/* $OpenBSD: authfd.h,v 1.36 2006/08/03 03:34:41 deraadt Exp $ */ /* * Author: Tatu Ylonen * Copyright (c) 1995 Tatu Ylonen , Espoo, Finland * All rights reserved * Functions to interface with the SSH_AUTHENTICATION_FD socket. * * As far as I am concerned, the code I have written for this software * can be used freely for any purpose. Any derived versions of this * software must be clearly marked as such, and if the derived work is * incompatible with the protocol description in the RFC file, it must be * called by a name other than "ssh" or "Secure Shell". */ #ifndef AUTHFD_H #define AUTHFD_H /* Messages for the authentication agent connection. */ #define SSH_AGENTC_REQUEST_RSA_IDENTITIES 1 #define SSH_AGENT_RSA_IDENTITIES_ANSWER 2 #define SSH_AGENTC_RSA_CHALLENGE 3 #define SSH_AGENT_RSA_RESPONSE 4 #define SSH_AGENT_FAILURE 5 #define SSH_AGENT_SUCCESS 6 #define SSH_AGENTC_ADD_RSA_IDENTITY 7 #define SSH_AGENTC_REMOVE_RSA_IDENTITY 8 #define SSH_AGENTC_REMOVE_ALL_RSA_IDENTITIES 9 /* private OpenSSH extensions for SSH2 */ #define SSH2_AGENTC_REQUEST_IDENTITIES 11 #define SSH2_AGENT_IDENTITIES_ANSWER 12 #define SSH2_AGENTC_SIGN_REQUEST 13 #define SSH2_AGENT_SIGN_RESPONSE 14 #define SSH2_AGENTC_ADD_IDENTITY 17 #define SSH2_AGENTC_REMOVE_IDENTITY 18 #define SSH2_AGENTC_REMOVE_ALL_IDENTITIES 19 /* smartcard */ #define SSH_AGENTC_ADD_SMARTCARD_KEY 20 #define SSH_AGENTC_REMOVE_SMARTCARD_KEY 21 /* lock/unlock the agent */ #define SSH_AGENTC_LOCK 22 #define SSH_AGENTC_UNLOCK 23 /* add key with constraints */ #define SSH_AGENTC_ADD_RSA_ID_CONSTRAINED 24 #define SSH2_AGENTC_ADD_ID_CONSTRAINED 25 #define SSH_AGENTC_ADD_SMARTCARD_KEY_CONSTRAINED 26 /* experimental request/reply */ #define SSH_AGENTC_AGENT_INFO 50 #define SSH_AGENTC_AGENT_INFO_ANSWER 51 /* key constraints */ #define SSH_AGENT_CONSTRAIN_LIFETIME 1 #define SSH_AGENT_CONSTRAIN_CONFIRM 2 /* experimental key constraints */ #define SSH_AGENT_CONSTRAIN_USE_LIMIT 100 #define SSH_AGENT_CONSTRAIN_FWD_STEP 101 #define SSH_AGENT_CONSTRAIN_FWD_PATH 102 /* extended failure messages */ #define SSH2_AGENT_FAILURE 30 /* additional return code for ssh.com's ssh-agent2 */ #define SSH_COM_AGENT2_SUCCESS 101 #define SSH_COM_AGENT2_FAILURE 102 #define SSH_COM_AGENT2_VERSION_RESPONSE 103 #define SSH_COM_AGENT2_KEY_LIST 104 #define SSH_COM_AGENT2_OPERATION_COMPLETE 105 #define SSH_COM_AGENT2_RANDOM_DATA 106 #define SSH_COM_AGENT2_ALIVE 150 /* additional request code for ssh.com's ssh-agent2 */ #define SSH_COM_AGENT2_REQUEST_VERSION 1 #define SSH_COM_AGENT2_ADD_KEY 202 #define SSH_COM_AGENT2_DELETE_ALL_KEYS 203 #define SSH_COM_AGENT2_LIST_KEYS 204 #define SSH_COM_AGENT2_PRIVATE_KEY_OP 205 #define SSH_COM_AGENT2_FORWARDING_NOTICE 206 #define SSH_COM_AGENT2_DELETE_KEY 207 #define SSH_COM_AGENT2_LOCK 208 #define SSH_COM_AGENT2_UNLOCK 209 #define SSH_COM_AGENT2_PING 212 #define SSH_COM_AGENT2_RANDOM 213 #define SSH_COM_AGENT2_EXTENSION 301 /* additional error code for ssh.com's ssh-agent2 */ #define SSH_AGENT_ERROR_OK 0 /* Operation completed successfully. */ #define SSH_AGENT_ERROR_TIMEOUT 1 /* Operation timed out. */ #define SSH_AGENT_ERROR_KEY_NOT_FOUND 2 /* Private key is not found. */ #define SSH_AGENT_ERROR_DECRYPT_FAILED 3 /* Decryption failed. */ #define SSH_AGENT_ERROR_SIZE_ERROR 4 /* Data size is inappropriate. */ #define SSH_AGENT_ERROR_KEY_NOT_SUITABLE 5 /* Key is not suitable for request. */ #define SSH_AGENT_ERROR_DENIED 6 /* Administratively prohibited. */ #define SSH_AGENT_ERROR_FAILURE 7 /* Unspecific agent error. */ #define SSH_AGENT_ERROR_UNSUPPORTED_OP 8 /* Operation not supported by agent. */ #define SSH_AGENT_ERROR_BUSY 9 /* Busy with another operation. */ /* key constraints for ssh.com's ssh2 */ #define SSH_COM_AGENT2_CONSTRAINT_OLD_TIMEOUT 1 #define SSH_COM_AGENT2_CONSTRAINT_OLD_USE_LIMIT 2 #define SSH_COM_AGENT2_CONSTRAINT_OLD_FORWARDING_STEPS 3 #define SSH_COM_AGENT2_CONSTRAINT_OLD_FORWARDING_PATH 4 #define SSH_COM_AGENT2_CONSTRAINT_OLD_COMPAT 5 #define SSH_COM_AGENT2_CONSTRAINT_OLD_STATUS 6 #define SSH_COM_AGENT2_CONSTRAINT_TIMEOUT 50 #define SSH_COM_AGENT2_CONSTRAINT_USE_LIMIT 51 #define SSH_COM_AGENT2_CONSTRAINT_FORWARDING_STEPS 52 #define SSH_COM_AGENT2_CONSTRAINT_STATUS 53 #define SSH_COM_AGENT2_CONSTRAINT_FORWARDING_PATH 100 #define SSH_COM_AGENT2_CONSTRAINT_SSH1_COMPAT 150 #define SSH_COM_AGENT2_CONSTRAINT_NEED_USER_VERIFICATION 151 #define SSH_COM_AGENT2_VERSION 3 #define SSH_COM_PRIVATE_KEY_MAGIC 0x3f6ff9eb #define SSH_AGENT_REQ_TYPE_OPENSSH 0x00000001 #define SSH_AGENT_REQ_TYPE_SSH_COM 0x00000002 #define SSH_COM_AGENT2 0x00000004 #define SSH_COM_CMD_AVAILABLE 0x00000008 #define SSH_COM_CMD_INVALID 0x00000010 /* * sending Forwarding Notice the name given on the command line, * the HostName specified for the user-supplied name in a configuration file, * canonical hostname or don't send. */ #define SSH_FWD_NOTICE_DONT_SEND 0 #define SSH_FWD_NOTICE_GIVEN_ON_COMMAND_LINE 1 #define SSH_FWD_NOTICE_REAL_HOSTNAME 2 #define SSH_FWD_NOTICE_CANONICAL_HOSTNAME 3 #define SSH_AGENT_OLD_SIGNATURE 0x01 typedef struct { int fd; Buffer identities; int howmany; } AuthenticationConnection; int ssh_agent_present(void); int ssh_get_authentication_socket(void); void ssh_close_authentication_socket(int); AuthenticationConnection *ssh_get_authentication_connection(void); void ssh_close_authentication_connection(AuthenticationConnection *); int ssh_get_num_identities(AuthenticationConnection *, int); Key *ssh_get_first_identity(AuthenticationConnection *, char **, int); Key *ssh_get_next_identity(AuthenticationConnection *, char **, int); int ssh_add_identity(AuthenticationConnection *, Key *, const char *); int ssh_add_identity_constrained(AuthenticationConnection *, Key *, const char *, u_int, u_int, u_int, u_int, const char *); int ssh_remove_identity(AuthenticationConnection *, Key *); int ssh_remove_all_identities(AuthenticationConnection *, int); int ssh_lock_agent(AuthenticationConnection *, int, const char *); int ssh_update_card(AuthenticationConnection *, int, const char *, const char *, u_int, u_int, u_int, u_int, const char *); int ssh_decrypt_challenge(AuthenticationConnection *, Key *, BIGNUM *, u_char[16], u_int, u_char[16]); int ssh_agent_sign(AuthenticationConnection *, Key *, u_char **, u_int *, u_char *, u_int); int ssh_com_ping(AuthenticationConnection *, const char *); int ssh_com_add_key(AuthenticationConnection *, Key *, const char *, u_int, u_int, u_int, u_int, const char *); int ssh_com_agent_sign(AuthenticationConnection *, Key *, u_char **, u_int *, u_char *, u_int); int ssh_request_reply(AuthenticationConnection *, Buffer *, Buffer *); extern int auth_agent_req_type; extern int forward_agent_mode; #endif /* AUTHFD_H */