230 lines
8.3 KiB
Java
230 lines
8.3 KiB
Java
/*
|
|
* Copyright (c) 2005, 2011, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation. Oracle designates this
|
|
* particular file as subject to the "Classpath" exception as provided
|
|
* by Oracle in the LICENSE file that accompanied this code.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
package sun.security.jgss.spnego;
|
|
|
|
import java.io.*;
|
|
import java.util.*;
|
|
import org.ietf.jgss.*;
|
|
import sun.security.jgss.*;
|
|
import sun.security.util.*;
|
|
|
|
/**
|
|
* Implements the SPNEGO NegTokenInit token
|
|
* as specified in RFC 2478
|
|
*
|
|
* NegTokenInit ::= SEQUENCE {
|
|
* mechTypes [0] MechTypeList OPTIONAL,
|
|
* reqFlags [1] ContextFlags OPTIONAL,
|
|
* mechToken [2] OCTET STRING OPTIONAL,
|
|
* mechListMIC [3] OCTET STRING OPTIONAL
|
|
* }
|
|
*
|
|
* MechTypeList ::= SEQUENCE OF MechType
|
|
*
|
|
* MechType::= OBJECT IDENTIFIER
|
|
*
|
|
* ContextFlags ::= BIT STRING {
|
|
* delegFlag (0),
|
|
* mutualFlag (1),
|
|
* replayFlag (2),
|
|
* sequenceFlag (3),
|
|
* anonFlag (4),
|
|
* confFlag (5),
|
|
* integFlag (6)
|
|
* }
|
|
*
|
|
* @author Seema Malkani
|
|
* @since 1.6
|
|
*/
|
|
|
|
public class NegTokenInit extends SpNegoToken {
|
|
|
|
// DER-encoded mechTypes
|
|
private byte[] mechTypes = null;
|
|
private Oid[] mechTypeList = null;
|
|
|
|
private BitArray reqFlags = null;
|
|
private byte[] mechToken = null;
|
|
private byte[] mechListMIC = null;
|
|
|
|
NegTokenInit(byte[] mechTypes, BitArray flags,
|
|
byte[] token, byte[] mechListMIC)
|
|
{
|
|
super(NEG_TOKEN_INIT_ID);
|
|
this.mechTypes = mechTypes;
|
|
this.reqFlags = flags;
|
|
this.mechToken = token;
|
|
this.mechListMIC = mechListMIC;
|
|
}
|
|
|
|
// Used by sun.security.jgss.wrapper.NativeGSSContext
|
|
// to parse SPNEGO tokens
|
|
public NegTokenInit(byte[] in) throws GSSException {
|
|
super(NEG_TOKEN_INIT_ID);
|
|
parseToken(in);
|
|
}
|
|
|
|
final byte[] encode() throws GSSException {
|
|
try {
|
|
// create negInitToken
|
|
DerOutputStream initToken = new DerOutputStream();
|
|
|
|
// DER-encoded mechTypes with CONTEXT 00
|
|
if (mechTypes != null) {
|
|
initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
|
|
true, (byte) 0x00), mechTypes);
|
|
}
|
|
|
|
// write context flags with CONTEXT 01
|
|
if (reqFlags != null) {
|
|
DerOutputStream flags = new DerOutputStream();
|
|
flags.putUnalignedBitString(reqFlags);
|
|
initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
|
|
true, (byte) 0x01), flags);
|
|
}
|
|
|
|
// mechToken with CONTEXT 02
|
|
if (mechToken != null) {
|
|
DerOutputStream dataValue = new DerOutputStream();
|
|
dataValue.putOctetString(mechToken);
|
|
initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
|
|
true, (byte) 0x02), dataValue);
|
|
}
|
|
|
|
// mechListMIC with CONTEXT 03
|
|
if (mechListMIC != null) {
|
|
if (DEBUG) {
|
|
System.out.println("SpNegoToken NegTokenInit: " +
|
|
"sending MechListMIC");
|
|
}
|
|
DerOutputStream mic = new DerOutputStream();
|
|
mic.putOctetString(mechListMIC);
|
|
initToken.write(DerValue.createTag(DerValue.TAG_CONTEXT,
|
|
true, (byte) 0x03), mic);
|
|
}
|
|
|
|
// insert in a SEQUENCE
|
|
DerOutputStream out = new DerOutputStream();
|
|
out.write(DerValue.tag_Sequence, initToken);
|
|
|
|
return out.toByteArray();
|
|
|
|
} catch (IOException e) {
|
|
throw new GSSException(GSSException.DEFECTIVE_TOKEN, -1,
|
|
"Invalid SPNEGO NegTokenInit token : " + e.getMessage());
|
|
}
|
|
}
|
|
|
|
private void parseToken(byte[] in) throws GSSException {
|
|
try {
|
|
DerValue der = new DerValue(in);
|
|
// verify NegotiationToken type token
|
|
if (!der.isContextSpecific((byte) NEG_TOKEN_INIT_ID)) {
|
|
throw new IOException("SPNEGO NegoTokenInit : " +
|
|
"did not have right token type");
|
|
}
|
|
DerValue tmp1 = der.data.getDerValue();
|
|
if (tmp1.tag != DerValue.tag_Sequence) {
|
|
throw new IOException("SPNEGO NegoTokenInit : " +
|
|
"did not have the Sequence tag");
|
|
}
|
|
|
|
// parse various fields if present
|
|
int lastField = -1;
|
|
while (tmp1.data.available() > 0) {
|
|
DerValue tmp2 = tmp1.data.getDerValue();
|
|
if (tmp2.isContextSpecific((byte)0x00)) {
|
|
// get the DER-encoded sequence of mechTypes
|
|
lastField = checkNextField(lastField, 0);
|
|
DerInputStream mValue = tmp2.data;
|
|
mechTypes = mValue.toByteArray();
|
|
|
|
// read all the mechTypes
|
|
DerValue[] mList = mValue.getSequence(0);
|
|
mechTypeList = new Oid[mList.length];
|
|
ObjectIdentifier mech = null;
|
|
for (int i = 0; i < mList.length; i++) {
|
|
mech = mList[i].getOID();
|
|
if (DEBUG) {
|
|
System.out.println("SpNegoToken NegTokenInit: " +
|
|
"reading Mechanism Oid = " + mech);
|
|
}
|
|
mechTypeList[i] = new Oid(mech.toString());
|
|
}
|
|
} else if (tmp2.isContextSpecific((byte)0x01)) {
|
|
lastField = checkNextField(lastField, 1);
|
|
// received reqFlags, skip it
|
|
} else if (tmp2.isContextSpecific((byte)0x02)) {
|
|
lastField = checkNextField(lastField, 2);
|
|
if (DEBUG) {
|
|
System.out.println("SpNegoToken NegTokenInit: " +
|
|
"reading Mech Token");
|
|
}
|
|
mechToken = tmp2.data.getOctetString();
|
|
} else if (tmp2.isContextSpecific((byte)0x03)) {
|
|
lastField = checkNextField(lastField, 3);
|
|
if (!GSSUtil.useMSInterop()) {
|
|
mechListMIC = tmp2.data.getOctetString();
|
|
if (DEBUG) {
|
|
System.out.println("SpNegoToken NegTokenInit: " +
|
|
"MechListMIC Token = " +
|
|
getHexBytes(mechListMIC));
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} catch (IOException e) {
|
|
throw new GSSException(GSSException.DEFECTIVE_TOKEN, -1,
|
|
"Invalid SPNEGO NegTokenInit token : " + e.getMessage());
|
|
}
|
|
}
|
|
|
|
byte[] getMechTypes() {
|
|
return mechTypes;
|
|
}
|
|
|
|
// Used by sun.security.jgss.wrapper.NativeGSSContext
|
|
// to find the mechs in SPNEGO tokens
|
|
public Oid[] getMechTypeList() {
|
|
return mechTypeList;
|
|
}
|
|
|
|
BitArray getReqFlags() {
|
|
return reqFlags;
|
|
}
|
|
|
|
// Used by sun.security.jgss.wrapper.NativeGSSContext
|
|
// to access the mech token portion of SPNEGO tokens
|
|
public byte[] getMechToken() {
|
|
return mechToken;
|
|
}
|
|
|
|
byte[] getMechListMIC() {
|
|
return mechListMIC;
|
|
}
|
|
|
|
}
|