//
using System;
+using System.Collections;
+using SSCX = System.Security.Cryptography.X509Certificates;
using Mono.Security.Protocol.Tls;
-using System.Security.Cryptography.X509Certificates;
+using Mono.Security.X509;
+using Mono.Security.X509.Extensions;
namespace Mono.Security.Protocol.Tls.Handshake.Server
{
public override void Update()
{
- this.Context.ClientSettings.Certificates.Add(clientCertificate);
+ if (clientCertificate != null)
+ this.Context.ClientSettings.Certificates.Add (this.Context.ClientSettings.ClientCertificate);
}
#endregion
protected override void ProcessAsTls1()
{
+ this.ReadInt24 ();
int length = this.ReadInt24();
- this.clientCertificate = new X509Certificate(this.ReadBytes(length));
-
+ if (length > 0)
+ {
+ byte[] certs = this.ReadBytes (length);
+ this.clientCertificate = new X509Certificate (certs);
+ }
this.validateCertificate(this.clientCertificate);
}
#region Private Methods
- private void validateCertificate(X509Certificate certificate)
+ private bool checkCertificateUsage (X509Certificate cert)
+ {
+ ServerContext context = (ServerContext)this.Context;
+
+ // certificate extensions are required for this
+ // we "must" accept older certificates without proofs
+ if (cert.Version < 3)
+ return true;
+
+ KeyUsages ku = KeyUsages.none;
+ switch (context.Cipher.ExchangeAlgorithmType)
+ {
+ case ExchangeAlgorithmType.RsaSign:
+ ku = KeyUsages.digitalSignature;
+ break;
+ case ExchangeAlgorithmType.RsaKeyX:
+ ku = KeyUsages.keyEncipherment;
+ break;
+ case ExchangeAlgorithmType.DiffieHellman:
+ ku = KeyUsages.keyAgreement;
+ break;
+ case ExchangeAlgorithmType.Fortezza:
+ return false; // unsupported certificate type
+ }
+
+ KeyUsageExtension kux = null;
+ ExtendedKeyUsageExtension eku = null;
+
+ X509Extension xtn = cert.Extensions["2.5.29.15"];
+ if (xtn != null)
+ kux = new KeyUsageExtension (xtn);
+
+ xtn = cert.Extensions["2.5.29.37"];
+ if (xtn != null)
+ eku = new ExtendedKeyUsageExtension (xtn);
+
+ if ((kux != null) && (eku != null))
+ {
+ // RFC3280 states that when both KeyUsageExtension and
+ // ExtendedKeyUsageExtension are present then BOTH should
+ // be valid
+ return (kux.Support (ku) &&
+ eku.KeyPurpose.Contains ("1.3.6.1.5.5.7.3.2"));
+ }
+ else if (kux != null)
+ {
+ return kux.Support (ku);
+ }
+ else if (eku != null)
+ {
+ // Client Authentication (1.3.6.1.5.5.7.3.2)
+ return eku.KeyPurpose.Contains ("1.3.6.1.5.5.7.3.2");
+ }
+
+ // last chance - try with older (deprecated) Netscape extensions
+ xtn = cert.Extensions["2.16.840.1.113730.1.1"];
+ if (xtn != null)
+ {
+ NetscapeCertTypeExtension ct = new NetscapeCertTypeExtension (xtn);
+ return ct.Support (NetscapeCertTypeExtension.CertTypes.SslClient);
+ }
+
+ // certificate isn't valid for SSL server usage
+ return false;
+ }
+
+ private void validateCertificate (X509Certificate certificate)
{
- #warning "Validate client certificate"
+ ServerContext context = (ServerContext)this.Context;
+ AlertDescription description = AlertDescription.BadCertificate;
+ SSCX.X509Certificate client = null;
+ int[] certificateErrors = null;
+
+ // note: certificate may be null is no certificate is sent
+ // (e.g. optional mutual authentication)
+ if (certificate != null)
+ {
+ ArrayList errors = new ArrayList ();
+
+ // SSL specific check - not all certificates can be
+ // used to server-side SSL some rules applies after
+ // all ;-)
+ if (!checkCertificateUsage (certificate))
+ {
+ // WinError.h CERT_E_PURPOSE 0x800B0106
+ errors.Add ((int)-2146762490);
+ }
+
+ X509Chain verify = new X509Chain ();
+ bool result = false;
+
+ try
+ {
+ result = verify.Build (certificate);
+ }
+ catch (Exception)
+ {
+ result = false;
+ }
+
+ if (!result)
+ {
+ switch (verify.Status)
+ {
+ case X509ChainStatusFlags.InvalidBasicConstraints:
+ // WinError.h TRUST_E_BASIC_CONSTRAINTS 0x80096019
+ errors.Add ((int)-2146869223);
+ break;
+
+ case X509ChainStatusFlags.NotSignatureValid:
+ // WinError.h TRUST_E_BAD_DIGEST 0x80096010
+ errors.Add ((int)-2146869232);
+ break;
+
+ case X509ChainStatusFlags.NotTimeNested:
+ // WinError.h CERT_E_VALIDITYPERIODNESTING 0x800B0102
+ errors.Add ((int)-2146762494);
+ break;
+
+ case X509ChainStatusFlags.NotTimeValid:
+ // WinError.h CERT_E_EXPIRED 0x800B0101
+ description = AlertDescription.CertificateExpired;
+ errors.Add ((int)-2146762495);
+ break;
+
+ case X509ChainStatusFlags.PartialChain:
+ // WinError.h CERT_E_CHAINING 0x800B010A
+ description = AlertDescription.UnknownCA;
+ errors.Add ((int)-2146762486);
+ break;
+
+ case X509ChainStatusFlags.UntrustedRoot:
+ // WinError.h CERT_E_UNTRUSTEDROOT 0x800B0109
+ description = AlertDescription.UnknownCA;
+ errors.Add ((int)-2146762487);
+ break;
+
+ default:
+ // unknown error
+ description = AlertDescription.CertificateUnknown;
+ errors.Add ((int)verify.Status);
+ break;
+ }
+ }
+
+ client = new SSCX.X509Certificate (certificate.RawData);
+ certificateErrors = (int[])errors.ToArray (typeof (int));
+ }
+ else
+ {
+ certificateErrors = new int[0];
+ }
+
+ if (!context.SslStream.RaiseClientCertificateValidation(client, certificateErrors))
+ {
+ throw new TlsException (
+ description,
+ "Invalid certificate received from client.");
+ }
+
+ this.Context.ClientSettings.ClientCertificate = client;
}
#endregion
protected override void ProcessAsSsl3()
{
- ServerContext context = (ServerContext)this.Context;
- byte[] signature = this.ReadBytes((int)this.Length);
+ ServerContext context = (ServerContext)this.Context;
+ int length = this.ReadInt16 ();
+ byte[] signature = this.ReadBytes (length);
// Verify signature
SslHandshakeHash hash = new SslHandshakeHash(context.MasterSecret);
if (!hash.VerifySignature(context.ClientSettings.CertificateRSA, signature))
{
- throw new TlsException(AlertDescription.HandshakeFailiure, "Handshake Failiure.");
+ throw new TlsException(AlertDescription.HandshakeFailiure, "Handshake Failure.");
}
}
protected override void ProcessAsTls1()
{
- ServerContext context = (ServerContext)this.Context;
- byte[] signature = this.ReadBytes((int)this.Length);
+ ServerContext context = (ServerContext)this.Context;
+ int length = this.ReadInt16 ();
+ byte[] signature = this.ReadBytes (length);
// Verify signature
MD5SHA1 hash = new MD5SHA1();
if (!hash.VerifySignature(context.ClientSettings.CertificateRSA, signature))
{
- throw new TlsException(
- AlertDescription.HandshakeFailiure,
- "Handshake Failiure.");
+ throw new TlsException (AlertDescription.HandshakeFailiure, "Handshake Failure.");
}
}
projects / mono.git / commitdiff