blob: b5724ef9f182f492123af7867bc0bdfd0b1ef44b [file] [log] [blame]
Thomas Gleixner1a59d1b82019-05-27 08:55:05 +02001// SPDX-License-Identifier: GPL-2.0-or-later
Linus Torvalds1da177e2005-04-16 15:20:36 -07002
Linus Torvalds1da177e2005-04-16 15:20:36 -07003#include <linux/module.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -07004#include <linux/kernel.h>
Hyunchul Lee0475c362021-06-08 23:53:14 +09005#include <linux/oid_registry.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -07006#include "cifsglob.h"
7#include "cifs_debug.h"
8#include "cifsproto.h"
Hyunchul Lee0475c362021-06-08 23:53:14 +09009#include "cifs_spnego_negtokeninit.asn1.h"
Linus Torvalds1da177e2005-04-16 15:20:36 -070010
11int
12decode_negTokenInit(unsigned char *security_blob, int length,
Jeff Layton26efa0b2010-04-24 07:57:49 -040013 struct TCP_Server_Info *server)
Linus Torvalds1da177e2005-04-16 15:20:36 -070014{
Hyunchul Lee0475c362021-06-08 23:53:14 +090015 if (asn1_ber_decoder(&cifs_spnego_negtokeninit_decoder, server,
16 security_blob, length) == 0)
17 return 1;
18 else
Linus Torvalds1da177e2005-04-16 15:20:36 -070019 return 0;
Hyunchul Lee0475c362021-06-08 23:53:14 +090020}
21
22int cifs_gssapi_this_mech(void *context, size_t hdrlen,
23 unsigned char tag, const void *value, size_t vlen)
24{
25 enum OID oid;
26
27 oid = look_up_OID(value, vlen);
28 if (oid != OID_spnego) {
29 char buf[50];
30
31 sprint_oid(value, vlen, buf, sizeof(buf));
32 cifs_dbg(FYI, "Error decoding negTokenInit header: unexpected OID %s\n",
33 buf);
34 return -EBADMSG;
Linus Torvalds1da177e2005-04-16 15:20:36 -070035 }
Hyunchul Lee0475c362021-06-08 23:53:14 +090036 return 0;
37}
Linus Torvalds1da177e2005-04-16 15:20:36 -070038
Hyunchul Lee0475c362021-06-08 23:53:14 +090039int cifs_neg_token_init_mech_type(void *context, size_t hdrlen,
40 unsigned char tag,
41 const void *value, size_t vlen)
42{
43 struct TCP_Server_Info *server = context;
44 enum OID oid;
45
46 oid = look_up_OID(value, vlen);
47 if (oid == OID_mskrb5)
48 server->sec_mskerberos = true;
49 else if (oid == OID_krb5u2u)
50 server->sec_kerberosu2u = true;
51 else if (oid == OID_krb5)
52 server->sec_kerberos = true;
53 else if (oid == OID_ntlmssp)
54 server->sec_ntlmssp = true;
55 else {
56 char buf[50];
57
58 sprint_oid(value, vlen, buf, sizeof(buf));
59 cifs_dbg(FYI, "Decoding negTokenInit: unsupported OID %s\n",
60 buf);
Jeff Layton2f0e58a2008-07-31 21:30:11 +000061 }
Hyunchul Lee0475c362021-06-08 23:53:14 +090062 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -070063}