gokrb5.v7/GSSAPI/NegotiationToken.go

package GSSAPI

import (
	"errors"
	"fmt"
	"github.com/jcmturner/asn1"
)

/*
https://msdn.microsoft.com/en-us/library/ms995330.aspx

NegotiationToken ::= CHOICE {
  negTokenInit    [0] NegTokenInit,  This is the Negotiation token sent from the client to the server.
  negTokenResp    [1] NegTokenResp
}

NegTokenInit ::= SEQUENCE {
  mechTypes       [0] MechTypeList,
  reqFlags        [1] ContextFlags  OPTIONAL,
  -- inherited from RFC 2478 for backward compatibility,
  -- RECOMMENDED to be left out
  mechToken       [2] OCTET STRING  OPTIONAL,
  mechListMIC     [3] OCTET STRING  OPTIONAL,
  ...
}

NegTokenResp ::= SEQUENCE {
  negState       [0] ENUMERATED {
    accept-completed    (0),
    accept-incomplete   (1),
    reject              (2),
    request-mic         (3)
  }                                 OPTIONAL,
  -- REQUIRED in the first reply from the target
  supportedMech   [1] MechType      OPTIONAL,
  -- present only in the first reply from the target
  responseToken   [2] OCTET STRING  OPTIONAL,
  mechListMIC     [3] OCTET STRING  OPTIONAL,
  ...
}
*/

// Tag attribute of NegotiationToken will indicate type:
// 0xa0 (160) - negTokenInit
// 0xa1 (161) - negTokenResp
type NegotiationToken struct {
	Choice asn1.RawValue
}

type NegTokenInit struct {
	Body    asn1.RawValue `asn1:"explicit,tag:0"`
}

type NegTokenResp struct {
	Body    NegTokenRespBody `asn1:"explicit,tag:1"`
}

type NegTokenInitBody struct {
	MechTypes    MechTypeList `asn1:"explicit,tag:0"`
	ReqFlags     ContextFlags `asn1:"explicit,optional,tag:1"`
	MechToken    []byte       `asn1:"explicit,optional,tag:2"`
	MechTokenMIC []byte       `asn1:"explicit,optional,tag:3"`
}

type NegTokenRespBody struct {
	NegState      asn1.Enumerated `asn1:"explicit,optional,tag:0"`
	SupportedMech MechType        `asn1:"explicit,optional,tag:1"`
	ResponseToken []byte          `asn1:"explicit,optional,tag:2"`
	MechListMIC   []byte          `asn1:"explicit,optional,tag:3"`
}

// Unmarshal and return either a NegTokenInit or a NegTokenResp.
//
// The boolean indicates if the reponse is a NegTokenInit.
// If error is nil and the boolean is false the response is a NegTokenResp.
func (n *NegotiationToken) Unmarshal(b []byte) (bool, interface{}, error) {
	_, err := asn1.Unmarshal(b, n)
	if err != nil {
		return false, nil, fmt.Errorf("Error unmarshalling NegotiationToken: %v", err)
	}
	var negToken interface{}
	var isInit bool
	switch n.Choice.Tag {
	case 0:
		negToken = NegTokenInit{}
		isInit = true
	case 1:
		negToken = NegTokenResp{}
	default:
		return false, nil, errors.New("Unknown choice type for NegotiationToken")
	}
	_, err = asn1.Unmarshal(b, &negToken)
	if err != nil {
		return false, nil, fmt.Errorf("Error unmarshalling NegotiationToken type %d: %v", n.Choice.Tag, err)
	}
	return isInit, negToken, nil
}

// Returns marshalled bytes of a NegotiationToken rather than the NegTokenInit
func (n *NegTokenInit) Marshal() ([]byte, error) {
	b, err := asn1.Marshal(*n)
	if err != nil {
		return nil, err
	}
	nt := NegotiationToken{
		Choice: asn1.RawValue{
			Tag:        0,
			Class:      2,
			IsCompound: true,
			Bytes:      b,
		},
	}
	nb, err := asn1.Marshal(nt)
	if err != nil {
		return nil, err
	}
	return nb, nil
}

// Returns marshalled bytes of a NegotiationToken rather than the NegTokenResp
func (n *NegTokenResp) Marshal() ([]byte, error) {
	b, err := asn1.Marshal(*n)
	if err != nil {
		return nil, err
	}
	nt := NegotiationToken{
		Choice: asn1.RawValue{
			Tag:        1,
			Class:      2,
			IsCompound: true,
			Bytes:      b,
		},
	}
	nb, err := asn1.Marshal(nt)
	if err != nil {
		return nil, err
	}
	return nb, nil
}