ssh.java

一个非常好的ssh客户端实现

/******************************************************************************
 *
 * Copyright (c) 1999-2003 AppGate Network Security AB. All Rights Reserved.
 * 
 * This file contains Original Code and/or Modifications of Original Code as
 * defined in and that are subject to the MindTerm Public Source License,
 * Version 2.0, (the 'License'). You may not use this file except in compliance
 * with the License.
 * 
 * You should have received a copy of the MindTerm Public Source License
 * along with this software; see the file LICENSE.  If not, write to
 * AppGate Network Security AB, Otterhallegatan 2, SE-41118 Goteborg, SWEDEN
 *
 *****************************************************************************/

package com.mindbright.ssh;

import java.io.*;

import com.mindbright.jca.security.SecureRandom;
import com.mindbright.jca.security.MessageDigest;

import com.mindbright.security.publickey.RSAPublicKey;
import com.mindbright.jca.security.interfaces.RSAPrivateCrtKey;

import com.mindbright.util.RandomSeed;
import com.mindbright.util.SecureRandomAndPad;

public abstract class SSH {

  public static boolean DEBUG     = false;
  public static boolean DEBUGMORE = false;

  public final static int    SSH_VER_MAJOR = 1;
  public final static int    SSH_VER_MINOR = 5;
  public final static String VER_MINDTERM  = "MindTerm_" + Version.version;
  public final static String VER_MINDTUNL  = "MindTunnel_" + Version.version;
  public final static String CVS_NAME      = "$Name: v2_4_2 $";
  public final static String CVS_DATE      = "$Date: 2004/06/19 11:37:58 $";

  public final static int    DEFAULTPORT        = 22;
  public final static int    SESSION_KEY_LENGTH = 256; // !!! Must be multiple of 8
  public final static int    SERVER_KEY_LENGTH  = 768;
  public final static int    HOST_KEY_LENGTH    = 1024;

  public final static int    PROTOFLAG_SCREEN_NUMBER	= 1;
  public final static int    PROTOFLAG_HOST_IN_FWD_OPEN	= 2;

  public final static int    MSG_ANY                        = -1; // !!! Not part of protocol
  public final static int    MSG_NONE                       = 0;
  public final static int    MSG_DISCONNECT                 = 1;
  public final static int    SMSG_PUBLIC_KEY                = 2;
  public final static int    CMSG_SESSION_KEY               = 3;
  public final static int    CMSG_USER                      = 4;
  public final static int    CMSG_AUTH_RHOSTS               = 5;
  public final static int    CMSG_AUTH_RSA                  = 6;
  public final static int    SMSG_AUTH_RSA_CHALLENGE        = 7;
  public final static int    CMSG_AUTH_RSA_RESPONSE         = 8;
  public final static int    CMSG_AUTH_PASSWORD             = 9;
  public final static int    CMSG_REQUEST_PTY               = 10;
  public final static int    CMSG_WINDOW_SIZE               = 11;
  public final static int    CMSG_EXEC_SHELL                = 12;
  public final static int    CMSG_EXEC_CMD                  = 13;
  public final static int    SMSG_SUCCESS                   = 14;
  public final static int    SMSG_FAILURE                   = 15;
  public final static int    CMSG_STDIN_DATA                = 16;
  public final static int    SMSG_STDOUT_DATA               = 17;
  public final static int    SMSG_STDERR_DATA               = 18;
  public final static int    CMSG_EOF                       = 19;
  public final static int    SMSG_EXITSTATUS                = 20;
  public final static int    MSG_CHANNEL_OPEN_CONFIRMATION  = 21;
  public final static int    MSG_CHANNEL_OPEN_FAILURE       = 22;
  public final static int    MSG_CHANNEL_DATA               = 23;
  public final static int    MSG_CHANNEL_CLOSE              = 24;
  public final static int    MSG_CHANNEL_CLOSE_CONFIRMATION = 25;
  public final static int    MSG_CHANNEL_INPUT_EOF          = 24;
  public final static int    MSG_CHANNEL_OUTPUT_CLOSED      = 25;
  // OBSOLETE                CMSG_X11_REQUEST_FORWARDING    = 26;
  public final static int    SMSG_X11_OPEN                  = 27;
  public final static int    CMSG_PORT_FORWARD_REQUEST      = 28;
  public final static int    MSG_PORT_OPEN                  = 29;
  public final static int    CMSG_AGENT_REQUEST_FORWARDING  = 30;
  public final static int    SMSG_AGENT_OPEN                = 31;
  public final static int    MSG_IGNORE                     = 32;
  public final static int    CMSG_EXIT_CONFIRMATION         = 33;
  public final static int    CMSG_X11_REQUEST_FORWARDING    = 34;
  public final static int    CMSG_AUTH_RHOSTS_RSA           = 35;
  public final static int    MSG_DEBUG                      = 36;
  public final static int    CMSG_REQUEST_COMPRESSION       = 37;
  public final static int    CMSG_MAX_PACKET_SIZE           = 38;
  public final static int    CMSG_AUTH_TIS                  = 39;
  public final static int    SMSG_AUTH_TIS_CHALLENGE        = 40;
  public final static int    CMSG_AUTH_TIS_RESPONSE         = 41;

  public final static int    CMSG_AUTH_SDI                  = 16; // !!! OUCH
  public final static int    CMSG_ACM_OK                    = 64;
  public final static int    CMSG_ACM_ACCESS_DENIED         = 65;
  public final static int    CMSG_ACM_NEXT_CODE_REQUIRED    = 66;
  public final static int    CMSG_ACM_NEXT_CODE             = 67;
  public final static int    CMSG_ACM_NEW_PIN_REQUIRED      = 68;
  public final static int    CMSG_ACM_NEW_PIN_ACCEPTED      = 69;
  public final static int    CMSG_ACM_NEW_PIN_REJECTED      = 70;
  public final static int    CMSG_ACM_NEW_PIN               = 71;

  public final static int    IDX_CIPHER_CLASS = 0;
  public final static int    IDX_CIPHER_NAME  = 1;

  public final static String[][] cipherClasses = {
    { "SSHNoEncrypt", "none"         }, // No encryption
    { "SSHIDEA",      "idea-cbc"     }, // IDEA in CFB mode
    { "SSHDES",       "des-cbc"      }, // DES in CBC mode
    { "SSHDES3",      "3des-cbc"     }, // Triple-DES in CBC mode
    { null,           "tss"          }, // An experimental stream cipher
    { null,           "arcfour"      }, // RC4
    { "SSHBlowfish",  "blowfish-cbc" }, // Bruce Schneier's Blowfish
    { null,           "reserved"     }  // reserved
  };
  public final static int    CIPHER_NONE     = 0; // No encryption
  public final static int    CIPHER_IDEA     = 1; // IDEA in CFB mode
  public final static int    CIPHER_DES      = 2; // DES in CBC mode
  public final static int    CIPHER_3DES     = 3; // Triple-DES in CBC mode
  public final static int    CIPHER_TSS      = 4; // An experimental stream cipher
  public final static int    CIPHER_RC4      = 5; // RC4
  public final static int    CIPHER_BLOWFISH = 6; // Bruce Schneier's Blowfish */
  public final static int    CIPHER_RESERVED = 7; // Reserved for 40 bit crippled encryption,
                                                  // Bernard Perrot <[e-mail]>
  public final static int    CIPHER_NOTSUPPORTED = 8; // Indicates an unsupported cipher
  public final static int    CIPHER_DEFAULT  = CIPHER_BLOWFISH; // Triple-DES is default block-cipher

  public final static String[] authTypeDesc = {
    "_N/A_",
    "rhosts",
    "publickey",
    "password",
    "rhostsrsa",
    "tis",
    "kerberos",
    "kerbtgt",
    "securid",
    "cryptocard",
    "keyboard-interactive"
  };
  public final static int    AUTH_RHOSTS       = 1;
  public final static int    AUTH_PUBLICKEY    = 2;
  public final static int    AUTH_PASSWORD     = 3;
  public final static int    AUTH_RHOSTS_RSA   = 4;
  public final static int    AUTH_TIS          = 5;
  public final static int    AUTH_KERBEROS     = 6;
  public final static int    PASS_KERBEROS_TGT = 7;

  public final static int    AUTH_SDI          = 8;
  public final static int    AUTH_CRYPTOCARD   = 9;
  public final static int    AUTH_KBDINTERACT  = 10;

  public final static int    AUTH_NOTSUPPORTED = authTypeDesc.length;
  public final static int    AUTH_DEFAULT      = AUTH_PASSWORD;


  final static String[] proxyTypes = { "none", "http", "socks4",
				       "socks5",
				       "socks5-local-dns" };

  final static int[] defaultProxyPorts  = { 0, 8080, 1080, 1080, 1080 };


  public final static int    PROXY_NONE         = 0;
  public final static int    PROXY_HTTP         = 1;
  public final static int    PROXY_SOCKS4       = 2;
  public final static int    PROXY_SOCKS5_DNS   = 3;
  public final static int    PROXY_SOCKS5_IP    = 4;
  public final static int    PROXY_NOTSUPPORTED = proxyTypes.length;


  public final static int    TTY_OP_END	     = 0;
  public final static int    TTY_OP_ISPEED   = 192;
  public final static int    TTY_OP_OSPEED   = 193;

  // These are special "channels" not associated with a channel-number
  // in "SSH-sense".
  //
  public final static int    MAIN_CHAN_NUM    = -1;
  public final static int    CONNECT_CHAN_NUM = -2;
  public final static int    LISTEN_CHAN_NUM  = -3;
  public final static int    UNKNOWN_CHAN_NUM = -4;

  // Default name of file containing set of known hosts
  //
  public final static String KNOWN_HOSTS_FILE = "known_hosts";

  // When verifying the server's host-key to the set of known hosts, the
  // possible outcome is one of these.
  //
  public final static int SRV_HOSTKEY_KNOWN   = 0;
  public final static int SRV_HOSTKEY_NEW     = 1;
  public final static int SRV_HOSTKEY_CHANGED = 2;

  public static SecureRandomAndPad secureRandom;
  public static RandomSeed         randomSeed;

  //
  //
  protected byte[] sessionKey;
  protected byte[] sessionId;

  //
  //
  protected SSHCipher     sndCipher;
  protected SSHCipher     rcvCipher;
  protected SSHCompressor sndComp;
  protected SSHCompressor rcvComp;
  protected int           cipherType;

  // Server data fields
  //
  protected byte[]  srvCookie;
  protected RSAPublicKey srvServerKey;
  protected RSAPublicKey srvHostKey;
  protected int     protocolFlags;
  protected int     supportedCiphers;
  protected int     supportedAuthTypes;

  protected boolean isAnSSHClient = true;

  public String getVersionId(boolean client) {
      String idStr = "SSH-" + SSH_VER_MAJOR + "." + SSH_VER_MINOR + "-";
      idStr += (client ? VER_MINDTERM : VER_MINDTUNL);
      return idStr;
  }

  public static String[] getProxyTypes() {
      return new String[] { "none", "http", "socks4", "socks5" };
  }

  public static int getProxyType(String typeName) throws IllegalArgumentException {
    int i;
    if("socks5-proxy-dns".equals(typeName)) {
	typeName = "socks5";
    }
    for(i = 0; i < proxyTypes.length; i++) {
      if(proxyTypes[i].equalsIgnoreCase(typeName))
	break;
    }
    if(i == PROXY_NOTSUPPORTED)
      throw new IllegalArgumentException("Proxytype " + typeName + " not supported");

    return i;
  }

  public static String getCipherName(int cipherType) {
    return cipherClasses[cipherType][IDX_CIPHER_NAME];
  }

  public static int getCipherType(String cipherName) {
    int i;
    if("blowfish".equals(cipherName)) {