nhyatt/putty-source
1
0
Fork 0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-03-22 14:39:24 -05:00
Code Issues Projects Releases Wiki Activity

Joris van Rantwijk's unified SSH code suitable for PuTTY and PSCP

Browse Source 
[originally from svn r504]
[this commit reordered to come after creation of 0.49 tag]
This commit is contained in:
Simon Tatham 2000-06-22 12:18:34 +00:00
parent c9e236eb39
commit 2832ef1e75
5 changed files with 640 additions and 968 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Makefile
View File

@ -52,7 +52,7 @@ POBJS = ssh.$(OBJ) be_all.$(OBJ)
##-- objects puttytel ##-- objects puttytel
TOBJS = be_nossh.$(OBJ) TOBJS = be_nossh.$(OBJ)
##-- objects pscp ##-- objects pscp
SOBJS = scp.$(OBJ) windlg.$(OBJ) scpssh.$(OBJ) be_none.$(OBJ) SOBJS = scp.$(OBJ) windlg.$(OBJ) ssh.$(OBJ) be_none.$(OBJ)
##-- objects putty puttytel pscp ##-- objects putty puttytel pscp
MOBJS = misc.$(OBJ) version.$(OBJ) MOBJS = misc.$(OBJ) version.$(OBJ)
##-- objects putty pscp ##-- objects putty pscp
@ -139,7 +139,6 @@ sshsha.$(OBJ): sshsha.c ssh.h
sshrand.$(OBJ): sshrand.c ssh.h sshrand.$(OBJ): sshrand.c ssh.h
sshblowf.$(OBJ): sshblowf.c ssh.h sshblowf.$(OBJ): sshblowf.c ssh.h
scp.$(OBJ): scp.c putty.h scp.h scp.$(OBJ): scp.c putty.h scp.h
scpssh.$(OBJ): scpssh.c putty.h ssh.h scp.h
version.$(OBJ): version.c version.$(OBJ): version.c
be_all.$(OBJ): be_all.c be_all.$(OBJ): be_all.c
be_nossh.$(OBJ): be_nossh.c be_nossh.$(OBJ): be_nossh.c

67
scp.c
View File

@ -1,6 +1,6 @@
/* /*
* scp.c - Scp (Secure Copy) client for PuTTY. * scp.c - Scp (Secure Copy) client for PuTTY.
* Joris van Rantwijk, Aug 1999, Nov 1999. * Joris van Rantwijk, Simon Tatham
* *
* This is mainly based on ssh-1.2.26/scp.c by Timo Rinne & Tatu Ylonen. * This is mainly based on ssh-1.2.26/scp.c by Timo Rinne & Tatu Ylonen.
* They, in turn, used stuff from BSD rcp. * They, in turn, used stuff from BSD rcp.
@ -22,7 +22,7 @@
#define TIME_WIN_TO_POSIX(ft, t) ((t) = (unsigned long) \ #define TIME_WIN_TO_POSIX(ft, t) ((t) = (unsigned long) \
((*(LONGLONG*)&(ft)) / (LONGLONG) 10000000 - (LONGLONG) 11644473600)) ((*(LONGLONG*)&(ft)) / (LONGLONG) 10000000 - (LONGLONG) 11644473600))
int verbose = 0; static int verbose = 0;
static int recursive = 0; static int recursive = 0;
static int preserve = 0; static int preserve = 0;
static int targetshouldbedirectory = 0; static int targetshouldbedirectory = 0;
@ -36,6 +36,14 @@ static void source(char *src);
static void rsource(char *src); static void rsource(char *src);
static void sink(char *targ); static void sink(char *targ);
/*
* This function is needed to link with ssh.c, but it never gets called.
*/
void term_out(void)
{
abort();
}
/* /*
* Print an error message and perform a fatal exit. * Print an error message and perform a fatal exit.
*/ */
@ -63,13 +71,13 @@ static void bump(char *fmt, ...)
va_end(ap); va_end(ap);
if (connection_open) { if (connection_open) {
char ch; char ch;
ssh_send_eof(); ssh_scp_send_eof();
ssh_recv(&ch, 1); ssh_scp_recv(&ch, 1);
} }
exit(1); exit(1);
} }
void ssh_get_password(char *prompt, char *str, int maxlen) static void get_password(const char *prompt, char *str, int maxlen)
{ {
HANDLE hin, hout; HANDLE hin, hout;
DWORD savemode, i; DWORD savemode, i;
@ -134,7 +142,7 @@ static void do_cmd(char *host, char *user, char *cmd)
if (portnumber) if (portnumber)
cfg.port = portnumber; cfg.port = portnumber;
err = ssh_init(cfg.host, cfg.port, cmd, &realhost); err = ssh_scp_init(cfg.host, cfg.port, cmd, &realhost);
if (err != NULL) if (err != NULL)
bump("ssh_init: %s", err); bump("ssh_init: %s", err);
if (verbose && realhost != NULL) if (verbose && realhost != NULL)
@ -209,7 +217,7 @@ static int response(void)
char ch, resp, rbuf[2048]; char ch, resp, rbuf[2048];
int p; int p;
if (ssh_recv(&resp, 1) <= 0) if (ssh_scp_recv(&resp, 1) <= 0)
bump("Lost connection"); bump("Lost connection");
p = 0; p = 0;
@ -222,7 +230,7 @@ static int response(void)
case 1: /* error */ case 1: /* error */
case 2: /* fatal error */ case 2: /* fatal error */
do { do {
if (ssh_recv(&ch, 1) <= 0) if (ssh_scp_recv(&ch, 1) <= 0)
bump("Protocol error: Lost connection"); bump("Protocol error: Lost connection");
rbuf[p++] = ch; rbuf[p++] = ch;
} while (p < sizeof(rbuf) && ch != '\n'); } while (p < sizeof(rbuf) && ch != '\n');
@ -249,7 +257,7 @@ static void run_err(const char *fmt, ...)
strcpy(str, "\01scp: "); strcpy(str, "\01scp: ");
vsprintf(str+strlen(str), fmt, ap); vsprintf(str+strlen(str), fmt, ap);
strcat(str, "\n"); strcat(str, "\n");
ssh_send(str, strlen(str)); ssh_scp_send(str, strlen(str));
vfprintf(stderr, fmt, ap); vfprintf(stderr, fmt, ap);
fprintf(stderr, "\n"); fprintf(stderr, "\n");
va_end(ap); va_end(ap);
@ -321,7 +329,7 @@ static void source(char *src)
TIME_WIN_TO_POSIX(actime, atime); TIME_WIN_TO_POSIX(actime, atime);
TIME_WIN_TO_POSIX(wrtime, mtime); TIME_WIN_TO_POSIX(wrtime, mtime);
sprintf(buf, "T%lu 0 %lu 0\n", mtime, atime); sprintf(buf, "T%lu 0 %lu 0\n", mtime, atime);
ssh_send(buf, strlen(buf)); ssh_scp_send(buf, strlen(buf));
if (response()) if (response())
return; return;
} }
@ -330,7 +338,7 @@ static void source(char *src)
sprintf(buf, "C0644 %lu %s\n", size, last); sprintf(buf, "C0644 %lu %s\n", size, last);
if (verbose) if (verbose)
fprintf(stderr, "Sending file modes: %s", buf); fprintf(stderr, "Sending file modes: %s", buf);
ssh_send(buf, strlen(buf)); ssh_scp_send(buf, strlen(buf));
if (response()) if (response())
return; return;
@ -348,7 +356,7 @@ static void source(char *src)
if (statistics) printf("\n"); if (statistics) printf("\n");
bump("%s: Read error", src); bump("%s: Read error", src);
} }
ssh_send(transbuf, k); ssh_scp_send(transbuf, k);
if (statistics) { if (statistics) {
stat_bytes += k; stat_bytes += k;
if (time(NULL) != stat_lasttime || if (time(NULL) != stat_lasttime ||
@ -361,7 +369,7 @@ static void source(char *src)
} }
CloseHandle(f); CloseHandle(f);
ssh_send("", 1); ssh_scp_send("", 1);
(void) response(); (void) response();
} }
@ -390,7 +398,7 @@ static void rsource(char *src)
sprintf(buf, "D0755 0 %s\n", last); sprintf(buf, "D0755 0 %s\n", last);
if (verbose) if (verbose)
fprintf(stderr, "Entering directory: %s", buf); fprintf(stderr, "Entering directory: %s", buf);
ssh_send(buf, strlen(buf)); ssh_scp_send(buf, strlen(buf));
if (response()) if (response())
return; return;
@ -412,7 +420,7 @@ static void rsource(char *src)
FindClose(dir); FindClose(dir);
sprintf(buf, "E\n"); sprintf(buf, "E\n");
ssh_send(buf, strlen(buf)); ssh_scp_send(buf, strlen(buf));
(void) response(); (void) response();
} }
@ -444,18 +452,18 @@ static void sink(char *targ)
if (targetshouldbedirectory && !targisdir) if (targetshouldbedirectory && !targisdir)
bump("%s: Not a directory", targ); bump("%s: Not a directory", targ);
ssh_send("", 1); ssh_scp_send("", 1);
while (1) { while (1) {
settime = 0; settime = 0;
gottime: gottime:
if (ssh_recv(&ch, 1) <= 0) if (ssh_scp_recv(&ch, 1) <= 0)
return; return;
if (ch == '\n') if (ch == '\n')
bump("Protocol error: Unexpected newline"); bump("Protocol error: Unexpected newline");
i = 0; i = 0;
buf[i++] = ch; buf[i++] = ch;
do { do {
if (ssh_recv(&ch, 1) <= 0) if (ssh_scp_recv(&ch, 1) <= 0)
bump("Lost connection"); bump("Lost connection");
buf[i++] = ch; buf[i++] = ch;
} while (i < sizeof(buf) && ch != '\n'); } while (i < sizeof(buf) && ch != '\n');
@ -468,13 +476,13 @@ static void sink(char *targ)
case '\02': /* fatal error */ case '\02': /* fatal error */
bump("%s", buf+1); bump("%s", buf+1);
case 'E': case 'E':
ssh_send("", 1); ssh_scp_send("", 1);
return; return;
case 'T': case 'T':
if (sscanf(buf, "T%ld %*d %ld %*d", if (sscanf(buf, "T%ld %*d %ld %*d",
&mtime, &atime) == 2) { &mtime, &atime) == 2) {
settime = 1; settime = 1;
ssh_send("", 1); ssh_scp_send("", 1);
goto gottime; goto gottime;
} }
bump("Protocol error: Illegal time format"); bump("Protocol error: Illegal time format");
@ -524,7 +532,7 @@ static void sink(char *targ)
continue; continue;
} }
ssh_send("", 1); ssh_scp_send("", 1);
if (statistics) { if (statistics) {
stat_bytes = 0; stat_bytes = 0;
@ -542,7 +550,7 @@ static void sink(char *targ)
char transbuf[4096]; char transbuf[4096];
DWORD j, k = 4096; DWORD j, k = 4096;
if (i + k > size) k = size - i; if (i + k > size) k = size - i;
if (ssh_recv(transbuf, k) == 0) if (ssh_scp_recv(transbuf, k) == 0)
bump("Lost connection"); bump("Lost connection");
if (wrerror) continue; if (wrerror) continue;
if (! WriteFile(f, transbuf, k, &j, NULL) || j != k) { if (! WriteFile(f, transbuf, k, &j, NULL) || j != k) {
@ -577,7 +585,7 @@ static void sink(char *targ)
run_err("%s: Write error", namebuf); run_err("%s: Write error", namebuf);
continue; continue;
} }
ssh_send("", 1); ssh_scp_send("", 1);
} }
} }
@ -778,7 +786,7 @@ static void get_dir_list(int argc, char *argv[])
do_cmd(host, user, cmd); do_cmd(host, user, cmd);
sfree(cmd); sfree(cmd);
while (ssh_recv(&c, 1) > 0) while (ssh_scp_recv(&c, 1) > 0)
fputc(c, stdout); /* thank heavens for buffered I/O */ fputc(c, stdout); /* thank heavens for buffered I/O */
} }
@ -826,13 +834,17 @@ int main(int argc, char *argv[])
int i; int i;
int list = 0; int list = 0;
default_protocol = PROT_TELNET;
scp_flags = SCP_FLAG;
ssh_get_password = &get_password;
init_winsock(); init_winsock();
for (i = 1; i < argc; i++) { for (i = 1; i < argc; i++) {
if (argv[i][0] != '-') if (argv[i][0] != '-')
break; break;
if (strcmp(argv[i], "-v") == 0) if (strcmp(argv[i], "-v") == 0)
verbose = 1; verbose = 1, scp_flags |= SCP_VERBOSE;
else if (strcmp(argv[i], "-r") == 0) else if (strcmp(argv[i], "-r") == 0)
recursive = 1; recursive = 1;
else if (strcmp(argv[i], "-p") == 0) else if (strcmp(argv[i], "-p") == 0)
@ -876,8 +888,8 @@ int main(int argc, char *argv[])
if (connection_open) { if (connection_open) {
char ch; char ch;
ssh_send_eof(); ssh_scp_send_eof();
ssh_recv(&ch, 1); ssh_scp_recv(&ch, 1);
} }
WSACleanup(); WSACleanup();
random_save_seed(); random_save_seed();
@ -886,3 +898,4 @@ int main(int argc, char *argv[])
} }
/* end */ /* end */

34
scp.h
View File

@ -1,29 +1,17 @@
/* /*
* scp.h * scp.h
* Joris van Rantwijk, Aug 1999. * Joris van Rantwijk, Aug 1999, Jun 2000.
*/ */
#define SCP_FLAG 1
#define SCP_VERBOSE 2
#define IS_SCP ((scp_flags & SCP_FLAG) != 0)
/* /* Exported from ssh.c */
* Exported from scp.c extern int scp_flags;
*/ extern void (*ssh_get_password)(const char *prompt, char *str, int maxlen);
extern int verbose; char * ssh_scp_init(char *host, int port, char *cmd, char **realhost);
void ssh_get_password(char *prompt, char *str, int maxlen); int ssh_scp_recv(unsigned char *buf, int len);
void ssh_scp_send(unsigned char *buf, int len);
void ssh_scp_send_eof(void);
/*
* Exported from scpssh.c
*/
char * ssh_init(char *host, int port, char *cmd, char **realhost);
int ssh_recv(unsigned char *buf, int len);
void ssh_send(unsigned char *buf, int len);
void ssh_send_eof(void);
/*
* Exports from mscrypto.c
*/
#ifdef MSCRYPTOAPI
int crypto_startup();
void crypto_wrapup();
#endif

620
scpssh.c
View File

@ -1,620 +0,0 @@
/*
* scpssh.c - SSH implementation for PuTTY Secure Copy
* Joris van Rantwijk, Aug 1999.
* Based on PuTTY ssh.c by Simon Tatham.
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <winsock.h>
#include "putty.h"
#include "ssh.h"
#include "scp.h"
#define SSH_MSG_DISCONNECT 1
#define SSH_SMSG_PUBLIC_KEY 2
#define SSH_CMSG_SESSION_KEY 3
#define SSH_CMSG_USER 4
#define SSH_CMSG_AUTH_PASSWORD 9
#define SSH_CMSG_EXEC_CMD 13
#define SSH_SMSG_SUCCESS 14
#define SSH_SMSG_FAILURE 15
#define SSH_CMSG_STDIN_DATA 16
#define SSH_SMSG_STDOUT_DATA 17
#define SSH_SMSG_STDERR_DATA 18
#define SSH_CMSG_EOF 19
#define SSH_SMSG_EXIT_STATUS 20
#define SSH_CMSG_EXIT_CONFIRMATION 33
#define SSH_MSG_IGNORE 32
#define SSH_MSG_DEBUG 36
#define GET_32BIT(cp) \
(((unsigned long)(unsigned char)(cp)[0] << 24) | \
((unsigned long)(unsigned char)(cp)[1] << 16) | \
((unsigned long)(unsigned char)(cp)[2] << 8) | \
((unsigned long)(unsigned char)(cp)[3]))
#define PUT_32BIT(cp, value) { \
(cp)[0] = (unsigned char)((value) >> 24); \
(cp)[1] = (unsigned char)((value) >> 16); \
(cp)[2] = (unsigned char)((value) >> 8); \
(cp)[3] = (unsigned char)(value); }
static SOCKET s = INVALID_SOCKET;
static unsigned char session_key[32];
static struct ssh_cipher *cipher = NULL;
static char *savedhost;
struct Packet {
long length;
int type;
unsigned long crc;
unsigned char *data;
unsigned char *body;
long maxlen;
};
static struct Packet pktin = { 0, 0, 0, NULL, 0 };
static struct Packet pktout = { 0, 0, 0, NULL, 0 };
static void s_write (char *buf, int len) {
while (len > 0) {
int i = send (s, buf, len, 0);
noise_ultralight(i);
if (i <= 0)
fatalbox("Lost connection while sending");
len -= i, buf += i;
}
}
static int s_read (char *buf, int len) {
int ret = 0;
while (len > 0) {
int i = recv (s, buf, len, 0);
noise_ultralight(i);
if (i > 0)
len -= i, buf += i, ret += i;
else
return i;
}
return ret;
}
/*
* Read and decrypt one incoming SSH packet.
*/
static void get_packet(void)
{
unsigned char buf[4];
int ret;
int len, pad, biglen;
unsigned long realcrc, gotcrc;
next_packet:
pktin.type = 0;
pktin.length = 0;
ret = s_read(buf, 4);
if (ret != 4) {
closesocket(s);
s = INVALID_SOCKET;
return;
}
len = GET_32BIT(buf);
#ifdef FWHACK
if (len == 0x52656d6f) {
len = 0x300;
}
#endif
pad = 8 - (len % 8);
biglen = len + pad;
len -= 5; /* type and CRC */
pktin.length = len;
if (pktin.maxlen < biglen) {
pktin.maxlen = biglen;
#ifdef MSCRYPTOAPI
/* allocate enough buffer space for extra block
* for MS CryptEncrypt() */
pktin.data = (pktin.data == NULL) ?
smalloc(biglen+8) : srealloc(pktin.data, biglen+8);
#else
pktin.data = (pktin.data == NULL) ?
smalloc(biglen) : srealloc(pktin.data, biglen);
#endif
}
ret = s_read(pktin.data, biglen);
if (ret != biglen) {
closesocket(s);
s = INVALID_SOCKET;
return;
}
if (cipher)
cipher->decrypt(pktin.data, biglen);
pktin.type = pktin.data[pad];
pktin.body = pktin.data + pad + 1;
realcrc = crc32(pktin.data, biglen-4);
gotcrc = (pktin.data[biglen-4] << 24);
gotcrc |= (pktin.data[biglen-3] << 16);
gotcrc |= (pktin.data[biglen-2] << 8);
gotcrc |= (pktin.data[biglen-1] << 0);
if (gotcrc != realcrc) {
fatalbox("Incorrect CRC received on packet");
}
if (pktin.type == SSH_MSG_DEBUG) {
if (verbose) {
int len = GET_32BIT(pktin.body);
fprintf(stderr, "Remote: ");
fwrite(pktin.body + 4, len, 1, stderr);
fprintf(stderr, "\n");
}
goto next_packet;
}
if (pktin.type == SSH_MSG_IGNORE) {
goto next_packet;
}
}
static void s_wrpkt_start(int type, int len) {
int pad, biglen;
len += 5; /* type and CRC */
pad = 8 - (len%8);
biglen = len + pad;
pktout.length = len-5;
if (pktout.maxlen < biglen) {
pktout.maxlen = biglen;
#ifdef MSCRYPTOAPI
/* Allocate enough buffer space for extra block
* for MS CryptEncrypt() */
pktout.data = (pktout.data == NULL ? malloc(biglen+8) :
realloc(pktout.data, biglen+8));
#else
pktout.data = (pktout.data == NULL ? malloc(biglen+4) :
realloc(pktout.data, biglen+4));
#endif
if (!pktout.data)
fatalbox("Out of memory");
}
pktout.type = type;
pktout.body = pktout.data+4+pad+1;
}
static void s_wrpkt(void) {
int pad, len, biglen, i;
unsigned long crc;
len = pktout.length + 5; /* type and CRC */
pad = 8 - (len%8);
biglen = len + pad;
pktout.body[-1] = pktout.type;
for (i=0; i<pad; i++)
pktout.data[i+4] = random_byte();
crc = crc32(pktout.data+4, biglen-4);
PUT_32BIT(pktout.data+biglen, crc);
PUT_32BIT(pktout.data, len);
if (cipher)
cipher->encrypt(pktout.data+4, biglen);
s_write(pktout.data, biglen+4);
}
static int do_ssh_init(void) {
char c;
char version[10];
char vstring[40];
int i;
#ifdef FWHACK
i = 0;
while (s_read(&c, 1) == 1) {
if (c == 'S' && i < 2) i++;
else if (c == 'S' && i == 2) i = 2;
else if (c == 'H' && i == 2) break;
else i = 0;
}
#else
if (s_read(&c,1) != 1 || c != 'S') return 0;
if (s_read(&c,1) != 1 || c != 'S') return 0;
if (s_read(&c,1) != 1 || c != 'H') return 0;
#endif
if (s_read(&c,1) != 1 || c != '-') return 0;
i = 0;
while (1) {
if (s_read(&c,1) != 1)
return 0;
if (i >= 0) {
if (c == '-') {
version[i] = '\0';
i = -1;
} else if (i < sizeof(version)-1)
version[i++] = c;
}
else if (c == '\n')
break;
}
sprintf(vstring, "SSH-%s-7.7.7\n",
(strcmp(version, "1.5") <= 0 ? version : "1.5"));
s_write(vstring, strlen(vstring));
return 1;
}
/*
* Login on the server and request execution of the command.
*/
static void ssh_login(char *username, char *cmd)
{
int i, j, len;
unsigned char session_id[16];
unsigned char *rsabuf, *keystr1, *keystr2;
unsigned char cookie[8];
struct RSAKey servkey, hostkey;
struct MD5Context md5c;
unsigned long supported_ciphers_mask;
int cipher_type;
extern struct ssh_cipher ssh_3des;
extern struct ssh_cipher ssh_blowfish;
get_packet();
if (pktin.type != SSH_SMSG_PUBLIC_KEY)
fatalbox("Public key packet not received");
memcpy(cookie, pktin.body, 8);
MD5Init(&md5c);
i = makekey(pktin.body+8, &servkey, &keystr1);
j = makekey(pktin.body+8+i, &hostkey, &keystr2);
supported_ciphers_mask = GET_32BIT(pktin.body+12+i+j);
MD5Update(&md5c, keystr2, hostkey.bytes);
MD5Update(&md5c, keystr1, servkey.bytes);
MD5Update(&md5c, pktin.body, 8);
MD5Final(session_id, &md5c);
for (i=0; i<32; i++)
session_key[i] = random_byte();
len = (hostkey.bytes > servkey.bytes ? hostkey.bytes : servkey.bytes);
rsabuf = malloc(len);
if (!rsabuf)
fatalbox("Out of memory");
/*
* Verify the host key.
*/
{
/*
* First format the key into a string.
*/
int len = rsastr_len(&hostkey);
char *keystr = malloc(len);
if (!keystr)
fatalbox("Out of memory");
rsastr_fmt(keystr, &hostkey);
verify_ssh_host_key(savedhost, keystr);
free(keystr);
}
for (i=0; i<32; i++) {
rsabuf[i] = session_key[i];
if (i < 16)
rsabuf[i] ^= session_id[i];
}
if (hostkey.bytes > servkey.bytes) {
rsaencrypt(rsabuf, 32, &servkey);
rsaencrypt(rsabuf, servkey.bytes, &hostkey);
} else {
rsaencrypt(rsabuf, 32, &hostkey);
rsaencrypt(rsabuf, hostkey.bytes, &servkey);
}
cipher_type = cfg.cipher == CIPHER_BLOWFISH ? SSH_CIPHER_BLOWFISH :
SSH_CIPHER_3DES;
if ((supported_ciphers_mask & (1 << cipher_type)) == 0) {
fprintf(stderr, "Selected cipher not supported, falling back to 3DES\n");
cipher_type = SSH_CIPHER_3DES;
}
s_wrpkt_start(SSH_CMSG_SESSION_KEY, len+15);
pktout.body[0] = cipher_type;
memcpy(pktout.body+1, cookie, 8);
pktout.body[9] = (len*8) >> 8;
pktout.body[10] = (len*8) & 0xFF;
memcpy(pktout.body+11, rsabuf, len);
pktout.body[len+11] = pktout.body[len+12] = 0; /* protocol flags */
pktout.body[len+13] = pktout.body[len+14] = 0;
s_wrpkt();
free(rsabuf);
cipher = cipher_type == SSH_CIPHER_BLOWFISH ? &ssh_blowfish :
&ssh_3des;
cipher->sesskey(session_key);
get_packet();
if (pktin.type != SSH_SMSG_SUCCESS)
fatalbox("Encryption not successfully enabled");
if (verbose)
fprintf(stderr, "Logging in as \"%s\".\n", username);
s_wrpkt_start(SSH_CMSG_USER, 4+strlen(username));
pktout.body[0] = pktout.body[1] = pktout.body[2] = 0;
pktout.body[3] = strlen(username);
memcpy(pktout.body+4, username, strlen(username));
s_wrpkt();
get_packet();
while (pktin.type == SSH_SMSG_FAILURE) {
char password[100];
char prompt[200];
sprintf(prompt, "%s@%s's password: ", username, savedhost);
ssh_get_password(prompt, password, 100);
s_wrpkt_start(SSH_CMSG_AUTH_PASSWORD, 4+strlen(password));
pktout.body[0] = pktout.body[1] = pktout.body[2] = 0;
pktout.body[3] = strlen(password);
memcpy(pktout.body+4, password, strlen(password));
s_wrpkt();
memset(password, 0, strlen(password));
get_packet();
if (pktin.type == SSH_SMSG_FAILURE) {
fprintf(stderr, "Access denied\n");
} else if (pktin.type != SSH_SMSG_SUCCESS) {
fatalbox("Strange packet received, type %d", pktin.type);
}
}
/* Execute command */
if (verbose)
fprintf(stderr, "Sending command: %s\n", cmd);
i = strlen(cmd);
s_wrpkt_start(SSH_CMSG_EXEC_CMD, 4+i);
PUT_32BIT(pktout.body, i);
memcpy(pktout.body+4, cmd, i);
s_wrpkt();
}
/*
* Receive a block of data over the SSH link. Block until
* all data is available. Return nr of bytes read (0 if lost connection).
*/
int ssh_recv(unsigned char *buf, int len)
{
static int pending_input_len = 0;
static unsigned char *pending_input_ptr;
int to_read = len;
if (pending_input_len >= to_read) {
memcpy(buf, pending_input_ptr, to_read);
pending_input_ptr += to_read;
pending_input_len -= to_read;
return len;
}
if (pending_input_len > 0) {
memcpy(buf, pending_input_ptr, pending_input_len);
buf += pending_input_len;
to_read -= pending_input_len;
pending_input_len = 0;
}
if (s == INVALID_SOCKET)
return 0;
while (to_read > 0) {
get_packet();
if (s == INVALID_SOCKET)
return 0;
if (pktin.type == SSH_SMSG_STDOUT_DATA) {
int plen = GET_32BIT(pktin.body);
if (plen+4 != pktin.length) {
fprintf(stderr, "Received data packet with bogus string length"
", ignoring\n");
} else if (plen <= to_read) {
memcpy(buf, pktin.body + 4, plen);
buf += plen;
to_read -= plen;
} else {
memcpy(buf, pktin.body + 4, to_read);
pending_input_len = plen - to_read;
pending_input_ptr = pktin.body + 4 + to_read;
to_read = 0;
}
} else if (pktin.type == SSH_SMSG_STDERR_DATA) {
int plen = GET_32BIT(pktin.body);
if (plen+4 != pktin.length) {
fprintf(stderr, "Received data packet with bogus string length"
", ignoring\n");
} else
fwrite(pktin.body + 4, plen, 1, stderr);
} else if (pktin.type == SSH_MSG_DISCONNECT) {
} else if (pktin.type == SSH_SMSG_SUCCESS ||
pktin.type == SSH_SMSG_FAILURE) {
} else if (pktin.type == SSH_SMSG_EXIT_STATUS) {
if (verbose)
fprintf(stderr, "Remote exit status %d\n",
GET_32BIT(pktin.body));
s_wrpkt_start(SSH_CMSG_EXIT_CONFIRMATION, 0);
s_wrpkt();
if (verbose)
fprintf(stderr, "Closing connection\n");
closesocket(s);
s = INVALID_SOCKET;
}
}
return len;
}
/*
* Send a block of data over the SSH link.
* Block until all data is sent.
*/
void ssh_send(unsigned char *buf, int len)
{
if (s == INVALID_SOCKET)
return;
s_wrpkt_start(SSH_CMSG_STDIN_DATA, 4 + len);
PUT_32BIT(pktout.body, len);
memcpy(pktout.body + 4, buf, len);
s_wrpkt();
}
/*
* Send an EOF notification to the server.
*/
void ssh_send_eof(void)
{
if (s == INVALID_SOCKET)
return;
s_wrpkt_start(SSH_CMSG_EOF, 0);
s_wrpkt();
}
/*
* Set up the connection, login on the remote host and
* start execution of a command.
*
* Returns an error message, or NULL on success.
*
* Also places the canonical host name into `realhost'.
*/
char *ssh_init(char *host, int port, char *cmd, char **realhost) {
SOCKADDR_IN addr;
struct hostent *h;
unsigned long a;
#ifdef FWHACK
char *FWhost;
int FWport;
#endif
#ifdef MSCRYPTOAPI
if(crypto_startup() == 0)
return "Microsoft high encryption pack not installed!";
#endif
savedhost = malloc(1+strlen(host));
if (!savedhost)
fatalbox("Out of memory");
strcpy(savedhost, host);
#ifdef FWHACK
FWhost = host;
FWport = port;
host = FWSTR;
port = 23;
#endif
/*
* Try to find host.
*/
if ( (a = inet_addr(host)) == (unsigned long) INADDR_NONE) {
if ( (h = gethostbyname(host)) == NULL)
switch (WSAGetLastError()) {
case WSAENETDOWN: return "Network is down";
case WSAHOST_NOT_FOUND: case WSANO_DATA:
return "Host does not exist";
case WSATRY_AGAIN: return "Host not found";
default: return "gethostbyname: unknown error";
}
memcpy (&a, h->h_addr, sizeof(a));
*realhost = h->h_name;
} else
*realhost = host;
#ifdef FWHACK
*realhost = FWhost;
#endif
a = ntohl(a);
if (port < 0)
port = 22; /* default ssh port */
/*
* Open socket.
*/
s = socket(AF_INET, SOCK_STREAM, 0);
if (s == INVALID_SOCKET)
switch (WSAGetLastError()) {
case WSAENETDOWN: return "Network is down";
case WSAEAFNOSUPPORT: return "TCP/IP support not present";
default: return "socket(): unknown error";
}
/*
* Bind to local address.
*/
addr.sin_family = AF_INET;
addr.sin_addr.s_addr = htonl(INADDR_ANY);
addr.sin_port = htons(0);
if (bind (s, (struct sockaddr *)&addr, sizeof(addr)) == SOCKET_ERROR)
switch (WSAGetLastError()) {
case WSAENETDOWN: return "Network is down";
default: return "bind(): unknown error";
}
/*
* Connect to remote address.
*/
addr.sin_addr.s_addr = htonl(a);
addr.sin_port = htons((short)port);
if (connect (s, (struct sockaddr *)&addr, sizeof(addr)) == SOCKET_ERROR)
switch (WSAGetLastError()) {
case WSAENETDOWN: return "Network is down";
case WSAECONNREFUSED: return "Connection refused";
case WSAENETUNREACH: return "Network is unreachable";
case WSAEHOSTUNREACH: return "No route to host";
default: return "connect(): unknown error";
}
#ifdef FWHACK
send(s, "connect ", 8, 0);
send(s, FWhost, strlen(FWhost), 0);
{
char buf[20];
sprintf(buf, " %d\n", FWport);
send (s, buf, strlen(buf), 0);
}
#endif
random_init();
if (!do_ssh_init())
return "Protocol initialisation error";
ssh_login(cfg.username, cmd);
return NULL;
}
/* end */

884
ssh.c
View File

File diff suppressed because it is too large Load Diff