|
Packit |
6c0a39 |
/*
|
|
Packit |
6c0a39 |
* options.c - handle pre-connection options
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* This file is part of the SSH Library
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* Copyright (c) 2003-2008 by Aris Adamantiadis
|
|
Packit |
6c0a39 |
* Copyright (c) 2009-2013 by Andreas Schneider <asn@cryptomilk.org>
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* The SSH Library is free software; you can redistribute it and/or modify
|
|
Packit |
6c0a39 |
* it under the terms of the GNU Lesser General Public License as published by
|
|
Packit |
6c0a39 |
* the Free Software Foundation; either version 2.1 of the License, or (at your
|
|
Packit |
6c0a39 |
* option) any later version.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* The SSH Library is distributed in the hope that it will be useful, but
|
|
Packit |
6c0a39 |
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
Packit |
6c0a39 |
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
|
|
Packit |
6c0a39 |
* License for more details.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* You should have received a copy of the GNU Lesser General Public License
|
|
Packit |
6c0a39 |
* along with the SSH Library; see the file COPYING. If not, write to
|
|
Packit |
6c0a39 |
* the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
|
|
Packit |
6c0a39 |
* MA 02111-1307, USA.
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
#include "config.h"
|
|
Packit |
6c0a39 |
#include <stdio.h>
|
|
Packit |
6c0a39 |
#include <stdlib.h>
|
|
Packit |
6c0a39 |
#include <string.h>
|
|
Packit |
6c0a39 |
#ifndef _WIN32
|
|
Packit |
6c0a39 |
#include <pwd.h>
|
|
Packit |
6c0a39 |
#else
|
|
Packit |
6c0a39 |
#include <winsock2.h>
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
#include <sys/types.h>
|
|
Packit |
6c0a39 |
#include "libssh/priv.h"
|
|
Packit |
6c0a39 |
#include "libssh/session.h"
|
|
Packit |
6c0a39 |
#include "libssh/misc.h"
|
|
Packit |
6c0a39 |
#include "libssh/options.h"
|
|
Packit |
6c0a39 |
#ifdef WITH_SERVER
|
|
Packit |
6c0a39 |
#include "libssh/server.h"
|
|
Packit |
6c0a39 |
#include "libssh/bind.h"
|
|
Packit |
6c0a39 |
#include "libssh/bind_config.h"
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @addtogroup libssh_session
|
|
Packit |
6c0a39 |
* @{
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief Duplicate the options of a session structure.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* If you make several sessions with the same options this is useful. You
|
|
Packit |
6c0a39 |
* cannot use twice the same option structure in ssh_session_connect.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param src The session to use to copy the options.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param dest A pointer to store the allocated session with duplicated
|
|
Packit |
6c0a39 |
* options. You have to free the memory.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @returns 0 on sucess, -1 on error with errno set.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @see ssh_session_connect()
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_options_copy(ssh_session src, ssh_session *dest)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
ssh_session new;
|
|
Packit |
6c0a39 |
struct ssh_iterator *it = NULL;
|
|
Packit |
6c0a39 |
char *id = NULL;
|
|
Packit |
6c0a39 |
int i;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src == NULL || dest == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
new = ssh_new();
|
|
Packit |
6c0a39 |
if (new == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.username != NULL) {
|
|
Packit |
6c0a39 |
new->opts.username = strdup(src->opts.username);
|
|
Packit |
6c0a39 |
if (new->opts.username == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.host != NULL) {
|
|
Packit |
6c0a39 |
new->opts.host = strdup(src->opts.host);
|
|
Packit |
6c0a39 |
if (new->opts.host == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.bindaddr != NULL) {
|
|
Packit |
6c0a39 |
new->opts.bindaddr = strdup(src->opts.bindaddr);
|
|
Packit |
6c0a39 |
if (new->opts.bindaddr == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* Remove the default identities */
|
|
Packit |
6c0a39 |
for (id = ssh_list_pop_head(char *, new->opts.identity);
|
|
Packit |
6c0a39 |
id != NULL;
|
|
Packit |
6c0a39 |
id = ssh_list_pop_head(char *, new->opts.identity)) {
|
|
Packit |
6c0a39 |
SAFE_FREE(id);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
/* Copy the new identities from the source list */
|
|
Packit |
6c0a39 |
if (src->opts.identity != NULL) {
|
|
Packit |
6c0a39 |
it = ssh_list_get_iterator(src->opts.identity);
|
|
Packit |
6c0a39 |
while (it) {
|
|
Packit |
6c0a39 |
int rc;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
id = strdup((char *) it->data);
|
|
Packit |
6c0a39 |
if (id == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
rc = ssh_list_append(new->opts.identity, id);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
free(id);
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
it = it->next;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.sshdir != NULL) {
|
|
Packit |
6c0a39 |
new->opts.sshdir = strdup(src->opts.sshdir);
|
|
Packit |
6c0a39 |
if (new->opts.sshdir == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.knownhosts != NULL) {
|
|
Packit |
6c0a39 |
new->opts.knownhosts = strdup(src->opts.knownhosts);
|
|
Packit |
6c0a39 |
if (new->opts.knownhosts == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.global_knownhosts != NULL) {
|
|
Packit |
6c0a39 |
new->opts.global_knownhosts = strdup(src->opts.global_knownhosts);
|
|
Packit |
6c0a39 |
if (new->opts.global_knownhosts == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
for (i = 0; i < SSH_KEX_METHODS; i++) {
|
|
Packit |
6c0a39 |
if (src->opts.wanted_methods[i] != NULL) {
|
|
Packit |
6c0a39 |
new->opts.wanted_methods[i] = strdup(src->opts.wanted_methods[i]);
|
|
Packit |
6c0a39 |
if (new->opts.wanted_methods[i] == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.ProxyCommand != NULL) {
|
|
Packit |
6c0a39 |
new->opts.ProxyCommand = strdup(src->opts.ProxyCommand);
|
|
Packit |
6c0a39 |
if (new->opts.ProxyCommand == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.pubkey_accepted_types != NULL) {
|
|
Packit |
6c0a39 |
new->opts.pubkey_accepted_types = strdup(src->opts.pubkey_accepted_types);
|
|
Packit |
6c0a39 |
if (new->opts.pubkey_accepted_types == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.gss_server_identity != NULL) {
|
|
Packit |
6c0a39 |
new->opts.gss_server_identity = strdup(src->opts.gss_server_identity);
|
|
Packit |
6c0a39 |
if (new->opts.gss_server_identity == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (src->opts.gss_client_identity != NULL) {
|
|
Packit |
6c0a39 |
new->opts.gss_client_identity = strdup(src->opts.gss_client_identity);
|
|
Packit |
6c0a39 |
if (new->opts.gss_client_identity == NULL) {
|
|
Packit |
6c0a39 |
ssh_free(new);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
memcpy(new->opts.options_seen, src->opts.options_seen,
|
|
Packit |
6c0a39 |
sizeof(new->opts.options_seen));
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
new->opts.fd = src->opts.fd;
|
|
Packit |
6c0a39 |
new->opts.port = src->opts.port;
|
|
Packit |
6c0a39 |
new->opts.timeout = src->opts.timeout;
|
|
Packit |
6c0a39 |
new->opts.timeout_usec = src->opts.timeout_usec;
|
|
Packit |
6c0a39 |
new->opts.compressionlevel = src->opts.compressionlevel;
|
|
Packit |
6c0a39 |
new->opts.StrictHostKeyChecking = src->opts.StrictHostKeyChecking;
|
|
Packit |
6c0a39 |
new->opts.gss_delegate_creds = src->opts.gss_delegate_creds;
|
|
Packit |
6c0a39 |
new->opts.flags = src->opts.flags;
|
|
Packit |
6c0a39 |
new->opts.nodelay = src->opts.nodelay;
|
|
Packit |
6c0a39 |
new->opts.config_processed = src->opts.config_processed;
|
|
Packit |
6c0a39 |
new->common.log_verbosity = src->common.log_verbosity;
|
|
Packit |
6c0a39 |
new->common.callbacks = src->common.callbacks;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
*dest = new;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
int ssh_options_set_algo(ssh_session session,
|
|
Packit |
6c0a39 |
enum ssh_kex_types_e algo,
|
|
Packit |
6c0a39 |
const char *list)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
char *p = NULL;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (ssh_fips_mode()) {
|
|
Packit |
6c0a39 |
p = ssh_keep_fips_algos(algo, list);
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
p = ssh_keep_known_algos(algo, list);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (p == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error(session, SSH_REQUEST_DENIED,
|
|
Packit |
6c0a39 |
"Setting method: no allowed algorithm for method \"%s\" (%s)",
|
|
Packit |
6c0a39 |
ssh_kex_get_description(algo), list);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.wanted_methods[algo]);
|
|
Packit |
6c0a39 |
session->opts.wanted_methods[algo] = p;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief This function can set all possible ssh options.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param session An allocated SSH session structure.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param type The option type to set. This could be one of the
|
|
Packit |
6c0a39 |
* following:
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_HOST:
|
|
Packit |
6c0a39 |
* The hostname or ip address to connect to (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PORT:
|
|
Packit |
6c0a39 |
* The port to connect to (unsigned int *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PORT_STR:
|
|
Packit |
6c0a39 |
* The port to connect to (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_FD:
|
|
Packit |
6c0a39 |
* The file descriptor to use (socket_t).\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* If you wish to open the socket yourself for a reason
|
|
Packit |
6c0a39 |
* or another, set the file descriptor. Don't forget to
|
|
Packit |
6c0a39 |
* set the hostname as the hostname is used as a key in
|
|
Packit |
6c0a39 |
* the known_host mechanism.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_BINDADDR:
|
|
Packit |
6c0a39 |
* The address to bind the client to (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_USER:
|
|
Packit |
6c0a39 |
* The username for authentication (const char *).\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* If the value is NULL, the username is set to the
|
|
Packit |
6c0a39 |
* default username.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_SSH_DIR:
|
|
Packit |
6c0a39 |
* Set the ssh directory (const char *,format string).\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* If the value is NULL, the directory is set to the
|
|
Packit |
6c0a39 |
* default ssh directory.\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* The ssh directory is used for files like known_hosts
|
|
Packit |
6c0a39 |
* and identity (private and public key). It may include
|
|
Packit |
6c0a39 |
* "%s" which will be replaced by the user home
|
|
Packit |
6c0a39 |
* directory.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_KNOWNHOSTS:
|
|
Packit |
6c0a39 |
* Set the known hosts file name (const char *,format string).\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* If the value is NULL, the directory is set to the
|
|
Packit |
6c0a39 |
* default known hosts file, normally
|
|
Packit |
6c0a39 |
* ~/.ssh/known_hosts.\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* The known hosts file is used to certify remote hosts
|
|
Packit |
6c0a39 |
* are genuine. It may include "%d" which will be
|
|
Packit |
6c0a39 |
* replaced by the user home directory.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_GLOBAL_KNOWNHOSTS:
|
|
Packit |
6c0a39 |
* Set the global known hosts file name (const char *,format string).\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* If the value is NULL, the directory is set to the
|
|
Packit |
6c0a39 |
* default global known hosts file, normally
|
|
Packit |
6c0a39 |
* /etc/ssh/ssh_known_hosts.\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* The known hosts file is used to certify remote hosts
|
|
Packit |
6c0a39 |
* are genuine.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_ADD_IDENTITY (or SSH_OPTIONS_IDENTITY):
|
|
Packit |
6c0a39 |
* Add a new identity file (const char *, format string) to
|
|
Packit |
6c0a39 |
* the identity list.\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* By default identity, id_dsa and id_rsa are checked.\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* The identity used to authenticate with public key will be
|
|
Packit |
6c0a39 |
* prepended to the list.
|
|
Packit |
6c0a39 |
* It may include "%s" which will be replaced by the
|
|
Packit |
6c0a39 |
* user home directory.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_TIMEOUT:
|
|
Packit |
6c0a39 |
* Set a timeout for the connection in seconds (long).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_TIMEOUT_USEC:
|
|
Packit |
6c0a39 |
* Set a timeout for the connection in micro seconds
|
|
Packit |
6c0a39 |
* (long).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_SSH1:
|
|
Packit |
6c0a39 |
* Deprecated
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_SSH2:
|
|
Packit |
6c0a39 |
* Unused
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_LOG_VERBOSITY:
|
|
Packit |
6c0a39 |
* Set the session logging verbosity (int).\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* The verbosity of the messages. Every log smaller or
|
|
Packit |
6c0a39 |
* equal to verbosity will be shown.
|
|
Packit |
6c0a39 |
* - SSH_LOG_NOLOG: No logging
|
|
Packit |
6c0a39 |
* - SSH_LOG_WARNING: Only warnings
|
|
Packit |
6c0a39 |
* - SSH_LOG_PROTOCOL: High level protocol information
|
|
Packit |
6c0a39 |
* - SSH_LOG_PACKET: Lower level protocol infomations, packet level
|
|
Packit |
6c0a39 |
* - SSH_LOG_FUNCTIONS: Every function path
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_LOG_VERBOSITY_STR:
|
|
Packit |
6c0a39 |
* Set the session logging verbosity via a
|
|
Packit |
6c0a39 |
* string that will be converted to a numerical
|
|
Packit |
6c0a39 |
* value (e.g. "3") and interpreted according
|
|
Packit |
6c0a39 |
* to the values of
|
|
Packit |
6c0a39 |
* SSH_OPTIONS_LOG_VERBOSITY above (const
|
|
Packit |
6c0a39 |
* char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_CIPHERS_C_S:
|
|
Packit |
6c0a39 |
* Set the symmetric cipher client to server (const char *,
|
|
Packit |
6c0a39 |
* comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_CIPHERS_S_C:
|
|
Packit |
6c0a39 |
* Set the symmetric cipher server to client (const char *,
|
|
Packit |
6c0a39 |
* comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_KEY_EXCHANGE:
|
|
Packit |
6c0a39 |
* Set the key exchange method to be used (const char *,
|
|
Packit |
6c0a39 |
* comma-separated list). ex:
|
|
Packit |
6c0a39 |
* "ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1"
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_HMAC_C_S:
|
|
Packit |
6c0a39 |
* Set the Message Authentication Code algorithm client to server
|
|
Packit |
6c0a39 |
* (const char *, comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_HMAC_S_C:
|
|
Packit |
6c0a39 |
* Set the Message Authentication Code algorithm server to client
|
|
Packit |
6c0a39 |
* (const char *, comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_HOSTKEYS:
|
|
Packit |
6c0a39 |
* Set the preferred server host key types (const char *,
|
|
Packit |
6c0a39 |
* comma-separated list). ex:
|
|
Packit |
6c0a39 |
* "ssh-rsa,ssh-dss,ecdh-sha2-nistp256"
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PUBLICKEY_ACCEPTED_TYPES:
|
|
Packit |
6c0a39 |
* Set the preferred public key algorithms to be used for
|
|
Packit |
6c0a39 |
* authentication (const char *, comma-separated list). ex:
|
|
Packit |
6c0a39 |
* "ssh-rsa,rsa-sha2-256,ssh-dss,ecdh-sha2-nistp256"
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_COMPRESSION_C_S:
|
|
Packit |
6c0a39 |
* Set the compression to use for client to server
|
|
Packit |
6c0a39 |
* communication (const char *, "yes", "no" or a specific
|
|
Packit |
6c0a39 |
* algorithm name if needed ("zlib","zlib@openssh.com","none").
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_COMPRESSION_S_C:
|
|
Packit |
6c0a39 |
* Set the compression to use for server to client
|
|
Packit |
6c0a39 |
* communication (const char *, "yes", "no" or a specific
|
|
Packit |
6c0a39 |
* algorithm name if needed ("zlib","zlib@openssh.com","none").
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_COMPRESSION:
|
|
Packit |
6c0a39 |
* Set the compression to use for both directions
|
|
Packit |
6c0a39 |
* communication (const char *, "yes", "no" or a specific
|
|
Packit |
6c0a39 |
* algorithm name if needed ("zlib","zlib@openssh.com","none").
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_COMPRESSION_LEVEL:
|
|
Packit |
6c0a39 |
* Set the compression level to use for zlib functions. (int,
|
|
Packit |
6c0a39 |
* value from 1 to 9, 9 being the most efficient but slower).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_STRICTHOSTKEYCHECK:
|
|
Packit |
6c0a39 |
* Set the parameter StrictHostKeyChecking to avoid
|
|
Packit |
6c0a39 |
* asking about a fingerprint (int, 0 = false).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PROXYCOMMAND:
|
|
Packit |
6c0a39 |
* Set the command to be executed in order to connect to
|
|
Packit |
6c0a39 |
* server (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_GSSAPI_SERVER_IDENTITY
|
|
Packit |
6c0a39 |
* Set it to specify the GSSAPI server identity that libssh
|
|
Packit |
6c0a39 |
* should expect when connecting to the server (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_GSSAPI_CLIENT_IDENTITY
|
|
Packit |
6c0a39 |
* Set it to specify the GSSAPI client identity that libssh
|
|
Packit |
6c0a39 |
* should expect when connecting to the server (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_GSSAPI_DELEGATE_CREDENTIALS
|
|
Packit |
6c0a39 |
* Set it to specify that GSSAPI should delegate credentials
|
|
Packit |
6c0a39 |
* to the server (int, 0 = false).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PASSWORD_AUTH
|
|
Packit |
6c0a39 |
* Set it if password authentication should be used
|
|
Packit |
6c0a39 |
* in ssh_userauth_auto_pubkey(). (int, 0=false).
|
|
Packit |
6c0a39 |
* Currently without effect (ssh_userauth_auto_pubkey doesn't use
|
|
Packit |
6c0a39 |
* password authentication).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PUBKEY_AUTH
|
|
Packit |
6c0a39 |
* Set it if pubkey authentication should be used
|
|
Packit |
6c0a39 |
* in ssh_userauth_auto_pubkey(). (int, 0=false).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_KBDINT_AUTH
|
|
Packit |
6c0a39 |
* Set it if keyboard-interactive authentication should be used
|
|
Packit |
6c0a39 |
* in ssh_userauth_auto_pubkey(). (int, 0=false).
|
|
Packit |
6c0a39 |
* Currently without effect (ssh_userauth_auto_pubkey doesn't use
|
|
Packit |
6c0a39 |
* keyboard-interactive authentication).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_GSSAPI_AUTH
|
|
Packit |
6c0a39 |
* Set it if gssapi authentication should be used
|
|
Packit |
6c0a39 |
* in ssh_userauth_auto_pubkey(). (int, 0=false).
|
|
Packit |
6c0a39 |
* Currently without effect (ssh_userauth_auto_pubkey doesn't use
|
|
Packit |
6c0a39 |
* gssapi authentication).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_NODELAY
|
|
Packit |
6c0a39 |
* Set it to disable Nagle's Algorithm (TCP_NODELAY) on the
|
|
Packit |
6c0a39 |
* session socket. (int, 0=false)
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PROCESS_CONFIG
|
|
Packit |
6c0a39 |
* Set it to false to disable automatic processing of per-user
|
|
Packit |
6c0a39 |
* and system-wide OpenSSH configuration files. LibSSH
|
|
Packit |
6c0a39 |
* automatically uses these configuration files unless
|
|
Packit |
6c0a39 |
* you provide it with this option or with different file (bool).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_REKEY_DATA
|
|
Packit |
6c0a39 |
* Set the data limit that can be transferred with a single
|
|
Packit |
6c0a39 |
* key in bytes. RFC 4253 Section 9 recommends 1GB of data, while
|
|
Packit |
6c0a39 |
* RFC 4344 provides more specific restrictions, that are applied
|
|
Packit |
6c0a39 |
* automatically. When specified, the lower value will be used.
|
|
Packit |
6c0a39 |
* (uint64_t, 0=default)
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_REKEY_TIME
|
|
Packit |
6c0a39 |
* Set the time limit for a session before intializing a rekey
|
|
Packit |
6c0a39 |
* in seconds. RFC 4253 Section 9 recommends one hour.
|
|
Packit |
6c0a39 |
* (uint32_t, 0=off)
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param value The value to set. This is a generic pointer and the
|
|
Packit |
6c0a39 |
* datatype which is used should be set according to the
|
|
Packit |
6c0a39 |
* type set.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @return 0 on success, < 0 on error.
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_options_set(ssh_session session, enum ssh_options_e type,
|
|
Packit |
6c0a39 |
const void *value) {
|
|
Packit |
6c0a39 |
const char *v;
|
|
Packit |
6c0a39 |
char *p, *q;
|
|
Packit |
6c0a39 |
long int i;
|
|
Packit |
6c0a39 |
unsigned int u;
|
|
Packit |
6c0a39 |
int rc;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
switch (type) {
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_HOST:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
q = strdup(value);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
p = strchr(q, '@');
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.host);
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (p) {
|
|
Packit |
6c0a39 |
*p = '\0';
|
|
Packit |
6c0a39 |
session->opts.host = strdup(p + 1);
|
|
Packit |
6c0a39 |
if (session->opts.host == NULL) {
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.username);
|
|
Packit |
6c0a39 |
session->opts.username = strdup(q);
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
if (session->opts.username == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
session->opts.host = q;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PORT:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int *x = (int *) value;
|
|
Packit |
6c0a39 |
if (*x <= 0) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
session->opts.port = *x & 0xffffU;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PORT_STR:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
q = strdup(v);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
i = strtol(q, &p, 10);
|
|
Packit |
6c0a39 |
if (q == p) {
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
if (i <= 0) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
session->opts.port = i & 0xffffU;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_FD:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
session->opts.fd = SSH_INVALID_SOCKET;
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
socket_t *x = (socket_t *) value;
|
|
Packit |
6c0a39 |
if (*x < 0) {
|
|
Packit |
6c0a39 |
session->opts.fd = SSH_INVALID_SOCKET;
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
session->opts.fd = *x & 0xffff;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_BINDADDR:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
q = strdup(v);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.bindaddr);
|
|
Packit |
6c0a39 |
session->opts.bindaddr = q;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_USER:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.username);
|
|
Packit |
6c0a39 |
if (v == NULL) {
|
|
Packit |
6c0a39 |
q = ssh_get_local_username();
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
session->opts.username = q;
|
|
Packit |
6c0a39 |
} else if (v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else { /* username provided */
|
|
Packit |
6c0a39 |
session->opts.username = strdup(value);
|
|
Packit |
6c0a39 |
if (session->opts.username == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_SSH_DIR:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.sshdir);
|
|
Packit |
6c0a39 |
if (v == NULL) {
|
|
Packit |
6c0a39 |
session->opts.sshdir = ssh_path_expand_tilde("~/.ssh");
|
|
Packit |
6c0a39 |
if (session->opts.sshdir == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
} else if (v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
session->opts.sshdir = ssh_path_expand_tilde(v);
|
|
Packit |
6c0a39 |
if (session->opts.sshdir == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_IDENTITY:
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_ADD_IDENTITY:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
q = strdup(v);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
rc = ssh_list_prepend(session->opts.identity, q);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
free(q);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_KNOWNHOSTS:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.knownhosts);
|
|
Packit |
6c0a39 |
if (v == NULL) {
|
|
Packit |
6c0a39 |
/* The default value will be set by the ssh_options_apply() */
|
|
Packit |
6c0a39 |
} else if (v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
session->opts.knownhosts = strdup(v);
|
|
Packit |
6c0a39 |
if (session->opts.knownhosts == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_GLOBAL_KNOWNHOSTS:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.global_knownhosts);
|
|
Packit |
6c0a39 |
if (v == NULL) {
|
|
Packit |
6c0a39 |
session->opts.global_knownhosts =
|
|
Packit |
6c0a39 |
strdup("/etc/ssh/ssh_known_hosts");
|
|
Packit |
6c0a39 |
if (session->opts.global_knownhosts == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
} else if (v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
session->opts.global_knownhosts = strdup(v);
|
|
Packit |
6c0a39 |
if (session->opts.global_knownhosts == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_TIMEOUT:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
long *x = (long *) value;
|
|
Packit |
6c0a39 |
if (*x < 0) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
session->opts.timeout = *x & 0xffffffffU;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_TIMEOUT_USEC:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
long *x = (long *) value;
|
|
Packit |
6c0a39 |
if (*x < 0) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
session->opts.timeout_usec = *x & 0xffffffffU;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_SSH1:
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_SSH2:
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_LOG_VERBOSITY:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int *x = (int *) value;
|
|
Packit |
6c0a39 |
if (*x < 0) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
session->common.log_verbosity = *x & 0xffffU;
|
|
Packit Service |
fcc0d2 |
ssh_set_log_level(*x & 0xffffU);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_LOG_VERBOSITY_STR:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
session->common.log_verbosity = 0;
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
q = strdup(v);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
i = strtol(q, &p, 10);
|
|
Packit |
6c0a39 |
if (q == p) {
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
if (i < 0) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
session->common.log_verbosity = i & 0xffffU;
|
|
Packit Service |
fcc0d2 |
ssh_set_log_level(i & 0xffffU);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_CIPHERS_C_S:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_CRYPT_C_S, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_CIPHERS_S_C:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_CRYPT_S_C, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_KEY_EXCHANGE:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_KEX, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_HOSTKEYS:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_HOSTKEYS, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PUBLICKEY_ACCEPTED_TYPES:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_fips_mode()) {
|
|
Packit |
6c0a39 |
p = ssh_keep_fips_algos(SSH_HOSTKEYS, v);
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
p = ssh_keep_known_algos(SSH_HOSTKEYS, v);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (p == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error(session, SSH_REQUEST_DENIED,
|
|
Packit |
6c0a39 |
"Setting method: no known public key algorithm (%s)",
|
|
Packit |
6c0a39 |
v);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.pubkey_accepted_types);
|
|
Packit |
6c0a39 |
session->opts.pubkey_accepted_types = p;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_HMAC_C_S:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_MAC_C_S, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_HMAC_S_C:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_MAC_S_C, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_COMPRESSION_C_S:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (strcasecmp(value,"yes")==0){
|
|
Packit |
6c0a39 |
if(ssh_options_set_algo(session,SSH_COMP_C_S,"zlib@openssh.com,zlib") < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else if (strcasecmp(value,"no")==0){
|
|
Packit |
6c0a39 |
if(ssh_options_set_algo(session,SSH_COMP_C_S,"none") < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_COMP_C_S, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_COMPRESSION_S_C:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (strcasecmp(value,"yes")==0){
|
|
Packit |
6c0a39 |
if(ssh_options_set_algo(session,SSH_COMP_S_C,"zlib@openssh.com,zlib") < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else if (strcasecmp(value,"no")==0){
|
|
Packit |
6c0a39 |
if(ssh_options_set_algo(session,SSH_COMP_S_C,"none") < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_options_set_algo(session, SSH_COMP_S_C, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_COMPRESSION:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if(ssh_options_set(session,SSH_OPTIONS_COMPRESSION_C_S, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
if(ssh_options_set(session,SSH_OPTIONS_COMPRESSION_S_C, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_COMPRESSION_LEVEL:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int *x = (int *)value;
|
|
Packit |
6c0a39 |
if (*x < 1 || *x > 9) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
session->opts.compressionlevel = *x & 0xff;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_STRICTHOSTKEYCHECK:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int *x = (int *) value;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
session->opts.StrictHostKeyChecking = (*x & 0xff) > 0 ? 1 : 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
session->opts.StrictHostKeyChecking = *(int*)value;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PROXYCOMMAND:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.ProxyCommand);
|
|
Packit |
6c0a39 |
/* Setting the command to 'none' disables this option. */
|
|
Packit |
6c0a39 |
rc = strcasecmp(v, "none");
|
|
Packit |
6c0a39 |
if (rc != 0) {
|
|
Packit |
6c0a39 |
q = strdup(v);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
session->opts.ProxyCommand = q;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_GSSAPI_SERVER_IDENTITY:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.gss_server_identity);
|
|
Packit |
6c0a39 |
session->opts.gss_server_identity = strdup(v);
|
|
Packit |
6c0a39 |
if (session->opts.gss_server_identity == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_GSSAPI_CLIENT_IDENTITY:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
SAFE_FREE(session->opts.gss_client_identity);
|
|
Packit |
6c0a39 |
session->opts.gss_client_identity = strdup(v);
|
|
Packit |
6c0a39 |
if (session->opts.gss_client_identity == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_GSSAPI_DELEGATE_CREDENTIALS:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int x = *(int *)value;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
session->opts.gss_delegate_creds = (x & 0xff);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PASSWORD_AUTH:
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PUBKEY_AUTH:
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_KBDINT_AUTH:
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_GSSAPI_AUTH:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int x = *(int *)value;
|
|
Packit |
6c0a39 |
u = type == SSH_OPTIONS_PASSWORD_AUTH ?
|
|
Packit |
6c0a39 |
SSH_OPT_FLAG_PASSWORD_AUTH:
|
|
Packit |
6c0a39 |
type == SSH_OPTIONS_PUBKEY_AUTH ?
|
|
Packit |
6c0a39 |
SSH_OPT_FLAG_PUBKEY_AUTH:
|
|
Packit |
6c0a39 |
type == SSH_OPTIONS_KBDINT_AUTH ?
|
|
Packit |
6c0a39 |
SSH_OPT_FLAG_KBDINT_AUTH:
|
|
Packit |
6c0a39 |
SSH_OPT_FLAG_GSSAPI_AUTH;
|
|
Packit |
6c0a39 |
if (x != 0){
|
|
Packit |
6c0a39 |
session->opts.flags |= u;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
session->opts.flags &= ~u;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_NODELAY:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int *x = (int *) value;
|
|
Packit |
6c0a39 |
session->opts.nodelay = (*x & 0xff) > 0 ? 1 : 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PROCESS_CONFIG:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
bool *x = (bool *)value;
|
|
Packit |
6c0a39 |
session->opts.config_processed = !(*x);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_REKEY_DATA:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
uint64_t *x = (uint64_t *)value;
|
|
Packit |
6c0a39 |
session->opts.rekey_data = *x;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_REKEY_TIME:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
uint32_t *x = (uint32_t *)value;
|
|
Packit |
6c0a39 |
if ((*x * 1000) < *x) {
|
|
Packit |
6c0a39 |
ssh_set_error(session, SSH_REQUEST_DENIED,
|
|
Packit |
6c0a39 |
"The provided value (%" PRIu32 ") for rekey"
|
|
Packit |
6c0a39 |
" time is too large", *x);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
session->opts.rekey_time = (*x) * 1000;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
default:
|
|
Packit |
6c0a39 |
ssh_set_error(session, SSH_REQUEST_DENIED, "Unknown ssh option %d", type);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief This function can get ssh the ssh port. It must only be used on
|
|
Packit |
6c0a39 |
* a valid ssh session. This function is useful when the session
|
|
Packit |
6c0a39 |
* options have been automatically inferred from the environment
|
|
Packit |
6c0a39 |
* or configuration files and one
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param session An allocated SSH session structure.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param port_target An unsigned integer into which the
|
|
Packit |
6c0a39 |
* port will be set from the ssh session.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @return 0 on success, < 0 on error.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_options_get_port(ssh_session session, unsigned int* port_target) {
|
|
Packit |
6c0a39 |
if (session == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session->opts.port == 0) {
|
|
Packit |
6c0a39 |
*port_target = 22;
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
*port_target = session->opts.port;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief This function can get ssh options, it does not support all options provided for
|
|
Packit |
6c0a39 |
* ssh options set, but mostly those which a user-space program may care about having
|
|
Packit |
6c0a39 |
* trusted the ssh driver to infer these values from underlaying configuration files.
|
|
Packit |
6c0a39 |
* It operates only on those SSH_OPTIONS_* which return char*. If you wish to receive
|
|
Packit |
6c0a39 |
* the port then please use ssh_options_get_port() which returns an unsigned int.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param session An allocated SSH session structure.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param type The option type to get. This could be one of the
|
|
Packit |
6c0a39 |
* following:
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_HOST:
|
|
Packit |
6c0a39 |
* The hostname or ip address to connect to (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_USER:
|
|
Packit |
6c0a39 |
* The username for authentication (const char *).\n
|
|
Packit |
6c0a39 |
* \n when not explicitly set this will be inferred from the
|
|
Packit |
6c0a39 |
* ~/.ssh/config file.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_IDENTITY:
|
|
Packit |
6c0a39 |
* Get the first identity file name (const char *).\n
|
|
Packit |
6c0a39 |
* \n
|
|
Packit |
6c0a39 |
* By default identity, id_dsa and id_rsa are checked.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_PROXYCOMMAND:
|
|
Packit |
6c0a39 |
* Get the proxycommand necessary to log into the
|
|
Packit |
6c0a39 |
* remote host. When not explicitly set, it will be read
|
|
Packit |
6c0a39 |
* from the ~/.ssh/config file.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_GLOBAL_KNOWNHOSTS:
|
|
Packit |
6c0a39 |
* Get the path to the global known_hosts file being used.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_OPTIONS_KNOWNHOSTS:
|
|
Packit |
6c0a39 |
* Get the path to the known_hosts file being used.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param value The value to get into. As a char**, space will be
|
|
Packit |
6c0a39 |
* allocated by the function for the value, it is
|
|
Packit |
6c0a39 |
* your responsibility to free the memory using
|
|
Packit |
6c0a39 |
* ssh_string_free_char().
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @return SSH_OK on success, SSH_ERROR on error.
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_options_get(ssh_session session, enum ssh_options_e type, char** value)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
char* src = NULL;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session == NULL) {
|
|
Packit |
6c0a39 |
return SSH_ERROR;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return SSH_ERROR;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
switch(type)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_HOST: {
|
|
Packit |
6c0a39 |
src = session->opts.host;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_USER: {
|
|
Packit |
6c0a39 |
src = session->opts.username;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_IDENTITY: {
|
|
Packit |
6c0a39 |
struct ssh_iterator *it = ssh_list_get_iterator(session->opts.identity);
|
|
Packit |
6c0a39 |
if (it == NULL) {
|
|
Packit |
6c0a39 |
return SSH_ERROR;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
src = ssh_iterator_value(char *, it);
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_PROXYCOMMAND: {
|
|
Packit |
6c0a39 |
src = session->opts.ProxyCommand;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_KNOWNHOSTS: {
|
|
Packit |
6c0a39 |
src = session->opts.knownhosts;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
case SSH_OPTIONS_GLOBAL_KNOWNHOSTS: {
|
|
Packit |
6c0a39 |
src = session->opts.global_knownhosts;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
default:
|
|
Packit |
6c0a39 |
ssh_set_error(session, SSH_REQUEST_DENIED, "Unknown ssh option %d", type);
|
|
Packit |
6c0a39 |
return SSH_ERROR;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (src == NULL) {
|
|
Packit |
6c0a39 |
return SSH_ERROR;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
*value = strdup(src);
|
|
Packit |
6c0a39 |
if (*value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return SSH_ERROR;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
return SSH_OK;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief Parse command line arguments.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* This is a helper for your application to generate the appropriate
|
|
Packit |
6c0a39 |
* options from the command line arguments.\n
|
|
Packit |
6c0a39 |
* The argv array and argc value are changed so that the parsed
|
|
Packit |
6c0a39 |
* arguments wont appear anymore in them.\n
|
|
Packit |
6c0a39 |
* The single arguments (without switches) are not parsed. thus,
|
|
Packit |
6c0a39 |
* myssh -l user localhost\n
|
|
Packit |
6c0a39 |
* The command wont set the hostname value of options to localhost.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param session The session to configure.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param argcptr The pointer to the argument count.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param argv The arguments list pointer.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @returns 0 on success, < 0 on error.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @see ssh_session_new()
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_options_getopt(ssh_session session, int *argcptr, char **argv)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
#ifdef _MSC_VER
|
|
Packit |
6c0a39 |
(void)session;
|
|
Packit |
6c0a39 |
(void)argcptr;
|
|
Packit |
6c0a39 |
(void)argv;
|
|
Packit |
6c0a39 |
/* Not supported with a Microsoft compiler */
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
#else
|
|
Packit |
6c0a39 |
char *user = NULL;
|
|
Packit |
6c0a39 |
char *cipher = NULL;
|
|
Packit |
6c0a39 |
char *identity = NULL;
|
|
Packit |
6c0a39 |
char *port = NULL;
|
|
Packit |
6c0a39 |
char **save = NULL;
|
|
Packit |
6c0a39 |
char **tmp = NULL;
|
|
Packit |
6c0a39 |
size_t i = 0;
|
|
Packit |
6c0a39 |
int argc = *argcptr;
|
|
Packit |
6c0a39 |
int debuglevel = 0;
|
|
Packit |
6c0a39 |
int usersa = 0;
|
|
Packit |
6c0a39 |
int usedss = 0;
|
|
Packit |
6c0a39 |
int compress = 0;
|
|
Packit |
6c0a39 |
int cont = 1;
|
|
Packit |
6c0a39 |
size_t current = 0;
|
|
Packit |
6c0a39 |
int saveoptind = optind; /* need to save 'em */
|
|
Packit |
6c0a39 |
int saveopterr = opterr;
|
|
Packit |
6c0a39 |
int opt;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
opterr = 0; /* shut up getopt */
|
|
Packit |
6c0a39 |
while((opt = getopt(argc, argv, "c:i:Cl:p:vb:rd12")) != -1) {
|
|
Packit |
6c0a39 |
switch(opt) {
|
|
Packit |
6c0a39 |
case 'l':
|
|
Packit |
6c0a39 |
user = optarg;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case 'p':
|
|
Packit |
6c0a39 |
port = optarg;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case 'v':
|
|
Packit |
6c0a39 |
debuglevel++;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case 'r':
|
|
Packit |
6c0a39 |
usersa++;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case 'd':
|
|
Packit |
6c0a39 |
usedss++;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case 'c':
|
|
Packit |
6c0a39 |
cipher = optarg;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case 'i':
|
|
Packit |
6c0a39 |
identity = optarg;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case 'C':
|
|
Packit |
6c0a39 |
compress++;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case '2':
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case '1':
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
default:
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
char optv[3] = "- ";
|
|
Packit |
6c0a39 |
optv[1] = optopt;
|
|
Packit |
6c0a39 |
tmp = realloc(save, (current + 1) * sizeof(char*));
|
|
Packit |
6c0a39 |
if (tmp == NULL) {
|
|
Packit |
6c0a39 |
SAFE_FREE(save);
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
save = tmp;
|
|
Packit |
6c0a39 |
save[current] = strdup(optv);
|
|
Packit |
6c0a39 |
if (save[current] == NULL) {
|
|
Packit |
6c0a39 |
SAFE_FREE(save);
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
current++;
|
|
Packit |
6c0a39 |
if (optarg) {
|
|
Packit |
6c0a39 |
save[current++] = argv[optind + 1];
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
} /* switch */
|
|
Packit |
6c0a39 |
} /* while */
|
|
Packit |
6c0a39 |
opterr = saveopterr;
|
|
Packit |
6c0a39 |
tmp = realloc(save, (current + (argc - optind)) * sizeof(char*));
|
|
Packit |
6c0a39 |
if (tmp == NULL) {
|
|
Packit |
6c0a39 |
SAFE_FREE(save);
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
save = tmp;
|
|
Packit |
6c0a39 |
while (optind < argc) {
|
|
Packit |
6c0a39 |
tmp = realloc(save, (current + 1) * sizeof(char*));
|
|
Packit |
6c0a39 |
if (tmp == NULL) {
|
|
Packit |
6c0a39 |
SAFE_FREE(save);
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
save = tmp;
|
|
Packit |
6c0a39 |
save[current] = argv[optind];
|
|
Packit |
6c0a39 |
current++;
|
|
Packit |
6c0a39 |
optind++;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (usersa && usedss) {
|
|
Packit |
6c0a39 |
ssh_set_error(session, SSH_FATAL, "Either RSA or DSS must be chosen");
|
|
Packit |
6c0a39 |
cont = 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
ssh_set_log_level(debuglevel);
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
optind = saveoptind;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if(!cont) {
|
|
Packit |
6c0a39 |
SAFE_FREE(save);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* first recopy the save vector into the original's */
|
|
Packit |
6c0a39 |
for (i = 0; i < current; i++) {
|
|
Packit |
6c0a39 |
/* don't erase argv[0] */
|
|
Packit |
6c0a39 |
argv[ i + 1] = save[i];
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
argv[current + 1] = NULL;
|
|
Packit |
6c0a39 |
*argcptr = current + 1;
|
|
Packit |
6c0a39 |
SAFE_FREE(save);
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* set a new option struct */
|
|
Packit |
6c0a39 |
if (compress) {
|
|
Packit |
6c0a39 |
if (ssh_options_set(session, SSH_OPTIONS_COMPRESSION, "yes") < 0) {
|
|
Packit |
6c0a39 |
cont = 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (cont && cipher) {
|
|
Packit |
6c0a39 |
if (ssh_options_set(session, SSH_OPTIONS_CIPHERS_C_S, cipher) < 0) {
|
|
Packit |
6c0a39 |
cont = 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (cont && ssh_options_set(session, SSH_OPTIONS_CIPHERS_S_C, cipher) < 0) {
|
|
Packit |
6c0a39 |
cont = 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (cont && user) {
|
|
Packit |
6c0a39 |
if (ssh_options_set(session, SSH_OPTIONS_USER, user) < 0) {
|
|
Packit |
6c0a39 |
cont = 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (cont && identity) {
|
|
Packit |
6c0a39 |
if (ssh_options_set(session, SSH_OPTIONS_IDENTITY, identity) < 0) {
|
|
Packit |
6c0a39 |
cont = 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (port != NULL) {
|
|
Packit |
6c0a39 |
ssh_options_set(session, SSH_OPTIONS_PORT_STR, port);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (!cont) {
|
|
Packit |
6c0a39 |
return SSH_ERROR;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return SSH_OK;
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief Parse the ssh config file.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* This should be the last call of all options, it may overwrite options which
|
|
Packit |
6c0a39 |
* are already set. It requires that the host name is already set with
|
|
Packit |
6c0a39 |
* ssh_options_set_host().
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param session SSH session handle
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param filename The options file to use, if NULL the default
|
|
Packit |
6c0a39 |
* ~/.ssh/config will be used.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @return 0 on success, < 0 on error.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @see ssh_options_set_host()
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_options_parse_config(ssh_session session, const char *filename) {
|
|
Packit |
6c0a39 |
char *expanded_filename;
|
|
Packit |
6c0a39 |
int r;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (session->opts.host == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session->opts.sshdir == NULL) {
|
|
Packit |
6c0a39 |
r = ssh_options_set(session, SSH_OPTIONS_SSH_DIR, NULL);
|
|
Packit |
6c0a39 |
if (r < 0) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(session);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* set default filename */
|
|
Packit |
6c0a39 |
if (filename == NULL) {
|
|
Packit |
6c0a39 |
expanded_filename = ssh_path_expand_escape(session, "%d/config");
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
expanded_filename = ssh_path_expand_escape(session, filename);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (expanded_filename == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
r = ssh_config_parse_file(session, expanded_filename);
|
|
Packit |
6c0a39 |
if (r < 0) {
|
|
Packit |
6c0a39 |
goto out;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (filename == NULL) {
|
|
Packit |
6c0a39 |
r = ssh_config_parse_file(session, GLOBAL_CLIENT_CONFIG);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* Do not process the default configuration as part of connection again */
|
|
Packit |
6c0a39 |
session->opts.config_processed = true;
|
|
Packit |
6c0a39 |
out:
|
|
Packit |
6c0a39 |
free(expanded_filename);
|
|
Packit |
6c0a39 |
return r;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
int ssh_options_apply(ssh_session session) {
|
|
Packit |
6c0a39 |
struct ssh_iterator *it;
|
|
Packit |
6c0a39 |
char *tmp;
|
|
Packit |
6c0a39 |
int rc;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session->opts.sshdir == NULL) {
|
|
Packit |
6c0a39 |
rc = ssh_options_set(session, SSH_OPTIONS_SSH_DIR, NULL);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session->opts.username == NULL) {
|
|
Packit |
6c0a39 |
rc = ssh_options_set(session, SSH_OPTIONS_USER, NULL);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session->opts.knownhosts == NULL) {
|
|
Packit |
6c0a39 |
tmp = ssh_path_expand_escape(session, "%d/known_hosts");
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
tmp = ssh_path_expand_escape(session, session->opts.knownhosts);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (tmp == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
free(session->opts.knownhosts);
|
|
Packit |
6c0a39 |
session->opts.knownhosts = tmp;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session->opts.global_knownhosts == NULL) {
|
|
Packit |
6c0a39 |
tmp = strdup("/etc/ssh/ssh_known_hosts");
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
tmp = ssh_path_expand_escape(session, session->opts.global_knownhosts);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (tmp == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
free(session->opts.global_knownhosts);
|
|
Packit |
6c0a39 |
session->opts.global_knownhosts = tmp;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (session->opts.ProxyCommand != NULL) {
|
|
Packit |
6c0a39 |
tmp = ssh_path_expand_escape(session, session->opts.ProxyCommand);
|
|
Packit |
6c0a39 |
if (tmp == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
free(session->opts.ProxyCommand);
|
|
Packit |
6c0a39 |
session->opts.ProxyCommand = tmp;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
for (it = ssh_list_get_iterator(session->opts.identity);
|
|
Packit |
6c0a39 |
it != NULL;
|
|
Packit |
6c0a39 |
it = it->next) {
|
|
Packit |
6c0a39 |
char *id = (char *) it->data;
|
|
Packit Service |
fcc0d2 |
if (strncmp(id, "pkcs11:", 6) == 0) {
|
|
Packit Service |
fcc0d2 |
/* PKCS#11 URIs are using percent-encoding so we can not mix
|
|
Packit Service |
fcc0d2 |
* it with ssh expansion of ssh escape characters.
|
|
Packit Service |
fcc0d2 |
* Skip these identities now, before we will have PKCS#11 support
|
|
Packit Service |
fcc0d2 |
*/
|
|
Packit Service |
fcc0d2 |
continue;
|
|
Packit Service |
fcc0d2 |
}
|
|
Packit |
6c0a39 |
tmp = ssh_path_expand_escape(session, id);
|
|
Packit |
6c0a39 |
if (tmp == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
free(id);
|
|
Packit |
6c0a39 |
it->data = tmp;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/** @} */
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
#ifdef WITH_SERVER
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @addtogroup libssh_server
|
|
Packit |
6c0a39 |
* @{
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
static int ssh_bind_set_key(ssh_bind sshbind, char **key_loc,
|
|
Packit |
6c0a39 |
const void *value) {
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
SAFE_FREE(*key_loc);
|
|
Packit |
6c0a39 |
*key_loc = strdup(value);
|
|
Packit |
6c0a39 |
if (*key_loc == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
static int ssh_bind_set_algo(ssh_bind sshbind,
|
|
Packit |
6c0a39 |
enum ssh_kex_types_e algo,
|
|
Packit |
6c0a39 |
const char *list)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
char *p = NULL;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (ssh_fips_mode()) {
|
|
Packit |
6c0a39 |
p = ssh_keep_fips_algos(algo, list);
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
p = ssh_keep_known_algos(algo, list);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (p == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind, SSH_REQUEST_DENIED,
|
|
Packit |
6c0a39 |
"Setting method: no algorithm for method \"%s\" (%s)",
|
|
Packit |
6c0a39 |
ssh_kex_get_description(algo), list);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
SAFE_FREE(sshbind->wanted_methods[algo]);
|
|
Packit |
6c0a39 |
sshbind->wanted_methods[algo] = p;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief Set options for an SSH server bind.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param sshbind The ssh server bind to configure.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param type The option type to set. This should be one of the
|
|
Packit |
6c0a39 |
* following:
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_HOSTKEY:
|
|
Packit |
6c0a39 |
* Set the path to an ssh host key, regardless
|
|
Packit |
6c0a39 |
* of type. Only one key from per key type
|
|
Packit |
6c0a39 |
* (RSA, DSA, ECDSA) is allowed in an ssh_bind
|
|
Packit |
6c0a39 |
* at a time, and later calls to this function
|
|
Packit |
6c0a39 |
* with this option for the same key type will
|
|
Packit |
6c0a39 |
* override prior calls (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_BINDADDR:
|
|
Packit |
6c0a39 |
* Set the IP address to bind (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_BINDPORT:
|
|
Packit |
6c0a39 |
* Set the port to bind (unsigned int *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_BINDPORT_STR:
|
|
Packit |
6c0a39 |
* Set the port to bind (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_LOG_VERBOSITY:
|
|
Packit |
6c0a39 |
* Set the session logging verbosity (int *).
|
|
Packit |
6c0a39 |
* The logging verbosity should have one of the
|
|
Packit |
6c0a39 |
* following values, which are listed in order
|
|
Packit |
6c0a39 |
* of increasing verbosity. Every log message
|
|
Packit |
6c0a39 |
* with verbosity less than or equal to the
|
|
Packit |
6c0a39 |
* logging verbosity will be shown.
|
|
Packit |
6c0a39 |
* - SSH_LOG_NOLOG: No logging
|
|
Packit |
6c0a39 |
* - SSH_LOG_WARNING: Only warnings
|
|
Packit |
6c0a39 |
* - SSH_LOG_PROTOCOL: High level protocol information
|
|
Packit |
6c0a39 |
* - SSH_LOG_PACKET: Lower level protocol infomations, packet level
|
|
Packit |
6c0a39 |
* - SSH_LOG_FUNCTIONS: Every function path
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_LOG_VERBOSITY_STR:
|
|
Packit |
6c0a39 |
* Set the session logging verbosity via a
|
|
Packit |
6c0a39 |
* string that will be converted to a numerical
|
|
Packit |
6c0a39 |
* value (e.g. "3") and interpreted according
|
|
Packit |
6c0a39 |
* to the values of
|
|
Packit |
6c0a39 |
* SSH_BIND_OPTIONS_LOG_VERBOSITY above (const
|
|
Packit |
6c0a39 |
* char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_DSAKEY:
|
|
Packit |
6c0a39 |
* Set the path to the ssh host dsa key, SSHv2
|
|
Packit |
6c0a39 |
* only (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_RSAKEY:
|
|
Packit |
6c0a39 |
* Set the path to the ssh host rsa key, SSHv2
|
|
Packit |
6c0a39 |
* only (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_ECDSAKEY:
|
|
Packit |
6c0a39 |
* Set the path to the ssh host ecdsa key,
|
|
Packit |
6c0a39 |
* SSHv2 only (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_BANNER:
|
|
Packit |
6c0a39 |
* Set the server banner sent to clients (const char *).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_IMPORT_KEY:
|
|
Packit |
6c0a39 |
* Set the Private Key for the server directly (ssh_key)
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_CIPHERS_C_S:
|
|
Packit |
6c0a39 |
* Set the symmetric cipher client to server (const char *,
|
|
Packit |
6c0a39 |
* comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_CIPHERS_S_C:
|
|
Packit |
6c0a39 |
* Set the symmetric cipher server to client (const char *,
|
|
Packit |
6c0a39 |
* comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_KEY_EXCHANGE:
|
|
Packit |
6c0a39 |
* Set the key exchange method to be used (const char *,
|
|
Packit |
6c0a39 |
* comma-separated list). ex:
|
|
Packit |
6c0a39 |
* "ecdh-sha2-nistp256,diffie-hellman-group14-sha1"
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_HMAC_C_S:
|
|
Packit |
6c0a39 |
* Set the Message Authentication Code algorithm client
|
|
Packit |
6c0a39 |
* to server (const char *, comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_HMAC_S_C:
|
|
Packit |
6c0a39 |
* Set the Message Authentication Code algorithm server
|
|
Packit |
6c0a39 |
* to client (const char *, comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_CONFIG_DIR:
|
|
Packit |
6c0a39 |
* Set the directory (const char *, format string)
|
|
Packit |
6c0a39 |
* to be used when the "%d" scape is used when providing
|
|
Packit |
6c0a39 |
* paths of configuration files to
|
|
Packit |
6c0a39 |
* ssh_bind_options_parse_config().
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_PROCESS_CONFIG
|
|
Packit |
6c0a39 |
* Set it to false to disable automatic processing of
|
|
Packit |
6c0a39 |
* system-wide configuration files. LibSSH automatically
|
|
Packit |
6c0a39 |
* uses these configuration files otherwise. This
|
|
Packit |
6c0a39 |
* option will only have effect if set before any call
|
|
Packit |
6c0a39 |
* to ssh_bind_options_parse_config() (bool).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_PUBKEY_ACCEPTED_KEY_TYPES:
|
|
Packit |
6c0a39 |
* Set the public key algorithm accepted by the server
|
|
Packit |
6c0a39 |
* (const char *, comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* - SSH_BIND_OPTIONS_HOSTKEY_ALGORITHMS:
|
|
Packit |
6c0a39 |
* Set the list of allowed hostkey signatures algorithms
|
|
Packit |
6c0a39 |
* to offer to the client, ordered by preference. This
|
|
Packit |
6c0a39 |
* list is used as a filter when creating the list of
|
|
Packit |
6c0a39 |
* algorithms to offer to the client: first the list of
|
|
Packit |
6c0a39 |
* possible algorithms is created from the list of keys
|
|
Packit |
6c0a39 |
* set and then filtered against this list.
|
|
Packit |
6c0a39 |
* (const char *, comma-separated list).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param value The value to set. This is a generic pointer and the
|
|
Packit |
6c0a39 |
* datatype which should be used is described at the
|
|
Packit |
6c0a39 |
* corresponding value of type above.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @return 0 on success, < 0 on error, invalid option, or parameter.
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_bind_options_set(ssh_bind sshbind, enum ssh_bind_options_e type,
|
|
Packit |
6c0a39 |
const void *value)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
char *p, *q;
|
|
Packit |
6c0a39 |
const char *v;
|
|
Packit |
6c0a39 |
int i, rc;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (sshbind == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
switch (type) {
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_HOSTKEY:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int key_type;
|
|
Packit |
6c0a39 |
ssh_key key;
|
|
Packit |
6c0a39 |
ssh_key *bind_key_loc = NULL;
|
|
Packit |
6c0a39 |
char **bind_key_path_loc;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
rc = ssh_pki_import_privkey_file(value, NULL, NULL, NULL, &key);
|
|
Packit |
6c0a39 |
if (rc != SSH_OK) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
key_type = ssh_key_type(key);
|
|
Packit |
6c0a39 |
switch (key_type) {
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_DSS:
|
|
Packit |
6c0a39 |
#ifdef HAVE_DSA
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->dsa;
|
|
Packit |
6c0a39 |
bind_key_path_loc = &sshbind->dsakey;
|
|
Packit |
6c0a39 |
#else
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind,
|
|
Packit |
6c0a39 |
SSH_FATAL,
|
|
Packit |
6c0a39 |
"DSS key used and libssh compiled "
|
|
Packit |
6c0a39 |
"without DSA support");
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ECDSA_P256:
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ECDSA_P384:
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ECDSA_P521:
|
|
Packit |
6c0a39 |
#ifdef HAVE_ECC
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->ecdsa;
|
|
Packit |
6c0a39 |
bind_key_path_loc = &sshbind->ecdsakey;
|
|
Packit |
6c0a39 |
#else
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind,
|
|
Packit |
6c0a39 |
SSH_FATAL,
|
|
Packit |
6c0a39 |
"ECDSA key used and libssh compiled "
|
|
Packit |
6c0a39 |
"without ECDSA support");
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_RSA:
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->rsa;
|
|
Packit |
6c0a39 |
bind_key_path_loc = &sshbind->rsakey;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ED25519:
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->ed25519;
|
|
Packit |
6c0a39 |
bind_key_path_loc = &sshbind->ed25519key;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
default:
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind,
|
|
Packit |
6c0a39 |
SSH_FATAL,
|
|
Packit |
6c0a39 |
"Unsupported key type %d", key_type);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (bind_key_loc == NULL) {
|
|
Packit |
6c0a39 |
ssh_key_free(key);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* Set the location of the key on disk even though we don't
|
|
Packit |
6c0a39 |
need it in case some other function wants it */
|
|
Packit |
6c0a39 |
rc = ssh_bind_set_key(sshbind, bind_key_path_loc, value);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
ssh_key_free(key);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
ssh_key_free(*bind_key_loc);
|
|
Packit |
6c0a39 |
*bind_key_loc = key;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_IMPORT_KEY:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int key_type;
|
|
Packit |
6c0a39 |
ssh_key *bind_key_loc = NULL;
|
|
Packit |
6c0a39 |
ssh_key key = (ssh_key)value;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
key_type = ssh_key_type(key);
|
|
Packit |
6c0a39 |
switch (key_type) {
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_DSS:
|
|
Packit |
6c0a39 |
#ifdef HAVE_DSA
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->dsa;
|
|
Packit |
6c0a39 |
#else
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind,
|
|
Packit |
6c0a39 |
SSH_FATAL,
|
|
Packit |
6c0a39 |
"DSA key used and libssh compiled "
|
|
Packit |
6c0a39 |
"without DSA support");
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ECDSA_P256:
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ECDSA_P384:
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ECDSA_P521:
|
|
Packit |
6c0a39 |
#ifdef HAVE_ECC
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->ecdsa;
|
|
Packit |
6c0a39 |
#else
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind,
|
|
Packit |
6c0a39 |
SSH_FATAL,
|
|
Packit |
6c0a39 |
"ECDSA key used and libssh compiled "
|
|
Packit |
6c0a39 |
"without ECDSA support");
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_RSA:
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->rsa;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_KEYTYPE_ED25519:
|
|
Packit |
6c0a39 |
bind_key_loc = &sshbind->ed25519;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
default:
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind,
|
|
Packit |
6c0a39 |
SSH_FATAL,
|
|
Packit |
6c0a39 |
"Unsupported key type %d", key_type);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (bind_key_loc == NULL)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
ssh_key_free(*bind_key_loc);
|
|
Packit |
6c0a39 |
*bind_key_loc = key;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_BINDADDR:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
SAFE_FREE(sshbind->bindaddr);
|
|
Packit |
6c0a39 |
sshbind->bindaddr = strdup(value);
|
|
Packit |
6c0a39 |
if (sshbind->bindaddr == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_BINDPORT:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int *x = (int *) value;
|
|
Packit Service |
fcc0d2 |
sshbind->bindport = *x & 0xffffU;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_BINDPORT_STR:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit Service |
fcc0d2 |
sshbind->bindport = 22 & 0xffffU;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
q = strdup(value);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
i = strtol(q, &p, 10);
|
|
Packit |
6c0a39 |
if (q == p) {
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
sshbind->bindport = i & 0xffffU;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_LOG_VERBOSITY:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
int *x = (int *) value;
|
|
Packit Service |
fcc0d2 |
ssh_set_log_level(*x & 0xffffU);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_LOG_VERBOSITY_STR:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_log_level(0);
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
q = strdup(value);
|
|
Packit |
6c0a39 |
if (q == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
i = strtol(q, &p, 10);
|
|
Packit |
6c0a39 |
if (q == p) {
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
SAFE_FREE(q);
|
|
Packit |
6c0a39 |
|
|
Packit Service |
fcc0d2 |
ssh_set_log_level(i & 0xffffU);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_DSAKEY:
|
|
Packit |
6c0a39 |
rc = ssh_bind_set_key(sshbind, &sshbind->dsakey, value);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_RSAKEY:
|
|
Packit |
6c0a39 |
rc = ssh_bind_set_key(sshbind, &sshbind->rsakey, value);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_ECDSAKEY:
|
|
Packit |
6c0a39 |
rc = ssh_bind_set_key(sshbind, &sshbind->ecdsakey, value);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_BANNER:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
SAFE_FREE(sshbind->banner);
|
|
Packit |
6c0a39 |
sshbind->banner = strdup(value);
|
|
Packit |
6c0a39 |
if (sshbind->banner == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_CIPHERS_C_S:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_bind_set_algo(sshbind, SSH_CRYPT_C_S, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_CIPHERS_S_C:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_bind_set_algo(sshbind, SSH_CRYPT_S_C, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_KEY_EXCHANGE:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
rc = ssh_bind_set_algo(sshbind, SSH_KEX, v);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_HMAC_C_S:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_bind_set_algo(sshbind, SSH_MAC_C_S, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_HMAC_S_C:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_bind_set_algo(sshbind, SSH_MAC_S_C, v) < 0)
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_CONFIG_DIR:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
SAFE_FREE(sshbind->config_dir);
|
|
Packit |
6c0a39 |
if (v == NULL) {
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
} else if (v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
sshbind->config_dir = ssh_path_expand_tilde(v);
|
|
Packit |
6c0a39 |
if (sshbind->config_dir == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_PUBKEY_ACCEPTED_KEY_TYPES:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
if (ssh_fips_mode()) {
|
|
Packit |
6c0a39 |
p = ssh_keep_fips_algos(SSH_HOSTKEYS, v);
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
p = ssh_keep_known_algos(SSH_HOSTKEYS, v);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
if (p == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind, SSH_REQUEST_DENIED,
|
|
Packit |
6c0a39 |
"Setting method: no known public key algorithm (%s)",
|
|
Packit |
6c0a39 |
v);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
SAFE_FREE(sshbind->pubkey_accepted_key_types);
|
|
Packit |
6c0a39 |
sshbind->pubkey_accepted_key_types = p;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_HOSTKEY_ALGORITHMS:
|
|
Packit |
6c0a39 |
v = value;
|
|
Packit |
6c0a39 |
if (v == NULL || v[0] == '\0') {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
rc = ssh_bind_set_algo(sshbind, SSH_HOSTKEYS, v);
|
|
Packit |
6c0a39 |
if (rc < 0) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
case SSH_BIND_OPTIONS_PROCESS_CONFIG:
|
|
Packit |
6c0a39 |
if (value == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_invalid(sshbind);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
} else {
|
|
Packit |
6c0a39 |
bool *x = (bool *)value;
|
|
Packit |
6c0a39 |
sshbind->config_processed = !(*x);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
default:
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind, SSH_REQUEST_DENIED, "Unknown ssh option %d", type);
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return 0;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
static char *ssh_bind_options_expand_escape(ssh_bind sshbind, const char *s)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
char buf[MAX_BUF_SIZE];
|
|
Packit |
6c0a39 |
char *r, *x = NULL;
|
|
Packit |
6c0a39 |
const char *p;
|
|
Packit |
6c0a39 |
size_t i, l;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
r = ssh_path_expand_tilde(s);
|
|
Packit |
6c0a39 |
if (r == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
return NULL;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (strlen(r) > MAX_BUF_SIZE) {
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind, SSH_FATAL, "string to expand too long");
|
|
Packit |
6c0a39 |
free(r);
|
|
Packit |
6c0a39 |
return NULL;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
p = r;
|
|
Packit |
6c0a39 |
buf[0] = '\0';
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
for (i = 0; *p != '\0'; p++) {
|
|
Packit |
6c0a39 |
if (*p != '%') {
|
|
Packit |
6c0a39 |
buf[i] = *p;
|
|
Packit |
6c0a39 |
i++;
|
|
Packit |
6c0a39 |
if (i >= MAX_BUF_SIZE) {
|
|
Packit |
6c0a39 |
free(r);
|
|
Packit |
6c0a39 |
return NULL;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
buf[i] = '\0';
|
|
Packit |
6c0a39 |
continue;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
p++;
|
|
Packit |
6c0a39 |
if (*p == '\0') {
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
switch (*p) {
|
|
Packit |
6c0a39 |
case 'd':
|
|
Packit |
6c0a39 |
x = strdup(sshbind->config_dir);
|
|
Packit |
6c0a39 |
break;
|
|
Packit |
6c0a39 |
default:
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind, SSH_FATAL,
|
|
Packit |
6c0a39 |
"Wrong escape sequence detected");
|
|
Packit |
6c0a39 |
free(r);
|
|
Packit |
6c0a39 |
return NULL;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (x == NULL) {
|
|
Packit |
6c0a39 |
ssh_set_error_oom(sshbind);
|
|
Packit |
6c0a39 |
free(r);
|
|
Packit |
6c0a39 |
return NULL;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
i += strlen(x);
|
|
Packit |
6c0a39 |
if (i >= MAX_BUF_SIZE) {
|
|
Packit |
6c0a39 |
ssh_set_error(sshbind, SSH_FATAL,
|
|
Packit |
6c0a39 |
"String too long");
|
|
Packit |
6c0a39 |
free(x);
|
|
Packit |
6c0a39 |
free(r);
|
|
Packit |
6c0a39 |
return NULL;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
l = strlen(buf);
|
|
Packit |
6c0a39 |
strncpy(buf + l, x, sizeof(buf) - l - 1);
|
|
Packit |
6c0a39 |
buf[i] = '\0';
|
|
Packit |
6c0a39 |
SAFE_FREE(x);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
free(r);
|
|
Packit |
6c0a39 |
return strdup(buf);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/**
|
|
Packit |
6c0a39 |
* @brief Parse a ssh bind options configuration file.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* This parses the options file and set them to the ssh_bind handle provided. If
|
|
Packit |
6c0a39 |
* an option was previously set, it is overridden. If the global configuration
|
|
Packit |
6c0a39 |
* hasn't been processed yet, it is processed prior to the provided file.
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param sshbind SSH bind handle
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @param filename The options file to use; if NULL only the global
|
|
Packit |
6c0a39 |
* configuration is parsed and applied (if it haven't been
|
|
Packit |
6c0a39 |
* processed before).
|
|
Packit |
6c0a39 |
*
|
|
Packit |
6c0a39 |
* @return 0 on success, < 0 on error.
|
|
Packit |
6c0a39 |
*/
|
|
Packit |
6c0a39 |
int ssh_bind_options_parse_config(ssh_bind sshbind, const char *filename)
|
|
Packit |
6c0a39 |
{
|
|
Packit |
6c0a39 |
int rc = 0;
|
|
Packit |
6c0a39 |
char *expanded_filename;
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (sshbind == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* If the global default configuration hasn't been processed yet, process it
|
|
Packit |
6c0a39 |
* before the provided configuration. */
|
|
Packit |
6c0a39 |
if (!(sshbind->config_processed)) {
|
|
Packit |
6c0a39 |
rc = ssh_bind_config_parse_file(sshbind, GLOBAL_BIND_CONFIG);
|
|
Packit |
6c0a39 |
if (rc != 0) {
|
|
Packit |
6c0a39 |
return rc;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
sshbind->config_processed = true;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
if (filename != NULL) {
|
|
Packit |
6c0a39 |
expanded_filename = ssh_bind_options_expand_escape(sshbind, filename);
|
|
Packit |
6c0a39 |
if (expanded_filename == NULL) {
|
|
Packit |
6c0a39 |
return -1;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/* Apply the user provided configuration */
|
|
Packit |
6c0a39 |
rc = ssh_bind_config_parse_file(sshbind, expanded_filename);
|
|
Packit |
6c0a39 |
free(expanded_filename);
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
return rc;
|
|
Packit |
6c0a39 |
}
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
#endif
|
|
Packit |
6c0a39 |
|
|
Packit |
6c0a39 |
/** @} */
|