]>
Commit | Line | Data |
---|---|---|
3d738e65 | 1 | /* $OpenBSD: monitor_wrap.h,v 1.22 2009/03/05 07:18:19 djm Exp $ */ |
700318f3 | 2 | |
3 | /* | |
4 | * Copyright 2002 Niels Provos <provos@citi.umich.edu> | |
5 | * All rights reserved. | |
6 | * | |
7 | * Redistribution and use in source and binary forms, with or without | |
8 | * modification, are permitted provided that the following conditions | |
9 | * are met: | |
10 | * 1. Redistributions of source code must retain the above copyright | |
11 | * notice, this list of conditions and the following disclaimer. | |
12 | * 2. Redistributions in binary form must reproduce the above copyright | |
13 | * notice, this list of conditions and the following disclaimer in the | |
14 | * documentation and/or other materials provided with the distribution. | |
15 | * | |
16 | * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR | |
17 | * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES | |
18 | * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. | |
19 | * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, | |
20 | * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | |
21 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | |
22 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | |
23 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
24 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF | |
25 | * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
26 | */ | |
27 | ||
28 | #ifndef _MM_WRAP_H_ | |
29 | #define _MM_WRAP_H_ | |
700318f3 | 30 | |
31 | extern int use_privsep; | |
32 | #define PRIVSEP(x) (use_privsep ? mm_##x : x) | |
33 | ||
34 | enum mm_keytype {MM_NOKEY, MM_HOSTKEY, MM_USERKEY, MM_RSAHOSTKEY, MM_RSAUSERKEY}; | |
35 | ||
36 | struct monitor; | |
37 | struct mm_master; | |
700318f3 | 38 | struct Authctxt; |
39 | ||
cdd66111 | 40 | int mm_is_monitor(void); |
700318f3 | 41 | DH *mm_choose_dh(int, int, int); |
42 | int mm_key_sign(Key *, u_char **, u_int *, u_char *, u_int); | |
43 | void mm_inform_authserv(char *, char *); | |
44 | struct passwd *mm_getpwnamallow(const char *); | |
41b2f314 | 45 | char *mm_auth2_read_banner(void); |
700318f3 | 46 | int mm_auth_password(struct Authctxt *, char *); |
47 | int mm_key_allowed(enum mm_keytype, char *, char *, Key *); | |
48 | int mm_user_key_allowed(struct passwd *, Key *); | |
49 | int mm_hostbased_key_allowed(struct passwd *, char *, char *, Key *); | |
50 | int mm_auth_rhosts_rsa_key_allowed(struct passwd *, char *, char *, Key *); | |
51 | int mm_key_verify(Key *, u_char *, u_int, u_char *, u_int); | |
52 | int mm_auth_rsa_key_allowed(struct passwd *, BIGNUM *, Key **); | |
53 | int mm_auth_rsa_verify_response(Key *, BIGNUM *, u_char *); | |
54 | BIGNUM *mm_auth_rsa_generate_challenge(Key *); | |
55 | ||
0fff78ff | 56 | #ifdef GSSAPI |
c9f39d2c | 57 | OM_uint32 mm_ssh_gssapi_server_ctx(Gssctxt **, gss_OID); |
58 | OM_uint32 mm_ssh_gssapi_accept_ctx(Gssctxt *, | |
59 | gss_buffer_desc *, gss_buffer_desc *, OM_uint32 *); | |
0fff78ff | 60 | int mm_ssh_gssapi_userok(char *user); |
cdd66111 | 61 | OM_uint32 mm_ssh_gssapi_checkmic(Gssctxt *, gss_buffer_t, gss_buffer_t); |
0fff78ff | 62 | #endif |
63 | ||
700318f3 | 64 | #ifdef USE_PAM |
99be0775 | 65 | void mm_start_pam(struct Authctxt *); |
0fff78ff | 66 | u_int mm_do_pam_account(void); |
67 | void *mm_sshpam_init_ctx(struct Authctxt *); | |
68 | int mm_sshpam_query(void *, char **, char **, u_int *, char ***, u_int **); | |
69 | int mm_sshpam_respond(void *, u_int, char **); | |
70 | void mm_sshpam_free_ctx(void *); | |
700318f3 | 71 | #endif |
72 | ||
996d5e62 | 73 | #ifdef SSH_AUDIT_EVENTS |
74 | #include "audit.h" | |
75 | void mm_audit_event(ssh_audit_event_t); | |
76 | void mm_audit_run_command(const char *); | |
77 | #endif | |
78 | ||
cdd66111 | 79 | struct Session; |
700318f3 | 80 | void mm_terminate(void); |
9108f8d9 | 81 | int mm_pty_allocate(int *, int *, char *, size_t); |
cdd66111 | 82 | void mm_session_pty_cleanup2(struct Session *); |
700318f3 | 83 | |
84 | /* SSHv1 interfaces */ | |
85 | void mm_ssh1_session_id(u_char *); | |
86 | int mm_ssh1_session_key(BIGNUM *); | |
87 | ||
88 | /* Key export functions */ | |
89 | struct Newkeys *mm_newkeys_from_blob(u_char *, int); | |
90 | int mm_newkeys_to_blob(int, u_char **, u_int *); | |
91 | ||
92 | void monitor_apply_keystate(struct monitor *); | |
93 | void mm_get_keystate(struct monitor *); | |
94 | void mm_send_keystate(struct monitor*); | |
95 | ||
96 | /* bsdauth */ | |
97 | int mm_bsdauth_query(void *, char **, char **, u_int *, char ***, u_int **); | |
98 | int mm_bsdauth_respond(void *, u_int, char **); | |
99 | ||
100 | /* skey */ | |
101 | int mm_skey_query(void *, char **, char **, u_int *, char ***, u_int **); | |
102 | int mm_skey_respond(void *, u_int, char **); | |
103 | ||
91d9cdd3 | 104 | /* jpake */ |
3d738e65 | 105 | struct modp_group; |
91d9cdd3 | 106 | void mm_auth2_jpake_get_pwdata(struct Authctxt *, BIGNUM **, char **, char **); |
3d738e65 | 107 | void mm_jpake_step1(struct modp_group *, u_char **, u_int *, |
91d9cdd3 | 108 | BIGNUM **, BIGNUM **, BIGNUM **, BIGNUM **, |
109 | u_char **, u_int *, u_char **, u_int *); | |
3d738e65 | 110 | void mm_jpake_step2(struct modp_group *, BIGNUM *, |
91d9cdd3 | 111 | BIGNUM *, BIGNUM *, BIGNUM *, BIGNUM *, |
112 | const u_char *, u_int, const u_char *, u_int, | |
113 | const u_char *, u_int, const u_char *, u_int, | |
114 | BIGNUM **, u_char **, u_int *); | |
3d738e65 | 115 | void mm_jpake_key_confirm(struct modp_group *, BIGNUM *, BIGNUM *, |
91d9cdd3 | 116 | BIGNUM *, BIGNUM *, BIGNUM *, BIGNUM *, BIGNUM *, |
117 | const u_char *, u_int, const u_char *, u_int, | |
118 | const u_char *, u_int, const u_char *, u_int, | |
119 | BIGNUM **, u_char **, u_int *); | |
120 | int mm_jpake_check_confirm(const BIGNUM *, | |
121 | const u_char *, u_int, const u_char *, u_int, const u_char *, u_int); | |
122 | ||
123 | ||
700318f3 | 124 | /* zlib allocation hooks */ |
125 | ||
126 | void *mm_zalloc(struct mm_master *, u_int, u_int); | |
127 | void mm_zfree(struct mm_master *, void *); | |
128 | void mm_init_compression(struct mm_master *); | |
129 | ||
9108f8d9 | 130 | #endif /* _MM_WRAP_H_ */ |