2 * Copyright (c) 1997 - 2000 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "test_locl.h"
36 #include "gss_common.h"
40 do_trans (int sock
, gss_ctx_id_t context_hdl
)
42 OM_uint32 maj_stat
, min_stat
;
43 gss_buffer_desc real_input_token
, real_output_token
;
44 gss_buffer_t input_token
= &real_input_token
,
45 output_token
= &real_output_token
;
49 input_token
->length
= 3;
50 input_token
->value
= strdup("hej");
52 maj_stat
= gss_get_mic(&min_stat
,
57 if (GSS_ERROR(maj_stat
))
58 gss_err (1, min_stat
, "gss_get_mic");
60 write_token (sock
, input_token
);
61 write_token (sock
, output_token
);
65 input_token
->length
= 7;
66 input_token
->value
= "hemligt";
68 maj_stat
= gss_wrap (&min_stat
,
75 if (GSS_ERROR(maj_stat
))
76 gss_err (1, min_stat
, "gss_wrap");
78 write_token (sock
, output_token
);
80 maj_stat
= gss_wrap (&min_stat
,
87 if (GSS_ERROR(maj_stat
))
88 gss_err (1, min_stat
, "gss_wrap");
90 write_token (sock
, output_token
);
96 proto (int sock
, const char *hostname
, const char *service
)
98 struct sockaddr_in remote
, local
;
101 int context_established
= 0;
102 gss_ctx_id_t context_hdl
= GSS_C_NO_CONTEXT
;
103 gss_buffer_desc real_input_token
, real_output_token
;
104 gss_buffer_t input_token
= &real_input_token
,
105 output_token
= &real_output_token
;
106 OM_uint32 maj_stat
, min_stat
;
108 gss_buffer_desc name_token
;
109 struct gss_channel_bindings_struct input_chan_bindings
;
115 mech_oid
= select_mech(mech
);
117 name_token
.length
= asprintf (&str
,
118 "%s@%s", service
, hostname
);
120 errx(1, "malloc - out of memory");
121 name_token
.value
= str
;
123 maj_stat
= gss_import_name (&min_stat
,
125 GSS_C_NT_HOSTBASED_SERVICE
,
127 if (GSS_ERROR(maj_stat
))
128 gss_err (1, min_stat
,
129 "Error importing name `%s@%s':\n", service
, hostname
);
131 addrlen
= sizeof(local
);
132 if (getsockname (sock
, (struct sockaddr
*)&local
, &addrlen
) < 0
133 || addrlen
!= sizeof(local
))
134 err (1, "getsockname(%s)", hostname
);
136 addrlen
= sizeof(remote
);
137 if (getpeername (sock
, (struct sockaddr
*)&remote
, &addrlen
) < 0
138 || addrlen
!= sizeof(remote
))
139 err (1, "getpeername(%s)", hostname
);
141 input_token
->length
= 0;
142 output_token
->length
= 0;
144 input_chan_bindings
.initiator_addrtype
= GSS_C_AF_INET
;
145 input_chan_bindings
.initiator_address
.length
= 4;
146 init_buf
[0] = (local
.sin_addr
.s_addr
>> 24) & 0xFF;
147 init_buf
[1] = (local
.sin_addr
.s_addr
>> 16) & 0xFF;
148 init_buf
[2] = (local
.sin_addr
.s_addr
>> 8) & 0xFF;
149 init_buf
[3] = (local
.sin_addr
.s_addr
>> 0) & 0xFF;
150 input_chan_bindings
.initiator_address
.value
= init_buf
;
152 input_chan_bindings
.acceptor_addrtype
= GSS_C_AF_INET
;
153 input_chan_bindings
.acceptor_address
.length
= 4;
154 acct_buf
[0] = (remote
.sin_addr
.s_addr
>> 24) & 0xFF;
155 acct_buf
[1] = (remote
.sin_addr
.s_addr
>> 16) & 0xFF;
156 acct_buf
[2] = (remote
.sin_addr
.s_addr
>> 8) & 0xFF;
157 acct_buf
[3] = (remote
.sin_addr
.s_addr
>> 0) & 0xFF;
158 input_chan_bindings
.acceptor_address
.value
= acct_buf
;
161 input_chan_bindings
.application_data
.value
= emalloc(4);
162 * (unsigned short*)input_chan_bindings
.application_data
.value
= local
.sin_port
;
163 * ((unsigned short *)input_chan_bindings
.application_data
.value
+ 1) = remote
.sin_port
;
164 input_chan_bindings
.application_data
.length
= 4;
166 input_chan_bindings
.application_data
.length
= 0;
167 input_chan_bindings
.application_data
.value
= NULL
;
170 while(!context_established
) {
172 gss_init_sec_context(&min_stat
,
177 GSS_C_MUTUAL_FLAG
| GSS_C_SEQUENCE_FLAG
180 &input_chan_bindings
,
186 if (GSS_ERROR(maj_stat
))
187 gss_err (1, min_stat
, "gss_init_sec_context");
188 if (output_token
->length
!= 0)
189 write_token (sock
, output_token
);
190 if (GSS_ERROR(maj_stat
)) {
191 if (context_hdl
!= GSS_C_NO_CONTEXT
)
192 gss_delete_sec_context (&min_stat
,
197 if (maj_stat
& GSS_S_CONTINUE_NEEDED
) {
198 read_token (sock
, input_token
);
200 context_established
= 1;
208 if (pipe (pipefd
) < 0)
217 maj_stat
= gss_export_sec_context (&min_stat
,
220 if (GSS_ERROR(maj_stat
))
221 gss_err (1, min_stat
, "gss_export_sec_context");
222 write_token (pipefd
[1], &buf
);
225 gss_ctx_id_t context_hdl
;
229 read_token (pipefd
[0], &buf
);
231 maj_stat
= gss_import_sec_context (&min_stat
, &buf
, &context_hdl
);
232 if (GSS_ERROR(maj_stat
))
233 gss_err (1, min_stat
, "gss_import_sec_context");
234 gss_release_buffer (&min_stat
, &buf
);
235 return do_trans (sock
, context_hdl
);
238 return do_trans (sock
, context_hdl
);
243 main(int argc
, char **argv
)
245 krb5_context context
; /* XXX */
246 int port
= client_setup(&context
, &argc
, argv
);
247 return client_doit (argv
[argc
], port
, service
, proto
);