-25 00:26:21 +1100137 for (subi = 0;
Damien Miller5428f641999-11-25 11:54:57 +1100138 i < len && subi < sizeof(sub) - 1 && pattern[i] != ',';
Damien Miller95def091999-11-25 00:26:21 +1100139 subi++, i++)
140 sub[subi] = isupper(pattern[i]) ? tolower(pattern[i]) : pattern[i];
141 /* If subpattern too long, return failure (no match). */
142 if (subi >= sizeof(sub) - 1)
143 return 0;
144
Damien Miller5428f641999-11-25 11:54:57 +1100145 /* If the subpattern was terminated by a comma, skip the comma. */
Damien Miller95def091999-11-25 00:26:21 +1100146 if (i < len && pattern[i] == ',')
147 i++;
148
149 /* Null-terminate the subpattern. */
150 sub[subi] = '\0';
151
152 /* Try to match the subpattern against the host name. */
153 if (match_pattern(host, sub)) {
154 if (negated)
Damien Miller5428f641999-11-25 11:54:57 +1100155 return 0; /* Fail */
Damien Miller95def091999-11-25 00:26:21 +1100156 else
157 got_positive = 1;
158 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000159 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000160
Damien Miller5428f641999-11-25 11:54:57 +1100161 /*
162 * Return success if got a positive match. If there was a negative
163 * match, we have already returned zero and never get here.
164 */
Damien Miller95def091999-11-25 00:26:21 +1100165 return got_positive;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000166}
167
Damien Miller5428f641999-11-25 11:54:57 +1100168/*
169 * Checks whether the given host (which must be in all lowercase) is already
170 * in the list of our known hosts. Returns HOST_OK if the host is known and
171 * has the specified key, HOST_NEW if the host is not known, and HOST_CHANGED
172 * if the host is known but used to have a different host key.
173 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000174
175HostStatus
Damien Miller7e8e8201999-11-16 13:37:16 +1100176check_host_in_hostfile(const char *filename, const char *host,
Damien Miller95def091999-11-25 00:26:21 +1100177 BIGNUM * e, BIGNUM * n, BIGNUM * ke, BIGNUM * kn)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000178{
Damien Miller95def091999-11-25 00:26:21 +1100179 FILE *f;
180 char line[8192];
181 int linenum = 0;
182 unsigned int bits, kbits, hostlen;
183 char *cp, *cp2;
184 HostStatus end_return;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000185
Damien Miller95def091999-11-25 00:26:21 +1100186 /* Open the file containing the list of known hosts. */
187 f = fopen(filename, "r");
188 if (!f)
189 return HOST_NEW;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000190
Damien Miller95def091999-11-25 00:26:21 +1100191 /* Cache the length of the host name. */
192 hostlen = strlen(host);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000193
Damien Miller5428f641999-11-25 11:54:57 +1100194 /*
195 * Return value when the loop terminates. This is set to
196 * HOST_CHANGED if we have seen a different key for the host and have
197 * not found the proper one.
198 */
Damien Miller95def091999-11-25 00:26:21 +1100199 end_return = HOST_NEW;
Damien Miller7e8e8201999-11-16 13:37:16 +1100200
Damien Miller95def091999-11-25 00:26:21 +1100201 /* size of modulus 'n' */
202 bits = BN_num_bits(n);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000203
Damien Miller95def091999-11-25 00:26:21 +1100204 /* Go trough the file. */
205 while (fgets(line, sizeof(line), f)) {
206 cp = line;
207 linenum++;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000208
Damien Miller5428f641999-11-25 11:54:57 +1100209 /* Skip any leading whitespace, comments and empty lines. */
210 for (; *cp == ' ' || *cp == '\t'; cp++)
211 ;
Damien Miller95def091999-11-25 00:26:21 +1100212 if (!*cp || *cp == '#' || *cp == '\n')
213 continue;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000214
Damien Miller95def091999-11-25 00:26:21 +1100215 /* Find the end of the host name portion. */
Damien Miller5428f641999-11-25 11:54:57 +1100216 for (cp2 = cp; *cp2 && *cp2 != ' ' && *cp2 != '\t'; cp2++)
217 ;
Damien Miller7e8e8201999-11-16 13:37:16 +1100218
Damien Miller95def091999-11-25 00:26:21 +1100219 /* Check if the host name matches. */
220 if (!match_hostname(host, cp, (unsigned int) (cp2 - cp)))
221 continue;
222
223 /* Got a match. Skip host name. */
224 cp = cp2;
225
Damien Miller5428f641999-11-25 11:54:57 +1100226 /*
227 * Extract the key from the line. This will skip any leading
228 * whitespace. Ignore badly formatted lines.
229 */
Damien Miller95def091999-11-25 00:26:21 +1100230 if (!auth_rsa_read_key(&cp, &kbits, ke, kn))
231 continue;
232
233 if (kbits != BN_num_bits(kn)) {
Damien Milleraae6c611999-12-06 11:47:28 +1100234 error("Warning: %s, line %d: keysize mismatch for host %s: "
235 "actual %d vs. announced %d.",
236 filename, linenum, host, BN_num_bits(kn), kbits);
Damien Miller95def091999-11-25 00:26:21 +1100237 error("Warning: replace %d with %d in %s, line %d.",
238 kbits, BN_num_bits(kn), filename, linenum);
239 }
240 /* Check if the current key is the same as the given key. */
241 if (BN_cmp(ke, e) == 0 && BN_cmp(kn, n) == 0) {
242 /* Ok, they match. */
243 fclose(f);
244 return HOST_OK;
245 }
Damien Miller5428f641999-11-25 11:54:57 +1100246 /*
247 * They do not match. We will continue to go through the
248 * file; however, we note that we will not return that it is
249 * new.
250 */
Damien Miller95def091999-11-25 00:26:21 +1100251 end_return = HOST_CHANGED;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000252 }
Damien Miller95def091999-11-25 00:26:21 +1100253 /* Clear variables and close the file. */
254 fclose(f);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000255
Damien Miller5428f641999-11-25 11:54:57 +1100256 /*
257 * Return either HOST_NEW or HOST_CHANGED, depending on whether we
258 * saw a different key for the host.
259 */
Damien Miller95def091999-11-25 00:26:21 +1100260 return end_return;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000261}
262
Damien Miller5428f641999-11-25 11:54:57 +1100263/*
264 * Appends an entry to the host file. Returns false if the entry could not
265 * be appended.
266 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000267
268int
269add_host_to_hostfile(const char *filename, const char *host,
Damien Miller95def091999-11-25 00:26:21 +1100270 BIGNUM * e, BIGNUM * n)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000271{
Damien Miller95def091999-11-25 00:26:21 +1100272 FILE *f;
273 char *buf;
274 unsigned int bits;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000275
Damien Miller95def091999-11-25 00:26:21 +1100276 /* Open the file for appending. */
277 f = fopen(filename, "a");
278 if (!f)
279 return 0;
Damien Miller7e8e8201999-11-16 13:37:16 +1100280
Damien Miller95def091999-11-25 00:26:21 +1100281 /* size of modulus 'n' */
282 bits = BN_num_bits(n);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000283
Damien Miller95def091999-11-25 00:26:21 +1100284 /* Print the host name and key to the file. */
285 fprintf(f, "%s %u ", host, bits);
286 buf = BN_bn2dec(e);
287 if (buf == NULL) {
288 error("add_host_to_hostfile: BN_bn2dec(e) failed");
289 fclose(f);
290 return 0;
291 }
292 fprintf(f, "%s ", buf);
293 free(buf);
294 buf = BN_bn2dec(n);
295 if (buf == NULL) {
296 error("add_host_to_hostfile: BN_bn2dec(n) failed");
297 fclose(f);
298 return 0;
299 }
300 fprintf(f, "%s\n", buf);
301 free(buf);
302
303 /* Close the file. */
304 fclose(f);
305 return 1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000306}