/* wolfssh.c * * Copyright (C) 2014-2025 wolfSSL Inc. * * This file is part of wolfSSH. * * wolfSSH is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 3 of the License, or * (at your option) any later version. * * wolfSSH is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with wolfSSH. If not, see . */ /* Uses portions of code from the wolfssh/examples/echoserver.c example */ #include "app.h" #include "definitions.h" #include "tcpip/tcpip.h" #include "system/fs/sys_fs.h" #include "system/fs/sys_fs_media_manager.h" #include #include #include #include #ifndef NO_FILESYSTEM #define NO_FILESYSTEM #include #undef NO_FILESYSTEM #endif /* !NO_FILESYSTEM */ #include #include #define SERVER_PORT 22 typedef enum { APP_SSH_TCPIP_WAIT_INIT, APP_SSH_TCPIP_WAIT_FOR_IP, APP_SSH_CTX_INIT, APP_SSH_MOUNT_FILESYSTEM, APP_SSH_FORMAT_DISK, APP_SSH_FORMAT_CHECK, APP_SSH_USERAUTH_INIT, APP_SSH_LOADKEY, APP_SSH_CREATE_SOCKET, APP_SSH_LISTEN, APP_SSH_CLEANUP, APP_SSH_SFTP_START, APP_SSH_SFTP, APP_SSH_ECHO, APP_SSH_ACCEPT, APP_SSH_ERROR } APP_SSH_STATES; typedef struct APP_SSH_DATA { APP_SSH_STATES state; TCP_SOCKET socket; } APP_SSH_DATA; APP_SSH_DATA appData; static WOLFSSH_CTX* ctx; static WOLFSSH* ssh; #ifndef EXAMPLE_HIGHWATER_MARK #define EXAMPLE_HIGHWATER_MARK 0x3FFF8000 /* 1GB - 32kB */ #endif #ifndef EXAMPLE_BUFFER_SZ #define EXAMPLE_BUFFER_SZ 4096 #endif #define SCRATCH_BUFFER_SZ 1200 static INLINE void c32toa(word32 u32, byte* c) { c[0] = (u32 >> 24) & 0xff; c[1] = (u32 >> 16) & 0xff; c[2] = (u32 >> 8) & 0xff; c[3] = u32 & 0xff; } /* Map user names to passwords */ /* Use arrays for username and p. The password or public key can * be hashed and the hash stored here. Then I won't need the type. */ typedef struct PwMap { byte type; byte username[32]; word32 usernameSz; byte p[SHA256_DIGEST_SIZE]; struct PwMap* next; } PwMap; typedef struct PwMapList { PwMap* head; } PwMapList; PwMapList pwMapList; static const char echoserverBanner[] = "wolfSSH Example Echo Server\n"; /* These are example user:password strings. To update for an admin user * a string could be added to the list with something like "admin:admin123\n" */ static const char samplePasswordBuffer[] = "jill:upthehill\n" "jack:fetchapail\n"; /* These are example public key authentication options. */ static const char samplePublicKeyEccBuffer[] = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAA" "BBBNkI5JTP6D0lF42tbxX19cE87hztUS6FSDoGvPfiU0CgeNSbI+aFdKIzTP5CQEJSvm25" "qUzgDtH7oyaQROUnNvk= hansel\n" "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAA" "BBBKAtH8cqaDbtJFjtviLobHBmjCtG56DMkP6A4M2H9zX2/YCg1h9bYS7WHd9UQDwXO1Hh" "IZzRYecXh7SG9P4GhRY= gretel\n"; static const char samplePublicKeyRsaBuffer[] = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9P3ZFowOsONXHD5MwWiCciXytBRZGho" "MNiisWSgUs5HdHcACuHYPi2W6Z1PBFmBWT9odOrGRjoZXJfDDoPi+j8SSfDGsc/hsCmc3G" "p2yEhUZUEkDhtOXyqjns1ickC9Gh4u80aSVtwHRnJZh9xPhSq5tLOhId4eP61s+a5pwjTj" "nEhBaIPUJO2C/M0pFnnbZxKgJlX7t1Doy7h5eXxviymOIvaCZKU+x5OopfzM/wFkey0EPW" "NmzI5y/+pzU5afsdeEWdiQDIQc80H6Pz8fsoFPvYSG+s4/wz0duu7yeeV1Ypoho65Zr+pE" "nIf7dO0B8EblgWt+ud+JI8wrAhfE4x hansel\n" "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqDwRVTRVk/wjPhoo66+Mztrc31KsxDZ" "+kAV0139PHQ+wsueNpba6jNn5o6mUTEOrxrz0LMsDJOBM7CmG0983kF4gRIihECpQ0rcjO" "P6BSfbVTE9mfIK5IsUiZGd8SoE9kSV2pJ2FvZeBQENoAxEFk0zZL9tchPS+OCUGbK4SDjz" "uNZl/30Mczs73N3MBzi6J1oPo7sFlqzB6ecBjK2Kpjus4Y1rYFphJnUxtKvB0s+hoaadru" "biE57dK6BrH5iZwVLTQKux31uCJLPhiktI3iLbdlGZEctJkTasfVSsUizwVIyRjhVKmbdI" "RGwkU38D043AR1h0mUoGCPIKuqcFMf gretel\n"; static int wsUserAuth(byte authType, WS_UserAuthData* authData, void* ctx) { PwMapList* list; PwMap* map; byte authHash[SHA256_DIGEST_SIZE]; if (ctx == NULL) { SYS_CONSOLE_MESSAGE("wsUserAuth: ctx not set"); return WOLFSSH_USERAUTH_FAILURE; } if (authType != WOLFSSH_USERAUTH_PASSWORD && authType != WOLFSSH_USERAUTH_PUBLICKEY) { return WOLFSSH_USERAUTH_FAILURE; } /* Hash the password or public key with its length. */ { wc_Sha256 sha; byte flatSz[4]; wc_InitSha256(&sha); if (authType == WOLFSSH_USERAUTH_PASSWORD) { c32toa(authData->sf.password.passwordSz, flatSz); wc_Sha256Update(&sha, flatSz, sizeof(flatSz)); wc_Sha256Update(&sha, authData->sf.password.password, authData->sf.password.passwordSz); } else if (authType == WOLFSSH_USERAUTH_PUBLICKEY) { c32toa(authData->sf.publicKey.publicKeySz, flatSz); wc_Sha256Update(&sha, flatSz, sizeof(flatSz)); wc_Sha256Update(&sha, authData->sf.publicKey.publicKey, authData->sf.publicKey.publicKeySz); } wc_Sha256Final(&sha, authHash); } list = (PwMapList*)ctx; map = list->head; while (map != NULL) { if (authData->usernameSz == map->usernameSz && memcmp(authData->username, map->username, map->usernameSz) == 0) { if (authData->type == map->type) { if (memcmp(map->p, authHash, SHA256_DIGEST_SIZE) == 0) { return WOLFSSH_USERAUTH_SUCCESS; } else { return (authType == WOLFSSH_USERAUTH_PASSWORD ? WOLFSSH_USERAUTH_INVALID_PASSWORD : WOLFSSH_USERAUTH_INVALID_PUBLICKEY); } } else { return WOLFSSH_USERAUTH_INVALID_AUTHTYPE; } } map = map->next; } return WOLFSSH_USERAUTH_INVALID_USER; } static void PwMapListDelete(PwMapList* list) { if (list != NULL) { PwMap* head = list->head; while (head != NULL) { PwMap* cur = head; head = head->next; memset(cur, 0, sizeof(PwMap)); free(cur); } } } static PwMap* PwMapNew(PwMapList* list, byte type, const byte* username, word32 usernameSz, const byte* p, word32 pSz) { PwMap* map; map = (PwMap*)malloc(sizeof(PwMap)); if (map != NULL) { Sha256 sha; byte flatSz[4]; map->type = type; if (usernameSz >= sizeof(map->username)) usernameSz = sizeof(map->username) - 1; memcpy(map->username, username, usernameSz + 1); map->username[usernameSz] = 0; map->usernameSz = usernameSz; wc_InitSha256(&sha); c32toa(pSz, flatSz); wc_Sha256Update(&sha, flatSz, sizeof(flatSz)); wc_Sha256Update(&sha, p, pSz); wc_Sha256Final(&sha, map->p); map->next = list->head; list->head = map; } return map; } static int LoadPublicKeyBuffer(byte* buf, word32 bufSz, PwMapList* list) { char* str = (char*)buf; char* delimiter; byte* publicKey64; word32 publicKey64Sz; byte* username; word32 usernameSz; byte publicKey[300]; word32 publicKeySz; /* Each line of passwd.txt is in the format * ssh-rsa AAAB3BASE64ENCODEDPUBLICKEYBLOB username\n * This function modifies the passed-in buffer. */ if (list == NULL) return -1; if (buf == NULL || bufSz == 0) return 0; while (*str != 0) { /* Skip the public key type. This example will always be ssh-rsa. */ delimiter = strchr(str, ' '); str = delimiter + 1; delimiter = strchr(str, ' '); publicKey64 = (byte*)str; *delimiter = 0; publicKey64Sz = (word32)(delimiter - str); str = delimiter + 1; delimiter = strchr(str, '\n'); username = (byte*)str; *delimiter = 0; usernameSz = (word32)(delimiter - str); str = delimiter + 1; publicKeySz = sizeof(publicKey); if (Base64_Decode(publicKey64, publicKey64Sz, publicKey, &publicKeySz) != 0) { return -1; } if (PwMapNew(list, WOLFSSH_USERAUTH_PUBLICKEY, username, usernameSz, publicKey, publicKeySz) == NULL ) { return -1; } } return 0; } static int LoadPasswordBuffer(byte* buf, word32 bufSz, PwMapList* list) { char* str = (char*)buf; char* delimiter; char* username; char* password; /* Each line of passwd.txt is in the format * username:password\n * This function modifies the passed-in buffer. */ if (list == NULL) return -1; if (buf == NULL || bufSz == 0) return 0; while (*str != 0) { delimiter = strchr(str, ':'); username = str; *delimiter = 0; password = delimiter + 1; str = strchr(password, '\n'); *str = 0; str++; if (PwMapNew(list, WOLFSSH_USERAUTH_PASSWORD, (byte*)username, (word32)strlen(username), (byte*)password, (word32)strlen(password)) == NULL ) { return -1; } } return 0; } /* returns buffer size on success */ static int load_key(byte isEcc, byte* buf, word32 bufSz) { word32 sz = 0; if (isEcc) { if (sizeof_ecc_key_der_256 > bufSz) { return 0; } WMEMCPY(buf, ecc_key_der_256, sizeof_ecc_key_der_256); sz = sizeof_ecc_key_der_256; } else { if (sizeof_rsa_key_der_2048 > bufSz) { return 0; } WMEMCPY(buf, (byte*)rsa_key_der_2048, sizeof_rsa_key_der_2048); sz = sizeof_rsa_key_der_2048; } return sz; } static byte find_char(const byte* str, const byte* buf, word32 bufSz) { const byte* cur; while (bufSz) { cur = str; while (*cur != '\0') { if (*cur == *buf) return *cur; cur++; } buf++; bufSz--; } return 0; } #if 0 /* redirection of logging message to SYS_CONSOLE_PRINT instead of printf */ static void logCb(enum wolfSSH_LogLevel lvl, const char *const msg) { if ( wolfSSH_LogEnabled() #if 1 /* optionally filter out just the SFTP logs */ && lvl == WS_LOG_SFTP #endif ) { SYS_CONSOLE_PRINT(msg); SYS_CONSOLE_PRINT("\r\n"); SYS_CONSOLE_Flush(SYS_CONSOLE_DEFAULT_INSTANCE); SYS_CONSOLE_Tasks(sysObj.sysConsole0); } } #endif void APP_Initialize ( void ) { appData.state = APP_SSH_CTX_INIT; wolfSSH_Init(); #if 0 /* Used to enable debug messages and set logging callback */ SYS_CONSOLE_PRINT("Turning on wolfSSH debugging\n\r"); wolfSSH_Debugging_ON(); wolfSSH_SetLoggingCb(logCb); #endif } #ifndef NO_FILESYSTEM #define APP_MOUNT_NAME "/mnt/myDrive1/" #define APP_DEVICE_NAME "/dev/nvma1" #ifdef SYS_FS_LFS_MAX_SS #define APP_FS_TYPE LITTLEFS #elif defined(SYS_FS_FAT_MAX_SS) #define APP_FS_TYPE FAT #else #error untested file system setup #endif static void CreateTestFile(void) { SYS_FS_RESULT result; SYS_FS_HANDLE fileHandle; char testData[] = "Test Data"; SYS_FS_ERROR fsError; /* Try to create and write to a test file */ fileHandle = SYS_FS_FileOpen("test.txt", (SYS_FS_FILE_OPEN_WRITE)); if (fileHandle == SYS_FS_HANDLE_INVALID) { fsError = SYS_FS_Error(); SYS_CONSOLE_PRINT("File open failed! Error: %d\r\n", fsError); return; } result = SYS_FS_FileWrite(fileHandle, testData, strlen(testData)); if(result == -1) { fsError = SYS_FS_Error(); SYS_CONSOLE_PRINT("File write failed! Error: %d\r\n", fsError); SYS_FS_FileClose(fileHandle); return; } SYS_FS_FileClose(fileHandle); SYS_CONSOLE_PRINT("\tCreated test.txt file example successful!\r\n"); } static int CheckDriveStatus(void) { char cwdBuf[256]; int ret = 0; SYS_CONSOLE_PRINT("\r\nChecking drive status:\r\n"); /* Try to get current drive */ memset(cwdBuf, 0, sizeof(cwdBuf)); if (SYS_FS_CurrentDriveGet(cwdBuf) == SYS_FS_RES_SUCCESS) { SYS_CONSOLE_PRINT("\tCurrent drive: %s\r\n", cwdBuf); } else { SYS_CONSOLE_PRINT("\tFailed to get current drive: %d\r\n", SYS_FS_Error()); ret = -1; } /* Try to get current directory */ memset(cwdBuf, 0, sizeof(cwdBuf)); if (SYS_FS_CurrentWorkingDirectoryGet(cwdBuf, sizeof(cwdBuf)) == SYS_FS_RES_SUCCESS) { SYS_CONSOLE_PRINT("\tCurrent directory: %s\r\n", cwdBuf); } else { SYS_CONSOLE_PRINT("\tFailed to get current directory: %d\r\n", SYS_FS_Error()); ret = -1; } CreateTestFile(); return ret; } /* returns 0 on success, 1 for try again, and negative value on failure */ static int TryMount(void) { int ret = 0; /* Try mounting */ if (SYS_FS_Mount(APP_DEVICE_NAME, APP_MOUNT_NAME, APP_FS_TYPE, 0, NULL) == SYS_FS_RES_SUCCESS) { SYS_CONSOLE_PRINT("Filesystem mounted\r\n"); } else { int err = (int)SYS_FS_Error(); if (err == SYS_FS_ERROR_NOT_READY) { ret = 1; } else { SYS_CONSOLE_PRINT("Mount failed: %d\r\n", err); ret = -1; } } return ret; } #endif /* !NO_FILESYSTEM */ /* Debugging heap and stack available */ #if defined(INCLUDE_uxTaskGetStackHighWaterMark) && \ INCLUDE_uxTaskGetStackHighWaterMark == 1 static int currentStack = 0; static int savedStack = 0; static int minHeap = 600000; #endif void APP_Tasks ( void ) { int useEcc = 0, numNetworks = 0, ret, error; unsigned char peek_buf[1]; switch(appData.state) { case APP_SSH_CTX_INIT: ctx = wolfSSH_CTX_new(WOLFSSH_ENDPOINT_SERVER, NULL); if (ctx == NULL) { SYS_CONSOLE_PRINT("Couldn't allocate SSH CTX data.\r\n"); appData.state = APP_SSH_ERROR; } #ifndef NO_FILESYSTEM SYS_CONSOLE_PRINT("Attempting filesystem mount...\r\n"); appData.state = APP_SSH_MOUNT_FILESYSTEM; #else appData.state = APP_SSH_USERAUTH_INIT; #endif break; #ifndef NO_FILESYSTEM case APP_SSH_MOUNT_FILESYSTEM: ret = TryMount(); switch (ret) { case 0: appData.state = APP_SSH_FORMAT_DISK; break; case 1: /* try again */ break; case -1: /* failed */ SYS_CONSOLE_PRINT("Mounting file system failed\r\n"); break; } break; case APP_SSH_FORMAT_DISK: { SYS_FS_FORMAT_PARAM opt; #if defined(SYS_FS_LFS_MAX_SS) /* Work buffer used by FAT FS during Format */ uint8_t CACHE_ALIGN work[SYS_FS_LFS_MAX_SS]; #elif defined(SYS_FS_FAT_MAX_SS) /* Work buffer used by FAT FS during Format */ uint8_t CACHE_ALIGN work[SYS_FS_FAT_MAX_SS]; #endif opt.fmt = APP_FS_TYPE; opt.au_size = 0; #if defined(SYS_FS_LFS_MAX_SS) if (SYS_FS_DriveFormat (APP_MOUNT_NAME, &opt, (void *)work, SYS_FS_LFS_MAX_SS) != SYS_FS_RES_SUCCESS) #elif defined(SYS_FS_FAT_MAX_SS) if (SYS_FS_DriveFormat (APP_MOUNT_NAME, &opt, (void *)work, SYS_FS_FAT_MAX_SS) != SYS_FS_RES_SUCCESS) #endif { /* Fatal error with failing to format the file system */ SYS_CONSOLE_PRINT("Failed to format file system\r\n"); vTaskDelay(500); /* continue on to wolfSSH which still could host echo server */ appData.state = APP_SSH_USERAUTH_INIT; } else { SYS_CONSOLE_PRINT("Formated file system\r\n"); appData.state = APP_SSH_FORMAT_CHECK; } } break; case APP_SSH_FORMAT_CHECK: if (CheckDriveStatus() == 0) { appData.state = APP_SSH_USERAUTH_INIT; } break; #endif /* !NO_FILESYSTEM */ case APP_SSH_USERAUTH_INIT: wolfSSH_SetUserAuth(ctx, wsUserAuth); wolfSSH_CTX_SetBanner(ctx, echoserverBanner); appData.state = APP_SSH_LOADKEY; break; case APP_SSH_LOADKEY: { const char* bufName; byte buf[SCRATCH_BUFFER_SZ]; word32 bufSz; bufSz = load_key(useEcc, buf, SCRATCH_BUFFER_SZ); if (bufSz == 0) { SYS_CONSOLE_PRINT("Couldn't load key file.\r\n"); appData.state = APP_SSH_ERROR; break; } if (wolfSSH_CTX_UsePrivateKey_buffer(ctx, buf, bufSz, WOLFSSH_FORMAT_ASN1) < 0) { SYS_CONSOLE_PRINT("Couldn't use key buffer.\r\n"); appData.state = APP_SSH_ERROR; break; } bufSz = (word32)strlen(samplePasswordBuffer); memcpy(buf, samplePasswordBuffer, bufSz); buf[bufSz] = 0; LoadPasswordBuffer(buf, bufSz, &pwMapList); bufName = useEcc ? samplePublicKeyEccBuffer : samplePublicKeyRsaBuffer; bufSz = (word32)strlen(bufName); memcpy(buf, bufName, bufSz); buf[bufSz] = 0; LoadPublicKeyBuffer(buf, bufSz, &pwMapList); } appData.state = APP_SSH_CREATE_SOCKET; break; case APP_SSH_CREATE_SOCKET: numNetworks = TCPIP_STACK_NumberOfNetworksGet(); if (numNetworks > 0) { int i; TCPIP_NET_HANDLE handle; for (i = 0; i < numNetworks; i++) { IPV4_ADDR addr; handle = TCPIP_STACK_IndexToNet(i); if (!TCPIP_STACK_NetIsReady(handle)) { return; /* interface not ready yet */ } addr.Val = TCPIP_STACK_NetAddress(handle); SYS_CONSOLE_MESSAGE(TCPIP_STACK_NetNameGet(handle)); SYS_CONSOLE_MESSAGE(" IP Address: "); SYS_CONSOLE_PRINT("%d.%d.%d.%d \r\n", addr.v[0], addr.v[1], addr.v[2], addr.v[3]); } /* Create a socket for listen and accepting connections on */ appData.socket = TCPIP_TCP_ServerOpen(IP_ADDRESS_TYPE_IPV4, SERVER_PORT, 0); if (!TCPIP_TCP_OptionsSet(appData.socket, TCP_OPTION_NODELAY, (void*)1)) { SYS_CONSOLE_PRINT("Unable to set no delay with TCP\r\n"); appData.state = APP_SSH_ERROR; break; } appData.state = APP_SSH_LISTEN; SYS_CONSOLE_PRINT("Waiting for client on to connect on port [%d]\r\n", SERVER_PORT); } else { SYS_CONSOLE_PRINT("No networks found...\r\n"); } break; case APP_SSH_LISTEN: if (TCPIP_TCP_IsConnected(appData.socket)) { SYS_CONSOLE_PRINT("Creating WOLFSSH struct and doing accept\r\n"); ssh = wolfSSH_new(ctx); if (ssh == NULL) { SYS_CONSOLE_PRINT("Couldn't allocate SSH data.\r\n"); appData.state = APP_SSH_ERROR; break; } wolfSSH_SetUserAuthCtx(ssh, &pwMapList); wolfSSH_set_fd(ssh, appData.socket); appData.state = APP_SSH_ACCEPT; } break; case APP_SSH_ACCEPT: { int ret; ret = wolfSSH_accept(ssh); if (ret == WS_SUCCESS || ret == WS_SFTP_COMPLETE || ret == WS_SCP_INIT) { SYS_CONSOLE_PRINT("wolfSSH accept success!\r\n"); /* determine request type */ switch (wolfSSH_GetSessionType(ssh)) { case WOLFSSH_SESSION_SHELL: SYS_CONSOLE_PRINT("Starting ECHO session\r\n"); appData.state = APP_SSH_ECHO; break; case WOLFSSH_SESSION_SUBSYSTEM: SYS_CONSOLE_PRINT("Starting SFTP session\r\n"); appData.state = APP_SSH_SFTP_START; break; case WOLFSSH_SESSION_UNKNOWN: case WOLFSSH_SESSION_EXEC: case WOLFSSH_SESSION_TERMINAL: SYS_CONSOLE_PRINT("Unsupported session type requested\r\n"); appData.state = APP_SSH_CLEANUP; break; } } else { ret = wolfSSH_get_error(ssh); if (ret != WS_WANT_READ && ret != WS_WANT_WRITE) { /* connection was closed or error happened */ SYS_CONSOLE_PRINT("Error [%d] with wolfSSH connection. Closing socket.\r\n", ret); appData.state = APP_SSH_CLEANUP; } } } break; case APP_SSH_SFTP_START: SYS_CONSOLE_PRINT("Setting starting SFTP directory to [%s]\r\n", "/mnt/myDrive1"); if (wolfSSH_SFTP_SetDefaultPath(ssh, "/mnt/myDrive1") != WS_SUCCESS) { SYS_CONSOLE_PRINT("Error setting starting directory\r\n"); SYS_CONSOLE_PRINT("Error = %d\r\n", wolfSSH_get_error(ssh)); appData.state = APP_SSH_CLEANUP; } appData.state = APP_SSH_SFTP; break; case APP_SSH_SFTP: #if defined(INCLUDE_uxTaskGetStackHighWaterMark) && \ INCLUDE_uxTaskGetStackHighWaterMark == 1 currentStack = uxTaskGetStackHighWaterMark(NULL); if (savedStack != currentStack) { savedStack = currentStack; SYS_CONSOLE_PRINT("Stack bytes free = %d\r\n", currentStack * 4); } if (xPortGetMinimumEverFreeHeapSize() < minHeap) { minHeap = xPortGetMinimumEverFreeHeapSize(); SYS_CONSOLE_PRINT("Min heap available water mark = %d bytes\r\n", minHeap); SYS_CONSOLE_PRINT("Total heap free = %d bytes\r\n", xPortGetFreeHeapSize()); } #endif if (!TCPIP_TCP_IsConnected(wolfSSH_get_fd(ssh))) { SYS_CONSOLE_PRINT("TCP socket was disconnected\r\n"); appData.state = APP_SSH_CLEANUP; break; } if (wolfSSH_SFTP_PendingSend(ssh)) { /* Yes, process the SFTP data. */ ret = wolfSSH_SFTP_read(ssh); error = wolfSSH_get_error(ssh); if (error == WS_WANT_READ || error == WS_WANT_WRITE || error == WS_CHAN_RXD || error == WS_REKEYING || error == WS_WINDOW_FULL) ret = error; if (error == WS_WANT_WRITE && wolfSSH_SFTP_PendingSend(ssh)) { break; /* no need to spend time attempting to pull data * if there is still pending sends */ } if (error == WS_EOF) { appData.state = APP_SSH_CLEANUP; break; } } ret = wolfSSH_stream_peek(ssh, peek_buf, sizeof(peek_buf)); if (ret > 0) { /* Yes, process the SFTP data. */ ret = wolfSSH_SFTP_read(ssh); error = wolfSSH_get_error(ssh); if (ret == WS_MEMORY_E) { SYS_CONSOLE_PRINT("Ran out of memory for malloc\r\n"); appData.state = APP_SSH_CLEANUP; } if (error == WS_WANT_READ || error == WS_WANT_WRITE || error == WS_CHAN_RXD || error == WS_REKEYING || error == WS_WINDOW_FULL) { ret = error; } if (error == WS_EOF) { appData.state = APP_SSH_CLEANUP; } break; } else if (ret < 0) { error = wolfSSH_get_error(ssh); if (error == WS_EOF) { appData.state = APP_SSH_CLEANUP; break; } } ret = wolfSSH_worker(ssh, NULL); error = wolfSSH_get_error(ssh); if (ret == WS_REKEYING) { SYS_CONSOLE_PRINT("Doing rekeying\r\n"); /* In a rekey, keeping turning the crank. */ break; } if (error == WS_WANT_READ || error == WS_WANT_WRITE || error == WS_WINDOW_FULL) { break; } if (error == WS_EOF) { appData.state = APP_SSH_CLEANUP; break; } if (ret == WS_FATAL_ERROR && error == 0) { WOLFSSH_CHANNEL* channel = wolfSSH_ChannelNext(ssh, NULL); if (channel && wolfSSH_ChannelGetEof(channel)) { ret = 0; appData.state = APP_SSH_CLEANUP; break; } } if (ret != WS_SUCCESS && ret != WS_CHAN_RXD) { /* If not successful and no channel data, leave. */ appData.state = APP_SSH_CLEANUP; break; } break; /* echo ssh input (example code from wolfssh/echoserver/echoserver.c) */ case APP_SSH_ECHO: { byte* buf = NULL; byte* tmpBuf; int bufSz, backlogSz = 0, rxSz, txSz, stop = 0, txSum; bufSz = EXAMPLE_BUFFER_SZ + backlogSz; tmpBuf = (byte*)realloc(buf, bufSz); if (tmpBuf == NULL) appData.state = APP_SSH_CLEANUP; else buf = tmpBuf; rxSz = wolfSSH_stream_read(ssh, buf + backlogSz, EXAMPLE_BUFFER_SZ); if (rxSz > 0) { { /* print out HEX value of received data */ int i; SYS_CONSOLE_PRINT("wolfSSH server read HEX : \r\n"); for (i = 0; i < rxSz; i++) { SYS_CONSOLE_PRINT("%02X", buf[backlogSz + i]); } SYS_CONSOLE_PRINT("\r\n"); } backlogSz += rxSz; txSum = 0; txSz = 0; while (backlogSz != txSum && txSz >= 0 && !stop) { txSz = wolfSSH_stream_send(ssh, buf + txSum, backlogSz - txSum); if (txSz > 0) { byte c; const byte matches[] = { 0x03, 0x05, 0x06, 0x00 }; c = find_char(matches, buf + txSum, txSz); switch (c) { case 0x03: appData.state = APP_SSH_CLEANUP; break; case 0x06: if (wolfSSH_TriggerKeyExchange(ssh) != WS_SUCCESS) appData.state = APP_SSH_CLEANUP; break; default: break; } txSum += txSz; } else if (txSz != WS_REKEYING) { appData.state = APP_SSH_CLEANUP; } } if (txSum < backlogSz) memmove(buf, buf + txSum, backlogSz - txSum); backlogSz -= txSum; } free(buf); } break; case APP_SSH_CLEANUP: SYS_CONSOLE_PRINT("Closing and cleaning up connection\r\n\r\n"); wolfSSH_free(ssh); WCLOSESOCKET(wolfSSH_get_fd(ssh)); appData.state = APP_SSH_CREATE_SOCKET; break; case APP_SSH_ERROR: { static int set = 0; if (!set) { set = 1; wolfSSH_CTX_free(ctx); PwMapListDelete(&pwMapList); if (wolfSSH_Cleanup() != WS_SUCCESS) { SYS_CONSOLE_PRINT("wolfSSH Cleanup Error.\r\n"); } SYS_CONSOLE_PRINT("In error state\r\n"); } } break; default: SYS_CONSOLE_PRINT("Unknown state!\r\n"); appData.state = APP_SSH_ERROR; break; } }