2 * Copyright (c) 1999 - 2001 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "gssapi_locl.h"
36 RCSID("$Id: export_sec_context.c,v 1.4 2001/02/18 03:39:09 assar Exp $");
39 gss_export_sec_context (
40 OM_uint32 * minor_status,
41 gss_ctx_id_t * context_handle,
42 gss_buffer_t interprocess_token
47 OM_uint32 ret = GSS_S_COMPLETE;
49 gss_buffer_desc buffer;
55 if (!((*context_handle)->flags & GSS_C_TRANS_FLAG))
56 return GSS_S_UNAVAILABLE;
58 sp = krb5_storage_emem ();
60 *minor_status = ENOMEM;
63 ac = (*context_handle)->auth_context;
65 /* flagging included fields */
68 if (ac->local_address)
69 flags |= SC_LOCAL_ADDRESS;
70 if (ac->remote_address)
71 flags |= SC_REMOTE_ADDRESS;
75 flags |= SC_LOCAL_SUBKEY;
76 if (ac->remote_subkey)
77 flags |= SC_REMOTE_SUBKEY;
79 kret = krb5_store_int32 (sp, flags);
85 /* marshall auth context */
87 kret = krb5_store_int32 (sp, ac->flags);
92 if (ac->local_address) {
93 kret = krb5_store_address (sp, *ac->local_address);
99 if (ac->remote_address) {
100 kret = krb5_store_address (sp, *ac->remote_address);
102 *minor_status = kret;
106 kret = krb5_store_int16 (sp, ac->local_port);
108 *minor_status = kret;
111 kret = krb5_store_int16 (sp, ac->remote_port);
113 *minor_status = kret;
117 kret = krb5_store_keyblock (sp, *ac->keyblock);
119 *minor_status = kret;
123 if (ac->local_subkey) {
124 kret = krb5_store_keyblock (sp, *ac->local_subkey);
126 *minor_status = kret;
130 if (ac->remote_subkey) {
131 kret = krb5_store_keyblock (sp, *ac->remote_subkey);
133 *minor_status = kret;
137 kret = krb5_store_int32 (sp, ac->local_seqnumber);
139 *minor_status = kret;
142 kret = krb5_store_int32 (sp, ac->remote_seqnumber);
144 *minor_status = kret;
151 unsigned char auth_buf[1024];
153 ret = encode_Authenticator (auth_buf, sizeof(auth_buf),
154 ac->authenticator, &sz);
156 krb5_storage_free (sp);
158 return GSS_S_FAILURE;
160 data.data = auth_buf;
162 kret = krb5_store_data (sp, data);
164 *minor_status = kret;
169 kret = krb5_store_int32 (sp, ac->keytype);
171 *minor_status = kret;
174 kret = krb5_store_int32 (sp, ac->cksumtype);
176 *minor_status = kret;
182 ret = gss_export_name (minor_status, (*context_handle)->source, &buffer);
185 data.data = buffer.value;
186 data.length = buffer.length;
187 kret = krb5_store_data (sp, data);
188 gss_release_buffer (&minor, &buffer);
190 *minor_status = kret;
194 ret = gss_export_name (minor_status, (*context_handle)->target, &buffer);
197 data.data = buffer.value;
198 data.length = buffer.length;
199 kret = krb5_store_data (sp, data);
200 gss_release_buffer (&minor, &buffer);
202 *minor_status = kret;
206 kret = krb5_store_int32 (sp, (*context_handle)->flags);
208 *minor_status = kret;
211 kret = krb5_store_int32 (sp, (*context_handle)->more_flags);
213 *minor_status = kret;
217 kret = krb5_storage_to_data (sp, &data);
218 krb5_storage_free (sp);
220 *minor_status = kret;
221 return GSS_S_FAILURE;
223 interprocess_token->length = data.length;
224 interprocess_token->value = data.data;
225 ret = gss_delete_sec_context (minor_status, context_handle,
227 if (ret != GSS_S_COMPLETE)
228 gss_release_buffer (NULL, interprocess_token);
231 krb5_storage_free (sp);