You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
110 lines
3.1 KiB
110 lines
3.1 KiB
/*
|
|
* auth.c - deal with authentication.
|
|
*
|
|
* This file implements the VNC authentication protocol when setting up an RFB
|
|
* connection.
|
|
*/
|
|
|
|
/*
|
|
* OSXvnc Copyright (C) 2001 Dan McGuirk <mcguirk@incompleteness.net>.
|
|
* Original Xvnc code Copyright (C) 1999 AT&T Laboratories Cambridge.
|
|
* All Rights Reserved.
|
|
*
|
|
* This is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This software is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this software; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02111-1307,
|
|
* USA.
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include "rfb.h"
|
|
|
|
static int rfbMaxPasswordWait = 120000; /* password timeout (ms) */
|
|
|
|
/*
|
|
* rfbAuthNewClient is called when we reach the point of authenticating
|
|
* a new client. If authentication isn't being used then we simply send
|
|
* rfbNoAuth. Otherwise we send rfbVncAuth plus the challenge.
|
|
*/
|
|
|
|
void
|
|
rfbAuthNewClient(cl)
|
|
rfbClientPtr cl;
|
|
{
|
|
char buf[4 + CHALLENGESIZE];
|
|
int len;
|
|
|
|
cl->state = RFB_AUTHENTICATION;
|
|
|
|
if (cl->screen->rfbAuthPasswdData && !cl->reverseConnection) {
|
|
*(CARD32 *)buf = Swap32IfLE(rfbVncAuth);
|
|
vncRandomBytes(cl->authChallenge);
|
|
memcpy(&buf[4], (char *)cl->authChallenge, CHALLENGESIZE);
|
|
len = 4 + CHALLENGESIZE;
|
|
} else {
|
|
*(CARD32 *)buf = Swap32IfLE(rfbNoAuth);
|
|
len = 4;
|
|
cl->state = RFB_INITIALISATION;
|
|
}
|
|
|
|
if (WriteExact(cl, buf, len) < 0) {
|
|
rfbLogPerror("rfbAuthNewClient: write");
|
|
rfbCloseClient(cl);
|
|
return;
|
|
}
|
|
}
|
|
|
|
|
|
/*
|
|
* rfbAuthProcessClientMessage is called when the client sends its
|
|
* authentication response.
|
|
*/
|
|
|
|
void
|
|
rfbAuthProcessClientMessage(cl)
|
|
rfbClientPtr cl;
|
|
{
|
|
int n;
|
|
CARD8 response[CHALLENGESIZE];
|
|
CARD32 authResult;
|
|
|
|
if ((n = ReadExactTimeout(cl, (char *)response, CHALLENGESIZE,
|
|
rfbMaxPasswordWait)) <= 0) {
|
|
if (n != 0)
|
|
rfbLogPerror("rfbAuthProcessClientMessage: read");
|
|
rfbCloseClient(cl);
|
|
return;
|
|
}
|
|
|
|
if(!cl->screen->passwordCheck(cl,response,CHALLENGESIZE)) {
|
|
rfbLog("rfbAuthProcessClientMessage: password check failed\n");
|
|
authResult = Swap32IfLE(rfbVncAuthFailed);
|
|
if (WriteExact(cl, (char *)&authResult, 4) < 0) {
|
|
rfbLogPerror("rfbAuthProcessClientMessage: write");
|
|
}
|
|
rfbCloseClient(cl);
|
|
return;
|
|
}
|
|
|
|
authResult = Swap32IfLE(rfbVncAuthOK);
|
|
|
|
if (WriteExact(cl, (char *)&authResult, 4) < 0) {
|
|
rfbLogPerror("rfbAuthProcessClientMessage: write");
|
|
rfbCloseClient(cl);
|
|
return;
|
|
}
|
|
|
|
cl->state = RFB_INITIALISATION;
|
|
}
|