blob: ac635dff985f9003a11441019a967a086b9a7c7d [file] [log] [blame]
djm@openbsd.org14b5c632018-01-23 05:27:21 +00001/* $OpenBSD: authfd.c,v 1.106 2018/01/23 05:27:21 djm Exp $ */
Damien Millerd4a8b7e1999-10-27 13:42:43 +10002/*
Damien Miller95def091999-11-25 00:26:21 +11003 * Author: Tatu Ylonen <ylo@cs.hut.fi>
Damien Miller95def091999-11-25 00:26:21 +11004 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
5 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11006 * Functions for connecting the local authentication agent.
Damien Miller4af51302000-04-16 11:18:38 +10007 *
Damien Millere4340be2000-09-16 13:29:08 +11008 * As far as I am concerned, the code I have written for this software
9 * can be used freely for any purpose. Any derived versions of this
10 * software must be clearly marked as such, and if the derived work is
11 * incompatible with the protocol description in the RFC file, it must be
12 * called by a name other than "ssh" or "Secure Shell".
Damien Millerad833b32000-08-23 10:46:23 +100013 *
Damien Millere4340be2000-09-16 13:29:08 +110014 * SSH2 implementation,
15 * Copyright (c) 2000 Markus Friedl. All rights reserved.
16 *
17 * Redistribution and use in source and binary forms, with or without
18 * modification, are permitted provided that the following conditions
19 * are met:
20 * 1. Redistributions of source code must retain the above copyright
21 * notice, this list of conditions and the following disclaimer.
22 * 2. Redistributions in binary form must reproduce the above copyright
23 * notice, this list of conditions and the following disclaimer in the
24 * documentation and/or other materials provided with the distribution.
25 *
26 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
27 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
28 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
29 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
30 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
31 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
32 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
33 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
34 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Damien Miller95def091999-11-25 00:26:21 +110036 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100037
38#include "includes.h"
Damien Miller574c41f2006-03-15 11:40:10 +110039
40#include <sys/types.h>
41#include <sys/un.h>
Damien Millere3b60b52006-07-10 21:08:03 +100042#include <sys/socket.h>
Ben Lindstrom226cfa02001-01-22 05:34:40 +000043
Damien Miller57cf6382006-07-10 21:13:46 +100044#include <fcntl.h>
Damien Millere7a1e5c2006-08-05 11:34:19 +100045#include <stdlib.h>
Damien Millerd7834352006-08-05 12:39:39 +100046#include <signal.h>
Damien Millerded319c2006-09-01 15:38:36 +100047#include <stdarg.h>
Damien Millere3476ed2006-07-24 14:13:33 +100048#include <string.h>
Damien Millere6b3b612006-07-24 14:01:23 +100049#include <unistd.h>
djm@openbsd.org141efe42015-01-14 20:05:27 +000050#include <errno.h>
Damien Miller57cf6382006-07-10 21:13:46 +100051
Damien Millerd7834352006-08-05 12:39:39 +100052#include "xmalloc.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100053#include "ssh.h"
djm@openbsd.org141efe42015-01-14 20:05:27 +000054#include "sshbuf.h"
55#include "sshkey.h"
Damien Miller994cf142000-07-21 10:19:44 +100056#include "authfd.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000057#include "cipher.h"
Damien Miller62cee002000-09-23 17:15:56 +110058#include "compat.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000059#include "log.h"
60#include "atomicio.h"
Damien Miller3f941882006-03-31 23:13:02 +110061#include "misc.h"
djm@openbsd.org141efe42015-01-14 20:05:27 +000062#include "ssherr.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100063
djm@openbsd.org141efe42015-01-14 20:05:27 +000064#define MAX_AGENT_IDENTITIES 2048 /* Max keys in agent reply */
65#define MAX_AGENT_REPLY_LEN (256 * 1024) /* Max bytes in agent reply */
Damien Miller37023962000-07-11 17:31:38 +100066
Damien Miller874d77b2000-10-14 16:23:11 +110067/* macro to check for "agent failure" message */
68#define agent_failed(x) \
djm@openbsd.org141efe42015-01-14 20:05:27 +000069 ((x == SSH_AGENT_FAILURE) || \
70 (x == SSH_COM_AGENT2_FAILURE) || \
Ben Lindstromcb72e4f2002-06-21 00:41:51 +000071 (x == SSH2_AGENT_FAILURE))
Damien Miller874d77b2000-10-14 16:23:11 +110072
djm@openbsd.org141efe42015-01-14 20:05:27 +000073/* Convert success/failure response from agent to a err.h status */
74static int
75decode_reply(u_char type)
Damien Miller789e95d2002-09-12 09:52:46 +100076{
djm@openbsd.org141efe42015-01-14 20:05:27 +000077 if (agent_failed(type))
78 return SSH_ERR_AGENT_FAILURE;
79 else if (type == SSH_AGENT_SUCCESS)
Damien Miller789e95d2002-09-12 09:52:46 +100080 return 0;
djm@openbsd.org141efe42015-01-14 20:05:27 +000081 else
82 return SSH_ERR_INVALID_FORMAT;
Damien Miller789e95d2002-09-12 09:52:46 +100083}
84
Damien Millerd4a8b7e1999-10-27 13:42:43 +100085/* Returns the number of the authentication fd, or -1 if there is none. */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100086int
djm@openbsd.org141efe42015-01-14 20:05:27 +000087ssh_get_authentication_socket(int *fdp)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100088{
Damien Miller95def091999-11-25 00:26:21 +110089 const char *authsocket;
djm@openbsd.org141efe42015-01-14 20:05:27 +000090 int sock, oerrno;
Damien Miller95def091999-11-25 00:26:21 +110091 struct sockaddr_un sunaddr;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100092
djm@openbsd.org141efe42015-01-14 20:05:27 +000093 if (fdp != NULL)
94 *fdp = -1;
95
Damien Miller95def091999-11-25 00:26:21 +110096 authsocket = getenv(SSH_AUTHSOCKET_ENV_NAME);
97 if (!authsocket)
djm@openbsd.org141efe42015-01-14 20:05:27 +000098 return SSH_ERR_AGENT_NOT_PRESENT;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100099
Damien Miller1d2c4562014-02-04 11:18:20 +1100100 memset(&sunaddr, 0, sizeof(sunaddr));
Damien Miller95def091999-11-25 00:26:21 +1100101 sunaddr.sun_family = AF_UNIX;
102 strlcpy(sunaddr.sun_path, authsocket, sizeof(sunaddr.sun_path));
Damien Miller10f6f6b1999-11-17 17:29:08 +1100103
djm@openbsd.org141efe42015-01-14 20:05:27 +0000104 if ((sock = socket(AF_UNIX, SOCK_STREAM, 0)) < 0)
105 return SSH_ERR_SYSTEM_ERROR;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000106
Damien Miller95def091999-11-25 00:26:21 +1100107 /* close on exec */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000108 if (fcntl(sock, F_SETFD, FD_CLOEXEC) == -1 ||
109 connect(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) < 0) {
110 oerrno = errno;
Damien Miller95def091999-11-25 00:26:21 +1100111 close(sock);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000112 errno = oerrno;
113 return SSH_ERR_SYSTEM_ERROR;
Damien Miller95def091999-11-25 00:26:21 +1100114 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000115 if (fdp != NULL)
116 *fdp = sock;
117 else
Damien Miller95def091999-11-25 00:26:21 +1100118 close(sock);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000119 return 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000120}
121
djm@openbsd.org141efe42015-01-14 20:05:27 +0000122/* Communicate with agent: send request and read reply */
Ben Lindstrombba81212001-06-25 05:01:22 +0000123static int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000124ssh_request_reply(int sock, struct sshbuf *request, struct sshbuf *reply)
Damien Miller942da032000-08-18 13:59:06 +1000125{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000126 int r;
127 size_t l, len;
Damien Miller942da032000-08-18 13:59:06 +1000128 char buf[1024];
129
130 /* Get the length of the message, and format it in the buffer. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000131 len = sshbuf_len(request);
Damien Miller3f941882006-03-31 23:13:02 +1100132 put_u32(buf, len);
Damien Miller942da032000-08-18 13:59:06 +1000133
134 /* Send the length and then the packet to the agent. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000135 if (atomicio(vwrite, sock, buf, 4) != 4 ||
136 atomicio(vwrite, sock, (u_char *)sshbuf_ptr(request),
137 sshbuf_len(request)) != sshbuf_len(request))
138 return SSH_ERR_AGENT_COMMUNICATION;
Damien Miller942da032000-08-18 13:59:06 +1000139 /*
140 * Wait for response from the agent. First read the length of the
141 * response packet.
142 */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000143 if (atomicio(read, sock, buf, 4) != 4)
144 return SSH_ERR_AGENT_COMMUNICATION;
Damien Miller942da032000-08-18 13:59:06 +1000145
146 /* Extract the length, and check it for sanity. */
Damien Miller3f941882006-03-31 23:13:02 +1100147 len = get_u32(buf);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000148 if (len > MAX_AGENT_REPLY_LEN)
149 return SSH_ERR_INVALID_FORMAT;
Damien Miller942da032000-08-18 13:59:06 +1000150
151 /* Read the rest of the response in to the buffer. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000152 sshbuf_reset(reply);
Damien Miller942da032000-08-18 13:59:06 +1000153 while (len > 0) {
154 l = len;
155 if (l > sizeof(buf))
156 l = sizeof(buf);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000157 if (atomicio(read, sock, buf, l) != l)
158 return SSH_ERR_AGENT_COMMUNICATION;
159 if ((r = sshbuf_put(reply, buf, l)) != 0)
160 return r;
Damien Miller942da032000-08-18 13:59:06 +1000161 len -= l;
162 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000163 return 0;
Damien Miller942da032000-08-18 13:59:06 +1000164}
165
Damien Miller5428f641999-11-25 11:54:57 +1100166/*
167 * Closes the agent socket if it should be closed (depends on how it was
168 * obtained). The argument must have been returned by
169 * ssh_get_authentication_socket().
170 */
Damien Miller4af51302000-04-16 11:18:38 +1000171void
Damien Miller95def091999-11-25 00:26:21 +1100172ssh_close_authentication_socket(int sock)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000173{
Damien Miller95def091999-11-25 00:26:21 +1100174 if (getenv(SSH_AUTHSOCKET_ENV_NAME))
175 close(sock);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000176}
177
Ben Lindstrom2f717042002-06-06 21:52:03 +0000178/* Lock/unlock agent */
179int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000180ssh_lock_agent(int sock, int lock, const char *password)
Ben Lindstrom2f717042002-06-06 21:52:03 +0000181{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000182 int r;
183 u_char type = lock ? SSH_AGENTC_LOCK : SSH_AGENTC_UNLOCK;
184 struct sshbuf *msg;
Ben Lindstrom2f717042002-06-06 21:52:03 +0000185
djm@openbsd.org141efe42015-01-14 20:05:27 +0000186 if ((msg = sshbuf_new()) == NULL)
187 return SSH_ERR_ALLOC_FAIL;
188 if ((r = sshbuf_put_u8(msg, type)) != 0 ||
189 (r = sshbuf_put_cstring(msg, password)) != 0)
190 goto out;
191 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
192 goto out;
193 if ((r = sshbuf_get_u8(msg, &type)) != 0)
194 goto out;
195 r = decode_reply(type);
196 out:
197 sshbuf_free(msg);
198 return r;
199}
Ben Lindstrom2f717042002-06-06 21:52:03 +0000200
djm@openbsd.org141efe42015-01-14 20:05:27 +0000201
202static int
203deserialise_identity2(struct sshbuf *ids, struct sshkey **keyp, char **commentp)
204{
205 int r;
206 char *comment = NULL;
207 const u_char *blob;
208 size_t blen;
209
210 if ((r = sshbuf_get_string_direct(ids, &blob, &blen)) != 0 ||
211 (r = sshbuf_get_cstring(ids, &comment, NULL)) != 0)
212 goto out;
213 if ((r = sshkey_from_blob(blob, blen, keyp)) != 0)
214 goto out;
215 if (commentp != NULL) {
216 *commentp = comment;
217 comment = NULL;
218 }
219 r = 0;
220 out:
221 free(comment);
222 return r;
Ben Lindstrom2f717042002-06-06 21:52:03 +0000223}
224
Damien Miller5428f641999-11-25 11:54:57 +1100225/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000226 * Fetch list of identities held by the agent.
Damien Miller5428f641999-11-25 11:54:57 +1100227 */
Damien Miller0bc1bd82000-11-13 22:57:25 +1100228int
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000229ssh_fetch_identitylist(int sock, struct ssh_identitylist **idlp)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000230{
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000231 u_char type;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000232 u_int32_t num, i;
233 struct sshbuf *msg;
234 struct ssh_identitylist *idl = NULL;
235 int r;
Damien Millerad833b32000-08-23 10:46:23 +1000236
Damien Miller5428f641999-11-25 11:54:57 +1100237 /*
238 * Send a message to the agent requesting for a list of the
239 * identities it can represent.
240 */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000241 if ((msg = sshbuf_new()) == NULL)
242 return SSH_ERR_ALLOC_FAIL;
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000243 if ((r = sshbuf_put_u8(msg, SSH2_AGENTC_REQUEST_IDENTITIES)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000244 goto out;
Damien Miller942da032000-08-18 13:59:06 +1000245
djm@openbsd.org141efe42015-01-14 20:05:27 +0000246 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
247 goto out;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000248
Damien Miller95def091999-11-25 00:26:21 +1100249 /* Get message type, and verify that we got a proper answer. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000250 if ((r = sshbuf_get_u8(msg, &type)) != 0)
251 goto out;
Damien Miller874d77b2000-10-14 16:23:11 +1100252 if (agent_failed(type)) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000253 r = SSH_ERR_AGENT_FAILURE;
254 goto out;
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000255 } else if (type != SSH2_AGENT_IDENTITIES_ANSWER) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000256 r = SSH_ERR_INVALID_FORMAT;
257 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000258 }
Damien Miller95def091999-11-25 00:26:21 +1100259
260 /* Get the number of entries in the response and check it for sanity. */
djm@openbsd.org141efe42015-01-14 20:05:27 +0000261 if ((r = sshbuf_get_u32(msg, &num)) != 0)
262 goto out;
263 if (num > MAX_AGENT_IDENTITIES) {
264 r = SSH_ERR_INVALID_FORMAT;
265 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000266 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000267 if (num == 0) {
268 r = SSH_ERR_AGENT_NO_IDENTITIES;
269 goto out;
270 }
271
272 /* Deserialise the response into a list of keys/comments */
273 if ((idl = calloc(1, sizeof(*idl))) == NULL ||
274 (idl->keys = calloc(num, sizeof(*idl->keys))) == NULL ||
275 (idl->comments = calloc(num, sizeof(*idl->comments))) == NULL) {
276 r = SSH_ERR_ALLOC_FAIL;
277 goto out;
278 }
279 for (i = 0; i < num;) {
naddy@openbsd.org3e371bd2017-05-05 10:42:49 +0000280 if ((r = deserialise_identity2(msg, &(idl->keys[i]),
281 &(idl->comments[i]))) != 0) {
282 if (r == SSH_ERR_KEY_TYPE_UNKNOWN) {
283 /* Gracefully skip unknown key types */
284 num--;
285 continue;
286 } else
287 goto out;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000288 }
289 i++;
290 }
291 idl->nkeys = num;
292 *idlp = idl;
293 idl = NULL;
294 r = 0;
295 out:
296 sshbuf_free(msg);
297 if (idl != NULL)
298 ssh_free_identitylist(idl);
299 return r;
300}
301
302void
303ssh_free_identitylist(struct ssh_identitylist *idl)
304{
305 size_t i;
306
307 if (idl == NULL)
308 return;
309 for (i = 0; i < idl->nkeys; i++) {
310 if (idl->keys != NULL)
311 sshkey_free(idl->keys[i]);
312 if (idl->comments != NULL)
313 free(idl->comments[i]);
314 }
315 free(idl);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000316}
317
Damien Miller5428f641999-11-25 11:54:57 +1100318/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000319 * Sends a challenge (typically from a server via ssh(1)) to the agent,
320 * and waits for a response from the agent.
321 * Returns true (non-zero) if the agent gave the correct answer, zero
322 * otherwise.
Damien Miller5428f641999-11-25 11:54:57 +1100323 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000324
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000325
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000326/* encode signature algoritm in flag bits, so we can keep the msg format */
327static u_int
djm@openbsd.orga98339e2017-06-28 01:09:22 +0000328agent_encode_alg(const struct sshkey *key, const char *alg)
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000329{
330 if (alg != NULL && key->type == KEY_RSA) {
331 if (strcmp(alg, "rsa-sha2-256") == 0)
332 return SSH_AGENT_RSA_SHA2_256;
333 else if (strcmp(alg, "rsa-sha2-512") == 0)
334 return SSH_AGENT_RSA_SHA2_512;
335 }
336 return 0;
337}
338
djm@openbsd.org141efe42015-01-14 20:05:27 +0000339/* ask agent to sign data, returns err.h code on error, 0 on success */
Damien Millerad833b32000-08-23 10:46:23 +1000340int
djm@openbsd.orga98339e2017-06-28 01:09:22 +0000341ssh_agent_sign(int sock, const struct sshkey *key,
djm@openbsd.org141efe42015-01-14 20:05:27 +0000342 u_char **sigp, size_t *lenp,
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000343 const u_char *data, size_t datalen, const char *alg, u_int compat)
Damien Millerad833b32000-08-23 10:46:23 +1000344{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000345 struct sshbuf *msg;
346 u_char *blob = NULL, type;
347 size_t blen = 0, len = 0;
348 u_int flags = 0;
349 int r = SSH_ERR_INTERNAL_ERROR;
Damien Millerad833b32000-08-23 10:46:23 +1000350
markus@openbsd.orgfecede02015-03-26 19:32:19 +0000351 *sigp = NULL;
352 *lenp = 0;
Damien Millerad833b32000-08-23 10:46:23 +1000353
djm@openbsd.org141efe42015-01-14 20:05:27 +0000354 if (datalen > SSH_KEY_MAX_SIGN_DATA_SIZE)
355 return SSH_ERR_INVALID_ARGUMENT;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000356 if ((msg = sshbuf_new()) == NULL)
357 return SSH_ERR_ALLOC_FAIL;
358 if ((r = sshkey_to_blob(key, &blob, &blen)) != 0)
359 goto out;
markus@openbsd.org76c9fbb2015-12-04 16:41:28 +0000360 flags |= agent_encode_alg(key, alg);
djm@openbsd.org141efe42015-01-14 20:05:27 +0000361 if ((r = sshbuf_put_u8(msg, SSH2_AGENTC_SIGN_REQUEST)) != 0 ||
362 (r = sshbuf_put_string(msg, blob, blen)) != 0 ||
363 (r = sshbuf_put_string(msg, data, datalen)) != 0 ||
364 (r = sshbuf_put_u32(msg, flags)) != 0)
365 goto out;
jsg@openbsd.orgf3a3ea12015-09-02 07:51:12 +0000366 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
djm@openbsd.org141efe42015-01-14 20:05:27 +0000367 goto out;
368 if ((r = sshbuf_get_u8(msg, &type)) != 0)
369 goto out;
Damien Miller874d77b2000-10-14 16:23:11 +1100370 if (agent_failed(type)) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000371 r = SSH_ERR_AGENT_FAILURE;
372 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000373 } else if (type != SSH2_AGENT_SIGN_RESPONSE) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000374 r = SSH_ERR_INVALID_FORMAT;
375 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000376 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000377 if ((r = sshbuf_get_string(msg, sigp, &len)) != 0)
378 goto out;
markus@openbsd.orgfecede02015-03-26 19:32:19 +0000379 *lenp = len;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000380 r = 0;
381 out:
382 if (blob != NULL) {
383 explicit_bzero(blob, blen);
384 free(blob);
385 }
386 sshbuf_free(msg);
387 return r;
Damien Millerad833b32000-08-23 10:46:23 +1000388}
389
Damien Miller994cf142000-07-21 10:19:44 +1000390/* Encode key for a message to the agent. */
391
Damien Miller994cf142000-07-21 10:19:44 +1000392
djm@openbsd.org141efe42015-01-14 20:05:27 +0000393static int
394ssh_encode_identity_ssh2(struct sshbuf *b, struct sshkey *key,
395 const char *comment)
Damien Miller994cf142000-07-21 10:19:44 +1000396{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000397 int r;
398
399 if ((r = sshkey_private_serialize(key, b)) != 0 ||
400 (r = sshbuf_put_cstring(b, comment)) != 0)
401 return r;
402 return 0;
403}
404
405static int
406encode_constraints(struct sshbuf *m, u_int life, u_int confirm)
407{
408 int r;
409
410 if (life != 0) {
411 if ((r = sshbuf_put_u8(m, SSH_AGENT_CONSTRAIN_LIFETIME)) != 0 ||
412 (r = sshbuf_put_u32(m, life)) != 0)
413 goto out;
414 }
415 if (confirm != 0) {
416 if ((r = sshbuf_put_u8(m, SSH_AGENT_CONSTRAIN_CONFIRM)) != 0)
417 goto out;
418 }
419 r = 0;
420 out:
421 return r;
Damien Miller994cf142000-07-21 10:19:44 +1000422}
423
Damien Miller5428f641999-11-25 11:54:57 +1100424/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000425 * Adds an identity to the authentication server.
426 * This call is intended only for use by ssh-add(1) and like applications.
Damien Miller5428f641999-11-25 11:54:57 +1100427 */
Damien Miller4af51302000-04-16 11:18:38 +1000428int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000429ssh_add_identity_constrained(int sock, struct sshkey *key, const char *comment,
430 u_int life, u_int confirm)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000431{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000432 struct sshbuf *msg;
433 int r, constrained = (life || confirm);
434 u_char type;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000435
djm@openbsd.org141efe42015-01-14 20:05:27 +0000436 if ((msg = sshbuf_new()) == NULL)
437 return SSH_ERR_ALLOC_FAIL;
Damien Miller994cf142000-07-21 10:19:44 +1000438
439 switch (key->type) {
Damien Miller1f0311c2014-05-15 14:24:09 +1000440#ifdef WITH_OPENSSL
Damien Miller0bc1bd82000-11-13 22:57:25 +1100441 case KEY_RSA:
Damien Miller0a80ca12010-02-27 07:55:05 +1100442 case KEY_RSA_CERT:
Damien Miller994cf142000-07-21 10:19:44 +1000443 case KEY_DSA:
Damien Miller0a80ca12010-02-27 07:55:05 +1100444 case KEY_DSA_CERT:
Damien Millereb8b60e2010-08-31 22:41:14 +1000445 case KEY_ECDSA:
446 case KEY_ECDSA_CERT:
Damien Miller1f0311c2014-05-15 14:24:09 +1000447#endif
Damien Miller5be9d9e2013-12-07 11:24:01 +1100448 case KEY_ED25519:
449 case KEY_ED25519_CERT:
Ben Lindstrom2b266b72002-06-21 00:08:39 +0000450 type = constrained ?
451 SSH2_AGENTC_ADD_ID_CONSTRAINED :
452 SSH2_AGENTC_ADD_IDENTITY;
djm@openbsd.org141efe42015-01-14 20:05:27 +0000453 if ((r = sshbuf_put_u8(msg, type)) != 0 ||
454 (r = ssh_encode_identity_ssh2(msg, key, comment)) != 0)
455 goto out;
Damien Miller994cf142000-07-21 10:19:44 +1000456 break;
457 default:
djm@openbsd.org141efe42015-01-14 20:05:27 +0000458 r = SSH_ERR_INVALID_ARGUMENT;
459 goto out;
Damien Miller994cf142000-07-21 10:19:44 +1000460 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000461 if (constrained &&
462 (r = encode_constraints(msg, life, confirm)) != 0)
463 goto out;
464 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
465 goto out;
466 if ((r = sshbuf_get_u8(msg, &type)) != 0)
467 goto out;
468 r = decode_reply(type);
469 out:
470 sshbuf_free(msg);
471 return r;
Damien Miller95def091999-11-25 00:26:21 +1100472}
473
Damien Miller5428f641999-11-25 11:54:57 +1100474/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000475 * Removes an identity from the authentication server.
476 * This call is intended only for use by ssh-add(1) and like applications.
Damien Miller5428f641999-11-25 11:54:57 +1100477 */
Damien Miller4af51302000-04-16 11:18:38 +1000478int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000479ssh_remove_identity(int sock, struct sshkey *key)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000480{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000481 struct sshbuf *msg;
482 int r;
483 u_char type, *blob = NULL;
484 size_t blen;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000485
djm@openbsd.org141efe42015-01-14 20:05:27 +0000486 if ((msg = sshbuf_new()) == NULL)
487 return SSH_ERR_ALLOC_FAIL;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000488
Damien Miller1f0311c2014-05-15 14:24:09 +1000489 if (key->type != KEY_UNSPEC) {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000490 if ((r = sshkey_to_blob(key, &blob, &blen)) != 0)
491 goto out;
492 if ((r = sshbuf_put_u8(msg,
493 SSH2_AGENTC_REMOVE_IDENTITY)) != 0 ||
494 (r = sshbuf_put_string(msg, blob, blen)) != 0)
495 goto out;
Damien Millerad833b32000-08-23 10:46:23 +1000496 } else {
djm@openbsd.org141efe42015-01-14 20:05:27 +0000497 r = SSH_ERR_INVALID_ARGUMENT;
498 goto out;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000499 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000500 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
501 goto out;
502 if ((r = sshbuf_get_u8(msg, &type)) != 0)
503 goto out;
504 r = decode_reply(type);
505 out:
506 if (blob != NULL) {
507 explicit_bzero(blob, blen);
508 free(blob);
Damien Millerad833b32000-08-23 10:46:23 +1000509 }
djm@openbsd.org141efe42015-01-14 20:05:27 +0000510 sshbuf_free(msg);
511 return r;
Damien Miller95def091999-11-25 00:26:21 +1100512}
513
djm@openbsd.org141efe42015-01-14 20:05:27 +0000514/*
515 * Add/remove an token-based identity from the authentication server.
516 * This call is intended only for use by ssh-add(1) and like applications.
517 */
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000518int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000519ssh_update_card(int sock, int add, const char *reader_id, const char *pin,
520 u_int life, u_int confirm)
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000521{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000522 struct sshbuf *msg;
523 int r, constrained = (life || confirm);
524 u_char type;
Damien Millerd94f20d2003-06-11 22:06:33 +1000525
526 if (add) {
527 type = constrained ?
528 SSH_AGENTC_ADD_SMARTCARD_KEY_CONSTRAINED :
529 SSH_AGENTC_ADD_SMARTCARD_KEY;
530 } else
531 type = SSH_AGENTC_REMOVE_SMARTCARD_KEY;
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000532
djm@openbsd.org141efe42015-01-14 20:05:27 +0000533 if ((msg = sshbuf_new()) == NULL)
534 return SSH_ERR_ALLOC_FAIL;
535 if ((r = sshbuf_put_u8(msg, type)) != 0 ||
536 (r = sshbuf_put_cstring(msg, reader_id)) != 0 ||
537 (r = sshbuf_put_cstring(msg, pin)) != 0)
538 goto out;
539 if (constrained &&
540 (r = encode_constraints(msg, life, confirm)) != 0)
541 goto out;
542 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
543 goto out;
544 if ((r = sshbuf_get_u8(msg, &type)) != 0)
545 goto out;
546 r = decode_reply(type);
547 out:
548 sshbuf_free(msg);
549 return r;
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000550}
551
Damien Miller5428f641999-11-25 11:54:57 +1100552/*
djm@openbsd.org141efe42015-01-14 20:05:27 +0000553 * Removes all identities from the agent.
554 * This call is intended only for use by ssh-add(1) and like applications.
djm@openbsd.org744bde72017-05-04 06:10:57 +0000555 *
556 * This supports the SSH protocol 1 message to because, when clearing all
557 * keys from an agent, we generally want to clear both protocol v1 and v2
558 * keys.
Damien Miller5428f641999-11-25 11:54:57 +1100559 */
Damien Miller4af51302000-04-16 11:18:38 +1000560int
djm@openbsd.org141efe42015-01-14 20:05:27 +0000561ssh_remove_all_identities(int sock, int version)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000562{
djm@openbsd.org141efe42015-01-14 20:05:27 +0000563 struct sshbuf *msg;
564 u_char type = (version == 1) ?
565 SSH_AGENTC_REMOVE_ALL_RSA_IDENTITIES :
566 SSH2_AGENTC_REMOVE_ALL_IDENTITIES;
567 int r;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000568
djm@openbsd.org141efe42015-01-14 20:05:27 +0000569 if ((msg = sshbuf_new()) == NULL)
570 return SSH_ERR_ALLOC_FAIL;
571 if ((r = sshbuf_put_u8(msg, type)) != 0)
572 goto out;
573 if ((r = ssh_request_reply(sock, msg, msg)) != 0)
574 goto out;
575 if ((r = sshbuf_get_u8(msg, &type)) != 0)
576 goto out;
577 r = decode_reply(type);
578 out:
579 sshbuf_free(msg);
580 return r;
Damien Miller95def091999-11-25 00:26:21 +1100581}