[openssh.git] / ssh2.h

/* $OpenBSD: ssh2.h,v 1.12 2009/10/24 11:19:17 andreas Exp $ */

/*
 * Copyright (c) 2000 Markus Friedl.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

/*
 * draft-ietf-secsh-architecture-05.txt
 *
 *   Transport layer protocol:
 *
 *     1-19     Transport layer generic (e.g. disconnect, ignore, debug,
 *              etc)
 *     20-29    Algorithm negotiation
 *     30-49    Key exchange method specific (numbers can be reused for
 *              different authentication methods)
 *
 *   User authentication protocol:
 *
 *     50-59    User authentication generic
 *     60-79    User authentication method specific (numbers can be reused
 *              for different authentication methods)
 *
 *   Connection protocol:
 *
 *     80-89    Connection protocol generic
 *     90-127   Channel related messages
 *
 *   Reserved for client protocols:
 *
 *     128-191  Reserved
 *
 *   Local extensions:
 *
 *     192-255  Local extensions
 */

/* ranges */

#define SSH2_MSG_TRANSPORT_MIN				1
#define SSH2_MSG_TRANSPORT_MAX				49
#define SSH2_MSG_USERAUTH_MIN				50
#define SSH2_MSG_USERAUTH_MAX				79
#define SSH2_MSG_USERAUTH_PER_METHOD_MIN		60
#define SSH2_MSG_USERAUTH_PER_METHOD_MAX		SSH2_MSG_USERAUTH_MAX
#define SSH2_MSG_CONNECTION_MIN				80
#define SSH2_MSG_CONNECTION_MAX				127
#define SSH2_MSG_RESERVED_MIN				128
#define SSH2_MSG_RESERVED_MAX				191
#define SSH2_MSG_LOCAL_MIN				192
#define SSH2_MSG_LOCAL_MAX				255
#define SSH2_MSG_MIN					1
#define SSH2_MSG_MAX					255

/* transport layer: generic */

#define SSH2_MSG_DISCONNECT				1
#define SSH2_MSG_IGNORE					2
#define SSH2_MSG_UNIMPLEMENTED				3
#define SSH2_MSG_DEBUG					4
#define SSH2_MSG_SERVICE_REQUEST			5
#define SSH2_MSG_SERVICE_ACCEPT				6

/* transport layer: alg negotiation */

#define SSH2_MSG_KEXINIT				20
#define SSH2_MSG_NEWKEYS				21

/* transport layer: kex specific messages, can be reused */

#define SSH2_MSG_KEXDH_INIT				30
#define SSH2_MSG_KEXDH_REPLY				31

/* dh-group-exchange */
#define SSH2_MSG_KEX_DH_GEX_REQUEST_OLD			30
#define SSH2_MSG_KEX_DH_GEX_GROUP			31
#define SSH2_MSG_KEX_DH_GEX_INIT			32
#define SSH2_MSG_KEX_DH_GEX_REPLY			33
#define SSH2_MSG_KEX_DH_GEX_REQUEST			34

/* user authentication: generic */

#define SSH2_MSG_USERAUTH_REQUEST			50
#define SSH2_MSG_USERAUTH_FAILURE			51
#define SSH2_MSG_USERAUTH_SUCCESS			52
#define SSH2_MSG_USERAUTH_BANNER			53

/* user authentication: method specific, can be reused */

#define SSH2_MSG_USERAUTH_PK_OK				60
#define SSH2_MSG_USERAUTH_PASSWD_CHANGEREQ		60
#define SSH2_MSG_USERAUTH_INFO_REQUEST			60
#define SSH2_MSG_USERAUTH_INFO_RESPONSE			61
#define SSH2_MSG_USERAUTH_JPAKE_CLIENT_STEP1		60
#define SSH2_MSG_USERAUTH_JPAKE_SERVER_STEP1		61
#define SSH2_MSG_USERAUTH_JPAKE_CLIENT_STEP2		62
#define SSH2_MSG_USERAUTH_JPAKE_SERVER_STEP2		63
#define SSH2_MSG_USERAUTH_JPAKE_CLIENT_CONFIRM		64
#define SSH2_MSG_USERAUTH_JPAKE_SERVER_CONFIRM		65

/* connection protocol: generic */

#define SSH2_MSG_GLOBAL_REQUEST				80
#define SSH2_MSG_REQUEST_SUCCESS			81
#define SSH2_MSG_REQUEST_FAILURE			82

/* channel related messages */

#define SSH2_MSG_CHANNEL_OPEN				90
#define SSH2_MSG_CHANNEL_OPEN_CONFIRMATION		91
#define SSH2_MSG_CHANNEL_OPEN_FAILURE			92
#define SSH2_MSG_CHANNEL_WINDOW_ADJUST			93
#define SSH2_MSG_CHANNEL_DATA				94
#define SSH2_MSG_CHANNEL_EXTENDED_DATA			95
#define SSH2_MSG_CHANNEL_EOF				96
#define SSH2_MSG_CHANNEL_CLOSE				97
#define SSH2_MSG_CHANNEL_REQUEST			98
#define SSH2_MSG_CHANNEL_SUCCESS			99
#define SSH2_MSG_CHANNEL_FAILURE			100

/* disconnect reason code */

#define SSH2_DISCONNECT_HOST_NOT_ALLOWED_TO_CONNECT	1
#define SSH2_DISCONNECT_PROTOCOL_ERROR			2
#define SSH2_DISCONNECT_KEY_EXCHANGE_FAILED		3
#define SSH2_DISCONNECT_HOST_AUTHENTICATION_FAILED	4
#define SSH2_DISCONNECT_RESERVED			4
#define SSH2_DISCONNECT_MAC_ERROR			5
#define SSH2_DISCONNECT_COMPRESSION_ERROR		6
#define SSH2_DISCONNECT_SERVICE_NOT_AVAILABLE		7
#define SSH2_DISCONNECT_PROTOCOL_VERSION_NOT_SUPPORTED	8
#define SSH2_DISCONNECT_HOST_KEY_NOT_VERIFIABLE		9
#define SSH2_DISCONNECT_CONNECTION_LOST			10
#define SSH2_DISCONNECT_BY_APPLICATION			11
#define SSH2_DISCONNECT_TOO_MANY_CONNECTIONS		12
#define SSH2_DISCONNECT_AUTH_CANCELLED_BY_USER		13
#define SSH2_DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLE	14
#define SSH2_DISCONNECT_ILLEGAL_USER_NAME		15

/* misc */

#define SSH2_OPEN_ADMINISTRATIVELY_PROHIBITED		1
#define SSH2_OPEN_CONNECT_FAILED			2
#define SSH2_OPEN_UNKNOWN_CHANNEL_TYPE			3
#define SSH2_OPEN_RESOURCE_SHORTAGE			4

#define SSH2_EXTENDED_DATA_STDERR			1

/* kex messages for resume@appgate.com */
#define SSH2_MSG_KEX_ROAMING_RESUME			30
#define SSH2_MSG_KEX_ROAMING_AUTH_REQUIRED		31
#define SSH2_MSG_KEX_ROAMING_AUTH			32
#define SSH2_MSG_KEX_ROAMING_AUTH_OK			33
#define SSH2_MSG_KEX_ROAMING_AUTH_FAIL			34
Commit	Line	Data
d33822b7	1	/* $OpenBSD: ssh2.h,v 1.12 2009/10/24 11:19:17 andreas Exp $ */
93c3b6de	2
bcbf86ec	3	/*
	4	* Copyright (c) 2000 Markus Friedl. All rights reserved.
	5	*
	6	* Redistribution and use in source and binary forms, with or without
	7	* modification, are permitted provided that the following conditions
	8	* are met:
	9	* 1. Redistributions of source code must retain the above copyright
	10	* notice, this list of conditions and the following disclaimer.
	11	* 2. Redistributions in binary form must reproduce the above copyright
	12	* notice, this list of conditions and the following disclaimer in the
	13	* documentation and/or other materials provided with the distribution.
	14	*
	15	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
	16	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
	17	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
	18	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
	19	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	20	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	21	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
	22	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
	23	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
	24	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	25	*/
	26
7368a6c8	27	/*
0e73cc53	28	* draft-ietf-secsh-architecture-05.txt
7368a6c8	29	*
7368a6c8	30	* Transport layer protocol:
6ae2364d	31	*
7368a6c8	32	* 1-19 Transport layer generic (e.g. disconnect, ignore, debug,
	33	* etc)
	34	* 20-29 Algorithm negotiation
	35	* 30-49 Key exchange method specific (numbers can be reused for
	36	* different authentication methods)
6ae2364d	37	*
7368a6c8	38	* User authentication protocol:
6ae2364d	39	*
7368a6c8	40	* 50-59 User authentication generic
	41	* 60-79 User authentication method specific (numbers can be reused
	42	* for different authentication methods)
6ae2364d	43	*
7368a6c8	44	* Connection protocol:
6ae2364d	45	*
7368a6c8	46	* 80-89 Connection protocol generic
7368a6c8	47	* 90-127 Channel related messages
6ae2364d	48	*
7368a6c8	49	* Reserved for client protocols:
6ae2364d	50	*
7368a6c8	51	* 128-191 Reserved
6ae2364d	52	*
7368a6c8	53	* Local extensions:
6ae2364d	54	*
7368a6c8	55	* 192-255 Local extensions
7368a6c8	56	*/
781a02b8	57
	58	/* ranges */
	59
	60	#define SSH2_MSG_TRANSPORT_MIN 1
	61	#define SSH2_MSG_TRANSPORT_MAX 49
	62	#define SSH2_MSG_USERAUTH_MIN 50
	63	#define SSH2_MSG_USERAUTH_MAX 79
be658e3f	64	#define SSH2_MSG_USERAUTH_PER_METHOD_MIN 60
be658e3f	65	#define SSH2_MSG_USERAUTH_PER_METHOD_MAX SSH2_MSG_USERAUTH_MAX
781a02b8	66	#define SSH2_MSG_CONNECTION_MIN 80
	67	#define SSH2_MSG_CONNECTION_MAX 127
	68	#define SSH2_MSG_RESERVED_MIN 128
	69	#define SSH2_MSG_RESERVED_MAX 191
	70	#define SSH2_MSG_LOCAL_MIN 192
	71	#define SSH2_MSG_LOCAL_MAX 255
	72	#define SSH2_MSG_MIN 1
	73	#define SSH2_MSG_MAX 255
7368a6c8	74
	75	/* transport layer: generic */
	76
	77	#define SSH2_MSG_DISCONNECT 1
	78	#define SSH2_MSG_IGNORE 2
	79	#define SSH2_MSG_UNIMPLEMENTED 3
	80	#define SSH2_MSG_DEBUG 4
	81	#define SSH2_MSG_SERVICE_REQUEST 5
	82	#define SSH2_MSG_SERVICE_ACCEPT 6
	83
	84	/* transport layer: alg negotiation */
	85
	86	#define SSH2_MSG_KEXINIT 20
	87	#define SSH2_MSG_NEWKEYS 21
	88
	89	/* transport layer: kex specific messages, can be reused */
	90
	91	#define SSH2_MSG_KEXDH_INIT 30
	92	#define SSH2_MSG_KEXDH_REPLY 31
	93
94ec8c6b	94	/* dh-group-exchange */
db1cd2f3	95	#define SSH2_MSG_KEX_DH_GEX_REQUEST_OLD 30
94ec8c6b	96	#define SSH2_MSG_KEX_DH_GEX_GROUP 31
	97	#define SSH2_MSG_KEX_DH_GEX_INIT 32
	98	#define SSH2_MSG_KEX_DH_GEX_REPLY 33
db1cd2f3	99	#define SSH2_MSG_KEX_DH_GEX_REQUEST 34
94ec8c6b	100
7368a6c8	101	/* user authentication: generic */
	102
	103	#define SSH2_MSG_USERAUTH_REQUEST 50
	104	#define SSH2_MSG_USERAUTH_FAILURE 51
	105	#define SSH2_MSG_USERAUTH_SUCCESS 52
	106	#define SSH2_MSG_USERAUTH_BANNER 53
	107
	108	/* user authentication: method specific, can be reused */
	109
	110	#define SSH2_MSG_USERAUTH_PK_OK 60
	111	#define SSH2_MSG_USERAUTH_PASSWD_CHANGEREQ 60
	112	#define SSH2_MSG_USERAUTH_INFO_REQUEST 60
	113	#define SSH2_MSG_USERAUTH_INFO_RESPONSE 61
5adf6b9a	114	#define SSH2_MSG_USERAUTH_JPAKE_CLIENT_STEP1 60
	115	#define SSH2_MSG_USERAUTH_JPAKE_SERVER_STEP1 61
	116	#define SSH2_MSG_USERAUTH_JPAKE_CLIENT_STEP2 62
	117	#define SSH2_MSG_USERAUTH_JPAKE_SERVER_STEP2 63
	118	#define SSH2_MSG_USERAUTH_JPAKE_CLIENT_CONFIRM 64
	119	#define SSH2_MSG_USERAUTH_JPAKE_SERVER_CONFIRM 65
7368a6c8	120
	121	/* connection protocol: generic */
	122
	123	#define SSH2_MSG_GLOBAL_REQUEST 80
	124	#define SSH2_MSG_REQUEST_SUCCESS 81
	125	#define SSH2_MSG_REQUEST_FAILURE 82
	126
	127	/* channel related messages */
	128
	129	#define SSH2_MSG_CHANNEL_OPEN 90
	130	#define SSH2_MSG_CHANNEL_OPEN_CONFIRMATION 91
	131	#define SSH2_MSG_CHANNEL_OPEN_FAILURE 92
	132	#define SSH2_MSG_CHANNEL_WINDOW_ADJUST 93
	133	#define SSH2_MSG_CHANNEL_DATA 94
	134	#define SSH2_MSG_CHANNEL_EXTENDED_DATA 95
	135	#define SSH2_MSG_CHANNEL_EOF 96
	136	#define SSH2_MSG_CHANNEL_CLOSE 97
	137	#define SSH2_MSG_CHANNEL_REQUEST 98
	138	#define SSH2_MSG_CHANNEL_SUCCESS 99
	139	#define SSH2_MSG_CHANNEL_FAILURE 100
	140
	141	/* disconnect reason code */
	142
	143	#define SSH2_DISCONNECT_HOST_NOT_ALLOWED_TO_CONNECT 1
	144	#define SSH2_DISCONNECT_PROTOCOL_ERROR 2
	145	#define SSH2_DISCONNECT_KEY_EXCHANGE_FAILED 3
	146	#define SSH2_DISCONNECT_HOST_AUTHENTICATION_FAILED 4
0e73cc53	147	#define SSH2_DISCONNECT_RESERVED 4
7368a6c8	148	#define SSH2_DISCONNECT_MAC_ERROR 5
	149	#define SSH2_DISCONNECT_COMPRESSION_ERROR 6
	150	#define SSH2_DISCONNECT_SERVICE_NOT_AVAILABLE 7
	151	#define SSH2_DISCONNECT_PROTOCOL_VERSION_NOT_SUPPORTED 8
	152	#define SSH2_DISCONNECT_HOST_KEY_NOT_VERIFIABLE 9
	153	#define SSH2_DISCONNECT_CONNECTION_LOST 10
	154	#define SSH2_DISCONNECT_BY_APPLICATION 11
0e73cc53	155	#define SSH2_DISCONNECT_TOO_MANY_CONNECTIONS 12
	156	#define SSH2_DISCONNECT_AUTH_CANCELLED_BY_USER 13
	157	#define SSH2_DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLE 14
	158	#define SSH2_DISCONNECT_ILLEGAL_USER_NAME 15
7368a6c8	159
	160	/* misc */
	161
	162	#define SSH2_OPEN_ADMINISTRATIVELY_PROHIBITED 1
	163	#define SSH2_OPEN_CONNECT_FAILED 2
	164	#define SSH2_OPEN_UNKNOWN_CHANNEL_TYPE 3
	165	#define SSH2_OPEN_RESOURCE_SHORTAGE 4
	166
	167	#define SSH2_EXTENDED_DATA_STDERR 1
5adf6b9a	168
d33822b7	169	/* kex messages for resume@appgate.com */
	170	#define SSH2_MSG_KEX_ROAMING_RESUME 30
	171	#define SSH2_MSG_KEX_ROAMING_AUTH_REQUIRED 31
	172	#define SSH2_MSG_KEX_ROAMING_AUTH 32
	173	#define SSH2_MSG_KEX_ROAMING_AUTH_OK 33
	174	#define SSH2_MSG_KEX_ROAMING_AUTH_FAIL 34
	175