Added Web based RDP support with NLA, #3867 and #3914

rdp/protocol/cert.js

@@ -0,0 +1,175 @@
+/*
+ * Copyright (c) 2014-2015 Sylvain Peyrefitte
+ *
+ * This file is part of node-rdpjs.
+ *
+ * node-rdpjs is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+var type = require('../core').type;
+var log = require('../core').log;
+var x509 = require('../security').x509;
+var rsa = require('../security').rsa;
+var asn1 = require('../asn1');
+
+/**
+ *  @see http://msdn.microsoft.com/en-us/library/cc240521.aspx
+ */
+var CertificateType = {
+    CERT_CHAIN_VERSION_1 : 0x00000001,
+    CERT_CHAIN_VERSION_2 : 0x00000002
+};
+
+/**
+ * @see http://msdn.microsoft.com/en-us/library/cc240520.aspx
+ * @returns
+ */
+function rsaPublicKey(opt) {
+	var self = {
+		magic : new type.UInt32Le(0x31415352, { constant : true }),
+        keylen : new type.UInt32Le(function() {
+        	return self.modulus.size() + self.paddinf.size();
+        }),
+        bitlen : new type.UInt32Le(function() {
+        	return (self.keylen.value - 8) * 8;
+        }),
+        datalen : new type.UInt32Le(function() {
+        	return (self.bitlen.value / 8) - 1;
+        }),
+        pubExp : new type.UInt32Le(),
+        modulus : new type.BinaryString(null, { readLength : new type.CallableValue(function() {
+        	return self.keylen.value - 8;
+        }) }),
+        padding : new type.BinaryString(Buffer.from(Array(8 + 1).join('\x00')), { readLength : new type.CallableValue(8) })
+	};
+	
+	return new type.Component(self, opt);
+}
+
+/**
+ * http://msdn.microsoft.com/en-us/library/cc240519.aspx
+ * @returns {type.Component}
+ */
+function proprietaryCertificate() {
+	var self = {
+		__TYPE__ : CertificateType.CERT_CHAIN_VERSION_1,
+		dwSigAlgId : new type.UInt32Le(0x00000001, { constant : true }),
+        dwKeyAlgId : new type.UInt32Le(0x00000001, { constant : true }),
+        wPublicKeyBlobType : new type.UInt16Le(0x0006, { constant : true }),
+        wPublicKeyBlobLen : new type.UInt16Le(function() {
+        	return self.PublicKeyBlob.size();
+        }),
+        PublicKeyBlob : rsaPublicKey({ readLength : new type.CallableValue(function() {
+        	return self.wPublicKeyBlobLen.value;
+        }) }),
+        wSignatureBlobType : new type.UInt16Le(0x0008, { constant : true }),
+        wSignatureBlobLen : new type.UInt16Le(function() {
+        	return self.SignatureBlob.size() + self.padding.size();
+        }),
+        SignatureBlob : new type.BinaryString(null, { readLength : new type.CallableValue(function() {
+        	return self.wSignatureBlobLen.value - self.padding.size;
+        }) }),
+        padding : new type.BinaryString(Array(8 + 1).join('\x00'), { readLength : new type.CallableValue(8) }),
+        /**
+         * @return {object} rsa.publicKey
+         */
+        getPublicKey : function() {
+        	return rsa.publicKey(self.PublicKeyBlob.obj.modulus.value, self.PublicKeyBlob.obj.pubExp.value);
+        }
+	};
+	
+	return new type.Component(self);
+}
+
+/**
+ * For x509 certificate
+ * @see http://msdn.microsoft.com/en-us/library/cc241911.aspx
+ * @returns {type.Component}
+ */
+function certBlob() {
+	var self = {
+		cbCert : new type.UInt32Le(function() {
+			return self.abCert.size();
+		}),
+        abCert : new type.BinaryString(null, { readLength : new type.CallableValue(function() {
+        	return self.cbCert.value;
+        }) })
+	};
+	
+	return new type.Component(self);
+}
+
+/**
+ * x509 certificate chain
+ * @see http://msdn.microsoft.com/en-us/library/cc241910.aspx
+ * @returns {type.Component}
+ */
+function x509CertificateChain() {
+	var self = {
+		__TYPE__ : CertificateType.CERT_CHAIN_VERSION_2,
+		NumCertBlobs : new type.UInt32Le(),
+        CertBlobArray : new type.Factory(function(s) {
+        	self.CertBlobArray = new type.Component([]);
+        	for(var i = 0; i < self.NumCertBlobs.value; i++) {
+        		self.CertBlobArray.obj.push(certBlob().read(s));
+        	}
+        }),
+        padding : new type.BinaryString(null, { readLength : new type.CallableValue(function() {
+        	return 8 + 4 * self.NumCertBlobs.value;
+        }) }),
+        /**
+         * @return {object} {n : modulus{bignum}, e : publicexponent{integer}
+         */
+        getPublicKey : function(){
+        	var cert = x509.X509Certificate().decode(new type.Stream(self.CertBlobArray.obj[self.CertBlobArray.obj.length - 1].obj.abCert.value), asn1.ber);
+        	var publikeyStream = new type.Stream(cert.value.tbsCertificate.value.subjectPublicKeyInfo.value.subjectPublicKey.toBuffer());
+        	var asn1PublicKey = x509.RSAPublicKey().decode(publikeyStream, asn1.ber);
+        	return rsa.publicKey(asn1PublicKey.value.modulus.value, asn1PublicKey.value.publicExponent.value);
+        }
+	};
+	
+	return new type.Component(self);
+}
+
+function certificate() {
+	var self = {
+		dwVersion : new type.UInt32Le(function() {
+			return self.certData.__TYPE__;
+		}),
+		certData : new type.Factory(function(s) {
+			switch(self.dwVersion.value & 0x7fffffff) {
+			case CertificateType.CERT_CHAIN_VERSION_1:
+				log.debug('read proprietary certificate');
+				self.certData = proprietaryCertificate().read(s);
+				break;
+			case CertificateType.CERT_CHAIN_VERSION_2:
+				log.debug('read x.509 certificate chain');
+				self.certData = x509CertificateChain().read(s);
+				break;
+			default:
+				log.error('unknown cert type ' + self.dwVersion.value & 0x7fffffff);
+			}
+		})
+	};
+	
+	return new type.Component(self);
+}
+
+/**
+ * Module exports
+ */
+module.exports = {
+	CertificateType : CertificateType,
+	certificate : certificate
+};