Return to cram.c CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / curl / lib / vauth

Annotation of embedaddon/curl/lib/vauth/cram.c, revision 1.1.1.1

1.1       misho       1: /***************************************************************************
                      2:  *                                  _   _ ____  _
                      3:  *  Project                     ___| | | |  _ \| |
                      4:  *                             / __| | | | |_) | |
                      5:  *                            | (__| |_| |  _ <| |___
                      6:  *                             \___|\___/|_| \_\_____|
                      7:  *
                      8:  * Copyright (C) 1998 - 2019, Daniel Stenberg, <daniel@haxx.se>, et al.
                      9:  *
                     10:  * This software is licensed as described in the file COPYING, which
                     11:  * you should have received as part of this distribution. The terms
                     12:  * are also available at https://curl.haxx.se/docs/copyright.html.
                     13:  *
                     14:  * You may opt to use, copy, modify, merge, publish, distribute and/or sell
                     15:  * copies of the Software, and permit persons to whom the Software is
                     16:  * furnished to do so, under the terms of the COPYING file.
                     17:  *
                     18:  * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
                     19:  * KIND, either express or implied.
                     20:  *
                     21:  * RFC2195 CRAM-MD5 authentication
                     22:  *
                     23:  ***************************************************************************/
                     24: 
                     25: #include "curl_setup.h"
                     26: 
                     27: #if !defined(CURL_DISABLE_CRYPTO_AUTH)
                     28: 
                     29: #include <curl/curl.h>
                     30: #include "urldata.h"
                     31: 
                     32: #include "vauth/vauth.h"
                     33: #include "curl_base64.h"
                     34: #include "curl_hmac.h"
                     35: #include "curl_md5.h"
                     36: #include "warnless.h"
                     37: #include "curl_printf.h"
                     38: 
                     39: /* The last #include files should be: */
                     40: #include "curl_memory.h"
                     41: #include "memdebug.h"
                     42: 
                     43: /*
                     44:  * Curl_auth_decode_cram_md5_message()
                     45:  *
                     46:  * This is used to decode an already encoded CRAM-MD5 challenge message.
                     47:  *
                     48:  * Parameters:
                     49:  *
                     50:  * chlg64  [in]     - The base64 encoded challenge message.
                     51:  * outptr  [in/out] - The address where a pointer to newly allocated memory
                     52:  *                    holding the result will be stored upon completion.
                     53:  * outlen  [out]    - The length of the output message.
                     54:  *
                     55:  * Returns CURLE_OK on success.
                     56:  */
                     57: CURLcode Curl_auth_decode_cram_md5_message(const char *chlg64, char **outptr,
                     58:                                            size_t *outlen)
                     59: {
                     60:   CURLcode result = CURLE_OK;
                     61:   size_t chlg64len = strlen(chlg64);
                     62: 
                     63:   *outptr = NULL;
                     64:   *outlen = 0;
                     65: 
                     66:   /* Decode the challenge if necessary */
                     67:   if(chlg64len && *chlg64 != '=')
                     68:     result = Curl_base64_decode(chlg64, (unsigned char **) outptr, outlen);
                     69: 
                     70:   return result;
                     71: }
                     72: 
                     73: /*
                     74:  * Curl_auth_create_cram_md5_message()
                     75:  *
                     76:  * This is used to generate an already encoded CRAM-MD5 response message ready
                     77:  * for sending to the recipient.
                     78:  *
                     79:  * Parameters:
                     80:  *
                     81:  * data    [in]     - The session handle.
                     82:  * chlg    [in]     - The challenge.
                     83:  * userp   [in]     - The user name.
                     84:  * passwdp [in]     - The user's password.
                     85:  * outptr  [in/out] - The address where a pointer to newly allocated memory
                     86:  *                    holding the result will be stored upon completion.
                     87:  * outlen  [out]    - The length of the output message.
                     88:  *
                     89:  * Returns CURLE_OK on success.
                     90:  */
                     91: CURLcode Curl_auth_create_cram_md5_message(struct Curl_easy *data,
                     92:                                            const char *chlg,
                     93:                                            const char *userp,
                     94:                                            const char *passwdp,
                     95:                                            char **outptr, size_t *outlen)
                     96: {
                     97:   CURLcode result = CURLE_OK;
                     98:   size_t chlglen = 0;
                     99:   HMAC_context *ctxt;
                    100:   unsigned char digest[MD5_DIGEST_LEN];
                    101:   char *response;
                    102: 
                    103:   if(chlg)
                    104:     chlglen = strlen(chlg);
                    105: 
                    106:   /* Compute the digest using the password as the key */
                    107:   ctxt = Curl_HMAC_init(Curl_HMAC_MD5,
                    108:                         (const unsigned char *) passwdp,
                    109:                         curlx_uztoui(strlen(passwdp)));
                    110:   if(!ctxt)
                    111:     return CURLE_OUT_OF_MEMORY;
                    112: 
                    113:   /* Update the digest with the given challenge */
                    114:   if(chlglen > 0)
                    115:     Curl_HMAC_update(ctxt, (const unsigned char *) chlg,
                    116:                      curlx_uztoui(chlglen));
                    117: 
                    118:   /* Finalise the digest */
                    119:   Curl_HMAC_final(ctxt, digest);
                    120: 
                    121:   /* Generate the response */
                    122:   response = aprintf(
                    123:     "%s %02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x",
                    124:     userp, digest[0], digest[1], digest[2], digest[3], digest[4],
                    125:     digest[5], digest[6], digest[7], digest[8], digest[9], digest[10],
                    126:     digest[11], digest[12], digest[13], digest[14], digest[15]);
                    127:   if(!response)
                    128:     return CURLE_OUT_OF_MEMORY;
                    129: 
                    130:   /* Base64 encode the response */
                    131:   result = Curl_base64_encode(data, response, 0, outptr, outlen);
                    132: 
                    133:   free(response);
                    134: 
                    135:   return result;
                    136: }
                    137: 
                    138: #endif /* !CURL_DISABLE_CRYPTO_AUTH */