+/* $OpenBSD: monitor_wrap.h,v 1.4 2002/03/26 03:24:01 stevesk Exp $ */
+
/*
* Copyright 2002 Niels Provos <provos@citi.umich.edu>
* All rights reserved.
#include "key.h"
#include "buffer.h"
-struct mm_moduli {
- int min;
- int want;
- int max;
-};
-
-enum mm_keytype {MM_HOSTKEY, MM_USERKEY};
+extern int use_privsep;
+#define PRIVSEP(x) (use_privsep ? mm_##x : x)
-struct mm_keyallowed {
- enum mm_keytype type;
- char chost[MAXHOSTNAMELEN];
- char cuser[MAXLOGNAME];
-};
+enum mm_keytype {MM_NOKEY, MM_HOSTKEY, MM_USERKEY, MM_RSAHOSTKEY, MM_RSAUSERKEY};
+struct monitor;
struct mm_master;
-
struct passwd;
-DH *mm_choose_dh(int, int, int, int);
-DH *mm_read_moduli(int);
-int mm_key_sign(int, int, u_char **, u_int *, u_char *, u_int);
-void mm_inform_authserv(int, char *, char *);
-struct passwd *mm_getpwnamallow(int, const char *, int *);
-int mm_auth_password(int, char *);
-int mm_key_allowed(int, enum mm_keytype, char *, char *, Key *);
-#define mm_hostbased_key_allowed(x,u,h,z) \
- mm_key_allowed(x, MM_HOSTKEY, u, h, z)
-#define mm_user_key_allowed(x,z) \
- mm_key_allowed(x, MM_USERKEY, NULL, NULL, z)
-
-int mm_key_verify(int, enum mm_keytype, char *, char *,
- Key *, u_char *, u_int, u_char *, u_int);
-
-void mm_terminate(int);
+struct Authctxt;
+
+DH *mm_choose_dh(int, int, int);
+int mm_key_sign(Key *, u_char **, u_int *, u_char *, u_int);
+void mm_inform_authserv(char *, char *);
+struct passwd *mm_getpwnamallow(const char *);
+int mm_auth_password(struct Authctxt *, char *);
+int mm_key_allowed(enum mm_keytype, char *, char *, Key *);
+int mm_user_key_allowed(struct passwd *, Key *);
+int mm_hostbased_key_allowed(struct passwd *, char *, char *, Key *);
+int mm_auth_rhosts_rsa_key_allowed(struct passwd *, char *, char *, Key *);
+int mm_key_verify(Key *, u_char *, u_int, u_char *, u_int);
+int mm_auth_rsa_key_allowed(struct passwd *, BIGNUM *, Key **);
+int mm_auth_rsa_verify_response(Key *, BIGNUM *, u_char *);
+BIGNUM *mm_auth_rsa_generate_challenge(Key *);
+
+void mm_terminate(void);
+int mm_pty_allocate(int *, int *, char *, int);
+void mm_session_pty_cleanup2(void *);
+
+/* SSHv1 interfaces */
+void mm_ssh1_session_id(u_char *);
+int mm_ssh1_session_key(BIGNUM *);
/* Key export functions */
struct Newkeys *mm_newkeys_from_blob(u_char *, int);
int mm_newkeys_to_blob(int, u_char **, u_int *);
-void mm_apply_keystate(struct mm_master *);
-void mm_get_keystate(int);
-void mm_send_keystate(int);
-
-int mm_pty_allocown(int, int *, int *, char *, int);
+void monitor_apply_keystate(struct monitor *);
+void mm_get_keystate(struct monitor *);
+void mm_send_keystate(struct monitor*);
-/* Functions on the montior that answer unprivileged requests */
+/* bsdauth */
+int mm_bsdauth_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_bsdauth_respond(void *, u_int, char **);
-int mm_answer_moduli(int, Buffer *);
-int mm_answer_sign(int, Buffer *);
-int mm_answer_pwnamallow(int, Buffer *);
-int mm_answer_authserv(int, Buffer *);
-int mm_answer_authpassword(int, Buffer *);
-int mm_answer_keyallowed(int, Buffer *);
-int mm_answer_keyverify(int, Buffer *);
-int mm_answer_pty(int, Buffer *);
-int mm_answer_term(int, Buffer *);
+/* skey */
+int mm_skey_query(void *, char **, char **, u_int *, char ***, u_int **);
+int mm_skey_respond(void *, u_int, char **);
-void mm_request_send(int , enum monitor_reqtype, Buffer *);
-void mm_request_receive(int, Buffer *);
-void mm_request_receive_expect(int, enum monitor_reqtype,
- Buffer *);
+/* zlib allocation hooks */
void *mm_zalloc(struct mm_master *, u_int, u_int);
void mm_zfree(struct mm_master *, void *);
void mm_init_compression(struct mm_master *);
-/* Utility functions */
-
-void pwfree(struct passwd *);
#endif /* _MM_H_ */