2 * Copyright (c) 1999 - 2001 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "gssapi_locl.h"
39 gss_export_sec_context (
40 OM_uint32
* minor_status
,
41 gss_ctx_id_t
* context_handle
,
42 gss_buffer_t interprocess_token
47 OM_uint32 ret
= GSS_S_COMPLETE
;
49 gss_buffer_desc buffer
;
55 if (!((*context_handle
)->flags
& GSS_C_TRANS_FLAG
))
56 return GSS_S_UNAVAILABLE
;
58 sp
= krb5_storage_emem ();
60 *minor_status
= ENOMEM
;
63 ac
= (*context_handle
)->auth_context
;
65 /* flagging included fields */
68 if (ac
->local_address
)
69 flags
|= SC_LOCAL_ADDRESS
;
70 if (ac
->remote_address
)
71 flags
|= SC_REMOTE_ADDRESS
;
75 flags
|= SC_LOCAL_SUBKEY
;
76 if (ac
->remote_subkey
)
77 flags
|= SC_REMOTE_SUBKEY
;
79 kret
= krb5_store_int32 (sp
, flags
);
85 /* marshall auth context */
87 kret
= krb5_store_int32 (sp
, ac
->flags
);
92 if (ac
->local_address
) {
93 kret
= krb5_store_address (sp
, *ac
->local_address
);
99 if (ac
->remote_address
) {
100 kret
= krb5_store_address (sp
, *ac
->remote_address
);
102 *minor_status
= kret
;
106 kret
= krb5_store_int16 (sp
, ac
->local_port
);
108 *minor_status
= kret
;
111 kret
= krb5_store_int16 (sp
, ac
->remote_port
);
113 *minor_status
= kret
;
117 kret
= krb5_store_keyblock (sp
, *ac
->keyblock
);
119 *minor_status
= kret
;
123 if (ac
->local_subkey
) {
124 kret
= krb5_store_keyblock (sp
, *ac
->local_subkey
);
126 *minor_status
= kret
;
130 if (ac
->remote_subkey
) {
131 kret
= krb5_store_keyblock (sp
, *ac
->remote_subkey
);
133 *minor_status
= kret
;
137 kret
= krb5_store_int32 (sp
, ac
->local_seqnumber
);
139 *minor_status
= kret
;
142 kret
= krb5_store_int32 (sp
, ac
->remote_seqnumber
);
144 *minor_status
= kret
;
151 unsigned char auth_buf
[1024];
153 ret
= encode_Authenticator (auth_buf
, sizeof(auth_buf
),
154 ac
->authenticator
, &sz
);
156 krb5_storage_free (sp
);
158 return GSS_S_FAILURE
;
160 data
.data
= auth_buf
;
162 kret
= krb5_store_data (sp
, data
);
164 *minor_status
= kret
;
169 kret
= krb5_store_int32 (sp
, ac
->keytype
);
171 *minor_status
= kret
;
174 kret
= krb5_store_int32 (sp
, ac
->cksumtype
);
176 *minor_status
= kret
;
182 ret
= gss_export_name (minor_status
, (*context_handle
)->source
, &buffer
);
185 data
.data
= buffer
.value
;
186 data
.length
= buffer
.length
;
187 kret
= krb5_store_data (sp
, data
);
188 gss_release_buffer (&minor
, &buffer
);
190 *minor_status
= kret
;
194 ret
= gss_export_name (minor_status
, (*context_handle
)->target
, &buffer
);
197 data
.data
= buffer
.value
;
198 data
.length
= buffer
.length
;
199 kret
= krb5_store_data (sp
, data
);
200 gss_release_buffer (&minor
, &buffer
);
202 *minor_status
= kret
;
206 kret
= krb5_store_int32 (sp
, (*context_handle
)->flags
);
208 *minor_status
= kret
;
211 kret
= krb5_store_int32 (sp
, (*context_handle
)->more_flags
);
213 *minor_status
= kret
;
217 kret
= krb5_storage_to_data (sp
, &data
);
218 krb5_storage_free (sp
);
220 *minor_status
= kret
;
221 return GSS_S_FAILURE
;
223 interprocess_token
->length
= data
.length
;
224 interprocess_token
->value
= data
.data
;
225 ret
= gss_delete_sec_context (minor_status
, context_handle
,
227 if (ret
!= GSS_S_COMPLETE
)
228 gss_release_buffer (NULL
, interprocess_token
);
231 krb5_storage_free (sp
);