heimdal/lib/hx509/ks_file.c

/*
 * Copyright (c) 2005 Kungliga Tekniska Högskolan
 * (Royal Institute of Technology, Stockholm, Sweden). 
 * All rights reserved. 
 *
 * Redistribution and use in source and binary forms, with or without 
 * modification, are permitted provided that the following conditions 
 * are met: 
 *
 * 1. Redistributions of source code must retain the above copyright 
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright 
 *    notice, this list of conditions and the following disclaimer in the 
 *    documentation and/or other materials provided with the distribution. 
 *
 * 3. Neither the name of the Institute nor the names of its contributors 
 *    may be used to endorse or promote products derived from this software 
 *    without specific prior written permission. 
 *
 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 
 * SUCH DAMAGE. 
 */

#include "hx_locl.h"
RCSID("$Id$");

static int
parse_certificate(const char *fn, int use_pem, Certificate *t)
{
    char buf[1024];
    void *data = NULL;
    size_t size, len = 0;
    int in_cert = 0;
    FILE *f;
    int i, ret;

    memset(t, 0, sizeof(*t));

    if ((f = fopen(fn, "r")) == NULL)
	return ENOENT;

    if (use_pem) {
	while (fgets(buf, sizeof(buf), f) != NULL) {
	    char *p;

	    i = strcspn(buf, "\n");
	    if (buf[i] == '\n') buf[i--] = '\0';
	    if (buf[i] == '\r') buf[i--] = '\0';
	    
	    if (i == 26
		&& strcmp("-----BEGIN CERTIFICATE-----", buf) == 0)
	    {
		in_cert = 1;
		continue;
	    } else if (i == 24 &&
		       strcmp("-----END CERTIFICATE-----", buf) == 0)
	    {
		in_cert = 0;
		continue;
	    }
	    if (in_cert == 0)
		continue;

	    p = malloc(i);
	    i = base64_decode(buf, p);
	    
	    data = erealloc(data, len + i);
	    memcpy(((char *)data) + len, p, i);
	    free(p);
	    len += i;
	}
    } else {
	while((i = fread(buf, 1, sizeof(buf), f)) > 0) {
	    data = erealloc(data, len + i);
	    memcpy(((char *)data) + len, buf, i);
	    len += i;
	}
    }

    fclose(f);

    if (data == NULL)
	return ENOENT;

    if (data && in_cert) {
	free(data);
	return EINVAL;
    }

    ret = decode_Certificate(data, len, t, &size);
    free(data);
    return ret;
}


static int
file_init(hx509_certs certs, void **data, int flags, 
	  const char *residue, hx509_lock lock)
{
    char *certfn, *keyfn, *friendlyname = NULL;
    hx509_cert cert;

    *data = NULL;

    certfn = strdup(residue);
    if (certfn == NULL)
	return ENOMEM;
    keyfn = strchr(certfn, ',');
    if (keyfn) {
	*keyfn++ = '\0';
	friendlyname = strchr(keyfn, ',');
	if (friendlyname)
	    *friendlyname++ = '\0';
    }

    {
	Certificate t;
	int ret;

	ret = parse_certificate(certfn, 1, &t);
	if (ret)
	    ret = parse_certificate(certfn, 0, &t);
	if (ret) {
	    free(certfn);
	    return ret;
	}

	ret = hx509_cert_init(&t, &cert);
	free_Certificate(&t);
	if (ret) {
	    free(certfn);
	    return ret;
	}
    }

    if (keyfn) {
	int ret;
	ret = _hx509_cert_assign_private_key_file(cert, lock, keyfn);
	if (ret) {
	    hx509_cert_free(cert);
	    free(certfn);
	    return ret;
	}
    }
    if (friendlyname) {
	int ret;
	ret = hx509_cert_set_friendly_name(cert, friendlyname);
	if (ret) {
	    hx509_cert_free(cert);
	    free(certfn);
	    return ret;
	}
    }
    free(certfn);

    *data = cert;
    return 0;
}

static int
file_free(hx509_certs certs, void *data)
{
    hx509_cert_free(data);
    return 0;
}



static int 
file_iter_start(hx509_certs certs, void *data, void **cursor)
{
    int *i;

    i = malloc(sizeof(*i));
    if (i == NULL)
	return ENOMEM;
    *i = 0;
    *cursor = i;
    return 0;
}

static int
file_iter(hx509_certs certs, void *data, void *iter, hx509_cert *cert)
{
    int *i = iter;
    if (*i != 0) {
	*cert = NULL;
	return 0;
    }
    *cert = hx509_cert_ref((hx509_cert)data);
    (*i)++;
    return 0;
}

static int
file_iter_end(hx509_certs certs,
	      void *data,
	      void *cursor)
{
    free(cursor);
    return 0;
}


static struct hx509_keyset_ops keyset_file = {
    "FILE",
    0,
    file_init,
    file_free,
    NULL,
    NULL,
    file_iter_start,
    file_iter,
    file_iter_end
};

void
_hx509_ks_file_register(void)
{
    _hx509_ks_register(&keyset_file);
}