%% %% %CopyrightBegin% %% %% Copyright Ericsson AB 2008-2010. All Rights Reserved. %% %% The contents of this file are subject to the Erlang Public License, %% Version 1.1, (the "License"); you may not use this file except in %% compliance with the License. You should have received a copy of the %% Erlang Public License along with this software. If not, it can be %% retrieved online at http://www.erlang.org/. %% %% Software distributed under the License is distributed on an "AS IS" %% basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See %% the License for the specific language governing rights and limitations %% under the License. %% %% %CopyrightEnd% %% %% %%---------------------------------------------------------------------- %% Purpose: Record and constant defenitions for the SSH-tansport layer %% protocol see RFC 4253 %%---------------------------------------------------------------------- -ifndef(ssh_transport). -define(ssh_transport, true). -define(DEFAULT_CLIENT_VERSION, {2, 0}). -define(DEFAULT_SERVER_VERSION, {2, 0}). -define(DEFAULT_DH_GROUP_MIN, 512). -define(DEFAULT_DH_GROUP_NBITS, 1024). -define(DEFAULT_DH_GROUP_MAX, 4096). %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %% %% BASIC transport messages %% %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% -define(SSH_MSG_DISCONNECT, 1). -define(SSH_MSG_IGNORE, 2). -define(SSH_MSG_UNIMPLEMENTED, 3). -define(SSH_MSG_DEBUG, 4). -define(SSH_MSG_SERVICE_REQUEST, 5). -define(SSH_MSG_SERVICE_ACCEPT, 6). -define(SSH_MSG_KEXINIT, 20). -define(SSH_MSG_NEWKEYS, 21). -record(ssh_msg_disconnect, { code, %% uint32 description, %% string language %% string }). -record(ssh_msg_ignore, { data %% string }). -record(ssh_msg_unimplemented, { sequence %% uint32 }). -record(ssh_msg_debug, { always_display, %% boolean message, %% string language %% string }). -record(ssh_msg_service_request, { name %% string (service name) }). -record(ssh_msg_service_accept, { name %% string }). -record(ssh_msg_kexinit, { cookie, %% random(16) kex_algorithms, %% string server_host_key_algorithms, %% string encryption_algorithms_client_to_server, %% string encryption_algorithms_server_to_client, %% string mac_algorithms_client_to_server, %% string mac_algorithms_server_to_client, %% string compression_algorithms_client_to_server, %% string compression_algorithms_server_to_client, %% string languages_client_to_server, %% string languages_server_to_client, %% string first_kex_packet_follows=false, %% boolean %% (reserved for future extension) reserved=0 %% uint32=0 }). %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %% %% KEY DH messages %% %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %% diffie-hellman-group1-sha1 -define(SSH_MSG_KEXDH_INIT, 30). -define(SSH_MSG_KEXDH_REPLY, 31). -record(ssh_msg_kexdh_init, { e %% mpint }). -record(ssh_msg_kexdh_reply, { public_host_key, %% string (K_S) f, %% mpint h_sig %% string, signature of H }). -record(ssh_msg_newkeys, {}). %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %% %% KEY DH GEX messages %% %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% %% diffie-hellman-group-exchange-sha1 -define(SSH_MSG_KEX_DH_GEX_REQUEST_OLD, 30). -define(SSH_MSG_KEX_DH_GEX_REQUEST, 34). -define(SSH_MSG_KEX_DH_GEX_GROUP, 31). -define(SSH_MSG_KEX_DH_GEX_INIT, 32). -define(SSH_MSG_KEX_DH_GEX_REPLY, 33). -record(ssh_msg_kex_dh_gex_request, { min, n, max }). -record(ssh_msg_kex_dh_gex_request_old, { n }). -record(ssh_msg_kex_dh_gex_group, { p, %% prime g %% generator }). -record(ssh_msg_kex_dh_gex_init, { e }). -record(ssh_msg_kex_dh_gex_reply, { public_host_key, %% string (K_S) f, h_sig }). %% error codes -define(SSH_DISCONNECT_HOST_NOT_ALLOWED_TO_CONNECT, 1). -define(SSH_DISCONNECT_PROTOCOL_ERROR, 2). -define(SSH_DISCONNECT_KEY_EXCHANGE_FAILED, 3). -define(SSH_DISCONNECT_RESERVED, 4). -define(SSH_DISCONNECT_MAC_ERROR, 5). -define(SSH_DISCONNECT_COMPRESSION_ERROR, 6). -define(SSH_DISCONNECT_SERVICE_NOT_AVAILABLE, 7). -define(SSH_DISCONNECT_PROTOCOL_VERSION_NOT_SUPPORTED, 8). -define(SSH_DISCONNECT_HOST_KEY_NOT_VERIFIABLE, 9). -define(SSH_DISCONNECT_CONNECTION_LOST, 10). -define(SSH_DISCONNECT_BY_APPLICATION, 11). -define(SSH_DISCONNECT_TOO_MANY_CONNECTIONS, 12). -define(SSH_DISCONNECT_AUTH_CANCELLED_BY_USER, 13). -define(SSH_DISCONNECT_NO_MORE_AUTH_METHODS_AVAILABLE, 14). -define(SSH_DISCONNECT_ILLEGAL_USER_NAME, 15). %%%---------------------------------------------------------------------- %%% # DH_14_xxx %%% Description: Oakley group 14 prime numbers and generator. Used in %%% diffie-hellman-group1-sha1 key exchange method. %%%---------------------------------------------------------------------- %%%---------------------------------------------------------------------- %%% # DH_14_P %%% Description: Prime for this group %%%---------------------------------------------------------------------- -define(DH_14_P, <<000,000,000,129,000,255,255,255,255,255,255,255,255,201,015,218, 162,033,104,194,052,196,198,098,139,128,220,028,209,041,002,078, 008,138,103,204,116,002,011,190,166,059,019,155,034,081,074,008, 121,142,052,004,221,239,149,025,179,205,058,067,027,048,043,010, 109,242,095,020,055,079,225,053,109,109,081,194,069,228,133,181, 118,098,094,126,198,244,076,066,233,166,055,237,107,011,255,092, 182,244,006,183,237,238,056,107,251,090,137,159,165,174,159,036, 017,124,075,031,230,073,040,102,081,236,230,083,129,255,255,255, 255,255,255,255,255>>). %%%---------------------------------------------------------------------- %%% # DH_14_G %%% Description: Generator for DH_14_P. %%%---------------------------------------------------------------------- -define(DH_14_G, <<0,0,0,1,2>>). %%%---------------------------------------------------------------------- %%% # DH_14_Q %%% Description: Group order (DH_14_P - 1) / 2. %%%---------------------------------------------------------------------- -define(DH_14_Q, <<000,000,000,128,127,255,255,255,255,255,255,255,228,135,237,081, 016,180,097,026,098,099,049,069,192,110,014,104,148,129,039,004, 069,051,230,058,001,005,223,083,029,137,205,145,040,165,004,060, 199,026,002,110,247,202,140,217,230,157,033,141,152,021,133,054, 249,047,138,027,167,240,154,182,182,168,225,034,242,066,218,187, 049,047,063,099,122,038,033,116,211,027,246,181,133,255,174,091, 122,003,091,246,247,028,053,253,173,068,207,210,215,079,146,008, 190,037,143,243,036,148,051,040,246,115,041,192,255,255,255,255, 255,255,255,255>>). -endif. % -ifdef(ssh_transport).