crypto/dist/heimdal/admin/add.c

   1 /*
   2  * Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. Neither the name of the Institute nor the names of its contributors
  18  *    may be used to endorse or promote products derived from this software
  19  *    without specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31  * SUCH DAMAGE.
  32  */
  33
  34 #include "ktutil_locl.h"
  35
  36 __RCSID("$Heimdal: add.c 14793 2005-04-14 16:45:14Z lha $"
  37         "$NetBSD$");
  38
  39 static char *
  40 readstring(const char *prompt, char *buf, size_t len)
  41 {
  42     printf("%s", prompt);
  43     if (fgets(buf, len, stdin) == NULL)
  44         return NULL;
  45     buf[strcspn(buf, "\r\n")] = '\0';
  46     return buf;
  47 }
  48
  49 int
  50 kt_add(struct add_options *opt, int argc, char **argv)
  51 {
  52     krb5_error_code ret;
  53     krb5_keytab keytab;
  54     krb5_keytab_entry entry;
  55     char buf[1024];
  56     krb5_enctype enctype;
  57
  58     if((keytab = ktutil_open_keytab()) == NULL)
  59         return 1;
  60
  61     memset(&entry, 0, sizeof(entry));
  62     if(opt->principal_string == NULL) {
  63         if(readstring("Principal: ", buf, sizeof(buf)) == NULL)
  64             return 1;
  65         opt->principal_string = buf;
  66     }
  67     ret = krb5_parse_name(context, opt->principal_string, &entry.principal);
  68     if(ret) {
  69         krb5_warn(context, ret, "%s", opt->principal_string);
  70         goto out;
  71     }
  72     if(opt->enctype_string == NULL) {
  73         if(readstring("Encryption type: ", buf, sizeof(buf)) == NULL) {
  74             ret = 1;
  75             goto out;
  76         }
  77         opt->enctype_string = buf;
  78     }
  79     ret = krb5_string_to_enctype(context, opt->enctype_string, &enctype);
  80     if(ret) {
  81         int t;
  82         if(sscanf(opt->enctype_string, "%d", &t) == 1)
  83             enctype = t;
  84         else {
  85             krb5_warn(context, ret, "%s", opt->enctype_string);
  86             goto out;
  87         }
  88     }
  89     if(opt->kvno_integer == -1) {
  90         if(readstring("Key version: ", buf, sizeof(buf)) == NULL) {
  91             ret = 1;
  92             goto out;
  93         }
  94         if(sscanf(buf, "%u", &opt->kvno_integer) != 1)
  95             goto out;
  96     }
  97     if(opt->password_string == NULL && opt->random_flag == 0) {
  98         if(UI_UTIL_read_pw_string(buf, sizeof(buf), "Password: ", 1)) {
  99             ret = 1;
 100             goto out;
 101         }
 102         opt->password_string = buf;
 103     }
 104     if(opt->password_string) {
 105         if (opt->hex_flag) {
 106             size_t len;
 107             void *data;
 108
 109             len = (strlen(opt->password_string) + 1) / 2;
 110
 111             data = malloc(len);
 112             if (data == NULL) {
 113                 krb5_warn(context, ENOMEM, "malloc");
 114                 goto out;
 115             }
 116
 117             if (hex_decode(opt->password_string, data, len) != len) {
 118                 free(data);
 119                 krb5_warn(context, ENOMEM, "hex decode failed");
 120                 goto out;
 121             }
 122
 123             ret = krb5_keyblock_init(context, enctype,
 124                                      data, len, &entry.keyblock);
 125             free(data);
 126         } else if (!opt->salt_flag) {
 127             krb5_salt salt;
 128             krb5_data pw;
 129
 130             salt.salttype         = KRB5_PW_SALT;
 131             salt.saltvalue.data   = NULL;
 132             salt.saltvalue.length = 0;
 133             pw.data = (void*)opt->password_string;
 134             pw.length = strlen(opt->password_string);
 135             ret = krb5_string_to_key_data_salt(context, enctype, pw, salt,
 136                                                &entry.keyblock);
 137         } else {
 138             ret = krb5_string_to_key(context, enctype, opt->password_string,
 139                                      entry.principal, &entry.keyblock);
 140         }
 141         memset (opt->password_string, 0, strlen(opt->password_string));
 142     } else {
 143         ret = krb5_generate_random_keyblock(context, enctype, &entry.keyblock);
 144     }
 145     if(ret) {
 146         krb5_warn(context, ret, "add");
 147         goto out;
 148     }
 149     entry.vno = opt->kvno_integer;
 150     entry.timestamp = time (NULL);
 151     ret = krb5_kt_add_entry(context, keytab, &entry);
 152     if(ret)
 153         krb5_warn(context, ret, "add");
 154  out:
 155     krb5_kt_free_entry(context, &entry);
 156     krb5_kt_close(context, keytab);
 157     return ret != 0;
 158 }