?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
d3dx9/tests: Use a helper function to set matrix values in math tests.
[wine.git] / dlls / secur32 / schannel.c
blob88b6521a7d8bd4d1e4c8e1dddfe80bd999b57610
1 /* Copyright (C) 2005 Juan Lang
2 * Copyright 2008 Henri Verbeet
3 *
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
8 *
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
13 *
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
17 *
18 * This file implements the schannel provider, or, the SSL/TLS implementations.
19 */
20 #include "config.h"
21 #include "wine/port.h"
22
23 #include <stdarg.h>
24 #include <errno.h>
25
26 #define NONAMELESSUNION
27 #include "windef.h"
28 #include "winbase.h"
29 #include "winreg.h"
30 #include "winnls.h"
31 #include "sspi.h"
32 #include "schannel.h"
33 #include "secur32_priv.h"
34
35 #include "wine/unicode.h"
36 #include "wine/debug.h"
37
38 WINE_DEFAULT_DEBUG_CHANNEL(secur32);
39
40 #if defined(SONAME_LIBGNUTLS) || defined (HAVE_SECURITY_SECURITY_H)
41
42 #define SCHAN_INVALID_HANDLE ~0UL
43
44 enum schan_handle_type
45 {
46 SCHAN_HANDLE_CRED,
47 SCHAN_HANDLE_CTX,
48 SCHAN_HANDLE_FREE
49 };
50
51 struct schan_handle
52 {
53 void *object;
54 enum schan_handle_type type;
55 };
56
57 struct schan_context
58 {
59 schan_imp_session session;
60 struct schan_transport transport;
61 ULONG req_ctx_attr;
62 const CERT_CONTEXT *cert;
63 };
64
65 static struct schan_handle *schan_handle_table;
66 static struct schan_handle *schan_free_handles;
67 static SIZE_T schan_handle_table_size;
68 static SIZE_T schan_handle_count;
69
70 /* Protocols enabled, only those may be used for the connection. */
71 static DWORD config_enabled_protocols;
72
73 /* Protocols disabled by default. They are enabled for using, but disabled when caller asks for default settings. */
74 static DWORD config_default_disabled_protocols;
75
76 static ULONG_PTR schan_alloc_handle(void *object, enum schan_handle_type type)
77 {
78 struct schan_handle *handle;
79
80 if (schan_free_handles)
81 {
82 DWORD index = schan_free_handles - schan_handle_table;
83 /* Use a free handle */
84 handle = schan_free_handles;
85 if (handle->type != SCHAN_HANDLE_FREE)
86 {
87 ERR("Handle %d(%p) is in the free list, but has type %#x.\n", index, handle, handle->type);
88 return SCHAN_INVALID_HANDLE;
89 }
90 schan_free_handles = handle->object;
91 handle->object = object;
92 handle->type = type;
93
94 return index;
95 }
96 if (!(schan_handle_count < schan_handle_table_size))
97 {
98 /* Grow the table */
99 SIZE_T new_size = schan_handle_table_size + (schan_handle_table_size >> 1);
100 struct schan_handle *new_table = HeapReAlloc(GetProcessHeap(), 0, schan_handle_table, new_size * sizeof(*schan_handle_table));
101 if (!new_table)
102 {
103 ERR("Failed to grow the handle table\n");
104 return SCHAN_INVALID_HANDLE;
105 }
106 schan_handle_table = new_table;
107 schan_handle_table_size = new_size;
108 }
109
110 handle = &schan_handle_table[schan_handle_count++];
111 handle->object = object;
112 handle->type = type;
113
114 return handle - schan_handle_table;
115 }
116
117 static void *schan_free_handle(ULONG_PTR handle_idx, enum schan_handle_type type)
118 {
119 struct schan_handle *handle;
120 void *object;
121
122 if (handle_idx == SCHAN_INVALID_HANDLE) return NULL;
123 if (handle_idx >= schan_handle_count) return NULL;
124 handle = &schan_handle_table[handle_idx];
125 if (handle->type != type)
126 {
127 ERR("Handle %ld(%p) is not of type %#x\n", handle_idx, handle, type);
128 return NULL;
129 }
130
131 object = handle->object;
132 handle->object = schan_free_handles;
133 handle->type = SCHAN_HANDLE_FREE;
134 schan_free_handles = handle;
135
136 return object;
137 }
138
139 static void *schan_get_object(ULONG_PTR handle_idx, enum schan_handle_type type)
140 {
141 struct schan_handle *handle;
142
143 if (handle_idx == SCHAN_INVALID_HANDLE) return NULL;
144 if (handle_idx >= schan_handle_count) return NULL;
145 handle = &schan_handle_table[handle_idx];
146 if (handle->type != type)
147 {
148 ERR("Handle %ld(%p) is not of type %#x\n", handle_idx, handle, type);
149 return NULL;
150 }
151
152 return handle->object;
153 }
154
155 static void read_config(void)
156 {
157 DWORD enabled = 0, default_disabled = 0;
158 HKEY protocols_key, key;
159 WCHAR subkey_name[64];
160 unsigned i;
161 DWORD res;
162
163 static BOOL config_read = FALSE;
164
165 static const WCHAR protocol_config_key_name[] = {
166 'S','Y','S','T','E','M','\\',
167 'C','u','r','r','e','n','t','C','o','n','t','r','o','l','S','e','t','\\',
168 'C','o','n','t','r','o','l','\\',
169 'S','e','c','u','r','i','t','y','P','r','o','v','i','d','e','r','s','\\',
170 'S','C','H','A','N','N','E','L','\\',
171 'P','r','o','t','o','c','o','l','s',0 };
172
173 static const WCHAR clientW[] = {'\\','C','l','i','e','n','t',0};
174 static const WCHAR enabledW[] = {'e','n','a','b','l','e','d',0};
175 static const WCHAR disabledbydefaultW[] = {'D','i','s','a','b','l','e','d','B','y','D','e','f','a','u','l','t',0};
176
177 static const struct {
178 WCHAR key_name[20];
179 DWORD prot_client_flag;
180 BOOL enabled; /* If no config is present, enable the protocol */
181 BOOL disabled_by_default; /* Disable if caller asks for default protocol set */
182 } protocol_config_keys[] = {
183 {{'S','S','L',' ','2','.','0',0}, SP_PROT_SSL2_CLIENT, FALSE, TRUE}, /* NOTE: TRUE, TRUE on Windows */
184 {{'S','S','L',' ','3','.','0',0}, SP_PROT_SSL3_CLIENT, TRUE, FALSE},
185 {{'T','L','S',' ','1','.','0',0}, SP_PROT_TLS1_0_CLIENT, TRUE, FALSE},
186 {{'T','L','S',' ','1','.','1',0}, SP_PROT_TLS1_1_CLIENT, TRUE, FALSE /* NOTE: not enabled by default on Windows */ },
187 {{'T','L','S',' ','1','.','2',0}, SP_PROT_TLS1_2_CLIENT, TRUE, FALSE /* NOTE: not enabled by default on Windows */ }
188 };
189
190 /* No need for thread safety */
191 if(config_read)
192 return;
193
194 res = RegOpenKeyExW(HKEY_LOCAL_MACHINE, protocol_config_key_name, 0, KEY_READ, &protocols_key);
195 if(res == ERROR_SUCCESS) {
196 DWORD type, size, value;
197
198 for(i=0; i < sizeof(protocol_config_keys)/sizeof(*protocol_config_keys); i++) {
199 strcpyW(subkey_name, protocol_config_keys[i].key_name);
200 strcatW(subkey_name, clientW);
201 res = RegOpenKeyExW(protocols_key, subkey_name, 0, KEY_READ, &key);
202 if(res != ERROR_SUCCESS) {
203 if(protocol_config_keys[i].enabled)
204 enabled |= protocol_config_keys[i].prot_client_flag;
205 if(protocol_config_keys[i].disabled_by_default)
206 default_disabled |= protocol_config_keys[i].prot_client_flag;
207 continue;
208 }
209
210 size = sizeof(value);
211 res = RegQueryValueExW(key, enabledW, NULL, &type, (BYTE*)&value, &size);
212 if(res == ERROR_SUCCESS) {
213 if(type == REG_DWORD && value)
214 enabled |= protocol_config_keys[i].prot_client_flag;
215 }else if(protocol_config_keys[i].enabled) {
216 enabled |= protocol_config_keys[i].prot_client_flag;
217 }
218
219 size = sizeof(value);
220 res = RegQueryValueExW(key, disabledbydefaultW, NULL, &type, (BYTE*)&value, &size);
221 if(res == ERROR_SUCCESS) {
222 if(type != REG_DWORD || value)
223 default_disabled |= protocol_config_keys[i].prot_client_flag;
224 }else if(protocol_config_keys[i].disabled_by_default) {
225 default_disabled |= protocol_config_keys[i].prot_client_flag;
226 }
227
228 RegCloseKey(key);
229 }
230 }else {
231 /* No config, enable all known protocols. */
232 for(i=0; i < sizeof(protocol_config_keys)/sizeof(*protocol_config_keys); i++) {
233 if(protocol_config_keys[i].enabled)
234 enabled |= protocol_config_keys[i].prot_client_flag;
235 if(protocol_config_keys[i].disabled_by_default)
236 default_disabled |= protocol_config_keys[i].prot_client_flag;
237 }
238 }
239
240 RegCloseKey(protocols_key);
241
242 config_enabled_protocols = enabled & schan_imp_enabled_protocols();
243 config_default_disabled_protocols = default_disabled;
244 config_read = TRUE;
245
246 TRACE("enabled %x, disabled by default %x\n", config_enabled_protocols, config_default_disabled_protocols);
247 }
248
249 static SECURITY_STATUS schan_QueryCredentialsAttributes(
250 PCredHandle phCredential, ULONG ulAttribute, VOID *pBuffer)
251 {
252 struct schan_credentials *cred;
253 SECURITY_STATUS ret;
254
255 cred = schan_get_object(phCredential->dwLower, SCHAN_HANDLE_CRED);
256 if(!cred)
257 return SEC_E_INVALID_HANDLE;
258
259 switch (ulAttribute)
260 {
261 case SECPKG_ATTR_SUPPORTED_ALGS:
262 if (pBuffer)
263 {
264 /* FIXME: get from CryptoAPI */
265 FIXME("SECPKG_ATTR_SUPPORTED_ALGS: stub\n");
266 ret = SEC_E_UNSUPPORTED_FUNCTION;
267 }
268 else
269 ret = SEC_E_INTERNAL_ERROR;
270 break;
271 case SECPKG_ATTR_CIPHER_STRENGTHS:
272 if (pBuffer)
273 {
274 SecPkgCred_CipherStrengths *r = pBuffer;
275
276 /* FIXME: get from CryptoAPI */
277 FIXME("SECPKG_ATTR_CIPHER_STRENGTHS: semi-stub\n");
278 r->dwMinimumCipherStrength = 40;
279 r->dwMaximumCipherStrength = 168;
280 ret = SEC_E_OK;
281 }
282 else
283 ret = SEC_E_INTERNAL_ERROR;
284 break;
285 case SECPKG_ATTR_SUPPORTED_PROTOCOLS:
286 if(pBuffer) {
287 /* Regardless of MSDN documentation, tests show that this attribute takes into account
288 * what protocols are enabled for given credential. */
289 ((SecPkgCred_SupportedProtocols*)pBuffer)->grbitProtocol = cred->enabled_protocols;
290 ret = SEC_E_OK;
291 }else {
292 ret = SEC_E_INTERNAL_ERROR;
293 }
294 break;
295 default:
296 ret = SEC_E_UNSUPPORTED_FUNCTION;
297 }
298 return ret;
299 }
300
301 static SECURITY_STATUS SEC_ENTRY schan_QueryCredentialsAttributesA(
302 PCredHandle phCredential, ULONG ulAttribute, PVOID pBuffer)
303 {
304 SECURITY_STATUS ret;
305
306 TRACE("(%p, %d, %p)\n", phCredential, ulAttribute, pBuffer);
307
308 switch (ulAttribute)
309 {
310 case SECPKG_CRED_ATTR_NAMES:
311 FIXME("SECPKG_CRED_ATTR_NAMES: stub\n");
312 ret = SEC_E_UNSUPPORTED_FUNCTION;
313 break;
314 default:
315 ret = schan_QueryCredentialsAttributes(phCredential, ulAttribute,
316 pBuffer);
317 }
318 return ret;
319 }
320
321 static SECURITY_STATUS SEC_ENTRY schan_QueryCredentialsAttributesW(
322 PCredHandle phCredential, ULONG ulAttribute, PVOID pBuffer)
323 {
324 SECURITY_STATUS ret;
325
326 TRACE("(%p, %d, %p)\n", phCredential, ulAttribute, pBuffer);
327
328 switch (ulAttribute)
329 {
330 case SECPKG_CRED_ATTR_NAMES:
331 FIXME("SECPKG_CRED_ATTR_NAMES: stub\n");
332 ret = SEC_E_UNSUPPORTED_FUNCTION;
333 break;
334 default:
335 ret = schan_QueryCredentialsAttributes(phCredential, ulAttribute,
336 pBuffer);
337 }
338 return ret;
339 }
340
341 static SECURITY_STATUS schan_CheckCreds(const SCHANNEL_CRED *schanCred)
342 {
343 SECURITY_STATUS st;
344 DWORD i;
345
346 TRACE("dwVersion = %d\n", schanCred->dwVersion);
347 TRACE("cCreds = %d\n", schanCred->cCreds);
348 TRACE("hRootStore = %p\n", schanCred->hRootStore);
349 TRACE("cMappers = %d\n", schanCred->cMappers);
350 TRACE("cSupportedAlgs = %d:\n", schanCred->cSupportedAlgs);
351 for (i = 0; i < schanCred->cSupportedAlgs; i++)
352 TRACE("%08x\n", schanCred->palgSupportedAlgs[i]);
353 TRACE("grbitEnabledProtocols = %08x\n", schanCred->grbitEnabledProtocols);
354 TRACE("dwMinimumCipherStrength = %d\n", schanCred->dwMinimumCipherStrength);
355 TRACE("dwMaximumCipherStrength = %d\n", schanCred->dwMaximumCipherStrength);
356 TRACE("dwSessionLifespan = %d\n", schanCred->dwSessionLifespan);
357 TRACE("dwFlags = %08x\n", schanCred->dwFlags);
358 TRACE("dwCredFormat = %d\n", schanCred->dwCredFormat);
359
360 switch (schanCred->dwVersion)
361 {
362 case SCH_CRED_V3:
363 case SCHANNEL_CRED_VERSION:
364 break;
365 default:
366 return SEC_E_INTERNAL_ERROR;
367 }
368
369 if (schanCred->cCreds == 0)
370 st = SEC_E_NO_CREDENTIALS;
371 else if (schanCred->cCreds > 1)
372 st = SEC_E_UNKNOWN_CREDENTIALS;
373 else
374 {
375 DWORD keySpec;
376 HCRYPTPROV csp;
377 BOOL ret, freeCSP;
378
379 ret = CryptAcquireCertificatePrivateKey(schanCred->paCred[0],
380 0, /* FIXME: what flags to use? */ NULL,
381 &csp, &keySpec, &freeCSP);
382 if (ret)
383 {
384 st = SEC_E_OK;
385 if (freeCSP)
386 CryptReleaseContext(csp, 0);
387 }
388 else
389 st = SEC_E_UNKNOWN_CREDENTIALS;
390 }
391 return st;
392 }
393
394 static SECURITY_STATUS schan_AcquireClientCredentials(const SCHANNEL_CRED *schanCred,
395 PCredHandle phCredential, PTimeStamp ptsExpiry)
396 {
397 struct schan_credentials *creds;
398 unsigned enabled_protocols;
399 ULONG_PTR handle;
400 SECURITY_STATUS st = SEC_E_OK;
401
402 TRACE("schanCred %p, phCredential %p, ptsExpiry %p\n", schanCred, phCredential, ptsExpiry);
403
404 if (schanCred)
405 {
406 st = schan_CheckCreds(schanCred);
407 if (st != SEC_E_OK && st != SEC_E_NO_CREDENTIALS)
408 return st;
409
410 st = SEC_E_OK;
411 }
412
413 read_config();
414 if(schanCred && schanCred->grbitEnabledProtocols)
415 enabled_protocols = schanCred->grbitEnabledProtocols & config_enabled_protocols;
416 else
417 enabled_protocols = config_enabled_protocols & ~config_default_disabled_protocols;
418 if(!enabled_protocols) {
419 ERR("Could not find matching protocol\n");
420 return SEC_E_NO_AUTHENTICATING_AUTHORITY;
421 }
422
423 /* For now, the only thing I'm interested in is the direction of the
424 * connection, so just store it.
425 */
426 creds = HeapAlloc(GetProcessHeap(), 0, sizeof(*creds));
427 if (!creds) return SEC_E_INSUFFICIENT_MEMORY;
428
429 handle = schan_alloc_handle(creds, SCHAN_HANDLE_CRED);
430 if (handle == SCHAN_INVALID_HANDLE) goto fail;
431
432 creds->credential_use = SECPKG_CRED_OUTBOUND;
433 if (!schan_imp_allocate_certificate_credentials(creds))
434 {
435 schan_free_handle(handle, SCHAN_HANDLE_CRED);
436 goto fail;
437 }
438
439 creds->enabled_protocols = enabled_protocols;
440 phCredential->dwLower = handle;
441 phCredential->dwUpper = 0;
442
443 /* Outbound credentials have no expiry */
444 if (ptsExpiry)
445 {
446 ptsExpiry->LowPart = 0;
447 ptsExpiry->HighPart = 0;
448 }
449
450 return st;
451
452 fail:
453 HeapFree(GetProcessHeap(), 0, creds);
454 return SEC_E_INTERNAL_ERROR;
455 }
456
457 static SECURITY_STATUS schan_AcquireServerCredentials(const SCHANNEL_CRED *schanCred,
458 PCredHandle phCredential, PTimeStamp ptsExpiry)
459 {
460 SECURITY_STATUS st;
461
462 TRACE("schanCred %p, phCredential %p, ptsExpiry %p\n", schanCred, phCredential, ptsExpiry);
463
464 if (!schanCred) return SEC_E_NO_CREDENTIALS;
465
466 st = schan_CheckCreds(schanCred);
467 if (st == SEC_E_OK)
468 {
469 ULONG_PTR handle;
470 struct schan_credentials *creds;
471
472 creds = HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, sizeof(*creds));
473 if (!creds) return SEC_E_INSUFFICIENT_MEMORY;
474 creds->credential_use = SECPKG_CRED_INBOUND;
475
476 handle = schan_alloc_handle(creds, SCHAN_HANDLE_CRED);
477 if (handle == SCHAN_INVALID_HANDLE)
478 {
479 HeapFree(GetProcessHeap(), 0, creds);
480 return SEC_E_INTERNAL_ERROR;
481 }
482
483 phCredential->dwLower = handle;
484 phCredential->dwUpper = 0;
485
486 /* FIXME: get expiry from cert */
487 }
488 return st;
489 }
490
491 static SECURITY_STATUS schan_AcquireCredentialsHandle(ULONG fCredentialUse,
492 const SCHANNEL_CRED *schanCred, PCredHandle phCredential, PTimeStamp ptsExpiry)
493 {
494 SECURITY_STATUS ret;
495
496 if (fCredentialUse == SECPKG_CRED_OUTBOUND)
497 ret = schan_AcquireClientCredentials(schanCred, phCredential,
498 ptsExpiry);
499 else
500 ret = schan_AcquireServerCredentials(schanCred, phCredential,
501 ptsExpiry);
502 return ret;
503 }
504
505 static SECURITY_STATUS SEC_ENTRY schan_AcquireCredentialsHandleA(
506 SEC_CHAR *pszPrincipal, SEC_CHAR *pszPackage, ULONG fCredentialUse,
507 PLUID pLogonID, PVOID pAuthData, SEC_GET_KEY_FN pGetKeyFn,
508 PVOID pGetKeyArgument, PCredHandle phCredential, PTimeStamp ptsExpiry)
509 {
510 TRACE("(%s, %s, 0x%08x, %p, %p, %p, %p, %p, %p)\n",
511 debugstr_a(pszPrincipal), debugstr_a(pszPackage), fCredentialUse,
512 pLogonID, pAuthData, pGetKeyFn, pGetKeyArgument, phCredential, ptsExpiry);
513 return schan_AcquireCredentialsHandle(fCredentialUse,
514 pAuthData, phCredential, ptsExpiry);
515 }
516
517 static SECURITY_STATUS SEC_ENTRY schan_AcquireCredentialsHandleW(
518 SEC_WCHAR *pszPrincipal, SEC_WCHAR *pszPackage, ULONG fCredentialUse,
519 PLUID pLogonID, PVOID pAuthData, SEC_GET_KEY_FN pGetKeyFn,
520 PVOID pGetKeyArgument, PCredHandle phCredential, PTimeStamp ptsExpiry)
521 {
522 TRACE("(%s, %s, 0x%08x, %p, %p, %p, %p, %p, %p)\n",
523 debugstr_w(pszPrincipal), debugstr_w(pszPackage), fCredentialUse,
524 pLogonID, pAuthData, pGetKeyFn, pGetKeyArgument, phCredential, ptsExpiry);
525 return schan_AcquireCredentialsHandle(fCredentialUse,
526 pAuthData, phCredential, ptsExpiry);
527 }
528
529 static SECURITY_STATUS SEC_ENTRY schan_FreeCredentialsHandle(
530 PCredHandle phCredential)
531 {
532 struct schan_credentials *creds;
533
534 TRACE("phCredential %p\n", phCredential);
535
536 if (!phCredential) return SEC_E_INVALID_HANDLE;
537
538 creds = schan_free_handle(phCredential->dwLower, SCHAN_HANDLE_CRED);
539 if (!creds) return SEC_E_INVALID_HANDLE;
540
541 if (creds->credential_use == SECPKG_CRED_OUTBOUND)
542 schan_imp_free_certificate_credentials(creds);
543 HeapFree(GetProcessHeap(), 0, creds);
544
545 return SEC_E_OK;
546 }
547
548 static void init_schan_buffers(struct schan_buffers *s, const PSecBufferDesc desc,
549 int (*get_next_buffer)(const struct schan_transport *, struct schan_buffers *))
550 {
551 s->offset = 0;
552 s->limit = ~0UL;
553 s->desc = desc;
554 s->current_buffer_idx = -1;
555 s->allow_buffer_resize = FALSE;
556 s->get_next_buffer = get_next_buffer;
557 }
558
559 static int schan_find_sec_buffer_idx(const SecBufferDesc *desc, unsigned int start_idx, ULONG buffer_type)
560 {
561 unsigned int i;
562 PSecBuffer buffer;
563
564 for (i = start_idx; i < desc->cBuffers; ++i)
565 {
566 buffer = &desc->pBuffers[i];
567 if (buffer->BufferType == buffer_type) return i;
568 }
569
570 return -1;
571 }
572
573 static void schan_resize_current_buffer(const struct schan_buffers *s, SIZE_T min_size)
574 {
575 SecBuffer *b = &s->desc->pBuffers[s->current_buffer_idx];
576 SIZE_T new_size = b->cbBuffer ? b->cbBuffer * 2 : 128;
577 void *new_data;
578
579 if (b->cbBuffer >= min_size || !s->allow_buffer_resize || min_size > UINT_MAX / 2) return;
580
581 while (new_size < min_size) new_size *= 2;
582
583 if (b->pvBuffer)
584 new_data = HeapReAlloc(GetProcessHeap(), 0, b->pvBuffer, new_size);
585 else
586 new_data = HeapAlloc(GetProcessHeap(), 0, new_size);
587
588 if (!new_data)
589 {
590 TRACE("Failed to resize %p from %d to %ld\n", b->pvBuffer, b->cbBuffer, new_size);
591 return;
592 }
593
594 b->cbBuffer = new_size;
595 b->pvBuffer = new_data;
596 }
597
598 char *schan_get_buffer(const struct schan_transport *t, struct schan_buffers *s, SIZE_T *count)
599 {
600 SIZE_T max_count;
601 PSecBuffer buffer;
602
603 if (!s->desc)
604 {
605 TRACE("No desc\n");
606 return NULL;
607 }
608
609 if (s->current_buffer_idx == -1)
610 {
611 /* Initial buffer */
612 int buffer_idx = s->get_next_buffer(t, s);
613 if (buffer_idx == -1)
614 {
615 TRACE("No next buffer\n");
616 return NULL;
617 }
618 s->current_buffer_idx = buffer_idx;
619 }
620
621 buffer = &s->desc->pBuffers[s->current_buffer_idx];
622 TRACE("Using buffer %d: cbBuffer %d, BufferType %#x, pvBuffer %p\n", s->current_buffer_idx, buffer->cbBuffer, buffer->BufferType, buffer->pvBuffer);
623
624 schan_resize_current_buffer(s, s->offset + *count);
625 max_count = buffer->cbBuffer - s->offset;
626 if (s->limit != ~0UL && s->limit < max_count)
627 max_count = s->limit;
628 if (!max_count)
629 {
630 int buffer_idx;
631
632 s->allow_buffer_resize = FALSE;
633 buffer_idx = s->get_next_buffer(t, s);
634 if (buffer_idx == -1)
635 {
636 TRACE("No next buffer\n");
637 return NULL;
638 }
639 s->current_buffer_idx = buffer_idx;
640 s->offset = 0;
641 return schan_get_buffer(t, s, count);
642 }
643
644 if (*count > max_count)
645 *count = max_count;
646 if (s->limit != ~0UL)
647 s->limit -= *count;
648
649 return (char *)buffer->pvBuffer + s->offset;
650 }
651
652 /* schan_pull
653 * Read data from the transport input buffer.
654 *
655 * t - The session transport object.
656 * buff - The buffer into which to store the read data. Must be at least
657 * *buff_len bytes in length.
658 * buff_len - On input, *buff_len is the desired length to read. On successful
659 * return, *buff_len is the number of bytes actually read.
660 *
661 * Returns:
662 * 0 on success, in which case:
663 * *buff_len == 0 indicates end of file.
664 * *buff_len > 0 indicates that some data was read. May be less than
665 * what was requested, in which case the caller should call again if/
666 * when they want more.
667 * EAGAIN when no data could be read without blocking
668 * another errno-style error value on failure
669 *
670 */
671 int schan_pull(struct schan_transport *t, void *buff, size_t *buff_len)
672 {
673 char *b;
674 SIZE_T local_len = *buff_len;
675
676 TRACE("Pull %lu bytes\n", local_len);
677
678 *buff_len = 0;
679
680 b = schan_get_buffer(t, &t->in, &local_len);
681 if (!b)
682 return EAGAIN;
683
684 memcpy(buff, b, local_len);
685 t->in.offset += local_len;
686
687 TRACE("Read %lu bytes\n", local_len);
688
689 *buff_len = local_len;
690 return 0;
691 }
692
693 /* schan_push
694 * Write data to the transport output buffer.
695 *
696 * t - The session transport object.
697 * buff - The buffer of data to write. Must be at least *buff_len bytes in length.
698 * buff_len - On input, *buff_len is the desired length to write. On successful
699 * return, *buff_len is the number of bytes actually written.
700 *
701 * Returns:
702 * 0 on success
703 * *buff_len will be > 0 indicating how much data was written. May be less
704 * than what was requested, in which case the caller should call again
705 if/when they want to write more.
706 * EAGAIN when no data could be written without blocking
707 * another errno-style error value on failure
708 *
709 */
710 int schan_push(struct schan_transport *t, const void *buff, size_t *buff_len)
711 {
712 char *b;
713 SIZE_T local_len = *buff_len;
714
715 TRACE("Push %lu bytes\n", local_len);
716
717 *buff_len = 0;
718
719 b = schan_get_buffer(t, &t->out, &local_len);
720 if (!b)
721 return EAGAIN;
722
723 memcpy(b, buff, local_len);
724 t->out.offset += local_len;
725
726 TRACE("Wrote %lu bytes\n", local_len);
727
728 *buff_len = local_len;
729 return 0;
730 }
731
732 schan_imp_session schan_session_for_transport(struct schan_transport* t)
733 {
734 return t->ctx->session;
735 }
736
737 static int schan_init_sec_ctx_get_next_input_buffer(const struct schan_transport *t, struct schan_buffers *s)
738 {
739 if (s->current_buffer_idx != -1)
740 return -1;
741 return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_TOKEN);
742 }
743
744 static int schan_init_sec_ctx_get_next_output_buffer(const struct schan_transport *t, struct schan_buffers *s)
745 {
746 if (s->current_buffer_idx == -1)
747 {
748 int idx = schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_TOKEN);
749 if (t->ctx->req_ctx_attr & ISC_REQ_ALLOCATE_MEMORY)
750 {
751 if (idx == -1)
752 {
753 idx = schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_EMPTY);
754 if (idx != -1) s->desc->pBuffers[idx].BufferType = SECBUFFER_TOKEN;
755 }
756 if (idx != -1 && !s->desc->pBuffers[idx].pvBuffer)
757 {
758 s->desc->pBuffers[idx].cbBuffer = 0;
759 s->allow_buffer_resize = TRUE;
760 }
761 }
762 return idx;
763 }
764
765 return -1;
766 }
767
768 static void dump_buffer_desc(SecBufferDesc *desc)
769 {
770 unsigned int i;
771
772 if (!desc) return;
773 TRACE("Buffer desc %p:\n", desc);
774 for (i = 0; i < desc->cBuffers; ++i)
775 {
776 SecBuffer *b = &desc->pBuffers[i];
777 TRACE("\tbuffer %u: cbBuffer %d, BufferType %#x pvBuffer %p\n", i, b->cbBuffer, b->BufferType, b->pvBuffer);
778 }
779 }
780
781 /***********************************************************************
782 * InitializeSecurityContextW
783 */
784 static SECURITY_STATUS SEC_ENTRY schan_InitializeSecurityContextW(
785 PCredHandle phCredential, PCtxtHandle phContext, SEC_WCHAR *pszTargetName,
786 ULONG fContextReq, ULONG Reserved1, ULONG TargetDataRep,
787 PSecBufferDesc pInput, ULONG Reserved2, PCtxtHandle phNewContext,
788 PSecBufferDesc pOutput, ULONG *pfContextAttr, PTimeStamp ptsExpiry)
789 {
790 struct schan_context *ctx;
791 struct schan_buffers *out_buffers;
792 struct schan_credentials *cred;
793 SIZE_T expected_size = ~0UL;
794 SECURITY_STATUS ret;
795
796 TRACE("%p %p %s 0x%08x %d %d %p %d %p %p %p %p\n", phCredential, phContext,
797 debugstr_w(pszTargetName), fContextReq, Reserved1, TargetDataRep, pInput,
798 Reserved1, phNewContext, pOutput, pfContextAttr, ptsExpiry);
799
800 dump_buffer_desc(pInput);
801 dump_buffer_desc(pOutput);
802
803 if (!phContext)
804 {
805 ULONG_PTR handle;
806
807 if (!phCredential) return SEC_E_INVALID_HANDLE;
808
809 cred = schan_get_object(phCredential->dwLower, SCHAN_HANDLE_CRED);
810 if (!cred) return SEC_E_INVALID_HANDLE;
811
812 if (!(cred->credential_use & SECPKG_CRED_OUTBOUND))
813 {
814 WARN("Invalid credential use %#x\n", cred->credential_use);
815 return SEC_E_INVALID_HANDLE;
816 }
817
818 ctx = HeapAlloc(GetProcessHeap(), 0, sizeof(*ctx));
819 if (!ctx) return SEC_E_INSUFFICIENT_MEMORY;
820
821 ctx->cert = NULL;
822 handle = schan_alloc_handle(ctx, SCHAN_HANDLE_CTX);
823 if (handle == SCHAN_INVALID_HANDLE)
824 {
825 HeapFree(GetProcessHeap(), 0, ctx);
826 return SEC_E_INTERNAL_ERROR;
827 }
828
829 if (!schan_imp_create_session(&ctx->session, cred))
830 {
831 schan_free_handle(handle, SCHAN_HANDLE_CTX);
832 HeapFree(GetProcessHeap(), 0, ctx);
833 return SEC_E_INTERNAL_ERROR;
834 }
835
836 ctx->transport.ctx = ctx;
837 schan_imp_set_session_transport(ctx->session, &ctx->transport);
838
839 if (pszTargetName && *pszTargetName)
840 {
841 UINT len = WideCharToMultiByte( CP_UNIXCP, 0, pszTargetName, -1, NULL, 0, NULL, NULL );
842 char *target = HeapAlloc( GetProcessHeap(), 0, len );
843
844 if (target)
845 {
846 WideCharToMultiByte( CP_UNIXCP, 0, pszTargetName, -1, target, len, NULL, NULL );
847 schan_imp_set_session_target( ctx->session, target );
848 HeapFree( GetProcessHeap(), 0, target );
849 }
850 }
851 phNewContext->dwLower = handle;
852 phNewContext->dwUpper = 0;
853 }
854 else
855 {
856 SIZE_T record_size = 0;
857 unsigned char *ptr;
858 SecBuffer *buffer;
859 int idx;
860
861 if (!pInput)
862 return SEC_E_INCOMPLETE_MESSAGE;
863
864 idx = schan_find_sec_buffer_idx(pInput, 0, SECBUFFER_TOKEN);
865 if (idx == -1)
866 return SEC_E_INCOMPLETE_MESSAGE;
867
868 buffer = &pInput->pBuffers[idx];
869 ptr = buffer->pvBuffer;
870 expected_size = 0;
871
872 while (buffer->cbBuffer > expected_size + 5)
873 {
874 record_size = 5 + ((ptr[3] << 8) | ptr[4]);
875
876 if (buffer->cbBuffer < expected_size + record_size)
877 break;
878
879 expected_size += record_size;
880 ptr += record_size;
881 }
882
883 if (!expected_size)
884 {
885 TRACE("Expected at least %lu bytes, but buffer only contains %u bytes.\n",
886 max(6, record_size), buffer->cbBuffer);
887 return SEC_E_INCOMPLETE_MESSAGE;
888 }
889
890 TRACE("Using expected_size %lu.\n", expected_size);
891
892 ctx = schan_get_object(phContext->dwLower, SCHAN_HANDLE_CTX);
893 }
894
895 ctx->req_ctx_attr = fContextReq;
896
897 init_schan_buffers(&ctx->transport.in, pInput, schan_init_sec_ctx_get_next_input_buffer);
898 ctx->transport.in.limit = expected_size;
899 init_schan_buffers(&ctx->transport.out, pOutput, schan_init_sec_ctx_get_next_output_buffer);
900
901 /* Perform the TLS handshake */
902 ret = schan_imp_handshake(ctx->session);
903
904 if(ctx->transport.in.offset && ctx->transport.in.offset != pInput->pBuffers[0].cbBuffer) {
905 if(pInput->cBuffers<2 || pInput->pBuffers[1].BufferType!=SECBUFFER_EMPTY)
906 return SEC_E_INVALID_TOKEN;
907
908 pInput->pBuffers[1].BufferType = SECBUFFER_EXTRA;
909 pInput->pBuffers[1].cbBuffer = pInput->pBuffers[0].cbBuffer-ctx->transport.in.offset;
910 }
911
912 out_buffers = &ctx->transport.out;
913 if (out_buffers->current_buffer_idx != -1)
914 {
915 SecBuffer *buffer = &out_buffers->desc->pBuffers[out_buffers->current_buffer_idx];
916 buffer->cbBuffer = out_buffers->offset;
917 }
918
919 *pfContextAttr = 0;
920 if (ctx->req_ctx_attr & ISC_REQ_REPLAY_DETECT)
921 *pfContextAttr |= ISC_RET_REPLAY_DETECT;
922 if (ctx->req_ctx_attr & ISC_REQ_SEQUENCE_DETECT)
923 *pfContextAttr |= ISC_RET_SEQUENCE_DETECT;
924 if (ctx->req_ctx_attr & ISC_REQ_CONFIDENTIALITY)
925 *pfContextAttr |= ISC_RET_CONFIDENTIALITY;
926 if (ctx->req_ctx_attr & ISC_REQ_ALLOCATE_MEMORY)
927 *pfContextAttr |= ISC_RET_ALLOCATED_MEMORY;
928 if (ctx->req_ctx_attr & ISC_REQ_STREAM)
929 *pfContextAttr |= ISC_RET_STREAM;
930
931 return ret;
932 }
933
934 /***********************************************************************
935 * InitializeSecurityContextA
936 */
937 static SECURITY_STATUS SEC_ENTRY schan_InitializeSecurityContextA(
938 PCredHandle phCredential, PCtxtHandle phContext, SEC_CHAR *pszTargetName,
939 ULONG fContextReq, ULONG Reserved1, ULONG TargetDataRep,
940 PSecBufferDesc pInput, ULONG Reserved2, PCtxtHandle phNewContext,
941 PSecBufferDesc pOutput, ULONG *pfContextAttr, PTimeStamp ptsExpiry)
942 {
943 SECURITY_STATUS ret;
944 SEC_WCHAR *target_name = NULL;
945
946 TRACE("%p %p %s %d %d %d %p %d %p %p %p %p\n", phCredential, phContext,
947 debugstr_a(pszTargetName), fContextReq, Reserved1, TargetDataRep, pInput,
948 Reserved1, phNewContext, pOutput, pfContextAttr, ptsExpiry);
949
950 if (pszTargetName)
951 {
952 INT len = MultiByteToWideChar(CP_ACP, 0, pszTargetName, -1, NULL, 0);
953 target_name = HeapAlloc(GetProcessHeap(), 0, len * sizeof(*target_name));
954 MultiByteToWideChar(CP_ACP, 0, pszTargetName, -1, target_name, len);
955 }
956
957 ret = schan_InitializeSecurityContextW(phCredential, phContext, target_name,
958 fContextReq, Reserved1, TargetDataRep, pInput, Reserved2,
959 phNewContext, pOutput, pfContextAttr, ptsExpiry);
960
961 HeapFree(GetProcessHeap(), 0, target_name);
962
963 return ret;
964 }
965
966 static void *get_alg_name(ALG_ID id, BOOL wide)
967 {
968 static const struct {
969 ALG_ID alg_id;
970 const char* name;
971 const WCHAR nameW[8];
972 } alg_name_map[] = {
973 { CALG_ECDSA, "ECDSA", {'E','C','D','S','A',0} },
974 { CALG_RSA_SIGN, "RSA", {'R','S','A',0} },
975 { CALG_DES, "DES", {'D','E','S',0} },
976 { CALG_RC2, "RC2", {'R','C','2',0} },
977 { CALG_3DES, "3DES", {'3','D','E','S',0} },
978 { CALG_AES_128, "AES", {'A','E','S',0} },
979 { CALG_AES_192, "AES", {'A','E','S',0} },
980 { CALG_AES_256, "AES", {'A','E','S',0} },
981 { CALG_RC4, "RC4", {'R','C','4',0} },
982 };
983 unsigned i;
984
985 for (i = 0; i < sizeof(alg_name_map)/sizeof(alg_name_map[0]); i++)
986 if (alg_name_map[i].alg_id == id)
987 return wide ? (void*)alg_name_map[i].nameW : (void*)alg_name_map[i].name;
988
989 FIXME("Unknown ALG_ID %04x\n", id);
990 return NULL;
991 }
992
993 static SECURITY_STATUS ensure_remote_cert(struct schan_context *ctx)
994 {
995 HCERTSTORE cert_store;
996 SECURITY_STATUS status;
997
998 if(ctx->cert)
999 return SEC_E_OK;
1000
1001 cert_store = CertOpenStore(CERT_STORE_PROV_MEMORY, 0, 0, CERT_STORE_CREATE_NEW_FLAG, NULL);
1002 if(!cert_store)
1003 return GetLastError();
1004
1005 status = schan_imp_get_session_peer_certificate(ctx->session, cert_store, &ctx->cert);
1006 CertCloseStore(cert_store, 0);
1007 return status;
1008 }
1009
1010 static SECURITY_STATUS SEC_ENTRY schan_QueryContextAttributesW(
1011 PCtxtHandle context_handle, ULONG attribute, PVOID buffer)
1012 {
1013 struct schan_context *ctx;
1014
1015 TRACE("context_handle %p, attribute %#x, buffer %p\n",
1016 context_handle, attribute, buffer);
1017
1018 if (!context_handle) return SEC_E_INVALID_HANDLE;
1019 ctx = schan_get_object(context_handle->dwLower, SCHAN_HANDLE_CTX);
1020
1021 switch(attribute)
1022 {
1023 case SECPKG_ATTR_STREAM_SIZES:
1024 {
1025 SecPkgContext_ConnectionInfo info;
1026 SECURITY_STATUS status = schan_imp_get_connection_info(ctx->session, &info);
1027 if (status == SEC_E_OK)
1028 {
1029 SecPkgContext_StreamSizes *stream_sizes = buffer;
1030 SIZE_T mac_size = info.dwHashStrength;
1031 unsigned int block_size = schan_imp_get_session_cipher_block_size(ctx->session);
1032 unsigned int message_size = schan_imp_get_max_message_size(ctx->session);
1033
1034 TRACE("Using %lu mac bytes, message size %u, block size %u\n",
1035 mac_size, message_size, block_size);
1036
1037 /* These are defined by the TLS RFC */
1038 stream_sizes->cbHeader = 5;
1039 stream_sizes->cbTrailer = mac_size + 256; /* Max 255 bytes padding + 1 for padding size */
1040 stream_sizes->cbMaximumMessage = message_size;
1041 stream_sizes->cbBuffers = 4;
1042 stream_sizes->cbBlockSize = block_size;
1043 }
1044
1045 return status;
1046 }
1047 case SECPKG_ATTR_KEY_INFO:
1048 {
1049 SecPkgContext_ConnectionInfo conn_info;
1050 SECURITY_STATUS status = schan_imp_get_connection_info(ctx->session, &conn_info);
1051 if (status == SEC_E_OK)
1052 {
1053 SecPkgContext_KeyInfoW *info = buffer;
1054 info->KeySize = conn_info.dwCipherStrength;
1055 info->SignatureAlgorithm = schan_imp_get_key_signature_algorithm(ctx->session);
1056 info->EncryptAlgorithm = conn_info.aiCipher;
1057 info->sSignatureAlgorithmName = get_alg_name(info->SignatureAlgorithm, TRUE);
1058 info->sEncryptAlgorithmName = get_alg_name(info->EncryptAlgorithm, TRUE);
1059 }
1060 return status;
1061 }
1062 case SECPKG_ATTR_REMOTE_CERT_CONTEXT:
1063 {
1064 PCCERT_CONTEXT *cert = buffer;
1065 SECURITY_STATUS status;
1066
1067 status = ensure_remote_cert(ctx);
1068 if(status != SEC_E_OK)
1069 return status;
1070
1071 *cert = CertDuplicateCertificateContext(ctx->cert);
1072 return SEC_E_OK;
1073 }
1074 case SECPKG_ATTR_CONNECTION_INFO:
1075 {
1076 SecPkgContext_ConnectionInfo *info = buffer;
1077 return schan_imp_get_connection_info(ctx->session, info);
1078 }
1079 case SECPKG_ATTR_ENDPOINT_BINDINGS:
1080 {
1081 SecPkgContext_Bindings *bindings = buffer;
1082 CCRYPT_OID_INFO *info;
1083 ALG_ID hash_alg = CALG_SHA_256;
1084 BYTE hash[1024];
1085 DWORD hash_size;
1086 SECURITY_STATUS status;
1087 char *p;
1088 BOOL r;
1089
1090 static const char prefix[] = "tls-server-end-point:";
1091
1092 status = ensure_remote_cert(ctx);
1093 if(status != SEC_E_OK)
1094 return status;
1095
1096 /* RFC 5929 */
1097 info = CryptFindOIDInfo(CRYPT_OID_INFO_OID_KEY, ctx->cert->pCertInfo->SignatureAlgorithm.pszObjId, 0);
1098 if(info && info->u.Algid != CALG_SHA1 && info->u.Algid != CALG_MD5)
1099 hash_alg = info->u.Algid;
1100
1101 hash_size = sizeof(hash);
1102 r = CryptHashCertificate(0, hash_alg, 0, ctx->cert->pbCertEncoded, ctx->cert->cbCertEncoded, hash, &hash_size);
1103 if(!r)
1104 return GetLastError();
1105
1106 bindings->BindingsLength = sizeof(*bindings->Bindings) + sizeof(prefix)-1 + hash_size;
1107 bindings->Bindings = HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, bindings->BindingsLength);
1108 if(!bindings->Bindings)
1109 return SEC_E_INSUFFICIENT_MEMORY;
1110
1111 bindings->Bindings->cbApplicationDataLength = sizeof(prefix)-1 + hash_size;
1112 bindings->Bindings->dwApplicationDataOffset = sizeof(*bindings->Bindings);
1113
1114 p = (char*)(bindings->Bindings+1);
1115 memcpy(p, prefix, sizeof(prefix)-1);
1116 p += sizeof(prefix)-1;
1117 memcpy(p, hash, hash_size);
1118 return SEC_E_OK;
1119 }
1120
1121 default:
1122 FIXME("Unhandled attribute %#x\n", attribute);
1123 return SEC_E_UNSUPPORTED_FUNCTION;
1124 }
1125 }
1126
1127 static SECURITY_STATUS SEC_ENTRY schan_QueryContextAttributesA(
1128 PCtxtHandle context_handle, ULONG attribute, PVOID buffer)
1129 {
1130 TRACE("context_handle %p, attribute %#x, buffer %p\n",
1131 context_handle, attribute, buffer);
1132
1133 switch(attribute)
1134 {
1135 case SECPKG_ATTR_STREAM_SIZES:
1136 return schan_QueryContextAttributesW(context_handle, attribute, buffer);
1137 case SECPKG_ATTR_KEY_INFO:
1138 {
1139 SECURITY_STATUS status = schan_QueryContextAttributesW(context_handle, attribute, buffer);
1140 if (status == SEC_E_OK)
1141 {
1142 SecPkgContext_KeyInfoA *info = buffer;
1143 info->sSignatureAlgorithmName = get_alg_name(info->SignatureAlgorithm, FALSE);
1144 info->sEncryptAlgorithmName = get_alg_name(info->EncryptAlgorithm, FALSE);
1145 }
1146 return status;
1147 }
1148 case SECPKG_ATTR_REMOTE_CERT_CONTEXT:
1149 return schan_QueryContextAttributesW(context_handle, attribute, buffer);
1150 case SECPKG_ATTR_CONNECTION_INFO:
1151 return schan_QueryContextAttributesW(context_handle, attribute, buffer);
1152 case SECPKG_ATTR_ENDPOINT_BINDINGS:
1153 return schan_QueryContextAttributesW(context_handle, attribute, buffer);
1154
1155 default:
1156 FIXME("Unhandled attribute %#x\n", attribute);
1157 return SEC_E_UNSUPPORTED_FUNCTION;
1158 }
1159 }
1160
1161 static int schan_encrypt_message_get_next_buffer(const struct schan_transport *t, struct schan_buffers *s)
1162 {
1163 SecBuffer *b;
1164
1165 if (s->current_buffer_idx == -1)
1166 return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_STREAM_HEADER);
1167
1168 b = &s->desc->pBuffers[s->current_buffer_idx];
1169
1170 if (b->BufferType == SECBUFFER_STREAM_HEADER)
1171 return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_DATA);
1172
1173 if (b->BufferType == SECBUFFER_DATA)
1174 return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_STREAM_TRAILER);
1175
1176 return -1;
1177 }
1178
1179 static int schan_encrypt_message_get_next_buffer_token(const struct schan_transport *t, struct schan_buffers *s)
1180 {
1181 SecBuffer *b;
1182
1183 if (s->current_buffer_idx == -1)
1184 return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_TOKEN);
1185
1186 b = &s->desc->pBuffers[s->current_buffer_idx];
1187
1188 if (b->BufferType == SECBUFFER_TOKEN)
1189 {
1190 int idx = schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_TOKEN);
1191 if (idx != s->current_buffer_idx) return -1;
1192 return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_DATA);
1193 }
1194
1195 if (b->BufferType == SECBUFFER_DATA)
1196 {
1197 int idx = schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_TOKEN);
1198 if (idx != -1)
1199 idx = schan_find_sec_buffer_idx(s->desc, idx + 1, SECBUFFER_TOKEN);
1200 return idx;
1201 }
1202
1203 return -1;
1204 }
1205
1206 static SECURITY_STATUS SEC_ENTRY schan_EncryptMessage(PCtxtHandle context_handle,
1207 ULONG quality, PSecBufferDesc message, ULONG message_seq_no)
1208 {
1209 struct schan_context *ctx;
1210 struct schan_buffers *b;
1211 SECURITY_STATUS status;
1212 SecBuffer *buffer;
1213 SIZE_T data_size;
1214 SIZE_T length;
1215 char *data;
1216 int idx;
1217
1218 TRACE("context_handle %p, quality %d, message %p, message_seq_no %d\n",
1219 context_handle, quality, message, message_seq_no);
1220
1221 if (!context_handle) return SEC_E_INVALID_HANDLE;
1222 ctx = schan_get_object(context_handle->dwLower, SCHAN_HANDLE_CTX);
1223
1224 dump_buffer_desc(message);
1225
1226 idx = schan_find_sec_buffer_idx(message, 0, SECBUFFER_DATA);
1227 if (idx == -1)
1228 {
1229 WARN("No data buffer passed\n");
1230 return SEC_E_INTERNAL_ERROR;
1231 }
1232 buffer = &message->pBuffers[idx];
1233
1234 data_size = buffer->cbBuffer;
1235 data = HeapAlloc(GetProcessHeap(), 0, data_size);
1236 memcpy(data, buffer->pvBuffer, data_size);
1237
1238 if (schan_find_sec_buffer_idx(message, 0, SECBUFFER_STREAM_HEADER) != -1)
1239 init_schan_buffers(&ctx->transport.out, message, schan_encrypt_message_get_next_buffer);
1240 else
1241 init_schan_buffers(&ctx->transport.out, message, schan_encrypt_message_get_next_buffer_token);
1242
1243 length = data_size;
1244 status = schan_imp_send(ctx->session, data, &length);
1245
1246 TRACE("Sent %ld bytes.\n", length);
1247
1248 if (length != data_size)
1249 status = SEC_E_INTERNAL_ERROR;
1250
1251 b = &ctx->transport.out;
1252 b->desc->pBuffers[b->current_buffer_idx].cbBuffer = b->offset;
1253 HeapFree(GetProcessHeap(), 0, data);
1254
1255 TRACE("Returning %#x.\n", status);
1256
1257 return status;
1258 }
1259
1260 static int schan_decrypt_message_get_next_buffer(const struct schan_transport *t, struct schan_buffers *s)
1261 {
1262 if (s->current_buffer_idx == -1)
1263 return schan_find_sec_buffer_idx(s->desc, 0, SECBUFFER_DATA);
1264
1265 return -1;
1266 }
1267
1268 static int schan_validate_decrypt_buffer_desc(PSecBufferDesc message)
1269 {
1270 int data_idx = -1;
1271 unsigned int empty_count = 0;
1272 unsigned int i;
1273
1274 if (message->cBuffers < 4)
1275 {
1276 WARN("Less than four buffers passed\n");
1277 return -1;
1278 }
1279
1280 for (i = 0; i < message->cBuffers; ++i)
1281 {
1282 SecBuffer *b = &message->pBuffers[i];
1283 if (b->BufferType == SECBUFFER_DATA)
1284 {
1285 if (data_idx != -1)
1286 {
1287 WARN("More than one data buffer passed\n");
1288 return -1;
1289 }
1290 data_idx = i;
1291 }
1292 else if (b->BufferType == SECBUFFER_EMPTY)
1293 ++empty_count;
1294 }
1295
1296 if (data_idx == -1)
1297 {
1298 WARN("No data buffer passed\n");
1299 return -1;
1300 }
1301
1302 if (empty_count < 3)
1303 {
1304 WARN("Less than three empty buffers passed\n");
1305 return -1;
1306 }
1307
1308 return data_idx;
1309 }
1310
1311 static void schan_decrypt_fill_buffer(PSecBufferDesc message, ULONG buffer_type, void *data, ULONG size)
1312 {
1313 int idx;
1314 SecBuffer *buffer;
1315
1316 idx = schan_find_sec_buffer_idx(message, 0, SECBUFFER_EMPTY);
1317 buffer = &message->pBuffers[idx];
1318
1319 buffer->BufferType = buffer_type;
1320 buffer->pvBuffer = data;
1321 buffer->cbBuffer = size;
1322 }
1323
1324 static SECURITY_STATUS SEC_ENTRY schan_DecryptMessage(PCtxtHandle context_handle,
1325 PSecBufferDesc message, ULONG message_seq_no, PULONG quality)
1326 {
1327 struct schan_context *ctx;
1328 SecBuffer *buffer;
1329 SIZE_T data_size;
1330 char *data;
1331 unsigned expected_size;
1332 SSIZE_T received = 0;
1333 int idx;
1334 unsigned char *buf_ptr;
1335
1336 TRACE("context_handle %p, message %p, message_seq_no %d, quality %p\n",
1337 context_handle, message, message_seq_no, quality);
1338
1339 if (!context_handle) return SEC_E_INVALID_HANDLE;
1340 ctx = schan_get_object(context_handle->dwLower, SCHAN_HANDLE_CTX);
1341
1342 dump_buffer_desc(message);
1343
1344 idx = schan_validate_decrypt_buffer_desc(message);
1345 if (idx == -1)
1346 return SEC_E_INVALID_TOKEN;
1347 buffer = &message->pBuffers[idx];
1348 buf_ptr = buffer->pvBuffer;
1349
1350 expected_size = 5 + ((buf_ptr[3] << 8) | buf_ptr[4]);
1351 if(buffer->cbBuffer < expected_size)
1352 {
1353 TRACE("Expected %u bytes, but buffer only contains %u bytes\n", expected_size, buffer->cbBuffer);
1354 buffer->BufferType = SECBUFFER_MISSING;
1355 buffer->cbBuffer = expected_size - buffer->cbBuffer;
1356
1357 /* This is a bit weird, but windows does it too */
1358 idx = schan_find_sec_buffer_idx(message, 0, SECBUFFER_EMPTY);
1359 buffer = &message->pBuffers[idx];
1360 buffer->BufferType = SECBUFFER_MISSING;
1361 buffer->cbBuffer = expected_size - buffer->cbBuffer;
1362
1363 TRACE("Returning SEC_E_INCOMPLETE_MESSAGE\n");
1364 return SEC_E_INCOMPLETE_MESSAGE;
1365 }
1366
1367 data_size = expected_size - 5;
1368 data = HeapAlloc(GetProcessHeap(), 0, data_size);
1369
1370 init_schan_buffers(&ctx->transport.in, message, schan_decrypt_message_get_next_buffer);
1371 ctx->transport.in.limit = expected_size;
1372
1373 while (received < data_size)
1374 {
1375 SIZE_T length = data_size - received;
1376 SECURITY_STATUS status = schan_imp_recv(ctx->session, data + received, &length);
1377
1378 if (status == SEC_I_CONTINUE_NEEDED)
1379 break;
1380
1381 if (status != SEC_E_OK)
1382 {
1383 HeapFree(GetProcessHeap(), 0, data);
1384 ERR("Returning %x\n", status);
1385 return status;
1386 }
1387
1388 if (!length)
1389 break;
1390
1391 received += length;
1392 }
1393
1394 TRACE("Received %ld bytes\n", received);
1395
1396 memcpy(buf_ptr + 5, data, received);
1397 HeapFree(GetProcessHeap(), 0, data);
1398
1399 schan_decrypt_fill_buffer(message, SECBUFFER_DATA,
1400 buf_ptr + 5, received);
1401
1402 schan_decrypt_fill_buffer(message, SECBUFFER_STREAM_TRAILER,
1403 buf_ptr + 5 + received, buffer->cbBuffer - 5 - received);
1404
1405 if(buffer->cbBuffer > expected_size)
1406 schan_decrypt_fill_buffer(message, SECBUFFER_EXTRA,
1407 buf_ptr + expected_size, buffer->cbBuffer - expected_size);
1408
1409 buffer->BufferType = SECBUFFER_STREAM_HEADER;
1410 buffer->cbBuffer = 5;
1411
1412 return SEC_E_OK;
1413 }
1414
1415 static SECURITY_STATUS SEC_ENTRY schan_DeleteSecurityContext(PCtxtHandle context_handle)
1416 {
1417 struct schan_context *ctx;
1418
1419 TRACE("context_handle %p\n", context_handle);
1420
1421 if (!context_handle) return SEC_E_INVALID_HANDLE;
1422
1423 ctx = schan_free_handle(context_handle->dwLower, SCHAN_HANDLE_CTX);
1424 if (!ctx) return SEC_E_INVALID_HANDLE;
1425
1426 if (ctx->cert)
1427 CertFreeCertificateContext(ctx->cert);
1428 schan_imp_dispose_session(ctx->session);
1429 HeapFree(GetProcessHeap(), 0, ctx);
1430
1431 return SEC_E_OK;
1432 }
1433
1434 static const SecurityFunctionTableA schanTableA = {
1435 1,
1436 NULL, /* EnumerateSecurityPackagesA */
1437 schan_QueryCredentialsAttributesA,
1438 schan_AcquireCredentialsHandleA,
1439 schan_FreeCredentialsHandle,
1440 NULL, /* Reserved2 */
1441 schan_InitializeSecurityContextA,
1442 NULL, /* AcceptSecurityContext */
1443 NULL, /* CompleteAuthToken */
1444 schan_DeleteSecurityContext,
1445 NULL, /* ApplyControlToken */
1446 schan_QueryContextAttributesA,
1447 NULL, /* ImpersonateSecurityContext */
1448 NULL, /* RevertSecurityContext */
1449 NULL, /* MakeSignature */
1450 NULL, /* VerifySignature */
1451 FreeContextBuffer,
1452 NULL, /* QuerySecurityPackageInfoA */
1453 NULL, /* Reserved3 */
1454 NULL, /* Reserved4 */
1455 NULL, /* ExportSecurityContext */
1456 NULL, /* ImportSecurityContextA */
1457 NULL, /* AddCredentialsA */
1458 NULL, /* Reserved8 */
1459 NULL, /* QuerySecurityContextToken */
1460 schan_EncryptMessage,
1461 schan_DecryptMessage,
1462 NULL, /* SetContextAttributesA */
1463 };
1464
1465 static const SecurityFunctionTableW schanTableW = {
1466 1,
1467 NULL, /* EnumerateSecurityPackagesW */
1468 schan_QueryCredentialsAttributesW,
1469 schan_AcquireCredentialsHandleW,
1470 schan_FreeCredentialsHandle,
1471 NULL, /* Reserved2 */
1472 schan_InitializeSecurityContextW,
1473 NULL, /* AcceptSecurityContext */
1474 NULL, /* CompleteAuthToken */
1475 schan_DeleteSecurityContext,
1476 NULL, /* ApplyControlToken */
1477 schan_QueryContextAttributesW,
1478 NULL, /* ImpersonateSecurityContext */
1479 NULL, /* RevertSecurityContext */
1480 NULL, /* MakeSignature */
1481 NULL, /* VerifySignature */
1482 FreeContextBuffer,
1483 NULL, /* QuerySecurityPackageInfoW */
1484 NULL, /* Reserved3 */
1485 NULL, /* Reserved4 */
1486 NULL, /* ExportSecurityContext */
1487 NULL, /* ImportSecurityContextW */
1488 NULL, /* AddCredentialsW */
1489 NULL, /* Reserved8 */
1490 NULL, /* QuerySecurityContextToken */
1491 schan_EncryptMessage,
1492 schan_DecryptMessage,
1493 NULL, /* SetContextAttributesW */
1494 };
1495
1496 static const WCHAR schannelComment[] = { 'S','c','h','a','n','n','e','l',' ',
1497 'S','e','c','u','r','i','t','y',' ','P','a','c','k','a','g','e',0 };
1498 static const WCHAR schannelDllName[] = { 's','c','h','a','n','n','e','l','.','d','l','l',0 };
1499
1500 void SECUR32_initSchannelSP(void)
1501 {
1502 /* This is what Windows reports. This shouldn't break any applications
1503 * even though the functions are missing, because the wrapper will
1504 * return SEC_E_UNSUPPORTED_FUNCTION if our function is NULL.
1505 */
1506 static const LONG caps =
1507 SECPKG_FLAG_INTEGRITY |
1508 SECPKG_FLAG_PRIVACY |
1509 SECPKG_FLAG_CONNECTION |
1510 SECPKG_FLAG_MULTI_REQUIRED |
1511 SECPKG_FLAG_EXTENDED_ERROR |
1512 SECPKG_FLAG_IMPERSONATION |
1513 SECPKG_FLAG_ACCEPT_WIN32_NAME |
1514 SECPKG_FLAG_STREAM;
1515 static const short version = 1;
1516 static const LONG maxToken = 16384;
1517 SEC_WCHAR *uniSPName = (SEC_WCHAR *)UNISP_NAME_W,
1518 *schannel = (SEC_WCHAR *)SCHANNEL_NAME_W;
1519 const SecPkgInfoW info[] = {
1520 { caps, version, UNISP_RPC_ID, maxToken, uniSPName, uniSPName },
1521 { caps, version, UNISP_RPC_ID, maxToken, schannel,
1522 (SEC_WCHAR *)schannelComment },
1523 };
1524 SecureProvider *provider;
1525
1526 if (!schan_imp_init())
1527 return;
1528
1529 schan_handle_table = HeapAlloc(GetProcessHeap(), 0, 64 * sizeof(*schan_handle_table));
1530 if (!schan_handle_table)
1531 {
1532 ERR("Failed to allocate schannel handle table.\n");
1533 goto fail;
1534 }
1535 schan_handle_table_size = 64;
1536
1537 provider = SECUR32_addProvider(&schanTableA, &schanTableW, schannelDllName);
1538 if (!provider)
1539 {
1540 ERR("Failed to add schannel provider.\n");
1541 goto fail;
1542 }
1543
1544 SECUR32_addPackages(provider, sizeof(info) / sizeof(info[0]), NULL, info);
1545
1546 return;
1547
1548 fail:
1549 HeapFree(GetProcessHeap(), 0, schan_handle_table);
1550 schan_handle_table = NULL;
1551 schan_imp_deinit();
1552 return;
1553 }
1554
1555 void SECUR32_deinitSchannelSP(void)
1556 {
1557 SIZE_T i = schan_handle_count;
1558
1559 if (!schan_handle_table) return;
1560
1561 /* deinitialized sessions first because a pointer to the credentials
1562 * may be stored for the session. */
1563 while (i--)
1564 {
1565 if (schan_handle_table[i].type == SCHAN_HANDLE_CTX)
1566 {
1567 struct schan_context *ctx = schan_free_handle(i, SCHAN_HANDLE_CTX);
1568 schan_imp_dispose_session(ctx->session);
1569 HeapFree(GetProcessHeap(), 0, ctx);
1570 }
1571 }
1572 i = schan_handle_count;
1573 while (i--)
1574 {
1575 if (schan_handle_table[i].type != SCHAN_HANDLE_FREE)
1576 {
1577 struct schan_credentials *cred;
1578 cred = schan_free_handle(i, SCHAN_HANDLE_CRED);
1579 schan_imp_free_certificate_credentials(cred);
1580 HeapFree(GetProcessHeap(), 0, cred);
1581 }
1582 }
1583 HeapFree(GetProcessHeap(), 0, schan_handle_table);
1584 schan_imp_deinit();
1585 }
1586
1587 #else /* SONAME_LIBGNUTLS || HAVE_SECURITY_SECURITY_H */
1588
1589 void SECUR32_initSchannelSP(void)
1590 {
1591 ERR("TLS library not found, SSL connections will fail\n");
1592 }
1593
1594 void SECUR32_deinitSchannelSP(void) {}
1595
1596 #endif /* SONAME_LIBGNUTLS || HAVE_SECURITY_SECURITY_H */
Windows API implementation