From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id A3EFF4A2E1 for ; Tue, 26 Mar 2024 05:53:13 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id 86B3868D510; Tue, 26 Mar 2024 07:53:10 +0200 (EET) Received: from SEVP216CU002.outbound.protection.outlook.com (mail-koreacentralazon11022019.outbound.protection.outlook.com [52.101.154.19]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 9097E68D01B for ; Tue, 26 Mar 2024 07:53:03 +0200 (EET) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=EnNNsrkUeFagpXwlo2pNkopOfVA9HtSyYhZvIA3oEOkqq06Ao7YIISLF7ikIX8ZtSawvigl2AyWdcsHPsXnmpXSwNWdp6wj+xT2xxENV2Z9FzzCSPCHShGer4rkkhvwXmzzlsa4c4slXb4C3r/S92+ZaKxi9ogCYxKGykQd5OqtKAAzcCVhgBnuZx7DBqLlh2WVyTbOoi/inKtXEl25AwzXLBs8xEWR5nQiYUpsGYyhhbouAlVhUEIktT1azjFFn4a4UR2op4gl9kgiVtPpBW5aAThYtFZycdYVRk2tdqRGB0G7WumVkNHa+3HQUm34FSm4H1MXr0r4PLJAy03hrbg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ys0HLx3a1aH5FqmqY0Lx72hoGoKNiZfSkFBoVWe81Zc=; b=lZBPTiRwOCGj8cK/Y6UMD1gMFXTg0StawxUR0jwMEfQFwtiLop+oehLTwcVRDH+e3FgmoKwcZZYXCDxqanveOmZXvdsP+BWufqN7wWapqRduiewAGNNo1+fng2la69BjhN05OItdab0iSSnoBYZp9t8JpUC2VIThRajP3KVtbzo5XsWmVt589flfw4rXhX3uK2HIgl0M/mQiUs8urgz5iQE6G8AR3jVnUc4W/clRAX7+0YGbRM0xw4ETXZY/CjPFkp04RUsKSFVaMbTxTE0LKS/U6MeHZ26dN6CZm2NGCF8m7unOOJ7WxMZqMhjezb30wrkDYIeOGJ73K1eP608gsQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=bitsensing.com; dmarc=pass action=none header.from=bitsensing.com; dkim=pass header.d=bitsensing.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bitsensing.onmicrosoft.com; s=selector1-bitsensing-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ys0HLx3a1aH5FqmqY0Lx72hoGoKNiZfSkFBoVWe81Zc=; b=ihEv1+TbcnhvMvaPXeM0HA60B1bfd4Ghkye5drA6/Ul3Us9K/WFAS+uJAkujyhk5Rvvs1SGw7TTXi+bT7VIjrV5k8xZWyh7mB4gs2IFDE/3/40FMmD0KQKQMNhUPvGYGcwJnwdUyD/E2rzK2PI/1VqE72uTF7SkQz8IYDA7/bro= Received: from SL2P216MB1481.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1f::7) by PU4P216MB2185.KORP216.PROD.OUTLOOK.COM (2603:1096:301:12c::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.32; Tue, 26 Mar 2024 05:52:59 +0000 Received: from SL2P216MB1481.KORP216.PROD.OUTLOOK.COM ([fe80::98b3:5aed:a402:9e22]) by SL2P216MB1481.KORP216.PROD.OUTLOOK.COM ([fe80::98b3:5aed:a402:9e22%4]) with mapi id 15.20.7409.031; Tue, 26 Mar 2024 05:52:59 +0000 From: =?ks_c_5601-1987?B?waTB9r/sIHwgRXVnZW5l?= To: "ffmpeg-devel@ffmpeg.org" Thread-Topic: [PATCH] avformat/httpauth: add SHA-256 Digest Authorization Thread-Index: Adp/QC/zSlALdDpjSYOcn2k8PrSvBA== Date: Tue, 26 Mar 2024 05:52:59 +0000 Message-ID: Accept-Language: ko-KR, en-US Content-Language: ko-KR X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: SL2P216MB1481:EE_|PU4P216MB2185:EE_ x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:ko; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SL2P216MB1481.KORP216.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230031)(366007)(1800799015)(376005); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?ks_c_5601-1987?B?ZWxqWVpGeThTZFNWU3JQTVFFUk9LYlJjS1dqL0REZ1BPTmRUNjNn?= =?ks_c_5601-1987?B?dDBCMVJVOE9iQnBaR2NMSFd5SEVjSmRJWGNHV1dwd1lXTGVEbEtS?= =?ks_c_5601-1987?B?VXZDTEU4SXJ3NS9mTnRYd0d5aWJybHpMY09rUWVHTWJ1Qmk3V1Fi?= =?ks_c_5601-1987?B?QnkrV0ZIcnVQY3lHeEQ5SUEwSlRRcFpqbDI4SFJBckEvVkl2M2d4?= =?ks_c_5601-1987?B?N2ZVVVJiUUY3aVcwQjRoeXc0ZHZVMWE0RVZhSXBxT2U3OFh3NVZ6?= =?ks_c_5601-1987?B?MWx4eUZlczVUWmduSm9URGVOcTgwTW8xSXJkZENDRnNzN1Y1Njlp?= =?ks_c_5601-1987?B?ZVVIV1orWk0rZ0p6ZHpvcEc0QXN0SXdFdnhVTmZ2UEM4dnpqbzJW?= =?ks_c_5601-1987?B?QUtvVFVPbnZjdmlYYlhBU285L1NLdDZ4VzdwSDBkQi9vUzlJYkN4?= =?ks_c_5601-1987?B?Q0pHdnk5V0VYQnU2RWhSTnk4N2ttbmxsSnpJWTJ5YzRCNi82UFJh?= =?ks_c_5601-1987?B?UUJNbEg1eXhyaXpVM3ZDSzh1b0lKaW44WnNpeUFLOUI2UnZ0VmJB?= =?ks_c_5601-1987?B?Z3RCcFdVLzNTU29iU3RUTk9nQ0FBRkNqc2dhc0p5MTdZWFByQWlx?= =?ks_c_5601-1987?B?UTNnaTYrMTB1dzR1S1ZZUVdnYVU3UXhmUDJxYjRudjV5WSt2dG1N?= =?ks_c_5601-1987?B?UEdyNnN1MzBvSEEySjNGdXJYbTJ4VnlzWHJCL0NTaW1vYU5YaHd1?= =?ks_c_5601-1987?B?VG1VQ1VqaUZHdk5qSzd3d3pGd2FLZGphaFI0bEdSRTUyS1hoczRa?= =?ks_c_5601-1987?B?S0ZGTjBIQ2dqK1l2U3hQeWtaK0IycHBTUzAvSUx0eEhWdnFKZDBj?= =?ks_c_5601-1987?B?dVYzU01FNnhFZDVBVFgrUmdON2RTTk5jU1d1WFI4MjR1YnVRNTgx?= =?ks_c_5601-1987?B?cGlXdUUwSUFlYUo1aitGYVZpd0dnL2RYcnZTdC85cG5UcTVEUFFK?= =?ks_c_5601-1987?B?TWo3WEZFY1BoeTFRK0lkWTU4ZGdUM1ZjS0pPdTh3cnJGT3l5TWlS?= =?ks_c_5601-1987?B?eUJVZG43SWJKUWpoRmN4Q0Z6dGxNSnhlR0pub2lMUUZtNGE5OWJn?= =?ks_c_5601-1987?B?YXJpdzdRZTIybjJucjdaV0Izajl4ZDBKSnBPbnR0RGloOHNGQVU5?= =?ks_c_5601-1987?B?c0VseGlUdS9PM2tKTk5EYisrYnd6aHZQZVl5ZXVIblNuYitrU21p?= =?ks_c_5601-1987?B?QS9uYlhqMXlyais2RCtzUFFyUTF6OG1ySTNYb3BZRVBlU0NERHdw?= =?ks_c_5601-1987?B?VmZsN3JzTmxCb0JiY2YrVnBrancxMER4NFV5Q0VPeHZqTDBZWmlr?= =?ks_c_5601-1987?B?VVFOdFF1MmFHenN3NlUyOXYwMG5BTUdqa2FzQitvK1UwNWtBN1ov?= =?ks_c_5601-1987?B?Uno2M281ZGJ6NEFTb2ZCdGhlUjlzS3hzczlWMlRwN05IOStLeGtQ?= =?ks_c_5601-1987?B?QVZINERLdWl0Vnh2QWhrK3QzTEtmRXZIV1VVSW83d05CaHUycFR0?= =?ks_c_5601-1987?B?WG00TEVGRVdVdDRLWHNuTUsxTWNmT3J0SllOeHUwQSs3YUhySkpR?= =?ks_c_5601-1987?B?d3hyU08yUmMzSFZLYlM4ZWhzVlVZZ3RwNXBFK0pENUdpSU9jVGV3?= =?ks_c_5601-1987?B?MTBsMGlycFY4cXdVdGhkcDdXaGE2NmxGaUJaR0xHWWQvSmFuME1N?= =?ks_c_5601-1987?B?SzhmZVBHNG5YallxRlNRQjYrRnZWTU41d2YzUHBpeTFNeEhaOTcx?= =?ks_c_5601-1987?B?MWxrUExPNGNOaTA1bXZLamFrUnVoUTVIdUhpb3hvWWk1Wk1tbThh?= =?ks_c_5601-1987?B?ekNFTWJ1NkpTN2VsbFNkcS84cVRNa1NadWpDY1VHN3JQcWFoSUZt?= =?ks_c_5601-1987?B?Q21XTDhOV1Z1MnhvblpQMDJFT0hYTGZMWG43U1JFNTNWanFKa3hB?= =?ks_c_5601-1987?B?QVFjMnAwYUZMdjJDK3RDQjhnTXZrL000dTQ1emRBQjRDcXcwQzhj?= =?ks_c_5601-1987?B?TWh3eGkvVktuQUNwTFdpVlJxY28wY1NiTzRRS014YzA1dFZ5TU9a?= =?ks_c_5601-1987?B?SWxWdkJ5dTlwTWRsOVAwbFlVNGpMOXBEa3QwWi9COUR1OUZHVXVn?= =?ks_c_5601-1987?B?UWRtUnZQZTQ5V1hlV0dEUmlnQ09ZaC83bFBtaEx3M0YveHhLS3FL?= =?ks_c_5601-1987?B?RjBNN2hNdXpwTFNzeU9SanBTNGFOQ1g4aGhDamR6NlJxdmM0Tktq?= =?ks_c_5601-1987?B?Zlo5QTRxMllIVklmRDZoR0lxNXVQZ3FNRmo0MHBnMmd1SlZGYUxj?= =?ks_c_5601-1987?B?aTUxWTUwNE50R0UreFlFTW0ra3pxSEg3d1FiQ3hSSURONkJ0KzhY?= =?ks_c_5601-1987?Q?JIfsDYwWZfkOfVwtgX1TylOypKvCG2zmE2BQZRfo?= MIME-Version: 1.0 X-OriginatorOrg: bitsensing.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SL2P216MB1481.KORP216.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: d8e0a701-e259-4706-cc08-08dc4d58fdf9 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Mar 2024 05:52:59.2705 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5039430d-7fb7-4b01-9192-aeefd0db9500 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: I9TVkp5PVkFX1ccfvsE8baH8Z9jhSo14ZJPYnCg/oPy+T+aCrjybyvNLJxX+ucMO9CKgL13f6Zt1rCCIeiKXgA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU4P216MB2185 Subject: [FFmpeg-devel] [PATCH] avformat/httpauth: add SHA-256 Digest Authorization X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: - add SHA-256 Digest Authorization for RFC7616 using avutil/hash.h Signed-off-by: Eugene-bitsensing --- libavformat/httpauth.c | 116 ++++++++++++++++++++++++++++++++++++++++- libavformat/httpauth.h | 8 +++ 2 files changed, 123 insertions(+), 1 deletion(-) diff --git a/libavformat/httpauth.c b/libavformat/httpauth.c index 9780928357..8391b6f32f 100644 --- a/libavformat/httpauth.c +++ b/libavformat/httpauth.c @@ -25,6 +25,7 @@ #include "internal.h" #include "libavutil/random_seed.h" #include "libavutil/md5.h" +#include "libavutil/hash.h" #include "urldecode.h" static void handle_basic_params(HTTPAuthState *state, const char *key, @@ -236,6 +237,114 @@ static char *make_digest_auth(HTTPAuthState *state, const char *username, return authstr; } +/** + * Generate a digest reply SHA-256, according to RFC 7616. + * TODO : support other RFIC 7616 Algorithm + */ +static char *make_digest_auth_sha(HTTPAuthState *state, const char *username, + const char *password, const char *uri, + const char *method, const char *algorithm) +{ + DigestParams *digest = &state->digest_params; + int len; + uint32_t cnonce_buf[2]; + char cnonce[17]; + char nc[9]; + int i; + char A1hash[65], A2hash[65], response[65]; + struct AVHashContext *hashctx; + uint8_t hash[64]; + char *authstr; + + digest->nc++; + snprintf(nc, sizeof(nc), "%08x", digest->nc); + + /* Generate a client nonce. */ + for (i = 0; i < 2; i++) + cnonce_buf[i] = av_get_random_seed(); + ff_data_to_hex(cnonce, (const uint8_t*) cnonce_buf, sizeof(cnonce_buf), 1); + + /* Allocate a hash context based on the provided algorithm */ + int ret = av_hash_alloc(&hashctx, algorithm); + if (ret < 0) { + return NULL; + } + + /* Initialize the hash context */ + av_hash_init(hashctx); + + /* Update the hash context with A1 data */ + av_hash_update(hashctx, (const uint8_t *)username, strlen(username)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)state->realm, strlen(state->realm)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)password, strlen(password)); + av_hash_final(hashctx, hash); + ff_data_to_hex(A1hash, hash, av_hash_get_size(hashctx), 1); + + /* Initialize the hash context for A2 */ + av_hash_init(hashctx); + av_hash_update(hashctx, (const uint8_t *)method, strlen(method)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)uri, strlen(uri)); + av_hash_final(hashctx, hash); + ff_data_to_hex(A2hash, hash, av_hash_get_size(hashctx), 1); + + /* Initialize the hash context for response */ + av_hash_init(hashctx); + av_hash_update(hashctx, (const uint8_t *)A1hash, strlen(A1hash)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)digest->nonce, strlen(digest->nonce)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)nc, strlen(nc)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)cnonce, strlen(cnonce)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)digest->qop, strlen(digest->qop)); + av_hash_update(hashctx, (const uint8_t *)":", 1); + av_hash_update(hashctx, (const uint8_t *)A2hash, strlen(A2hash)); + av_hash_final(hashctx, hash); + ff_data_to_hex(response, hash, av_hash_get_size(hashctx), 1); + + /* Free the hash context */ + av_hash_freep(&hashctx); + + len = strlen(username) + strlen(state->realm) + strlen(digest->nonce) + + strlen(uri) + strlen(response) + strlen(digest->algorithm) + + strlen(digest->opaque) + strlen(digest->qop) + strlen(cnonce) + + strlen(nc) + 150; + + authstr = av_malloc(len); + if (!authstr) { + return NULL; + } + + /* Generate Header same way as *make_digest_auth */ + snprintf(authstr, len, "Authorization: Digest "); + + av_strlcatf(authstr, len, "username=\"%s\"", username); + av_strlcatf(authstr, len, ", realm=\"%s\"", state->realm); + av_strlcatf(authstr, len, ", nonce=\"%s\"", digest->nonce); + av_strlcatf(authstr, len, ", uri=\"%s\"", uri); + av_strlcatf(authstr, len, ", response=\"%s\"", response); + + if (digest->algorithm[0]) + av_strlcatf(authstr, len, ", algorithm=\"%s\"", digest->algorithm); + + if (digest->opaque[0]) + av_strlcatf(authstr, len, ", opaque=\"%s\"", digest->opaque); + if (digest->qop[0]) { + av_strlcatf(authstr, len, ", qop=\"%s\"", digest->qop); + av_strlcatf(authstr, len, ", cnonce=\"%s\"", cnonce); + av_strlcatf(authstr, len, ", nc=%s", nc); + } + + av_strlcatf(authstr, len, "\r\n"); + + return authstr; +} + + char *ff_http_auth_create_response(HTTPAuthState *state, const char *auth, const char *path, const char *method) { @@ -276,7 +385,12 @@ char *ff_http_auth_create_response(HTTPAuthState *state, const char *auth, if ((password = strchr(username, ':'))) { *password++ = 0; - authstr = make_digest_auth(state, username, password, path, method); + /* add digest algorithm SHA-256 */ + if (!strcmp(state->digest_params.algorithm, "SHA-256")) { + authstr = make_digest_auth_sha(state, username, password, path, method,"SHA256"); + } else { + authstr = make_digest_auth(state, username, password, path, method); + } } av_free(username); } diff --git a/libavformat/httpauth.h b/libavformat/httpauth.h index 0e7085901c..4f45b4a0b9 100644 --- a/libavformat/httpauth.h +++ b/libavformat/httpauth.h @@ -76,4 +76,12 @@ void ff_http_auth_handle_header(HTTPAuthState *state, const char *key, char *ff_http_auth_create_response(HTTPAuthState *state, const char *auth, const char *path, const char *method); +/** + * New function declaration for RFC7616 + * SHA-256 digest authentication + * SHA-256-sess, SHA-512-256 and SHA-512-256-sess not supported yet + */ +static char *make_digest_auth_sha(HTTPAuthState *state, const char *username, + const char *password, const char *uri, + const char *method, const char *algorithm); #endif /* AVFORMAT_HTTPAUTH_H */ -- 2.42.0.windows.2 _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".