| /* |
| * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
| * |
| * This code is free software; you can redistribute it and/or modify it |
| * under the terms of the GNU General Public License version 2 only, as |
| * published by the Free Software Foundation. Oracle designates this |
| * particular file as subject to the "Classpath" exception as provided |
| * by Oracle in the LICENSE file that accompanied this code. |
| * |
| * This code is distributed in the hope that it will be useful, but WITHOUT |
| * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
| * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
| * version 2 for more details (a copy is included in the LICENSE file that |
| * accompanied this code). |
| * |
| * You should have received a copy of the GNU General Public License version |
| * 2 along with this work; if not, write to the Free Software Foundation, |
| * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
| * |
| * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
| * or visit www.oracle.com if you need additional information or have any |
| * questions. |
| */ |
| |
| /* |
| * |
| * (C) Copyright IBM Corp. 1999 All Rights Reserved. |
| * Copyright 1997 The Open Group Research Institute. All rights reserved. |
| */ |
| |
| package sun.security.krb5.internal; |
| |
| import sun.security.krb5.*; |
| import sun.security.util.*; |
| import java.util.Vector; |
| import java.io.IOException; |
| import java.math.BigInteger; |
| |
| /** |
| * Implements the ASN.1 KDC-REQ-BODY type. |
| * |
| * <xmp> |
| * KDC-REQ-BODY ::= SEQUENCE { |
| * kdc-options [0] KDCOptions, |
| * cname [1] PrincipalName OPTIONAL |
| * -- Used only in AS-REQ --, |
| * realm [2] Realm |
| * -- Server's realm |
| * -- Also client's in AS-REQ --, |
| * sname [3] PrincipalName OPTIONAL, |
| * from [4] KerberosTime OPTIONAL, |
| * till [5] KerberosTime, |
| * rtime [6] KerberosTime OPTIONAL, |
| * nonce [7] UInt32, |
| * etype [8] SEQUENCE OF Int32 -- EncryptionType |
| * -- in preference order --, |
| * addresses [9] HostAddresses OPTIONAL, |
| * enc-authorization-data [10] EncryptedData OPTIONAL |
| * -- AuthorizationData --, |
| * additional-tickets [11] SEQUENCE OF Ticket OPTIONAL |
| * -- NOTE: not empty |
| * } |
| * </xmp> |
| * |
| * <p> |
| * This definition reflects the Network Working Group RFC 4120 |
| * specification available at |
| * <a href="http://www.ietf.org/rfc/rfc4120.txt"> |
| * http://www.ietf.org/rfc/rfc4120.txt</a>. |
| */ |
| |
| public class KDCReqBody { |
| public KDCOptions kdcOptions; |
| public PrincipalName cname; //optional in ASReq only |
| public Realm crealm; |
| public PrincipalName sname; //optional |
| public KerberosTime from; //optional |
| public KerberosTime till; |
| public KerberosTime rtime; //optional |
| public HostAddresses addresses; //optional |
| |
| private int nonce; |
| private int[] eType = null; //a sequence; not optional |
| private EncryptedData encAuthorizationData; //optional |
| private Ticket[] additionalTickets; //optional |
| |
| public KDCReqBody( |
| KDCOptions new_kdcOptions, |
| PrincipalName new_cname, //optional in ASReq only |
| Realm new_crealm, |
| PrincipalName new_sname, //optional |
| KerberosTime new_from, //optional |
| KerberosTime new_till, |
| KerberosTime new_rtime, //optional |
| int new_nonce, |
| int[] new_eType, //a sequence; not optional |
| HostAddresses new_addresses, //optional |
| EncryptedData new_encAuthorizationData, //optional |
| Ticket[] new_additionalTickets //optional |
| ) throws IOException { |
| kdcOptions = new_kdcOptions; |
| cname = new_cname; |
| crealm = new_crealm; |
| sname = new_sname; |
| from = new_from; |
| till = new_till; |
| rtime = new_rtime; |
| nonce = new_nonce; |
| if (new_eType != null) { |
| eType = new_eType.clone(); |
| } |
| addresses = new_addresses; |
| encAuthorizationData = new_encAuthorizationData; |
| if (new_additionalTickets != null) { |
| additionalTickets = new Ticket[new_additionalTickets.length]; |
| for (int i = 0; i < new_additionalTickets.length; i++) { |
| if (new_additionalTickets[i] == null) { |
| throw new IOException("Cannot create a KDCReqBody"); |
| } else { |
| additionalTickets[i] = (Ticket)new_additionalTickets[i].clone(); |
| } |
| } |
| } |
| } |
| |
| /** |
| * Constructs a KDCReqBody object. |
| * @param encoding a DER-encoded data. |
| * @param msgType an int indicating whether it's KRB_AS_REQ or KRB_TGS_REQ type. |
| * @exception Asn1Exception if an error occurs while decoding an ASN1 encoded data. |
| * @exception IOException if an I/O error occurs while reading encoded data. |
| * @exception RealmException if an error occurs while constructing a Realm object from the encoded data. |
| * |
| */ |
| public KDCReqBody(DerValue encoding, int msgType) |
| throws Asn1Exception, RealmException, KrbException, IOException { |
| DerValue der, subDer; |
| addresses = null; |
| encAuthorizationData = null; |
| additionalTickets = null; |
| if (encoding.getTag() != DerValue.tag_Sequence) { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| kdcOptions = KDCOptions.parse(encoding.getData(), (byte)0x00, false); |
| cname = PrincipalName.parse(encoding.getData(), (byte)0x01, true); |
| if ((msgType != Krb5.KRB_AS_REQ) && (cname != null)) { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| crealm = Realm.parse(encoding.getData(), (byte)0x02, false); |
| sname = PrincipalName.parse(encoding.getData(), (byte)0x03, true); |
| from = KerberosTime.parse(encoding.getData(), (byte)0x04, true); |
| till = KerberosTime.parse(encoding.getData(), (byte)0x05, false); |
| rtime = KerberosTime.parse(encoding.getData(), (byte)0x06, true); |
| der = encoding.getData().getDerValue(); |
| if ((der.getTag() & (byte)0x1F) == (byte)0x07) { |
| nonce = der.getData().getBigInteger().intValue(); |
| } else { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| der = encoding.getData().getDerValue(); |
| Vector<Integer> v = new Vector<Integer> (); |
| if ((der.getTag() & (byte)0x1F) == (byte)0x08) { |
| subDer = der.getData().getDerValue(); |
| |
| if (subDer.getTag() == DerValue.tag_SequenceOf) { |
| while(subDer.getData().available() > 0) { |
| v.addElement(subDer.getData().getBigInteger().intValue()); |
| } |
| eType = new int[v.size()]; |
| for (int i = 0; i < v.size(); i++) { |
| eType[i] = v.elementAt(i); |
| } |
| } else { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| } else { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| if (encoding.getData().available() > 0) { |
| addresses = HostAddresses.parse(encoding.getData(), (byte)0x09, true); |
| } |
| if (encoding.getData().available() > 0) { |
| encAuthorizationData = EncryptedData.parse(encoding.getData(), (byte)0x0A, true); |
| } |
| if (encoding.getData().available() > 0) { |
| Vector<Ticket> tempTickets = new Vector<Ticket> (); |
| der = encoding.getData().getDerValue(); |
| if ((der.getTag() & (byte)0x1F) == (byte)0x0B) { |
| subDer = der.getData().getDerValue(); |
| if (subDer.getTag() == DerValue.tag_SequenceOf) { |
| while (subDer.getData().available() > 0) { |
| tempTickets.addElement(new Ticket(subDer.getData().getDerValue())); |
| } |
| } else { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| if (tempTickets.size() > 0) { |
| additionalTickets = new Ticket[tempTickets.size()]; |
| tempTickets.copyInto(additionalTickets); |
| } |
| } else { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| } |
| if (encoding.getData().available() > 0) { |
| throw new Asn1Exception(Krb5.ASN1_BAD_ID); |
| } |
| } |
| |
| /** |
| * Encodes this object to an OutputStream. |
| * |
| * @return an byte array of encoded data. |
| * @exception Asn1Exception if an error occurs while decoding an ASN1 encoded data. |
| * @exception IOException if an I/O error occurs while reading encoded data. |
| * |
| */ |
| public byte[] asn1Encode(int msgType) throws Asn1Exception, IOException { |
| Vector<DerValue> v = new Vector<DerValue> (); |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x00), kdcOptions.asn1Encode())); |
| if (msgType == Krb5.KRB_AS_REQ) { |
| if (cname != null) { |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x01), cname.asn1Encode())); |
| } |
| } |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x02), crealm.asn1Encode())); |
| if (sname != null) { |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x03), sname.asn1Encode())); |
| } |
| if (from != null) { |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x04), from.asn1Encode())); |
| } |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x05), till.asn1Encode())); |
| if (rtime != null) { |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x06), rtime.asn1Encode())); |
| } |
| DerOutputStream temp = new DerOutputStream(); |
| temp.putInteger(BigInteger.valueOf(nonce)); |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x07), temp.toByteArray())); |
| //revisit, if empty eType sequences are allowed |
| temp = new DerOutputStream(); |
| for (int i = 0; i < eType.length; i++) { |
| temp.putInteger(BigInteger.valueOf(eType[i])); |
| } |
| DerOutputStream eTypetemp = new DerOutputStream(); |
| eTypetemp.write(DerValue.tag_SequenceOf, temp); |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x08), eTypetemp.toByteArray())); |
| if (addresses != null) { |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x09), addresses.asn1Encode())); |
| } |
| if (encAuthorizationData != null) { |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x0A), encAuthorizationData.asn1Encode())); |
| } |
| if (additionalTickets != null && additionalTickets.length > 0) { |
| temp = new DerOutputStream(); |
| for (int i = 0; i < additionalTickets.length; i++) { |
| temp.write(additionalTickets[i].asn1Encode()); |
| } |
| DerOutputStream ticketsTemp = new DerOutputStream(); |
| ticketsTemp.write(DerValue.tag_SequenceOf, temp); |
| v.addElement(new DerValue(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte)0x0B), ticketsTemp.toByteArray())); |
| } |
| DerValue der[] = new DerValue[v.size()]; |
| v.copyInto(der); |
| temp = new DerOutputStream(); |
| temp.putSequence(der); |
| return temp.toByteArray(); |
| } |
| |
| public int getNonce() { |
| return nonce; |
| } |
| } |
