1178825Sdfr/* 2233294Sstas * Copyright (c) 2003 - 2005 Kungliga Tekniska H��gskolan 3233294Sstas * (Royal Institute of Technology, Stockholm, Sweden). 4233294Sstas * All rights reserved. 5178825Sdfr * 6233294Sstas * Redistribution and use in source and binary forms, with or without 7233294Sstas * modification, are permitted provided that the following conditions 8233294Sstas * are met: 9178825Sdfr * 10233294Sstas * 1. Redistributions of source code must retain the above copyright 11233294Sstas * notice, this list of conditions and the following disclaimer. 12178825Sdfr * 13233294Sstas * 2. Redistributions in binary form must reproduce the above copyright 14233294Sstas * notice, this list of conditions and the following disclaimer in the 15233294Sstas * documentation and/or other materials provided with the distribution. 16178825Sdfr * 17233294Sstas * 3. Neither the name of the Institute nor the names of its contributors 18233294Sstas * may be used to endorse or promote products derived from this software 19233294Sstas * without specific prior written permission. 20178825Sdfr * 21233294Sstas * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22233294Sstas * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23233294Sstas * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24233294Sstas * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25233294Sstas * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26233294Sstas * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27233294Sstas * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28233294Sstas * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29233294Sstas * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30233294Sstas * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31233294Sstas * SUCH DAMAGE. 32178825Sdfr */ 33178825Sdfr 34233294Sstas#include "gsskrb5_locl.h" 35178825Sdfr 36178825Sdfrstatic krb5_error_code 37233294Sstascheck_compat(OM_uint32 *minor_status, 38233294Sstas krb5_context context, krb5_const_principal name, 39233294Sstas const char *option, krb5_boolean *compat, 40178825Sdfr krb5_boolean match_val) 41178825Sdfr{ 42178825Sdfr krb5_error_code ret = 0; 43178825Sdfr char **p, **q; 44178825Sdfr krb5_principal match; 45178825Sdfr 46178825Sdfr 47178825Sdfr p = krb5_config_get_strings(context, NULL, "gssapi", 48178825Sdfr option, NULL); 49178825Sdfr if(p == NULL) 50178825Sdfr return 0; 51178825Sdfr 52178825Sdfr match = NULL; 53178825Sdfr for(q = p; *q; q++) { 54178825Sdfr ret = krb5_parse_name(context, *q, &match); 55178825Sdfr if (ret) 56178825Sdfr break; 57178825Sdfr 58178825Sdfr if (krb5_principal_match(context, name, match)) { 59178825Sdfr *compat = match_val; 60178825Sdfr break; 61178825Sdfr } 62233294Sstas 63178825Sdfr krb5_free_principal(context, match); 64178825Sdfr match = NULL; 65178825Sdfr } 66178825Sdfr if (match) 67178825Sdfr krb5_free_principal(context, match); 68178825Sdfr krb5_config_free_strings(p); 69178825Sdfr 70178825Sdfr if (ret) { 71178825Sdfr if (minor_status) 72178825Sdfr *minor_status = ret; 73178825Sdfr return GSS_S_FAILURE; 74178825Sdfr } 75178825Sdfr 76178825Sdfr return 0; 77178825Sdfr} 78178825Sdfr 79178825Sdfr/* 80178825Sdfr * ctx->ctx_id_mutex is assumed to be locked 81178825Sdfr */ 82178825Sdfr 83178825SdfrOM_uint32 84178825Sdfr_gss_DES3_get_mic_compat(OM_uint32 *minor_status, 85178825Sdfr gsskrb5_ctx ctx, 86178825Sdfr krb5_context context) 87178825Sdfr{ 88178825Sdfr krb5_boolean use_compat = FALSE; 89178825Sdfr OM_uint32 ret; 90178825Sdfr 91178825Sdfr if ((ctx->more_flags & COMPAT_OLD_DES3_SELECTED) == 0) { 92233294Sstas ret = check_compat(minor_status, context, ctx->target, 93178825Sdfr "broken_des3_mic", &use_compat, TRUE); 94178825Sdfr if (ret) 95178825Sdfr return ret; 96233294Sstas ret = check_compat(minor_status, context, ctx->target, 97178825Sdfr "correct_des3_mic", &use_compat, FALSE); 98178825Sdfr if (ret) 99178825Sdfr return ret; 100178825Sdfr 101178825Sdfr if (use_compat) 102178825Sdfr ctx->more_flags |= COMPAT_OLD_DES3; 103178825Sdfr ctx->more_flags |= COMPAT_OLD_DES3_SELECTED; 104178825Sdfr } 105178825Sdfr return 0; 106178825Sdfr} 107178825Sdfr 108178825Sdfr#if 0 109178825SdfrOM_uint32 110178825Sdfrgss_krb5_compat_des3_mic(OM_uint32 *minor_status, gss_ctx_id_t ctx, int on) 111178825Sdfr{ 112178825Sdfr *minor_status = 0; 113178825Sdfr 114178825Sdfr HEIMDAL_MUTEX_lock(&ctx->ctx_id_mutex); 115178825Sdfr if (on) { 116178825Sdfr ctx->more_flags |= COMPAT_OLD_DES3; 117178825Sdfr } else { 118178825Sdfr ctx->more_flags &= ~COMPAT_OLD_DES3; 119178825Sdfr } 120178825Sdfr ctx->more_flags |= COMPAT_OLD_DES3_SELECTED; 121178825Sdfr HEIMDAL_MUTEX_unlock(&ctx->ctx_id_mutex); 122178825Sdfr 123178825Sdfr return 0; 124178825Sdfr} 125178825Sdfr#endif 126