isnet_client.c

Go to the documentation of this file.

 
// クライアント側でのコマンド送信処理
//
 
int  send_command_recv_ans(int sock, char* command, int tm, Buffer* key, EVP_CIPHER* cipher)
{
    int  cc, nn;
    Buffer  ret, ans, buf, eno;
    
    if (command==NULL) return JBXL_ARGS_ERROR;
 
    buf = make_Buffer(LNAME);
    copy_s2Buffer(command, &buf);
    cat_s2Buffer("\r\n", &buf);
    cc = tcp_send_crypt_sBuffer(sock, &buf, key, cipher);
    free_Buffer(&buf);
 
    ret = make_Buffer(LNAME);
    cc = tcp_recv_Buffer_wait(sock, &ret, tm);    
    if (cc<=0) {
        free_Buffer(&ret);
        return cc;
    }
    buf = get_plain_sBuffer(ret, key, cipher);
    chomp_Buffer(&buf);
    ans = get_command(buf);
 
    if      (!strcmp("OK",  (const char*)ans.buf)) nn = 0;
    else if (!strcmp("ERR", (const char*)ans.buf)) {
        eno = get_operand(buf);
        nn  = atoi((const char*)eno.buf);
        free_Buffer(&eno);
        DEBUG_MODE PRINT_MESG("SEND_COMMAND_RECV_ANS: error = %d\n", nn);
    }
    else nn = JBXL_ISNET_CMD_ERROR;
 
    free_Buffer(&ret);
    free_Buffer(&buf);
    free_Buffer(&ans);
 
    return nn;
}
 
 
Buffer  recv_mesg_until_end(int sock, int tm, Buffer* key, EVP_CIPHER* cipher)
{
    int  cc;
    Buffer ret, buf, dec;
    
    ret = make_Buffer(LBUF);
    buf = make_Buffer(RECVBUFSZ);
 
    do {
        cc = tcp_recv_Buffer_wait(sock, &buf, tm);
        if (cc>0) {
            cat_Buffer(&buf, &ret);
            clear_Buffer(&buf);
            if (key!=NULL && cipher!=NULL) {
                if (!strnrvscmp("\r\n", (const char*)ret.buf, 2)) break; 
            }
            else {
                if (!strnrvscmp("\r\nEND\r\n", (const char*)ret.buf, 7) ||
                    !strnrvscmp("\nEND\n", (const char*)ret.buf, 5)) break;
            }
        }
    } while(cc>0);
 
    dec = get_plain_sBuffer(ret, key, cipher);
    free_Buffer(&buf);
    free_Buffer(&ret);
    return dec;
}
 
 
Buffer  send_algor_recv_spki(int sock, char* algor, int tm, Buffer* key, EVP_CIPHER* cipher)
{
    int  cc;
    Buffer com, ret, buf;
 
    ret = init_Buffer();                                // 初期化
    if (algor==NULL) return ret;
 
    com = make_Buffer_bystr((char*)"KEYEX ");
    cat_s2Buffer(algor, &com);
    cc = send_command_recv_ans(sock, (char*)com.buf, tm, key, cipher);
    free_Buffer(&com);
    if (cc!=0) { ret.state = cc; return ret; }
 
    ret = recv_mesg_until_end(sock, tm, key, cipher);   // サーバの返答
    buf = get_line_Buffer(ret, 1);                      // SPKI(BASE64)
    free_Buffer(&ret);
 
    ret = decode_base64_Buffer(buf);                    // 鍵をデコードする．
    free_Buffer(&buf);
 
    return ret;
}
 
 
int  send_spki_recv_ans(int sock, Buffer mkey, int tm, Buffer* key, EVP_CIPHER* cipher)
{
    int  cc;
    Buffer enc;
 
    cc = send_command_recv_ans(sock, (char*)"KEYEX SPKI", tm, key, cipher);
    if (cc!=0) return cc;
 
    enc = encode_base64_Buffer(mkey);                // 自分の公開鍵情報をエンコード
    cc = send_command_recv_ans(sock, (char*)enc.buf, tm, key, cipher);
    free_Buffer(&enc);
 
    return cc;
}
 
 
// クライアント側での認証処理
//
 
int  check_auth(Buffer ahost, int aport, Buffer userid, Buffer passwd, int chmode, int keyex, int cryptm, char* cfn, int cont)
{
    int  cryptf, sock, cc, tm = 10;
    Buffer ipaddr, buf, salt;
    Buffer shdkey;
    char*  pass;
    char*  chip;
 
    if (ahost.buf==NULL) return JBXL_ARGS_ERROR;
 
    // 認証サーバへ接続 
    sock = tcp_client_socket((char*)ahost.buf, aport);
    if (sock<0) {
        DEBUG_MODE PRINT_MESG("CHECK_AUTH: auth server open error.\n");
        return JBXL_ISNET_CONNECT_ERROR;
    }
    DEBUG_MODE PRINT_MESG("CHECK_AUTH: auth server opened.\n");
 
    // 通信開始
    cc = send_command_recv_ans(sock, (char*)"HELLO", tm, NULL, NULL);
    if (cc!=0) {
        socket_close(sock);
        return JBXL_ISNET_START_ERROR;
    }
 
    shdkey = init_Buffer();
    // supported only DH now
    //if (keyex!=SSL_DH) return JBXL_ISNET_PUBKEYALG_ERROR;
 
    // 暗号合意
    cryptf = FALSE;
    EVP_CIPHER* cipher = NULL;
    if (keyex!=0 && cryptm!=0) {
        cryptf = TRUE;
        chip   = get_ipaddr_byname((char*)ahost.buf, AF_INET);
        ipaddr = make_Buffer_bystr(chip);
        freeNull(chip);
        cc = start_CRYPT_transfer(sock, keyex, cryptm, ipaddr, cfn, tm, &shdkey, &cipher);
        free_Buffer(&ipaddr);
        if (cc!=0 && !cont) {
            free_EVP_CIPHER(&cipher);
            socket_close(sock);
            return cc;
        }
        // 以後暗号化通信
    }
 
    // チャレンジキー合意
    if (cryptf==FALSE) chmode = ON;
 
    if (chmode==ON) {
        cc = send_command_recv_ans(sock, (char*)"KEYEX CHLNG", tm, &shdkey, cipher);
        if (cc!=0) {
            socket_close(sock);
            return JBXL_ISNET_CHALLENGE_ERROR;
        }
    }
    else {
        cc = send_command_recv_ans(sock, (char*)"KEYEX NOCHLNG", tm, &shdkey, cipher);
        if (cc!=0) {
            if (cc==169) {        // Unkown KEYEX operand. Support for old version.
                chmode = ON;
            }
            else {
                socket_close(sock);
                return JBXL_ISNET_CHALLENGE_ERROR;
            }
        }
    }
 
    // ユーザIDを送る． 
    buf = make_Buffer(LBUF);
    copy_s2Buffer("USERID ", &buf);
    cat_Buffer(&userid, &buf);
    cc = send_command_recv_ans(sock, (char*)buf.buf, tm, &shdkey, cipher);
    if (cc!=0) {
        free_Buffer(&buf);
        free_EVP_CIPHER(&cipher);
        socket_close(sock);
        return JBXL_ISNET_USER_ERROR;
    }
 
    // SALTを得る． 
    if (chmode==ON) {
        salt = recv_mesg_until_end(sock, tm, &shdkey, cipher);
        //DEBUG_MODE PRINT_ESC("SALT = [%s]\n", (char*)salt.buf);
    }
    clear_Buffer(&buf);
 
    // パスワードを計算して送る． 
    copy_s2Buffer("PASSWD ", &buf);
    if (chmode==ON) {
        pass = x2crypt((char*)passwd.buf, (char*)salt.buf);
        cat_s2Buffer(pass, &buf);
        freeNull(pass);
    }
    else {
        cat_s2Buffer((char*)passwd.buf, &buf);
    }
    cc = send_command_recv_ans(sock, (char*)buf.buf, tm, &shdkey, cipher);
    free_Buffer(&buf);
 
    if (cc) {
        free_EVP_CIPHER(&cipher);
        socket_close(sock);
        return JBXL_ISNET_PASSWD_ERROR;
    }
 
    // 暗号化通信終了
    if (cryptf) cc = stop_CRYPT_transfer(sock, tm, &shdkey, cipher);
 
    cc = send_command_recv_ans(sock, (char*)"BYE", tm, &shdkey, cipher);
 
    socket_close(sock);
    DEBUG_MODE PRINT_MESG("CHECK_AUTH: auth server normally closed.\n");
 
    free_EVP_CIPHER(&cipher);
    if (cryptf) free_Buffer(&shdkey);
 
    return 0;
}
 
 
// クライアント側での暗号開始・終了処理
//
 
int  start_CRYPT_transfer(int sock, int keyex, int cryptm, Buffer ipaddr, char* cfn, int tm, Buffer* shdkey, EVP_CIPHER** cipher)
{
    Buffer spki, mpki;
 
    if (cfn!=NULL && ipaddr.buf!=NULL) {
        if (!check_server_spki(ipaddr, spki, cfn)) return JBXL_ISNET_SERVER_ERROR;
    }
 
    if (keyex==SSL_DH) {
        spki = send_algor_recv_spki(sock, (char*)"DH", tm, NULL, NULL);
        //
        if (spki.buf!=NULL) {
            DH* dhkey = NULL;
            mpki = gen_DHspki_fs(spki, &dhkey);
            if (dhkey!=NULL) {
                gen_CRYPT_SharedKey(keyex, spki, shdkey, (void*)dhkey);
                DH_free(dhkey);
            }
            else {
                PRINT_MESG("ERROR: start_CRYPT_transfer: DH Key is NULL\n");
                return JBXL_ISNET_DHKEY_ERROR;
            }
        }
        else {
            PRINT_MESG("ERROR: start_CRYPT_transfer: spki is NULL\n");
            return JBXL_ISNET_NULLANS_ERROR;
        }
    }
    //else if (keyex==SSL_RSA) spki = send_algor_recv_spki(sock, (char*)"RSA", tm);
    else return JBXL_ISNET_PUBKEYALG_ERROR;
 
    /*
    DEBUG_MODE {
        Buffer enc;
        enc = encode_base64_Buffer(spki);
        PRINT_MESG("SERVER SPKI = [%s]\n", enc.buf);
        free_Buffer(&enc);
    }*/
 
    int cc = send_spki_recv_ans(sock, mpki, tm, NULL, NULL);
    if (cc==0) {
        if (cryptm==SSL_AES128CBC) {
            cc = send_command_recv_ans(sock, (char*)"CRYPT AES128CBC", tm, NULL, NULL);
            *cipher = init_EVPAPI_Buffer(SSL_AES128CBC);
        }
        else if (cryptm==SSL_3DES3CBC) {
            cc = send_command_recv_ans(sock, (char*)"CRYPT 3DES3CBC",  tm, NULL, NULL);
            *cipher = init_EVPAPI_Buffer(SSL_3DES3CBC);
        }
    }
    
    free_Buffer(&spki);
    free_Buffer(&mpki);
    if (cc!=0) {
        free_Buffer(shdkey);
        *cipher = NULL;
        return cc;
    }
 
    return 0;
}
 
 
int  stop_CRYPT_transfer(int sock, int tm, Buffer* shdkey, EVP_CIPHER* cipher)
{
    int cc;
 
    cc = send_command_recv_ans(sock, (char*)"CRYPT RESET", tm, shdkey, cipher);
    return cc;
}