build: make NSS mandatory
[siplcs.git] / src / core / sip-sec-ntlm-tests.c
blob82af3b7b03363402c506e8ecff224eae443d208d
1 /**
2 * @file sipe-sec-ntlm-tests.c
4 * pidgin-sipe
6 * Copyright (C) 2010 pier11 <pier11@operamail.com>
7 * Copyright (C) 2008 Novell, Inc.
9 * Implemented with reference to the follow documentation:
10 * - http://davenport.sourceforge.net/ntlm.html
11 * - MS-NLMP: http://msdn.microsoft.com/en-us/library/cc207842.aspx
12 * - MS-SIP : http://msdn.microsoft.com/en-us/library/cc246115.aspx
14 * Please use "make tests" to build & run them!
16 * This program is free software; you can redistribute it and/or modify
17 * it under the terms of the GNU General Public License as published by
18 * the Free Software Foundation; either version 2 of the License, or
19 * (at your option) any later version.
21 * This program is distributed in the hope that it will be useful,
22 * but WITHOUT ANY WARRANTY; without even the implied warranty of
23 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
24 * GNU General Public License for more details.
26 * You should have received a copy of the GNU General Public License
27 * along with this program; if not, write to the Free Software
28 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
31 #include <stdlib.h>
33 #include <glib.h>
34 #include <glib/gprintf.h>
36 #include "nss.h"
38 #include "sipmsg.h"
39 #include "sipe-sign.h"
40 #define _SIPE_COMPILING_TESTS
41 #include "sip-sec-ntlm.c"
43 #include "uuid.h"
45 static int successes = 0;
46 static int failures = 0;
48 gboolean sip_sec_ntlm_tests(void);
50 static void assert_equal(const char * expected, gpointer got, int len, gboolean stringify)
52 const gchar * res = (gchar *) got;
53 gchar to_str[len*2 + 1];
55 if (stringify) {
56 const guint8 *bin = got;
57 int i, j;
58 for (i = 0, j = 0; i < len; i++, j+=2) {
59 g_sprintf(&to_str[j], "%02X", (bin[i]&0xff));
61 len *= 2;
62 res = to_str;
65 printf("expected: %s\n", expected);
66 printf("received: %s\n", res);
68 if (g_ascii_strncasecmp(expected, res, len) == 0) {
69 successes++;
70 printf("PASSED\n");
71 } else {
72 failures++;
73 printf("FAILED\n");
77 /* NOTE: both values are expected to be in host byte order! */
78 static void assert_equal_guint32(guint32 expected, guint32 got)
80 printf("expected: %08X\n", expected);
81 printf("received: %08X\n", got);
83 if (expected == got) {
84 successes++;
85 printf("PASSED\n");
86 } else {
87 failures++;
88 printf("FAILED\n");
92 gboolean sip_sec_ntlm_tests(void)
94 const char *password;
95 const char *user;
96 const char *domain;
97 const guchar *client_challenge;
98 const guchar *nonce;
99 const guchar *exported_session_key;
100 const guchar *text;
101 guchar md4 [16];
102 guchar md5 [16];
103 guchar hmac_md5 [16];
104 guint32 flags;
105 guchar response_key_lm [16];
106 guchar response_key_nt [16];
107 guchar nt_challenge_response [24];
108 guchar lm_challenge_response [24];
109 guchar session_base_key [16];
110 guchar key_exchange_key [16];
111 guchar encrypted_random_session_key [16];
112 guint32 crc;
113 guchar client_seal_key [16];
114 guchar client_sign_key [16];
115 guchar server_sign_key [16];
116 guchar server_seal_key [16];
117 guint32 mac [4];
118 guchar text_enc [18 + 12];
119 struct sipmsg *msg;
120 struct sipmsg_breakdown msgbd;
121 gchar *msg_str;
122 const char *password2;
123 const char *user2;
124 const char *domain2;
125 const char *host2;
126 const char *type2_hex;
127 const char *type3_hex;
128 const char *request;
129 const char *response;
130 const gchar *request_sig;
131 const gchar *response_sig;
133 printf ("Starting Tests\n");
135 /* Initialization for NSS */
136 if (!NSS_IsInitialized()) {
137 NSS_NoDB_Init(".");
138 SIPE_DEBUG_INFO_NOFORMAT("NSS initialised");
140 /* Initialization for NTLM */
141 sip_sec_init__ntlm();
143 /* These tests are from the MS-SIPE document */
145 password = "Password";
146 user = "User";
147 domain = "Domain";
148 client_challenge = (guchar *)"\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa";
149 /* server challenge */
150 nonce = (guchar *)"\x01\x23\x45\x67\x89\xab\xcd\xef";
151 /* 16 bytes */
152 exported_session_key = (guchar *)"\x55\x55\x55\x55\x55\x55\x55\x55\x55\x55\x55\x55\x55\x55\x55\x55";
153 text = (guchar *)"\x50\x00\x6c\x00\x61\x00\x69\x00\x6e\x00\x74\x00\x65\x00\x78\x00\x74\x00"; //P·l·a·i·n·t·e·x·t·
156 ////// internal Cyphers tests ///////
157 printf ("\nTesting MD4()\n");
158 MD4 ((const unsigned char *)"message digest", 14, md4);
159 assert_equal("D9130A8164549FE818874806E1C7014B", md4, 16, TRUE);
161 printf ("\nTesting MD5()\n");
162 MD5 ((const unsigned char *)"message digest", 14, md5);
163 assert_equal("F96B697D7CB7938D525A2F31AAF161D0", md5, 16, TRUE);
165 printf ("\nTesting HMAC_MD5()\n");
166 HMAC_MD5 ((const unsigned char *)"\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b", 16, (const unsigned char *)"Hi There", 8, hmac_md5);
167 assert_equal("9294727A3638BB1C13F48EF8158BFC9D", hmac_md5, 16, TRUE);
170 ////// NTLMv1 (without Extended Session Security) ///////
171 use_ntlm_v2 = FALSE;
173 flags = 0
174 | NTLMSSP_NEGOTIATE_KEY_EXCH
175 | NTLMSSP_NEGOTIATE_56
176 | NTLMSSP_NEGOTIATE_128
177 | NTLMSSP_NEGOTIATE_VERSION
178 | NTLMSSP_TARGET_TYPE_SERVER
179 | NTLMSSP_NEGOTIATE_ALWAYS_SIGN
180 | NTLMSSP_NEGOTIATE_NTLM
181 | NTLMSSP_NEGOTIATE_SEAL
182 | NTLMSSP_NEGOTIATE_SIGN
183 | NTLMSSP_NEGOTIATE_OEM
184 | NTLMSSP_NEGOTIATE_UNICODE;
186 printf ("\n\nTesting Negotiation Flags\n");
187 assert_equal_guint32(0xE2028233, flags);
189 printf ("\n\nTesting LMOWFv1()\n");
190 LMOWFv1 (password, user, domain, response_key_lm);
191 assert_equal("E52CAC67419A9A224A3B108F3FA6CB6D", response_key_lm, 16, TRUE);
193 printf ("\n\nTesting NTOWFv1()\n");
194 NTOWFv1 (password, user, domain, response_key_nt);
195 assert_equal("A4F49C406510BDCAB6824EE7C30FD852", response_key_nt, 16, TRUE);
197 printf ("\n\nTesting LM Response Generation\n");
198 printf ("Testing NT Response Generation\n");
199 printf ("Testing Session Base Key\n");
201 compute_response(flags,
202 response_key_nt,
203 response_key_lm,
204 nonce,
205 client_challenge,
207 NULL, /* target_info */
208 0, /* target_info_len */
209 lm_challenge_response, /* out */
210 nt_challenge_response, /* out */
211 session_base_key); /* out */
213 assert_equal("98DEF7B87F88AA5DAFE2DF779688A172DEF11C7D5CCDEF13", lm_challenge_response, 24, TRUE);
214 assert_equal("67C43011F30298A2AD35ECE64F16331C44BDBED927841F94", nt_challenge_response, 24, TRUE);
215 assert_equal("D87262B0CDE4B1CB7499BECCCDF10784", session_base_key, 16, TRUE);
217 printf ("\n\nTesting Key Exchange Key\n");
218 KXKEY(flags, session_base_key, lm_challenge_response, nonce, key_exchange_key);
219 assert_equal("D87262B0CDE4B1CB7499BECCCDF10784", key_exchange_key, 16, TRUE);
221 printf ("\n\nTesting Encrypted Session Key Generation\n");
222 RC4K (key_exchange_key, 16, exported_session_key, 16, encrypted_random_session_key);
223 assert_equal("518822B1B3F350C8958682ECBB3E3CB7", encrypted_random_session_key, 16, TRUE);
225 printf ("\n\nTesting CRC32\n");
226 crc = CRC32((char*)text, 18);
227 assert_equal_guint32(0x93AA847D, crc);
229 printf ("\n\nTesting Encryption\n");
231 //SEALKEY (flags, exported_session_key, TRUE, client_seal_key);
232 guchar buff [18 + 12];
233 guint32 to_enc [3];
235 memcpy(buff, text, 18);
236 to_enc[0] = GUINT32_TO_LE(0); // random pad
237 to_enc[1] = GUINT32_TO_LE(crc);
238 to_enc[2] = GUINT32_TO_LE(0); // zero
239 memcpy(buff+18, (gchar *)to_enc, 12);
240 RC4K (exported_session_key, 16, buff, 18 + 12, text_enc);
241 //The point is to not reinitialize rc4 cypher
242 // 0 crc 0 (zero)
243 assert_equal("56FE04D861F9319AF0D7238A2E3B4D457FB8" "45C844E5" "09DCD1DF" "2E459D36", text_enc, 18 + 12, TRUE);
246 printf ("\n\nTesting MAC\n");
248 // won't work in the case with sealing because RC4 is re-initialized inside.
249 // MAC (flags, (gchar*)text, 18, (guchar*)exported_session_key, 16, (guchar*)exported_session_key,16, 0x00000000, 0, mac);
250 guint32 enc [3];
251 guint32 mac2 [4];
253 memcpy((gchar *)enc, text_enc+18, 12);
254 mac2 [0] = GUINT32_TO_LE(1); // version
255 mac2 [1] = enc [0];
256 mac2 [2] = enc [1];
257 mac2 [3] = enc [2] ^ (GUINT32_TO_LE(0)); // ^ seq
258 assert_equal("0100000045C844E509DCD1DF2E459D36", (guchar*)mac2, 16, TRUE);
262 ////// EXTENDED_SESSIONSECURITY ///////
263 use_ntlm_v2 = FALSE;
264 flags = 0
265 | NTLMSSP_NEGOTIATE_56
266 | NTLMSSP_NEGOTIATE_VERSION
267 | NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
268 | NTLMSSP_TARGET_TYPE_SERVER
269 | NTLMSSP_NEGOTIATE_ALWAYS_SIGN
270 | NTLMSSP_NEGOTIATE_NTLM
271 | NTLMSSP_NEGOTIATE_SEAL
272 | NTLMSSP_NEGOTIATE_SIGN
273 | NTLMSSP_NEGOTIATE_OEM
274 | NTLMSSP_NEGOTIATE_UNICODE;
276 printf ("\n\n(Extended session security) Testing Negotiation Flags\n");
277 assert_equal_guint32(0x820A8233, flags);
279 /* NTOWFv1() is not different from the above test for the same */
281 printf ("\n\n(Extended session security) Testing LM Response\n");
282 printf ("(Extended session security) Testing NT Response\n");
283 printf ("(Extended session security) Testing Session Base Key\n");
284 compute_response(flags,
285 response_key_nt,
286 response_key_lm,
287 nonce,
288 client_challenge,
290 NULL, /* target_info */
291 0, /* target_info_len */
292 lm_challenge_response, /* out */
293 nt_challenge_response, /* out */
294 session_base_key); /* out */
296 assert_equal("AAAAAAAAAAAAAAAA00000000000000000000000000000000", lm_challenge_response, 24, TRUE);
297 assert_equal("7537F803AE367128CA458204BDE7CAF81E97ED2683267232", nt_challenge_response, 24, TRUE);
298 assert_equal("D87262B0CDE4B1CB7499BECCCDF10784", session_base_key, 16, TRUE);
300 printf ("\n\n(Extended session security) Testing Key Exchange Key\n");
301 KXKEY(flags, session_base_key, lm_challenge_response, nonce, key_exchange_key);
302 assert_equal("EB93429A8BD952F8B89C55B87F475EDC", key_exchange_key, 16, TRUE);
304 printf ("\n\n(Extended session security) SIGNKEY\n");
305 SIGNKEY (key_exchange_key, TRUE, client_sign_key);
306 assert_equal("60E799BE5C72FC92922AE8EBE961FB8D", client_sign_key, 16, TRUE);
308 printf ("\n\n(Extended session security) SEALKEY\n");
309 SEALKEY (flags, key_exchange_key, TRUE, client_seal_key);
310 assert_equal("04DD7F014D8504D265A25CC86A3A7C06", client_seal_key, 16, TRUE);
312 printf ("\n\n(Extended session security) Testing Encryption\n");
313 RC4K (client_seal_key, 16, text, 18, text_enc);
314 assert_equal("A02372F6530273F3AA1EB90190CE5200C99D", text_enc, 18, TRUE);
316 printf ("\n\n(Extended session security) Testing MAC\n");
317 MAC (flags, (gchar*)text,18, client_sign_key,16, client_seal_key,16, 0, 0, mac);
318 assert_equal("01000000FF2AEB52F681793A00000000", mac, 16, TRUE);
321 ////// NTLMv2 ///////
322 use_ntlm_v2 = TRUE;
323 flags = 0
324 | NTLMSSP_NEGOTIATE_KEY_EXCH
325 | NTLMSSP_NEGOTIATE_56
326 | NTLMSSP_NEGOTIATE_128
327 | NTLMSSP_NEGOTIATE_VERSION
328 | NTLMSSP_NEGOTIATE_TARGET_INFO
329 | NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
330 | NTLMSSP_TARGET_TYPE_SERVER
331 | NTLMSSP_NEGOTIATE_ALWAYS_SIGN
332 | NTLMSSP_NEGOTIATE_NTLM
333 | NTLMSSP_NEGOTIATE_SEAL
334 | NTLMSSP_NEGOTIATE_SIGN
335 | NTLMSSP_NEGOTIATE_OEM
336 | NTLMSSP_NEGOTIATE_UNICODE;
338 printf ("\n\nTesting (NTLMv2) Negotiation Flags\n");
339 assert_equal_guint32(0xE28A8233, flags);
341 printf ("\n\nTesting NTOWFv2()\n");
342 NTOWFv2 (password, user, domain, response_key_nt);
343 NTOWFv2 (password, user, domain, response_key_lm);
344 assert_equal("0C868A403BFD7A93A3001EF22EF02E3F", response_key_nt, 16, TRUE);
347 printf ("\n\nTesting (NTLMv2) LM Response Generation\n");
348 printf ("Testing (NTLMv2) NT Response Generation and Session Base Key\n");
350 Challenge:
351 4e544c4d53535000020000000c000c003800000033828ae20123456789abcdef00000000000000002400240044000000060070170000000f53006500720076006500720002000c0044006f006d00610069006e0001000c0053006500720076006500720000000000
353 NTLMSSP_NEGOTIATE_UNICODE
354 NTLMSSP_NEGOTIATE_OEM
355 NTLMSSP_NEGOTIATE_SIGN
356 NTLMSSP_NEGOTIATE_SEAL
357 NTLMSSP_NEGOTIATE_NTLM
358 NTLMSSP_NEGOTIATE_ALWAYS_SIGN
359 NTLMSSP_TARGET_TYPE_SERVER
360 NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
361 NTLMSSP_NEGOTIATE_TARGET_INFO
362 NTLMSSP_NEGOTIATE_VERSION
363 NTLMSSP_NEGOTIATE_128
364 NTLMSSP_NEGOTIATE_KEY_EXCH
365 NTLMSSP_NEGOTIATE_56
366 target_name.len : 12
367 target_name.maxlen: 12
368 target_name.offset: 56
369 target_info.len : 36
370 target_info.maxlen: 36
371 target_info.offset: 68
372 product: 6.0.6000 (Windows Vista, Windows Server 2008, Windows 7 or Windows Server 2008 R2)
373 ntlm_revision_current: 0x0F (NTLMSSP_REVISION_W2K3)
374 target_name: Server
375 MsvAvNbDomainName: Domain
376 MsvAvNbComputerName: Server
378 target_name:
379 530065007200760065007200
380 target_info:
381 02000c0044006f006d00610069006e0001000c0053006500720076006500720000000000
383 Response:
384 4e544c4d5353500003000000180018006c00000054005400840000000c000c00480000000800080054000000100010005c00000010001000d8000000358288e20501280a0000000f44006f006d00610069006e00550073006500720043004f004d005000550054004500520086c35097ac9cec102554764a57cccc19aaaaaaaaaaaaaaaa68cd0ab851e51c96aabc927bebef6a1c01010000000000000000000000000000aaaaaaaaaaaaaaaa0000000002000c0044006f006d00610069006e0001000c005300650072007600650072000000000000000000c5dad2544fc9799094ce1ce90bc9d03e
389 const guint64 time_val = 0;
390 const guint8 target_info [] = {
391 0x02, 0x00, 0x0C, 0x00, //NetBIOS Domain name, 4 bytes
392 0x44, 0x00, 0x6F, 0x00, 0x6D, 0x00, 0x61, 0x00, 0x69, 0x00, 0x6E, 0x00, //D.o.m.a.i.n. 12bytes
393 0x01, 0x00, 0x0C, 0x00, //NetBIOS Server name, 4 bytes
394 0x53, 0x00, 0x65, 0x00, 0x72, 0x00, 0x76, 0x00, 0x65, 0x00, 0x72, 0x00, //S.e.r.v.e.r. 12bytes
395 0x00, 0x00, 0x00, 0x00, //Av End, 4 bytes
397 const int target_info_len = 32+4;
398 int ntlmssp_nt_resp_len = (16 + (32+target_info_len));
399 guchar nt_challenge_response_v2 [ntlmssp_nt_resp_len];
401 compute_response(flags,
402 response_key_nt,
403 response_key_lm,
404 nonce,
405 client_challenge,
406 time_val,
407 target_info, /* target_info */
408 target_info_len, /* target_info_len */
409 lm_challenge_response, /* out */
410 nt_challenge_response_v2, /* out */
411 session_base_key); /* out */
413 assert_equal("86C35097AC9CEC102554764A57CCCC19AAAAAAAAAAAAAAAA", lm_challenge_response, 24, TRUE);
414 assert_equal("68CD0AB851E51C96AABC927BEBEF6A1C", nt_challenge_response_v2, 16, TRUE);
415 /* the ref string is taken from binary dump of AUTHENTICATE_MESSAGE */
416 assert_equal("68CD0AB851E51C96AABC927BEBEF6A1C01010000000000000000000000000000AAAAAAAAAAAAAAAA0000000002000C0044006F006D00610069006E0001000C005300650072007600650072000000000000000000", nt_challenge_response_v2, ntlmssp_nt_resp_len, TRUE);
417 assert_equal("8DE40CCADBC14A82F15CB0AD0DE95CA3", session_base_key, 16, TRUE);
420 printf ("\n\nTesting (NTLMv2) Encrypted Session Key\n");
421 // key_exchange_key = session_base_key for NTLMv2
422 KXKEY(flags, session_base_key, lm_challenge_response, nonce, key_exchange_key);
423 //RC4 encryption of the RandomSessionKey with the KeyExchangeKey:
424 RC4K (key_exchange_key, 16, exported_session_key, 16, encrypted_random_session_key);
425 assert_equal("C5DAD2544FC9799094CE1CE90BC9D03E", encrypted_random_session_key, 16, TRUE);
427 printf ("\n\nTesting (NTLMv2) SIGNKEY\n");
428 SIGNKEY (exported_session_key, TRUE, client_sign_key);
429 assert_equal("4788DC861B4782F35D43FD98FE1A2D39", client_sign_key, 16, TRUE);
431 printf ("\n\nTesting (NTLMv2) SEALKEY\n");
432 SEALKEY (flags, exported_session_key, TRUE, client_seal_key);
433 assert_equal("59F600973CC4960A25480A7C196E4C58", client_seal_key, 16, TRUE);
435 printf ("\n\nTesting (NTLMv2) Encryption\n");
436 RC4K (client_seal_key, 16, text, 18, text_enc);
437 assert_equal("54E50165BF1936DC996020C1811B0F06FB5F", text_enc, 18, TRUE);
439 // printf ("\n\nTesting (NTLMv2) Encryption\n");
440 //const guchar text2 [] = {0x50, 0x00, 0x6c, 0x00, 0x61, 0x00, 0x69, 0x00, 0x6e, 0x00, 0x74, 0x00, 0x65, 0x00, 0x78, 0x00, 0x74, 0x00
441 // , 0x70, 0x35, 0x28, 0x51, 0xf2, 0x56, 0x43, 0x09}; //P·l·a·i·n·t·e·x·t·
442 //guchar text_enc2 [18+8];
443 // RC4K (client_seal_key, 16, text2, 18+8, text_enc2);
444 // assert_equal("54E50165BF1936DC996020C1811B0F06FB5F", text_enc2, 18+8, TRUE);
446 printf ("\n\nTesting (NTLMv2) MAC (without RC4, as we don't keep its handle yet)\n");
447 MAC (flags & ~NTLMSSP_NEGOTIATE_KEY_EXCH, (gchar*)text,18, client_sign_key,16, client_seal_key,16, 0, 0, mac);
448 assert_equal("0100000070352851F256430900000000", mac, 16, TRUE);
451 /* End tests from the MS-SIPE document */
454 ////// davenport tests ///////
455 // Test from http://davenport.sourceforge.net/ntlm.html#ntlm1Signing
457 const gchar *text_j = "jCIFS";
458 printf ("\n\n(davenport) Testing Signature Algorithm\n");
460 guchar sk [] = {0x01, 0x02, 0x03, 0x04, 0x05, 0xe5, 0x38, 0xb0};
461 MAC (NEGOTIATE_FLAGS_CONNLESS & ~NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY, text_j, strlen(text_j), sk, 8, sk,8, 0x00090178, 0, mac);
462 assert_equal("0100000078010900397420FE0E5A0F89", mac, 16, TRUE);
465 // Tests from http://davenport.sourceforge.net/ntlm.html#ntlm2Signing
466 printf ("\n\n(davenport) SIGNKEY\n");
468 const guchar master_key [] = {0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x00};
469 SIGNKEY (master_key, TRUE, client_sign_key);
470 assert_equal("F7F97A82EC390F9C903DAC4F6ACEB132", client_sign_key, 16, TRUE);
472 printf ("\n\n(davenport) Testing MAC - no Key Exchange flag\n");
473 MAC (flags & ~NTLMSSP_NEGOTIATE_KEY_EXCH, text_j, strlen(text_j), client_sign_key, 16, client_sign_key,16, 0, 0, mac);
474 assert_equal("010000000A003602317A759A00000000", mac, 16, TRUE);
479 ////// SIPE internal tests ///////
480 // Verify signature of SIPE message received from OCS 2007 after authenticating with pidgin-sipe
481 printf ("\n\nTesting MS-SIPE Example Message Signing\n");
483 char * msg2;
484 char * msg1 = "<NTLM><0878F41B><1><SIP Communications Service><ocs1.ocs.provo.novell.com><8592g5DCBa1694i5887m0D0Bt2247b3F38xAE9Fx><3><REGISTER><sip:gabriel@ocs.provo.novell.com><2947328781><B816D65C2300A32CFA6D371F2AF537FD><900><200>";
485 guchar exported_session_key2 [] = { 0x5F, 0x02, 0x91, 0x53, 0xBC, 0x02, 0x50, 0x58, 0x96, 0x95, 0x48, 0x61, 0x5E, 0x70, 0x99, 0xBA };
487 MAC (NEGOTIATE_FLAGS_CONNLESS & ~NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY,
488 msg1, strlen(msg1), exported_session_key2, 16, exported_session_key2,16, 0, 100, mac);
489 assert_equal("0100000000000000BF2E52667DDF6DED", mac, 16, TRUE);
491 // Verify parsing of message and signature verification
492 printf ("\n\nTesting MS-SIPE Example Message Parsing, Signing, and Verification\n(Authentication Protocol Version 2)\n");
493 msg2 = "SIP/2.0 200 OK\r\nms-keep-alive: UAS; tcp=no; hop-hop=yes; end-end=no; timeout=300\r\nAuthentication-Info: NTLM rspauth=\"0100000000000000BF2E52667DDF6DED\", srand=\"0878F41B\", snum=\"1\", opaque=\"4452DFB0\", qop=\"auth\", targetname=\"ocs1.ocs.provo.novell.com\", realm=\"SIP Communications Service\"\r\nFrom: \"Gabriel Burt\"<sip:gabriel@ocs.provo.novell.com>;tag=2947328781;epid=1234567890\r\nTo: <sip:gabriel@ocs.provo.novell.com>;tag=B816D65C2300A32CFA6D371F2AF537FD\r\nCall-ID: 8592g5DCBa1694i5887m0D0Bt2247b3F38xAE9Fx\r\nCSeq: 3 REGISTER\r\nVia: SIP/2.0/TLS 164.99.194.49:10409;branch=z9hG4bKE0E37DBAF252C3255BAD;received=164.99.195.20;ms-received-port=10409;ms-received-cid=1E00\r\nContact: <sip:164.99.195.20:10409;transport=tls;ms-received-cid=1E00>;expires=900\r\nExpires: 900\r\nAllow-Events: vnd-microsoft-provisioning,vnd-microsoft-roaming-contacts,vnd-microsoft-roaming-ACL,presence,presence.wpending,vnd-microsoft-roaming-self,vnd-microsoft-provisioning-v2\r\nSupported: adhoclist\r\nServer: RTC/3.0\r\nSupported: com.microsoft.msrtc.presence\r\nContent-Length: 0\r\n\r\n";
494 msg = sipmsg_parse_msg(msg2);
496 msgbd.msg = msg;
497 sipmsg_breakdown_parse(&msgbd, "SIP Communications Service", "ocs1.ocs.provo.novell.com");
498 msg_str = sipmsg_breakdown_get_string(2, &msgbd);
499 sip_sec_ntlm_sipe_signature_make (NEGOTIATE_FLAGS_CONNLESS & ~NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY,
500 msg_str, 0, exported_session_key2, exported_session_key2, mac);
501 sipmsg_breakdown_free(&msgbd);
502 assert_equal ("0100000000000000BF2E52667DDF6DED", mac, 16, TRUE);
503 /* sig = buff_to_hex_str((guint8 *)mac, 16); */
507 ////// real Communicator 2007 R2 tests //////
508 ////// Recreated/verifyed real authentication communication between
509 ////// Communicator 2007 R2 and Office Communications Server 2007 R2
510 ////// with SIPE NTLMv2 implementation.
512 password2 = "Pa$$word";
513 user2 = "User";
514 domain2 = "COSMO";
515 host2 = "COSMO-OCS-R2";
517 //Challenge:
518 //const char *type2 = "TlRMTVNTUAACAAAAAAAAADgAAADzgpji3Ruq9OfiGNEAAAAAAAAAAJYAlgA4AAAABQLODgAAAA8CAAoAQwBPAFMATQBPAAEAGABDAE8AUwBNAE8ALQBPAEMAUwAtAFIAMgAEABYAYwBvAHMAbQBvAC4AbABvAGMAYQBsAAMAMABjAG8AcwBtAG8ALQBvAGMAcwAtAHIAMgAuAGMAbwBzAG0AbwAuAGwAbwBjAGEAbAAFABYAYwBvAHMAbQBvAC4AbABvAGMAYQBsAAAAAAA=";
519 //in hex (base64 decoded):
520 type2_hex = "4E544C4D53535000020000000000000038000000F38298E2DD1BAAF4E7E218D1000000000000000096009600380000000502CE0E0000000F02000A0043004F0053004D004F000100180043004F0053004D004F002D004F00430053002D00520032000400160063006F0073006D006F002E006C006F00630061006C000300300063006F0073006D006F002D006F00630073002D00720032002E0063006F0073006D006F002E006C006F00630061006C000500160063006F0073006D006F002E006C006F00630061006C0000000000";
522 Message (length 206):
523 NTLMSSP_NEGOTIATE_UNICODE
524 NTLMSSP_NEGOTIATE_OEM
525 NTLMSSP_NEGOTIATE_SIGN
526 NTLMSSP_NEGOTIATE_SEAL
527 NTLMSSP_NEGOTIATE_DATAGRAM
528 NTLMSSP_NEGOTIATE_LM_KEY
529 NTLMSSP_NEGOTIATE_NTLM
530 NTLMSSP_NEGOTIATE_ALWAYS_SIGN
531 NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
532 NTLMSSP_NEGOTIATE_IDENTIFY
533 NTLMSSP_NEGOTIATE_TARGET_INFO
534 NTLMSSP_NEGOTIATE_VERSION
535 NTLMSSP_NEGOTIATE_128
536 NTLMSSP_NEGOTIATE_KEY_EXCH
537 NTLMSSP_NEGOTIATE_56
538 server_challenge: DD1BAAF4E7E218D1
539 target_name.len : 0
540 target_name.maxlen: 0
541 target_name.offset: 56
542 target_info.len : 150
543 target_info.maxlen: 150
544 target_info.offset: 56
545 product: 5.2.3790 (Windows Server 2003)
546 ntlm_revision_current: 0x0F (NTLMSSP_REVISION_W2K3)
547 target_info raw: 02000A0043004F0053004D004F000100180043004F0053004D004F002D004F00430053002D00520032000400160063006F0073006D006F002E006C006F00630061006C000300300063006F0073006D006F002D006F00630073002D00720032002E0063006F0073006D006F002E006C006F00630061006C000500160063006F0073006D006F002E006C006F00630061006C0000000000
548 MsvAvNbDomainName: COSMO
549 MsvAvNbComputerName: COSMO-OCS-R2
550 MsvAvDnsDomainName: cosmo.local
551 MsvAvDnsComputerName: cosmo-ocs-r2.cosmo.local
552 MsvAvDnsTreeName: cosmo.local
556 //Response:
557 //const char *type3 = "TlRMTVNTUAADAAAAGAAYAHIAAADGAMYAigAAAAoACgBIAAAACAAIAFIAAAAYABgAWgAAABAAEABQAQAAVYKYYgUCzg4AAAAPQwBPAFMATQBPAFUAcwBlAHIAQwBPAFMATQBPAC0ATwBDAFMALQBSADIAoeku/k4Hi/fFwASazGFmwtauh1yw/apBjcDIAK527KYG0rn769BHMQEBAAAAAAAAWVGaFye5ygHWrodcsP2qQQAAAAACAAoAQwBPAFMATQBPAAEAGABDAE8AUwBNAE8ALQBPAEMAUwAtAFIAMgAEABYAYwBvAHMAbQBvAC4AbABvAGMAYQBsAAMAMABjAG8AcwBtAG8ALQBvAGMAcwAtAHIAMgAuAGMAbwBzAG0AbwAuAGwAbwBjAGEAbAAFABYAYwBvAHMAbQBvAC4AbABvAGMAYQBsAAAAAAAAAAAAMctznhyoCkmFkeiueXEV5A==";
558 //in hex (base64 decoded):
559 type3_hex = "4E544C4D53535000030000001800180072000000C600C6008A0000000A000A00480000000800080052000000180018005A0000001000100050010000558298620502CE0E0000000F43004F0053004D004F00550073006500720043004F0053004D004F002D004F00430053002D0052003200A1E92EFE4E078BF7C5C0049ACC6166C2D6AE875CB0FDAA418DC0C800AE76ECA606D2B9FBEBD04731010100000000000059519A1727B9CA01D6AE875CB0FDAA410000000002000A0043004F0053004D004F000100180043004F0053004D004F002D004F00430053002D00520032000400160063006F0073006D006F002E006C006F00630061006C000300300063006F0073006D006F002D006F00630073002D00720032002E0063006F0073006D006F002E006C006F00630061006C000500160063006F0073006D006F002E006C006F00630061006C00000000000000000031CB739E1CA80A498591E8AE797115E4";
561 Message (length 352):
562 NTLMSSP_NEGOTIATE_UNICODE
563 NTLMSSP_REQUEST_TARGET
564 NTLMSSP_NEGOTIATE_SIGN
565 NTLMSSP_NEGOTIATE_DATAGRAM
566 NTLMSSP_NEGOTIATE_NTLM
567 NTLMSSP_NEGOTIATE_ALWAYS_SIGN
568 NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
569 NTLMSSP_NEGOTIATE_IDENTIFY
570 NTLMSSP_NEGOTIATE_TARGET_INFO
571 NTLMSSP_NEGOTIATE_VERSION
572 NTLMSSP_NEGOTIATE_128
573 NTLMSSP_NEGOTIATE_KEY_EXCH
574 lm_resp.len : 24
575 lm_resp.maxlen: 24
576 lm_resp.offset: 114
577 nt_resp.len : 198
578 nt_resp.maxlen: 198
579 nt_resp.offset: 138
580 domain.len : 10
581 domain.maxlen: 10
582 domain.offset: 72
583 user.len : 8
584 user.maxlen: 8
585 user.offset: 82
586 host.len : 24
587 host.maxlen: 24
588 host.offset: 90
589 session_key.len : 16
590 session_key.maxlen: 16
591 session_key.offset: 336
592 product: 5.2.3790 (Windows Server 2003)
593 ntlm_revision_current: 0x0F (NTLMSSP_REVISION_W2K3)
594 lm_resp: A1E92EFE4E078BF7C5C0049ACC6166C2D6AE875CB0FDAA41
595 nt_resp raw: 8DC0C800AE76ECA606D2B9FBEBD04731010100000000000059519A1727B9CA01D6AE875CB0FDAA410000000002000A0043004F0053004D004F000100180043004F0053004D004F002D004F00430053002D00520032000400160063006F0073006D006F002E006C006F00630061006C000300300063006F0073006D006F002D006F00630073002D00720032002E0063006F0073006D006F002E006C006F00630061006C000500160063006F0073006D006F002E006C006F00630061006C000000000000000000
596 nt_resp: 8DC0C800AE76ECA606D2B9FBEBD04731
597 target_info raw: 02000A0043004F0053004D004F000100180043004F0053004D004F002D004F00430053002D00520032000400160063006F0073006D006F002E006C006F00630061006C000300300063006F0073006D006F002D006F00630073002D00720032002E0063006F0073006D006F002E006C006F00630061006C000500160063006F0073006D006F002E006C006F00630061006C0000000000
598 response_version: 1
599 hi_response_version: 1
600 time: 59519A1727B9CA01 - Mon Mar 01 10:08:08 2010
601 client_challenge: D6AE875CB0FDAA41
602 MsvAvNbDomainName: COSMO
603 MsvAvNbComputerName: COSMO-OCS-R2
604 MsvAvDnsDomainName: cosmo.local
605 MsvAvDnsComputerName: cosmo-ocs-r2.cosmo.local
606 MsvAvDnsTreeName: cosmo.local
607 ----------- end of nt_resp v2 -----------
608 domain: COSMO
609 user: User
610 host: COSMO-OCS-R2
611 session_key: 31CB739E1CA80A498591E8AE797115E4
614 request =
615 "REGISTER sip:cosmo.local SIP/2.0\r\n"
616 "Via: SIP/2.0/TLS 192.168.172.6:12723\r\n"
617 "Max-Forwards: 70\r\n"
618 "From: <sip:user@cosmo.local>;tag=3e49177a52;epid=c8ca638a15\r\n"
619 "To: <sip:user@cosmo.local>\r\n"
620 "Call-ID: 4037df9284354df39065195bd57a4b14\r\n"
621 "CSeq: 3 REGISTER\r\n"
622 "Contact: <sip:192.168.172.6:12723;transport=tls;ms-opaque=fad3dfab32>;methods=\"INVITE, MESSAGE, INFO, OPTIONS, BYE, CANCEL, NOTIFY, ACK, REFER, BENOTIFY\";proxy=replace;+sip.instance=\"<urn:uuid:34D859DB-6585-5F91-A3B4-DE853C15347D>\"\r\n"
623 "User-Agent: UCCAPI/3.5.6907.0 OC/3.5.6907.0 (Microsoft Office Communicator 2007 R2)\r\n"
624 "Supported: gruu-10, adhoclist, msrtc-event-categories\r\n"
625 "Supported: ms-forking\r\n"
626 "ms-keep-alive: UAC;hop-hop=yes\r\n"
627 "Event: registration\r\n"
628 "Proxy-Authorization: NTLM qop=\"auth\", realm=\"SIP Communications Service\", opaque=\"2BDBAC9D\", targetname=\"cosmo-ocs-r2.cosmo.local\", version=4, gssapi-data=\"TlRMTVNTUAADAAAAGAAYAHIAAADGAMYAigAAAAoACgBIAAAACAAIAFIAAAAYABgAWgAAABAAEABQAQAAVYKYYgUCzg4AAAAPQwBPAFMATQBPAFUAcwBlAHIAQwBPAFMATQBPAC0ATwBDAFMALQBSADIAoeku/k4Hi/fFwASazGFmwtauh1yw/apBjcDIAK527KYG0rn769BHMQEBAAAAAAAAWVGaFye5ygHWrodcsP2qQQAAAAACAAoAQwBPAFMATQBPAAEAGABDAE8AUwBNAE8ALQBPAEMAUwAtAFIAMgAEABYAYwBvAHMAbQBvAC4AbABvAGMAYQBsAAMAMABjAG8AcwBtAG8ALQBvAGMAcwAtAHIAMgAuAGMAbwBzAG0AbwAuAGwAbwBjAGEAbAAFABYAYwBvAHMAbQBvAC4AbABvAGMAYQBsAAAAAAAAAAAAMctznhyoCkmFkeiueXEV5A==\", crand=\"13317733\", cnum=\"1\", response=\"0100000029618e9651b65a7764000000\"\r\n"
629 "Content-Length: 0\r\n"
630 "\r\n";
632 request_sig = "<NTLM><13317733><1><SIP Communications Service><cosmo-ocs-r2.cosmo.local><4037df9284354df39065195bd57a4b14><3><REGISTER><sip:user@cosmo.local><3e49177a52><sip:user@cosmo.local><><><><>";
633 //Signature:
634 //0100000029618e9651b65a7764000000
636 response =
637 "SIP/2.0 200 OK\r\n"
638 "ms-keep-alive: UAS; tcp=no; hop-hop=yes; end-end=no; timeout=300\r\n"
639 "Authentication-Info: NTLM rspauth=\"01000000E615438A917661BE64000000\", srand=\"9616454F\", snum=\"1\", opaque=\"2BDBAC9D\", qop=\"auth\", targetname=\"cosmo-ocs-r2.cosmo.local\", realm=\"SIP Communications Service\"\r\n"
640 "From: \"User\"<sip:user@cosmo.local>;tag=3e49177a52;epid=c8ca638a15\r\n"
641 "To: <sip:user@cosmo.local>;tag=5E61CCD925D17E043D9A74835A88F664\r\n"
642 "Call-ID: 4037df9284354df39065195bd57a4b14\r\n"
643 "CSeq: 3 REGISTER\r\n"
644 "Via: SIP/2.0/TLS 192.168.172.6:12723;ms-received-port=12723;ms-received-cid=2600\r\n"
645 "Contact: <sip:192.168.172.6:12723;transport=tls;ms-opaque=fad3dfab32;ms-received-cid=2600>;expires=7200;+sip.instance=\"<urn:uuid:34d859db-6585-5f91-a3b4-de853c15347d>\";gruu=\"sip:user@cosmo.local;opaque=user:epid:21nYNIVlkV-jtN6FPBU0fQAA;gruu\"\r\n"
646 "Expires: 7200\r\n"
647 "presence-state: register-action=\"added\"\r\n"
648 "Allow-Events: vnd-microsoft-provisioning,vnd-microsoft-roaming-contacts,vnd-microsoft-roaming-ACL,presence,presence.wpending,vnd-microsoft-roaming-self,vnd-microsoft-provisioning-v2\r\n"
649 "Supported: adhoclist\r\n"
650 "Server: RTC/3.5\r\n"
651 "Supported: msrtc-event-categories\r\n"
652 "Content-Length: 0\r\n"
653 "\r\n";
655 response_sig = "<NTLM><9616454F><1><SIP Communications Service><cosmo-ocs-r2.cosmo.local><4037df9284354df39065195bd57a4b14><3><REGISTER><sip:user@cosmo.local><3e49177a52><sip:user@cosmo.local><5E61CCD925D17E043D9A74835A88F664><><><7200><200>";
656 //Signature:
657 //01000000E615438A917661BE64000000
659 use_ntlm_v2 = TRUE;
660 flags = 0
661 | NTLMSSP_NEGOTIATE_UNICODE
662 | NTLMSSP_REQUEST_TARGET
663 | NTLMSSP_NEGOTIATE_SIGN
664 | NTLMSSP_NEGOTIATE_DATAGRAM
665 | NTLMSSP_NEGOTIATE_NTLM
666 | NTLMSSP_NEGOTIATE_ALWAYS_SIGN
667 | NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
668 | NTLMSSP_NEGOTIATE_IDENTIFY
669 | NTLMSSP_NEGOTIATE_TARGET_INFO
670 | NTLMSSP_NEGOTIATE_VERSION
671 | NTLMSSP_NEGOTIATE_128
672 | NTLMSSP_NEGOTIATE_KEY_EXCH;
674 /* global struct */
675 test_version.product_major_version = 5;
676 test_version.product_minor_version = 2;
677 test_version.product_build = GUINT16_FROM_LE(3790);
678 test_version.ntlm_revision_current = 0x0F;
680 NTOWFv2 (password2, user2, domain2, response_key_nt);
681 NTOWFv2 (password2, user2, domain2, response_key_lm);
684 int ntlmssp_nt_resp_len;
685 int target_info2_len;
686 guint8 *nonce2;
687 guint8 *target_info2;
688 guint64 *buff2;
689 /* buff2 points to correctly aligned memory. Disable alignment check */
690 hex_str_to_buff("59519A1727B9CA01", (void *)&buff2);
691 /* global var */
692 test_time_val = GUINT64_FROM_LE(*buff2);
693 g_free(buff2);
695 target_info2_len = hex_str_to_buff("02000A0043004F0053004D004F000100180043004F0053004D004F002D004F00430053002D00520032000400160063006F0073006D006F002E006C006F00630061006C000300300063006F0073006D006F002D006F00630073002D00720032002E0063006F0073006D006F002E006C006F00630061006C000500160063006F0073006D006F002E006C006F00630061006C0000000000", &target_info2);
697 hex_str_to_buff("DD1BAAF4E7E218D1", &nonce2);
699 /* buff2 points to correctly aligned memory. Disable alignment check */
700 hex_str_to_buff("D6AE875CB0FDAA41", (void *)&buff2);
701 /* global buff */
702 memcpy(test_client_challenge, buff2, 8);
703 g_free(buff2);
705 ntlmssp_nt_resp_len = (16 + (32+target_info2_len));
707 guchar nt_challenge_response_v2_2 [ntlmssp_nt_resp_len];
709 printf ("\n\nTesting (NTLMv2 / OC 2007 R2) LM Response Generation\n");
710 printf ( "Testing (NTLMv2 / OC 2007 R2) NT Response Generation\n");
711 compute_response(flags,
712 response_key_nt,
713 response_key_lm,
714 nonce2,
715 test_client_challenge,
716 test_time_val,
717 target_info2, /* target_info */
718 target_info2_len, /* target_info_len */
719 lm_challenge_response, /* out */
720 nt_challenge_response_v2_2, /* out */
721 session_base_key); /* out */
722 g_free(nonce2);
723 g_free(target_info2);
725 assert_equal("A1E92EFE4E078BF7C5C0049ACC6166C2D6AE875CB0FDAA41", lm_challenge_response, 24, TRUE);
726 assert_equal("8DC0C800AE76ECA606D2B9FBEBD04731", nt_challenge_response_v2_2, 16, TRUE);
727 /* the ref string is taken from binary dump of AUTHENTICATE_MESSAGE */
728 assert_equal("8DC0C800AE76ECA606D2B9FBEBD04731010100000000000059519A1727B9CA01D6AE875CB0FDAA410000000002000A0043004F0053004D004F000100180043004F0053004D004F002D004F00430053002D00520032000400160063006F0073006D006F002E006C006F00630061006C000300300063006F0073006D006F002D006F00630073002D00720032002E0063006F0073006D006F002E006C006F00630061006C000500160063006F0073006D006F002E006C006F00630061006C000000000000000000", nt_challenge_response_v2_2, ntlmssp_nt_resp_len, TRUE);
731 KXKEY(flags, session_base_key, lm_challenge_response, nonce2, key_exchange_key);
735 //as in the Type3 message
737 guint8 *encrypted_random_session_key2;
738 hex_str_to_buff("31CB739E1CA80A498591E8AE797115E4", &encrypted_random_session_key2);
739 /* global buff - test_random_session_key */
740 //decoding exported_session_key
741 RC4K (key_exchange_key, 16, encrypted_random_session_key2, 16, test_random_session_key);
742 g_free(encrypted_random_session_key2);
745 SIGNKEY (test_random_session_key, TRUE, client_sign_key);
746 SEALKEY (flags, test_random_session_key, TRUE, client_seal_key);
747 SIGNKEY (test_random_session_key, FALSE, server_sign_key);
748 SEALKEY (flags, test_random_session_key, FALSE, server_seal_key);
750 printf ("\n\nTesting (NTLMv2 / OC 2007 R2) Message Parsing, Signing, and Verification\nClient request\n(Authentication Protocol version 4)\n");
751 msg = sipmsg_parse_msg(request);
752 msgbd.msg = msg;
753 sipmsg_breakdown_parse(&msgbd, "SIP Communications Service", "cosmo-ocs-r2.cosmo.local");
754 msg_str = sipmsg_breakdown_get_string(4, &msgbd);
755 assert_equal (request_sig, (guchar *)msg_str, strlen(request_sig), FALSE);
756 sip_sec_ntlm_sipe_signature_make (flags, msg_str, 0, client_sign_key, client_seal_key, mac);
757 sipmsg_breakdown_free(&msgbd);
758 assert_equal ("0100000029618e9651b65a7764000000", mac, 16, TRUE);
759 /* sig = buff_to_hex_str((guint8 *)mac, 16); */
761 printf ("\n\nTesting (NTLMv2 / OC 2007 R2) Message Parsing, Signing, and Verification\nServer response\n(Authentication Protocol version 4)\n");
762 msg = sipmsg_parse_msg(response);
763 msgbd.msg = msg;
764 sipmsg_breakdown_parse(&msgbd, "SIP Communications Service", "cosmo-ocs-r2.cosmo.local");
765 msg_str = sipmsg_breakdown_get_string(4, &msgbd);
766 assert_equal (response_sig, (guchar *)msg_str, strlen(response_sig), FALSE);
767 // server keys here
768 sip_sec_ntlm_sipe_signature_make (flags, msg_str, 0, server_sign_key, server_seal_key, mac);
769 sipmsg_breakdown_free(&msgbd);
770 assert_equal ("01000000E615438A917661BE64000000", mac, 16, TRUE);
771 /* sig = buff_to_hex_str((guint8 *)mac, 16); */
773 printf ("\n\nTesting (NTLMv2 / OC 2007 R2) MAC - client signing\n");
774 MAC (flags, (gchar*)request_sig,strlen(request_sig), client_sign_key,16, client_seal_key,16, 0, 100, mac);
775 assert_equal("0100000029618e9651b65a7764000000", mac, 16, TRUE);
777 printf ("\n\nTesting (NTLMv2 / OC 2007 R2) MAC - server's verifying\n");
778 MAC (flags, (gchar*)response_sig,strlen(response_sig), server_sign_key,16, server_seal_key,16, 0, 100, mac);
779 assert_equal("01000000E615438A917661BE64000000", mac, 16, TRUE);
781 printf ("\n\nTesting (NTLMv2 / OC 2007 R2) Type3 generation test\n");
783 guchar *client_sign_key2;
784 guchar *server_sign_key2;
785 guchar *client_seal_key2;
786 guchar *server_seal_key2;
788 guchar *server_challenge = NULL;
789 guint64 time_val2 = 0;
790 guchar *target_info3 = NULL;
791 int target_info3_len = 0;
792 guint32 flags2;
793 SipSecBuffer in_buff;
794 SipSecBuffer out_buff;
796 in_buff.length = hex_str_to_buff(type2_hex, (guint8 **)&(in_buff.value));
798 sip_sec_ntlm_parse_challenge(in_buff,
799 &flags2, /* out */
800 &server_challenge,
801 &time_val2,
802 &target_info3,
803 &target_info3_len);
805 sip_sec_ntlm_gen_authenticate(&client_sign_key2,
806 &server_sign_key2,
807 &client_seal_key2,
808 &server_seal_key2,
809 user2,
810 password2,
811 host2,
812 domain2,
813 server_challenge,
814 test_time_val,
815 target_info3,
816 target_info3_len,
818 &out_buff,
819 &flags2);
821 g_free(server_challenge);
822 g_free(target_info3);
824 assert_equal(type3_hex, out_buff.value, out_buff.length, TRUE);
827 printf ("\n\nTesting Authentication Algorithm's v4 Signature String\n");
829 char *response_symbian =
830 "SIP/2.0 180 Ringing\r\n"
831 "Authentication-Info: NTLM rspauth=\"010000003EA8D688BA51D5CD64000000\", srand=\"1B6D47A1\", snum=\"11\", opaque=\"357E6F72\", qop=\"auth\", targetname=\"LOC-COMPANYT-FE03.COMPANY.COM\", realm=\"SIP Communications Service\"\r\n"
832 "Via: SIP/2.0/tls 192.168.44.10:50230;received=10.117.245.254;ms-received-port=50230;ms-received-cid=37ABE00\r\n"
833 "FROM: \"Sender\"<sip:sender@company.com>;tag=2420628112;epid=54392f1bbf01\r\n"
834 "TO: \"recipient\"<sip:recipient@company.com>;tag=7aee15546a;epid=3102EB8BD1\r\n"
835 "CSEQ: 1 INVITE\r\n"
836 "CALL-ID: 41CEg82ECa0AC8i3DD7mE673t9CF4b19DAxF780x\r\n"
837 "RECORD-ROUTE: <sip:LOC-COMPANYT-OCSR2P01.COMPANY.COM:5061;transport=tls;ms-fe=LOC-COMPANYT-FE03.COMPANY.COM;opaque=state:F:T:Eu:Ci.R37abe00;lr;ms-route-sig=gdOGgL7NiL3hv_oBc0NdrJOxZk_r-8naq-k_DtpgAA>\r\n"
838 "CONTACT: <sip:recipient@company.com;opaque=user:epid:-gLwenLTVVqy-Ak8TJn1ZAAA;gruu>;text;audio;video\r\n"
839 "CONTENT-LENGTH: 0\r\n"
840 "SUPPORTED: gruu-10\r\n"
841 "ALLOW: UPDATE\r\n"
842 "P-ASSERTED-IDENTITY: \"recipient\"<SIP:recipient@company.com>\r\n"
843 "SERVER: RTCC/3.5.0.0 MCXService/3.5.0.0 communicator.NOKIAS60R2.JVP.EN_US/1.0.6875.0\r\n"
844 "\r\n";
846 response_sig = "<NTLM><1B6D47A1><11><SIP Communications Service><LOC-COMPANYT-FE03.COMPANY.COM><41CEg82ECa0AC8i3DD7mE673t9CF4b19DAxF780x><1><INVITE><sip:sender@company.com><2420628112><sip:recipient@company.com><7aee15546a><SIP:recipient@company.com><><><180>";
848 msg = sipmsg_parse_msg(response_symbian);
849 msgbd.msg = msg;
850 sipmsg_breakdown_parse(&msgbd, "SIP Communications Service", "LOC-COMPANYT-FE03.COMPANY.COM");
851 msg_str = sipmsg_breakdown_get_string(4, &msgbd);
853 assert_equal (response_sig, (guchar *)msg_str, strlen(response_sig), FALSE);
855 sipmsg_breakdown_free(&msgbd);
858 ////// UUID tests ///////
859 /* begin tests from MS-SIPRE */
861 const char *testEpid = "01010101";
862 const char *expectedUUID = "4b1682a8-f968-5701-83fc-7c6741dc6697";
863 gchar *calcUUID = generateUUIDfromEPID(testEpid);
865 printf("\n\nTesting MS-SIPRE UUID derivation\n");
867 assert_equal(expectedUUID, (guchar *) calcUUID, strlen(expectedUUID), FALSE);
868 g_free(calcUUID);
871 /* end tests from MS-SIPRE */
873 printf ("\nFinished With Tests; %d successs %d failures\n", successes, failures);
875 sip_sec_destroy__ntlm();
877 return(failures == 0);
881 Local Variables:
882 mode: c
883 c-file-style: "bsd"
884 indent-tabs-mode: t
885 tab-width: 8
886 End: