1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
package smb2
import (
"encoding/asn1"
"github.com/cloudsoda/go-smb2/internal/spnego"
)
type spnegoClient struct {
mechs []Initiator
mechTypes []asn1.ObjectIdentifier
selectedMech Initiator
}
func newSpnegoClient(mechs []Initiator) *spnegoClient {
mechTypes := make([]asn1.ObjectIdentifier, len(mechs))
for i, mech := range mechs {
mechTypes[i] = mech.OID()
}
return &spnegoClient{
mechs: mechs,
mechTypes: mechTypes,
}
}
func (c *spnegoClient) OID() asn1.ObjectIdentifier {
return spnego.SpnegoOid
}
func (c *spnegoClient) InitSecContext() (negTokenInitBytes []byte, err error) {
mechToken, err := c.mechs[0].InitSecContext()
if err != nil {
return nil, err
}
negTokenInitBytes, err = spnego.EncodeNegTokenInit(c.mechTypes, mechToken)
if err != nil {
return nil, err
}
return negTokenInitBytes, nil
}
func (c *spnegoClient) AcceptSecContext(negTokenRespBytes []byte) (negTokenRespBytes1 []byte, err error) {
negTokenResp, err := spnego.DecodeNegTokenResp(negTokenRespBytes)
if err != nil {
return nil, err
}
for i, mechType := range c.mechTypes {
if mechType.Equal(negTokenResp.SupportedMech) {
c.selectedMech = c.mechs[i]
break
}
}
responseToken, err := c.selectedMech.AcceptSecContext(negTokenResp.ResponseToken)
if err != nil {
return nil, err
}
ms, err := asn1.Marshal(c.mechTypes)
if err != nil {
return nil, err
}
mechListMIC := c.selectedMech.Sum(ms)
negTokenRespBytes1, err = spnego.EncodeNegTokenResp(1, nil, responseToken, mechListMIC)
if err != nil {
return nil, err
}
return negTokenRespBytes1, nil
}
func (c *spnegoClient) Sum(bs []byte) []byte {
return c.selectedMech.Sum(bs)
}
func (c *spnegoClient) SessionKey() []byte {
return c.selectedMech.SessionKey()
}
|
