|
0
|
1 /*
|
|
|
2 * ConnectBot: simple, powerful, open-source SSH client for Android
|
|
|
3 * Copyright 2007 Kenny Root, Jeffrey Sharkey
|
|
|
4 *
|
|
|
5 * Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
6 * you may not use this file except in compliance with the License.
|
|
|
7 * You may obtain a copy of the License at
|
|
|
8 *
|
|
|
9 * http://www.apache.org/licenses/LICENSE-2.0
|
|
|
10 *
|
|
|
11 * Unless required by applicable law or agreed to in writing, software
|
|
|
12 * distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
13 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
14 * See the License for the specific language governing permissions and
|
|
|
15 * limitations under the License.
|
|
|
16 */
|
|
|
17
|
|
|
18 package com.five_ten_sg.connectbot.transport;
|
|
|
19
|
|
|
20 import java.io.File;
|
|
|
21 import java.io.IOException;
|
|
|
22 import java.io.InputStream;
|
|
|
23 import java.io.OutputStream;
|
|
|
24 import java.net.InetAddress;
|
|
|
25 import java.net.InetSocketAddress;
|
|
|
26 import java.net.URL;
|
|
|
27 import java.net.MalformedURLException;
|
|
|
28 import java.security.KeyPair;
|
|
|
29 import java.security.NoSuchAlgorithmException;
|
|
|
30 import java.security.PrivateKey;
|
|
|
31 import java.security.PublicKey;
|
|
|
32 import java.security.interfaces.DSAPrivateKey;
|
|
|
33 import java.security.interfaces.DSAPublicKey;
|
|
|
34 import java.security.interfaces.RSAPrivateKey;
|
|
|
35 import java.security.interfaces.RSAPublicKey;
|
|
|
36 import java.security.spec.InvalidKeySpecException;
|
|
|
37 import java.util.Arrays;
|
|
|
38 import java.util.HashMap;
|
|
|
39 import java.util.LinkedList;
|
|
|
40 import java.util.List;
|
|
|
41 import java.util.Locale;
|
|
|
42 import java.util.Map;
|
|
|
43 import java.util.Map.Entry;
|
|
|
44 import java.util.regex.Matcher;
|
|
|
45 import java.util.regex.Pattern;
|
|
|
46
|
|
|
47 import com.five_ten_sg.connectbot.R;
|
|
|
48 import com.five_ten_sg.connectbot.bean.HostBean;
|
|
|
49 import com.five_ten_sg.connectbot.bean.PortForwardBean;
|
|
|
50 import com.five_ten_sg.connectbot.bean.PubkeyBean;
|
|
|
51 import com.five_ten_sg.connectbot.service.TerminalBridge;
|
|
|
52 import com.five_ten_sg.connectbot.service.TerminalManager;
|
|
|
53 import com.five_ten_sg.connectbot.service.TerminalManager.KeyHolder;
|
|
|
54 import com.five_ten_sg.connectbot.util.HostDatabase;
|
|
|
55 import com.five_ten_sg.connectbot.util.PubkeyDatabase;
|
|
|
56 import com.five_ten_sg.connectbot.util.PubkeyUtils;
|
|
|
57 import android.content.Context;
|
|
|
58 import android.net.Uri;
|
|
|
59 import android.os.Environment;
|
|
|
60 import android.util.Log;
|
|
|
61
|
|
|
62 import com.trilead.ssh2.AuthAgentCallback;
|
|
|
63 import com.trilead.ssh2.ChannelCondition;
|
|
|
64 import com.trilead.ssh2.Connection;
|
|
|
65 import com.trilead.ssh2.ConnectionInfo;
|
|
|
66 import com.trilead.ssh2.ConnectionMonitor;
|
|
|
67 import com.trilead.ssh2.DynamicPortForwarder;
|
|
|
68 import com.trilead.ssh2.InteractiveCallback;
|
|
|
69 import com.trilead.ssh2.KnownHosts;
|
|
|
70 import com.trilead.ssh2.LocalPortForwarder;
|
|
|
71 import com.trilead.ssh2.SCPClient;
|
|
|
72 import com.trilead.ssh2.ServerHostKeyVerifier;
|
|
|
73 import com.trilead.ssh2.Session;
|
|
|
74 import com.trilead.ssh2.HTTPProxyData;
|
|
|
75 import com.trilead.ssh2.HTTPProxyException;
|
|
|
76 import com.trilead.ssh2.crypto.PEMDecoder;
|
|
|
77 import com.trilead.ssh2.signature.DSASHA1Verify;
|
|
|
78 import com.trilead.ssh2.signature.RSASHA1Verify;
|
|
|
79
|
|
|
80 /**
|
|
|
81 * @author Kenny Root
|
|
|
82 *
|
|
|
83 */
|
|
|
84 public class SSH extends AbsTransport implements ConnectionMonitor, InteractiveCallback, AuthAgentCallback {
|
|
|
85 public SSH() {
|
|
|
86 super();
|
|
|
87 }
|
|
|
88
|
|
|
89 /**
|
|
8
|
90 * @param host
|
|
0
|
91 * @param bridge
|
|
8
|
92 * @param manager
|
|
0
|
93 */
|
|
|
94 public SSH(HostBean host, TerminalBridge bridge, TerminalManager manager) {
|
|
|
95 super(host, bridge, manager);
|
|
|
96 }
|
|
|
97
|
|
|
98 private static final String PROTOCOL = "ssh";
|
|
|
99 private static final String TAG = "ConnectBot.SSH";
|
|
|
100 private static final int DEFAULT_PORT = 22;
|
|
|
101
|
|
|
102 private static final String AUTH_PUBLICKEY = "publickey",
|
|
|
103 AUTH_PASSWORD = "password",
|
|
|
104 AUTH_KEYBOARDINTERACTIVE = "keyboard-interactive";
|
|
|
105
|
|
|
106 private final static int AUTH_TRIES = 20;
|
|
|
107
|
|
|
108 static final Pattern hostmask;
|
|
|
109 static {
|
|
|
110 hostmask = Pattern.compile("^(.+)@([0-9a-z.-]+)(:(\\d+))?$", Pattern.CASE_INSENSITIVE);
|
|
|
111 }
|
|
|
112
|
|
|
113 private boolean compression = false;
|
|
|
114 private String httpproxy = null;
|
|
|
115 private volatile boolean authenticated = false;
|
|
|
116 private volatile boolean connected = false;
|
|
|
117 private volatile boolean sessionOpen = false;
|
|
|
118
|
|
|
119 private boolean pubkeysExhausted = false;
|
|
|
120 private boolean interactiveCanContinue = true;
|
|
|
121
|
|
|
122 private Connection connection;
|
|
|
123 private Session session;
|
|
|
124 private ConnectionInfo connectionInfo;
|
|
|
125
|
|
|
126 private OutputStream stdin;
|
|
|
127 private InputStream stdout;
|
|
|
128 private InputStream stderr;
|
|
|
129
|
|
|
130 private static final int conditions = ChannelCondition.STDOUT_DATA
|
|
|
131 | ChannelCondition.STDERR_DATA
|
|
|
132 | ChannelCondition.CLOSED
|
|
|
133 | ChannelCondition.EOF;
|
|
|
134
|
|
|
135 private List<PortForwardBean> portForwards = new LinkedList<PortForwardBean>();
|
|
|
136
|
|
|
137 private int columns;
|
|
|
138 private int rows;
|
|
|
139
|
|
|
140 private int width;
|
|
|
141 private int height;
|
|
|
142
|
|
|
143 private String useAuthAgent = HostDatabase.AUTHAGENT_NO;
|
|
|
144 private String agentLockPassphrase;
|
|
|
145
|
|
|
146 public class HostKeyVerifier implements ServerHostKeyVerifier {
|
|
|
147 public boolean verifyServerHostKey(String hostname, int port,
|
|
|
148 String serverHostKeyAlgorithm, byte[] serverHostKey) throws IOException {
|
|
|
149 // read in all known hosts from hostdb
|
|
|
150 KnownHosts hosts = manager.hostdb.getKnownHosts();
|
|
|
151 Boolean result;
|
|
|
152 String matchName = String.format(Locale.US, "%s:%d", hostname, port);
|
|
|
153 String fingerprint = KnownHosts.createHexFingerprint(serverHostKeyAlgorithm, serverHostKey);
|
|
|
154 String algorithmName;
|
|
|
155
|
|
|
156 if ("ssh-rsa".equals(serverHostKeyAlgorithm))
|
|
|
157 algorithmName = "RSA";
|
|
|
158 else if ("ssh-dss".equals(serverHostKeyAlgorithm))
|
|
|
159 algorithmName = "DSA";
|
|
|
160 else if (serverHostKeyAlgorithm.startsWith("ecdsa-"))
|
|
|
161 algorithmName = "EC";
|
|
|
162 else
|
|
|
163 algorithmName = serverHostKeyAlgorithm;
|
|
|
164
|
|
|
165 switch (hosts.verifyHostkey(matchName, serverHostKeyAlgorithm, serverHostKey)) {
|
|
|
166 case KnownHosts.HOSTKEY_IS_OK:
|
|
|
167 bridge.outputLine(manager.res.getString(R.string.terminal_sucess, algorithmName, fingerprint));
|
|
|
168 return true;
|
|
|
169
|
|
|
170 case KnownHosts.HOSTKEY_IS_NEW:
|
|
|
171 // prompt user
|
|
|
172 bridge.outputLine(manager.res.getString(R.string.host_authenticity_warning, hostname));
|
|
|
173 bridge.outputLine(manager.res.getString(R.string.host_fingerprint, algorithmName, fingerprint));
|
|
|
174 result = bridge.promptHelper.requestBooleanPrompt(null, manager.res.getString(R.string.prompt_continue_connecting));
|
|
|
175
|
|
|
176 if (result == null) return false;
|
|
|
177
|
|
|
178 if (result.booleanValue()) {
|
|
|
179 // save this key in known database
|
|
|
180 manager.hostdb.saveKnownHost(hostname, port, serverHostKeyAlgorithm, serverHostKey);
|
|
|
181 }
|
|
|
182
|
|
|
183 return result.booleanValue();
|
|
|
184
|
|
|
185 case KnownHosts.HOSTKEY_HAS_CHANGED:
|
|
|
186 String header = String.format("@ %s @",
|
|
|
187 manager.res.getString(R.string.host_verification_failure_warning_header));
|
|
|
188 char[] atsigns = new char[header.length()];
|
|
|
189 Arrays.fill(atsigns, '@');
|
|
|
190 String border = new String(atsigns);
|
|
|
191 bridge.outputLine(border);
|
|
|
192 bridge.outputLine(manager.res.getString(R.string.host_verification_failure_warning));
|
|
|
193 bridge.outputLine(border);
|
|
|
194 bridge.outputLine(String.format(manager.res.getString(R.string.host_fingerprint),
|
|
|
195 algorithmName, fingerprint));
|
|
|
196 // Users have no way to delete keys, so we'll prompt them for now.
|
|
|
197 result = bridge.promptHelper.requestBooleanPrompt(null, manager.res.getString(R.string.prompt_continue_connecting));
|
|
|
198
|
|
|
199 if (result == null) return false;
|
|
|
200
|
|
|
201 if (result.booleanValue()) {
|
|
|
202 // save this key in known database
|
|
|
203 manager.hostdb.saveKnownHost(hostname, port, serverHostKeyAlgorithm, serverHostKey);
|
|
|
204 }
|
|
|
205
|
|
|
206 return result.booleanValue();
|
|
|
207
|
|
|
208 default:
|
|
|
209 return false;
|
|
|
210 }
|
|
|
211 }
|
|
|
212
|
|
|
213 }
|
|
|
214
|
|
|
215 private void authenticate() {
|
|
|
216 try {
|
|
|
217 if (connection.authenticateWithNone(host.getUsername())) {
|
|
|
218 finishConnection();
|
|
|
219 return;
|
|
|
220 }
|
|
|
221 }
|
|
|
222 catch (Exception e) {
|
|
|
223 Log.d(TAG, "Host does not support 'none' authentication.");
|
|
|
224 }
|
|
|
225
|
|
|
226 bridge.outputLine(manager.res.getString(R.string.terminal_auth));
|
|
|
227
|
|
|
228 try {
|
|
|
229 long pubkeyId = host.getPubkeyId();
|
|
|
230
|
|
|
231 if (!pubkeysExhausted &&
|
|
|
232 pubkeyId != HostDatabase.PUBKEYID_NEVER &&
|
|
|
233 connection.isAuthMethodAvailable(host.getUsername(), AUTH_PUBLICKEY)) {
|
|
|
234 // if explicit pubkey defined for this host, then prompt for password as needed
|
|
|
235 // otherwise just try all in-memory keys held in terminalmanager
|
|
|
236 if (pubkeyId == HostDatabase.PUBKEYID_ANY) {
|
|
|
237 // try each of the in-memory keys
|
|
|
238 bridge.outputLine(manager.res
|
|
|
239 .getString(R.string.terminal_auth_pubkey_any));
|
|
|
240
|
|
|
241 for (Entry<String, KeyHolder> entry : manager.loadedKeypairs.entrySet()) {
|
|
|
242 if (entry.getValue().bean.isConfirmUse()
|
|
|
243 && !promptForPubkeyUse(entry.getKey()))
|
|
|
244 continue;
|
|
|
245
|
|
|
246 if (this.tryPublicKey(host.getUsername(), entry.getKey(),
|
|
|
247 entry.getValue().pair)) {
|
|
|
248 finishConnection();
|
|
|
249 break;
|
|
|
250 }
|
|
|
251 }
|
|
|
252 }
|
|
|
253 else {
|
|
|
254 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pubkey_specific));
|
|
|
255 // use a specific key for this host, as requested
|
|
|
256 PubkeyBean pubkey = manager.pubkeydb.findPubkeyById(pubkeyId);
|
|
|
257
|
|
|
258 if (pubkey == null)
|
|
|
259 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pubkey_invalid));
|
|
|
260 else if (tryPublicKey(pubkey))
|
|
|
261 finishConnection();
|
|
|
262 }
|
|
|
263
|
|
|
264 pubkeysExhausted = true;
|
|
|
265 }
|
|
|
266 else if (interactiveCanContinue &&
|
|
|
267 connection.isAuthMethodAvailable(host.getUsername(), AUTH_KEYBOARDINTERACTIVE)) {
|
|
|
268 // this auth method will talk with us using InteractiveCallback interface
|
|
|
269 // it blocks until authentication finishes
|
|
|
270 bridge.outputLine(manager.res.getString(R.string.terminal_auth_ki));
|
|
|
271 interactiveCanContinue = false;
|
|
|
272
|
|
|
273 if (connection.authenticateWithKeyboardInteractive(host.getUsername(), this)) {
|
|
|
274 finishConnection();
|
|
|
275 }
|
|
|
276 else {
|
|
|
277 bridge.outputLine(manager.res.getString(R.string.terminal_auth_ki_fail));
|
|
|
278 }
|
|
|
279 }
|
|
|
280 else if (connection.isAuthMethodAvailable(host.getUsername(), AUTH_PASSWORD)) {
|
|
|
281 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pass));
|
|
|
282 String password = bridge.getPromptHelper().requestPasswordPrompt(null,
|
|
|
283 manager.res.getString(R.string.prompt_password));
|
|
|
284
|
|
|
285 if (password != null
|
|
|
286 && connection.authenticateWithPassword(host.getUsername(), password)) {
|
|
|
287 finishConnection();
|
|
|
288 }
|
|
|
289 else {
|
|
|
290 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pass_fail));
|
|
|
291 }
|
|
|
292 }
|
|
|
293 else {
|
|
|
294 bridge.outputLine(manager.res.getString(R.string.terminal_auth_fail));
|
|
|
295 }
|
|
|
296 }
|
|
|
297 catch (IllegalStateException e) {
|
|
|
298 Log.e(TAG, "Connection went away while we were trying to authenticate", e);
|
|
|
299 return;
|
|
|
300 }
|
|
|
301 catch (Exception e) {
|
|
|
302 Log.e(TAG, "Problem during handleAuthentication()", e);
|
|
|
303 }
|
|
|
304 }
|
|
|
305
|
|
|
306 /**
|
|
|
307 * Attempt connection with database row pointed to by cursor.
|
|
|
308 * @param cursor
|
|
|
309 * @return true for successful authentication
|
|
|
310 * @throws NoSuchAlgorithmException
|
|
|
311 * @throws InvalidKeySpecException
|
|
|
312 * @throws IOException
|
|
|
313 */
|
|
|
314 private boolean tryPublicKey(PubkeyBean pubkey) throws NoSuchAlgorithmException, InvalidKeySpecException, IOException {
|
|
|
315 KeyPair pair = null;
|
|
|
316
|
|
|
317 if (manager.isKeyLoaded(pubkey.getNickname())) {
|
|
|
318 // load this key from memory if its already there
|
|
|
319 Log.d(TAG, String.format("Found unlocked key '%s' already in-memory", pubkey.getNickname()));
|
|
|
320
|
|
|
321 if (pubkey.isConfirmUse()) {
|
|
|
322 if (!promptForPubkeyUse(pubkey.getNickname()))
|
|
|
323 return false;
|
|
|
324 }
|
|
|
325
|
|
|
326 pair = manager.getKey(pubkey.getNickname());
|
|
|
327 }
|
|
|
328 else {
|
|
|
329 // otherwise load key from database and prompt for password as needed
|
|
|
330 String password = null;
|
|
|
331
|
|
|
332 if (pubkey.isEncrypted()) {
|
|
|
333 password = bridge.getPromptHelper().requestPasswordPrompt(null,
|
|
|
334 manager.res.getString(R.string.prompt_pubkey_password, pubkey.getNickname()));
|
|
|
335
|
|
|
336 // Something must have interrupted the prompt.
|
|
|
337 if (password == null)
|
|
|
338 return false;
|
|
|
339 }
|
|
|
340
|
|
|
341 if (PubkeyDatabase.KEY_TYPE_IMPORTED.equals(pubkey.getType())) {
|
|
|
342 // load specific key using pem format
|
|
|
343 pair = PEMDecoder.decode(new String(pubkey.getPrivateKey()).toCharArray(), password);
|
|
|
344 }
|
|
|
345 else {
|
|
|
346 // load using internal generated format
|
|
|
347 PrivateKey privKey;
|
|
|
348
|
|
|
349 try {
|
|
|
350 privKey = PubkeyUtils.decodePrivate(pubkey.getPrivateKey(),
|
|
|
351 pubkey.getType(), password);
|
|
|
352 }
|
|
|
353 catch (Exception e) {
|
|
|
354 String message = String.format("Bad password for key '%s'. Authentication failed.", pubkey.getNickname());
|
|
|
355 Log.e(TAG, message, e);
|
|
|
356 bridge.outputLine(message);
|
|
|
357 return false;
|
|
|
358 }
|
|
|
359
|
|
|
360 PublicKey pubKey = PubkeyUtils.decodePublic(pubkey.getPublicKey(), pubkey.getType());
|
|
|
361 // convert key to trilead format
|
|
|
362 pair = new KeyPair(pubKey, privKey);
|
|
|
363 Log.d(TAG, "Unlocked key " + PubkeyUtils.formatKey(pubKey));
|
|
|
364 }
|
|
|
365
|
|
|
366 Log.d(TAG, String.format("Unlocked key '%s'", pubkey.getNickname()));
|
|
|
367 // save this key in memory
|
|
|
368 manager.addKey(pubkey, pair);
|
|
|
369 }
|
|
|
370
|
|
|
371 return tryPublicKey(host.getUsername(), pubkey.getNickname(), pair);
|
|
|
372 }
|
|
|
373
|
|
|
374 private boolean tryPublicKey(String username, String keyNickname, KeyPair pair) throws IOException {
|
|
|
375 //bridge.outputLine(String.format("Attempting 'publickey' with key '%s' [%s]...", keyNickname, trileadKey.toString()));
|
|
|
376 boolean success = connection.authenticateWithPublicKey(username, pair);
|
|
|
377
|
|
|
378 if (!success)
|
|
|
379 bridge.outputLine(manager.res.getString(R.string.terminal_auth_pubkey_fail, keyNickname));
|
|
|
380
|
|
|
381 return success;
|
|
|
382 }
|
|
|
383
|
|
|
384 /**
|
|
|
385 * Internal method to request actual PTY terminal once we've finished
|
|
|
386 * authentication. If called before authenticated, it will just fail.
|
|
|
387 */
|
|
|
388 private void finishConnection() {
|
|
|
389 authenticated = true;
|
|
|
390
|
|
|
391 for (PortForwardBean portForward : portForwards) {
|
|
|
392 try {
|
|
|
393 enablePortForward(portForward);
|
|
|
394 bridge.outputLine(manager.res.getString(R.string.terminal_enable_portfoward, portForward.getDescription()));
|
|
|
395 }
|
|
|
396 catch (Exception e) {
|
|
|
397 Log.e(TAG, "Error setting up port forward during connect", e);
|
|
|
398 }
|
|
|
399 }
|
|
|
400
|
|
|
401 if (!host.getWantSession()) {
|
|
|
402 bridge.outputLine(manager.res.getString(R.string.terminal_no_session));
|
|
|
403 bridge.onConnected();
|
|
|
404 return;
|
|
|
405 }
|
|
|
406
|
|
|
407 try {
|
|
|
408 session = connection.openSession();
|
|
|
409
|
|
|
410 if (!useAuthAgent.equals(HostDatabase.AUTHAGENT_NO))
|
|
|
411 session.requestAuthAgentForwarding(this);
|
|
|
412
|
|
|
413 if (host.getWantX11Forward()) {
|
|
|
414 try {
|
|
|
415 session.requestX11Forwarding(host.getX11Host(), host.getX11Port(), null, false);
|
|
|
416 }
|
|
|
417 catch (IOException e2) {
|
|
|
418 Log.e(TAG, "Problem while trying to setup X11 forwarding in finishConnection()", e2);
|
|
|
419 }
|
|
|
420 }
|
|
|
421
|
|
|
422 session.requestPTY(getEmulation(), columns, rows, width, height, null);
|
|
|
423 session.startShell();
|
|
|
424 stdin = session.getStdin();
|
|
|
425 stdout = session.getStdout();
|
|
|
426 stderr = session.getStderr();
|
|
|
427 sessionOpen = true;
|
|
|
428 bridge.onConnected();
|
|
|
429 }
|
|
|
430 catch (IOException e1) {
|
|
|
431 Log.e(TAG, "Problem while trying to create PTY in finishConnection()", e1);
|
|
|
432 }
|
|
|
433 }
|
|
|
434
|
|
|
435 @Override
|
|
|
436 public void connect() {
|
|
|
437 connection = new Connection(host.getHostname(), host.getPort());
|
|
|
438 connection.addConnectionMonitor(this);
|
|
|
439
|
|
|
440 try {
|
|
|
441 connection.setCompression(compression);
|
|
|
442 }
|
|
|
443 catch (IOException e) {
|
|
|
444 Log.e(TAG, "Could not enable compression!", e);
|
|
|
445 }
|
|
|
446
|
|
|
447 if (httpproxy != null && httpproxy.length() > 0) {
|
|
|
448 Log.d(TAG, "Want HTTP Proxy: " + httpproxy, null);
|
|
|
449
|
|
|
450 try {
|
|
|
451 URL u;
|
|
|
452
|
|
|
453 if (httpproxy.startsWith("http://")) {
|
|
|
454 u = new URL(httpproxy);
|
|
|
455 }
|
|
|
456 else {
|
|
|
457 u = new URL("http://" + httpproxy);
|
|
|
458 }
|
|
|
459
|
|
|
460 connection.setProxyData(new HTTPProxyData(
|
|
|
461 u.getHost(),
|
|
|
462 u.getPort(),
|
|
|
463 u.getUserInfo(),
|
|
|
464 u.getAuthority()));
|
|
|
465 bridge.outputLine("Connecting via proxy: " + httpproxy);
|
|
|
466 }
|
|
|
467 catch (MalformedURLException e) {
|
|
|
468 Log.e(TAG, "Could not parse proxy " + httpproxy, e);
|
|
|
469 // Display the reason in the text.
|
|
|
470 bridge.outputLine("Bad proxy URL: " + httpproxy);
|
|
|
471 onDisconnect();
|
|
|
472 return;
|
|
|
473 }
|
|
|
474 }
|
|
|
475
|
|
|
476 try {
|
|
|
477 /* Uncomment when debugging SSH protocol:
|
|
|
478 DebugLogger logger = new DebugLogger() {
|
|
|
479
|
|
|
480 public void log(int level, String className, String message) {
|
|
|
481 Log.d("SSH", message);
|
|
|
482 }
|
|
|
483
|
|
|
484 };
|
|
|
485 Logger.enabled = true;
|
|
|
486 Logger.logger = logger;
|
|
|
487 */
|
|
|
488 connectionInfo = connection.connect(new HostKeyVerifier());
|
|
|
489 connected = true;
|
|
|
490
|
|
|
491 if (connectionInfo.clientToServerCryptoAlgorithm
|
|
|
492 .equals(connectionInfo.serverToClientCryptoAlgorithm)
|
|
|
493 && connectionInfo.clientToServerMACAlgorithm
|
|
|
494 .equals(connectionInfo.serverToClientMACAlgorithm)) {
|
|
|
495 bridge.outputLine(manager.res.getString(R.string.terminal_using_algorithm,
|
|
|
496 connectionInfo.clientToServerCryptoAlgorithm,
|
|
|
497 connectionInfo.clientToServerMACAlgorithm));
|
|
|
498 }
|
|
|
499 else {
|
|
|
500 bridge.outputLine(manager.res.getString(
|
|
|
501 R.string.terminal_using_c2s_algorithm,
|
|
|
502 connectionInfo.clientToServerCryptoAlgorithm,
|
|
|
503 connectionInfo.clientToServerMACAlgorithm));
|
|
|
504 bridge.outputLine(manager.res.getString(
|
|
|
505 R.string.terminal_using_s2c_algorithm,
|
|
|
506 connectionInfo.serverToClientCryptoAlgorithm,
|
|
|
507 connectionInfo.serverToClientMACAlgorithm));
|
|
|
508 }
|
|
|
509 }
|
|
|
510 catch (HTTPProxyException e) {
|
|
|
511 Log.e(TAG, "Failed to connect to HTTP Proxy", e);
|
|
|
512 // Display the reason in the text.
|
|
|
513 bridge.outputLine("Failed to connect to HTTP Proxy.");
|
|
|
514 onDisconnect();
|
|
|
515 return;
|
|
|
516 }
|
|
|
517 catch (IOException e) {
|
|
|
518 Log.e(TAG, "Problem in SSH connection thread during authentication", e);
|
|
|
519 // Display the reason in the text.
|
|
|
520 bridge.outputLine(e.getCause().getMessage());
|
|
|
521 onDisconnect();
|
|
|
522 return;
|
|
|
523 }
|
|
|
524
|
|
|
525 try {
|
|
|
526 // enter a loop to keep trying until authentication
|
|
|
527 int tries = 0;
|
|
|
528
|
|
|
529 while (connected && !connection.isAuthenticationComplete() && tries++ < AUTH_TRIES) {
|
|
|
530 authenticate();
|
|
|
531 // sleep to make sure we dont kill system
|
|
|
532 Thread.sleep(1000);
|
|
|
533 }
|
|
|
534 }
|
|
|
535 catch (Exception e) {
|
|
|
536 Log.e(TAG, "Problem in SSH connection thread during authentication", e);
|
|
|
537 }
|
|
|
538 }
|
|
|
539
|
|
|
540 @Override
|
|
|
541 public void close() {
|
|
|
542 connected = false;
|
|
|
543
|
|
|
544 if (session != null) {
|
|
|
545 session.close();
|
|
|
546 session = null;
|
|
|
547 }
|
|
|
548
|
|
|
549 if (connection != null) {
|
|
|
550 connection.close();
|
|
|
551 connection = null;
|
|
|
552 }
|
|
|
553 }
|
|
|
554
|
|
|
555 private void onDisconnect() {
|
|
|
556 close();
|
|
|
557 bridge.dispatchDisconnect(false);
|
|
|
558 }
|
|
|
559
|
|
|
560 @Override
|
|
|
561 public void flush() throws IOException {
|
|
|
562 if (stdin != null)
|
|
|
563 stdin.flush();
|
|
|
564 }
|
|
|
565
|
|
|
566 @Override
|
|
|
567 public boolean willBlock() {
|
|
|
568 if (stdout == null) return true;
|
|
|
569 try {
|
|
|
570 return stdout.available() == 0;
|
|
|
571 } catch (Exception e) {
|
|
|
572 return true;
|
|
|
573 }
|
|
|
574 }
|
|
|
575
|
|
|
576 @Override
|
|
|
577 public int read(byte[] buffer, int start, int len) throws IOException {
|
|
|
578 int bytesRead = 0;
|
|
|
579
|
|
|
580 if (session == null)
|
|
|
581 return 0;
|
|
|
582
|
|
|
583 int newConditions = session.waitForCondition(conditions, 0);
|
|
|
584
|
|
|
585 if ((newConditions & ChannelCondition.STDOUT_DATA) != 0) {
|
|
|
586 bytesRead = stdout.read(buffer, start, len);
|
|
|
587 }
|
|
|
588
|
|
|
589 if ((newConditions & ChannelCondition.STDERR_DATA) != 0) {
|
|
|
590 byte discard[] = new byte[256];
|
|
|
591
|
|
|
592 while (stderr.available() > 0) {
|
|
|
593 stderr.read(discard);
|
|
|
594 }
|
|
|
595 }
|
|
|
596
|
|
|
597 if ((newConditions & ChannelCondition.EOF) != 0) {
|
|
|
598 onDisconnect();
|
|
|
599 throw new IOException("Remote end closed connection");
|
|
|
600 }
|
|
|
601
|
|
|
602 return bytesRead;
|
|
|
603 }
|
|
|
604
|
|
|
605 @Override
|
|
|
606 public void write(byte[] buffer) throws IOException {
|
|
|
607 if (stdin != null)
|
|
|
608 stdin.write(buffer);
|
|
|
609 }
|
|
|
610
|
|
|
611 @Override
|
|
|
612 public void write(int c) throws IOException {
|
|
|
613 if (stdin != null)
|
|
|
614 stdin.write(c);
|
|
|
615 }
|
|
|
616
|
|
|
617 @Override
|
|
|
618 public Map<String, String> getOptions() {
|
|
|
619 Map<String, String> options = new HashMap<String, String>();
|
|
|
620 options.put("compression", Boolean.toString(compression));
|
|
|
621
|
|
|
622 if (httpproxy != null)
|
|
|
623 options.put("httpproxy", httpproxy);
|
|
|
624
|
|
|
625 return options;
|
|
|
626 }
|
|
|
627
|
|
|
628 @Override
|
|
|
629 public void setOptions(Map<String, String> options) {
|
|
|
630 if (options.containsKey("compression"))
|
|
|
631 compression = Boolean.parseBoolean(options.get("compression"));
|
|
|
632
|
|
|
633 if (options.containsKey("httpproxy"))
|
|
|
634 httpproxy = options.get("httpproxy");
|
|
|
635 }
|
|
|
636
|
|
|
637 public static String getProtocolName() {
|
|
|
638 return PROTOCOL;
|
|
|
639 }
|
|
|
640
|
|
|
641 @Override
|
|
|
642 public boolean isSessionOpen() {
|
|
|
643 return sessionOpen;
|
|
|
644 }
|
|
|
645
|
|
|
646 @Override
|
|
|
647 public boolean isConnected() {
|
|
|
648 return connected;
|
|
|
649 }
|
|
|
650
|
|
|
651 @Override
|
|
|
652 public boolean isAuthenticated() {
|
|
|
653 return authenticated;
|
|
|
654 }
|
|
|
655
|
|
|
656 public void connectionLost(Throwable reason) {
|
|
|
657 onDisconnect();
|
|
|
658 }
|
|
|
659
|
|
|
660 @Override
|
|
|
661 public boolean canForwardPorts() {
|
|
|
662 return true;
|
|
|
663 }
|
|
|
664
|
|
|
665 @Override
|
|
|
666 public List<PortForwardBean> getPortForwards() {
|
|
|
667 return portForwards;
|
|
|
668 }
|
|
|
669
|
|
|
670 @Override
|
|
|
671 public boolean addPortForward(PortForwardBean portForward) {
|
|
|
672 return portForwards.add(portForward);
|
|
|
673 }
|
|
|
674
|
|
|
675 @Override
|
|
|
676 public boolean removePortForward(PortForwardBean portForward) {
|
|
|
677 // Make sure we don't have a phantom forwarder.
|
|
|
678 disablePortForward(portForward);
|
|
|
679 return portForwards.remove(portForward);
|
|
|
680 }
|
|
|
681
|
|
|
682 @Override
|
|
|
683 public boolean enablePortForward(PortForwardBean portForward) {
|
|
|
684 if (!portForwards.contains(portForward)) {
|
|
|
685 Log.e(TAG, "Attempt to enable port forward not in list");
|
|
|
686 return false;
|
|
|
687 }
|
|
|
688
|
|
|
689 if (!authenticated)
|
|
|
690 return false;
|
|
|
691
|
|
|
692 if (HostDatabase.PORTFORWARD_LOCAL.equals(portForward.getType())) {
|
|
|
693 LocalPortForwarder lpf = null;
|
|
|
694
|
|
|
695 try {
|
|
|
696 lpf = connection.createLocalPortForwarder(
|
|
|
697 new InetSocketAddress(InetAddress.getLocalHost(), portForward.getSourcePort()),
|
|
|
698 portForward.getDestAddr(), portForward.getDestPort());
|
|
|
699 }
|
|
|
700 catch (Exception e) {
|
|
|
701 Log.e(TAG, "Could not create local port forward", e);
|
|
|
702 return false;
|
|
|
703 }
|
|
|
704
|
|
|
705 if (lpf == null) {
|
|
|
706 Log.e(TAG, "returned LocalPortForwarder object is null");
|
|
|
707 return false;
|
|
|
708 }
|
|
|
709
|
|
|
710 portForward.setIdentifier(lpf);
|
|
|
711 portForward.setEnabled(true);
|
|
|
712 return true;
|
|
|
713 }
|
|
|
714 else if (HostDatabase.PORTFORWARD_REMOTE.equals(portForward.getType())) {
|
|
|
715 try {
|
|
|
716 connection.requestRemotePortForwarding("", portForward.getSourcePort(), portForward.getDestAddr(), portForward.getDestPort());
|
|
|
717 }
|
|
|
718 catch (Exception e) {
|
|
|
719 Log.e(TAG, "Could not create remote port forward", e);
|
|
|
720 return false;
|
|
|
721 }
|
|
|
722
|
|
|
723 portForward.setEnabled(true);
|
|
|
724 return true;
|
|
|
725 }
|
|
|
726 else if (HostDatabase.PORTFORWARD_DYNAMIC5.equals(portForward.getType())) {
|
|
|
727 DynamicPortForwarder dpf = null;
|
|
|
728
|
|
|
729 try {
|
|
|
730 dpf = connection.createDynamicPortForwarder(
|
|
|
731 new InetSocketAddress(InetAddress.getLocalHost(), portForward.getSourcePort()));
|
|
|
732 }
|
|
|
733 catch (Exception e) {
|
|
|
734 Log.e(TAG, "Could not create dynamic port forward", e);
|
|
|
735 return false;
|
|
|
736 }
|
|
|
737
|
|
|
738 portForward.setIdentifier(dpf);
|
|
|
739 portForward.setEnabled(true);
|
|
|
740 return true;
|
|
|
741 }
|
|
|
742 else {
|
|
|
743 // Unsupported type
|
|
|
744 Log.e(TAG, String.format("attempt to forward unknown type %s", portForward.getType()));
|
|
|
745 return false;
|
|
|
746 }
|
|
|
747 }
|
|
|
748
|
|
|
749 @Override
|
|
|
750 public boolean disablePortForward(PortForwardBean portForward) {
|
|
|
751 if (!portForwards.contains(portForward)) {
|
|
|
752 Log.e(TAG, "Attempt to disable port forward not in list");
|
|
|
753 return false;
|
|
|
754 }
|
|
|
755
|
|
|
756 if (!authenticated)
|
|
|
757 return false;
|
|
|
758
|
|
|
759 if (HostDatabase.PORTFORWARD_LOCAL.equals(portForward.getType())) {
|
|
|
760 LocalPortForwarder lpf = null;
|
|
|
761 lpf = (LocalPortForwarder)portForward.getIdentifier();
|
|
|
762
|
|
|
763 if (!portForward.isEnabled() || lpf == null) {
|
|
|
764 Log.d(TAG, String.format("Could not disable %s; it appears to be not enabled or have no handler", portForward.getNickname()));
|
|
|
765 return false;
|
|
|
766 }
|
|
|
767
|
|
|
768 portForward.setEnabled(false);
|
|
|
769
|
|
|
770 try {
|
|
|
771 lpf.close();
|
|
|
772 }
|
|
|
773 catch (IOException e) {
|
|
|
774 Log.e(TAG, "Could not stop local port forwarder, setting enabled to false", e);
|
|
|
775 return false;
|
|
|
776 }
|
|
|
777
|
|
|
778 return true;
|
|
|
779 }
|
|
|
780 else if (HostDatabase.PORTFORWARD_REMOTE.equals(portForward.getType())) {
|
|
|
781 portForward.setEnabled(false);
|
|
|
782
|
|
|
783 try {
|
|
|
784 connection.cancelRemotePortForwarding(portForward.getSourcePort());
|
|
|
785 }
|
|
|
786 catch (IOException e) {
|
|
|
787 Log.e(TAG, "Could not stop remote port forwarding, setting enabled to false", e);
|
|
|
788 return false;
|
|
|
789 }
|
|
|
790
|
|
|
791 return true;
|
|
|
792 }
|
|
|
793 else if (HostDatabase.PORTFORWARD_DYNAMIC5.equals(portForward.getType())) {
|
|
|
794 DynamicPortForwarder dpf = null;
|
|
|
795 dpf = (DynamicPortForwarder)portForward.getIdentifier();
|
|
|
796
|
|
|
797 if (!portForward.isEnabled() || dpf == null) {
|
|
|
798 Log.d(TAG, String.format("Could not disable %s; it appears to be not enabled or have no handler", portForward.getNickname()));
|
|
|
799 return false;
|
|
|
800 }
|
|
|
801
|
|
|
802 portForward.setEnabled(false);
|
|
|
803
|
|
|
804 try {
|
|
|
805 dpf.close();
|
|
|
806 }
|
|
|
807 catch (IOException e) {
|
|
|
808 Log.e(TAG, "Could not stop dynamic port forwarder, setting enabled to false", e);
|
|
|
809 return false;
|
|
|
810 }
|
|
|
811
|
|
|
812 return true;
|
|
|
813 }
|
|
|
814 else {
|
|
|
815 // Unsupported type
|
|
|
816 Log.e(TAG, String.format("attempt to forward unknown type %s", portForward.getType()));
|
|
|
817 return false;
|
|
|
818 }
|
|
|
819 }
|
|
|
820
|
|
|
821 @Override
|
|
|
822 public boolean canTransferFiles() {
|
|
|
823 return true;
|
|
|
824 }
|
|
|
825
|
|
|
826 @Override
|
|
|
827 public boolean downloadFile(String remoteFile, String localFolder) {
|
|
|
828 try {
|
|
|
829 SCPClient client = new SCPClient(connection);
|
|
|
830
|
|
|
831 if (localFolder == null || localFolder == "")
|
|
|
832 localFolder = Environment.getExternalStorageDirectory().getAbsolutePath();
|
|
|
833
|
|
|
834 File dir = new File(localFolder);
|
|
|
835 dir.mkdirs();
|
|
|
836 client.get(remoteFile, localFolder);
|
|
|
837 return true;
|
|
|
838 }
|
|
|
839 catch (IOException e) {
|
|
|
840 Log.e(TAG, "Could not download remote file", e);
|
|
|
841 return false;
|
|
|
842 }
|
|
|
843 }
|
|
|
844
|
|
|
845 @Override
|
|
|
846 public boolean uploadFile(String localFile, String remoteFile,
|
|
|
847 String remoteFolder, String mode) {
|
|
|
848 try {
|
|
|
849 SCPClient client = new SCPClient(connection);
|
|
|
850
|
|
|
851 if (remoteFolder == null)
|
|
|
852 remoteFolder = "";
|
|
|
853
|
|
|
854 if (remoteFile == null || remoteFile == "")
|
|
|
855 client.put(localFile, remoteFolder, mode);
|
|
|
856 else
|
|
|
857 client.put(localFile, remoteFile, remoteFolder, mode);
|
|
|
858
|
|
|
859 return true;
|
|
|
860 }
|
|
|
861 catch (IOException e) {
|
|
|
862 Log.e(TAG, "Could not upload local file", e);
|
|
|
863 return false;
|
|
|
864 }
|
|
|
865 }
|
|
|
866
|
|
|
867 @Override
|
|
|
868 public void setDimensions(int columns, int rows, int width, int height) {
|
|
|
869 this.columns = columns;
|
|
|
870 this.rows = rows;
|
|
|
871
|
|
|
872 if (sessionOpen) {
|
|
|
873 try {
|
|
|
874 session.resizePTY(columns, rows, width, height);
|
|
|
875 }
|
|
|
876 catch (IOException e) {
|
|
|
877 Log.e(TAG, "Couldn't send resize PTY packet", e);
|
|
|
878 }
|
|
|
879 }
|
|
|
880 }
|
|
|
881
|
|
|
882 @Override
|
|
|
883 public int getDefaultPort() {
|
|
|
884 return DEFAULT_PORT;
|
|
|
885 }
|
|
|
886
|
|
|
887 @Override
|
|
|
888 public String getDefaultNickname(String username, String hostname, int port) {
|
|
|
889 if (port == DEFAULT_PORT) {
|
|
|
890 return String.format(Locale.US, "%s@%s", username, hostname);
|
|
|
891 }
|
|
|
892 else {
|
|
|
893 return String.format(Locale.US, "%s@%s:%d", username, hostname, port);
|
|
|
894 }
|
|
|
895 }
|
|
|
896
|
|
|
897 public static Uri getUri(String input) {
|
|
|
898 Matcher matcher = hostmask.matcher(input);
|
|
|
899
|
|
|
900 if (!matcher.matches())
|
|
|
901 return null;
|
|
|
902
|
|
|
903 StringBuilder sb = new StringBuilder();
|
|
|
904 sb.append(PROTOCOL)
|
|
|
905 .append("://")
|
|
|
906 .append(Uri.encode(matcher.group(1)))
|
|
|
907 .append('@')
|
|
|
908 .append(matcher.group(2));
|
|
|
909 String portString = matcher.group(4);
|
|
|
910 int port = DEFAULT_PORT;
|
|
|
911
|
|
|
912 if (portString != null) {
|
|
|
913 try {
|
|
|
914 port = Integer.parseInt(portString);
|
|
|
915
|
|
|
916 if (port < 1 || port > 65535) {
|
|
|
917 port = DEFAULT_PORT;
|
|
|
918 }
|
|
|
919 }
|
|
|
920 catch (NumberFormatException nfe) {
|
|
|
921 // Keep the default port
|
|
|
922 }
|
|
|
923 }
|
|
|
924
|
|
|
925 if (port != DEFAULT_PORT) {
|
|
|
926 sb.append(':')
|
|
|
927 .append(port);
|
|
|
928 }
|
|
|
929
|
|
|
930 sb.append("/#")
|
|
|
931 .append(Uri.encode(input));
|
|
|
932 Uri uri = Uri.parse(sb.toString());
|
|
|
933 return uri;
|
|
|
934 }
|
|
|
935
|
|
|
936 /**
|
|
|
937 * Handle challenges from keyboard-interactive authentication mode.
|
|
|
938 */
|
|
|
939 public String[] replyToChallenge(String name, String instruction, int numPrompts, String[] prompt, boolean[] echo) {
|
|
|
940 interactiveCanContinue = true;
|
|
|
941 String[] responses = new String[numPrompts];
|
|
|
942
|
|
|
943 for (int i = 0; i < numPrompts; i++) {
|
|
|
944 // request response from user for each prompt
|
|
|
945 responses[i] = bridge.promptHelper.requestPasswordPrompt(instruction, prompt[i]);
|
|
|
946 }
|
|
|
947
|
|
|
948 return responses;
|
|
|
949 }
|
|
|
950
|
|
|
951 @Override
|
|
|
952 public HostBean createHost(Uri uri) {
|
|
|
953 HostBean host = new HostBean();
|
|
|
954 host.setProtocol(PROTOCOL);
|
|
|
955 host.setHostname(uri.getHost());
|
|
|
956 int port = uri.getPort();
|
|
|
957
|
|
|
958 if (port < 0)
|
|
|
959 port = DEFAULT_PORT;
|
|
|
960
|
|
|
961 host.setPort(port);
|
|
|
962 host.setUsername(uri.getUserInfo());
|
|
|
963 String nickname = uri.getFragment();
|
|
|
964
|
|
|
965 if (nickname == null || nickname.length() == 0) {
|
|
|
966 host.setNickname(getDefaultNickname(host.getUsername(),
|
|
|
967 host.getHostname(), host.getPort()));
|
|
|
968 }
|
|
|
969 else {
|
|
|
970 host.setNickname(uri.getFragment());
|
|
|
971 }
|
|
|
972
|
|
|
973 return host;
|
|
|
974 }
|
|
|
975
|
|
|
976 @Override
|
|
|
977 public void getSelectionArgs(Uri uri, Map<String, String> selection) {
|
|
|
978 selection.put(HostDatabase.FIELD_HOST_PROTOCOL, PROTOCOL);
|
|
|
979 selection.put(HostDatabase.FIELD_HOST_NICKNAME, uri.getFragment());
|
|
|
980 selection.put(HostDatabase.FIELD_HOST_HOSTNAME, uri.getHost());
|
|
|
981 int port = uri.getPort();
|
|
|
982
|
|
|
983 if (port < 0)
|
|
|
984 port = DEFAULT_PORT;
|
|
|
985
|
|
|
986 selection.put(HostDatabase.FIELD_HOST_PORT, Integer.toString(port));
|
|
|
987 selection.put(HostDatabase.FIELD_HOST_USERNAME, uri.getUserInfo());
|
|
|
988 }
|
|
|
989
|
|
|
990 @Override
|
|
|
991 public void setCompression(boolean compression) {
|
|
|
992 this.compression = compression;
|
|
|
993 }
|
|
|
994
|
|
|
995 @Override
|
|
|
996 public void setHttpproxy(String httpproxy) {
|
|
|
997 this.httpproxy = httpproxy;
|
|
|
998 }
|
|
|
999
|
|
|
1000 public static String getFormatHint(Context context) {
|
|
|
1001 return String.format("%s@%s:%s",
|
|
|
1002 context.getString(R.string.format_username),
|
|
|
1003 context.getString(R.string.format_hostname),
|
|
|
1004 context.getString(R.string.format_port));
|
|
|
1005 }
|
|
|
1006
|
|
|
1007 @Override
|
|
|
1008 public void setUseAuthAgent(String useAuthAgent) {
|
|
|
1009 this.useAuthAgent = useAuthAgent;
|
|
|
1010 }
|
|
|
1011
|
|
|
1012 public Map<String, byte[]> retrieveIdentities() {
|
|
|
1013 Map<String, byte[]> pubKeys = new HashMap<String, byte[]> (manager.loadedKeypairs.size());
|
|
|
1014
|
|
|
1015 for (Entry<String, KeyHolder> entry : manager.loadedKeypairs.entrySet()) {
|
|
|
1016 KeyPair pair = entry.getValue().pair;
|
|
|
1017
|
|
|
1018 try {
|
|
|
1019 PrivateKey privKey = pair.getPrivate();
|
|
|
1020
|
|
|
1021 if (privKey instanceof RSAPrivateKey) {
|
|
|
1022 RSAPublicKey pubkey = (RSAPublicKey) pair.getPublic();
|
|
|
1023 pubKeys.put(entry.getKey(), RSASHA1Verify.encodeSSHRSAPublicKey(pubkey));
|
|
|
1024 }
|
|
|
1025 else if (privKey instanceof DSAPrivateKey) {
|
|
|
1026 DSAPublicKey pubkey = (DSAPublicKey) pair.getPublic();
|
|
|
1027 pubKeys.put(entry.getKey(), DSASHA1Verify.encodeSSHDSAPublicKey(pubkey));
|
|
|
1028 }
|
|
|
1029 else
|
|
|
1030 continue;
|
|
|
1031 }
|
|
|
1032 catch (IOException e) {
|
|
|
1033 continue;
|
|
|
1034 }
|
|
|
1035 }
|
|
|
1036
|
|
|
1037 return pubKeys;
|
|
|
1038 }
|
|
|
1039
|
|
|
1040 public KeyPair getKeyPair(byte[] publicKey) {
|
|
|
1041 String nickname = manager.getKeyNickname(publicKey);
|
|
|
1042
|
|
|
1043 if (nickname == null)
|
|
|
1044 return null;
|
|
|
1045
|
|
|
1046 if (useAuthAgent.equals(HostDatabase.AUTHAGENT_NO)) {
|
|
|
1047 Log.e(TAG, "");
|
|
|
1048 return null;
|
|
|
1049 }
|
|
|
1050 else if (useAuthAgent.equals(HostDatabase.AUTHAGENT_CONFIRM) ||
|
|
|
1051 manager.loadedKeypairs.get(nickname).bean.isConfirmUse()) {
|
|
|
1052 if (!promptForPubkeyUse(nickname))
|
|
|
1053 return null;
|
|
|
1054 }
|
|
|
1055
|
|
|
1056 return manager.getKey(nickname);
|
|
|
1057 }
|
|
|
1058
|
|
|
1059 private boolean promptForPubkeyUse(String nickname) {
|
|
|
1060 Boolean result = bridge.promptHelper.requestBooleanPrompt(null,
|
|
|
1061 manager.res.getString(R.string.prompt_allow_agent_to_use_key,
|
|
|
1062 nickname));
|
|
|
1063 return result;
|
|
|
1064 }
|
|
|
1065
|
|
|
1066 public boolean addIdentity(KeyPair pair, String comment, boolean confirmUse, int lifetime) {
|
|
|
1067 PubkeyBean pubkey = new PubkeyBean();
|
|
|
1068 // pubkey.setType(PubkeyDatabase.KEY_TYPE_IMPORTED);
|
|
|
1069 pubkey.setNickname(comment);
|
|
|
1070 pubkey.setConfirmUse(confirmUse);
|
|
|
1071 pubkey.setLifetime(lifetime);
|
|
|
1072 manager.addKey(pubkey, pair);
|
|
|
1073 return true;
|
|
|
1074 }
|
|
|
1075
|
|
|
1076 public boolean removeAllIdentities() {
|
|
|
1077 manager.loadedKeypairs.clear();
|
|
|
1078 return true;
|
|
|
1079 }
|
|
|
1080
|
|
|
1081 public boolean removeIdentity(byte[] publicKey) {
|
|
|
1082 return manager.removeKey(publicKey);
|
|
|
1083 }
|
|
|
1084
|
|
|
1085 public boolean isAgentLocked() {
|
|
|
1086 return agentLockPassphrase != null;
|
|
|
1087 }
|
|
|
1088
|
|
|
1089 public boolean requestAgentUnlock(String unlockPassphrase) {
|
|
|
1090 if (agentLockPassphrase == null)
|
|
|
1091 return false;
|
|
|
1092
|
|
|
1093 if (agentLockPassphrase.equals(unlockPassphrase))
|
|
|
1094 agentLockPassphrase = null;
|
|
|
1095
|
|
|
1096 return agentLockPassphrase == null;
|
|
|
1097 }
|
|
|
1098
|
|
|
1099 public boolean setAgentLock(String lockPassphrase) {
|
|
|
1100 if (agentLockPassphrase != null)
|
|
|
1101 return false;
|
|
|
1102
|
|
|
1103 agentLockPassphrase = lockPassphrase;
|
|
|
1104 return true;
|
|
|
1105 }
|
|
|
1106
|
|
|
1107 /* (non-Javadoc)
|
|
|
1108 * @see com.five_ten_sg.connectbot.transport.AbsTransport#usesNetwork()
|
|
|
1109 */
|
|
|
1110 @Override
|
|
|
1111 public boolean usesNetwork() {
|
|
|
1112 return true;
|
|
|
1113 }
|
|
|
1114 }
|
