178 lines
3.5 KiB
C
178 lines
3.5 KiB
C
#include "fixed-keys.h"
|
|
#include <assert.h>
|
|
|
|
#define main(ac, av) xxxmain(ac, av)
|
|
#include "../../../ssh-agent.c"
|
|
|
|
void test_one(const uint8_t* s, size_t slen);
|
|
|
|
static int
|
|
devnull_or_die(void)
|
|
{
|
|
int fd;
|
|
|
|
if ((fd = open("/dev/null", O_RDWR)) == -1) {
|
|
error_f("open /dev/null: %s", strerror(errno));
|
|
abort();
|
|
}
|
|
return fd;
|
|
}
|
|
|
|
static struct sshkey *
|
|
pubkey_or_die(const char *s)
|
|
{
|
|
char *tmp, *cp;
|
|
struct sshkey *pubkey;
|
|
int r;
|
|
|
|
tmp = cp = xstrdup(s);
|
|
if ((pubkey = sshkey_new(KEY_UNSPEC)) == NULL)
|
|
abort();
|
|
if ((r = sshkey_read(pubkey, &cp)) != 0) {
|
|
error_fr(r, "parse");
|
|
abort();
|
|
}
|
|
free(tmp);
|
|
return pubkey;
|
|
}
|
|
|
|
static struct sshkey *
|
|
privkey_or_die(const char *s)
|
|
{
|
|
int r;
|
|
struct sshbuf *b;
|
|
struct sshkey *privkey;
|
|
|
|
if ((b = sshbuf_from(s, strlen(s))) == NULL) {
|
|
error_f("sshbuf_from failed");
|
|
abort();
|
|
}
|
|
if ((r = sshkey_parse_private_fileblob(b, "", &privkey, NULL)) != 0) {
|
|
error_fr(r, "parse");
|
|
abort();
|
|
}
|
|
sshbuf_free(b);
|
|
return privkey;
|
|
}
|
|
|
|
static void
|
|
add_key(const char *privkey, const char *certpath)
|
|
{
|
|
Identity *id;
|
|
int r;
|
|
struct sshkey *cert;
|
|
|
|
id = xcalloc(1, sizeof(Identity));
|
|
TAILQ_INSERT_TAIL(&idtab->idlist, id, next);
|
|
idtab->nentries++;
|
|
id->key = privkey_or_die(privkey);
|
|
id->comment = xstrdup("rhododaktulos Eos");
|
|
if (sshkey_is_sk(id->key))
|
|
id->sk_provider = xstrdup("internal");
|
|
|
|
/* Now the cert too */
|
|
id = xcalloc(1, sizeof(Identity));
|
|
TAILQ_INSERT_TAIL(&idtab->idlist, id, next);
|
|
idtab->nentries++;
|
|
id->key = privkey_or_die(privkey);
|
|
cert = pubkey_or_die(certpath);
|
|
if ((r = sshkey_to_certified(id->key)) != 0) {
|
|
error_fr(r, "sshkey_to_certified");
|
|
abort();
|
|
}
|
|
if ((r = sshkey_cert_copy(cert, id->key)) != 0) {
|
|
error_fr(r, "sshkey_cert_copy");
|
|
abort();
|
|
}
|
|
sshkey_free(cert);
|
|
id->comment = xstrdup("outis");
|
|
if (sshkey_is_sk(id->key))
|
|
id->sk_provider = xstrdup("internal");
|
|
}
|
|
|
|
static void
|
|
cleanup_idtab(void)
|
|
{
|
|
Identity *id;
|
|
|
|
if (idtab == NULL) return;
|
|
for (id = TAILQ_FIRST(&idtab->idlist); id;
|
|
id = TAILQ_FIRST(&idtab->idlist)) {
|
|
TAILQ_REMOVE(&idtab->idlist, id, next);
|
|
free_identity(id);
|
|
}
|
|
free(idtab);
|
|
idtab = NULL;
|
|
}
|
|
|
|
static void
|
|
reset_idtab(void)
|
|
{
|
|
cleanup_idtab();
|
|
idtab_init();
|
|
// Load keys.
|
|
add_key(PRIV_RSA, CERT_RSA);
|
|
add_key(PRIV_DSA, CERT_DSA);
|
|
add_key(PRIV_ECDSA, CERT_ECDSA);
|
|
add_key(PRIV_ED25519, CERT_ED25519);
|
|
add_key(PRIV_ECDSA_SK, CERT_ECDSA_SK);
|
|
add_key(PRIV_ED25519_SK, CERT_ED25519_SK);
|
|
}
|
|
|
|
static void
|
|
cleanup_sockettab(void)
|
|
{
|
|
u_int i;
|
|
for (i = 0; i < sockets_alloc; i++) {
|
|
if (sockets[i].type != AUTH_UNUSED)
|
|
close_socket(sockets + i);
|
|
}
|
|
free(sockets);
|
|
sockets = NULL;
|
|
sockets_alloc = 0;
|
|
}
|
|
|
|
static void
|
|
reset_sockettab(int devnull)
|
|
{
|
|
int fd;
|
|
|
|
cleanup_sockettab();
|
|
if ((fd = dup(devnull)) == -1) {
|
|
error_f("dup: %s", strerror(errno));
|
|
abort();
|
|
}
|
|
new_socket(AUTH_CONNECTION, fd);
|
|
assert(sockets[0].type == AUTH_CONNECTION);
|
|
assert(sockets[0].fd == fd);
|
|
}
|
|
|
|
#define MAX_MESSAGES 256
|
|
void
|
|
test_one(const uint8_t* s, size_t slen)
|
|
{
|
|
static int devnull = -1;
|
|
size_t i, olen, nlen;
|
|
|
|
if (devnull == -1) {
|
|
log_init(__progname, SYSLOG_LEVEL_DEBUG3,
|
|
SYSLOG_FACILITY_AUTH, 1);
|
|
devnull = devnull_or_die();
|
|
allowed_providers = xstrdup("");
|
|
setenv("DISPLAY", "", 1); /* ban askpass */
|
|
}
|
|
|
|
reset_idtab();
|
|
reset_sockettab(devnull);
|
|
(void)sshbuf_put(sockets[0].input, s, slen);
|
|
for (i = 0; i < MAX_MESSAGES; i++) {
|
|
olen = sshbuf_len(sockets[0].input);
|
|
process_message(0);
|
|
nlen = sshbuf_len(sockets[0].input);
|
|
if (nlen == 0 || nlen == olen)
|
|
break;
|
|
}
|
|
cleanup_idtab();
|
|
cleanup_sockettab();
|
|
}
|