sspi_gss.c

 
#include <winpr/crt.h>
#include <winpr/assert.h>
#include <winpr/endian.h>
#include <winpr/asn1.h>
#include <winpr/stream.h>
 
#include "sspi_gss.h"
 
BOOL sspi_gss_wrap_token(SecBuffer* buf, const WinPrAsn1_OID* oid, uint16_t tok_id,
                         const sspi_gss_data* token)
{
  WinPrAsn1Encoder* enc = NULL;
  BYTE tok_id_buf[2];
  WinPrAsn1_MemoryChunk mc = { 2, tok_id_buf };
  wStream s;
  size_t len = 0;
  BOOL ret = FALSE;
 
  WINPR_ASSERT(buf);
  WINPR_ASSERT(oid);
  WINPR_ASSERT(token);
 
  winpr_Data_Write_UINT16_BE(tok_id_buf, tok_id);
 
  enc = WinPrAsn1Encoder_New(WINPR_ASN1_DER);
  if (!enc)
    return FALSE;
 
  /* initialContextToken [APPLICATION 0] */
  if (!WinPrAsn1EncAppContainer(enc, 0))
    goto cleanup;
 
  /* thisMech OID */
  if (!WinPrAsn1EncOID(enc, oid))
    goto cleanup;
 
  /* TOK_ID */
  if (!WinPrAsn1EncRawContent(enc, &mc))
    goto cleanup;
 
  /* innerToken */
  mc.data = (BYTE*)token->data;
  mc.len = token->length;
  if (!WinPrAsn1EncRawContent(enc, &mc))
    goto cleanup;
 
  if (!WinPrAsn1EncEndContainer(enc))
    goto cleanup;
 
  if (!WinPrAsn1EncStreamSize(enc, &len) || len > buf->cbBuffer)
    goto cleanup;
 
  Stream_StaticInit(&s, buf->pvBuffer, len);
  if (WinPrAsn1EncToStream(enc, &s))
  {
    buf->cbBuffer = (UINT32)len;
    ret = TRUE;
  }
 
cleanup:
  WinPrAsn1Encoder_Free(&enc);
  return ret;
}
 
BOOL sspi_gss_unwrap_token(const SecBuffer* buf, WinPrAsn1_OID* oid, uint16_t* tok_id,
                           sspi_gss_data* token)
{
  WinPrAsn1Decoder dec;
  WinPrAsn1Decoder dec2;
  WinPrAsn1_tagId tag = 0;
  wStream sbuffer = { 0 };
  wStream* s = NULL;
 
  WINPR_ASSERT(buf);
  WINPR_ASSERT(oid);
  WINPR_ASSERT(token);
 
  WinPrAsn1Decoder_InitMem(&dec, WINPR_ASN1_DER, buf->pvBuffer, buf->cbBuffer);
 
  if (!WinPrAsn1DecReadApp(&dec, &tag, &dec2) || tag != 0)
    return FALSE;
 
  if (!WinPrAsn1DecReadOID(&dec2, oid, FALSE))
    return FALSE;
 
  sbuffer = WinPrAsn1DecGetStream(&dec2);
  s = &sbuffer;
 
  if (Stream_Length(s) < 2)
    return FALSE;
 
  if (tok_id)
    Stream_Read_UINT16_BE(s, *tok_id);
 
  token->data = Stream_Pointer(s);
  token->length = (UINT)Stream_GetRemainingLength(s);
 
  return TRUE;
}