blob: 18fc56fafb36f2154d723428bac1655a35572cbe [file] [log] [blame]
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +00001/* Copyright (C) 2002-2005 RealVNC Ltd. All Rights Reserved.
Adam Tkacdf799702010-04-28 15:45:53 +00002 * Copyright (C) 2010 TigerVNC Team
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +00003 *
4 * This is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
8 *
9 * This software is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this software; if not, write to the Free Software
16 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307,
17 * USA.
18 */
Adam Tkacdf799702010-04-28 15:45:53 +000019
20#ifdef HAVE_CONFIG_H
21#include <config.h>
22#endif
23
Adam Tkac1d15e2d2010-04-23 14:06:38 +000024#include <assert.h>
25#include <stdlib.h>
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +000026#include <string.h>
27#ifdef _WIN32
28#define strcasecmp _stricmp
29#endif
Adam Tkacc210e8a2010-04-23 14:09:16 +000030#include <rfb/CSecurityNone.h>
Adam Tkac707d3612010-07-20 15:16:10 +000031#include <rfb/CSecurityStack.h>
Adam Tkacb10489b2010-04-23 14:16:04 +000032#include <rfb/CSecurityVeNCrypt.h>
Adam Tkacc210e8a2010-04-23 14:09:16 +000033#include <rfb/CSecurityVncAuth.h>
Adam Tkac1d15e2d2010-04-23 14:06:38 +000034#include <rdr/Exception.h>
35#include <rfb/LogWriter.h>
Adam Tkacb6eb3992010-04-23 14:05:00 +000036#include <rfb/Security.h>
Adam Tkac1d15e2d2010-04-23 14:06:38 +000037#include <rfb/SSecurityNone.h>
Adam Tkac707d3612010-07-20 15:16:10 +000038#include <rfb/SSecurityStack.h>
Adam Tkac1d15e2d2010-04-23 14:06:38 +000039#include <rfb/SSecurityVncAuth.h>
Adam Tkacdfe19cf2010-04-23 14:14:11 +000040#include <rfb/SSecurityVeNCrypt.h>
Adam Tkac707d3612010-07-20 15:16:10 +000041#ifdef HAVE_GNUTLS
Adam Tkac0e61c342010-07-21 09:23:25 +000042#include <rfb/CSecurityTLSBase.h>
Adam Tkac21b61a52010-07-21 09:19:00 +000043#include <rfb/SSecurityTLS.h>
Adam Tkacdf799702010-04-28 15:45:53 +000044#endif
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +000045#include <rfb/util.h>
46
Adam Tkac1d15e2d2010-04-23 14:06:38 +000047using namespace rdr;
48using namespace rfb;
49using namespace std;
50
51static LogWriter vlog("Security");
52
Adam Tkacb10489b2010-04-23 14:16:04 +000053UserPasswdGetter *CSecurity::upg = NULL;
54
Adam Tkaca6578bf2010-04-23 14:07:41 +000055StringParameter Security::secTypes
56("SecurityTypes",
57 "Specify which security scheme to use (None, VncAuth)",
Adam Tkacb10489b2010-04-23 14:16:04 +000058 "VncAuth");
Adam Tkaca6578bf2010-04-23 14:07:41 +000059
Adam Tkacb10489b2010-04-23 14:16:04 +000060Security::Security(void)
Adam Tkac1d15e2d2010-04-23 14:06:38 +000061{
Adam Tkaca6578bf2010-04-23 14:07:41 +000062 char *secTypesStr = secTypes.getData();
Adam Tkac1d15e2d2010-04-23 14:06:38 +000063
64 enabledSecTypes = parseSecTypes(secTypesStr);
65
66 delete secTypesStr;
67}
68
Adam Tkac0c77e512010-07-20 15:10:16 +000069const std::list<rdr::U8> Security::GetEnabledSecTypes(void)
Adam Tkac1d15e2d2010-04-23 14:06:38 +000070{
Adam Tkac0c77e512010-07-20 15:10:16 +000071 list<rdr::U8> result;
72 list<U32>::iterator i;
73
74 for (i = enabledSecTypes.begin(); i != enabledSecTypes.end(); i++)
75 if (*i < 0x100)
76 result.push_back(*i);
77
78 return result;
79}
80
81const std::list<rdr::U32> Security::GetEnabledExtSecTypes(void)
82{
83 list<rdr::U32> result;
84 list<U32>::iterator i;
85
86 for (i = enabledSecTypes.begin(); i != enabledSecTypes.end(); i++)
87 if (*i >= 0x100)
88 result.push_back(*i);
89
90 return result;
91}
92
93void Security::EnableSecType(U32 secType)
94{
95 list<U32>::iterator i;
Adam Tkac1d15e2d2010-04-23 14:06:38 +000096
97 for (i = enabledSecTypes.begin(); i != enabledSecTypes.end(); i++)
98 if (*i == secType)
99 return;
100
101 enabledSecTypes.push_back(secType);
102}
103
Adam Tkac0c77e512010-07-20 15:10:16 +0000104bool Security::IsSupported(U32 secType)
Adam Tkac1d15e2d2010-04-23 14:06:38 +0000105{
Adam Tkac0c77e512010-07-20 15:10:16 +0000106 list<U32>::iterator i;
Adam Tkac1d15e2d2010-04-23 14:06:38 +0000107
108 for (i = enabledSecTypes.begin(); i != enabledSecTypes.end(); i++)
109 if (*i == secType)
110 return true;
111
112 return false;
113}
114
Adam Tkac0c77e512010-07-20 15:10:16 +0000115SSecurity* Security::GetSSecurity(U32 secType)
Adam Tkac1d15e2d2010-04-23 14:06:38 +0000116{
117 if (!IsSupported(secType))
118 goto bail;
119
120 switch (secType) {
121 case secTypeNone: return new SSecurityNone();
122 case secTypeVncAuth: return new SSecurityVncAuth();
Adam Tkaca0325932010-07-20 15:14:08 +0000123 case secTypeVeNCrypt: return new SSecurityVeNCrypt(this);
Adam Tkac707d3612010-07-20 15:16:10 +0000124#ifdef HAVE_GNUTLS
125 case secTypeTLSNone:
Adam Tkac21b61a52010-07-21 09:19:00 +0000126 return new SSecurityStack(secTypeTLSNone, new SSecurityTLS(true));
Adam Tkac707d3612010-07-20 15:16:10 +0000127 case secTypeTLSVnc:
Adam Tkac21b61a52010-07-21 09:19:00 +0000128 return new SSecurityStack(secTypeTLSVnc, new SSecurityTLS(true), new SSecurityVncAuth());
Adam Tkac5bf73fb2010-07-21 09:08:24 +0000129 case secTypeX509None:
Adam Tkac21b61a52010-07-21 09:19:00 +0000130 return new SSecurityStack(secTypeX509None, new SSecurityTLS(false));
Adam Tkac5bf73fb2010-07-21 09:08:24 +0000131 case secTypeX509Vnc:
Adam Tkac21b61a52010-07-21 09:19:00 +0000132 return new SSecurityStack(secTypeX509None, new SSecurityTLS(false), new SSecurityVncAuth());
Adam Tkacdf799702010-04-28 15:45:53 +0000133#endif
Adam Tkacc210e8a2010-04-23 14:09:16 +0000134 }
135
136bail:
137 throw Exception("Security type not supported");
138}
139
Adam Tkac0c77e512010-07-20 15:10:16 +0000140CSecurity* Security::GetCSecurity(U32 secType)
Adam Tkacc210e8a2010-04-23 14:09:16 +0000141{
Adam Tkacb10489b2010-04-23 14:16:04 +0000142 assert (CSecurity::upg != NULL); /* (upg == NULL) means bug in the viewer */
Adam Tkacc210e8a2010-04-23 14:09:16 +0000143
144 if (!IsSupported(secType))
145 goto bail;
146
147 switch (secType) {
148 case secTypeNone: return new CSecurityNone();
Adam Tkacb10489b2010-04-23 14:16:04 +0000149 case secTypeVncAuth: return new CSecurityVncAuth();
Adam Tkaca0325932010-07-20 15:14:08 +0000150 case secTypeVeNCrypt: return new CSecurityVeNCrypt(this);
Adam Tkac707d3612010-07-20 15:16:10 +0000151#ifdef HAVE_GNUTLS
152 case secTypeTLSNone:
153 return new CSecurityStack(secTypeTLSNone, "TLS with no password",
Adam Tkac0e61c342010-07-21 09:23:25 +0000154 new CSecurityTLSBase(true));
Adam Tkac707d3612010-07-20 15:16:10 +0000155 case secTypeTLSVnc:
156 return new CSecurityStack(secTypeTLSVnc, "TLS with VNCAuth",
Adam Tkac0e61c342010-07-21 09:23:25 +0000157 new CSecurityTLSBase(true), new CSecurityVncAuth());
Adam Tkacf5f6a002010-07-21 09:09:19 +0000158 case secTypeX509None:
159 return new CSecurityStack(secTypeX509None, "X509 with no password",
Adam Tkac0e61c342010-07-21 09:23:25 +0000160 new CSecurityTLSBase(false));
Adam Tkacf5f6a002010-07-21 09:09:19 +0000161 case secTypeX509Vnc:
162 return new CSecurityStack(secTypeX509None, "X509 with VNCAuth",
Adam Tkac0e61c342010-07-21 09:23:25 +0000163 new CSecurityTLSBase(false), new CSecurityVncAuth());
Adam Tkacdf799702010-04-28 15:45:53 +0000164#endif
Adam Tkac1d15e2d2010-04-23 14:06:38 +0000165 }
166
167bail:
168 throw Exception("Security type not supported");
169}
170
Adam Tkac0c77e512010-07-20 15:10:16 +0000171rdr::U32 rfb::secTypeNum(const char* name)
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +0000172{
173 if (strcasecmp(name, "None") == 0) return secTypeNone;
174 if (strcasecmp(name, "VncAuth") == 0) return secTypeVncAuth;
175 if (strcasecmp(name, "Tight") == 0) return secTypeTight;
176 if (strcasecmp(name, "RA2") == 0) return secTypeRA2;
177 if (strcasecmp(name, "RA2ne") == 0) return secTypeRA2ne;
178 if (strcasecmp(name, "SSPI") == 0) return secTypeSSPI;
Adam Tkacdfe19cf2010-04-23 14:14:11 +0000179 if (strcasecmp(name, "SSPIne") == 0) return secTypeSSPIne;
180 if (strcasecmp(name, "VeNCrypt") == 0) return secTypeVeNCrypt;
Adam Tkacb3e60c62010-07-20 15:10:59 +0000181
182 /* VeNCrypt subtypes */
Adam Tkac957a5ae2010-07-20 15:12:41 +0000183 if (strcasecmp(name, "Plain") == 0) return secTypePlain;
Adam Tkacb3e60c62010-07-20 15:10:59 +0000184 if (strcasecmp(name, "TLSNone") == 0) return secTypeTLSNone;
185 if (strcasecmp(name, "TLSVnc") == 0) return secTypeTLSVnc;
Adam Tkac957a5ae2010-07-20 15:12:41 +0000186 if (strcasecmp(name, "TLSPlain") == 0) return secTypeTLSPlain;
Adam Tkacb3e60c62010-07-20 15:10:59 +0000187 if (strcasecmp(name, "X509None") == 0) return secTypeX509None;
188 if (strcasecmp(name, "X509Vnc") == 0) return secTypeX509Vnc;
Adam Tkacb3e60c62010-07-20 15:10:59 +0000189 if (strcasecmp(name, "X509Plain") == 0) return secTypeX509Plain;
Adam Tkacb3e60c62010-07-20 15:10:59 +0000190
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +0000191 return secTypeInvalid;
192}
193
Adam Tkac0c77e512010-07-20 15:10:16 +0000194const char* rfb::secTypeName(rdr::U32 num)
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +0000195{
196 switch (num) {
197 case secTypeNone: return "None";
198 case secTypeVncAuth: return "VncAuth";
199 case secTypeTight: return "Tight";
200 case secTypeRA2: return "RA2";
201 case secTypeRA2ne: return "RA2ne";
202 case secTypeSSPI: return "SSPI";
203 case secTypeSSPIne: return "SSPIne";
Adam Tkacdfe19cf2010-04-23 14:14:11 +0000204 case secTypeVeNCrypt: return "VeNCrypt";
Adam Tkacb3e60c62010-07-20 15:10:59 +0000205
206 /* VeNCrypt subtypes */
Adam Tkac957a5ae2010-07-20 15:12:41 +0000207 case secTypePlain: return "Plain";
Adam Tkacb3e60c62010-07-20 15:10:59 +0000208 case secTypeTLSNone: return "TLSNone";
209 case secTypeTLSVnc: return "TLSVnc";
Adam Tkacb3e60c62010-07-20 15:10:59 +0000210 case secTypeTLSPlain: return "TLSPlain";
211 case secTypeX509None: return "X509None";
212 case secTypeX509Vnc: return "X509Vnc";
213 case secTypeX509Plain: return "X509Plain";
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +0000214 default: return "[unknown secType]";
215 }
216}
217
Adam Tkac0c77e512010-07-20 15:10:16 +0000218std::list<rdr::U32> rfb::parseSecTypes(const char* types_)
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +0000219{
Adam Tkac0c77e512010-07-20 15:10:16 +0000220 std::list<rdr::U32> result;
Adam Tkacd36b6262009-09-04 10:57:20 +0000221 CharArray types(strDup(types_)), type;
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +0000222 while (types.buf) {
223 strSplit(types.buf, ',', &type.buf, &types.buf);
Adam Tkac0c77e512010-07-20 15:10:16 +0000224 rdr::U32 typeNum = secTypeNum(type.buf);
Constantin Kaplinskya2adc8d2006-05-25 05:01:55 +0000225 if (typeNum != secTypeInvalid)
226 result.push_back(typeNum);
227 }
228 return result;
229}