From a3f34674c6317930362c99f0fc40d835234843e5 Mon Sep 17 00:00:00 2001
From: Julien Dessaux
Date: Thu, 14 Feb 2019 20:51:41 +0100
Subject: Moved code around

---
 src/session.c | 118 ----------------------------------------------------------
 1 file changed, 118 deletions(-)
 delete mode 100644 src/session.c

(limited to 'src/session.c')

diff --git a/src/session.c b/src/session.c
deleted file mode 100644
index 3d3b1b7..0000000
--- a/src/session.c
+++ /dev/null
@@ -1,118 +0,0 @@
-#include <libssh/callbacks.h>
-#include <libssh/server.h>
-#include <poll.h>
-#include <pty.h>
-#include <signal.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/wait.h>
-
-#include "../config.h"
-#include "mysql.h"
-#include "proxy.h"
-#include "session.h"
-#include "state.h"
-
-static int auth_pubkey(ssh_session session, const char *user, ssh_key pubkey, char signature_state,
-                       void *userdata) {
-    struct session_data_struct *sdata = (struct session_data_struct *) userdata;
-    (void) session;
-
-    // For some reason, libssh can call this twice for the same key
-    if (sdata->authenticated == 1)
-        return SSH_ERROR;
-
-    if (signature_state != SSH_PUBLICKEY_STATE_NONE && signature_state != SSH_PUBLICKEY_STATE_VALID) {
-        fprintf(stderr, "Invalid signature state\n");
-        sdata->auth_attempts++;
-        return SSH_AUTH_DENIED;
-    }
-
-    // TODO check for an invite
-
-    char * bastion_username = db_get_username_from_pubkey(pubkey);
-    if (bastion_username != NULL) {
-        sdata->authenticated = 1;
-        if (state_set_ssh_destination(user) != 0)
-            return SSH_ERROR;
-        // TODO check access rights and host configs
-        state_set_bastion_username(bastion_username);
-        unsigned long long session_id = db_init_session_and_get_id(user, bastion_username);
-        state_set_session_id(session_id);
-        free(bastion_username);
-        return SSH_AUTH_SUCCESS;
-    } else {
-        free(bastion_username);
-        sdata->auth_attempts++;
-        return SSH_AUTH_DENIED;
-    }
-}
-
-static ssh_channel channel_open(ssh_session session, void *userdata) {
-    struct session_data_struct *sdata = (struct session_data_struct *) userdata;
-
-    if (sdata->channel == NULL) {
-        sdata->channel = ssh_channel_new(session);
-        return sdata->channel;
-    } else {
-        // Only one channel allowed
-        return NULL;
-    }
-}
-
-void handle_session(ssh_event event, ssh_session session) {
-    /* Our struct holding information about the session. */
-    struct session_data_struct sdata = {
-        .channel = NULL,
-        .auth_attempts = 0,
-        .authenticated = 0,
-    };
-
-    struct ssh_server_callbacks_struct server_cb = {
-        .userdata = &sdata,
-        .auth_pubkey_function = auth_pubkey,
-        .channel_open_request_session_function = channel_open,
-    };
-    ssh_callbacks_init(&server_cb);
-    ssh_set_server_callbacks(session, &server_cb);
-
-    if (ssh_handle_key_exchange(session) != SSH_OK) {
-        fprintf(stderr, "%s\n", ssh_get_error(session));
-        return;
-    }
-
-    ssh_set_auth_methods(session, SSH_AUTH_METHOD_PUBLICKEY);
-    ssh_event_add_session(event, session);
-
-    for (int n=0; sdata.authenticated == 0 || sdata.channel == NULL; n++) {
-        /* If the user has used up all attempts, or if he hasn't been able to
-         * authenticate in 10 seconds (n * 100ms), disconnect. */
-        if (sdata.auth_attempts >= 3) {
-            fprintf(stderr, "Closing connection after 3 failed auth attempts\n");
-            return;
-        }
-        if (n >= 100) {
-            fprintf(stderr, "Closing connection after 10 seconds without successfull authentication\n");
-            return;
-        }
-
-        if (ssh_event_dopoll(event, 100) == SSH_ERROR) {
-            fprintf(stderr, "%s\n", ssh_get_error(session));
-            return;
-        }
-    }
-
-    handle_proxy_session(event, session, sdata.channel);
-
-    if (ssh_channel_is_open(sdata.channel)) {
-        ssh_channel_close(sdata.channel);
-    }
-
-    /* Wait up to 5 seconds for the client to terminate the session. */
-    for (int n = 0; n < 50 && (ssh_get_status(session) & SESSION_END) == 0; n++) {
-        ssh_event_dopoll(event, 100);
-    }
-    state_clean();
-    ssh_event_remove_session(event, session);
-}
-- 
cgit v1.2.3