Software `/` code `/` prosody

Annotate

util/sasl/digest-md5.lua @ 2212:7cb6460b18d8

Merge with trunk.

author	Tobias Markmann <tm@ayena.de>
date	Thu, 19 Nov 2009 17:53:52 +0100
parent	2211:6094a4e2b6f3
child	2215:4678aa4567c8

rev	line source
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	1 -- sasl.lua v0.4
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	2 -- Copyright (C) 2008-2009 Tobias Markmann
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	3 --
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	4 -- All rights reserved.
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	5 --
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	6 -- Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	7 --
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	8 -- * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	9 -- * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	10 -- * Neither the name of Tobias Markmann nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	11 --
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	12 -- THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	13
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	14 local tostring = tostring;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	15 local type = type;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	16
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	17 local s_gmatch = string.gmatch;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	18 local s_match = string.match;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	19 local t_concat = table.concat;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	20 local t_insert = table.insert;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	21 local to_byte, to_char = string.byte, string.char;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	22
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	23 local md5 = require "util.hashes".md5;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	24 local log = require "util.logger".init("sasl");
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	25 local generate_uuid = require "util.uuid".generate;
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	26
2206 5f54100bb426 Typo. Tobias Markmann <tm@ayena.de> parents: 2193 diff changeset	27 module "digest-md5"
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	28
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	29 --=========================
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	30 --SASL DIGEST-MD5 according to RFC 2831
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	31 local function digest_response()
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	32
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	33 return response, A1, A2
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	34 end
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	35
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	36 local function digest(self, message)
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	37 --TODO complete support for authzid
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	38
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	39 local function serialize(message)
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	40 local data = ""
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	41
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	42 if type(message) ~= "table" then error("serialize needs an argument of type table.") end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	43
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	44 -- testing all possible values
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	45 if message["realm"] then data = data..[[realm="]]..message.realm..[[",]] end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	46 if message["nonce"] then data = data..[[nonce="]]..message.nonce..[[",]] end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	47 if message["qop"] then data = data..[[qop="]]..message.qop..[[",]] end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	48 if message["charset"] then data = data..[[charset=]]..message.charset.."," end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	49 if message["algorithm"] then data = data..[[algorithm=]]..message.algorithm.."," end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	50 if message["rspauth"] then data = data..[[rspauth=]]..message.rspauth.."," end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	51 data = data:gsub(",$", "")
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	52 return data
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	53 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	54
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	55 local function utf8tolatin1ifpossible(passwd)
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	56 local i = 1;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	57 while i <= #passwd do
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	58 local passwd_i = to_byte(passwd:sub(i, i));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	59 if passwd_i > 0x7F then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	60 if passwd_i < 0xC0 or passwd_i > 0xC3 then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	61 return passwd;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	62 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	63 i = i + 1;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	64 passwd_i = to_byte(passwd:sub(i, i));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	65 if passwd_i < 0x80 or passwd_i > 0xBF then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	66 return passwd;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	67 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	68 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	69 i = i + 1;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	70 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	71
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	72 local p = {};
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	73 local j = 0;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	74 i = 1;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	75 while (i <= #passwd) do
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	76 local passwd_i = to_byte(passwd:sub(i, i));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	77 if passwd_i > 0x7F then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	78 i = i + 1;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	79 local passwd_i_1 = to_byte(passwd:sub(i, i));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	80 t_insert(p, to_char(passwd_i%4*64 + passwd_i_1%64)); -- I'm so clever
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	81 else
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	82 t_insert(p, to_char(passwd_i));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	83 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	84 i = i + 1;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	85 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	86 return t_concat(p);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	87 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	88 local function latin1toutf8(str)
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	89 local p = {};
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	90 for ch in s_gmatch(str, ".") do
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	91 ch = to_byte(ch);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	92 if (ch < 0x80) then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	93 t_insert(p, to_char(ch));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	94 elseif (ch < 0xC0) then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	95 t_insert(p, to_char(0xC2, ch));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	96 else
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	97 t_insert(p, to_char(0xC3, ch - 64));
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	98 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	99 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	100 return t_concat(p);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	101 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	102 local function parse(data)
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	103 local message = {}
2212 7cb6460b18d8 Merge with trunk. Tobias Markmann <tm@ayena.de> parents: 2211 diff changeset	104 -- COMPAT: %z in the pattern to work around jwchat bug (sends "charset=utf-8\0")
7cb6460b18d8 Merge with trunk. Tobias Markmann <tm@ayena.de> parents: 2211 diff changeset	105 for k, v in gmatch(data, [[([%w%-]+)="?([^",%z]*)"?,?]]) do -- FIXME The hacky regex makes me shudder
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	106 message[k] = v;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	107 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	108 return message;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	109 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	110
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	111 if not self.nonce then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	112 self.nonce = generate_uuid();
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	113 self.step = 0;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	114 self.nonce_count = {};
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	115 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	116
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	117 self.step = self.step + 1;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	118 if (self.step == 1) then
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	119 local challenge = serialize({ nonce = self.nonce,
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	120 qop = "auth",
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	121 charset = "utf-8",
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	122 algorithm = "md5-sess",
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	123 realm = self.realm});
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	124 return "challenge", challenge;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	125 elseif (self.step == 2) then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	126 local response = parse(message);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	127 -- check for replay attack
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	128 if response["nc"] then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	129 if self.nonce_count[response["nc"]] then return "failure", "not-authorized" end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	130 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	131
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	132 -- check for username, it's REQUIRED by RFC 2831
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	133 if not response["username"] then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	134 return "failure", "malformed-request";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	135 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	136 self["username"] = response["username"];
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	137
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	138 -- check for nonce, ...
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	139 if not response["nonce"] then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	140 return "failure", "malformed-request";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	141 else
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	142 -- check if it's the right nonce
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	143 if response["nonce"] ~= tostring(self.nonce) then return "failure", "malformed-request" end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	144 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	145
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	146 if not response["cnonce"] then return "failure", "malformed-request", "Missing entry for cnonce in SASL message." end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	147 if not response["qop"] then response["qop"] = "auth" end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	148
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	149 if response["realm"] == nil or response["realm"] == "" then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	150 response["realm"] = "";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	151 elseif response["realm"] ~= self.realm then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	152 return "failure", "not-authorized", "Incorrect realm value";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	153 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	154
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	155 local decoder;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	156 if response["charset"] == nil then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	157 decoder = utf8tolatin1ifpossible;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	158 elseif response["charset"] ~= "utf-8" then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	159 return "failure", "incorrect-encoding", "The client's response uses "..response["charset"].." for encoding with isn't supported by sasl.lua. Supported encodings are latin or utf-8.";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	160 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	161
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	162 local domain = "";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	163 local protocol = "";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	164 if response["digest-uri"] then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	165 protocol, domain = response["digest-uri"]:match("(%w+)/(.*)$");
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	166 if protocol == nil or domain == nil then return "failure", "malformed-request" end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	167 else
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	168 return "failure", "malformed-request", "Missing entry for digest-uri in SASL message."
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	169 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	170
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	171 --TODO maybe realm support
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	172 self.username = response["username"];
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	173 if self.profile.plain then
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	174 local password, state = self.profile.plain(response["username"], self.realm)
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	175 if state == nil then return "failure", "not-authorized"
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	176 elseif state == false then return "failure", "account-disabled" end
2189 1182e7ae2964 Broken DIGEST-MD5 client support again. Tobias Markmann <tm@ayena.de> parents: 2188 diff changeset	177 Y = md5(response["username"]..":"..response["realm"]..":"..password);
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	178 elseif self.profile["digest-md5"] then
2193 8fbbdb11a520 Merge with sasl branch. Tobias Markmann <tm@ayena.de> parents: 2192 diff changeset	179 local Y, state = self.profile["digest-md5"](response["username"], self.realm, response["realm"], response["charset"])
2191 e79c0ce6cf54 Adding support for digest-md5 profile in DIGEST-MD5 implementation. Tobias Markmann <tm@ayena.de> parents: 2189 diff changeset	180 if state == nil then return "failure", "not-authorized"
e79c0ce6cf54 Adding support for digest-md5 profile in DIGEST-MD5 implementation. Tobias Markmann <tm@ayena.de> parents: 2189 diff changeset	181 elseif state == false then return "failure", "account-disabled" end
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	182 elseif self.profile["digest-md5-test"] then
2189 1182e7ae2964 Broken DIGEST-MD5 client support again. Tobias Markmann <tm@ayena.de> parents: 2188 diff changeset	183 -- TODO
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	184 end
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	185 --local password_encoding, Y = self.credentials_handler("DIGEST-MD5", response["username"], self.realm, response["realm"], decoder);
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	186 --if Y == nil then return "failure", "not-authorized"
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	187 --elseif Y == false then return "failure", "account-disabled" end
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	188 local A1 = "";
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	189 if response.authzid then
2193 8fbbdb11a520 Merge with sasl branch. Tobias Markmann <tm@ayena.de> parents: 2192 diff changeset	190 if response.authzid == self.username or response.authzid == self.username.."@"..self.realm then
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	191 -- COMPAT
2193 8fbbdb11a520 Merge with sasl branch. Tobias Markmann <tm@ayena.de> parents: 2192 diff changeset	192 log("warn", "Client is violating RFC 3920 (section 6.1, point 7).");
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	193 A1 = Y..":"..response["nonce"]..":"..response["cnonce"]..":"..response.authzid;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	194 else
2193 8fbbdb11a520 Merge with sasl branch. Tobias Markmann <tm@ayena.de> parents: 2192 diff changeset	195 return "failure", "invalid-authzid";
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	196 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	197 else
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	198 A1 = Y..":"..response["nonce"]..":"..response["cnonce"];
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	199 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	200 local A2 = "AUTHENTICATE:"..protocol.."/"..domain;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	201
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	202 local HA1 = md5(A1, true);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	203 local HA2 = md5(A2, true);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	204
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	205 local KD = HA1..":"..response["nonce"]..":"..response["nc"]..":"..response["cnonce"]..":"..response["qop"]..":"..HA2;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	206 local response_value = md5(KD, true);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	207
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	208 if response_value == response["response"] then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	209 -- calculate rspauth
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	210 A2 = ":"..protocol.."/"..domain;
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	211
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	212 HA1 = md5(A1, true);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	213 HA2 = md5(A2, true);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	214
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	215 KD = HA1..":"..response["nonce"]..":"..response["nc"]..":"..response["cnonce"]..":"..response["qop"]..":"..HA2
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	216 local rspauth = md5(KD, true);
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	217 self.authenticated = true;
2211 6094a4e2b6f3 Reduce needed roundtrips during DIGEST-MD5 login. Tobias Markmann <tm@ayena.de> parents: 2206 diff changeset	218 return "success", serialize({rspauth = rspauth});
2186 1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	219 else
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	220 return "failure", "not-authorized", "The response provided by the client doesn't match the one we calculated."
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	221 end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	222 elseif self.step == 3 then
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	223 if self.authenticated ~= nil then return "success"
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	224 else return "failure", "malformed-request" end
1112871916eb Move each mechanism in an own file. Tobias Markmann <tm@ayena.de> parents: diff changeset	225 end
2188 1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	226 end
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	227
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	228 function init(registerMechanism)
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	229 registerMechanism("DIGEST-MD5", {"plain"}, digest);
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	230 end
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	231
1fd38975addd Add support for plain profile in digest-md5 implementation. Tobias Markmann <tm@ayena.de> parents: 2186 diff changeset	232 return _M;

prosody

7cb6460b18d8

util/sasl/digest-md5.lua

Software / code / prosody

Annotate

util/sasl/digest-md5.lua @ 2212:7cb6460b18d8

Software `/` code `/` prosody