-rw-r--r-- | lib/consumer.cc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/consumer.cc b/lib/consumer.cc index 76b6ea7..f9212ea 100644 --- a/lib/consumer.cc +++ b/lib/consumer.cc | |||
@@ -109,49 +109,49 @@ namespace opkele { | |||
109 | dh->g = util::dec_to_bignum(data::_default_g); | 109 | dh->g = util::dec_to_bignum(data::_default_g); |
110 | if(!DH_generate_key(dh)) | 110 | if(!DH_generate_key(dh)) |
111 | throw exception_openssl(OPKELE_CP_ "failed to DH_generate_key()"); | 111 | throw exception_openssl(OPKELE_CP_ "failed to DH_generate_key()"); |
112 | string request = | 112 | string request = |
113 | "openid.mode=associate" | 113 | "openid.mode=associate" |
114 | "&openid.assoc_type=HMAC-SHA1" | 114 | "&openid.assoc_type=HMAC-SHA1" |
115 | "&openid.session_type=DH-SHA1" | 115 | "&openid.session_type=DH-SHA1" |
116 | "&openid.dh_consumer_public="; | 116 | "&openid.dh_consumer_public="; |
117 | request += util::url_encode(util::bignum_to_base64(dh->pub_key)); | 117 | request += util::url_encode(util::bignum_to_base64(dh->pub_key)); |
118 | curl_t curl = curl_easy_init(); | 118 | curl_t curl = curl_easy_init(); |
119 | if(!curl) | 119 | if(!curl) |
120 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); | 120 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); |
121 | string response; | 121 | string response; |
122 | CURLcode r; | 122 | CURLcode r; |
123 | (r=curl_misc_sets(curl)) | 123 | (r=curl_misc_sets(curl)) |
124 | || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str())) | 124 | || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str())) |
125 | || (r=curl_easy_setopt(curl,CURLOPT_POST,1)) | 125 | || (r=curl_easy_setopt(curl,CURLOPT_POST,1)) |
126 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data())) | 126 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data())) |
127 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length())) | 127 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length())) |
128 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring)) | 128 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring)) |
129 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response)) | 129 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response)) |
130 | ; | 130 | ; |
131 | if(r) | 131 | if(r) |
132 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r); | 132 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r); |
133 | if(r=curl_easy_perform(curl)) | 133 | if( (r=curl_easy_perform(curl)) ) |
134 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r); | 134 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r); |
135 | params_t p; p.parse_keyvalues(response); | 135 | params_t p; p.parse_keyvalues(response); |
136 | if(p.has_param("assoc_type") && p.get_param("assoc_type")!="HMAC-SHA1") | 136 | if(p.has_param("assoc_type") && p.get_param("assoc_type")!="HMAC-SHA1") |
137 | throw bad_input(OPKELE_CP_ "unsupported assoc_type"); | 137 | throw bad_input(OPKELE_CP_ "unsupported assoc_type"); |
138 | string st; | 138 | string st; |
139 | if(p.has_param("session_type")) st = p.get_param("session_type"); | 139 | if(p.has_param("session_type")) st = p.get_param("session_type"); |
140 | if((!st.empty()) && st!="DH-SHA1") | 140 | if((!st.empty()) && st!="DH-SHA1") |
141 | throw bad_input(OPKELE_CP_ "unsupported session_type"); | 141 | throw bad_input(OPKELE_CP_ "unsupported session_type"); |
142 | secret_t secret; | 142 | secret_t secret; |
143 | if(st.empty()) { | 143 | if(st.empty()) { |
144 | secret.from_base64(p.get_param("mac_key")); | 144 | secret.from_base64(p.get_param("mac_key")); |
145 | }else{ | 145 | }else{ |
146 | util::bignum_t s_pub = util::base64_to_bignum(p.get_param("dh_server_public")); | 146 | util::bignum_t s_pub = util::base64_to_bignum(p.get_param("dh_server_public")); |
147 | vector<unsigned char> ck(DH_size(dh)+1); | 147 | vector<unsigned char> ck(DH_size(dh)+1); |
148 | unsigned char *ckptr = &(ck.front())+1; | 148 | unsigned char *ckptr = &(ck.front())+1; |
149 | int cklen = DH_compute_key(ckptr,s_pub,dh); | 149 | int cklen = DH_compute_key(ckptr,s_pub,dh); |
150 | if(cklen<0) | 150 | if(cklen<0) |
151 | throw exception_openssl(OPKELE_CP_ "failed to DH_compute_key()"); | 151 | throw exception_openssl(OPKELE_CP_ "failed to DH_compute_key()"); |
152 | if(cklen && (*ckptr)&0x80) { | 152 | if(cklen && (*ckptr)&0x80) { |
153 | (*(--ckptr)) = 0; ++cklen; | 153 | (*(--ckptr)) = 0; ++cklen; |
154 | } | 154 | } |
155 | unsigned char key_sha1[SHA_DIGEST_LENGTH]; | 155 | unsigned char key_sha1[SHA_DIGEST_LENGTH]; |
156 | SHA1(ckptr,cklen,key_sha1); | 156 | SHA1(ckptr,cklen,key_sha1); |
157 | secret.enxor_from_base64(key_sha1,p.get_param("enc_mac_key")); | 157 | secret.enxor_from_base64(key_sha1,p.get_param("enc_mac_key")); |
@@ -269,49 +269,49 @@ namespace opkele { | |||
269 | string request = "openid.mode=check_authentication"; | 269 | string request = "openid.mode=check_authentication"; |
270 | for(params_t::const_iterator i=p.begin();i!=p.end();++i) { | 270 | for(params_t::const_iterator i=p.begin();i!=p.end();++i) { |
271 | if(i->first!="openid.mode") { | 271 | if(i->first!="openid.mode") { |
272 | request += '&'; | 272 | request += '&'; |
273 | request += i->first; | 273 | request += i->first; |
274 | request += '='; | 274 | request += '='; |
275 | request += util::url_encode(i->second); | 275 | request += util::url_encode(i->second); |
276 | } | 276 | } |
277 | } | 277 | } |
278 | curl_t curl = curl_easy_init(); | 278 | curl_t curl = curl_easy_init(); |
279 | if(!curl) | 279 | if(!curl) |
280 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); | 280 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); |
281 | string response; | 281 | string response; |
282 | CURLcode r; | 282 | CURLcode r; |
283 | (r=curl_misc_sets(curl)) | 283 | (r=curl_misc_sets(curl)) |
284 | || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str())) | 284 | || (r=curl_easy_setopt(curl,CURLOPT_URL,server.c_str())) |
285 | || (r=curl_easy_setopt(curl,CURLOPT_POST,1)) | 285 | || (r=curl_easy_setopt(curl,CURLOPT_POST,1)) |
286 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data())) | 286 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDS,request.data())) |
287 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length())) | 287 | || (r=curl_easy_setopt(curl,CURLOPT_POSTFIELDSIZE,request.length())) |
288 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring)) | 288 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEFUNCTION,_curl_tostring)) |
289 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response)) | 289 | || (r=curl_easy_setopt(curl,CURLOPT_WRITEDATA,&response)) |
290 | ; | 290 | ; |
291 | if(r) | 291 | if(r) |
292 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r); | 292 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_setopt()",r); |
293 | if(r=curl_easy_perform(curl)) | 293 | if( (r=curl_easy_perform(curl)) ) |
294 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r); | 294 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_perform()",r); |
295 | params_t pp; pp.parse_keyvalues(response); | 295 | params_t pp; pp.parse_keyvalues(response); |
296 | if(pp.has_param("invalidate_handle")) | 296 | if(pp.has_param("invalidate_handle")) |
297 | invalidate_assoc(server,pp.get_param("invalidate_handle")); | 297 | invalidate_assoc(server,pp.get_param("invalidate_handle")); |
298 | if(pp.has_param("is_valid")) { | 298 | if(pp.has_param("is_valid")) { |
299 | if(pp.get_param("is_valid")=="true") | 299 | if(pp.get_param("is_valid")=="true") |
300 | return; | 300 | return; |
301 | }else if(pp.has_param("lifetime")) { | 301 | }else if(pp.has_param("lifetime")) { |
302 | if(util::string_to_long(pp.get_param("lifetime"))) | 302 | if(util::string_to_long(pp.get_param("lifetime"))) |
303 | return; | 303 | return; |
304 | } | 304 | } |
305 | throw failed_check_authentication(OPKELE_CP_ "failed to verify response"); | 305 | throw failed_check_authentication(OPKELE_CP_ "failed to verify response"); |
306 | } | 306 | } |
307 | 307 | ||
308 | void consumer_t::retrieve_links(const string& url,string& server,string& delegate) { | 308 | void consumer_t::retrieve_links(const string& url,string& server,string& delegate) { |
309 | server.erase(); | 309 | server.erase(); |
310 | delegate.erase(); | 310 | delegate.erase(); |
311 | curl_t curl = curl_easy_init(); | 311 | curl_t curl = curl_easy_init(); |
312 | if(!curl) | 312 | if(!curl) |
313 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); | 313 | throw exception_curl(OPKELE_CP_ "failed to curl_easy_init()"); |
314 | string html; | 314 | string html; |
315 | CURLcode r; | 315 | CURLcode r; |
316 | (r=curl_misc_sets(curl)) | 316 | (r=curl_misc_sets(curl)) |
317 | || (r=curl_easy_setopt(curl,CURLOPT_URL,url.c_str())) | 317 | || (r=curl_easy_setopt(curl,CURLOPT_URL,url.c_str())) |