|
Packit |
aea12f |
/*
|
|
Packit |
aea12f |
* Copyright (C) 2005-2012 Free Software Foundation, Inc.
|
|
Packit |
aea12f |
*
|
|
Packit |
aea12f |
* This file is part of GnuTLS.
|
|
Packit |
aea12f |
*
|
|
Packit |
aea12f |
* GnuTLS is free software: you can redistribute it and/or modify it
|
|
Packit |
aea12f |
* under the terms of the GNU General Public License as published by
|
|
Packit |
aea12f |
* the Free Software Foundation, either version 3 of the License, or
|
|
Packit |
aea12f |
* (at your option) any later version.
|
|
Packit |
aea12f |
*
|
|
Packit |
aea12f |
* GnuTLS is distributed in the hope that it will be useful, but
|
|
Packit |
aea12f |
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit |
aea12f |
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Packit |
aea12f |
* General Public License for more details.
|
|
Packit |
aea12f |
*
|
|
Packit |
aea12f |
* You should have received a copy of the GNU General Public License
|
|
Packit |
aea12f |
* along with this program. If not, see
|
|
Packit |
aea12f |
* <https://www.gnu.org/licenses/>.
|
|
Packit |
aea12f |
*/
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#include <config.h>
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
/* Gnulib portability files. */
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#ifndef ENABLE_PSK
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#include <stdio.h>
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
int main(int argc, char **argv)
|
|
Packit |
aea12f |
{
|
|
Packit |
aea12f |
printf("\nPSK not supported. This program is a dummy.\n\n");
|
|
Packit |
aea12f |
return 1;
|
|
Packit |
aea12f |
};
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#else
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#include <stdio.h>
|
|
Packit |
aea12f |
#include <string.h>
|
|
Packit |
aea12f |
#include <stdlib.h>
|
|
Packit |
aea12f |
#include <gnutls/gnutls.h>
|
|
Packit |
aea12f |
#include <psktool-args.h>
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#include <gnutls/crypto.h> /* for random */
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#include <sys/types.h>
|
|
Packit |
aea12f |
#include <sys/stat.h>
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#ifndef _WIN32
|
|
Packit |
aea12f |
#include <pwd.h>
|
|
Packit |
aea12f |
#include <unistd.h>
|
|
Packit |
aea12f |
#else
|
|
Packit |
aea12f |
#include <windows.h>
|
|
Packit |
aea12f |
#endif
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
/* Gnulib portability files. */
|
|
Packit |
aea12f |
#include <minmax.h>
|
|
Packit |
aea12f |
#include "getpass.h"
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
static int write_key(const char *username, const char *key, int key_size,
|
|
Packit |
aea12f |
const char *passwd_file);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#define MAX_KEY_SIZE 512
|
|
Packit |
aea12f |
int main(int argc, char **argv)
|
|
Packit |
aea12f |
{
|
|
Packit |
aea12f |
int ret;
|
|
Packit |
aea12f |
#ifndef _WIN32
|
|
Packit |
aea12f |
struct passwd *pwd;
|
|
Packit |
aea12f |
#endif
|
|
Packit |
aea12f |
unsigned char key[MAX_KEY_SIZE];
|
|
Packit |
aea12f |
char hex_key[MAX_KEY_SIZE * 2 + 1];
|
|
Packit |
aea12f |
int key_size;
|
|
Packit |
aea12f |
gnutls_datum_t dkey;
|
|
Packit |
aea12f |
const char *passwd, *username;
|
|
Packit |
aea12f |
size_t hex_key_size = sizeof(hex_key);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if ((ret = gnutls_global_init()) < 0) {
|
|
Packit |
aea12f |
fprintf(stderr, "global_init: %s\n", gnutls_strerror(ret));
|
|
Packit |
aea12f |
exit(1);
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
umask(066);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
optionProcess(&psktoolOptions, argc, argv);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (!HAVE_OPT(PSKFILE)) {
|
|
Packit |
aea12f |
fprintf(stderr, "You need to specify a PSK key file\n");
|
|
Packit |
aea12f |
exit(1);
|
|
Packit |
aea12f |
} else
|
|
Packit |
aea12f |
passwd = OPT_ARG(PSKFILE);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (!HAVE_OPT(USERNAME)) {
|
|
Packit |
aea12f |
#ifndef _WIN32
|
|
Packit |
aea12f |
pwd = getpwuid(getuid());
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (pwd == NULL) {
|
|
Packit |
aea12f |
fprintf(stderr, "No such user\n");
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
username = pwd->pw_name;
|
|
Packit |
aea12f |
#else
|
|
Packit |
aea12f |
fprintf(stderr, "Please specify a user\n");
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
#endif
|
|
Packit |
aea12f |
} else
|
|
Packit |
aea12f |
username = OPT_ARG(USERNAME);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (HAVE_OPT(KEYSIZE) && OPT_VALUE_KEYSIZE > MAX_KEY_SIZE) {
|
|
Packit |
aea12f |
fprintf(stderr, "Key size is too long\n");
|
|
Packit |
aea12f |
exit(1);
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (!HAVE_OPT(KEYSIZE) || OPT_VALUE_KEYSIZE < 1)
|
|
Packit |
aea12f |
key_size = 32;
|
|
Packit |
aea12f |
else
|
|
Packit |
aea12f |
key_size = OPT_VALUE_KEYSIZE;
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
printf("Generating a random key for user '%s'\n", username);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
ret = gnutls_rnd(GNUTLS_RND_RANDOM, (char *) key, key_size);
|
|
Packit |
aea12f |
if (ret < 0) {
|
|
Packit |
aea12f |
fprintf(stderr, "Not enough randomness\n");
|
|
Packit |
aea12f |
exit(1);
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
dkey.data = key;
|
|
Packit |
aea12f |
dkey.size = key_size;
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
ret = gnutls_hex_encode(&dkey, hex_key, &hex_key_size);
|
|
Packit |
aea12f |
if (ret < 0) {
|
|
Packit |
aea12f |
fprintf(stderr, "HEX encoding error\n");
|
|
Packit |
aea12f |
exit(1);
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
ret = write_key(username, hex_key, hex_key_size, passwd);
|
|
Packit |
aea12f |
if (ret == 0)
|
|
Packit |
aea12f |
printf("Key stored to %s\n", passwd);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
return ret;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
static int filecopy(const char *src, const char *dst)
|
|
Packit |
aea12f |
{
|
|
Packit Service |
991b93 |
FILE *fp, *fp2;
|
|
Packit |
aea12f |
char line[5 * 1024];
|
|
Packit |
aea12f |
char *p;
|
|
Packit |
aea12f |
|
|
Packit Service |
991b93 |
fp = fopen(dst, "w");
|
|
Packit Service |
991b93 |
if (fp == NULL) {
|
|
Packit |
aea12f |
fprintf(stderr, "Cannot open '%s' for write\n", dst);
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit Service |
991b93 |
fp2 = fopen(src, "r");
|
|
Packit Service |
991b93 |
if (fp2 == NULL) {
|
|
Packit |
aea12f |
/* empty file */
|
|
Packit Service |
991b93 |
fclose(fp);
|
|
Packit |
aea12f |
return 0;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
line[sizeof(line) - 1] = 0;
|
|
Packit |
aea12f |
do {
|
|
Packit Service |
991b93 |
p = fgets(line, sizeof(line) - 1, fp2);
|
|
Packit |
aea12f |
if (p == NULL)
|
|
Packit |
aea12f |
break;
|
|
Packit |
aea12f |
|
|
Packit Service |
991b93 |
fputs(line, fp);
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
while (1);
|
|
Packit |
aea12f |
|
|
Packit Service |
991b93 |
fclose(fp);
|
|
Packit Service |
991b93 |
fclose(fp2);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
return 0;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
static int
|
|
Packit |
aea12f |
write_key(const char *username, const char *key, int key_size,
|
|
Packit |
aea12f |
const char *passwd_file)
|
|
Packit |
aea12f |
{
|
|
Packit Service |
991b93 |
FILE *fp;
|
|
Packit |
aea12f |
char line[5 * 1024];
|
|
Packit |
aea12f |
char *p, *pp;
|
|
Packit |
aea12f |
char tmpname[1024];
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
/* delete previous entry */
|
|
Packit |
aea12f |
struct stat st;
|
|
Packit Service |
991b93 |
FILE *fp2;
|
|
Packit |
aea12f |
int put;
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (strlen(passwd_file) + 5 > sizeof(tmpname)) {
|
|
Packit |
aea12f |
fprintf(stderr, "file '%s' is tooooo long\n", passwd_file);
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
snprintf(tmpname, sizeof(tmpname), "%s.tmp", passwd_file);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (stat(tmpname, &st) != -1) {
|
|
Packit |
aea12f |
fprintf(stderr, "file '%s' is locked\n", tmpname);
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (filecopy(passwd_file, tmpname) != 0) {
|
|
Packit |
aea12f |
fprintf(stderr, "Cannot copy '%s' to '%s'\n", passwd_file,
|
|
Packit |
aea12f |
tmpname);
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit Service |
991b93 |
fp = fopen(passwd_file, "w");
|
|
Packit Service |
991b93 |
if (fp == NULL) {
|
|
Packit |
aea12f |
fprintf(stderr, "Cannot open '%s' for write\n",
|
|
Packit |
aea12f |
passwd_file);
|
|
Packit |
aea12f |
(void)remove(tmpname);
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit Service |
991b93 |
fp2 = fopen(tmpname, "r");
|
|
Packit Service |
991b93 |
if (fp2 == NULL) {
|
|
Packit |
aea12f |
fprintf(stderr, "Cannot open '%s' for read\n", tmpname);
|
|
Packit |
aea12f |
(void)remove(tmpname);
|
|
Packit Service |
991b93 |
fclose(fp);
|
|
Packit |
aea12f |
return -1;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
put = 0;
|
|
Packit |
aea12f |
do {
|
|
Packit Service |
991b93 |
p = fgets(line, sizeof(line) - 1, fp2);
|
|
Packit |
aea12f |
if (p == NULL)
|
|
Packit |
aea12f |
break;
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
pp = strchr(line, ':');
|
|
Packit |
aea12f |
if (pp == NULL)
|
|
Packit |
aea12f |
continue;
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (strncmp(p, username,
|
|
Packit |
aea12f |
MAX(strlen(username),
|
|
Packit |
aea12f |
(unsigned int) (pp - p))) == 0) {
|
|
Packit |
aea12f |
put = 1;
|
|
Packit Service |
991b93 |
fprintf(fp, "%s:%s\n", username, key);
|
|
Packit |
aea12f |
} else {
|
|
Packit Service |
991b93 |
fputs(line, fp);
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
while (1);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
if (put == 0) {
|
|
Packit Service |
991b93 |
fprintf(fp, "%s:%s\n", username, key);
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit Service |
991b93 |
fclose(fp);
|
|
Packit Service |
991b93 |
fclose(fp2);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
(void)remove(tmpname);
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
return 0;
|
|
Packit |
aea12f |
}
|
|
Packit |
aea12f |
|
|
Packit |
aea12f |
#endif /* ENABLE_PSK */
|