1/* $NetBSD: lock.c,v 1.1.1.1 2011/04/13 18:15:11 elric Exp $ */ 2 3/* 4 * Copyright (c) 2005 - 2006 Kungliga Tekniska Högskolan 5 * (Royal Institute of Technology, Stockholm, Sweden). 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * 3. Neither the name of the Institute nor the names of its contributors 20 * may be used to endorse or promote products derived from this software 21 * without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33 * SUCH DAMAGE. 34 */ 35 36#include "hx_locl.h" 37 38/** 39 * @page page_lock Locking and unlocking certificates and encrypted data. 40 * 41 * See the library functions here: @ref hx509_lock 42 */ 43 44struct hx509_lock_data { 45 struct _hx509_password password; 46 hx509_certs certs; 47 hx509_prompter_fct prompt; 48 void *prompt_data; 49}; 50 51static struct hx509_lock_data empty_lock_data = { 52 { 0, NULL } 53}; 54 55hx509_lock _hx509_empty_lock = &empty_lock_data; 56 57/* 58 * 59 */ 60 61int 62hx509_lock_init(hx509_context context, hx509_lock *lock) 63{ 64 hx509_lock l; 65 int ret; 66 67 *lock = NULL; 68 69 l = calloc(1, sizeof(*l)); 70 if (l == NULL) 71 return ENOMEM; 72 73 ret = hx509_certs_init(context, 74 "MEMORY:locks-internal", 75 0, 76 NULL, 77 &l->certs); 78 if (ret) { 79 free(l); 80 return ret; 81 } 82 83 *lock = l; 84 85 return 0; 86} 87 88int 89hx509_lock_add_password(hx509_lock lock, const char *password) 90{ 91 void *d; 92 char *s; 93 94 s = strdup(password); 95 if (s == NULL) 96 return ENOMEM; 97 98 d = realloc(lock->password.val, 99 (lock->password.len + 1) * sizeof(lock->password.val[0])); 100 if (d == NULL) { 101 free(s); 102 return ENOMEM; 103 } 104 lock->password.val = d; 105 lock->password.val[lock->password.len] = s; 106 lock->password.len++; 107 108 return 0; 109} 110 111const struct _hx509_password * 112_hx509_lock_get_passwords(hx509_lock lock) 113{ 114 return &lock->password; 115} 116 117hx509_certs 118_hx509_lock_unlock_certs(hx509_lock lock) 119{ 120 return lock->certs; 121} 122 123void 124hx509_lock_reset_passwords(hx509_lock lock) 125{ 126 int i; 127 for (i = 0; i < lock->password.len; i++) 128 free(lock->password.val[i]); 129 free(lock->password.val); 130 lock->password.val = NULL; 131 lock->password.len = 0; 132} 133 134int 135hx509_lock_add_cert(hx509_context context, hx509_lock lock, hx509_cert cert) 136{ 137 return hx509_certs_add(context, lock->certs, cert); 138} 139 140int 141hx509_lock_add_certs(hx509_context context, hx509_lock lock, hx509_certs certs) 142{ 143 return hx509_certs_merge(context, lock->certs, certs); 144} 145 146void 147hx509_lock_reset_certs(hx509_context context, hx509_lock lock) 148{ 149 hx509_certs certs = lock->certs; 150 int ret; 151 152 ret = hx509_certs_init(context, 153 "MEMORY:locks-internal", 154 0, 155 NULL, 156 &lock->certs); 157 if (ret == 0) 158 hx509_certs_free(&certs); 159 else 160 lock->certs = certs; 161} 162 163int 164_hx509_lock_find_cert(hx509_lock lock, const hx509_query *q, hx509_cert *c) 165{ 166 *c = NULL; 167 return 0; 168} 169 170int 171hx509_lock_set_prompter(hx509_lock lock, hx509_prompter_fct prompt, void *data) 172{ 173 lock->prompt = prompt; 174 lock->prompt_data = data; 175 return 0; 176} 177 178void 179hx509_lock_reset_promper(hx509_lock lock) 180{ 181 lock->prompt = NULL; 182 lock->prompt_data = NULL; 183} 184 185static int 186default_prompter(void *data, const hx509_prompt *prompter) 187{ 188 if (hx509_prompt_hidden(prompter->type)) { 189 if(UI_UTIL_read_pw_string(prompter->reply.data, 190 prompter->reply.length, 191 prompter->prompt, 192 0)) 193 return 1; 194 } else { 195 char *s = prompter->reply.data; 196 197 fputs (prompter->prompt, stdout); 198 fflush (stdout); 199 if(fgets(prompter->reply.data, 200 prompter->reply.length, 201 stdin) == NULL) 202 return 1; 203 s[strcspn(s, "\n")] = '\0'; 204 } 205 return 0; 206} 207 208int 209hx509_lock_prompt(hx509_lock lock, hx509_prompt *prompt) 210{ 211 if (lock->prompt == NULL) 212 return HX509_CRYPTO_NO_PROMPTER; 213 return (*lock->prompt)(lock->prompt_data, prompt); 214} 215 216void 217hx509_lock_free(hx509_lock lock) 218{ 219 if (lock) { 220 hx509_certs_free(&lock->certs); 221 hx509_lock_reset_passwords(lock); 222 memset(lock, 0, sizeof(*lock)); 223 free(lock); 224 } 225} 226 227int 228hx509_prompt_hidden(hx509_prompt_type type) 229{ 230 /* default to hidden if unknown */ 231 232 switch (type) { 233 case HX509_PROMPT_TYPE_QUESTION: 234 case HX509_PROMPT_TYPE_INFO: 235 return 0; 236 default: 237 return 1; 238 } 239} 240 241int 242hx509_lock_command_string(hx509_lock lock, const char *string) 243{ 244 if (strncasecmp(string, "PASS:", 5) == 0) { 245 hx509_lock_add_password(lock, string + 5); 246 } else if (strcasecmp(string, "PROMPT") == 0) { 247 hx509_lock_set_prompter(lock, default_prompter, NULL); 248 } else 249 return HX509_UNKNOWN_LOCK_COMMAND; 250 return 0; 251} 252