forked from roehling/postsrsd
-
Notifications
You must be signed in to change notification settings - Fork 0
/
srs2.h
182 lines (148 loc) · 5.41 KB
/
srs2.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
/* This file is copied from the libsrs2 sources */
/* Modified by Timo Röhling <timo.roehling@gmx.de> */
/* Copyright (c) 2004 Shevek (srs@anarres.org)
* All rights reserved.
*
* This file is a part of libsrs2 from http://www.libsrs2.org/
*
* Redistribution and use in source and binary forms, with or without
* modification, under the terms of either the GNU General Public
* License version 2 or the BSD license, at the discretion of the
* user. Copies of these licenses have been included in the libsrs2
* distribution. See the the file called LICENSE for more
* information.
*/
#ifndef __SRS2_H__
#define __SRS2_H__
#include <ctype.h>
#include <stdio.h>
#include <stdlib.h>
#ifdef HAVE_SYS_TYPES_H
# include <sys/types.h>
#endif
#ifdef HAVE_SYS_TIME_H
# include <sys/time.h>
#endif
#ifdef HAVE_TIME_H
# include <time.h>
#endif
#ifndef __BEGIN_DECLS
# define __BEGIN_DECLS
# define __END_DECLS
#endif
__BEGIN_DECLS
#define SRS_VERSION_MAJOR 1
#define SRS_VERSION_MINOR 0
#define SRS_VERSION_PATCHLEVEL 14
#define SRS_VERSION_FROM(m, n, p) (((m) << 16) + ((n) << 8) + (p))
#define SRS_VERSION \
SRS_VERSION_FROM(SRS_VERSION_MAJOR, SRS_VERSION_MINOR, \
SRS_VERSION_PATCHLEVEL)
/* This is ugly, but reasonably safe. */
#undef TRUE
#define TRUE 1
#undef FALSE
#define FALSE 0
#define SRSSEP '='
#define SRS0TAG "SRS0"
#define SRS1TAG "SRS1"
/* Error codes */
#define SRS_ERRTYPE_MASK 0xF000
#define SRS_ERRTYPE_NONE 0x0000
#define SRS_ERRTYPE_CONFIG 0x1000
#define SRS_ERRTYPE_INPUT 0x2000
#define SRS_ERRTYPE_SYNTAX 0x4000
#define SRS_ERRTYPE_SRS 0x8000
#define SRS_SUCCESS (0)
#define SRS_ENOTSRSADDRESS (1)
#define SRS_ENOTREWRITTEN (2)
#define SRS_ENOSECRETS (SRS_ERRTYPE_CONFIG | 1)
#define SRS_ESEPARATORINVALID (SRS_ERRTYPE_CONFIG | 2)
#define SRS_ENOSENDERATSIGN (SRS_ERRTYPE_INPUT | 1)
#define SRS_EBUFTOOSMALL (SRS_ERRTYPE_INPUT | 2)
#define SRS_ENOSRS0HOST (SRS_ERRTYPE_SYNTAX | 1)
#define SRS_ENOSRS0USER (SRS_ERRTYPE_SYNTAX | 2)
#define SRS_ENOSRS0HASH (SRS_ERRTYPE_SYNTAX | 3)
#define SRS_ENOSRS0STAMP (SRS_ERRTYPE_SYNTAX | 4)
#define SRS_ENOSRS1HOST (SRS_ERRTYPE_SYNTAX | 5)
#define SRS_ENOSRS1USER (SRS_ERRTYPE_SYNTAX | 6)
#define SRS_ENOSRS1HASH (SRS_ERRTYPE_SYNTAX | 7)
#define SRS_EBADTIMESTAMPCHAR (SRS_ERRTYPE_SYNTAX | 8)
#define SRS_EHASHTOOSHORT (SRS_ERRTYPE_SYNTAX | 9)
#define SRS_ETIMESTAMPOUTOFDATE (SRS_ERRTYPE_SRS | 1)
#define SRS_EHASHINVALID (SRS_ERRTYPE_SRS | 2)
#define SRS_ERROR_TYPE(x) ((x)&SRS_ERRTYPE_MASK)
/* SRS implementation */
#define SRS_IS_SRS_ADDRESS(x) \
((strncasecmp((x), "SRS", 3) == 0) && (strchr("01", (x)[3]) != NULL) \
&& (strchr("-+=", (x)[4]) != NULL))
typedef void *(*srs_malloc_t)(size_t);
typedef void *(*srs_realloc_t)(void *, size_t);
typedef void (*srs_free_t)(void *);
typedef int srs_bool;
typedef struct _srs_t
{
/* Rewriting parameters */
char **secrets;
int numsecrets;
char separator;
/* Security parameters */
int maxage; /* Maximum allowed age in seconds */
int hashlength;
int hashmin;
/* Behaviour parameters */
srs_bool alwaysrewrite; /* Rewrite even into same domain? */
srs_bool noforward; /* Never perform forwards rewriting */
srs_bool noreverse; /* Never perform reverse rewriting */
char **neverrewrite; /* A list of non-rewritten domains */
} srs_t;
/* Interface */
int srs_set_malloc(srs_malloc_t m, srs_realloc_t r, srs_free_t f);
srs_t *srs_new();
void srs_init(srs_t *srs);
void srs_free(srs_t *srs);
int srs_forward(srs_t *srs, char *buf, unsigned buflen, const char *sender,
const char *alias);
int srs_forward_alloc(srs_t *srs, char **sptr, const char *sender,
const char *alias);
int srs_reverse(srs_t *srs, char *buf, unsigned buflen, const char *sender);
int srs_reverse_alloc(srs_t *srs, char **sptr, const char *sender);
const char *srs_strerror(int code);
int srs_add_secret(srs_t *srs, const char *secret);
const char *srs_get_secret(srs_t *srs, int idx);
/* You probably shouldn't call these. */
int srs_timestamp_create(srs_t *srs, char *buf, time_t now);
int srs_timestamp_check(srs_t *srs, const char *stamp);
#define SRS_PARAM_DECLARE(n, t) \
int srs_set_##n(srs_t *srs, t value); \
t srs_get_##n(srs_t *srs);
SRS_PARAM_DECLARE(alwaysrewrite, srs_bool)
SRS_PARAM_DECLARE(separator, char)
SRS_PARAM_DECLARE(maxage, int)
SRS_PARAM_DECLARE(hashlength, int)
SRS_PARAM_DECLARE(hashmin, int)
SRS_PARAM_DECLARE(noforward, srs_bool)
SRS_PARAM_DECLARE(noreverse, srs_bool)
/* SHA1 implementation */
typedef unsigned long ULONG; /* 32-or-more-bit quantity */
typedef unsigned char sha_byte;
#define SHA_BLOCKSIZE 64
#define SHA_DIGESTSIZE 20
typedef struct
{
ULONG digest[5]; /* message digest */
ULONG count_lo, count_hi; /* 64-bit bit count */
sha_byte data[SHA_BLOCKSIZE]; /* SHA data buffer */
int local; /* unprocessed amount in data */
} SHA_INFO;
typedef struct _srs_hmac_ctx_t
{
SHA_INFO sctx;
char ipad[SHA_BLOCKSIZE + 1];
char opad[SHA_BLOCKSIZE + 1];
} srs_hmac_ctx_t;
void srs_hmac_init(srs_hmac_ctx_t *ctx, char *secret, unsigned len);
void srs_hmac_update(srs_hmac_ctx_t *ctx, char *data, unsigned len);
void srs_hmac_fini(srs_hmac_ctx_t *ctx, char *out);
__END_DECLS
#endif