File: [local] / OpenXM / doc / OpenXM-specs / ox-rfc-104.oxw (download)
Revision 1.1, Sat Sep 18 11:40:16 2004 UTC (19 years, 9 months ago) by takayama
Branch: MAIN
OX-RFC-103 : added an experimental specification of an engine authentication
protocol partially implemented in ox100start/ox.
ox-rfc-104 : the first draft on OX-100 over http and https.
|
$OpenXM: OpenXM/doc/OpenXM-specs/ox-rfc-104.oxw,v 1.1 2004/09/18 11:40:16 takayama Exp $
/*&C
OX-RFC: 104 Nobuki Takayama
September 18, 2004
*/
//&en OX-RFC100 over HTTP GET protocol
//&ja HTTP GET protocol $B$GJq$`$3$H$K$h$k(B OX-RFC 100 $B7A<0$NDL?.J}K!(B
/*&C
Status of this memo
This is an experimental specification of sending OpenXM 100 packets
over http-GET and https-GET.
Distribution of this memo is unlimited.
Copyright Notice
OpenXM.org, 2004
*/
/*&ja
@@$BMWLs(B.
OpenXM 100 $B7A<0$NDL?.$r(B HTTP GET ($B$^$?$O(B POST) $B$G(B wrap $B$9$k$3$H$K$h$j(B,
OpenXM 100 $BBP1~$N%5!<%P$rMF0W$K(B CGI $B%5!<%S%92=$G$-$k(B.
$B$^$?(B OpenXM $B$N%5!<%S%9$r@)8B$5$l$?%M%C%H%o!<%/4D6-$G$b%0%j%C%I2=$7$F$$$/(B
$B$3$H$,2DG=$H$J$k(B.
OpenXM 100 $B$G$O%5!<%P$rN)$A>e$2$k$K$O(B "login" $B$9$k$3$H$,0lHL$KI,MW$G$"$k$,(B,
$BITFCDj?M$,0lEY$N$_$N7W;;MxMQ$r$9$k$h$&$J>l9g$K$b(B, $B$^$?(B OpenXM 100 $B$HF1MM$K(B
login $B$7$F(B session $B$r0];}$9$k$3$H$b2DG=$J$h$&$K(B
OpenXM-100 over HTTP GET ($B0J2<(B OoHG $B$HN,5-(B) $B$O@_7W$5$l$F$$$k(B.
$B$3$N%a%b$G$O(B HTTP GET $B$H(B HTTPS $B$7$+4{B85;=Q$OMxMQ$7$F$$$J$$(B.
Web $B5;=Q$K4X$7$F8=:_8&5fCf$d<BMQ2==i4|CJ3,$N$5$^$6$^$J%W%m%H%3%k$r3hMQ$7$F(B
$B$3$N%a%b$HF1Ey$+$=$l0J>e$N$3$H$r<B8=$9$k$3$H$O2DG=$G$"$m$&(B.
$B2f!9$OC1=c$GI,MW==J,$J;EMM$rM?$($?$$$H;W$C$F$$$k(B.
$B$=$N>r7o$K9gCW$9$k8B$j(B Web $B5;=Q$K4X$7$F8=:_8&5fCf$d<BMQ2==i4|CJ3,$N(B
$B$5$^$6$^$J%W%m%H%3%k$r3hMQ$9$k$3$H$rH]Dj$9$k$b$N$G$O$J$$(B.
$BJL$N%"%W%m!<%A$b;n$_$h$j$h$$%W%m%H%3%k$r:n$C$F$$$-$?$$(B.
*/
/*&ja
@@ OX-RFC-100 (OpenXM 100) $B7A<0$NDL?.$NI|=,(B
OpenXM 100 $B$*$h$S$=$NGI@87A<0$NDL?.$O0J2<$N$h$&$J;EAH$_$G9T$o$l$k(B.
client server
---------------- step 1 ----------------------->
ssh $B$K$h$k(B server $B$X$N(B login.
localhost $B$G$O(B ox100start/ox $B$J$I$N(B launcher $B$,D>@\5/F0$5$l$k(B.
controle server, engine server $B$H$N@\B3$r3NN)$9$k$?$a$N(B
$B%]!<%HHV9f$*$h$S(B -control= ... , -data=...
$BG'>ZJ}K!$*$h$S(B -authtype=NONE | <<oneTimePassword>>
$BG'>Z%Q%9%o!<%I(B -passControl=... , -passData=...
$B$bAw?.$5$l$k(B.
$BG'>Z%Q%9%o!<%I$N0E9f(B -authEncoding=<<NONE>> | file | RSA
$B2=J}K!$N;XDj(B.
<< >> $B$O(B src/kxx/ox $B$NI8=`CM(B
<---------------- step 2 -------------------------->
-reverse $B$N>l9g$O(B <--- $B$N8~$-$K(B TCP/IP $B@\B3$,3NN)$5$l$k(B.
$B$=$&$G$J$$$H$-$O(B ---> $B$N8~$-$K(B TCP/IP $B@\B3$,3NN)$5$l$k(B.
<---------------- step 3 -------------------------->
-authtype=oneTimePassword $B$N;~(B.
connect $B$7$?B&$,(B accept $B$7$?B&$X(B oneTimePassword $B$rAw$k(B.
$B0J2<(B launcher $B$N;E;v$O=*N;$7$F(B, engine $B$H(B control $B$K@)8f$,0\$k(B.
<---------------- step 4 -------------------------->
engine $B$N(B byte order $B$r@_Dj(B.
<---------------------------------------------------->
OpenXM $B$N%Q%1%C%H8r49(B
$B>\$7$/$O(B OX-RFC-100, OX-RFC 103 (OX-RFC 100 $BJd0d(B) $B$r8+$h(B.
*/
/*&ja
@@ OoHG $B$N%G!<%?7A<0(B.
OoHG $B$G$O%G!<%?$OAw?.(B, $B<u?.$GHsBP>N$G$"$k(B.
GET $B$rMxMQ$9$k$?$a%G!<%?$N7A<0$O(B RFC 2396 $B$G;XDj$5$l$F$$$k(B
$B$$$o$f$k(B URL $B%(%s%3!<%G%#%s%0J}K!$rMQ$$$k(B.
GET $B$NMxMQ$NBe$o$j$K(B POST method $B$rMxMQ$7$F$b$h$$(B.
$B%G!<%?$O(B
$B%-!<%o!<%I(B = $BCM(B
$B$r(B & $B$G6h@Z$C$?$b$N$G$"$k(B. $B%-!<%o!<%I$O1Q?t;z$H(B _ $B$r$b$A$$$k$b$N$H$9$k(B.
$B%-!<%o!<%I$HCM$NAH$OF~$l;R9=B$$H$J$C$F$b$h$$(B.
$B0J2<%-!<%o!<%I$rNs5s$9$k(B.
oxMessageBody: OpenXM $B$N%Q%1%C%H(B. $BJ#?t$N(B OX $B%Q%1%C%H$r0lEY$KAw$C$F$h$$(B.
oxMessageEncoding: OpenXM $B$N%Q%1%C%H$N(B encoding $BJ}K!$N;XDj(B.
<<text_executeString_popString>> $B$,>JN,;~$NCM(B.
$BJ}K!$O0J2<$N$H$*$j(B.
1. xml_ox100 (OX-RFC100 $B$KDj5A$5$l$?(B XML $BI=8=(B)
2. lisplike_ox100 (OX-RFC100 $B$KDj5A$5$l$?(B Lisp$BIwI=8=(B)
3. binary_ox100 (OX-RFC100 $B$KDj5A$5$l$?(B binary $BI=8=(B)
4. text_executeString_popString
$B$3$l$O0lEY$N$_$N<B9T$rA[Dj$7$F$$$k(B.
executeString $B$KM?$($k0z?t$r(B text $B7A<0$GM?$($k(B.
dataChannelId: data $B%]!<%H$NHV9f$KAjEv(B.
controlChannelId: control $B%]!<%H$NHV9f$KAjEv(B.
sessionKey3Des: 64 bit x 3 3Des $BMQ$N(B Des Key. $B%5!<%PB&$,@8@.$7(B,
RSA $B$G0E9f2=$5$l%5!<%P$h$jAw?.$5$l$k(B.
channelKey: $B%5!<%P$h$j0l$DA0$N(B HTTP $B%H%i%s%:%"%/%7%g%s$GM?$($i$l$k(B
$B%-!<(B. $BBh#3<T$,(B session $B$K3d$j9~$`$N$r6X;_$9$k$?$a(B.
10 $B7e0J>e$N?t;z$GM?$($k(B.
$B%5!<%P$,M?$($k%-!<$O(B nextChannelKey (Cookie $B$KAjEv(B).
($B%M%C%H%o!<%/$,EpD0$5$l$F$$$k$H$-$O(B, $B$3$NJ}K!$OL5NO$G$"$k(B.
https $B$+(B $B<!$N(B channelKeyIn3Des, nextChannelKeyIn3Des
$B$rMQ$$$k$Y$-$G$"$k(B.)
channelKeyIn3Des: 3Des $B$G0E9f2=$5$l$?(B channelKey.
nextChannelKeyIn3Des: 3Des $B$G0E9f2=$5$l$?(B nextChannelKey.
responseEncoding: $B%5!<%P$NJVEz$N(B encoding $BJ}K!(B.
$B>JN,;~$K$O(B oxMessageEncoding $B$KBP1~$7$?J}K!$G(B
$BK\BNItJ,$OAw$i$l$k(B.
nextChannelKey $BEy$N>pJs$OFC$K;XDj$7$J$$>l9g(B
OX100-OVER-HTTP-GET-nextChannelKey: $B$K$h$k(B
header $B$rMQ$$$?JVEz$r9T$&(B.
text_execute_popString $B$N;~$O(B text $B7A<0$GAw?.$5$l$k(B.
$B>\:Y8e=R(B.
$B$=$NB>(B.
1. presentation_html
loginRSA: RSA $BG'>Z$K$h$k(B login. nextSessionKey $B$O%/%i%$%"%s%H$N(B
public key $B$rMQ$$$FAw?.$5$l$k(B.
RSA $B$K$D$$$F$O(B OX-RFC 103 $B$r8+$h(B.
logout: logout
sessionTimeOut:
controlChannelKey:
nextControlChannelKey:
challenge:
challenge-response:
*/
/*&ja
@@ $B;O$a$F$NNc(B
$BNc(B1.
fctr(x^2-1); $B$r(B fctr.cgi $B$XAw?.$9$k(B.
http://fctr.openxm.org/fctr.cgi?oxMessageBody=fctr(x%5E2-1)%3B
oxMessageBody $B0J30$NA4$F$N%-!<%o!<%I$,>JN,$5$l$F$$$k$N$G(B,
anonymous, 1 $B2s$N$_$N<B9T(B, executeString & popString, $BJVEz$O(B text $B7A<0(B
$B$H$J$j(B
[[1,1],[x-1],[x+2]]
$B$,La$k(B.
$BNc(B2.
$BF1$8LdBj$r(B session $B$r3NN)$7$F$+$i<B9T$9$k(B. URL encoding $BItJ,$O(B " ... " $B$G5-=R(B.
RSA $B0E9f2=$5$l$F$kItJ,$O(B ' ... '$B$G5-=R(B.
--->
http://fctr.openxm.org/fctr.cgi?loginRSA="takayama@hoge.org"
<---
OX100-OVER-HTTP-GET-controlChannelId: 4010
OX100-OVER-HTTP-GET-dataChannelId: 4011
OX100-OVER-HTTP-GET-challenge: '.............'
--->
http://fctr.openxm.org/fctr.cgi?chanllenge-response: '..........'
<---
OX100-OVER-HTTP-GET-nextChannelKey: 143245
OX100-OVER-HTTP-GET-nextControlChannelKey: 534256
--->
http://fctr.openxm.org/fctr.cgi?dataChannelId=4011&
channelKey=143245&
oxMessageEncoding="lisplike_ox100"&
responseEncoding="text"
oxMessageBody="(OX_DATA,(CMO_STRING,\"fctr(x^2-1);\"))
(OX_COMMAND,(SM_executeString))
(OX_COMMAND,(SM_popString))"
<---
Content-Type: text/plain
OX100-OVER-HTTP-GET-nextChannelKey: 345137
[[1,1],[x-1],[x+2]]
--->
http://fctr.openxm.org/fctr.cgi?dataChannelId=4011&
channelKey=345137&
logout&
*/
/*&ja
@@ $B%(%i!<%3!<%I0lMw(B.
<< $B$^$@8!F$$7$F$J$$(B >>
*/
/*&ja
@@ $B%3%s%H%m!<%k%W%m%;%9$H$NDL?.(B
<< $B$^$@=q$$$F$J$$(B >>
*/
/*&ja
@@ OpenXM grid $B$N%5!<%S%90lMwDs6!J}K!(B.
<< $B$^$@8!F$$7$F$J$$(B >>
*/
$Id: ox-rfc-104.oxw,v 1.6 2004/09/18 11:37:02 taka Exp $