Return to ox-rfc-104.oxw CVS log

Up to [local] / OpenXM / doc / OpenXM-specs

OX-RFC-103 : added an experimental specification of an engine authentication
protocol partially implemented in ox100start/ox.

ox-rfc-104 : the first draft on OX-100 over http and https.

$OpenXM: OpenXM/doc/OpenXM-specs/ox-rfc-104.oxw,v 1.1 2004/09/18 11:40:16 takayama Exp $
/*&C
OX-RFC: 104                                    Nobuki Takayama
                                               September 18, 2004

*/

//&en  OX-RFC100  over HTTP GET protocol
//&ja  HTTP GET protocol $B$GJq$`$3$H$K$h$k(B OX-RFC 100 $B7A<0$NDL?.J}K!(B

/*&C 

Status of this memo
  This is an experimental specification of sending OpenXM 100 packets
  over http-GET and https-GET.
  Distribution of this memo is unlimited.

Copyright Notice
  OpenXM.org, 2004

*/

/*&ja

@@$BMWLs(B.
  OpenXM 100 $B7A<0$NDL?.$r(B HTTP GET ($B$^$?$O(B POST) $B$G(B wrap $B$9$k$3$H$K$h$j(B, 
  OpenXM 100 $BBP1~$N%5!<%P$rMF0W$K(B CGI $B%5!<%S%92=$G$-$k(B.
  $B$^$?(B OpenXM $B$N%5!<%S%9$r@)8B$5$l$?%M%C%H%o!<%/4D6-$G$b%0%j%C%I2=$7$F$$$/(B
  $B$3$H$,2DG=$H$J$k(B.

  OpenXM 100 $B$G$O%5!<%P$rN)$A>e$2$k$K$O(B "login" $B$9$k$3$H$,0lHL$KI,MW$G$"$k$,(B,
  $BITFCDj?M$,0lEY$N$_$N7W;;MxMQ$r$9$k$h$&$J>l9g$K$b(B, $B$^$?(B OpenXM 100 $B$HF1MM$K(B 
  login $B$7$F(B session $B$r0];}$9$k$3$H$b2DG=$J$h$&$K(B 
  OpenXM-100 over HTTP GET  ($B0J2<(B OoHG  $B$HN,5-(B) $B$O@_7W$5$l$F$$$k(B.

  $B$3$N%a%b$G$O(B HTTP GET $B$H(B HTTPS $B$7$+4{B85;=Q$OMxMQ$7$F$$$J$$(B.
  Web $B5;=Q$K4X$7$F8=:_8&5fCf$d<BMQ2==i4|CJ3,$N$5$^$6$^$J%W%m%H%3%k$r3hMQ$7$F(B
  $B$3$N%a%b$HF1Ey$+$=$l0J>e$N$3$H$r<B8=$9$k$3$H$O2DG=$G$"$m$&(B.
  $B2f!9$OC1=c$GI,MW==J,$J;EMM$rM?$($?$$$H;W$C$F$$$k(B.
  $B$=$N>r7o$K9gCW$9$k8B$j(B Web $B5;=Q$K4X$7$F8=:_8&5fCf$d<BMQ2==i4|CJ3,$N(B
  $B$5$^$6$^$J%W%m%H%3%k$r3hMQ$9$k$3$H$rH]Dj$9$k$b$N$G$O$J$$(B.
  $BJL$N%"%W%m!<%A$b;n$_$h$j$h$$%W%m%H%3%k$r:n$C$F$$$-$?$$(B.

*/

/*&ja

@@ OX-RFC-100 (OpenXM 100) $B7A<0$NDL?.$NI|=,(B

OpenXM 100 $B$*$h$S$=$NGI@87A<0$NDL?.$O0J2<$N$h$&$J;EAH$_$G9T$o$l$k(B.

 client                                            server

     ---------------- step 1 ----------------------->
     ssh $B$K$h$k(B server $B$X$N(B login.
     localhost $B$G$O(B ox100start/ox $B$J$I$N(B launcher $B$,D>@\5/F0$5$l$k(B.
     controle server, engine server $B$H$N@\B3$r3NN)$9$k$?$a$N(B
     $B%]!<%HHV9f$*$h$S(B      -control= ... , -data=...
     $BG'>ZJ}K!$*$h$S(B        -authtype=NONE | <<oneTimePassword>>
     $BG'>Z%Q%9%o!<%I(B        -passControl=... , -passData=...
     $B$bAw?.$5$l$k(B.
     $BG'>Z%Q%9%o!<%I$N0E9f(B  -authEncoding=<<NONE>> | file | RSA
     $B2=J}K!$N;XDj(B.
     << >> $B$O(B src/kxx/ox $B$NI8=`CM(B


    <----------------  step 2 -------------------------->
       -reverse $B$N>l9g$O(B <--- $B$N8~$-$K(B TCP/IP $B@\B3$,3NN)$5$l$k(B.
       $B$=$&$G$J$$$H$-$O(B ---> $B$N8~$-$K(B TCP/IP $B@\B3$,3NN)$5$l$k(B.

    <----------------  step 3 -------------------------->
       -authtype=oneTimePassword $B$N;~(B.
       connect $B$7$?B&$,(B accept $B$7$?B&$X(B oneTimePassword $B$rAw$k(B.

    $B0J2<(B launcher $B$N;E;v$O=*N;$7$F(B, engine $B$H(B control $B$K@)8f$,0\$k(B.
    <----------------  step 4 -------------------------->
       engine $B$N(B byte order $B$r@_Dj(B.

    <---------------------------------------------------->
       OpenXM $B$N%Q%1%C%H8r49(B

    $B>\$7$/$O(B OX-RFC-100, OX-RFC 103 (OX-RFC 100 $BJd0d(B) $B$r8+$h(B.   
    
*/

/*&ja

@@ OoHG $B$N%G!<%?7A<0(B.

OoHG $B$G$O%G!<%?$OAw?.(B, $B<u?.$GHsBP>N$G$"$k(B.
GET $B$rMxMQ$9$k$?$a%G!<%?$N7A<0$O(B RFC 2396 $B$G;XDj$5$l$F$$$k(B
$B$$$o$f$k(B URL $B%(%s%3!<%G%#%s%0J}K!$rMQ$$$k(B.
GET $B$NMxMQ$NBe$o$j$K(B POST method $B$rMxMQ$7$F$b$h$$(B.
$B%G!<%?$O(B 
    $B%-!<%o!<%I(B = $BCM(B
$B$r(B & $B$G6h@Z$C$?$b$N$G$"$k(B. $B%-!<%o!<%I$O1Q?t;z$H(B _ $B$r$b$A$$$k$b$N$H$9$k(B.
$B%-!<%o!<%I$HCM$NAH$OF~$l;R9=B$$H$J$C$F$b$h$$(B.

$B0J2<%-!<%o!<%I$rNs5s$9$k(B.

oxMessageBody:       OpenXM $B$N%Q%1%C%H(B. $BJ#?t$N(B OX $B%Q%1%C%H$r0lEY$KAw$C$F$h$$(B.

oxMessageEncoding:   OpenXM $B$N%Q%1%C%H$N(B encoding $BJ}K!$N;XDj(B.
                    <<text_executeString_popString>> $B$,>JN,;~$NCM(B.
                     $BJ}K!$O0J2<$N$H$*$j(B.
                     1. xml_ox100  (OX-RFC100 $B$KDj5A$5$l$?(B XML $BI=8=(B)
                     2. lisplike_ox100 (OX-RFC100 $B$KDj5A$5$l$?(B Lisp$BIwI=8=(B)
                     3. binary_ox100 (OX-RFC100 $B$KDj5A$5$l$?(B binary $BI=8=(B)
                     4. text_executeString_popString
                          $B$3$l$O0lEY$N$_$N<B9T$rA[Dj$7$F$$$k(B.
                          executeString $B$KM?$($k0z?t$r(B text $B7A<0$GM?$($k(B.

dataChannelId:      data $B%]!<%H$NHV9f$KAjEv(B.
controlChannelId:   control $B%]!<%H$NHV9f$KAjEv(B.
sessionKey3Des:     64 bit x 3  3Des $BMQ$N(B Des Key.  $B%5!<%PB&$,@8@.$7(B,
                    RSA $B$G0E9f2=$5$l%5!<%P$h$jAw?.$5$l$k(B.
channelKey:         $B%5!<%P$h$j0l$DA0$N(B HTTP $B%H%i%s%:%"%/%7%g%s$GM?$($i$l$k(B
                    $B%-!<(B. $BBh#3<T$,(B session $B$K3d$j9~$`$N$r6X;_$9$k$?$a(B.
                    10 $B7e0J>e$N?t;z$GM?$($k(B.
                    $B%5!<%P$,M?$($k%-!<$O(B nextChannelKey (Cookie $B$KAjEv(B).
                  ($B%M%C%H%o!<%/$,EpD0$5$l$F$$$k$H$-$O(B, $B$3$NJ}K!$OL5NO$G$"$k(B.
                   https $B$+(B $B<!$N(B channelKeyIn3Des, nextChannelKeyIn3Des
                   $B$rMQ$$$k$Y$-$G$"$k(B.)

channelKeyIn3Des:     3Des $B$G0E9f2=$5$l$?(B channelKey.
nextChannelKeyIn3Des: 3Des $B$G0E9f2=$5$l$?(B nextChannelKey.

responseEncoding:   $B%5!<%P$NJVEz$N(B encoding $BJ}K!(B.
                    $B>JN,;~$K$O(B oxMessageEncoding $B$KBP1~$7$?J}K!$G(B
                    $BK\BNItJ,$OAw$i$l$k(B.
                    nextChannelKey $BEy$N>pJs$OFC$K;XDj$7$J$$>l9g(B
                    OX100-OVER-HTTP-GET-nextChannelKey: $B$K$h$k(B 
                    header $B$rMQ$$$?JVEz$r9T$&(B.
                    text_execute_popString $B$N;~$O(B text $B7A<0$GAw?.$5$l$k(B.
                    $B>\:Y8e=R(B.
                    $B$=$NB>(B.
                    1. presentation_html

loginRSA:           RSA $BG'>Z$K$h$k(B login. nextSessionKey $B$O%/%i%$%"%s%H$N(B
                    public key $B$rMQ$$$FAw?.$5$l$k(B.
                    RSA $B$K$D$$$F$O(B OX-RFC 103 $B$r8+$h(B.                    
logout:             logout


sessionTimeOut:

controlChannelKey:
nextControlChannelKey:
challenge:
challenge-response:

*/

/*&ja

@@ $B;O$a$F$NNc(B

$BNc(B1.
fctr(x^2-1); $B$r(B fctr.cgi $B$XAw?.$9$k(B.

     http://fctr.openxm.org/fctr.cgi?oxMessageBody=fctr(x%5E2-1)%3B

oxMessageBody $B0J30$NA4$F$N%-!<%o!<%I$,>JN,$5$l$F$$$k$N$G(B,
anonymous, 1 $B2s$N$_$N<B9T(B, executeString & popString, $BJVEz$O(B text $B7A<0(B
$B$H$J$j(B

    [[1,1],[x-1],[x+2]]

$B$,La$k(B.

$BNc(B2.
$BF1$8LdBj$r(B session $B$r3NN)$7$F$+$i<B9T$9$k(B. URL encoding $BItJ,$O(B " ... " $B$G5-=R(B.
RSA $B0E9f2=$5$l$F$kItJ,$O(B ' ... '$B$G5-=R(B.

   --->
     http://fctr.openxm.org/fctr.cgi?loginRSA="takayama@hoge.org"
   <---   
     OX100-OVER-HTTP-GET-controlChannelId: 4010
     OX100-OVER-HTTP-GET-dataChannelId: 4011
     OX100-OVER-HTTP-GET-challenge: '.............'
   --->
     http://fctr.openxm.org/fctr.cgi?chanllenge-response: '..........'
   <---
     OX100-OVER-HTTP-GET-nextChannelKey: 143245
     OX100-OVER-HTTP-GET-nextControlChannelKey: 534256
   --->  
     http://fctr.openxm.org/fctr.cgi?dataChannelId=4011&
                                     channelKey=143245&
                                     oxMessageEncoding="lisplike_ox100"&
                                     responseEncoding="text"
            oxMessageBody="(OX_DATA,(CMO_STRING,\"fctr(x^2-1);\"))
                           (OX_COMMAND,(SM_executeString))
                           (OX_COMMAND,(SM_popString))"
  <---
     Content-Type: text/plain
     OX100-OVER-HTTP-GET-nextChannelKey: 345137

     [[1,1],[x-1],[x+2]]
  --->
     http://fctr.openxm.org/fctr.cgi?dataChannelId=4011&
                                     channelKey=345137&
                                     logout&
   
*/


/*&ja

@@ $B%(%i!<%3!<%I0lMw(B.

<< $B$^$@8!F$$7$F$J$$(B >>

*/

/*&ja

@@ $B%3%s%H%m!<%k%W%m%;%9$H$NDL?.(B

<< $B$^$@=q$$$F$J$$(B >>

*/


/*&ja

@@ OpenXM grid $B$N%5!<%S%90lMwDs6!J}K!(B.

<< $B$^$@8!F$$7$F$J$$(B >>

*/

$Id: ox-rfc-104.oxw,v 1.6 2004/09/18 11:37:02 taka Exp $