mirror of
https://git.tartarus.org/simon/putty.git
synced 2025-01-09 09:27:59 +00:00
f26b7aa0d3
opaque to all platform-independent modules and only handled within per-platform code. `Filename' is there because the Mac has a magic way to store filenames (though currently this checkin doesn't support it!); `FontSpec' is there so that all the auxiliary stuff such as font height and charset and so on which is needed under Windows but not Unix can be kept where it belongs, and so that I can have a hope in hell of dealing with a font chooser in the forthcoming cross-platform config box code, and best of all it gets the horrid font height wart out of settings.c and into the Windows code where it should be. The Mac part of this checkin is a bunch of random guesses which will probably not quite compile, but which look roughly right to me. Sorry if I screwed it up, Ben :-) [originally from svn r2765]
325 lines
8.7 KiB
C
325 lines
8.7 KiB
C
/*
|
|
* console.c: various interactive-prompt routines shared between
|
|
* the console PuTTY tools
|
|
*/
|
|
|
|
#include <windows.h>
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <stdarg.h>
|
|
|
|
#include "putty.h"
|
|
#include "storage.h"
|
|
#include "ssh.h"
|
|
|
|
int console_batch_mode = FALSE;
|
|
|
|
static void *console_logctx = NULL;
|
|
|
|
/*
|
|
* Clean up and exit.
|
|
*/
|
|
void cleanup_exit(int code)
|
|
{
|
|
/*
|
|
* Clean up.
|
|
*/
|
|
sk_cleanup();
|
|
WSACleanup();
|
|
|
|
random_save_seed();
|
|
#ifdef MSCRYPTOAPI
|
|
crypto_wrapup();
|
|
#endif
|
|
|
|
exit(code);
|
|
}
|
|
|
|
void verify_ssh_host_key(void *frontend, char *host, int port, char *keytype,
|
|
char *keystr, char *fingerprint)
|
|
{
|
|
int ret;
|
|
HANDLE hin;
|
|
DWORD savemode, i;
|
|
|
|
static const char absentmsg_batch[] =
|
|
"The server's host key is not cached in the registry. You\n"
|
|
"have no guarantee that the server is the computer you\n"
|
|
"think it is.\n"
|
|
"The server's key fingerprint is:\n"
|
|
"%s\n"
|
|
"Connection abandoned.\n";
|
|
static const char absentmsg[] =
|
|
"The server's host key is not cached in the registry. You\n"
|
|
"have no guarantee that the server is the computer you\n"
|
|
"think it is.\n"
|
|
"The server's key fingerprint is:\n"
|
|
"%s\n"
|
|
"If you trust this host, enter \"y\" to add the key to\n"
|
|
"PuTTY's cache and carry on connecting.\n"
|
|
"If you want to carry on connecting just once, without\n"
|
|
"adding the key to the cache, enter \"n\".\n"
|
|
"If you do not trust this host, press Return to abandon the\n"
|
|
"connection.\n"
|
|
"Store key in cache? (y/n) ";
|
|
|
|
static const char wrongmsg_batch[] =
|
|
"WARNING - POTENTIAL SECURITY BREACH!\n"
|
|
"The server's host key does not match the one PuTTY has\n"
|
|
"cached in the registry. This means that either the\n"
|
|
"server administrator has changed the host key, or you\n"
|
|
"have actually connected to another computer pretending\n"
|
|
"to be the server.\n"
|
|
"The new key fingerprint is:\n"
|
|
"%s\n"
|
|
"Connection abandoned.\n";
|
|
static const char wrongmsg[] =
|
|
"WARNING - POTENTIAL SECURITY BREACH!\n"
|
|
"The server's host key does not match the one PuTTY has\n"
|
|
"cached in the registry. This means that either the\n"
|
|
"server administrator has changed the host key, or you\n"
|
|
"have actually connected to another computer pretending\n"
|
|
"to be the server.\n"
|
|
"The new key fingerprint is:\n"
|
|
"%s\n"
|
|
"If you were expecting this change and trust the new key,\n"
|
|
"enter \"y\" to update PuTTY's cache and continue connecting.\n"
|
|
"If you want to carry on connecting but without updating\n"
|
|
"the cache, enter \"n\".\n"
|
|
"If you want to abandon the connection completely, press\n"
|
|
"Return to cancel. Pressing Return is the ONLY guaranteed\n"
|
|
"safe choice.\n"
|
|
"Update cached key? (y/n, Return cancels connection) ";
|
|
|
|
static const char abandoned[] = "Connection abandoned.\n";
|
|
|
|
char line[32];
|
|
|
|
/*
|
|
* Verify the key against the registry.
|
|
*/
|
|
ret = verify_host_key(host, port, keytype, keystr);
|
|
|
|
if (ret == 0) /* success - key matched OK */
|
|
return;
|
|
|
|
if (ret == 2) { /* key was different */
|
|
if (console_batch_mode) {
|
|
fprintf(stderr, wrongmsg_batch, fingerprint);
|
|
cleanup_exit(1);
|
|
}
|
|
fprintf(stderr, wrongmsg, fingerprint);
|
|
fflush(stderr);
|
|
}
|
|
if (ret == 1) { /* key was absent */
|
|
if (console_batch_mode) {
|
|
fprintf(stderr, absentmsg_batch, fingerprint);
|
|
cleanup_exit(1);
|
|
}
|
|
fprintf(stderr, absentmsg, fingerprint);
|
|
fflush(stderr);
|
|
}
|
|
|
|
hin = GetStdHandle(STD_INPUT_HANDLE);
|
|
GetConsoleMode(hin, &savemode);
|
|
SetConsoleMode(hin, (savemode | ENABLE_ECHO_INPUT |
|
|
ENABLE_PROCESSED_INPUT | ENABLE_LINE_INPUT));
|
|
ReadFile(hin, line, sizeof(line) - 1, &i, NULL);
|
|
SetConsoleMode(hin, savemode);
|
|
|
|
if (line[0] != '\0' && line[0] != '\r' && line[0] != '\n') {
|
|
if (line[0] == 'y' || line[0] == 'Y')
|
|
store_host_key(host, port, keytype, keystr);
|
|
} else {
|
|
fprintf(stderr, abandoned);
|
|
cleanup_exit(0);
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Ask whether the selected cipher is acceptable (since it was
|
|
* below the configured 'warn' threshold).
|
|
* cs: 0 = both ways, 1 = client->server, 2 = server->client
|
|
*/
|
|
void askcipher(void *frontend, char *ciphername, int cs)
|
|
{
|
|
HANDLE hin;
|
|
DWORD savemode, i;
|
|
|
|
static const char msg[] =
|
|
"The first %scipher supported by the server is\n"
|
|
"%s, which is below the configured warning threshold.\n"
|
|
"Continue with connection? (y/n) ";
|
|
static const char msg_batch[] =
|
|
"The first %scipher supported by the server is\n"
|
|
"%s, which is below the configured warning threshold.\n"
|
|
"Connection abandoned.\n";
|
|
static const char abandoned[] = "Connection abandoned.\n";
|
|
|
|
char line[32];
|
|
|
|
if (console_batch_mode) {
|
|
fprintf(stderr, msg_batch,
|
|
(cs == 0) ? "" :
|
|
(cs == 1) ? "client-to-server " : "server-to-client ",
|
|
ciphername);
|
|
cleanup_exit(1);
|
|
}
|
|
|
|
fprintf(stderr, msg,
|
|
(cs == 0) ? "" :
|
|
(cs == 1) ? "client-to-server " : "server-to-client ",
|
|
ciphername);
|
|
fflush(stderr);
|
|
|
|
hin = GetStdHandle(STD_INPUT_HANDLE);
|
|
GetConsoleMode(hin, &savemode);
|
|
SetConsoleMode(hin, (savemode | ENABLE_ECHO_INPUT |
|
|
ENABLE_PROCESSED_INPUT | ENABLE_LINE_INPUT));
|
|
ReadFile(hin, line, sizeof(line) - 1, &i, NULL);
|
|
SetConsoleMode(hin, savemode);
|
|
|
|
if (line[0] == 'y' || line[0] == 'Y') {
|
|
return;
|
|
} else {
|
|
fprintf(stderr, abandoned);
|
|
cleanup_exit(0);
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Ask whether to wipe a session log file before writing to it.
|
|
* Returns 2 for wipe, 1 for append, 0 for cancel (don't log).
|
|
*/
|
|
int askappend(void *frontend, Filename filename)
|
|
{
|
|
HANDLE hin;
|
|
DWORD savemode, i;
|
|
|
|
static const char msgtemplate[] =
|
|
"The session log file \"%.*s\" already exists.\n"
|
|
"You can overwrite it with a new session log,\n"
|
|
"append your session log to the end of it,\n"
|
|
"or disable session logging for this session.\n"
|
|
"Enter \"y\" to wipe the file, \"n\" to append to it,\n"
|
|
"or just press Return to disable logging.\n"
|
|
"Wipe the log file? (y/n, Return cancels logging) ";
|
|
|
|
static const char msgtemplate_batch[] =
|
|
"The session log file \"%.*s\" already exists.\n"
|
|
"Logging will not be enabled.\n";
|
|
|
|
char line[32];
|
|
|
|
if (console_batch_mode) {
|
|
fprintf(stderr, msgtemplate_batch, FILENAME_MAX, filename.path);
|
|
fflush(stderr);
|
|
return 0;
|
|
}
|
|
fprintf(stderr, msgtemplate, FILENAME_MAX, filename.path);
|
|
fflush(stderr);
|
|
|
|
hin = GetStdHandle(STD_INPUT_HANDLE);
|
|
GetConsoleMode(hin, &savemode);
|
|
SetConsoleMode(hin, (savemode | ENABLE_ECHO_INPUT |
|
|
ENABLE_PROCESSED_INPUT | ENABLE_LINE_INPUT));
|
|
ReadFile(hin, line, sizeof(line) - 1, &i, NULL);
|
|
SetConsoleMode(hin, savemode);
|
|
|
|
if (line[0] == 'y' || line[0] == 'Y')
|
|
return 2;
|
|
else if (line[0] == 'n' || line[0] == 'N')
|
|
return 1;
|
|
else
|
|
return 0;
|
|
}
|
|
|
|
/*
|
|
* Warn about the obsolescent key file format.
|
|
*
|
|
* Uniquely among these functions, this one does _not_ expect a
|
|
* frontend handle. This means that if PuTTY is ported to a
|
|
* platform which requires frontend handles, this function will be
|
|
* an anomaly. Fortunately, the problem it addresses will not have
|
|
* been present on that platform, so it can plausibly be
|
|
* implemented as an empty function.
|
|
*/
|
|
void old_keyfile_warning(void)
|
|
{
|
|
static const char message[] =
|
|
"You are loading an SSH 2 private key which has an\n"
|
|
"old version of the file format. This means your key\n"
|
|
"file is not fully tamperproof. Future versions of\n"
|
|
"PuTTY may stop supporting this private key format,\n"
|
|
"so we recommend you convert your key to the new\n"
|
|
"format.\n"
|
|
"\n"
|
|
"Once the key is loaded into PuTTYgen, you can perform\n"
|
|
"this conversion simply by saving it again.\n";
|
|
|
|
fputs(message, stderr);
|
|
}
|
|
|
|
void console_provide_logctx(void *logctx)
|
|
{
|
|
console_logctx = logctx;
|
|
}
|
|
|
|
void logevent(void *frontend, char *string)
|
|
{
|
|
if (console_logctx)
|
|
log_eventlog(console_logctx, string);
|
|
}
|
|
|
|
int console_get_line(const char *prompt, char *str,
|
|
int maxlen, int is_pw)
|
|
{
|
|
HANDLE hin, hout;
|
|
DWORD savemode, newmode, i;
|
|
|
|
if (console_batch_mode) {
|
|
if (maxlen > 0)
|
|
str[0] = '\0';
|
|
} else {
|
|
hin = GetStdHandle(STD_INPUT_HANDLE);
|
|
hout = GetStdHandle(STD_OUTPUT_HANDLE);
|
|
if (hin == INVALID_HANDLE_VALUE || hout == INVALID_HANDLE_VALUE) {
|
|
fprintf(stderr, "Cannot get standard input/output handles\n");
|
|
cleanup_exit(1);
|
|
}
|
|
|
|
GetConsoleMode(hin, &savemode);
|
|
newmode = savemode | ENABLE_PROCESSED_INPUT | ENABLE_LINE_INPUT;
|
|
if (is_pw)
|
|
newmode &= ~ENABLE_ECHO_INPUT;
|
|
else
|
|
newmode |= ENABLE_ECHO_INPUT;
|
|
SetConsoleMode(hin, newmode);
|
|
|
|
WriteFile(hout, prompt, strlen(prompt), &i, NULL);
|
|
ReadFile(hin, str, maxlen - 1, &i, NULL);
|
|
|
|
SetConsoleMode(hin, savemode);
|
|
|
|
if ((int) i > maxlen)
|
|
i = maxlen - 1;
|
|
else
|
|
i = i - 2;
|
|
str[i] = '\0';
|
|
|
|
if (is_pw)
|
|
WriteFile(hout, "\r\n", 2, &i, NULL);
|
|
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
void frontend_keypress(void *handle)
|
|
{
|
|
/*
|
|
* This is nothing but a stub, in console code.
|
|
*/
|
|
return;
|
|
}
|