external/bsd/bind/dist/lib/dns/rdata/generic/sig_24.c

   1 /*      $NetBSD$        */
   2
   3 /*
   4  * Copyright (C) 2004, 2005, 2007, 2009  Internet Systems Consortium, Inc. ("ISC")
   5  * Copyright (C) 1999-2003  Internet Software Consortium.
   6  *
   7  * Permission to use, copy, modify, and/or distribute this software for any
   8  * purpose with or without fee is hereby granted, provided that the above
   9  * copyright notice and this permission notice appear in all copies.
  10  *
  11  * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  12  * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  13  * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  14  * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  15  * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  16  * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  17  * PERFORMANCE OF THIS SOFTWARE.
  18  */
  19
  20 /* Id: sig_24.c,v 1.68 2009/12/04 22:06:37 tbox Exp */
  21
  22 /* Reviewed: Fri Mar 17 09:05:02 PST 2000 by gson */
  23
  24 /* RFC2535 */
  25
  26 #ifndef RDATA_GENERIC_SIG_24_C
  27 #define RDATA_GENERIC_SIG_24_C
  28
  29 #define RRTYPE_SIG_ATTRIBUTES (0)
  30
  31 static inline isc_result_t
  32 fromtext_sig(ARGS_FROMTEXT) {
  33         isc_token_t token;
  34         unsigned char c;
  35         long i;
  36         dns_rdatatype_t covered;
  37         char *e;
  38         isc_result_t result;
  39         dns_name_t name;
  40         isc_buffer_t buffer;
  41         isc_uint32_t time_signed, time_expire;
  42
  43         REQUIRE(type == 24);
  44
  45         UNUSED(type);
  46         UNUSED(rdclass);
  47         UNUSED(callbacks);
  48
  49         /*
  50          * Type covered.
  51          */
  52         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
  53                                       ISC_FALSE));
  54         result = dns_rdatatype_fromtext(&covered, &token.value.as_textregion);
  55         if (result != ISC_R_SUCCESS && result != ISC_R_NOTIMPLEMENTED) {
  56                 i = strtol(DNS_AS_STR(token), &e, 10);
  57                 if (i < 0 || i > 65535)
  58                         RETTOK(ISC_R_RANGE);
  59                 if (*e != 0)
  60                         RETTOK(result);
  61                 covered = (dns_rdatatype_t)i;
  62         }
  63         RETERR(uint16_tobuffer(covered, target));
  64
  65         /*
  66          * Algorithm.
  67          */
  68         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
  69                                       ISC_FALSE));
  70         RETTOK(dns_secalg_fromtext(&c, &token.value.as_textregion));
  71         RETERR(mem_tobuffer(target, &c, 1));
  72
  73         /*
  74          * Labels.
  75          */
  76         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
  77                                       ISC_FALSE));
  78         if (token.value.as_ulong > 0xffU)
  79                 RETTOK(ISC_R_RANGE);
  80         c = (unsigned char)token.value.as_ulong;
  81         RETERR(mem_tobuffer(target, &c, 1));
  82
  83         /*
  84          * Original ttl.
  85          */
  86         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
  87                                       ISC_FALSE));
  88         RETERR(uint32_tobuffer(token.value.as_ulong, target));
  89
  90         /*
  91          * Signature expiration.
  92          */
  93         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
  94                                       ISC_FALSE));
  95         RETTOK(dns_time32_fromtext(DNS_AS_STR(token), &time_expire));
  96         RETERR(uint32_tobuffer(time_expire, target));
  97
  98         /*
  99          * Time signed.
 100          */
 101         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
 102                                       ISC_FALSE));
 103         RETTOK(dns_time32_fromtext(DNS_AS_STR(token), &time_signed));
 104         RETERR(uint32_tobuffer(time_signed, target));
 105
 106         /*
 107          * Key footprint.
 108          */
 109         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
 110                                       ISC_FALSE));
 111         RETERR(uint16_tobuffer(token.value.as_ulong, target));
 112
 113         /*
 114          * Signer.
 115          */
 116         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
 117                                       ISC_FALSE));
 118         dns_name_init(&name, NULL);
 119         buffer_fromregion(&buffer, &token.value.as_region);
 120         origin = (origin != NULL) ? origin : dns_rootname;
 121         RETTOK(dns_name_fromtext(&name, &buffer, origin, options, target));
 122
 123         /*
 124          * Sig.
 125          */
 126         return (isc_base64_tobuffer(lexer, target, -1));
 127 }
 128
 129 static inline isc_result_t
 130 totext_sig(ARGS_TOTEXT) {
 131         isc_region_t sr;
 132         char buf[sizeof("4294967295")];
 133         dns_rdatatype_t covered;
 134         unsigned long ttl;
 135         unsigned long when;
 136         unsigned long exp;
 137         unsigned long foot;
 138         dns_name_t name;
 139         dns_name_t prefix;
 140         isc_boolean_t sub;
 141
 142         REQUIRE(rdata->type == 24);
 143         REQUIRE(rdata->length != 0);
 144
 145         dns_rdata_toregion(rdata, &sr);
 146
 147         /*
 148          * Type covered.
 149          */
 150         covered = uint16_fromregion(&sr);
 151         isc_region_consume(&sr, 2);
 152         /*
 153          * XXXAG We should have something like dns_rdatatype_isknown()
 154          * that does the right thing with type 0.
 155          */
 156         if (dns_rdatatype_isknown(covered) && covered != 0) {
 157                 RETERR(dns_rdatatype_totext(covered, target));
 158         } else {
 159                 char buf[sizeof("65535")];
 160                 sprintf(buf, "%u", covered);
 161                 RETERR(str_totext(buf, target));
 162         }
 163         RETERR(str_totext(" ", target));
 164
 165         /*
 166          * Algorithm.
 167          */
 168         sprintf(buf, "%u", sr.base[0]);
 169         isc_region_consume(&sr, 1);
 170         RETERR(str_totext(buf, target));
 171         RETERR(str_totext(" ", target));
 172
 173         /*
 174          * Labels.
 175          */
 176         sprintf(buf, "%u", sr.base[0]);
 177         isc_region_consume(&sr, 1);
 178         RETERR(str_totext(buf, target));
 179         RETERR(str_totext(" ", target));
 180
 181         /*
 182          * Ttl.
 183          */
 184         ttl = uint32_fromregion(&sr);
 185         isc_region_consume(&sr, 4);
 186         sprintf(buf, "%lu", ttl);
 187         RETERR(str_totext(buf, target));
 188         RETERR(str_totext(" ", target));
 189
 190         /*
 191          * Sig exp.
 192          */
 193         exp = uint32_fromregion(&sr);
 194         isc_region_consume(&sr, 4);
 195         RETERR(dns_time32_totext(exp, target));
 196
 197         if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
 198                 RETERR(str_totext(" (", target));
 199         RETERR(str_totext(tctx->linebreak, target));
 200
 201         /*
 202          * Time signed.
 203          */
 204         when = uint32_fromregion(&sr);
 205         isc_region_consume(&sr, 4);
 206         RETERR(dns_time32_totext(when, target));
 207         RETERR(str_totext(" ", target));
 208
 209         /*
 210          * Footprint.
 211          */
 212         foot = uint16_fromregion(&sr);
 213         isc_region_consume(&sr, 2);
 214         sprintf(buf, "%lu", foot);
 215         RETERR(str_totext(buf, target));
 216         RETERR(str_totext(" ", target));
 217
 218         /*
 219          * Signer.
 220          */
 221         dns_name_init(&name, NULL);
 222         dns_name_init(&prefix, NULL);
 223         dns_name_fromregion(&name, &sr);
 224         isc_region_consume(&sr, name_length(&name));
 225         sub = name_prefix(&name, tctx->origin, &prefix);
 226         RETERR(dns_name_totext(&prefix, sub, target));
 227
 228         /*
 229          * Sig.
 230          */
 231         RETERR(str_totext(tctx->linebreak, target));
 232         RETERR(isc_base64_totext(&sr, tctx->width - 2,
 233                                     tctx->linebreak, target));
 234         if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
 235                 RETERR(str_totext(" )", target));
 236
 237         return (ISC_R_SUCCESS);
 238 }
 239
 240 static inline isc_result_t
 241 fromwire_sig(ARGS_FROMWIRE) {
 242         isc_region_t sr;
 243         dns_name_t name;
 244
 245         REQUIRE(type == 24);
 246
 247         UNUSED(type);
 248         UNUSED(rdclass);
 249
 250         dns_decompress_setmethods(dctx, DNS_COMPRESS_NONE);
 251
 252         isc_buffer_activeregion(source, &sr);
 253         /*
 254          * type covered: 2
 255          * algorithm: 1
 256          * labels: 1
 257          * original ttl: 4
 258          * signature expiration: 4
 259          * time signed: 4
 260          * key footprint: 2
 261          */
 262         if (sr.length < 18)
 263                 return (ISC_R_UNEXPECTEDEND);
 264
 265         isc_buffer_forward(source, 18);
 266         RETERR(mem_tobuffer(target, sr.base, 18));
 267
 268         /*
 269          * Signer.
 270          */
 271         dns_name_init(&name, NULL);
 272         RETERR(dns_name_fromwire(&name, source, dctx, options, target));
 273
 274         /*
 275          * Sig.
 276          */
 277         isc_buffer_activeregion(source, &sr);
 278         isc_buffer_forward(source, sr.length);
 279         return (mem_tobuffer(target, sr.base, sr.length));
 280 }
 281
 282 static inline isc_result_t
 283 towire_sig(ARGS_TOWIRE) {
 284         isc_region_t sr;
 285         dns_name_t name;
 286         dns_offsets_t offsets;
 287
 288         REQUIRE(rdata->type == 24);
 289         REQUIRE(rdata->length != 0);
 290
 291         dns_compress_setmethods(cctx, DNS_COMPRESS_NONE);
 292         dns_rdata_toregion(rdata, &sr);
 293         /*
 294          * type covered: 2
 295          * algorithm: 1
 296          * labels: 1
 297          * original ttl: 4
 298          * signature expiration: 4
 299          * time signed: 4
 300          * key footprint: 2
 301          */
 302         RETERR(mem_tobuffer(target, sr.base, 18));
 303         isc_region_consume(&sr, 18);
 304
 305         /*
 306          * Signer.
 307          */
 308         dns_name_init(&name, offsets);
 309         dns_name_fromregion(&name, &sr);
 310         isc_region_consume(&sr, name_length(&name));
 311         RETERR(dns_name_towire(&name, cctx, target));
 312
 313         /*
 314          * Signature.
 315          */
 316         return (mem_tobuffer(target, sr.base, sr.length));
 317 }
 318
 319 static inline int
 320 compare_sig(ARGS_COMPARE) {
 321         isc_region_t r1;
 322         isc_region_t r2;
 323         dns_name_t name1;
 324         dns_name_t name2;
 325         int order;
 326
 327         REQUIRE(rdata1->type == rdata2->type);
 328         REQUIRE(rdata1->rdclass == rdata2->rdclass);
 329         REQUIRE(rdata1->type == 24);
 330         REQUIRE(rdata1->length != 0);
 331         REQUIRE(rdata2->length != 0);
 332
 333         dns_rdata_toregion(rdata1, &r1);
 334         dns_rdata_toregion(rdata2, &r2);
 335
 336         INSIST(r1.length > 18);
 337         INSIST(r2.length > 18);
 338         r1.length = 18;
 339         r2.length = 18;
 340         order = isc_region_compare(&r1, &r2);
 341         if (order != 0)
 342                 return (order);
 343
 344         dns_name_init(&name1, NULL);
 345         dns_name_init(&name2, NULL);
 346         dns_rdata_toregion(rdata1, &r1);
 347         dns_rdata_toregion(rdata2, &r2);
 348         isc_region_consume(&r1, 18);
 349         isc_region_consume(&r2, 18);
 350         dns_name_fromregion(&name1, &r1);
 351         dns_name_fromregion(&name2, &r2);
 352         order = dns_name_rdatacompare(&name1, &name2);
 353         if (order != 0)
 354                 return (order);
 355
 356         isc_region_consume(&r1, name_length(&name1));
 357         isc_region_consume(&r2, name_length(&name2));
 358
 359         return (isc_region_compare(&r1, &r2));
 360 }
 361
 362 static inline isc_result_t
 363 fromstruct_sig(ARGS_FROMSTRUCT) {
 364         dns_rdata_sig_t *sig = source;
 365
 366         REQUIRE(type == 24);
 367         REQUIRE(source != NULL);
 368         REQUIRE(sig->common.rdtype == type);
 369         REQUIRE(sig->common.rdclass == rdclass);
 370         REQUIRE(sig->signature != NULL || sig->siglen == 0);
 371
 372         UNUSED(type);
 373         UNUSED(rdclass);
 374
 375         /*
 376          * Type covered.
 377          */
 378         RETERR(uint16_tobuffer(sig->covered, target));
 379
 380         /*
 381          * Algorithm.
 382          */
 383         RETERR(uint8_tobuffer(sig->algorithm, target));
 384
 385         /*
 386          * Labels.
 387          */
 388         RETERR(uint8_tobuffer(sig->labels, target));
 389
 390         /*
 391          * Original TTL.
 392          */
 393         RETERR(uint32_tobuffer(sig->originalttl, target));
 394
 395         /*
 396          * Expire time.
 397          */
 398         RETERR(uint32_tobuffer(sig->timeexpire, target));
 399
 400         /*
 401          * Time signed.
 402          */
 403         RETERR(uint32_tobuffer(sig->timesigned, target));
 404
 405         /*
 406          * Key ID.
 407          */
 408         RETERR(uint16_tobuffer(sig->keyid, target));
 409
 410         /*
 411          * Signer name.
 412          */
 413         RETERR(name_tobuffer(&sig->signer, target));
 414
 415         /*
 416          * Signature.
 417          */
 418         return (mem_tobuffer(target, sig->signature, sig->siglen));
 419 }
 420
 421 static inline isc_result_t
 422 tostruct_sig(ARGS_TOSTRUCT) {
 423         isc_region_t sr;
 424         dns_rdata_sig_t *sig = target;
 425         dns_name_t signer;
 426
 427         REQUIRE(rdata->type == 24);
 428         REQUIRE(target != NULL);
 429         REQUIRE(rdata->length != 0);
 430
 431         sig->common.rdclass = rdata->rdclass;
 432         sig->common.rdtype = rdata->type;
 433         ISC_LINK_INIT(&sig->common, link);
 434
 435         dns_rdata_toregion(rdata, &sr);
 436
 437         /*
 438          * Type covered.
 439          */
 440         sig->covered = uint16_fromregion(&sr);
 441         isc_region_consume(&sr, 2);
 442
 443         /*
 444          * Algorithm.
 445          */
 446         sig->algorithm = uint8_fromregion(&sr);
 447         isc_region_consume(&sr, 1);
 448
 449         /*
 450          * Labels.
 451          */
 452         sig->labels = uint8_fromregion(&sr);
 453         isc_region_consume(&sr, 1);
 454
 455         /*
 456          * Original TTL.
 457          */
 458         sig->originalttl = uint32_fromregion(&sr);
 459         isc_region_consume(&sr, 4);
 460
 461         /*
 462          * Expire time.
 463          */
 464         sig->timeexpire = uint32_fromregion(&sr);
 465         isc_region_consume(&sr, 4);
 466
 467         /*
 468          * Time signed.
 469          */
 470         sig->timesigned = uint32_fromregion(&sr);
 471         isc_region_consume(&sr, 4);
 472
 473         /*
 474          * Key ID.
 475          */
 476         sig->keyid = uint16_fromregion(&sr);
 477         isc_region_consume(&sr, 2);
 478
 479         dns_name_init(&signer, NULL);
 480         dns_name_fromregion(&signer, &sr);
 481         dns_name_init(&sig->signer, NULL);
 482         RETERR(name_duporclone(&signer, mctx, &sig->signer));
 483         isc_region_consume(&sr, name_length(&sig->signer));
 484
 485         /*
 486          * Signature.
 487          */
 488         sig->siglen = sr.length;
 489         sig->signature = mem_maybedup(mctx, sr.base, sig->siglen);
 490         if (sig->signature == NULL)
 491                 goto cleanup;
 492
 493
 494         sig->mctx = mctx;
 495         return (ISC_R_SUCCESS);
 496
 497  cleanup:
 498         if (mctx != NULL)
 499                 dns_name_free(&sig->signer, mctx);
 500         return (ISC_R_NOMEMORY);
 501 }
 502
 503 static inline void
 504 freestruct_sig(ARGS_FREESTRUCT) {
 505         dns_rdata_sig_t *sig = (dns_rdata_sig_t *) source;
 506
 507         REQUIRE(source != NULL);
 508         REQUIRE(sig->common.rdtype == 24);
 509
 510         if (sig->mctx == NULL)
 511                 return;
 512
 513         dns_name_free(&sig->signer, sig->mctx);
 514         if (sig->signature != NULL)
 515                 isc_mem_free(sig->mctx, sig->signature);
 516         sig->mctx = NULL;
 517 }
 518
 519 static inline isc_result_t
 520 additionaldata_sig(ARGS_ADDLDATA) {
 521         REQUIRE(rdata->type == 24);
 522
 523         UNUSED(rdata);
 524         UNUSED(add);
 525         UNUSED(arg);
 526
 527         return (ISC_R_SUCCESS);
 528 }
 529
 530 static inline isc_result_t
 531 digest_sig(ARGS_DIGEST) {
 532
 533         REQUIRE(rdata->type == 24);
 534
 535         UNUSED(rdata);
 536         UNUSED(digest);
 537         UNUSED(arg);
 538
 539         return (ISC_R_NOTIMPLEMENTED);
 540 }
 541
 542 static inline dns_rdatatype_t
 543 covers_sig(dns_rdata_t *rdata) {
 544         dns_rdatatype_t type;
 545         isc_region_t r;
 546
 547         REQUIRE(rdata->type == 24);
 548
 549         dns_rdata_toregion(rdata, &r);
 550         type = uint16_fromregion(&r);
 551
 552         return (type);
 553 }
 554
 555 static inline isc_boolean_t
 556 checkowner_sig(ARGS_CHECKOWNER) {
 557
 558         REQUIRE(type == 24);
 559
 560         UNUSED(name);
 561         UNUSED(type);
 562         UNUSED(rdclass);
 563         UNUSED(wildcard);
 564
 565         return (ISC_TRUE);
 566 }
 567
 568 static inline isc_boolean_t
 569 checknames_sig(ARGS_CHECKNAMES) {
 570
 571         REQUIRE(rdata->type == 24);
 572
 573         UNUSED(rdata);
 574         UNUSED(owner);
 575         UNUSED(bad);
 576
 577         return (ISC_TRUE);
 578 }
 579
 580 static inline int
 581 casecompare_sig(ARGS_COMPARE) {
 582         return (compare_sig(rdata1, rdata2));
 583 }
 584 #endif  /* RDATA_GENERIC_SIG_24_C */