Mercurial > 510Connectbot
annotate src/com/five_ten_sg/connectbot/transport/SSH.java @ 314:d85bc45139f2 ganymed
add ecdsa key support everywhere
author | Carl Byington <carl@five-ten-sg.com> |
---|---|
date | Wed, 30 Jul 2014 16:25:29 -0700 |
parents | 4c3a4e88c027 |
children | 5351641c8a46 |
rev | line source |
---|---|
0 | 1 /* |
2 * ConnectBot: simple, powerful, open-source SSH client for Android | |
3 * Copyright 2007 Kenny Root, Jeffrey Sharkey | |
4 * | |
5 * Licensed under the Apache License, Version 2.0 (the "License"); | |
6 * you may not use this file except in compliance with the License. | |
7 * You may obtain a copy of the License at | |
8 * | |
9 * http://www.apache.org/licenses/LICENSE-2.0 | |
10 * | |
11 * Unless required by applicable law or agreed to in writing, software | |
12 * distributed under the License is distributed on an "AS IS" BASIS, | |
13 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
14 * See the License for the specific language governing permissions and | |
15 * limitations under the License. | |
16 */ | |
17 | |
18 package com.five_ten_sg.connectbot.transport; | |
19 | |
20 import java.io.File; | |
21 import java.io.IOException; | |
22 import java.io.InputStream; | |
23 import java.io.OutputStream; | |
24 import java.net.InetAddress; | |
25 import java.net.InetSocketAddress; | |
26 import java.net.URL; | |
27 import java.net.MalformedURLException; | |
28 import java.security.KeyPair; | |
29 import java.security.NoSuchAlgorithmException; | |
30 import java.security.PrivateKey; | |
31 import java.security.PublicKey; | |
32 import java.security.interfaces.DSAPrivateKey; | |
33 import java.security.interfaces.DSAPublicKey; | |
296
8c55d7714d03
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
273
diff
changeset
|
34 import java.security.interfaces.ECPrivateKey; |
8c55d7714d03
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
273
diff
changeset
|
35 import java.security.interfaces.ECPublicKey; |
0 | 36 import java.security.interfaces.RSAPrivateKey; |
37 import java.security.interfaces.RSAPublicKey; | |
38 import java.security.spec.InvalidKeySpecException; | |
39 import java.util.Arrays; | |
40 import java.util.HashMap; | |
41 import java.util.LinkedList; | |
42 import java.util.List; | |
43 import java.util.Locale; | |
44 import java.util.Map; | |
45 import java.util.Map.Entry; | |
46 import java.util.regex.Matcher; | |
47 import java.util.regex.Pattern; | |
48 | |
49 import com.five_ten_sg.connectbot.R; | |
50 import com.five_ten_sg.connectbot.bean.HostBean; | |
51 import com.five_ten_sg.connectbot.bean.PortForwardBean; | |
52 import com.five_ten_sg.connectbot.bean.PubkeyBean; | |
53 import com.five_ten_sg.connectbot.service.TerminalBridge; | |
54 import com.five_ten_sg.connectbot.service.TerminalManager; | |
55 import com.five_ten_sg.connectbot.service.TerminalManager.KeyHolder; | |
56 import com.five_ten_sg.connectbot.util.HostDatabase; | |
57 import com.five_ten_sg.connectbot.util.PubkeyDatabase; | |
58 import com.five_ten_sg.connectbot.util.PubkeyUtils; | |
59 import android.content.Context; | |
60 import android.net.Uri; | |
61 import android.os.Environment; | |
62 import android.util.Log; | |
63 | |
273
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
64 import ch.ethz.ssh2.AuthAgentCallback; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
65 import ch.ethz.ssh2.ChannelCondition; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
66 import ch.ethz.ssh2.Connection; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
67 import ch.ethz.ssh2.ConnectionInfo; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
68 import ch.ethz.ssh2.ConnectionMonitor; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
69 import ch.ethz.ssh2.DynamicPortForwarder; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
70 import ch.ethz.ssh2.InteractiveCallback; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
71 import ch.ethz.ssh2.KnownHosts; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
72 import ch.ethz.ssh2.LocalPortForwarder; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
73 import ch.ethz.ssh2.SCPClient; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
74 import ch.ethz.ssh2.ServerHostKeyVerifier; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
75 import ch.ethz.ssh2.Session; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
76 import ch.ethz.ssh2.HTTPProxyData; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
77 import ch.ethz.ssh2.HTTPProxyException; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
78 import ch.ethz.ssh2.crypto.PEMDecoder; |
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
79 import ch.ethz.ssh2.signature.DSASHA1Verify; |
296
8c55d7714d03
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
273
diff
changeset
|
80 import ch.ethz.ssh2.signature.ECDSASHA2Verify; |
273
91a31873c42a
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
112
diff
changeset
|
81 import ch.ethz.ssh2.signature.RSASHA1Verify; |
0 | 82 |
83 /** | |
84 * @author Kenny Root | |
85 * | |
86 */ | |
87 public class SSH extends AbsTransport implements ConnectionMonitor, InteractiveCallback, AuthAgentCallback { | |
88 private static final String PROTOCOL = "ssh"; | |
89 private static final String TAG = "ConnectBot.SSH"; | |
90 private static final int DEFAULT_PORT = 22; | |
91 | |
92 private static final String AUTH_PUBLICKEY = "publickey", | |
93 AUTH_PASSWORD = "password", | |
94 AUTH_KEYBOARDINTERACTIVE = "keyboard-interactive"; | |
95 | |
96 private final static int AUTH_TRIES = 20; | |
97 | |
98 static final Pattern hostmask; | |
99 static { | |
100 hostmask = Pattern.compile("^(.+)@([0-9a-z.-]+)(:(\\d+))?$", Pattern.CASE_INSENSITIVE); | |
101 } | |
102 | |
103 private boolean compression = false; | |
104 private String httpproxy = null; | |
105 private volatile boolean authenticated = false; | |
106 private volatile boolean connected = false; | |
107 private volatile boolean sessionOpen = false; | |
108 | |
109 private boolean pubkeysExhausted = false; | |
110 private boolean interactiveCanContinue = true; | |
111 | |
112 private Connection connection; | |
113 private Session session; | |
114 private ConnectionInfo connectionInfo; | |
115 | |
116 private OutputStream stdin; | |
117 private InputStream stdout; | |
118 private InputStream stderr; | |
119 | |
120 private static final int conditions = ChannelCondition.STDOUT_DATA | |
121 | ChannelCondition.STDERR_DATA | |
122 | ChannelCondition.CLOSED | |
123 | ChannelCondition.EOF; | |
124 | |
125 private List<PortForwardBean> portForwards = new LinkedList<PortForwardBean>(); | |
126 | |
127 private int columns; | |
128 private int rows; | |
129 | |
130 private int width; | |
131 private int height; | |
132 | |
133 private String useAuthAgent = HostDatabase.AUTHAGENT_NO; | |
134 private String agentLockPassphrase; | |
135 | |
136 public class HostKeyVerifier implements ServerHostKeyVerifier { | |
137 public boolean verifyServerHostKey(String hostname, int port, | |
138 String serverHostKeyAlgorithm, byte[] serverHostKey) throws IOException { | |
139 // read in all known hosts from hostdb | |
140 KnownHosts hosts = manager.hostdb.getKnownHosts(); | |
141 Boolean result; | |
142 String matchName = String.format(Locale.US, "%s:%d", hostname, port); | |
143 String fingerprint = KnownHosts.createHexFingerprint(serverHostKeyAlgorithm, serverHostKey); | |
144 String algorithmName; | |
145 | |
146 if ("ssh-rsa".equals(serverHostKeyAlgorithm)) | |
147 algorithmName = "RSA"; | |
148 else if ("ssh-dss".equals(serverHostKeyAlgorithm)) | |
149 algorithmName = "DSA"; | |
299
4c3a4e88c027
add ecdsa key support everywhere
Carl Byington <carl@five-ten-sg.com>
parents:
296
diff
changeset
|
150 else if (serverHostKeyAlgorithm.startsWith("ecdsa-sha2-")) |
0 | 151 algorithmName = "EC"; |
152 else | |
153 algorithmName = serverHostKeyAlgorithm; | |
154 | |
155 switch (hosts.verifyHostkey(matchName, serverHostKeyAlgorithm, serverHostKey)) { | |
156 case KnownHosts.HOSTKEY_IS_OK: | |
157 bridge.outputLine(manager.res.getString(R.string.terminal_sucess, algorithmName, fingerprint)); | |
158 return true; | |
159 | |
160 case KnownHosts.HOSTKEY_IS_NEW: | |
161 // prompt user | |
162 bridge.outputLine(manager.res.getString(R.string.host_authenticity_warning, hostname)); | |
163 bridge.outputLine(manager.res.getString(R.string.host_fingerprint, algorithmName, fingerprint)); | |
164 result = bridge.promptHelper.requestBooleanPrompt(null, manager.res.getString(R.string.prompt_continue_connecting)); | |
165 | |
166 if (result == null) return false; | |
167 | |
168 if (result.booleanValue()) { | |
169 // save this key in known database | |
170 manager.hostdb.saveKnownHost(hostname, port, serverHostKeyAlgorithm, serverHostKey); | |
171 } | |
172 | |
173 return result.booleanValue(); | |
174 | |
175 case KnownHosts.HOSTKEY_HAS_CHANGED: | |
176 String header = String.format("@ %s @", | |
177 manager.res.getString(R.string.host_verification_failure_warning_header)); | |
178 char[] atsigns = new char[header.length()]; | |
179 Arrays.fill(atsigns, '@'); | |
180 String border = new String(atsigns); | |
181 bridge.outputLine(border); | |
182 bridge.outputLine(manager.res.getString(R.string.host_verification_failure_warning)); | |
183 bridge.outputLine(border); | |
184 bridge.outputLine(String.format(manager.res.getString(R.string.host_fingerprint), | |
185 algorithmName, fingerprint)); | |
186 // Users have no way to delete keys, so we'll prompt them for now. | |
187 result = bridge.promptHelper.requestBooleanPrompt(null, manager.res.getString(R.string.prompt_continue_connecting)); | |
188 | |
189 if (result == null) return false; | |
190 | |
191 if (result.booleanValue()) { | |
192 // save this key in known database | |
193 manager.hostdb.saveKnownHost(hostname, port, serverHostKeyAlgorithm, serverHostKey); | |
194 } | |
195 | |
196 return result.booleanValue(); | |
197 | |
198 default: | |
199 return false; | |
200 } | |
201 } | |
202 | |
203 } | |
204 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
205 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
206 public SSH() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
207 super(); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
208 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
209 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
210 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
211 /** |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
212 * @return protocol part of the URI |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
213 */ |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
214 public static String getProtocolName() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
215 return PROTOCOL; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
216 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
217 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
218 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
219 public Uri getUri(String input) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
220 Matcher matcher = hostmask.matcher(input); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
221 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
222 if (!matcher.matches()) |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
223 return null; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
224 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
225 StringBuilder sb = new StringBuilder(); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
226 sb.append(PROTOCOL) |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
227 .append("://") |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
228 .append(Uri.encode(matcher.group(1))) |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
229 .append('@') |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
230 .append(matcher.group(2)); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
231 String portString = matcher.group(4); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
232 int port = DEFAULT_PORT; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
233 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
234 if (portString != null) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
235 try { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
236 port = Integer.parseInt(portString); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
237 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
238 if (port < 1 || port > 65535) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
239 port = DEFAULT_PORT; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
240 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
241 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
242 catch (NumberFormatException nfe) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
243 // Keep the default port |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
244 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
245 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
246 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
247 if (port != DEFAULT_PORT) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
248 sb.append(':') |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
249 .append(port); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
250 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
251 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
252 sb.append("/#") |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
253 .append(Uri.encode(input)); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
254 Uri uri = Uri.parse(sb.toString()); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
255 return uri; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
256 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
257 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
258 |
0 | 259 private void authenticate() { |
260 try { | |
261 if (connection.authenticateWithNone(host.getUsername())) { | |
262 finishConnection(); | |
263 return; | |
264 } | |
265 } | |
266 catch (Exception e) { | |
267 Log.d(TAG, "Host does not support 'none' authentication."); | |
268 } | |
269 | |
270 bridge.outputLine(manager.res.getString(R.string.terminal_auth)); | |
271 | |
272 try { | |
273 long pubkeyId = host.getPubkeyId(); | |
274 | |
275 if (!pubkeysExhausted && | |
276 pubkeyId != HostDatabase.PUBKEYID_NEVER && | |
277 connection.isAuthMethodAvailable(host.getUsername(), AUTH_PUBLICKEY)) { | |
278 // if explicit pubkey defined for this host, then prompt for password as needed | |
279 // otherwise just try all in-memory keys held in terminalmanager | |
280 if (pubkeyId == HostDatabase.PUBKEYID_ANY) { | |
281 // try each of the in-memory keys | |
282 bridge.outputLine(manager.res | |
283 .getString(R.string.terminal_auth_pubkey_any)); | |
284 | |
285 for (Entry<String, KeyHolder> entry : manager.loadedKeypairs.entrySet()) { | |
286 if (entry.getValue().bean.isConfirmUse() | |
287 && !promptForPubkeyUse(entry.getKey())) | |
288 continue; | |
289 | |
290 if (this.tryPublicKey(host.getUsername(), entry.getKey(), | |
291 entry.getValue().pair)) { | |
292 finishConnection(); | |
293 break; | |
294 } | |
295 } | |
296 } | |
297 else { | |
298 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pubkey_specific)); | |
299 // use a specific key for this host, as requested | |
300 PubkeyBean pubkey = manager.pubkeydb.findPubkeyById(pubkeyId); | |
301 | |
302 if (pubkey == null) | |
303 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pubkey_invalid)); | |
304 else if (tryPublicKey(pubkey)) | |
305 finishConnection(); | |
306 } | |
307 | |
308 pubkeysExhausted = true; | |
309 } | |
310 else if (interactiveCanContinue && | |
311 connection.isAuthMethodAvailable(host.getUsername(), AUTH_KEYBOARDINTERACTIVE)) { | |
312 // this auth method will talk with us using InteractiveCallback interface | |
313 // it blocks until authentication finishes | |
314 bridge.outputLine(manager.res.getString(R.string.terminal_auth_ki)); | |
315 interactiveCanContinue = false; | |
316 | |
317 if (connection.authenticateWithKeyboardInteractive(host.getUsername(), this)) { | |
318 finishConnection(); | |
319 } | |
320 else { | |
321 bridge.outputLine(manager.res.getString(R.string.terminal_auth_ki_fail)); | |
322 } | |
323 } | |
324 else if (connection.isAuthMethodAvailable(host.getUsername(), AUTH_PASSWORD)) { | |
325 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pass)); | |
326 String password = bridge.getPromptHelper().requestPasswordPrompt(null, | |
327 manager.res.getString(R.string.prompt_password)); | |
328 | |
329 if (password != null | |
330 && connection.authenticateWithPassword(host.getUsername(), password)) { | |
331 finishConnection(); | |
332 } | |
333 else { | |
334 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pass_fail)); | |
335 } | |
336 } | |
337 else { | |
338 bridge.outputLine(manager.res.getString(R.string.terminal_auth_fail)); | |
339 } | |
340 } | |
341 catch (IllegalStateException e) { | |
342 Log.e(TAG, "Connection went away while we were trying to authenticate", e); | |
343 return; | |
344 } | |
345 catch (Exception e) { | |
346 Log.e(TAG, "Problem during handleAuthentication()", e); | |
347 } | |
348 } | |
349 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
350 |
0 | 351 /** |
352 * Attempt connection with database row pointed to by cursor. | |
353 * @param cursor | |
354 * @return true for successful authentication | |
355 * @throws NoSuchAlgorithmException | |
356 * @throws InvalidKeySpecException | |
357 * @throws IOException | |
358 */ | |
359 private boolean tryPublicKey(PubkeyBean pubkey) throws NoSuchAlgorithmException, InvalidKeySpecException, IOException { | |
360 KeyPair pair = null; | |
361 | |
362 if (manager.isKeyLoaded(pubkey.getNickname())) { | |
363 // load this key from memory if its already there | |
364 Log.d(TAG, String.format("Found unlocked key '%s' already in-memory", pubkey.getNickname())); | |
365 | |
366 if (pubkey.isConfirmUse()) { | |
367 if (!promptForPubkeyUse(pubkey.getNickname())) | |
368 return false; | |
369 } | |
370 | |
371 pair = manager.getKey(pubkey.getNickname()); | |
372 } | |
373 else { | |
374 // otherwise load key from database and prompt for password as needed | |
375 String password = null; | |
376 | |
377 if (pubkey.isEncrypted()) { | |
378 password = bridge.getPromptHelper().requestPasswordPrompt(null, | |
379 manager.res.getString(R.string.prompt_pubkey_password, pubkey.getNickname())); | |
380 | |
381 // Something must have interrupted the prompt. | |
382 if (password == null) | |
383 return false; | |
384 } | |
385 | |
386 if (PubkeyDatabase.KEY_TYPE_IMPORTED.equals(pubkey.getType())) { | |
387 // load specific key using pem format | |
388 pair = PEMDecoder.decode(new String(pubkey.getPrivateKey()).toCharArray(), password); | |
389 } | |
390 else { | |
391 // load using internal generated format | |
392 PrivateKey privKey; | |
393 | |
394 try { | |
395 privKey = PubkeyUtils.decodePrivate(pubkey.getPrivateKey(), | |
396 pubkey.getType(), password); | |
397 } | |
398 catch (Exception e) { | |
399 String message = String.format("Bad password for key '%s'. Authentication failed.", pubkey.getNickname()); | |
400 Log.e(TAG, message, e); | |
401 bridge.outputLine(message); | |
402 return false; | |
403 } | |
404 | |
405 PublicKey pubKey = PubkeyUtils.decodePublic(pubkey.getPublicKey(), pubkey.getType()); | |
406 // convert key to trilead format | |
407 pair = new KeyPair(pubKey, privKey); | |
408 Log.d(TAG, "Unlocked key " + PubkeyUtils.formatKey(pubKey)); | |
409 } | |
410 | |
411 Log.d(TAG, String.format("Unlocked key '%s'", pubkey.getNickname())); | |
412 // save this key in memory | |
413 manager.addKey(pubkey, pair); | |
414 } | |
415 | |
416 return tryPublicKey(host.getUsername(), pubkey.getNickname(), pair); | |
417 } | |
418 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
419 |
0 | 420 private boolean tryPublicKey(String username, String keyNickname, KeyPair pair) throws IOException { |
421 //bridge.outputLine(String.format("Attempting 'publickey' with key '%s' [%s]...", keyNickname, trileadKey.toString())); | |
422 boolean success = connection.authenticateWithPublicKey(username, pair); | |
423 | |
424 if (!success) | |
425 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pubkey_fail, keyNickname)); | |
426 | |
427 return success; | |
428 } | |
429 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
430 |
0 | 431 /** |
432 * Internal method to request actual PTY terminal once we've finished | |
433 * authentication. If called before authenticated, it will just fail. | |
434 */ | |
435 private void finishConnection() { | |
436 authenticated = true; | |
437 | |
438 for (PortForwardBean portForward : portForwards) { | |
439 try { | |
440 enablePortForward(portForward); | |
441 bridge.outputLine(manager.res.getString(R.string.terminal_enable_portfoward, portForward.getDescription())); | |
442 } | |
443 catch (Exception e) { | |
444 Log.e(TAG, "Error setting up port forward during connect", e); | |
445 } | |
446 } | |
447 | |
448 if (!host.getWantSession()) { | |
449 bridge.outputLine(manager.res.getString(R.string.terminal_no_session)); | |
450 bridge.onConnected(); | |
451 return; | |
452 } | |
453 | |
454 try { | |
455 session = connection.openSession(); | |
456 | |
457 if (!useAuthAgent.equals(HostDatabase.AUTHAGENT_NO)) | |
458 session.requestAuthAgentForwarding(this); | |
459 | |
460 if (host.getWantX11Forward()) { | |
461 try { | |
462 session.requestX11Forwarding(host.getX11Host(), host.getX11Port(), null, false); | |
463 } | |
464 catch (IOException e2) { | |
465 Log.e(TAG, "Problem while trying to setup X11 forwarding in finishConnection()", e2); | |
466 } | |
467 } | |
468 | |
469 session.requestPTY(getEmulation(), columns, rows, width, height, null); | |
470 session.startShell(); | |
471 stdin = session.getStdin(); | |
472 stdout = session.getStdout(); | |
473 stderr = session.getStderr(); | |
474 sessionOpen = true; | |
475 bridge.onConnected(); | |
476 } | |
477 catch (IOException e1) { | |
478 Log.e(TAG, "Problem while trying to create PTY in finishConnection()", e1); | |
479 } | |
480 } | |
481 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
482 |
0 | 483 @Override |
484 public void connect() { | |
485 connection = new Connection(host.getHostname(), host.getPort()); | |
486 connection.addConnectionMonitor(this); | |
487 | |
488 try { | |
489 connection.setCompression(compression); | |
490 } | |
491 catch (IOException e) { | |
492 Log.e(TAG, "Could not enable compression!", e); | |
493 } | |
494 | |
495 if (httpproxy != null && httpproxy.length() > 0) { | |
496 Log.d(TAG, "Want HTTP Proxy: " + httpproxy, null); | |
497 | |
498 try { | |
499 URL u; | |
500 | |
501 if (httpproxy.startsWith("http://")) { | |
502 u = new URL(httpproxy); | |
503 } | |
504 else { | |
505 u = new URL("http://" + httpproxy); | |
506 } | |
507 | |
508 connection.setProxyData(new HTTPProxyData( | |
509 u.getHost(), | |
510 u.getPort(), | |
511 u.getUserInfo(), | |
512 u.getAuthority())); | |
513 bridge.outputLine("Connecting via proxy: " + httpproxy); | |
514 } | |
515 catch (MalformedURLException e) { | |
516 Log.e(TAG, "Could not parse proxy " + httpproxy, e); | |
517 // Display the reason in the text. | |
518 bridge.outputLine("Bad proxy URL: " + httpproxy); | |
519 onDisconnect(); | |
520 return; | |
521 } | |
522 } | |
523 | |
524 try { | |
525 /* Uncomment when debugging SSH protocol: | |
526 DebugLogger logger = new DebugLogger() { | |
527 | |
528 public void log(int level, String className, String message) { | |
529 Log.d("SSH", message); | |
530 } | |
531 | |
532 }; | |
533 Logger.enabled = true; | |
534 Logger.logger = logger; | |
535 */ | |
536 connectionInfo = connection.connect(new HostKeyVerifier()); | |
537 connected = true; | |
538 | |
539 if (connectionInfo.clientToServerCryptoAlgorithm | |
540 .equals(connectionInfo.serverToClientCryptoAlgorithm) | |
541 && connectionInfo.clientToServerMACAlgorithm | |
542 .equals(connectionInfo.serverToClientMACAlgorithm)) { | |
543 bridge.outputLine(manager.res.getString(R.string.terminal_using_algorithm, | |
544 connectionInfo.clientToServerCryptoAlgorithm, | |
545 connectionInfo.clientToServerMACAlgorithm)); | |
546 } | |
547 else { | |
548 bridge.outputLine(manager.res.getString( | |
549 R.string.terminal_using_c2s_algorithm, | |
550 connectionInfo.clientToServerCryptoAlgorithm, | |
551 connectionInfo.clientToServerMACAlgorithm)); | |
552 bridge.outputLine(manager.res.getString( | |
553 R.string.terminal_using_s2c_algorithm, | |
554 connectionInfo.serverToClientCryptoAlgorithm, | |
555 connectionInfo.serverToClientMACAlgorithm)); | |
556 } | |
557 } | |
558 catch (HTTPProxyException e) { | |
559 Log.e(TAG, "Failed to connect to HTTP Proxy", e); | |
560 // Display the reason in the text. | |
561 bridge.outputLine("Failed to connect to HTTP Proxy."); | |
562 onDisconnect(); | |
563 return; | |
564 } | |
565 catch (IOException e) { | |
566 Log.e(TAG, "Problem in SSH connection thread during authentication", e); | |
567 // Display the reason in the text. | |
568 bridge.outputLine(e.getCause().getMessage()); | |
569 onDisconnect(); | |
570 return; | |
571 } | |
572 | |
573 try { | |
574 // enter a loop to keep trying until authentication | |
575 int tries = 0; | |
576 | |
577 while (connected && !connection.isAuthenticationComplete() && tries++ < AUTH_TRIES) { | |
578 authenticate(); | |
579 // sleep to make sure we dont kill system | |
580 Thread.sleep(1000); | |
581 } | |
582 } | |
583 catch (Exception e) { | |
584 Log.e(TAG, "Problem in SSH connection thread during authentication", e); | |
585 } | |
586 } | |
587 | |
588 | |
589 @Override | |
590 public boolean willBlock() { | |
591 if (stdout == null) return true; | |
112
77ac18bc1b2f
cleanup java formatting
Carl Byington <carl@five-ten-sg.com>
parents:
31
diff
changeset
|
592 |
0 | 593 try { |
594 return stdout.available() == 0; | |
112
77ac18bc1b2f
cleanup java formatting
Carl Byington <carl@five-ten-sg.com>
parents:
31
diff
changeset
|
595 } |
77ac18bc1b2f
cleanup java formatting
Carl Byington <carl@five-ten-sg.com>
parents:
31
diff
changeset
|
596 catch (Exception e) { |
0 | 597 return true; |
598 } | |
599 } | |
600 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
601 |
0 | 602 @Override |
603 public int read(byte[] buffer, int start, int len) throws IOException { | |
604 int bytesRead = 0; | |
605 | |
606 if (session == null) | |
607 return 0; | |
608 | |
609 int newConditions = session.waitForCondition(conditions, 0); | |
610 | |
611 if ((newConditions & ChannelCondition.STDOUT_DATA) != 0) { | |
612 bytesRead = stdout.read(buffer, start, len); | |
613 } | |
614 | |
615 if ((newConditions & ChannelCondition.STDERR_DATA) != 0) { | |
616 byte discard[] = new byte[256]; | |
617 | |
618 while (stderr.available() > 0) { | |
619 stderr.read(discard); | |
620 } | |
621 } | |
622 | |
623 if ((newConditions & ChannelCondition.EOF) != 0) { | |
624 onDisconnect(); | |
625 throw new IOException("Remote end closed connection"); | |
626 } | |
627 | |
628 return bytesRead; | |
629 } | |
630 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
631 |
0 | 632 @Override |
633 public void write(byte[] buffer) throws IOException { | |
634 if (stdin != null) | |
635 stdin.write(buffer); | |
636 } | |
637 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
638 |
0 | 639 @Override |
640 public void write(int c) throws IOException { | |
641 if (stdin != null) | |
642 stdin.write(c); | |
643 } | |
644 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
645 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
646 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
647 public void flush() throws IOException { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
648 if (stdin != null) |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
649 stdin.flush(); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
650 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
651 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
652 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
653 public void connectionLost(Throwable reason) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
654 onDisconnect(); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
655 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
656 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
657 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
658 private void onDisconnect() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
659 close(); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
660 bridge.dispatchDisconnect(false); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
661 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
662 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
663 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
664 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
665 public void close() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
666 connected = false; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
667 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
668 if (session != null) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
669 session.close(); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
670 session = null; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
671 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
672 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
673 if (connection != null) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
674 connection.close(); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
675 connection = null; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
676 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
677 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
678 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
679 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
680 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
681 public void setDimensions(int columns, int rows, int width, int height) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
682 this.columns = columns; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
683 this.rows = rows; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
684 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
685 if (sessionOpen) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
686 try { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
687 session.resizePTY(columns, rows, width, height); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
688 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
689 catch (IOException e) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
690 Log.e(TAG, "Couldn't send resize PTY packet", e); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
691 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
692 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
693 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
694 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
695 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
696 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
697 public void setOptions(Map<String, String> options) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
698 if (options.containsKey("compression")) |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
699 compression = Boolean.parseBoolean(options.get("compression")); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
700 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
701 if (options.containsKey("httpproxy")) |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
702 httpproxy = options.get("httpproxy"); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
703 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
704 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
705 |
0 | 706 @Override |
707 public Map<String, String> getOptions() { | |
708 Map<String, String> options = new HashMap<String, String>(); | |
709 options.put("compression", Boolean.toString(compression)); | |
710 | |
711 if (httpproxy != null) | |
712 options.put("httpproxy", httpproxy); | |
713 | |
714 return options; | |
715 } | |
716 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
717 |
0 | 718 @Override |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
719 public void setCompression(boolean compression) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
720 this.compression = compression; |
0 | 721 } |
722 | |
723 | |
724 @Override | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
725 public void setHttpproxy(String httpproxy) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
726 this.httpproxy = httpproxy; |
0 | 727 } |
728 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
729 |
0 | 730 @Override |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
731 public void setUseAuthAgent(String useAuthAgent) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
732 this.useAuthAgent = useAuthAgent; |
0 | 733 } |
734 | |
735 @Override | |
736 public boolean canForwardPorts() { | |
737 return true; | |
738 } | |
739 | |
740 @Override | |
741 public List<PortForwardBean> getPortForwards() { | |
742 return portForwards; | |
743 } | |
744 | |
745 @Override | |
746 public boolean addPortForward(PortForwardBean portForward) { | |
747 return portForwards.add(portForward); | |
748 } | |
749 | |
750 @Override | |
751 public boolean removePortForward(PortForwardBean portForward) { | |
752 // Make sure we don't have a phantom forwarder. | |
753 disablePortForward(portForward); | |
754 return portForwards.remove(portForward); | |
755 } | |
756 | |
757 @Override | |
758 public boolean enablePortForward(PortForwardBean portForward) { | |
759 if (!portForwards.contains(portForward)) { | |
760 Log.e(TAG, "Attempt to enable port forward not in list"); | |
761 return false; | |
762 } | |
763 | |
764 if (!authenticated) | |
765 return false; | |
766 | |
767 if (HostDatabase.PORTFORWARD_LOCAL.equals(portForward.getType())) { | |
768 LocalPortForwarder lpf = null; | |
769 | |
770 try { | |
771 lpf = connection.createLocalPortForwarder( | |
772 new InetSocketAddress(InetAddress.getLocalHost(), portForward.getSourcePort()), | |
773 portForward.getDestAddr(), portForward.getDestPort()); | |
774 } | |
775 catch (Exception e) { | |
776 Log.e(TAG, "Could not create local port forward", e); | |
777 return false; | |
778 } | |
779 | |
780 if (lpf == null) { | |
781 Log.e(TAG, "returned LocalPortForwarder object is null"); | |
782 return false; | |
783 } | |
784 | |
785 portForward.setIdentifier(lpf); | |
786 portForward.setEnabled(true); | |
787 return true; | |
788 } | |
789 else if (HostDatabase.PORTFORWARD_REMOTE.equals(portForward.getType())) { | |
790 try { | |
791 connection.requestRemotePortForwarding("", portForward.getSourcePort(), portForward.getDestAddr(), portForward.getDestPort()); | |
792 } | |
793 catch (Exception e) { | |
794 Log.e(TAG, "Could not create remote port forward", e); | |
795 return false; | |
796 } | |
797 | |
798 portForward.setEnabled(true); | |
799 return true; | |
800 } | |
801 else if (HostDatabase.PORTFORWARD_DYNAMIC5.equals(portForward.getType())) { | |
802 DynamicPortForwarder dpf = null; | |
803 | |
804 try { | |
805 dpf = connection.createDynamicPortForwarder( | |
806 new InetSocketAddress(InetAddress.getLocalHost(), portForward.getSourcePort())); | |
807 } | |
808 catch (Exception e) { | |
809 Log.e(TAG, "Could not create dynamic port forward", e); | |
810 return false; | |
811 } | |
812 | |
813 portForward.setIdentifier(dpf); | |
814 portForward.setEnabled(true); | |
815 return true; | |
816 } | |
817 else { | |
818 // Unsupported type | |
819 Log.e(TAG, String.format("attempt to forward unknown type %s", portForward.getType())); | |
820 return false; | |
821 } | |
822 } | |
823 | |
824 @Override | |
825 public boolean disablePortForward(PortForwardBean portForward) { | |
826 if (!portForwards.contains(portForward)) { | |
827 Log.e(TAG, "Attempt to disable port forward not in list"); | |
828 return false; | |
829 } | |
830 | |
831 if (!authenticated) | |
832 return false; | |
833 | |
834 if (HostDatabase.PORTFORWARD_LOCAL.equals(portForward.getType())) { | |
835 LocalPortForwarder lpf = null; | |
836 lpf = (LocalPortForwarder)portForward.getIdentifier(); | |
837 | |
838 if (!portForward.isEnabled() || lpf == null) { | |
839 Log.d(TAG, String.format("Could not disable %s; it appears to be not enabled or have no handler", portForward.getNickname())); | |
840 return false; | |
841 } | |
842 | |
843 portForward.setEnabled(false); | |
844 | |
845 try { | |
846 lpf.close(); | |
847 } | |
848 catch (IOException e) { | |
849 Log.e(TAG, "Could not stop local port forwarder, setting enabled to false", e); | |
850 return false; | |
851 } | |
852 | |
853 return true; | |
854 } | |
855 else if (HostDatabase.PORTFORWARD_REMOTE.equals(portForward.getType())) { | |
856 portForward.setEnabled(false); | |
857 | |
858 try { | |
859 connection.cancelRemotePortForwarding(portForward.getSourcePort()); | |
860 } | |
861 catch (IOException e) { | |
862 Log.e(TAG, "Could not stop remote port forwarding, setting enabled to false", e); | |
863 return false; | |
864 } | |
865 | |
866 return true; | |
867 } | |
868 else if (HostDatabase.PORTFORWARD_DYNAMIC5.equals(portForward.getType())) { | |
869 DynamicPortForwarder dpf = null; | |
870 dpf = (DynamicPortForwarder)portForward.getIdentifier(); | |
871 | |
872 if (!portForward.isEnabled() || dpf == null) { | |
873 Log.d(TAG, String.format("Could not disable %s; it appears to be not enabled or have no handler", portForward.getNickname())); | |
874 return false; | |
875 } | |
876 | |
877 portForward.setEnabled(false); | |
878 | |
879 try { | |
880 dpf.close(); | |
881 } | |
882 catch (IOException e) { | |
883 Log.e(TAG, "Could not stop dynamic port forwarder, setting enabled to false", e); | |
884 return false; | |
885 } | |
886 | |
887 return true; | |
888 } | |
889 else { | |
890 // Unsupported type | |
891 Log.e(TAG, String.format("attempt to forward unknown type %s", portForward.getType())); | |
892 return false; | |
893 } | |
894 } | |
895 | |
896 @Override | |
897 public boolean canTransferFiles() { | |
898 return true; | |
899 } | |
900 | |
901 @Override | |
902 public boolean downloadFile(String remoteFile, String localFolder) { | |
903 try { | |
904 SCPClient client = new SCPClient(connection); | |
905 | |
906 if (localFolder == null || localFolder == "") | |
907 localFolder = Environment.getExternalStorageDirectory().getAbsolutePath(); | |
908 | |
909 File dir = new File(localFolder); | |
910 dir.mkdirs(); | |
911 client.get(remoteFile, localFolder); | |
912 return true; | |
913 } | |
914 catch (IOException e) { | |
915 Log.e(TAG, "Could not download remote file", e); | |
916 return false; | |
917 } | |
918 } | |
919 | |
920 @Override | |
921 public boolean uploadFile(String localFile, String remoteFile, | |
922 String remoteFolder, String mode) { | |
923 try { | |
924 SCPClient client = new SCPClient(connection); | |
925 | |
926 if (remoteFolder == null) | |
927 remoteFolder = ""; | |
928 | |
929 if (remoteFile == null || remoteFile == "") | |
930 client.put(localFile, remoteFolder, mode); | |
931 else | |
932 client.put(localFile, remoteFile, remoteFolder, mode); | |
933 | |
934 return true; | |
935 } | |
936 catch (IOException e) { | |
937 Log.e(TAG, "Could not upload local file", e); | |
938 return false; | |
939 } | |
940 } | |
941 | |
942 | |
943 @Override | |
944 public int getDefaultPort() { | |
945 return DEFAULT_PORT; | |
946 } | |
947 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
948 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
949 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
950 public boolean isConnected() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
951 return connected; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
952 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
953 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
954 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
955 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
956 public boolean isSessionOpen() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
957 return sessionOpen; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
958 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
959 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
960 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
961 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
962 public boolean isAuthenticated() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
963 return authenticated; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
964 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
965 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
966 |
0 | 967 @Override |
968 public String getDefaultNickname(String username, String hostname, int port) { | |
969 if (port == DEFAULT_PORT) { | |
970 return String.format(Locale.US, "%s@%s", username, hostname); | |
971 } | |
972 else { | |
973 return String.format(Locale.US, "%s@%s:%d", username, hostname, port); | |
974 } | |
975 } | |
976 | |
977 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
978 @Override |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
979 public void getSelectionArgs(Uri uri, Map<String, String> selection) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
980 selection.put(HostDatabase.FIELD_HOST_PROTOCOL, PROTOCOL); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
981 selection.put(HostDatabase.FIELD_HOST_NICKNAME, uri.getFragment()); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
982 selection.put(HostDatabase.FIELD_HOST_HOSTNAME, uri.getHost()); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
983 int port = uri.getPort(); |
0 | 984 |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
985 if (port < 0) |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
986 port = DEFAULT_PORT; |
0 | 987 |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
988 selection.put(HostDatabase.FIELD_HOST_PORT, Integer.toString(port)); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
989 selection.put(HostDatabase.FIELD_HOST_USERNAME, uri.getUserInfo()); |
0 | 990 } |
991 | |
992 | |
993 @Override | |
994 public HostBean createHost(Uri uri) { | |
995 HostBean host = new HostBean(); | |
996 host.setProtocol(PROTOCOL); | |
997 host.setHostname(uri.getHost()); | |
998 int port = uri.getPort(); | |
999 | |
1000 if (port < 0) | |
1001 port = DEFAULT_PORT; | |
1002 | |
1003 host.setPort(port); | |
1004 host.setUsername(uri.getUserInfo()); | |
1005 String nickname = uri.getFragment(); | |
1006 | |
1007 if (nickname == null || nickname.length() == 0) { | |
1008 host.setNickname(getDefaultNickname(host.getUsername(), | |
1009 host.getHostname(), host.getPort())); | |
1010 } | |
1011 else { | |
1012 host.setNickname(uri.getFragment()); | |
1013 } | |
1014 | |
1015 return host; | |
1016 } | |
1017 | |
1018 | |
12 | 1019 public String getFormatHint(Context context) { |
0 | 1020 return String.format("%s@%s:%s", |
1021 context.getString(R.string.format_username), | |
1022 context.getString(R.string.format_hostname), | |
1023 context.getString(R.string.format_port)); | |
1024 } | |
1025 | |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1026 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1027 /** |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1028 * @return do we use the network |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1029 */ |
0 | 1030 @Override |
31
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1031 public boolean usesNetwork() { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1032 return true; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1033 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1034 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1035 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1036 /** |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1037 * Handle challenges from keyboard-interactive authentication mode. |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1038 */ |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1039 public String[] replyToChallenge(String name, String instruction, int numPrompts, String[] prompt, boolean[] echo) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1040 interactiveCanContinue = true; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1041 String[] responses = new String[numPrompts]; |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1042 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1043 for (int i = 0; i < numPrompts; i++) { |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1044 // request response from user for each prompt |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1045 responses[i] = bridge.promptHelper.requestPasswordPrompt(instruction, prompt[i]); |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1046 } |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1047 |
139394237973
start tn5250 integration
Carl Byington <carl@five-ten-sg.com>
parents:
12
diff
changeset
|
1048 return responses; |
0 | 1049 } |
1050 | |
1051 public Map<String, byte[]> retrieveIdentities() { | |
1052 Map<String, byte[]> pubKeys = new HashMap<String, byte[]> (manager.loadedKeypairs.size()); | |
1053 | |
1054 for (Entry<String, KeyHolder> entry : manager.loadedKeypairs.entrySet()) { | |
1055 KeyPair pair = entry.getValue().pair; | |
1056 | |
1057 try { | |
1058 PrivateKey privKey = pair.getPrivate(); | |
1059 | |
1060 if (privKey instanceof RSAPrivateKey) { | |
1061 RSAPublicKey pubkey = (RSAPublicKey) pair.getPublic(); | |
1062 pubKeys.put(entry.getKey(), RSASHA1Verify.encodeSSHRSAPublicKey(pubkey)); | |
1063 } | |
1064 else if (privKey instanceof DSAPrivateKey) { | |
1065 DSAPublicKey pubkey = (DSAPublicKey) pair.getPublic(); | |
1066 pubKeys.put(entry.getKey(), DSASHA1Verify.encodeSSHDSAPublicKey(pubkey)); | |
1067 } | |
296
8c55d7714d03
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
273
diff
changeset
|
1068 else if (privKey instanceof ECPrivateKey) { |
8c55d7714d03
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
273
diff
changeset
|
1069 ECPublicKey pubkey = (ECPublicKey) pair.getPublic(); |
8c55d7714d03
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
273
diff
changeset
|
1070 pubKeys.put(entry.getKey(), ECDSASHA2Verify.encodeSSHECDSAPublicKey(pubkey)); |
8c55d7714d03
start conversion from trilead to ganymed
Carl Byington <carl@five-ten-sg.com>
parents:
273
diff
changeset
|
1071 } |
0 | 1072 else |
1073 continue; | |
1074 } | |
1075 catch (IOException e) { | |
1076 continue; | |
1077 } | |
1078 } | |
1079 | |
1080 return pubKeys; | |
1081 } | |
1082 | |
1083 public KeyPair getKeyPair(byte[] publicKey) { | |
1084 String nickname = manager.getKeyNickname(publicKey); | |
1085 | |
1086 if (nickname == null) | |
1087 return null; | |
1088 | |
1089 if (useAuthAgent.equals(HostDatabase.AUTHAGENT_NO)) { | |
1090 Log.e(TAG, ""); | |
1091 return null; | |
1092 } | |
1093 else if (useAuthAgent.equals(HostDatabase.AUTHAGENT_CONFIRM) || | |
1094 manager.loadedKeypairs.get(nickname).bean.isConfirmUse()) { | |
1095 if (!promptForPubkeyUse(nickname)) | |
1096 return null; | |
1097 } | |
1098 | |
1099 return manager.getKey(nickname); | |
1100 } | |
1101 | |
1102 private boolean promptForPubkeyUse(String nickname) { | |
1103 Boolean result = bridge.promptHelper.requestBooleanPrompt(null, | |
1104 manager.res.getString(R.string.prompt_allow_agent_to_use_key, | |
1105 nickname)); | |
1106 return result; | |
1107 } | |
1108 | |
1109 public boolean addIdentity(KeyPair pair, String comment, boolean confirmUse, int lifetime) { | |
1110 PubkeyBean pubkey = new PubkeyBean(); | |
1111 // pubkey.setType(PubkeyDatabase.KEY_TYPE_IMPORTED); | |
1112 pubkey.setNickname(comment); | |
1113 pubkey.setConfirmUse(confirmUse); | |
1114 pubkey.setLifetime(lifetime); | |
1115 manager.addKey(pubkey, pair); | |
1116 return true; | |
1117 } | |
1118 | |
1119 public boolean removeAllIdentities() { | |
1120 manager.loadedKeypairs.clear(); | |
1121 return true; | |
1122 } | |
1123 | |
1124 public boolean removeIdentity(byte[] publicKey) { | |
1125 return manager.removeKey(publicKey); | |
1126 } | |
1127 | |
1128 public boolean isAgentLocked() { | |
1129 return agentLockPassphrase != null; | |
1130 } | |
1131 | |
1132 public boolean requestAgentUnlock(String unlockPassphrase) { | |
1133 if (agentLockPassphrase == null) | |
1134 return false; | |
1135 | |
1136 if (agentLockPassphrase.equals(unlockPassphrase)) | |
1137 agentLockPassphrase = null; | |
1138 | |
1139 return agentLockPassphrase == null; | |
1140 } | |
1141 | |
1142 public boolean setAgentLock(String lockPassphrase) { | |
1143 if (agentLockPassphrase != null) | |
1144 return false; | |
1145 | |
1146 agentLockPassphrase = lockPassphrase; | |
1147 return true; | |
1148 } | |
1149 | |
1150 } |