|
Packit |
6c4009 |
/* Public key file parser in nss_files module.
|
|
Packit |
6c4009 |
Copyright (C) 1996-2018 Free Software Foundation, Inc.
|
|
Packit |
6c4009 |
This file is part of the GNU C Library.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
The GNU C Library is free software; you can redistribute it and/or
|
|
Packit |
6c4009 |
modify it under the terms of the GNU Lesser General Public
|
|
Packit |
6c4009 |
License as published by the Free Software Foundation; either
|
|
Packit |
6c4009 |
version 2.1 of the License, or (at your option) any later version.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
The GNU C Library is distributed in the hope that it will be useful,
|
|
Packit |
6c4009 |
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit |
6c4009 |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Packit |
6c4009 |
Lesser General Public License for more details.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
You should have received a copy of the GNU Lesser General Public
|
|
Packit |
6c4009 |
License along with the GNU C Library; if not, see
|
|
Packit |
6c4009 |
<http://www.gnu.org/licenses/>. */
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
#include <stdio.h>
|
|
Packit |
6c4009 |
#include <errno.h>
|
|
Packit |
6c4009 |
#include <string.h>
|
|
Packit |
6c4009 |
#include <netdb.h>
|
|
Packit |
6c4009 |
#include <rpc/key_prot.h>
|
|
Packit |
6c4009 |
#include <rpc/des_crypt.h>
|
|
Packit |
6c4009 |
#include "nsswitch.h"
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
#define DATAFILE "/etc/publickey"
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
static enum nss_status
|
|
Packit |
6c4009 |
search (const char *netname, char *result, int *errnop, int secret)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
FILE *stream = fopen (DATAFILE, "rce");
|
|
Packit |
6c4009 |
if (stream == NULL)
|
|
Packit |
6c4009 |
return errno == EAGAIN ? NSS_STATUS_TRYAGAIN : NSS_STATUS_UNAVAIL;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
for (;;)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
char buffer[HEXKEYBYTES * 2 + KEYCHECKSUMSIZE + MAXNETNAMELEN + 17];
|
|
Packit |
6c4009 |
char *p;
|
|
Packit |
6c4009 |
char *save_ptr;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
buffer[sizeof (buffer) - 1] = '\xff';
|
|
Packit |
6c4009 |
p = fgets_unlocked (buffer, sizeof (buffer), stream);
|
|
Packit |
6c4009 |
if (p == NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
/* End of file or read error. */
|
|
Packit |
6c4009 |
*errnop = errno;
|
|
Packit |
6c4009 |
fclose (stream);
|
|
Packit |
6c4009 |
return NSS_STATUS_NOTFOUND;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
else if (buffer[sizeof (buffer) - 1] != '\xff')
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
/* Invalid line in file? Skip remainder of line. */
|
|
Packit |
6c4009 |
if (buffer[sizeof (buffer) - 2] != '\0')
|
|
Packit |
6c4009 |
while (getc_unlocked (stream) != '\n')
|
|
Packit |
6c4009 |
continue;
|
|
Packit |
6c4009 |
continue;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* Parse line. */
|
|
Packit |
6c4009 |
p = __strtok_r (buffer, "# \t:\n", &save_ptr);
|
|
Packit |
6c4009 |
if (p == NULL) /* Skip empty and comment lines. */
|
|
Packit |
6c4009 |
continue;
|
|
Packit |
6c4009 |
if (strcmp (p, netname) != 0)
|
|
Packit |
6c4009 |
continue;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* A hit! Find the field we want and return. */
|
|
Packit |
6c4009 |
p = __strtok_r (NULL, ":\n", &save_ptr);
|
|
Packit |
6c4009 |
if (p == NULL) /* malformed line? */
|
|
Packit |
6c4009 |
continue;
|
|
Packit |
6c4009 |
if (secret)
|
|
Packit |
6c4009 |
p = __strtok_r (NULL, ":\n", &save_ptr);
|
|
Packit |
6c4009 |
if (p == NULL) /* malformed line? */
|
|
Packit |
6c4009 |
continue;
|
|
Packit |
6c4009 |
fclose (stream);
|
|
Packit |
6c4009 |
strcpy (result, p);
|
|
Packit |
6c4009 |
return NSS_STATUS_SUCCESS;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
enum nss_status
|
|
Packit |
6c4009 |
_nss_files_getpublickey (const char *netname, char *pkey, int *errnop)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
return search (netname, pkey, errnop, 0);
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
enum nss_status
|
|
Packit |
6c4009 |
_nss_files_getsecretkey (const char *netname, char *skey, char *passwd,
|
|
Packit |
6c4009 |
int *errnop)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
enum nss_status status;
|
|
Packit |
6c4009 |
char buf[HEXKEYBYTES + KEYCHECKSUMSIZE + 16];
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
skey[0] = 0;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
status = search (netname, buf, errnop, 1);
|
|
Packit |
6c4009 |
if (status != NSS_STATUS_SUCCESS)
|
|
Packit |
6c4009 |
return status;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (!xdecrypt (buf, passwd))
|
|
Packit |
6c4009 |
return NSS_STATUS_SUCCESS;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (memcmp (buf, &(buf[HEXKEYBYTES]), KEYCHECKSUMSIZE) != 0)
|
|
Packit |
6c4009 |
return NSS_STATUS_SUCCESS;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
buf[HEXKEYBYTES] = 0;
|
|
Packit |
6c4009 |
strcpy (skey, buf);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
return NSS_STATUS_SUCCESS;
|
|
Packit |
6c4009 |
}
|