smtp_gssapi.h

   1 /*@ S-nail - a mail user agent derived from Berkeley Mail.
   2  *@ Implementation of SMTP GSS-API authentication according to RFC 4954.
   3  *@ TODO GSS-API should also be joined into "a VFS".  TODO LEAKS (error path)
   4  *
   5  * Copyright (c) 2014 - 2017 Steffen (Daode) Nurpmeso <steffen@sdaoden.eu>.
   6  */
   7
   8 /* Derived from `imap_gssapi.h', which is:
   9  *
  10  * Copyright (c) 2004 Gunnar Ritter.
  11  * All rights reserved.
  12  *
  13  * Redistribution and use in source and binary forms, with or without
  14  * modification, are permitted provided that the following conditions
  15  * are met:
  16  * 1. Redistributions of source code must retain the above copyright
  17  *    notice, this list of conditions and the following disclaimer.
  18  * 2. Redistributions in binary form must reproduce the above copyright
  19  *    notice, this list of conditions and the following disclaimer in the
  20  *    documentation and/or other materials provided with the distribution.
  21  * 3. All advertising materials mentioning features or use of this software
  22  *    must display the following acknowledgement:
  23  *    This product includes software developed by Gunnar Ritter
  24  *    and his contributors.
  25  * 4. Neither the name of Gunnar Ritter nor the names of his contributors
  26  *    may be used to endorse or promote products derived from this software
  27  *    without specific prior written permission.
  28  *
  29  * THIS SOFTWARE IS PROVIDED BY GUNNAR RITTER AND CONTRIBUTORS ``AS IS'' AND
  30  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  31  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  32  * ARE DISCLAIMED.  IN NO EVENT SHALL GUNNAR RITTER OR CONTRIBUTORS BE LIABLE
  33  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  34  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  35  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  36  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  37  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  38  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  39  * SUCH DAMAGE.
  40  */
  41 /*
  42  * Partially derived from sample code in:
  43  *
  44  * GSS-API Programming Guide
  45  * Part No: 816-1331-11
  46  * Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 U.S.A.
  47  *
  48  * (c) 2002 Sun Microsystems
  49  */
  50 /*
  51  * Copyright 1994 by OpenVision Technologies, Inc.
  52  *
  53  * Permission to use, copy, modify, distribute, and sell this software
  54  * and its documentation for any purpose is hereby granted without fee,
  55  * provided that the above copyright notice appears in all copies and
  56  * that both that copyright notice and this permission notice appear in
  57  * supporting documentation, and that the name of OpenVision not be used
  58  * in advertising or publicity pertaining to distribution of the software
  59  * without specific, written prior permission. OpenVision makes no
  60  * representations about the suitability of this software for any
  61  * purpose.  It is provided "as is" without express or implied warranty.
  62  *
  63  * OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
  64  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
  65  * EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR
  66  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
  67  * USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
  68  * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  69  * PERFORMANCE OF THIS SOFTWARE.
  70  */
  71
  72 #ifdef HAVE_GSSAPI
  73 #ifndef GSSAPI_REG_INCLUDE
  74 # include <gssapi/gssapi.h>
  75 # ifdef GSSAPI_OLD_STYLE
  76 #  include <gssapi/gssapi_generic.h>
  77 #  define GSS_C_NT_HOSTBASED_SERVICE   gss_nt_service_name
  78 #  define m_DEFINED_GCC_C_NT_HOSTBASED_SERVICE
  79 # endif
  80 #else
  81 # include <gssapi.h>
  82 #endif
  83
  84 static void _smtp_gssapi_error1(char const *s, OM_uint32 code, int typ);
  85 static void _smtp_gssapi_error(char const *s, OM_uint32 maj_stat,
  86                OM_uint32 min_stat);
  87
  88 static void
  89 _smtp_gssapi_error1(char const *s, OM_uint32 code, int typ)
  90 {
  91    OM_uint32 maj_stat, min_stat;
  92    gss_buffer_desc msg = GSS_C_EMPTY_BUFFER;
  93    OM_uint32 msg_ctx = 0;
  94    NYD_ENTER;
  95
  96    do {
  97       maj_stat = gss_display_status(&min_stat, code, typ, GSS_C_NO_OID,
  98             &msg_ctx, &msg);
  99       if (maj_stat == GSS_S_COMPLETE) {
 100          n_err(_("GSS error: %s / %s\n"), s, (char*)msg.value);
 101          if (msg.length != 0)
 102             gss_release_buffer(&min_stat, &msg);
 103       } else {
 104          n_err(_("GSS error: %s / unknown\n"), s);
 105          break;
 106       }
 107    } while (msg_ctx);
 108    NYD_LEAVE;
 109 }
 110
 111 static void
 112 _smtp_gssapi_error(char const *s, OM_uint32 maj_stat, OM_uint32 min_stat)
 113 {
 114    NYD_ENTER;
 115    _smtp_gssapi_error1(s, maj_stat, GSS_C_GSS_CODE);
 116    _smtp_gssapi_error1(s, min_stat, GSS_C_MECH_CODE);
 117    NYD_LEAVE;
 118 }
 119
 120 static bool_t
 121 _smtp_gssapi(struct sock *sp, struct sendbundle *sbp, struct smtp_line *slp)
 122 {
 123    struct str in, out;
 124    gss_buffer_desc send_tok, recv_tok, *token_ptr;
 125    gss_name_t target_name;
 126    gss_ctx_id_t gss_context;
 127    OM_uint32 maj_stat, min_stat, ret_flags;
 128    int conf_state;
 129    bool_t ok;
 130    NYD_ENTER;
 131
 132    ok = FAL0;
 133
 134    if(INT_MAX - 1 - 4 <= sbp->sb_ccred.cc_user.l)
 135       goto j_leave;
 136
 137    send_tok.value = salloc(send_tok.length = sbp->sb_url.url_host.l + 5 +1);
 138    memcpy(send_tok.value, "smtp@", 5);
 139    memcpy((char*)send_tok.value + 5, sbp->sb_url.url_host.s,
 140       sbp->sb_url.url_host.l +1);
 141
 142    maj_stat = gss_import_name(&min_stat, &send_tok, GSS_C_NT_HOSTBASED_SERVICE,
 143          &target_name);
 144    if (maj_stat != GSS_S_COMPLETE) {
 145       _smtp_gssapi_error(send_tok.value, maj_stat, min_stat);
 146       goto j_leave;
 147    }
 148
 149    token_ptr = GSS_C_NO_BUFFER;
 150    gss_context = GSS_C_NO_CONTEXT;
 151    maj_stat = gss_init_sec_context(&min_stat,
 152          GSS_C_NO_CREDENTIAL,
 153          &gss_context,
 154          target_name,
 155          GSS_C_NO_OID,
 156          GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG,
 157          0,
 158          GSS_C_NO_CHANNEL_BINDINGS,
 159          token_ptr,
 160          NULL,
 161          &send_tok,
 162          &ret_flags,
 163          NULL);
 164    if (maj_stat != GSS_S_COMPLETE && maj_stat != GSS_S_CONTINUE_NEEDED) {
 165       _smtp_gssapi_error("initializing GSS context", maj_stat, min_stat);
 166       gss_release_name(&min_stat, &target_name);
 167       goto j_leave;
 168    }
 169    recv_tok.value = out.s = NULL;
 170    recv_tok.length = out.l = 0;
 171
 172    _OUT(NETLINE("AUTH GSSAPI"));
 173    _ANSWER(3, FAL0, FAL0);
 174    while (maj_stat == GSS_S_CONTINUE_NEEDED) {
 175       /* Pass token obtained from first gss_init_sec_context() call */
 176       if(b64_encode_buf(&out, send_tok.value, send_tok.length,
 177             B64_SALLOC | B64_CRLF) == NULL){
 178          gss_release_buffer(&min_stat, &send_tok);
 179          goto jleave;
 180       }
 181       gss_release_buffer(&min_stat, &send_tok);
 182       _OUT(out.s);
 183       _ANSWER(3, FAL0, TRU1);
 184
 185       out.s = NULL;
 186       in.s = slp->dat;
 187       in.l = slp->datlen;
 188       if(!b64_decode(&out, &in))
 189          goto jebase64;
 190       recv_tok.value = out.s;
 191       recv_tok.length = out.l;
 192       token_ptr = &recv_tok;
 193       maj_stat = gss_init_sec_context(&min_stat,
 194             GSS_C_NO_CREDENTIAL,
 195             &gss_context,
 196             target_name,
 197             GSS_C_NO_OID,
 198             GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG,
 199             0,
 200             GSS_C_NO_CHANNEL_BINDINGS,
 201             token_ptr,
 202             NULL,
 203             &send_tok,
 204             &ret_flags,
 205             NULL);
 206       free(out.s);
 207       if (maj_stat != GSS_S_COMPLETE && maj_stat != GSS_S_CONTINUE_NEEDED) {
 208          _smtp_gssapi_error("initializing context", maj_stat, min_stat);
 209          gss_release_name(&min_stat, &target_name);
 210          goto jleave;
 211       }
 212    }
 213
 214    /* Pass token obtained from second gss_init_sec_context() call */
 215    gss_release_name(&min_stat, &target_name);
 216    if(b64_encode_buf(&out, send_tok.value, send_tok.length,
 217          B64_SALLOC | B64_CRLF) == NULL){
 218       gss_release_buffer(&min_stat, &send_tok);
 219       goto jleave;
 220    }
 221    gss_release_buffer(&min_stat, &send_tok);
 222    _OUT(out.s);
 223
 224    _ANSWER(3, FAL0, TRU1);
 225    out.s = NULL;
 226    in.s = slp->dat;
 227    in.l = slp->datlen;
 228    if(!b64_decode(&out, &in)){
 229 jebase64:
 230       if(out.s != NULL)
 231          free(out.s);
 232       n_err(_("Invalid base64 encoding from GSSAPI server\n"));
 233       goto jleave;
 234    }
 235    recv_tok.value = out.s;
 236    recv_tok.length = out.l;
 237    maj_stat = gss_unwrap(&min_stat, gss_context, &recv_tok, &send_tok,
 238          &conf_state, NULL);
 239    free(out.s);
 240    if (maj_stat != GSS_S_COMPLETE) {
 241       _smtp_gssapi_error("unwrapping data", maj_stat, min_stat);
 242       goto jleave;
 243    }
 244
 245    /* First octet: bit-mask with protection mechanisms (1 = no protection
 246     *    mechanism).
 247     * Second to fourth octet: maximum message size in network byte order.
 248     * Fifth and following octets: user name string */
 249    in.s = salloc(send_tok.length = 4 + sbp->sb_ccred.cc_user.l +1);
 250    memcpy(in.s + 4, sbp->sb_ccred.cc_user.s, sbp->sb_ccred.cc_user.l +1);
 251    in.s[0] = 1;
 252    in.s[1] = 0;
 253    in.s[2] = in.s[3] = (char)0xFF;
 254    send_tok.value = in.s;
 255    maj_stat = gss_wrap(&min_stat, gss_context, 0, GSS_C_QOP_DEFAULT, &send_tok,
 256          &conf_state, &recv_tok);
 257    if (maj_stat != GSS_S_COMPLETE) {
 258       _smtp_gssapi_error("wrapping data", maj_stat, min_stat);
 259       goto jleave;
 260    }
 261
 262    if(b64_encode_buf(&out, recv_tok.value, recv_tok.length,
 263          B64_SALLOC | B64_CRLF) == NULL)
 264       goto jleave;
 265    _OUT(out.s);
 266    _ANSWER(2, FAL0, FAL0);
 267
 268    ok = TRU1;
 269 jleave:
 270    gss_delete_sec_context(&min_stat, &gss_context, &recv_tok);
 271    gss_release_buffer(&min_stat, &recv_tok);
 272 j_leave:
 273    NYD_LEAVE;
 274    return ok;
 275 }
 276
 277 # ifdef m_DEFINED_GCC_C_NT_HOSTBASED_SERVICE
 278 #  undef GSS_C_NT_HOSTBASED_SERVICE
 279 # endif
 280 #endif /* HAVE_GSSAPI */
 281
 282 /* s-it-mode */