xbot/myirc/challenge.cpp

#include "myirc/challenge.hpp"

#include "myirc/openssl_utils.hpp"

#include <mybase64.hpp>

#include <openssl/evp.h>
#include <openssl/rsa.h>

#include <boost/log/trivial.hpp>

#include <memory>
#include <string>

namespace myirc {

Challenge::Challenge(Ref<EVP_PKEY> key, std::shared_ptr<Client> client)
    : key_{std::move(key)}
    , client_{std::move(client)}
    {}

auto Challenge::on_ircmsg(IrcCommand cmd, const IrcMsg &msg) -> void {
    switch (cmd) {
    default: break;
    case IrcCommand::RPL_RSACHALLENGE2:
        buffer_ += msg.args[1];
        break;
    case IrcCommand::ERR_NOOPERHOST:
        slot_.disconnect();
        BOOST_LOG_TRIVIAL(error) << "Challenge: No oper host";
        break;
    case IrcCommand::RPL_YOUREOPER:
        slot_.disconnect();
        break;
    case IrcCommand::RPL_ENDOFRSACHALLENGE2:
        finish_challenge();
        break;
    }
}

auto Challenge::finish_challenge() -> void
{
    unsigned int digestlen = EVP_MAX_MD_SIZE;
    unsigned char digest[EVP_MAX_MD_SIZE];
    size_t len = mybase64::decoded_size(buffer_.size());
    std::vector<unsigned char> ciphertext(len, 0);

    auto decode_end = mybase64::decode(buffer_, reinterpret_cast<char*>(ciphertext.data()));
    if (decode_end == nullptr )
        return log_openssl_errors("Challenge base64::decode: ");
    ciphertext.resize(decode_end - reinterpret_cast<char*>(ciphertext.data()));

    // Setup decryption context
    Ref<EVP_PKEY_CTX> ctx{EVP_PKEY_CTX_new(key_.get(), nullptr)};
    if (not ctx)
        return log_openssl_errors("Challenge EVP_PKEY_CTX_new: ");

    if (1 != EVP_PKEY_decrypt_init(ctx.get()))
        return log_openssl_errors("Challenge EVP_PKEY_decrypt_init: ");

    if (0 >= EVP_PKEY_CTX_set_rsa_padding(ctx.get(), RSA_PKCS1_OAEP_PADDING))
        return log_openssl_errors("Challenge EVP_PKEY_CTX_set_rsa_padding: ");

    // Determine output size
    if (1 != EVP_PKEY_decrypt(ctx.get(), nullptr, &len, ciphertext.data(), ciphertext.size()))
        return log_openssl_errors("Challenge EVP_PKEY_decrypt (size): ");
    buffer_.resize(len);

    // Decrypt ciphertext
    if (1 != EVP_PKEY_decrypt(ctx.get(), reinterpret_cast<unsigned char*>(buffer_.data()), &len, ciphertext.data(), ciphertext.size()))
        return log_openssl_errors("Challenge EVP_PKEY_decrypt: ");
    buffer_.resize(len);

    // Hash the decrypted message
    if (1 != EVP_Digest(buffer_.data(), buffer_.size(), digest, &digestlen, EVP_sha1(), nullptr))
        return log_openssl_errors("Challenge EVP_Digest: ");

    // Construct reply as '+' and base64 encoded digest
    buffer_.resize(mybase64::encoded_size(digestlen) + 1);
    buffer_[0] = '+';
    mybase64::encode(std::string_view{(char*)digest, digestlen}, buffer_.data() + 1);

    client_->send_challenge(buffer_);
    buffer_.clear();
}

auto Challenge::start(std::shared_ptr<Client> client, const std::string_view user, Ref<EVP_PKEY> ref) -> std::shared_ptr<Challenge>
{
    auto self = std::make_shared<Challenge>(std::move(ref), client);
    self->slot_ = client->get_connection().sig_ircmsg.connect([self](auto cmd, auto &msg, bool) { self->on_ircmsg(cmd, msg); });
    client->send_challenge(user);
    return self;
}

} // namespace myirc