adam@14
|
1 #include <ctype.h>
|
adam@1
|
2 #include <string.h>
|
adam@1
|
3
|
adam@6
|
4 #include <openssl/bio.h>
|
adam@6
|
5 #include <openssl/evp.h>
|
adam@6
|
6 #include <openssl/buffer.h>
|
adam@0
|
7 #include <openssl/sha.h>
|
adam@7
|
8 #include <openssl/hmac.h>
|
adam@8
|
9 #include <openssl/dh.h>
|
adam@0
|
10 #include <curl/curl.h>
|
adam@1
|
11 #include <expat.h>
|
adam@0
|
12
|
adam@26
|
13 #include <pthread.h>
|
adam@26
|
14
|
adam@1
|
15 #include <openid.h>
|
adam@0
|
16
|
adam@3
|
17 #define BUF_MAX 10240
|
adam@3
|
18 #define BUF_INIT 1024
|
adam@3
|
19
|
adam@26
|
20 #define DEFAULT_PRIME "DCF93A0B883972EC0E19989AC5A2CE310E1D37717E8D9571BB7623731866E61EF75A2E27898B057F9891C2E27A639C3F29B60814581CD3B2CA3986D2683705577D45C2E7E52DC81C7A171876E5CEA74B1448BFDFAF18828EFD2519F14E45E3826634AF1949E5B535CC829A483B8A76223E5D490A257F05BDFF16F2FB22C583AB"
|
adam@26
|
21 #define DEFAULT_GENERATOR "2"
|
adam@26
|
22
|
adam@26
|
23 static BIGNUM *default_prime, *default_generator;
|
adam@2
|
24
|
adam@2
|
25 uw_Basis_string uw_OpenidFfi_endpoint(uw_context ctx, uw_OpenidFfi_discovery d) {
|
adam@8
|
26 return d.endpoint;
|
adam@2
|
27 }
|
adam@2
|
28
|
adam@2
|
29 uw_Basis_string uw_OpenidFfi_localId(uw_context ctx, uw_OpenidFfi_discovery d) {
|
adam@8
|
30 return d.localId;
|
adam@2
|
31 }
|
adam@2
|
32
|
adam@26
|
33 static pthread_mutex_t *locks;
|
adam@26
|
34
|
adam@26
|
35 static void locking_function(int mode, int n, const char *file, int line) {
|
adam@26
|
36 if (mode & CRYPTO_LOCK)
|
adam@26
|
37 pthread_mutex_lock(&locks[n]);
|
adam@26
|
38 else
|
adam@26
|
39 pthread_mutex_unlock(&locks[n]);
|
adam@26
|
40 }
|
adam@26
|
41
|
adam@0
|
42 uw_unit uw_OpenidFfi_init(uw_context ctx) {
|
adam@26
|
43 int nl = CRYPTO_num_locks(), i;
|
adam@26
|
44 locks = malloc(sizeof(pthread_mutex_t) * nl);
|
adam@26
|
45 for (i = 0; i < nl; ++i)
|
adam@26
|
46 pthread_mutex_init(&locks[i], NULL);
|
adam@26
|
47
|
adam@26
|
48 CRYPTO_set_locking_callback(locking_function);
|
adam@0
|
49 curl_global_init(CURL_GLOBAL_ALL);
|
adam@0
|
50
|
adam@26
|
51 BN_hex2bn(&default_prime, DEFAULT_PRIME);
|
adam@26
|
52 BN_dec2bn(&default_generator, DEFAULT_GENERATOR);
|
adam@26
|
53
|
adam@0
|
54 return uw_unit_v;
|
adam@0
|
55 }
|
adam@1
|
56
|
adam@1
|
57 static CURL *curl(uw_context ctx) {
|
adam@1
|
58 CURL *r;
|
adam@1
|
59
|
adam@1
|
60 if (!(r = uw_get_global(ctx, "curl"))) {
|
adam@1
|
61 r = curl_easy_init();
|
adam@1
|
62 if (r)
|
adam@1
|
63 uw_set_global(ctx, "curl", r, curl_easy_cleanup);
|
adam@1
|
64 }
|
adam@1
|
65
|
adam@1
|
66 return r;
|
adam@1
|
67 }
|
adam@1
|
68
|
adam@26
|
69 typedef enum { NONE, SERVICE, TYPE, MATCHED, URI } xrds_mode;
|
adam@26
|
70
|
adam@1
|
71 typedef struct {
|
adam@1
|
72 uw_context ctx;
|
adam@8
|
73 uw_OpenidFfi_discovery *d;
|
adam@26
|
74 xrds_mode mode;
|
adam@27
|
75 int cur_priority, max_priority;
|
adam@1
|
76 } endpoint;
|
adam@1
|
77
|
adam@1
|
78 static void XMLCALL startElement(void *userData, const XML_Char *name, const XML_Char **atts) {
|
adam@1
|
79 endpoint *ep = userData;
|
adam@1
|
80
|
adam@26
|
81 if (!strncmp(name, "xrd:", 4))
|
adam@26
|
82 name += 4;
|
adam@26
|
83
|
adam@1
|
84 if (!strcmp(name, "link")) {
|
adam@1
|
85 const XML_Char **attp;
|
adam@1
|
86 int found = 0;
|
adam@1
|
87
|
adam@1
|
88 for (attp = atts; *attp; attp += 2) {
|
adam@1
|
89 if (!strcmp(attp[0], "rel") && !strcmp(attp[1], "openid2.provider")) {
|
adam@1
|
90 found = 1;
|
adam@1
|
91 break;
|
adam@1
|
92 }
|
adam@1
|
93 }
|
adam@1
|
94
|
adam@1
|
95 if (found) {
|
adam@1
|
96 for (attp = atts; *attp; attp += 2) {
|
adam@1
|
97 if (!strcmp(attp[0], "href")) {
|
adam@2
|
98 ep->d->endpoint = uw_strdup(ep->ctx, attp[1]);
|
adam@1
|
99 return;
|
adam@1
|
100 }
|
adam@1
|
101 }
|
adam@1
|
102 }
|
adam@1
|
103 }
|
adam@27
|
104 else if (!strcmp(name, "Service")) {
|
adam@27
|
105 const XML_Char **attp;
|
adam@27
|
106
|
adam@27
|
107 ep->cur_priority = 0;
|
adam@27
|
108 for (attp = atts; *attp; attp += 2)
|
adam@27
|
109 if (!strcmp(attp[0], "priority")) {
|
adam@27
|
110 ep->cur_priority = atoi(attp[1]);
|
adam@27
|
111 break;
|
adam@27
|
112 }
|
adam@27
|
113
|
adam@26
|
114 ep->mode = SERVICE;
|
adam@27
|
115 } else if (!strcmp(name, "Type")) {
|
adam@26
|
116 if (ep->mode == SERVICE)
|
adam@26
|
117 ep->mode = TYPE;
|
adam@26
|
118 }
|
adam@26
|
119 else if (!strcmp(name, "URI")) {
|
adam@26
|
120 if (ep->mode == MATCHED)
|
adam@26
|
121 ep->mode = URI;
|
adam@26
|
122 }
|
adam@26
|
123 }
|
adam@26
|
124
|
adam@26
|
125 static char server[] = "http://specs.openid.net/auth/2.0/server";
|
adam@26
|
126 static char signon[] = "http://specs.openid.net/auth/2.0/signon";
|
adam@26
|
127
|
adam@26
|
128 static void XMLCALL cdata(void *userData, const XML_Char *s, int len) {
|
adam@26
|
129 endpoint *ep = userData;
|
adam@26
|
130
|
adam@26
|
131 switch (ep->mode) {
|
adam@26
|
132 case TYPE:
|
adam@26
|
133 if ((len == sizeof(server)-1 && !memcmp(server, s, sizeof(server)-1))
|
adam@26
|
134 || (len == sizeof(signon)-1 && !memcmp(signon, s, sizeof(signon)-1)))
|
adam@26
|
135 ep->mode = MATCHED;
|
adam@26
|
136 break;
|
adam@26
|
137 case URI:
|
adam@27
|
138 if (ep->cur_priority < ep->max_priority) {
|
adam@27
|
139 ep->d->endpoint = uw_malloc(ep->ctx, len+1);
|
adam@27
|
140 memcpy(ep->d->endpoint, s, len);
|
adam@27
|
141 ep->d->endpoint[len] = 0;
|
adam@27
|
142 ep->max_priority = ep->cur_priority;
|
adam@27
|
143 }
|
adam@26
|
144 break;
|
adam@26
|
145 default:
|
adam@26
|
146 break;
|
adam@26
|
147 }
|
adam@26
|
148 }
|
adam@26
|
149
|
adam@26
|
150 static void XMLCALL endElement(void *userData, const XML_Char *name) {
|
adam@26
|
151 endpoint *ep = userData;
|
adam@26
|
152
|
adam@26
|
153 if (!strncmp(name, "xrd:", 4))
|
adam@26
|
154 name += 4;
|
adam@26
|
155
|
adam@26
|
156 if (!strcmp(name, "Service"))
|
adam@26
|
157 ep->mode = NONE;
|
adam@26
|
158 else if (!strcmp(name, "Type")) {
|
adam@26
|
159 if (ep->mode != MATCHED)
|
adam@26
|
160 ep->mode = SERVICE;
|
adam@26
|
161 }
|
adam@26
|
162 else if (!strcmp(name, "URI"))
|
adam@26
|
163 ep->mode = MATCHED;
|
adam@1
|
164 }
|
adam@1
|
165
|
adam@1
|
166 typedef struct {
|
adam@1
|
167 XML_Parser parser;
|
adam@1
|
168 int any_errors;
|
adam@3
|
169 } curl_discovery_data;
|
adam@1
|
170
|
adam@3
|
171 static size_t write_discovery_data(void *buffer, size_t size, size_t nmemb, void *userp) {
|
adam@3
|
172 curl_discovery_data *d = userp;
|
adam@1
|
173
|
adam@1
|
174 if (!XML_Parse(d->parser, buffer, size * nmemb, 0))
|
adam@1
|
175 d->any_errors = 1;
|
adam@1
|
176
|
adam@1
|
177 return size * nmemb;
|
adam@1
|
178 }
|
adam@1
|
179
|
adam@2
|
180 uw_OpenidFfi_discovery *uw_OpenidFfi_discover(uw_context ctx, uw_Basis_string id) {
|
adam@1
|
181 char *s;
|
adam@1
|
182 CURL *c = curl(ctx);
|
adam@3
|
183 curl_discovery_data cd = {};
|
adam@8
|
184 uw_OpenidFfi_discovery *dy = uw_malloc(ctx, sizeof(uw_OpenidFfi_discovery));
|
adam@27
|
185 endpoint ep = {ctx, dy, NONE, 0, INT_MAX};
|
adam@1
|
186 CURLcode code;
|
adam@27
|
187 struct curl_slist *headers = NULL;
|
adam@1
|
188
|
adam@2
|
189 dy->endpoint = dy->localId = NULL;
|
adam@2
|
190
|
adam@1
|
191 if (!strchr(id, ':')) {
|
adam@1
|
192 id = uw_Basis_strcat(ctx, "http://", id);
|
adam@1
|
193 if ((s = strchr(id, '#')) != NULL)
|
adam@1
|
194 *s = 0;
|
adam@1
|
195 } else if ((s = strchr(id, '#')) != NULL) {
|
adam@1
|
196 char *id2 = uw_malloc(ctx, s - id + 1);
|
adam@1
|
197 memcpy(id2, s, s - id);
|
adam@1
|
198 id2[s - id] = 0;
|
adam@1
|
199 id = id2;
|
adam@1
|
200 }
|
adam@1
|
201
|
adam@1
|
202 cd.parser = XML_ParserCreate(NULL);
|
adam@1
|
203 XML_SetUserData(cd.parser, &ep);
|
adam@1
|
204 uw_push_cleanup(ctx, (void (*)(void *))XML_ParserFree, cd.parser);
|
adam@26
|
205 XML_SetElementHandler(cd.parser, startElement, endElement);
|
adam@26
|
206 XML_SetCharacterDataHandler(cd.parser, cdata);
|
adam@1
|
207
|
adam@26
|
208 curl_easy_reset(c);
|
adam@1
|
209 curl_easy_setopt(c, CURLOPT_URL, id);
|
adam@3
|
210 curl_easy_setopt(c, CURLOPT_WRITEFUNCTION, write_discovery_data);
|
adam@1
|
211 curl_easy_setopt(c, CURLOPT_WRITEDATA, &cd);
|
adam@27
|
212 curl_slist_append(headers, "Accept: application/xrds+xml");
|
adam@27
|
213 uw_push_cleanup(ctx, (void (*)(void *))curl_slist_free_all, headers);
|
adam@27
|
214 curl_easy_setopt(c, CURLOPT_HTTPHEADER, headers);
|
adam@1
|
215
|
adam@1
|
216 code = curl_easy_perform(c);
|
adam@1
|
217 uw_pop_cleanup(ctx);
|
adam@27
|
218 uw_pop_cleanup(ctx);
|
adam@1
|
219
|
adam@8
|
220 if (code || !dy->endpoint)
|
adam@1
|
221 return NULL;
|
adam@8
|
222 else
|
adam@8
|
223 return dy;
|
adam@1
|
224 }
|
adam@3
|
225
|
adam@3
|
226 uw_OpenidFfi_inputs uw_OpenidFfi_createInputs(uw_context ctx) {
|
adam@3
|
227 uw_buffer *r = uw_malloc(ctx, sizeof(uw_buffer));
|
adam@3
|
228 uw_buffer_init(BUF_MAX, r, BUF_INIT);
|
adam@3
|
229 return r;
|
adam@3
|
230 }
|
adam@3
|
231
|
adam@8
|
232 static void postify(uw_OpenidFfi_inputs buf, uw_Basis_string s) {
|
adam@14
|
233 char hex[4];
|
adam@14
|
234
|
adam@8
|
235 for (; *s; ++s) {
|
adam@14
|
236 if (isalnum(*s))
|
adam@14
|
237 uw_buffer_append(buf, s, 1);
|
adam@14
|
238 else {
|
adam@14
|
239 sprintf(hex, "%%%02X", (unsigned char)*s);
|
adam@14
|
240 uw_buffer_append(buf, hex, 3);
|
adam@14
|
241 }
|
adam@8
|
242 }
|
adam@3
|
243 }
|
adam@3
|
244
|
adam@3
|
245 uw_unit uw_OpenidFfi_addInput(uw_context ctx, uw_OpenidFfi_inputs buf, uw_Basis_string key, uw_Basis_string value) {
|
adam@3
|
246 if (uw_buffer_used(buf) > 0)
|
adam@3
|
247 uw_buffer_append(buf, "&", 1);
|
adam@3
|
248
|
adam@14
|
249 uw_buffer_append(buf, key, strlen(key));
|
adam@3
|
250 uw_buffer_append(buf, "=", 1);
|
adam@8
|
251 postify(buf, value);
|
adam@3
|
252
|
adam@3
|
253 return uw_unit_v;
|
adam@3
|
254 }
|
adam@3
|
255
|
adam@3
|
256 uw_Basis_string uw_OpenidFfi_getOutput(uw_context ctx, uw_OpenidFfi_outputs buf, uw_Basis_string key) {
|
adam@3
|
257 char *s = buf->start;
|
adam@3
|
258
|
adam@3
|
259 for (; *s; s = strchr(strchr(s, 0)+1, 0)+1)
|
adam@3
|
260 if (!strcmp(key, s))
|
adam@3
|
261 return strchr(s, 0)+1;
|
adam@3
|
262
|
adam@3
|
263 return NULL;
|
adam@3
|
264 }
|
adam@3
|
265
|
adam@27
|
266 uw_unit uw_OpenidFfi_printOutputs(uw_context ctx, uw_OpenidFfi_outputs buf) {
|
adam@27
|
267 char *s = buf->start;
|
adam@27
|
268
|
adam@27
|
269 for (; *s; s = strchr(strchr(s, 0)+1, 0)+1)
|
adam@27
|
270 fprintf(stderr, "%s => %s\n", s, strchr(s, 0)+1);
|
adam@27
|
271
|
adam@27
|
272 return uw_unit_v;
|
adam@27
|
273 }
|
adam@27
|
274
|
adam@3
|
275 static size_t write_buffer_data(void *buffer, size_t size, size_t nmemb, void *userp) {
|
adam@3
|
276 uw_buffer *buf = userp;
|
adam@3
|
277
|
adam@3
|
278 uw_buffer_append(buf, buffer, size * nmemb);
|
adam@3
|
279
|
adam@3
|
280 return size * nmemb;
|
adam@3
|
281 }
|
adam@3
|
282
|
adam@3
|
283 const char curl_failure[] = "error\0Error fetching URL";
|
adam@3
|
284
|
adam@4
|
285 uw_OpenidFfi_outputs uw_OpenidFfi_direct(uw_context ctx, uw_Basis_string url, uw_OpenidFfi_inputs inps) {
|
adam@3
|
286 uw_buffer *buf = uw_malloc(ctx, sizeof(uw_buffer));
|
adam@3
|
287 CURL *c = curl(ctx);
|
adam@3
|
288 CURLcode code;
|
adam@3
|
289
|
adam@3
|
290 uw_buffer_init(BUF_MAX, buf, BUF_INIT);
|
adam@3
|
291
|
adam@3
|
292 uw_buffer_append(inps, "", 1);
|
adam@3
|
293
|
adam@26
|
294 curl_easy_reset(c);
|
adam@3
|
295 curl_easy_setopt(c, CURLOPT_URL, url);
|
adam@3
|
296 curl_easy_setopt(c, CURLOPT_POSTFIELDS, inps->start);
|
adam@3
|
297 curl_easy_setopt(c, CURLOPT_WRITEFUNCTION, write_buffer_data);
|
adam@3
|
298 curl_easy_setopt(c, CURLOPT_WRITEDATA, buf);
|
adam@3
|
299
|
adam@3
|
300 code = curl_easy_perform(c);
|
adam@3
|
301 uw_buffer_append(buf, "", 1);
|
adam@3
|
302
|
adam@3
|
303 if (code) {
|
adam@3
|
304 uw_buffer_reset(buf);
|
adam@3
|
305 uw_buffer_append(buf, curl_failure, sizeof curl_failure);
|
adam@3
|
306 } else {
|
adam@3
|
307 char *s;
|
adam@3
|
308
|
adam@3
|
309 s = buf->start;
|
adam@3
|
310 while (*s) {
|
adam@3
|
311 char *colon = strchr(s, ':'), *newline;
|
adam@3
|
312
|
adam@3
|
313 if (!colon) {
|
adam@3
|
314 *s = 0;
|
adam@3
|
315 break;
|
adam@3
|
316 }
|
adam@3
|
317
|
adam@7
|
318 *colon = 0;
|
adam@7
|
319
|
adam@3
|
320 newline = strchr(colon+1, '\n');
|
adam@3
|
321
|
adam@7
|
322 if (!newline)
|
adam@3
|
323 break;
|
adam@3
|
324
|
adam@3
|
325 *newline = 0;
|
adam@3
|
326 s = newline+1;
|
adam@3
|
327 }
|
adam@3
|
328 }
|
adam@3
|
329
|
adam@3
|
330 return buf;
|
adam@3
|
331 }
|
adam@4
|
332
|
adam@4
|
333 static uw_Basis_string deurl(uw_context ctx, uw_Basis_string s) {
|
adam@4
|
334 uw_Basis_string r = uw_malloc(ctx, strlen(s)), s2 = r;
|
adam@4
|
335
|
adam@4
|
336 for (; *s; ++s) {
|
adam@4
|
337 if (s[0] == '%' && s[1] && s[2]) {
|
adam@4
|
338 unsigned u;
|
adam@4
|
339
|
adam@4
|
340 sscanf(s+1, "%02x", &u);
|
adam@4
|
341 *s2++ = u;
|
adam@4
|
342 s += 2;
|
adam@4
|
343 } else
|
adam@4
|
344 *s2++ = *s;
|
adam@4
|
345 }
|
adam@4
|
346
|
adam@4
|
347 *s2 = 0;
|
adam@4
|
348 return r;
|
adam@4
|
349 }
|
adam@4
|
350
|
adam@4
|
351 uw_OpenidFfi_outputs uw_OpenidFfi_indirect(uw_context ctx, uw_Basis_string fields) {
|
adam@4
|
352 uw_OpenidFfi_outputs b = malloc(sizeof(uw_buffer));
|
adam@4
|
353
|
adam@4
|
354 uw_buffer_init(BUF_MAX, b, BUF_INIT);
|
adam@4
|
355
|
adam@6
|
356 fields = uw_strdup(ctx, fields);
|
adam@6
|
357
|
adam@4
|
358 while (*fields) {
|
adam@4
|
359 char *equal = strchr(fields, '='), *and, *s;
|
adam@4
|
360
|
adam@4
|
361 if (!equal)
|
adam@4
|
362 break;
|
adam@4
|
363
|
adam@4
|
364 *equal = 0;
|
adam@4
|
365 s = deurl(ctx, fields);
|
adam@4
|
366 uw_buffer_append(b, s, strlen(s));
|
adam@4
|
367 uw_buffer_append(b, "", 1);
|
adam@4
|
368
|
adam@4
|
369 and = strchr(equal+1, '&');
|
adam@4
|
370 if (and) {
|
adam@4
|
371 *and = 0;
|
adam@4
|
372 fields = and+1;
|
adam@4
|
373 } else
|
adam@4
|
374 fields = and = strchr(equal+1, 0);
|
adam@4
|
375 s = deurl(ctx, equal+1);
|
adam@4
|
376 uw_buffer_append(b, s, strlen(s));
|
adam@4
|
377 uw_buffer_append(b, "", 1);
|
adam@4
|
378 }
|
adam@4
|
379
|
adam@4
|
380 uw_buffer_append(b, "", 1);
|
adam@4
|
381 return b;
|
adam@4
|
382 }
|
adam@6
|
383
|
adam@6
|
384 static uw_Basis_string base64(uw_context ctx, unsigned char *input, int length) {
|
adam@6
|
385 BIO *bmem, *b64;
|
adam@6
|
386
|
adam@6
|
387 b64 = BIO_new(BIO_f_base64());
|
adam@7
|
388 BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL);
|
adam@6
|
389 bmem = BIO_new(BIO_s_mem());
|
adam@7
|
390 BIO_push(b64, bmem);
|
adam@6
|
391 BIO_write(b64, input, length);
|
adam@6
|
392 (void)BIO_flush(b64);
|
adam@6
|
393
|
adam@7
|
394 int len = BIO_ctrl_pending(bmem);
|
adam@7
|
395 char *buff = uw_malloc(ctx, len+1);
|
adam@7
|
396 BIO_read(bmem, buff, len);
|
adam@7
|
397 buff[len] = 0;
|
adam@6
|
398
|
adam@6
|
399 BIO_free_all(b64);
|
adam@6
|
400
|
adam@6
|
401 return buff;
|
adam@6
|
402 }
|
adam@6
|
403
|
adam@8
|
404 static int unbase64(unsigned char *input, int length, unsigned char *buffer, int bufferLength)
|
adam@7
|
405 {
|
adam@7
|
406 BIO *b64, *bmem;
|
adam@8
|
407 int n;
|
adam@6
|
408
|
adam@7
|
409 b64 = BIO_new(BIO_f_base64());
|
adam@7
|
410 BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL);
|
adam@7
|
411 bmem = BIO_new_mem_buf(input, length);
|
adam@7
|
412 BIO_push(b64, bmem);
|
adam@8
|
413 n = BIO_read(b64, buffer, bufferLength);
|
adam@6
|
414
|
adam@7
|
415 BIO_free_all(bmem);
|
adam@8
|
416
|
adam@8
|
417 return n;
|
adam@8
|
418 }
|
adam@8
|
419
|
adam@12
|
420 uw_Basis_string uw_OpenidFfi_hmac_sha1(uw_context ctx, uw_Basis_string key, uw_Basis_string data) {
|
adam@8
|
421 unsigned char keyBin[SHA_DIGEST_LENGTH], out[EVP_MAX_MD_SIZE];
|
adam@8
|
422 unsigned outLen;
|
adam@8
|
423
|
adam@8
|
424 unbase64((unsigned char *)key, strlen(key), keyBin, sizeof keyBin);
|
adam@8
|
425
|
adam@8
|
426 HMAC(EVP_sha1(), keyBin, sizeof keyBin, (unsigned char *)data, strlen(data), out, &outLen);
|
adam@8
|
427 return base64(ctx, out, outLen);
|
adam@6
|
428 }
|
adam@7
|
429
|
adam@12
|
430 uw_Basis_string uw_OpenidFfi_hmac_sha256(uw_context ctx, uw_Basis_string key, uw_Basis_string data) {
|
adam@7
|
431 unsigned char keyBin[SHA256_DIGEST_LENGTH], out[EVP_MAX_MD_SIZE];
|
adam@7
|
432 unsigned outLen;
|
adam@7
|
433
|
adam@7
|
434 unbase64((unsigned char *)key, strlen(key), keyBin, sizeof keyBin);
|
adam@7
|
435
|
adam@7
|
436 HMAC(EVP_sha256(), keyBin, sizeof keyBin, (unsigned char *)data, strlen(data), out, &outLen);
|
adam@7
|
437 return base64(ctx, out, outLen);
|
adam@7
|
438 }
|
adam@8
|
439
|
adam@8
|
440 static uw_Basis_string btwoc(uw_context ctx, const BIGNUM *n) {
|
adam@8
|
441 int len = BN_num_bytes(n), i;
|
adam@8
|
442 unsigned char bytes[len+1];
|
adam@8
|
443
|
adam@8
|
444 bytes[0] = 0;
|
adam@8
|
445 BN_bn2bin(n, bytes+1);
|
adam@8
|
446
|
adam@8
|
447 for (i = 1; i <= len; ++i)
|
adam@8
|
448 if (bytes[i]) {
|
adam@8
|
449 if (bytes[i] & 0x80)
|
adam@8
|
450 --i;
|
adam@8
|
451 break;
|
adam@8
|
452 }
|
adam@8
|
453
|
adam@8
|
454 if (i > len)
|
adam@8
|
455 i = len;
|
adam@8
|
456
|
adam@8
|
457 return base64(ctx, bytes+i, len+1-i);
|
adam@8
|
458 }
|
adam@8
|
459
|
adam@8
|
460 static BIGNUM *unbtwoc(uw_context ctx, uw_Basis_string s) {
|
adam@8
|
461 unsigned char bytes[1024];
|
adam@8
|
462 int len;
|
adam@8
|
463
|
adam@8
|
464 len = unbase64((unsigned char *)s, strlen(s), bytes, sizeof bytes);
|
adam@8
|
465 return BN_bin2bn(bytes, len, NULL);
|
adam@8
|
466 }
|
adam@8
|
467
|
adam@8
|
468 uw_Basis_string uw_OpenidFfi_modulus(uw_context ctx, uw_OpenidFfi_dh dh) {
|
adam@8
|
469 return btwoc(ctx, dh->p);
|
adam@8
|
470 }
|
adam@8
|
471
|
adam@8
|
472 uw_Basis_string uw_OpenidFfi_generator(uw_context ctx, uw_OpenidFfi_dh dh) {
|
adam@8
|
473 return btwoc(ctx, dh->g);
|
adam@8
|
474 }
|
adam@8
|
475
|
adam@8
|
476 uw_Basis_string uw_OpenidFfi_public(uw_context ctx, uw_OpenidFfi_dh dh) {
|
adam@8
|
477 return btwoc(ctx, dh->pub_key);
|
adam@8
|
478 }
|
adam@8
|
479
|
adam@8
|
480 static void free_DH(void *data, int will_retry) {
|
adam@8
|
481 DH *dh = data;
|
adam@26
|
482 dh->p = NULL;
|
adam@26
|
483 dh->g = NULL;
|
adam@8
|
484 DH_free(dh);
|
adam@8
|
485 }
|
adam@8
|
486
|
adam@8
|
487 uw_OpenidFfi_dh uw_OpenidFfi_generate(uw_context ctx) {
|
adam@8
|
488 DH *dh = DH_new();
|
adam@8
|
489
|
adam@26
|
490 dh->p = default_prime;
|
adam@26
|
491 dh->g = default_generator;
|
adam@8
|
492 uw_register_transactional(ctx, dh, NULL, NULL, free_DH);
|
adam@8
|
493
|
adam@8
|
494 if (DH_generate_key(dh) != 1)
|
adam@8
|
495 uw_error(ctx, FATAL, "Diffie-Hellman key generation failed");
|
adam@8
|
496
|
adam@8
|
497 return dh;
|
adam@8
|
498 }
|
adam@8
|
499
|
adam@8
|
500 uw_Basis_string uw_OpenidFfi_compute(uw_context ctx, uw_OpenidFfi_dh dh, uw_Basis_string server_pub) {
|
adam@8
|
501 BIGNUM *bn = unbtwoc(ctx, server_pub);
|
adam@12
|
502 unsigned char secret[DH_size(dh)+1], *secretP;
|
adam@8
|
503 int size;
|
adam@8
|
504
|
adam@8
|
505 uw_push_cleanup(ctx, (void (*)(void *))BN_free, bn);
|
adam@8
|
506
|
adam@12
|
507 size = DH_compute_key(secret+1, bn, dh);
|
adam@8
|
508 if (size == -1)
|
adam@8
|
509 uw_error(ctx, FATAL, "Diffie-Hellman key computation failed");
|
adam@8
|
510
|
adam@8
|
511 uw_pop_cleanup(ctx);
|
adam@8
|
512
|
adam@12
|
513 if (size > 0 && (secret[1] & 0x80)) {
|
adam@12
|
514 secret[0] = 0;
|
adam@12
|
515 secretP = secret;
|
adam@12
|
516 ++size;
|
adam@12
|
517 } else
|
adam@12
|
518 secretP = secret+1;
|
adam@12
|
519
|
adam@12
|
520 return base64(ctx, secretP, size);
|
adam@8
|
521 }
|
adam@12
|
522
|
adam@12
|
523 uw_Basis_string uw_OpenidFfi_sha1(uw_context ctx, uw_Basis_string data) {
|
adam@12
|
524 unsigned char dataBin[128], out[EVP_MAX_MD_SIZE];
|
adam@12
|
525 int len;
|
adam@12
|
526
|
adam@12
|
527 len = unbase64((unsigned char *)data, strlen(data), dataBin, sizeof dataBin);
|
adam@12
|
528
|
adam@12
|
529 SHA1(dataBin, len, out);
|
adam@12
|
530 return base64(ctx, out, SHA_DIGEST_LENGTH);
|
adam@12
|
531 }
|
adam@12
|
532
|
adam@12
|
533 uw_Basis_string uw_OpenidFfi_sha256(uw_context ctx, uw_Basis_string data) {
|
adam@12
|
534 unsigned char dataBin[128], out[EVP_MAX_MD_SIZE];
|
adam@12
|
535 int len;
|
adam@12
|
536
|
adam@12
|
537 len = unbase64((unsigned char *)data, strlen(data), dataBin, sizeof dataBin);
|
adam@12
|
538
|
adam@12
|
539 SHA256(dataBin, len, out);
|
adam@12
|
540 return base64(ctx, out, SHA256_DIGEST_LENGTH);
|
adam@12
|
541 }
|
adam@12
|
542
|
adam@12
|
543 uw_Basis_string uw_OpenidFfi_xor(uw_context ctx, uw_Basis_string s1, uw_Basis_string s2) {
|
adam@12
|
544 unsigned char buf1[128], buf2[128], bufO[128];
|
adam@12
|
545 int len1, len2, i;
|
adam@12
|
546
|
adam@12
|
547 len1 = unbase64((unsigned char *)s1, strlen(s1), buf1, sizeof buf1);
|
adam@12
|
548 len2 = unbase64((unsigned char *)s2, strlen(s2), buf2, sizeof buf2);
|
adam@12
|
549
|
adam@12
|
550 for (i = 0; i < len1; ++i)
|
adam@12
|
551 bufO[i] = buf1[i] ^ buf2[i % len2];
|
adam@12
|
552
|
adam@12
|
553 return base64(ctx, bufO, len1);
|
adam@12
|
554 }
|
adam@13
|
555
|
adam@13
|
556 uw_OpenidFfi_inputs uw_OpenidFfi_remode(uw_context ctx, uw_OpenidFfi_outputs out, uw_Basis_string mode) {
|
adam@13
|
557 uw_OpenidFfi_inputs in = uw_OpenidFfi_createInputs(ctx);
|
adam@13
|
558 char *s;
|
adam@13
|
559
|
adam@13
|
560 for (s = out->start; *s; s = strchr(strchr(s, 0)+1, 0)+1)
|
adam@13
|
561 if (!strcmp("openid.mode", s))
|
adam@13
|
562 uw_OpenidFfi_addInput(ctx, in, "openid.mode", mode);
|
adam@13
|
563 else
|
adam@13
|
564 uw_OpenidFfi_addInput(ctx, in, s, strchr(s, 0)+1);
|
adam@13
|
565
|
adam@13
|
566 return in;
|
adam@13
|
567 }
|