Class: HrrRbSsh::Transport

Inherits:
Object
  • Object
show all
Includes:
Loggable, Constant
Defined in:
lib/hrr_rb_ssh/transport.rb,
lib/hrr_rb_ssh/transport/sender.rb,
lib/hrr_rb_ssh/transport/constant.rb,
lib/hrr_rb_ssh/transport/receiver.rb,
lib/hrr_rb_ssh/transport/direction.rb,
lib/hrr_rb_ssh/transport/kex_algorithm.rb,
lib/hrr_rb_ssh/transport/mac_algorithm.rb,
lib/hrr_rb_ssh/transport/sequence_number.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/none.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm.rb,
lib/hrr_rb_ssh/transport/compression_algorithm.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/hmac_md5.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/hmac_sha1.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/none.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/hmac_md5_96.rb,
lib/hrr_rb_ssh/transport/server_host_key_algorithm.rb,
lib/hrr_rb_ssh/transport/compression_algorithm/none.rb,
lib/hrr_rb_ssh/transport/compression_algorithm/zlib.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/functionable.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/hmac_sha1_96.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/iv_computable.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/hmac_sha2_256.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/hmac_sha2_512.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/arcfour.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman.rb,
lib/hrr_rb_ssh/transport/mac_algorithm/unfunctionable.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/aes128_cbc.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/aes128_ctr.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/aes192_cbc.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/aes192_ctr.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/aes256_cbc.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/aes256_ctr.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman/h0.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/cast128_cbc.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/blowfish_cbc.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/functionable.rb,
lib/hrr_rb_ssh/transport/server_host_key_algorithm/ssh_dss.rb,
lib/hrr_rb_ssh/transport/server_host_key_algorithm/ssh_rsa.rb,
lib/hrr_rb_ssh/transport/compression_algorithm/functionable.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/three_des_cbc.rb,
lib/hrr_rb_ssh/transport/encryption_algorithm/unfunctionable.rb,
lib/hrr_rb_ssh/transport/compression_algorithm/unfunctionable.rb,
lib/hrr_rb_ssh/transport/server_host_key_algorithm/functionable.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group1_sha1.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group14_sha1.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group14_sha256.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group15_sha512.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group16_sha512.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group17_sha512.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group18_sha512.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group_exchange.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/elliptic_curve_diffie_hellman.rb,
lib/hrr_rb_ssh/transport/server_host_key_algorithm/ecdsa_sha2_nistp256.rb,
lib/hrr_rb_ssh/transport/server_host_key_algorithm/ecdsa_sha2_nistp384.rb,
lib/hrr_rb_ssh/transport/server_host_key_algorithm/ecdsa_sha2_nistp521.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group_exchange/h0.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/elliptic_curve_diffie_hellman/h0.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group_exchange_sha1.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/diffie_hellman_group_exchange_sha256.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/elliptic_curve_diffie_hellman_sha2_nistp256.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/elliptic_curve_diffie_hellman_sha2_nistp384.rb,
lib/hrr_rb_ssh/transport/kex_algorithm/elliptic_curve_diffie_hellman_sha2_nistp521.rb

Defined Under Namespace

Modules: Constant, Direction Classes: CompressionAlgorithm, EncryptionAlgorithm, KexAlgorithm, MacAlgorithm, Receiver, Sender, SequenceNumber, ServerHostKeyAlgorithm

Constant Summary

Constants included from Constant

Constant::CR, Constant::LF

Instance Attribute Summary collapse

Attributes included from Loggable

#log_key, #logger

Instance Method Summary collapse

Methods included from Loggable

#log_debug, #log_error, #log_fatal, #log_info, #log_warn

Constructor Details

#initialize(io, mode, options = {}, logger: nil) ⇒ Transport

Returns a new instance of Transport.



54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
 
# File 'lib/hrr_rb_ssh/transport.rb', line 54

def initialize io, mode, options={}, logger: nil
  self.logger = logger

  @io = io
  @mode = mode
  @options = options

  @closed = nil

  @in_kex = false

  @sender   = Sender.new logger: logger
  @receiver = Receiver.new logger: logger

  @sender_monitor   = Monitor.new
  @receiver_monitor = Monitor.new

  @local_version  = @options.delete('local_version') || "SSH-2.0-HrrRbSsh-#{VERSION}".force_encoding(Encoding::ASCII_8BIT)
  @remote_version = "".force_encoding(Encoding::ASCII_8BIT)

  @incoming_sequence_number = SequenceNumber.new
  @outgoing_sequence_number = SequenceNumber.new

  @acceptable_services = Array.new

  update_supported_algorithms
  update_preferred_algorithms
  initialize_local_algorithms
  initialize_algorithms
end

Instance Attribute Details

#i_c ⇒ Object (readonly)

Returns the value of attribute i_c.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def i_c
  @i_c
end

#i_s ⇒ Object (readonly)

Returns the value of attribute i_s.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def i_s
  @i_s
end

#incoming_compression_algorithm ⇒ Object (readonly)

Returns the value of attribute incoming_compression_algorithm.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def incoming_compression_algorithm
  @incoming_compression_algorithm
end

#incoming_encryption_algorithm ⇒ Object (readonly)

Returns the value of attribute incoming_encryption_algorithm.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def incoming_encryption_algorithm
  @incoming_encryption_algorithm
end

#incoming_mac_algorithm ⇒ Object (readonly)

Returns the value of attribute incoming_mac_algorithm.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def incoming_mac_algorithm
  @incoming_mac_algorithm
end

#incoming_sequence_number ⇒ Object (readonly)

Returns the value of attribute incoming_sequence_number.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def incoming_sequence_number
  @incoming_sequence_number
end

#io ⇒ Object (readonly)

Returns the value of attribute io.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def io
  @io
end

#mode ⇒ Object (readonly)

Returns the value of attribute mode.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def mode
  @mode
end

#outgoing_compression_algorithm ⇒ Object (readonly)

Returns the value of attribute outgoing_compression_algorithm.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def outgoing_compression_algorithm
  @outgoing_compression_algorithm
end

#outgoing_encryption_algorithm ⇒ Object (readonly)

Returns the value of attribute outgoing_encryption_algorithm.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def outgoing_encryption_algorithm
  @outgoing_encryption_algorithm
end

#outgoing_mac_algorithm ⇒ Object (readonly)

Returns the value of attribute outgoing_mac_algorithm.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def outgoing_mac_algorithm
  @outgoing_mac_algorithm
end

#outgoing_sequence_number ⇒ Object (readonly)

Returns the value of attribute outgoing_sequence_number.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def outgoing_sequence_number
  @outgoing_sequence_number
end

#preferred_compression_algorithms ⇒ Object (readonly)

Returns the value of attribute preferred_compression_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def preferred_compression_algorithms
  @preferred_compression_algorithms
end

#preferred_encryption_algorithms ⇒ Object (readonly)

Returns the value of attribute preferred_encryption_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def preferred_encryption_algorithms
  @preferred_encryption_algorithms
end

#preferred_kex_algorithms ⇒ Object (readonly)

Returns the value of attribute preferred_kex_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def preferred_kex_algorithms
  @preferred_kex_algorithms
end

#preferred_mac_algorithms ⇒ Object (readonly)

Returns the value of attribute preferred_mac_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def preferred_mac_algorithms
  @preferred_mac_algorithms
end

#preferred_server_host_key_algorithms ⇒ Object (readonly)

Returns the value of attribute preferred_server_host_key_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def preferred_server_host_key_algorithms
  @preferred_server_host_key_algorithms
end

#server_host_key_algorithm ⇒ Object (readonly)

Returns the value of attribute server_host_key_algorithm.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def server_host_key_algorithm
  @server_host_key_algorithm
end

#session_id ⇒ Object (readonly)

Returns the value of attribute session_id.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def session_id
  @session_id
end

#supported_compression_algorithms ⇒ Object (readonly)

Returns the value of attribute supported_compression_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def supported_compression_algorithms
  @supported_compression_algorithms
end

#supported_encryption_algorithms ⇒ Object (readonly)

Returns the value of attribute supported_encryption_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def supported_encryption_algorithms
  @supported_encryption_algorithms
end

#supported_kex_algorithms ⇒ Object (readonly)

Returns the value of attribute supported_kex_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def supported_kex_algorithms
  @supported_kex_algorithms
end

#supported_mac_algorithms ⇒ Object (readonly)

Returns the value of attribute supported_mac_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def supported_mac_algorithms
  @supported_mac_algorithms
end

#supported_server_host_key_algorithms ⇒ Object (readonly)

Returns the value of attribute supported_server_host_key_algorithms.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def supported_server_host_key_algorithms
  @supported_server_host_key_algorithms
end

#v_c ⇒ Object (readonly)

Returns the value of attribute v_c.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def v_c
  @v_c
end

#v_s ⇒ Object (readonly)

Returns the value of attribute v_s.



26
27
28
 
# File 'lib/hrr_rb_ssh/transport.rb', line 26

def v_s
  @v_s
end

Instance Method Details

#check_if_preferred_algorithms_are_supported ⇒ Object 



266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
 
# File 'lib/hrr_rb_ssh/transport.rb', line 266

def check_if_preferred_algorithms_are_supported
  [
    ['kex',             @preferred_kex_algorithms,             @supported_kex_algorithms            ],
    ['server host key', @preferred_server_host_key_algorithms, @supported_server_host_key_algorithms],
    ['encryption',      @preferred_encryption_algorithms,      @supported_encryption_algorithms     ],
    ['mac',             @preferred_mac_algorithms,             @supported_mac_algorithms            ],
    ['compression',     @preferred_compression_algorithms,     @supported_compression_algorithms    ],
  ].each{ |algorithm_name, list_preferred, list_supported|
    list_preferred.each{ |a|
      unless list_supported.include? a
        raise ArgumentError, "#{algorithm_name} algorithm #{a} is not supported"
      end
    }
  }
end

#close ⇒ Object 



181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
 
# File 'lib/hrr_rb_ssh/transport.rb', line 181

def close
  @sender_monitor.synchronize do
    return if @closed
    log_info { "close transport" }
    begin
      disconnect
      @incoming_compression_algorithm.close
      @outgoing_compression_algorithm.close
    rescue => e
      log_error { [e.backtrace[0], ": ", e.message, " (", e.class.to_s, ")\n\t", e.backtrace[1..-1].join("\n\t")].join }
    ensure
      @closed = true
      log_info { "transport closed" }
    end
  end
end

#closed? ⇒ Boolean

Returns:

  • (Boolean) 


198
199
200
 
# File 'lib/hrr_rb_ssh/transport.rb', line 198

def closed?
  @closed
end

#disconnect ⇒ Object 



202
203
204
205
206
 
# File 'lib/hrr_rb_ssh/transport.rb', line 202

def disconnect
  log_info { "disconnect transport" }
  send_disconnect
  log_info { "transport disconnected" }
end

#exchange_key(payload = nil) ⇒ Object 



214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
 
# File 'lib/hrr_rb_ssh/transport.rb', line 214

def exchange_key payload=nil
  @in_kex = true
  @sender_monitor.synchronize do
    @receiver_monitor.synchronize do
      send_kexinit
      if payload
        receive_kexinit payload
      else
        receive_kexinit receive
      end
      update_kex_and_server_host_key_algorithms
      start_kex_algorithm
      send_newkeys
      receive_newkeys receive
      update_encryption_mac_compression_algorithms
    end
  end
  @in_kex = false
end

#exchange_version ⇒ Object 



208
209
210
211
212
 
# File 'lib/hrr_rb_ssh/transport.rb', line 208

def exchange_version
  send_version
  receive_version
  update_version_strings
end

#initialize_algorithms ⇒ Object 



293
294
295
296
297
298
299
300
301
 
# File 'lib/hrr_rb_ssh/transport.rb', line 293

def initialize_algorithms
  @incoming_encryption_algorithm  = EncryptionAlgorithm['none'].new
  @incoming_mac_algorithm         = MacAlgorithm['none'].new
  @incoming_compression_algorithm = CompressionAlgorithm['none'].new

  @outgoing_encryption_algorithm  = EncryptionAlgorithm['none'].new
  @outgoing_mac_algorithm         = MacAlgorithm['none'].new
  @outgoing_compression_algorithm = CompressionAlgorithm['none'].new
end

#initialize_local_algorithms ⇒ Object 



282
283
284
285
286
287
288
289
290
291
 
# File 'lib/hrr_rb_ssh/transport.rb', line 282

def initialize_local_algorithms
  @local_kex_algorithms                          = @preferred_kex_algorithms
  @local_server_host_key_algorithms              = @preferred_server_host_key_algorithms
  @local_encryption_algorithms_client_to_server  = @preferred_encryption_algorithms
  @local_encryption_algorithms_server_to_client  = @preferred_encryption_algorithms
  @local_mac_algorithms_client_to_server         = @preferred_mac_algorithms
  @local_mac_algorithms_server_to_client         = @preferred_mac_algorithms
  @local_compression_algorithms_client_to_server = @preferred_compression_algorithms
  @local_compression_algorithms_server_to_client = @preferred_compression_algorithms
end

#receive ⇒ Object

Raises:



106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
 
# File 'lib/hrr_rb_ssh/transport.rb', line 106

def receive
  raise Error::ClosedTransport if @closed
  @receiver_monitor.synchronize do
    begin
      payload = @receiver.receive self
      case payload[0,1].unpack("C")[0]
      when Message::SSH_MSG_DISCONNECT::VALUE
        log_info { "received disconnect message" }
        message = Message::SSH_MSG_DISCONNECT.new(logger: logger).decode payload
        close
        raise Error::ClosedTransport
      when Message::SSH_MSG_IGNORE::VALUE
        log_info { "received ignore message" }
        message = Message::SSH_MSG_IGNORE.new(logger: logger).decode payload
        receive
      when Message::SSH_MSG_UNIMPLEMENTED::VALUE
        log_info { "received unimplemented message" }
        message = Message::SSH_MSG_UNIMPLEMENTED.new(logger: logger).decode payload
        receive
      when Message::SSH_MSG_DEBUG::VALUE
        log_info { "received debug message" }
        message = Message::SSH_MSG_DEBUG.new(logger: logger).decode payload
        receive
      when Message::SSH_MSG_KEXINIT::VALUE
        log_info { "received kexinit message" }
        if @in_kex
          payload
        else
          exchange_key payload
          receive
        end
      else
        payload
      end
    rescue Error::ClosedTransport
      raise
    rescue EOFError, IOError, SystemCallError => e
      log_info { "#{e.message} (#{e.class})" }
      close
      raise Error::ClosedTransport
    rescue => e
      log_error { [e.backtrace[0], ": ", e.message, " (", e.class.to_s, ")\n\t", e.backtrace[1..-1].join("\n\t")].join }
      close
      raise Error::ClosedTransport
    end
  end
end

#receive_kexinit(payload) ⇒ Object 



383
384
385
386
387
388
389
390
391
392
 
# File 'lib/hrr_rb_ssh/transport.rb', line 383

def receive_kexinit payload
  case @mode
  when Mode::SERVER
    @i_c = payload
  when Mode::CLIENT
    @i_s = payload
  end
  message = Message::SSH_MSG_KEXINIT.new(logger: logger).decode payload
  update_remote_algorithms message
end

#receive_newkeys(payload) ⇒ Object 



402
403
404
 
# File 'lib/hrr_rb_ssh/transport.rb', line 402

def receive_newkeys payload
  message = Message::SSH_MSG_NEWKEYS.new(logger: logger).decode payload
end

#receive_service_request ⇒ Object 



418
419
420
421
 
# File 'lib/hrr_rb_ssh/transport.rb', line 418

def receive_service_request
  payload = @receiver.receive self
  message = Message::SSH_MSG_SERVICE_REQUEST.new(logger: logger).decode payload
end

#receive_version ⇒ Object 



307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
 
# File 'lib/hrr_rb_ssh/transport.rb', line 307

def receive_version
  str_io = StringIO.new
  loop do
    str_io.write @io.read(1)
    if str_io.string[-2..-1] == "#{CR}#{LF}"
      if str_io.string[0..3] == "SSH-"
        @remote_version = str_io.string[0..-3]
        log_info { "received remote version string: #{@remote_version}" }
        break
      else
        log_info { "received message before remote version string: #{str_io.string}" }
        str_io.rewind
        str_io.truncate(0)
      end
    end
  end
end

#register_acceptable_service(service_name) ⇒ Object 



85
86
87
 
# File 'lib/hrr_rb_ssh/transport.rb', line 85

def register_acceptable_service service_name
  @acceptable_services.push service_name
end

#send(payload) ⇒ Object

Raises:



89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
 
# File 'lib/hrr_rb_ssh/transport.rb', line 89

def send payload
  raise Error::ClosedTransport if @closed
  @sender_monitor.synchronize do
    begin
      @sender.send self, payload
    rescue IOError, SystemCallError => e
      log_info { "#{e.message} (#{e.class})" }
      close
      raise Error::ClosedTransport
    rescue => e
      log_error { [e.backtrace[0], ": ", e.message, " (", e.class.to_s, ")\n\t", e.backtrace[1..-1].join("\n\t")].join }
      close
      raise Error::ClosedTransport
    end
  end
end

#send_disconnect ⇒ Object 



336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
 
# File 'lib/hrr_rb_ssh/transport.rb', line 336

def send_disconnect
  message = {
    :'message number' => Message::SSH_MSG_DISCONNECT::VALUE,
    :'reason code'    => Message::SSH_MSG_DISCONNECT::ReasonCode::SSH_DISCONNECT_BY_APPLICATION,
    :'description'    => "disconnected by user",
    :'language tag'   => ""
  }
  payload = Message::SSH_MSG_DISCONNECT.new(logger: logger).encode message
  @sender_monitor.synchronize do
    begin
      @sender.send self, payload
    rescue IOError, SystemCallError => e
      log_info { "#{e.message} (#{e.class})" }
    rescue => e
      log_error { [e.backtrace[0], ": ", e.message, " (", e.class.to_s, ")\n\t", e.backtrace[1..-1].join("\n\t")].join }
    end
  end
end

#send_kexinit ⇒ Object 



355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
 
# File 'lib/hrr_rb_ssh/transport.rb', line 355

def send_kexinit
  message = {
    :'message number'                          => Message::SSH_MSG_KEXINIT::VALUE,
    :'cookie (random byte)'                    => lambda { rand(0x01_00) },
    :'kex_algorithms'                          => @local_kex_algorithms,
    :'server_host_key_algorithms'              => @local_server_host_key_algorithms,
    :'encryption_algorithms_client_to_server'  => @local_encryption_algorithms_client_to_server,
    :'encryption_algorithms_server_to_client'  => @local_encryption_algorithms_server_to_client,
    :'mac_algorithms_client_to_server'         => @local_mac_algorithms_client_to_server,
    :'mac_algorithms_server_to_client'         => @local_mac_algorithms_server_to_client,
    :'compression_algorithms_client_to_server' => @local_compression_algorithms_client_to_server,
    :'compression_algorithms_server_to_client' => @local_compression_algorithms_server_to_client,
    :'languages_client_to_server'              => [],
    :'languages_server_to_client'              => [],
    :'first_kex_packet_follows'                => false,
    :'0 (reserved for future extension)'       => 0,
  }
  payload = Message::SSH_MSG_KEXINIT.new(logger: logger).encode message
  send payload

  case @mode
  when Mode::SERVER
    @i_s = payload
  when Mode::CLIENT
    @i_c = payload
  end
end

#send_newkeys ⇒ Object 



394
395
396
397
398
399
400
 
# File 'lib/hrr_rb_ssh/transport.rb', line 394

def send_newkeys
    message = {
      :'message number' => Message::SSH_MSG_NEWKEYS::VALUE,
    }
    payload = Message::SSH_MSG_NEWKEYS.new(logger: logger).encode message
    send payload
end

#send_service_accept(service_name) ⇒ Object 



423
424
425
426
427
428
429
430
 
# File 'lib/hrr_rb_ssh/transport.rb', line 423

def send_service_accept service_name
  message = {
    :'message number' => Message::SSH_MSG_SERVICE_ACCEPT::VALUE,
    :'service name'   => service_name,
  }
  payload = Message::SSH_MSG_SERVICE_ACCEPT.new(logger: logger).encode message
  send payload
end

#send_service_request ⇒ Object 



406
407
408
409
410
411
412
413
414
415
416
 
# File 'lib/hrr_rb_ssh/transport.rb', line 406

def send_service_request
  message = {
    :'message number' => Message::SSH_MSG_SERVICE_REQUEST::VALUE,
    :'service name' => 'ssh-userauth',
  }
  payload = Message::SSH_MSG_SERVICE_REQUEST.new(logger: logger).encode message
  send payload

  payload = @receiver.receive self
  message = Message::SSH_MSG_SERVICE_ACCEPT.new(logger: logger).decode payload
end

#send_version ⇒ Object 



303
304
305
 
# File 'lib/hrr_rb_ssh/transport.rb', line 303

def send_version
  @io.write (@local_version + CR + LF)
end

#start ⇒ Object 



154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
 
# File 'lib/hrr_rb_ssh/transport.rb', line 154

def start
  log_info { "start transport" }
  begin
    exchange_version
    exchange_key
    case @mode
    when Mode::SERVER
      verify_service_request
    when Mode::CLIENT
      send_service_request
    end
    @closed = false
  rescue Error::ClosedTransport
    raise
  rescue EOFError, IOError, SystemCallError => e
    log_info { "#{e.message} (#{e.class})" }
    close
    raise Error::ClosedTransport
  rescue => e
    log_error { [e.backtrace[0], ": ", e.message, " (", e.class.to_s, ")\n\t", e.backtrace[1..-1].join("\n\t")].join }
    close
    raise Error::ClosedTransport
  else
    log_info { "transport started" }
  end
end

#start_kex_algorithm ⇒ Object 



234
235
236
 
# File 'lib/hrr_rb_ssh/transport.rb', line 234

def start_kex_algorithm
  @kex_algorithm.start self
end

#update_compression_algorithm ⇒ Object 



511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
 
# File 'lib/hrr_rb_ssh/transport.rb', line 511

def update_compression_algorithm
  case @mode
  when Mode::SERVER
    compression_algorithm_c_to_s_name = @remote_compression_algorithms_client_to_server.find{ |a| @local_compression_algorithms_client_to_server.include? a } or raise
    compression_algorithm_s_to_c_name = @remote_compression_algorithms_server_to_client.find{ |a| @local_compression_algorithms_server_to_client.include? a } or raise
    incoming_compression_algorithm_name = compression_algorithm_c_to_s_name
    outgoing_compression_algorithm_name = compression_algorithm_s_to_c_name
  when Mode::CLIENT
    compression_algorithm_s_to_c_name = @local_compression_algorithms_server_to_client.find{ |a| @remote_compression_algorithms_server_to_client.include? a } or raise
    compression_algorithm_c_to_s_name = @local_compression_algorithms_client_to_server.find{ |a| @remote_compression_algorithms_client_to_server.include? a } or raise
    incoming_compression_algorithm_name = compression_algorithm_s_to_c_name
    outgoing_compression_algorithm_name = compression_algorithm_c_to_s_name
  end
  @incoming_compression_algorithm.close
  @outgoing_compression_algorithm.close
  @incoming_compression_algorithm = CompressionAlgorithm[incoming_compression_algorithm_name].new Direction::INCOMING
  @outgoing_compression_algorithm = CompressionAlgorithm[outgoing_compression_algorithm_name].new Direction::OUTGOING
end

#update_encryption_algorithm ⇒ Object 



465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
 
# File 'lib/hrr_rb_ssh/transport.rb', line 465

def update_encryption_algorithm
  case @mode
  when Mode::SERVER
    encryption_algorithm_c_to_s_name = @remote_encryption_algorithms_client_to_server.find{ |a| @local_encryption_algorithms_client_to_server.include? a } or raise
    encryption_algorithm_s_to_c_name = @remote_encryption_algorithms_server_to_client.find{ |a| @local_encryption_algorithms_server_to_client.include? a } or raise
    incoming_encryption_algorithm_name = encryption_algorithm_c_to_s_name
    outgoing_encryption_algorithm_name = encryption_algorithm_s_to_c_name
    incoming_crpt_iv = @kex_algorithm.iv_c_to_s self, incoming_encryption_algorithm_name
    outgoing_crpt_iv = @kex_algorithm.iv_s_to_c self, outgoing_encryption_algorithm_name
    incoming_crpt_key = @kex_algorithm.key_c_to_s self, incoming_encryption_algorithm_name
    outgoing_crpt_key = @kex_algorithm.key_s_to_c self, outgoing_encryption_algorithm_name
  when Mode::CLIENT
    encryption_algorithm_s_to_c_name = @local_encryption_algorithms_server_to_client.find{ |a| @remote_encryption_algorithms_server_to_client.include? a } or raise
    encryption_algorithm_c_to_s_name = @local_encryption_algorithms_client_to_server.find{ |a| @remote_encryption_algorithms_client_to_server.include? a } or raise
    incoming_encryption_algorithm_name = encryption_algorithm_s_to_c_name
    outgoing_encryption_algorithm_name = encryption_algorithm_c_to_s_name
    incoming_crpt_iv = @kex_algorithm.iv_s_to_c self, incoming_encryption_algorithm_name
    outgoing_crpt_iv = @kex_algorithm.iv_c_to_s self, outgoing_encryption_algorithm_name
    incoming_crpt_key = @kex_algorithm.key_s_to_c self, incoming_encryption_algorithm_name
    outgoing_crpt_key = @kex_algorithm.key_c_to_s self, outgoing_encryption_algorithm_name
  end
  @incoming_encryption_algorithm = EncryptionAlgorithm[incoming_encryption_algorithm_name].new Direction::INCOMING, incoming_crpt_iv, incoming_crpt_key
  @outgoing_encryption_algorithm = EncryptionAlgorithm[outgoing_encryption_algorithm_name].new Direction::OUTGOING, outgoing_crpt_iv, outgoing_crpt_key
end

#update_encryption_mac_compression_algorithms ⇒ Object 



458
459
460
461
462
463
 
# File 'lib/hrr_rb_ssh/transport.rb', line 458

def update_encryption_mac_compression_algorithms
  @session_id ||= @kex_algorithm.hash(self)
  update_encryption_algorithm
  update_mac_algorithm
  update_compression_algorithm
end

#update_kex_and_server_host_key_algorithms ⇒ Object 



443
444
445
446
447
448
449
450
451
452
453
454
455
456
 
# File 'lib/hrr_rb_ssh/transport.rb', line 443

def update_kex_and_server_host_key_algorithms
  case @mode
  when Mode::SERVER
    kex_algorithm_name             = @remote_kex_algorithms.find{ |a| @local_kex_algorithms.include? a } or raise
    server_host_key_algorithm_name = @remote_server_host_key_algorithms.find{ |a| @local_server_host_key_algorithms.include? a } or raise
    server_secret_host_key         = @options.fetch('transport_server_secret_host_keys', {}).fetch(server_host_key_algorithm_name, nil)
  when Mode::CLIENT
    kex_algorithm_name             = @local_kex_algorithms.find{ |a| @remote_kex_algorithms.include? a } or raise
    server_host_key_algorithm_name = @local_server_host_key_algorithms.find{ |a| @remote_server_host_key_algorithms.include? a } or raise
    server_secret_host_key         = nil
  end
  @server_host_key_algorithm = ServerHostKeyAlgorithm[server_host_key_algorithm_name].new server_secret_host_key
  @kex_algorithm             = KexAlgorithm[kex_algorithm_name].new
end

#update_mac_algorithm ⇒ Object 



490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
 
# File 'lib/hrr_rb_ssh/transport.rb', line 490

def update_mac_algorithm
  case @mode
  when Mode::SERVER
    mac_algorithm_c_to_s_name = @remote_mac_algorithms_client_to_server.find{ |a| @local_mac_algorithms_client_to_server.include? a } or raise
    mac_algorithm_s_to_c_name = @remote_mac_algorithms_server_to_client.find{ |a| @local_mac_algorithms_server_to_client.include? a } or raise
    incoming_mac_algorithm_name = mac_algorithm_c_to_s_name
    outgoing_mac_algorithm_name = mac_algorithm_s_to_c_name
    incoming_mac_key = @kex_algorithm.mac_c_to_s self, incoming_mac_algorithm_name
    outgoing_mac_key = @kex_algorithm.mac_s_to_c self, outgoing_mac_algorithm_name
  when Mode::CLIENT
    mac_algorithm_s_to_c_name = @local_mac_algorithms_server_to_client.find{ |a| @remote_mac_algorithms_server_to_client.include? a } or raise
    mac_algorithm_c_to_s_name = @local_mac_algorithms_client_to_server.find{ |a| @remote_mac_algorithms_client_to_server.include? a } or raise
    incoming_mac_algorithm_name = mac_algorithm_s_to_c_name
    outgoing_mac_algorithm_name = mac_algorithm_c_to_s_name
    incoming_mac_key = @kex_algorithm.mac_s_to_c self, incoming_mac_algorithm_name
    outgoing_mac_key = @kex_algorithm.mac_c_to_s self, outgoing_mac_algorithm_name
  end
  @incoming_mac_algorithm = MacAlgorithm[incoming_mac_algorithm_name].new incoming_mac_key
  @outgoing_mac_algorithm = MacAlgorithm[outgoing_mac_algorithm_name].new outgoing_mac_key
end

#update_preferred_algorithms ⇒ Object 



256
257
258
259
260
261
262
263
264
 
# File 'lib/hrr_rb_ssh/transport.rb', line 256

def update_preferred_algorithms
  @preferred_kex_algorithms             = @options['transport_preferred_kex_algorithms']             || KexAlgorithm.list_preferred
  @preferred_server_host_key_algorithms = @options['transport_preferred_server_host_key_algorithms'] || ServerHostKeyAlgorithm.list_preferred
  @preferred_encryption_algorithms      = @options['transport_preferred_encryption_algorithms']      || EncryptionAlgorithm.list_preferred
  @preferred_mac_algorithms             = @options['transport_preferred_mac_algorithms']             || MacAlgorithm.list_preferred
  @preferred_compression_algorithms     = @options['transport_preferred_compression_algorithms']     || CompressionAlgorithm.list_preferred

  check_if_preferred_algorithms_are_supported
end

#update_remote_algorithms(message) ⇒ Object 



432
433
434
435
436
437
438
439
440
441
 
# File 'lib/hrr_rb_ssh/transport.rb', line 432

def update_remote_algorithms message
  @remote_kex_algorithms                          = message[:'kex_algorithms']
  @remote_server_host_key_algorithms              = message[:'server_host_key_algorithms']
  @remote_encryption_algorithms_client_to_server  = message[:'encryption_algorithms_client_to_server']
  @remote_encryption_algorithms_server_to_client  = message[:'encryption_algorithms_server_to_client']
  @remote_mac_algorithms_client_to_server         = message[:'mac_algorithms_client_to_server']
  @remote_mac_algorithms_server_to_client         = message[:'mac_algorithms_server_to_client']
  @remote_compression_algorithms_client_to_server = message[:'compression_algorithms_client_to_server']
  @remote_compression_algorithms_server_to_client = message[:'compression_algorithms_server_to_client']
end

#update_supported_algorithms ⇒ Object 



248
249
250
251
252
253
254
 
# File 'lib/hrr_rb_ssh/transport.rb', line 248

def update_supported_algorithms
  @supported_kex_algorithms             = KexAlgorithm.list_supported
  @supported_server_host_key_algorithms = ServerHostKeyAlgorithm.list_supported
  @supported_encryption_algorithms      = EncryptionAlgorithm.list_supported
  @supported_mac_algorithms             = MacAlgorithm.list_supported
  @supported_compression_algorithms     = CompressionAlgorithm.list_supported
end

#update_version_strings ⇒ Object 



325
326
327
328
329
330
331
332
333
334
 
# File 'lib/hrr_rb_ssh/transport.rb', line 325

def update_version_strings
  case @mode
  when Mode::SERVER
    @v_c = @remote_version
    @v_s = @local_version
  when Mode::CLIENT
    @v_c = @local_version
    @v_s = @remote_version
  end
end

#verify_service_request ⇒ Object 



238
239
240
241
242
243
244
245
246
 
# File 'lib/hrr_rb_ssh/transport.rb', line 238

def verify_service_request
  service_request_message = receive_service_request
  service_name = service_request_message[:'service name']
  if @acceptable_services.include? service_name
    send_service_accept service_name
  else
    close
  end
end