/[rdesktop]/jpeg/rdesktop/trunk/licence.c
This is repository of my old source code which isn't updated any more. Go to git.rot13.org for current projects!
ViewVC logotype

Diff of /jpeg/rdesktop/trunk/licence.c

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 317 by astrand, Mon Feb 10 12:56:34 2003 UTC revision 1374 by jsorg71, Tue Jan 9 07:24:44 2007 UTC
# Line 1  Line 1 
1  /*  /* -*- c-basic-offset: 8 -*-
2     rdesktop: A Remote Desktop Protocol client.     rdesktop: A Remote Desktop Protocol client.
3     RDP licensing negotiation     RDP licensing negotiation
4     Copyright (C) Matthew Chapman 1999-2002     Copyright (C) Matthew Chapman 1999-2007
5      
6     This program is free software; you can redistribute it and/or modify     This program is free software; you can redistribute it and/or modify
7     it under the terms of the GNU General Public License as published by     it under the terms of the GNU General Public License as published by
8     the Free Software Foundation; either version 2 of the License, or     the Free Software Foundation; either version 2 of the License, or
# Line 12  Line 12 
12     but WITHOUT ANY WARRANTY; without even the implied warranty of     but WITHOUT ANY WARRANTY; without even the implied warranty of
13     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14     GNU General Public License for more details.     GNU General Public License for more details.
15      
16     You should have received a copy of the GNU General Public License     You should have received a copy of the GNU General Public License
17     along with this program; if not, write to the Free Software     along with this program; if not, write to the Free Software
18     Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.     Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
19  */  */
20    
 #include <sys/types.h>  
 #include <sys/stat.h>  
 #include <unistd.h>  
 #include <fcntl.h>  
 #include <errno.h>  
21  #include "rdesktop.h"  #include "rdesktop.h"
22    #include "ssl.h"
23    
24  #ifdef WITH_OPENSSL  extern char g_username[64];
25  #include <openssl/rc4.h>  extern char g_hostname[16];
 #else  
 #include "crypto/rc4.h"  
 #endif  
   
 extern char username[16];  
 extern char hostname[16];  
   
 static uint8 licence_key[16];  
 static uint8 licence_sign_key[16];  
   
 BOOL licence_issued = False;  
   
   
 int  
 load_licence(unsigned char **data)  
 {  
         char *path;  
         char *home;  
         struct stat st;  
         int fd;  
   
         home = getenv("HOME");  
         if (home == NULL)  
                 return -1;  
   
         path = xmalloc(strlen(home) + strlen(hostname) + 20);  
         sprintf(path, "%s/.rdesktop/licence.%s", home, hostname);  
   
         fd = open(path, O_RDONLY);  
         if (fd == -1)  
                 return -1;  
   
         if (fstat(fd, &st))  
                 return -1;  
   
         *data = xmalloc(st.st_size);  
         return read(fd, *data, st.st_size);  
 }  
   
 void  
 save_licence(unsigned char *data, int length)  
 {  
         char *fpath;            /* file path for licence */  
         char *fname, *fnamewrk; /* file name for licence .inkl path. */  
         char *home;  
         uint32 y;  
         struct flock fnfl;  
         int fnfd, fnwrkfd, i, wlen;  
         struct stream s, *s_ptr;  
         uint32 len;  
   
         /* Construct a stream, so that we can use macros to extract the  
          * licence.  
          */  
         s_ptr = &s;  
         s_ptr->p = data;  
         /* Skip first two bytes */  
         in_uint16(s_ptr, len);  
   
         /* Skip three strings */  
         for (i = 0; i < 3; i++)  
         {  
                 in_uint32(s_ptr, len);  
                 s_ptr->p += len;  
                 /* Make sure that we won't be past the end of data after  
                  * reading the next length value  
                  */  
                 if ((s_ptr->p) + 4 > data + length)  
                 {  
                         printf("Error in parsing licence key.\n");  
                         printf("Strings %d end value %x > supplied length (%x)\n", i,  
                                (unsigned int)s_ptr->p,  
                                (unsigned int)data + length);  
                         return;  
                 }  
         }  
         in_uint32(s_ptr, len);  
         if (s_ptr->p + len > data + length)  
         {  
                 printf("Error in parsing licence key.\n");  
                 printf("End of licence %x > supplied length (%x)\n",  
                        (unsigned int)s_ptr->p + len,  
                        (unsigned int)data + length);  
                 return;  
         }  
   
         home = getenv("HOME");  
         if (home == NULL)  
                 return;  
26    
27          /* set and create the directory -- if it doesn't exist. */  static uint8 g_licence_key[16];
28          fpath = xmalloc(strlen(home) + 11);  static uint8 g_licence_sign_key[16];
         STRNCPY(fpath, home, strlen(home) + 1);  
29    
30          sprintf(fpath, "%s/.rdesktop", fpath);  RD_BOOL g_licence_issued = False;
         if (mkdir(fpath, 0700) == -1 && errno != EEXIST)  
         {  
                 perror("mkdir");  
                 exit(1);  
         }  
   
         /* set the real licence filename, and put a write lock on it. */  
         fname = xmalloc(strlen(fpath) + strlen(hostname) + 10);  
         sprintf(fname, "%s/licence.%s", fpath, hostname);  
         fnfd = open(fname, O_RDONLY);  
         if (fnfd != -1)  
         {  
                 fnfl.l_type = F_WRLCK;  
                 fnfl.l_whence = SEEK_SET;  
                 fnfl.l_start = 0;  
                 fnfl.l_len = 1;  
                 fcntl(fnfd, F_SETLK, &fnfl);  
         }  
   
         /* create a temporary licence file */  
         fnamewrk = xmalloc(strlen(fname) + 12);  
         for (y = 0;; y++)  
         {  
                 sprintf(fnamewrk, "%s.%lu", fname, (long unsigned int)y);  
                 fnwrkfd = open(fnamewrk, O_WRONLY | O_CREAT | O_EXCL, 0600);  
                 if (fnwrkfd == -1)  
                 {  
                         if (errno == EINTR || errno == EEXIST)  
                                 continue;  
                         perror("create");  
                         exit(1);  
                 }  
                 break;  
         }  
         /* write to the licence file */  
         for (y = 0; y < len;)  
         {  
                 do  
                 {  
                         wlen = write(fnwrkfd, s_ptr->p + y, len - y);  
                 }  
                 while (wlen == -1 && errno == EINTR);  
                 if (wlen < 1)  
                 {  
                         perror("write");  
                         unlink(fnamewrk);  
                         exit(1);  
                 }  
                 y += wlen;  
         }  
   
         /* close the file and rename it to fname */  
         if (close(fnwrkfd) == -1)  
         {  
                 perror("close");  
                 unlink(fnamewrk);  
                 exit(1);  
         }  
         if (rename(fnamewrk, fname) == -1)  
         {  
                 perror("rename");  
                 unlink(fnamewrk);  
                 exit(1);  
         }  
         /* close the file lock on fname */  
         if (fnfd != -1)  
         {  
                 fnfl.l_type = F_UNLCK;  
                 fnfl.l_whence = SEEK_SET;  
                 fnfl.l_start = 0;  
                 fnfl.l_len = 1;  
                 fcntl(fnfd, F_SETLK, &fnfl);  
                 close(fnfd);  
         }  
   
 }  
31    
32  /* Generate a session key and RC4 keys, given client and server randoms */  /* Generate a session key and RC4 keys, given client and server randoms */
33  static void  static void
34  licence_generate_keys(uint8 * client_key, uint8 * server_key, uint8 * client_rsa)  licence_generate_keys(uint8 * client_random, uint8 * server_random, uint8 * pre_master_secret)
35  {  {
36          uint8 session_key[48];          uint8 master_secret[48];
37          uint8 temp_hash[48];          uint8 key_block[48];
38    
39          /* Generate session key - two rounds of sec_hash_48 */          /* Generate master secret and then key material */
40          sec_hash_48(temp_hash, client_rsa, client_key, server_key, 65);          sec_hash_48(master_secret, pre_master_secret, client_random, server_random, 'A');
41          sec_hash_48(session_key, temp_hash, server_key, client_key, 65);          sec_hash_48(key_block, master_secret, server_random, client_random, 'A');
42    
43          /* Store first 16 bytes of session key, for generating signatures */          /* Store first 16 bytes of session key as MAC secret */
44          memcpy(licence_sign_key, session_key, 16);          memcpy(g_licence_sign_key, key_block, 16);
45    
46          /* Generate RC4 key */          /* Generate RC4 key from next 16 bytes */
47          sec_hash_16(licence_key, &session_key[16], client_key, server_key);          sec_hash_16(g_licence_key, &key_block[16], client_random, server_random);
48  }  }
49    
50  static void  static void
51  licence_generate_hwid(uint8 * hwid)  licence_generate_hwid(uint8 * hwid)
52  {  {
53          buf_out_uint32(hwid, 2);          buf_out_uint32(hwid, 2);
54          strncpy((char *) (hwid + 4), hostname, LICENCE_HWID_SIZE - 4);          strncpy((char *) (hwid + 4), g_hostname, LICENCE_HWID_SIZE - 4);
55  }  }
56    
57  /* Present an existing licence to the server */  /* Present an existing licence to the server */
# Line 237  licence_present(uint8 * client_random, u Line 67  licence_present(uint8 * client_random, u
67    
68          s = sec_init(sec_flags, length + 4);          s = sec_init(sec_flags, length + 4);
69    
70          out_uint16_le(s, LICENCE_TAG_PRESENT);          out_uint8(s, LICENCE_TAG_PRESENT);
71            out_uint8(s, 2);        /* version */
72          out_uint16_le(s, length);          out_uint16_le(s, length);
73    
74          out_uint32_le(s, 1);          out_uint32_le(s, 1);
# Line 276  licence_send_request(uint8 * client_rand Line 107  licence_send_request(uint8 * client_rand
107    
108          s = sec_init(sec_flags, length + 2);          s = sec_init(sec_flags, length + 2);
109    
110          out_uint16_le(s, LICENCE_TAG_REQUEST);          out_uint8(s, LICENCE_TAG_REQUEST);
111            out_uint8(s, 2);        /* version */
112          out_uint16_le(s, length);          out_uint16_le(s, length);
113    
114          out_uint32_le(s, 1);          out_uint32_le(s, 1);
# Line 289  licence_send_request(uint8 * client_rand Line 121  licence_send_request(uint8 * client_rand
121          out_uint8p(s, rsa_data, SEC_MODULUS_SIZE);          out_uint8p(s, rsa_data, SEC_MODULUS_SIZE);
122          out_uint8s(s, SEC_PADDING_SIZE);          out_uint8s(s, SEC_PADDING_SIZE);
123    
124          out_uint16(s, LICENCE_TAG_USER);          out_uint16_le(s, LICENCE_TAG_USER);
125          out_uint16(s, userlen);          out_uint16_le(s, userlen);
126          out_uint8p(s, user, userlen);          out_uint8p(s, user, userlen);
127    
128          out_uint16(s, LICENCE_TAG_HOST);          out_uint16_le(s, LICENCE_TAG_HOST);
129          out_uint16(s, hostlen);          out_uint16_le(s, hostlen);
130          out_uint8p(s, host, hostlen);          out_uint8p(s, host, hostlen);
131    
132          s_mark_end(s);          s_mark_end(s);
# Line 311  licence_process_demand(STREAM s) Line 143  licence_process_demand(STREAM s)
143          uint8 hwid[LICENCE_HWID_SIZE];          uint8 hwid[LICENCE_HWID_SIZE];
144          uint8 *licence_data;          uint8 *licence_data;
145          int licence_size;          int licence_size;
146          RC4_KEY crypt_key;          SSL_RC4 crypt_key;
147    
148          /* Retrieve the server random from the incoming packet */          /* Retrieve the server random from the incoming packet */
149          in_uint8p(s, server_random, SEC_RANDOM_SIZE);          in_uint8p(s, server_random, SEC_RANDOM_SIZE);
# Line 322  licence_process_demand(STREAM s) Line 154  licence_process_demand(STREAM s)
154          licence_generate_keys(null_data, server_random, null_data);          licence_generate_keys(null_data, server_random, null_data);
155    
156          licence_size = load_licence(&licence_data);          licence_size = load_licence(&licence_data);
157          if (licence_size != -1)          if (licence_size > 0)
158          {          {
159                  /* Generate a signature for the HWID buffer */                  /* Generate a signature for the HWID buffer */
160                  licence_generate_hwid(hwid);                  licence_generate_hwid(hwid);
161                  sec_sign(signature, 16, licence_sign_key, 16, hwid, sizeof(hwid));                  sec_sign(signature, 16, g_licence_sign_key, 16, hwid, sizeof(hwid));
162    
163                  /* Now encrypt the HWID */                  /* Now encrypt the HWID */
164                  RC4_set_key(&crypt_key, 16, licence_key);                  ssl_rc4_set_key(&crypt_key, g_licence_key, 16);
165                  RC4(&crypt_key, sizeof(hwid), hwid, hwid);                  ssl_rc4_crypt(&crypt_key, hwid, hwid, sizeof(hwid));
166    
167                  licence_present(null_data, null_data, licence_data, licence_size, hwid, signature);                  licence_present(null_data, null_data, licence_data, licence_size, hwid, signature);
168                  xfree(licence_data);                  xfree(licence_data);
169                  return;                  return;
170          }          }
171    
172          licence_send_request(null_data, null_data, username, hostname);          licence_send_request(null_data, null_data, g_username, g_hostname);
173  }  }
174    
175  /* Send an authentication response packet */  /* Send an authentication response packet */
# Line 350  licence_send_authresp(uint8 * token, uin Line 182  licence_send_authresp(uint8 * token, uin
182    
183          s = sec_init(sec_flags, length + 2);          s = sec_init(sec_flags, length + 2);
184    
185          out_uint16_le(s, LICENCE_TAG_AUTHRESP);          out_uint8(s, LICENCE_TAG_AUTHRESP);
186            out_uint8(s, 2);        /* version */
187          out_uint16_le(s, length);          out_uint16_le(s, length);
188    
189          out_uint16_le(s, 1);          out_uint16_le(s, 1);
# Line 368  licence_send_authresp(uint8 * token, uin Line 201  licence_send_authresp(uint8 * token, uin
201  }  }
202    
203  /* Parse an authentication request packet */  /* Parse an authentication request packet */
204  static BOOL  static RD_BOOL
205  licence_parse_authreq(STREAM s, uint8 ** token, uint8 ** signature)  licence_parse_authreq(STREAM s, uint8 ** token, uint8 ** signature)
206  {  {
207          uint16 tokenlen;          uint16 tokenlen;
# Line 392  licence_parse_authreq(STREAM s, uint8 ** Line 225  licence_parse_authreq(STREAM s, uint8 **
225  static void  static void
226  licence_process_authreq(STREAM s)  licence_process_authreq(STREAM s)
227  {  {
228          uint8 *in_token, *in_sig;          uint8 *in_token = NULL, *in_sig;
229          uint8 out_token[LICENCE_TOKEN_SIZE], decrypt_token[LICENCE_TOKEN_SIZE];          uint8 out_token[LICENCE_TOKEN_SIZE], decrypt_token[LICENCE_TOKEN_SIZE];
230          uint8 hwid[LICENCE_HWID_SIZE], crypt_hwid[LICENCE_HWID_SIZE];          uint8 hwid[LICENCE_HWID_SIZE], crypt_hwid[LICENCE_HWID_SIZE];
231          uint8 sealed_buffer[LICENCE_TOKEN_SIZE + LICENCE_HWID_SIZE];          uint8 sealed_buffer[LICENCE_TOKEN_SIZE + LICENCE_HWID_SIZE];
232          uint8 out_sig[LICENCE_SIGNATURE_SIZE];          uint8 out_sig[LICENCE_SIGNATURE_SIZE];
233          RC4_KEY crypt_key;          SSL_RC4 crypt_key;
234    
235          /* Parse incoming packet and save the encrypted token */          /* Parse incoming packet and save the encrypted token */
236          licence_parse_authreq(s, &in_token, &in_sig);          licence_parse_authreq(s, &in_token, &in_sig);
237          memcpy(out_token, in_token, LICENCE_TOKEN_SIZE);          memcpy(out_token, in_token, LICENCE_TOKEN_SIZE);
238    
239          /* Decrypt the token. It should read TEST in Unicode. */          /* Decrypt the token. It should read TEST in Unicode. */
240          RC4_set_key(&crypt_key, 16, licence_key);          ssl_rc4_set_key(&crypt_key, g_licence_key, 16);
241          RC4(&crypt_key, LICENCE_TOKEN_SIZE, in_token, decrypt_token);          ssl_rc4_crypt(&crypt_key, in_token, decrypt_token, LICENCE_TOKEN_SIZE);
242    
243          /* Generate a signature for a buffer of token and HWID */          /* Generate a signature for a buffer of token and HWID */
244          licence_generate_hwid(hwid);          licence_generate_hwid(hwid);
245          memcpy(sealed_buffer, decrypt_token, LICENCE_TOKEN_SIZE);          memcpy(sealed_buffer, decrypt_token, LICENCE_TOKEN_SIZE);
246          memcpy(sealed_buffer + LICENCE_TOKEN_SIZE, hwid, LICENCE_HWID_SIZE);          memcpy(sealed_buffer + LICENCE_TOKEN_SIZE, hwid, LICENCE_HWID_SIZE);
247          sec_sign(out_sig, 16, licence_sign_key, 16, sealed_buffer, sizeof(sealed_buffer));          sec_sign(out_sig, 16, g_licence_sign_key, 16, sealed_buffer, sizeof(sealed_buffer));
248    
249          /* Now encrypt the HWID */          /* Now encrypt the HWID */
250          RC4_set_key(&crypt_key, 16, licence_key);          ssl_rc4_set_key(&crypt_key, g_licence_key, 16);
251          RC4(&crypt_key, LICENCE_HWID_SIZE, hwid, crypt_hwid);          ssl_rc4_crypt(&crypt_key, hwid, crypt_hwid, LICENCE_HWID_SIZE);
252    
253          licence_send_authresp(out_token, crypt_hwid, out_sig);          licence_send_authresp(out_token, crypt_hwid, out_sig);
254  }  }
# Line 424  licence_process_authreq(STREAM s) Line 257  licence_process_authreq(STREAM s)
257  static void  static void
258  licence_process_issue(STREAM s)  licence_process_issue(STREAM s)
259  {  {
260          RC4_KEY crypt_key;          SSL_RC4 crypt_key;
261          uint32 length;          uint32 length;
262          uint16 check;          uint16 check;
263            int i;
264    
265          in_uint8s(s, 2);        /* 3d 45 - unknown */          in_uint8s(s, 2);        /* 3d 45 - unknown */
266          in_uint16_le(s, length);          in_uint16_le(s, length);
267          if (!s_check_rem(s, length))          if (!s_check_rem(s, length))
268                  return;                  return;
269    
270          RC4_set_key(&crypt_key, 16, licence_key);          ssl_rc4_set_key(&crypt_key, g_licence_key, 16);
271          RC4(&crypt_key, length, s->p, s->p);          ssl_rc4_crypt(&crypt_key, s->p, s->p, length);
272    
273          in_uint16(s, check);          in_uint16(s, check);
274          if (check != 0)          if (check != 0)
275                  return;                  return;
276    
277          licence_issued = True;          g_licence_issued = True;
278          save_licence(s->p, length - 2);  
279            in_uint8s(s, 2);        /* pad */
280    
281            /* advance to fourth string */
282            length = 0;
283            for (i = 0; i < 4; i++)
284            {
285                    in_uint8s(s, length);
286                    in_uint32_le(s, length);
287                    if (!s_check_rem(s, length))
288                            return;
289            }
290    
291            g_licence_issued = True;
292            save_licence(s->p, length);
293  }  }
294    
295  /* Process a licence packet */  /* Process a licence packet */
296  void  void
297  licence_process(STREAM s)  licence_process(STREAM s)
298  {  {
299          uint16 tag;          uint8 tag;
300    
301          in_uint16_le(s, tag);          in_uint8(s, tag);
302          in_uint8s(s, 2);        /* length */          in_uint8s(s, 3);        /* version, length */
303    
304          switch (tag)          switch (tag)
305          {          {
# Line 468  licence_process(STREAM s) Line 316  licence_process(STREAM s)
316                          break;                          break;
317    
318                  case LICENCE_TAG_REISSUE:                  case LICENCE_TAG_REISSUE:
                         break;  
   
319                  case LICENCE_TAG_RESULT:                  case LICENCE_TAG_RESULT:
320                          break;                          break;
321    
# Line 477  licence_process(STREAM s) Line 323  licence_process(STREAM s)
323                          unimpl("licence tag 0x%x\n", tag);                          unimpl("licence tag 0x%x\n", tag);
324          }          }
325  }  }
   
Legend:
Removed from v.317  
changed lines
  Added in v.1374
  ViewVC Help
Powered by ViewVC 1.1.26