1*ae771770SStanislav Sedov /*
2*ae771770SStanislav Sedov * Copyright (c) 2006 Kungliga Tekniska Högskolan
3*ae771770SStanislav Sedov * (Royal Institute of Technology, Stockholm, Sweden).
4*ae771770SStanislav Sedov * All rights reserved.
5*ae771770SStanislav Sedov *
6*ae771770SStanislav Sedov * Redistribution and use in source and binary forms, with or without
7*ae771770SStanislav Sedov * modification, are permitted provided that the following conditions
8*ae771770SStanislav Sedov * are met:
9*ae771770SStanislav Sedov *
10*ae771770SStanislav Sedov * 1. Redistributions of source code must retain the above copyright
11*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer.
12*ae771770SStanislav Sedov *
13*ae771770SStanislav Sedov * 2. Redistributions in binary form must reproduce the above copyright
14*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer in the
15*ae771770SStanislav Sedov * documentation and/or other materials provided with the distribution.
16*ae771770SStanislav Sedov *
17*ae771770SStanislav Sedov * 3. Neither the name of the Institute nor the names of its contributors
18*ae771770SStanislav Sedov * may be used to endorse or promote products derived from this software
19*ae771770SStanislav Sedov * without specific prior written permission.
20*ae771770SStanislav Sedov *
21*ae771770SStanislav Sedov * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22*ae771770SStanislav Sedov * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23*ae771770SStanislav Sedov * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24*ae771770SStanislav Sedov * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25*ae771770SStanislav Sedov * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26*ae771770SStanislav Sedov * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27*ae771770SStanislav Sedov * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28*ae771770SStanislav Sedov * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29*ae771770SStanislav Sedov * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30*ae771770SStanislav Sedov * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31*ae771770SStanislav Sedov * SUCH DAMAGE.
32*ae771770SStanislav Sedov */
33*ae771770SStanislav Sedov
34*ae771770SStanislav Sedov #include "mech_locl.h"
35*ae771770SStanislav Sedov
36*ae771770SStanislav Sedov GSSAPI_LIB_FUNCTION OM_uint32 GSSAPI_LIB_CALL
gss_decapsulate_token(gss_const_buffer_t input_token,gss_const_OID oid,gss_buffer_t output_token)37*ae771770SStanislav Sedov gss_decapsulate_token(gss_const_buffer_t input_token,
38*ae771770SStanislav Sedov gss_const_OID oid,
39*ae771770SStanislav Sedov gss_buffer_t output_token)
40*ae771770SStanislav Sedov {
41*ae771770SStanislav Sedov GSSAPIContextToken ct;
42*ae771770SStanislav Sedov heim_oid o;
43*ae771770SStanislav Sedov OM_uint32 status;
44*ae771770SStanislav Sedov int ret;
45*ae771770SStanislav Sedov size_t size;
46*ae771770SStanislav Sedov
47*ae771770SStanislav Sedov _mg_buffer_zero(output_token);
48*ae771770SStanislav Sedov
49*ae771770SStanislav Sedov ret = der_get_oid (oid->elements, oid->length, &o, &size);
50*ae771770SStanislav Sedov if (ret)
51*ae771770SStanislav Sedov return GSS_S_FAILURE;
52*ae771770SStanislav Sedov
53*ae771770SStanislav Sedov ret = decode_GSSAPIContextToken(input_token->value, input_token->length,
54*ae771770SStanislav Sedov &ct, NULL);
55*ae771770SStanislav Sedov if (ret) {
56*ae771770SStanislav Sedov der_free_oid(&o);
57*ae771770SStanislav Sedov return GSS_S_FAILURE;
58*ae771770SStanislav Sedov }
59*ae771770SStanislav Sedov
60*ae771770SStanislav Sedov if (der_heim_oid_cmp(&ct.thisMech, &o) == 0) {
61*ae771770SStanislav Sedov status = GSS_S_COMPLETE;
62*ae771770SStanislav Sedov output_token->value = ct.innerContextToken.data;
63*ae771770SStanislav Sedov output_token->length = ct.innerContextToken.length;
64*ae771770SStanislav Sedov der_free_oid(&ct.thisMech);
65*ae771770SStanislav Sedov } else {
66*ae771770SStanislav Sedov free_GSSAPIContextToken(&ct);
67*ae771770SStanislav Sedov status = GSS_S_FAILURE;
68*ae771770SStanislav Sedov }
69*ae771770SStanislav Sedov der_free_oid(&o);
70*ae771770SStanislav Sedov
71*ae771770SStanislav Sedov return status;
72*ae771770SStanislav Sedov }
73