curl_gssapi.c 2.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475
  1. /***************************************************************************
  2. * _ _ ____ _
  3. * Project ___| | | | _ \| |
  4. * / __| | | | |_) | |
  5. * | (__| |_| | _ <| |___
  6. * \___|\___/|_| \_\_____|
  7. *
  8. * Copyright (C) 2011 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al.
  9. *
  10. * This software is licensed as described in the file COPYING, which
  11. * you should have received as part of this distribution. The terms
  12. * are also available at http://curl.haxx.se/docs/copyright.html.
  13. *
  14. * You may opt to use, copy, modify, merge, publish, distribute and/or sell
  15. * copies of the Software, and permit persons to whom the Software is
  16. * furnished to do so, under the terms of the COPYING file.
  17. *
  18. * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
  19. * KIND, either express or implied.
  20. *
  21. ***************************************************************************/
  22. #include "curl_setup.h"
  23. #ifdef HAVE_GSSAPI
  24. #include "curl_gssapi.h"
  25. #include "sendf.h"
  26. static const char spnego_oid_bytes[] = "\x2b\x06\x01\x05\x05\x02";
  27. gss_OID_desc Curl_spnego_mech_oid = { 6, &spnego_oid_bytes };
  28. static const char krb5_oid_bytes[] = "\x2a\x86\x48\x86\xf7\x12\x01\x02\x02";
  29. gss_OID_desc Curl_krb5_mech_oid = { 9, &krb5_oid_bytes };
  30. OM_uint32 Curl_gss_init_sec_context(
  31. struct SessionHandle *data,
  32. OM_uint32 *minor_status,
  33. gss_ctx_id_t *context,
  34. gss_name_t target_name,
  35. gss_OID mech_type,
  36. gss_channel_bindings_t input_chan_bindings,
  37. gss_buffer_t input_token,
  38. gss_buffer_t output_token,
  39. OM_uint32 *ret_flags)
  40. {
  41. OM_uint32 req_flags = GSS_C_MUTUAL_FLAG | GSS_C_REPLAY_FLAG;
  42. if(data->set.gssapi_delegation & CURLGSSAPI_DELEGATION_POLICY_FLAG) {
  43. #ifdef GSS_C_DELEG_POLICY_FLAG
  44. req_flags |= GSS_C_DELEG_POLICY_FLAG;
  45. #else
  46. infof(data, "warning: support for CURLGSSAPI_DELEGATION_POLICY_FLAG not "
  47. "compiled in\n");
  48. #endif
  49. }
  50. if(data->set.gssapi_delegation & CURLGSSAPI_DELEGATION_FLAG)
  51. req_flags |= GSS_C_DELEG_FLAG;
  52. return gss_init_sec_context(minor_status,
  53. GSS_C_NO_CREDENTIAL, /* cred_handle */
  54. context,
  55. target_name,
  56. mech_type,
  57. req_flags,
  58. 0, /* time_req */
  59. input_chan_bindings,
  60. input_token,
  61. NULL, /* actual_mech_type */
  62. output_token,
  63. ret_flags,
  64. NULL /* time_rec */);
  65. }
  66. #endif /* HAVE_GSSAPI */