/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
1
/*  -*- coding: utf-8 -*- */
2
/*
261 by Teddy Hogeborn
* plugins.d/askpass-fifo.c: Fix name in header.
3
 * Mandos-client - get and decrypt data from a Mandos server
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
4
 *
5
 * This program is partly derived from an example program for an Avahi
6
 * service browser, downloaded from
7
 * <http://avahi.org/browser/examples/core-browse-services.c>.  This
8
 * includes the following functions: "resolve_callback",
9
 * "browse_callback", and parts of "main".
10
 * 
28 by Teddy Hogeborn
* server.conf: New file.
11
 * Everything else is
246 by Teddy Hogeborn
* README: Update copyright year; add "2009".
12
 * Copyright © 2008,2009 Teddy Hogeborn
13
 * Copyright © 2008,2009 Björn Påhlsson
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
14
 * 
15
 * This program is free software: you can redistribute it and/or
16
 * modify it under the terms of the GNU General Public License as
17
 * published by the Free Software Foundation, either version 3 of the
18
 * License, or (at your option) any later version.
19
 * 
20
 * This program is distributed in the hope that it will be useful, but
21
 * WITHOUT ANY WARRANTY; without even the implied warranty of
22
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
23
 * General Public License for more details.
24
 * 
25
 * You should have received a copy of the GNU General Public License
26
 * along with this program.  If not, see
27
 * <http://www.gnu.org/licenses/>.
28
 * 
31 by Teddy Hogeborn
* plugins.d/plugbasedclient.c: Update include file comments.
29
 * Contact the authors at <mandos@fukt.bsnet.se>.
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
30
 */
31
28 by Teddy Hogeborn
* server.conf: New file.
32
/* Needed by GPGME, specifically gpgme_data_seek() */
13 by Björn Påhlsson
Added following support:
33
#define _LARGEFILE_SOURCE
34
#define _FILE_OFFSET_BITS 64
35
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
36
#define _GNU_SOURCE		/* TEMP_FAILURE_RETRY(), asprintf() */
24.1.10 by Björn Påhlsson
merge commit
37
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
38
#include <stdio.h>		/* fprintf(), stderr, fwrite(),
285 by Teddy Hogeborn
* plugins.d/mandos-client.c (main): Use remove() instead of unlink(),
39
				   stdout, ferror(), sscanf(),
40
				   remove() */
24.1.26 by Björn Påhlsson
tally count of used symbols
41
#include <stdint.h> 		/* uint16_t, uint32_t */
42
#include <stddef.h>		/* NULL, size_t, ssize_t */
24.1.29 by Björn Påhlsson
Added more header file comments
43
#include <stdlib.h> 		/* free(), EXIT_SUCCESS, EXIT_FAILURE,
44
				   srand() */
304 by Teddy Hogeborn
Four new interrelated features:
45
#include <stdbool.h>		/* bool, false, true */
24.1.29 by Björn Påhlsson
Added more header file comments
46
#include <string.h>		/* memset(), strcmp(), strlen(),
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
47
				   strerror(), asprintf(), strcpy() */
304 by Teddy Hogeborn
Four new interrelated features:
48
#include <sys/ioctl.h>		/* ioctl */
24.1.26 by Björn Påhlsson
tally count of used symbols
49
#include <sys/types.h>		/* socket(), inet_pton(), sockaddr,
24.1.29 by Björn Påhlsson
Added more header file comments
50
				   sockaddr_in6, PF_INET6,
304 by Teddy Hogeborn
Four new interrelated features:
51
				   SOCK_STREAM, uid_t, gid_t, open(),
52
				   opendir(), DIR */
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
53
#include <sys/stat.h>		/* open() */
24.1.26 by Björn Påhlsson
tally count of used symbols
54
#include <sys/socket.h>		/* socket(), struct sockaddr_in6,
304 by Teddy Hogeborn
Four new interrelated features:
55
				   inet_pton(), connect() */
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
56
#include <fcntl.h>		/* open() */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
57
#include <dirent.h>		/* opendir(), struct dirent, readdir()
58
				 */
268 by Teddy Hogeborn
Fixes for sscanf usage:
59
#include <inttypes.h>		/* PRIu16, intmax_t, SCNdMAX */
24.1.29 by Björn Påhlsson
Added more header file comments
60
#include <assert.h>		/* assert() */
61
#include <errno.h>		/* perror(), errno */
291 by Teddy Hogeborn
Merge from Björn:
62
#include <time.h>		/* nanosleep(), time() */
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
63
#include <net/if.h>		/* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
24.1.26 by Björn Påhlsson
tally count of used symbols
64
				   SIOCSIFFLAGS, if_indextoname(),
65
				   if_nametoindex(), IF_NAMESIZE */
304 by Teddy Hogeborn
Four new interrelated features:
66
#include <netinet/in.h>		/* IN6_IS_ADDR_LINKLOCAL,
67
				   INET_ADDRSTRLEN, INET6_ADDRSTRLEN
68
				*/
24.1.29 by Björn Påhlsson
Added more header file comments
69
#include <unistd.h>		/* close(), SEEK_SET, off_t, write(),
70
				   getuid(), getgid(), setuid(),
71
				   setgid() */
24.1.26 by Björn Påhlsson
tally count of used symbols
72
#include <arpa/inet.h>		/* inet_pton(), htons */
304 by Teddy Hogeborn
Four new interrelated features:
73
#include <iso646.h>		/* not, or, and */
24.1.29 by Björn Påhlsson
Added more header file comments
74
#include <argp.h>		/* struct argp_option, error_t, struct
75
				   argp_state, struct argp,
76
				   argp_parse(), ARGP_KEY_ARG,
77
				   ARGP_KEY_END, ARGP_ERR_UNKNOWN */
307 by Teddy Hogeborn
Merge from Björn:
78
#include <signal.h>		/* sigemptyset(), sigaddset(),
79
				   sigaction(), SIGTERM, sigaction */
80
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
81
#ifdef __linux__
24.1.124 by Björn Påhlsson
Added lower kernel loglevel to reduce clutter on system console.
82
#include <sys/klog.h> 		/* klogctl() */
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
83
#endif
24.1.26 by Björn Påhlsson
tally count of used symbols
84
85
/* Avahi */
24.1.29 by Björn Påhlsson
Added more header file comments
86
/* All Avahi types, constants and functions
87
 Avahi*, avahi_*,
88
 AVAHI_* */
89
#include <avahi-core/core.h>
24.1.26 by Björn Påhlsson
tally count of used symbols
90
#include <avahi-core/lookup.h>
24.1.29 by Björn Påhlsson
Added more header file comments
91
#include <avahi-core/log.h>
24.1.26 by Björn Påhlsson
tally count of used symbols
92
#include <avahi-common/simple-watch.h>
93
#include <avahi-common/malloc.h>
94
#include <avahi-common/error.h>
95
96
/* GnuTLS */
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
97
#include <gnutls/gnutls.h>	/* All GnuTLS types, constants and
98
				   functions:
24.1.29 by Björn Påhlsson
Added more header file comments
99
				   gnutls_*
24.1.26 by Björn Påhlsson
tally count of used symbols
100
				   init_gnutls_session(),
24.1.29 by Björn Påhlsson
Added more header file comments
101
				   GNUTLS_* */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
102
#include <gnutls/openpgp.h>
103
			  /* gnutls_certificate_set_openpgp_key_file(),
24.1.29 by Björn Påhlsson
Added more header file comments
104
				   GNUTLS_OPENPGP_FMT_BASE64 */
24.1.26 by Björn Påhlsson
tally count of used symbols
105
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
106
/* GPGME */
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
107
#include <gpgme.h> 		/* All GPGME types, constants and
108
				   functions:
24.1.29 by Björn Påhlsson
Added more header file comments
109
				   gpgme_*
24.1.26 by Björn Påhlsson
tally count of used symbols
110
				   GPGME_PROTOCOL_OpenPGP,
24.1.29 by Björn Påhlsson
Added more header file comments
111
				   GPG_ERR_NO_* */
13 by Björn Påhlsson
Added following support:
112
113
#define BUFFER_SIZE 256
37 by Teddy Hogeborn
Non-tested commit for merge purposes.
114
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
115
#define PATHDIR "/conf/conf.d/mandos"
116
#define SECKEY "seckey.txt"
168 by Teddy Hogeborn
* initramfs-tools-hook: Use long options where available. Use only
117
#define PUBKEY "pubkey.txt"
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
118
15.1.2 by Björn Påhlsson
Added debug options from passprompt as --debug and --debug=passprompt
119
bool debug = false;
43 by Teddy Hogeborn
* plugins.d/mandosclient.c: Cosmetic changes.
120
static const char mandos_protocol_version[] = "1";
217 by Teddy Hogeborn
* .bzrignore: Added "man" directory (created by "make install-html").
121
const char *argp_program_version = "mandos-client " VERSION;
24.1.14 by Björn Påhlsson
mandosclient
122
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
24.1.10 by Björn Påhlsson
merge commit
123
42 by Teddy Hogeborn
* plugins.d/mandosclient.c (start_mandos_communication): Change "to"
124
/* Used for passing in values through the Avahi callback functions */
13 by Björn Påhlsson
Added following support:
125
typedef struct {
24.1.9 by Björn Påhlsson
not working midwork...
126
  AvahiSimplePoll *simple_poll;
127
  AvahiServer *server;
13 by Björn Påhlsson
Added following support:
128
  gnutls_certificate_credentials_t cred;
24.1.9 by Björn Påhlsson
not working midwork...
129
  unsigned int dh_bits;
24.1.13 by Björn Påhlsson
mandosclient
130
  gnutls_dh_params_t dh_params;
24.1.9 by Björn Påhlsson
not working midwork...
131
  const char *priority;
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
132
  gpgme_ctx_t ctx;
24.1.9 by Björn Påhlsson
not working midwork...
133
} mandos_context;
13 by Björn Påhlsson
Added following support:
134
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
135
/* global context so signal handler can reach it*/
136
mandos_context mc;
137
43 by Teddy Hogeborn
* plugins.d/mandosclient.c: Cosmetic changes.
138
/*
24.1.132 by Björn Påhlsson
Fixed a bug in fallback handling
139
 * Make additional room in "buffer" for at least BUFFER_SIZE
140
 * additional bytes. "buffer_capacity" is how much is currently
141
 * allocated, "buffer_length" is how much is already used.
43 by Teddy Hogeborn
* plugins.d/mandosclient.c: Cosmetic changes.
142
 */
24.1.132 by Björn Påhlsson
Fixed a bug in fallback handling
143
size_t incbuffer(char **buffer, size_t buffer_length,
24.1.10 by Björn Påhlsson
merge commit
144
		  size_t buffer_capacity){
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
145
  if(buffer_length + BUFFER_SIZE > buffer_capacity){
24.1.12 by Björn Påhlsson
merge +
146
    *buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
147
    if(buffer == NULL){
24.1.10 by Björn Påhlsson
merge commit
148
      return 0;
149
    }
150
    buffer_capacity += BUFFER_SIZE;
151
  }
152
  return buffer_capacity;
153
}
154
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
155
/* 
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
156
 * Initialize GPGME.
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
157
 */
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
158
static bool init_gpgme(const char *seckey,
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
159
		       const char *pubkey, const char *tempdir){
160
  int ret;
13 by Björn Påhlsson
Added following support:
161
  gpgme_error_t rc;
162
  gpgme_engine_info_t engine_info;
168 by Teddy Hogeborn
* initramfs-tools-hook: Use long options where available. Use only
163
  
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
164
  
165
  /*
288 by Teddy Hogeborn
* plugins.d/mandos-client.c (main): Use separate bool variable instead
166
   * Helper function to insert pub and seckey to the engine keyring.
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
167
   */
168
  bool import_key(const char *filename){
169
    int fd;
170
    gpgme_data_t pgp_data;
171
    
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
172
    fd = (int)TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
173
    if(fd == -1){
174
      perror("open");
175
      return false;
176
    }
177
    
178
    rc = gpgme_data_new_from_fd(&pgp_data, fd);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
179
    if(rc != GPG_ERR_NO_ERROR){
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
180
      fprintf(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
181
	      gpgme_strsource(rc), gpgme_strerror(rc));
182
      return false;
183
    }
168 by Teddy Hogeborn
* initramfs-tools-hook: Use long options where available. Use only
184
    
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
185
    rc = gpgme_op_import(mc.ctx, pgp_data);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
186
    if(rc != GPG_ERR_NO_ERROR){
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
187
      fprintf(stderr, "bad gpgme_op_import: %s: %s\n",
188
	      gpgme_strsource(rc), gpgme_strerror(rc));
189
      return false;
190
    }
168 by Teddy Hogeborn
* initramfs-tools-hook: Use long options where available. Use only
191
    
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
192
    ret = (int)TEMP_FAILURE_RETRY(close(fd));
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
193
    if(ret == -1){
194
      perror("close");
195
    }
196
    gpgme_data_release(pgp_data);
197
    return true;
198
  }
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
199
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
200
  if(debug){
307 by Teddy Hogeborn
Merge from Björn:
201
    fprintf(stderr, "Initializing GPGME\n");
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
202
  }
168 by Teddy Hogeborn
* initramfs-tools-hook: Use long options where available. Use only
203
  
13 by Björn Påhlsson
Added following support:
204
  /* Init GPGME */
205
  gpgme_check_version(NULL);
24.1.4 by Björn Påhlsson
Added optional parameters certdir, certkey and certfile that can be iven at start in the command line.
206
  rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
207
  if(rc != GPG_ERR_NO_ERROR){
24.1.4 by Björn Påhlsson
Added optional parameters certdir, certkey and certfile that can be iven at start in the command line.
208
    fprintf(stderr, "bad gpgme_engine_check_version: %s: %s\n",
209
	    gpgme_strsource(rc), gpgme_strerror(rc));
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
210
    return false;
24.1.4 by Björn Påhlsson
Added optional parameters certdir, certkey and certfile that can be iven at start in the command line.
211
  }
168 by Teddy Hogeborn
* initramfs-tools-hook: Use long options where available. Use only
212
  
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
213
    /* Set GPGME home directory for the OpenPGP engine only */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
214
  rc = gpgme_get_engine_info(&engine_info);
215
  if(rc != GPG_ERR_NO_ERROR){
13 by Björn Påhlsson
Added following support:
216
    fprintf(stderr, "bad gpgme_get_engine_info: %s: %s\n",
217
	    gpgme_strsource(rc), gpgme_strerror(rc));
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
218
    return false;
13 by Björn Påhlsson
Added following support:
219
  }
220
  while(engine_info != NULL){
221
    if(engine_info->protocol == GPGME_PROTOCOL_OpenPGP){
222
      gpgme_set_engine_info(GPGME_PROTOCOL_OpenPGP,
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
223
			    engine_info->file_name, tempdir);
13 by Björn Påhlsson
Added following support:
224
      break;
225
    }
226
    engine_info = engine_info->next;
227
  }
228
  if(engine_info == NULL){
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
229
    fprintf(stderr, "Could not set GPGME home dir to %s\n", tempdir);
230
    return false;
231
  }
168 by Teddy Hogeborn
* initramfs-tools-hook: Use long options where available. Use only
232
  
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
233
  /* Create new GPGME "context" */
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
234
  rc = gpgme_new(&(mc.ctx));
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
235
  if(rc != GPG_ERR_NO_ERROR){
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
236
    fprintf(stderr, "bad gpgme_new: %s: %s\n",
237
	    gpgme_strsource(rc), gpgme_strerror(rc));
238
    return false;
239
  }
240
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
241
  if(not import_key(pubkey) or not import_key(seckey)){
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
242
    return false;
243
  }
244
  
245
  return true; 
246
}
247
248
/* 
249
 * Decrypt OpenPGP data.
250
 * Returns -1 on error
251
 */
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
252
static ssize_t pgp_packet_decrypt(const char *cryptotext,
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
253
				  size_t crypto_size,
254
				  char **plaintext){
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
255
  gpgme_data_t dh_crypto, dh_plain;
256
  gpgme_error_t rc;
257
  ssize_t ret;
258
  size_t plaintext_capacity = 0;
259
  ssize_t plaintext_length = 0;
260
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
261
  if(debug){
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
262
    fprintf(stderr, "Trying to decrypt OpenPGP data\n");
13 by Björn Påhlsson
Added following support:
263
  }
264
  
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
265
  /* Create new GPGME data buffer from memory cryptotext */
266
  rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
267
			       0);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
268
  if(rc != GPG_ERR_NO_ERROR){
13 by Björn Påhlsson
Added following support:
269
    fprintf(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
270
	    gpgme_strsource(rc), gpgme_strerror(rc));
271
    return -1;
272
  }
273
  
274
  /* Create new empty GPGME data buffer for the plaintext */
275
  rc = gpgme_data_new(&dh_plain);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
276
  if(rc != GPG_ERR_NO_ERROR){
13 by Björn Påhlsson
Added following support:
277
    fprintf(stderr, "bad gpgme_data_new: %s: %s\n",
278
	    gpgme_strsource(rc), gpgme_strerror(rc));
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
279
    gpgme_data_release(dh_crypto);
13 by Björn Påhlsson
Added following support:
280
    return -1;
281
  }
282
  
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
283
  /* Decrypt data from the cryptotext data buffer to the plaintext
284
     data buffer */
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
285
  rc = gpgme_op_decrypt(mc.ctx, dh_crypto, dh_plain);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
286
  if(rc != GPG_ERR_NO_ERROR){
13 by Björn Påhlsson
Added following support:
287
    fprintf(stderr, "bad gpgme_op_decrypt: %s: %s\n",
288
	    gpgme_strsource(rc), gpgme_strerror(rc));
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
289
    plaintext_length = -1;
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
290
    if(debug){
99 by Teddy Hogeborn
* mandos (fingerprint): Bug fix: Check crtverify.value, not crtverify.
291
      gpgme_decrypt_result_t result;
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
292
      result = gpgme_op_decrypt_result(mc.ctx);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
293
      if(result == NULL){
99 by Teddy Hogeborn
* mandos (fingerprint): Bug fix: Check crtverify.value, not crtverify.
294
	fprintf(stderr, "gpgme_op_decrypt_result failed\n");
295
      } else {
296
	fprintf(stderr, "Unsupported algorithm: %s\n",
297
		result->unsupported_algorithm);
298
	fprintf(stderr, "Wrong key usage: %u\n",
299
		result->wrong_key_usage);
300
	if(result->file_name != NULL){
301
	  fprintf(stderr, "File name: %s\n", result->file_name);
302
	}
303
	gpgme_recipient_t recipient;
304
	recipient = result->recipients;
305
	if(recipient){
306
	  while(recipient != NULL){
307
	    fprintf(stderr, "Public key algorithm: %s\n",
308
		    gpgme_pubkey_algo_name(recipient->pubkey_algo));
309
	    fprintf(stderr, "Key ID: %s\n", recipient->keyid);
310
	    fprintf(stderr, "Secret key available: %s\n",
311
		    recipient->status == GPG_ERR_NO_SECKEY
312
		    ? "No" : "Yes");
313
	    recipient = recipient->next;
314
	  }
315
	}
316
      }
317
    }
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
318
    goto decrypt_end;
13 by Björn Påhlsson
Added following support:
319
  }
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
320
  
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
321
  if(debug){
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
322
    fprintf(stderr, "Decryption of OpenPGP data succeeded\n");
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
323
  }
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
324
  
13 by Björn Påhlsson
Added following support:
325
  /* Seek back to the beginning of the GPGME plaintext data buffer */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
326
  if(gpgme_data_seek(dh_plain, (off_t)0, SEEK_SET) == -1){
24.1.92 by Björn Påhlsson
Several memory leaks detected by valgrind fixed
327
    perror("gpgme_data_seek");
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
328
    plaintext_length = -1;
329
    goto decrypt_end;
24.1.5 by Björn Påhlsson
plugbasedclient:
330
  }
331
  
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
332
  *plaintext = NULL;
13 by Björn Påhlsson
Added following support:
333
  while(true){
24.1.132 by Björn Påhlsson
Fixed a bug in fallback handling
334
    plaintext_capacity = incbuffer(plaintext,
42 by Teddy Hogeborn
* plugins.d/mandosclient.c (start_mandos_communication): Change "to"
335
				      (size_t)plaintext_length,
24.1.12 by Björn Påhlsson
merge +
336
				      plaintext_capacity);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
337
    if(plaintext_capacity == 0){
24.1.132 by Björn Påhlsson
Fixed a bug in fallback handling
338
	perror("incbuffer");
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
339
	plaintext_length = -1;
340
	goto decrypt_end;
13 by Björn Påhlsson
Added following support:
341
    }
342
    
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
343
    ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
344
			  BUFFER_SIZE);
13 by Björn Påhlsson
Added following support:
345
    /* Print the data, if any */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
346
    if(ret == 0){
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
347
      /* EOF */
13 by Björn Påhlsson
Added following support:
348
      break;
349
    }
350
    if(ret < 0){
351
      perror("gpgme_data_read");
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
352
      plaintext_length = -1;
353
      goto decrypt_end;
13 by Björn Påhlsson
Added following support:
354
    }
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
355
    plaintext_length += ret;
13 by Björn Påhlsson
Added following support:
356
  }
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
357
  
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
358
  if(debug){
359
    fprintf(stderr, "Decrypted password is: ");
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
360
    for(ssize_t i = 0; i < plaintext_length; i++){
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
361
      fprintf(stderr, "%02hhX ", (*plaintext)[i]);
362
    }
363
    fprintf(stderr, "\n");
364
  }
365
  
366
 decrypt_end:
367
  
368
  /* Delete the GPGME cryptotext data buffer */
369
  gpgme_data_release(dh_crypto);
15.1.3 by Björn Påhlsson
Added getopt_long support for mandosclient and passprompt
370
  
371
  /* Delete the GPGME plaintext data buffer */
13 by Björn Påhlsson
Added following support:
372
  gpgme_data_release(dh_plain);
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
373
  return plaintext_length;
13 by Björn Påhlsson
Added following support:
374
}
375
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
376
static const char * safer_gnutls_strerror(int value){
267 by Teddy Hogeborn
* plugins.d/mandos-client.c: Only comment changes.
377
  const char *ret = gnutls_strerror(value); /* Spurious warning from
378
					       -Wunreachable-code */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
379
  if(ret == NULL)
13 by Björn Påhlsson
Added following support:
380
    ret = "(unknown)";
381
  return ret;
382
}
383
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
384
/* GnuTLS log function callback */
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
385
static void debuggnutls(__attribute__((unused)) int level,
386
			const char* string){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
387
  fprintf(stderr, "GnuTLS: %s", string);
13 by Björn Påhlsson
Added following support:
388
}
389
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
390
static int init_gnutls_global(const char *pubkeyfilename,
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
391
			      const char *seckeyfilename){
13 by Björn Påhlsson
Added following support:
392
  int ret;
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
393
  
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
394
  if(debug){
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
395
    fprintf(stderr, "Initializing GnuTLS\n");
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
396
  }
24.1.29 by Björn Påhlsson
Added more header file comments
397
  
398
  ret = gnutls_global_init();
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
399
  if(ret != GNUTLS_E_SUCCESS){
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
400
    fprintf(stderr, "GnuTLS global_init: %s\n",
401
	    safer_gnutls_strerror(ret));
13 by Björn Påhlsson
Added following support:
402
    return -1;
403
  }
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
404
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
405
  if(debug){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
406
    /* "Use a log level over 10 to enable all debugging options."
407
     * - GnuTLS manual
408
     */
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
409
    gnutls_global_set_log_level(11);
410
    gnutls_global_set_log_function(debuggnutls);
411
  }
412
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
413
  /* OpenPGP credentials */
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
414
  gnutls_certificate_allocate_credentials(&mc.cred);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
415
  if(ret != GNUTLS_E_SUCCESS){
267 by Teddy Hogeborn
* plugins.d/mandos-client.c: Only comment changes.
416
    fprintf(stderr, "GnuTLS memory error: %s\n", /* Spurious warning
304 by Teddy Hogeborn
Four new interrelated features:
417
						    from
418
						    -Wunreachable-code
419
						 */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
420
	    safer_gnutls_strerror(ret));
421
    gnutls_global_deinit();
13 by Björn Påhlsson
Added following support:
422
    return -1;
423
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
424
  
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
425
  if(debug){
147 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Improved wording
426
    fprintf(stderr, "Attempting to use OpenPGP public key %s and"
427
	    " secret key %s as GnuTLS credentials\n", pubkeyfilename,
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
428
	    seckeyfilename);
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
429
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
430
  
13 by Björn Påhlsson
Added following support:
431
  ret = gnutls_certificate_set_openpgp_key_file
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
432
    (mc.cred, pubkeyfilename, seckeyfilename,
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
433
     GNUTLS_OPENPGP_FMT_BASE64);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
434
  if(ret != GNUTLS_E_SUCCESS){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
435
    fprintf(stderr,
436
	    "Error[%d] while reading the OpenPGP key pair ('%s',"
76 by Teddy Hogeborn
* plugins.d/password-request.c (init_gnutls_global): Renamed
437
	    " '%s')\n", ret, pubkeyfilename, seckeyfilename);
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
438
    fprintf(stderr, "The GnuTLS error is: %s\n",
13 by Björn Påhlsson
Added following support:
439
	    safer_gnutls_strerror(ret));
24.1.20 by Björn Påhlsson
mandosclient
440
    goto globalfail;
13 by Björn Påhlsson
Added following support:
441
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
442
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
443
  /* GnuTLS server initialization */
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
444
  ret = gnutls_dh_params_init(&mc.dh_params);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
445
  if(ret != GNUTLS_E_SUCCESS){
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
446
    fprintf(stderr, "Error in GnuTLS DH parameter initialization:"
447
	    " %s\n", safer_gnutls_strerror(ret));
24.1.20 by Björn Påhlsson
mandosclient
448
    goto globalfail;
13 by Björn Påhlsson
Added following support:
449
  }
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
450
  ret = gnutls_dh_params_generate2(mc.dh_params, mc.dh_bits);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
451
  if(ret != GNUTLS_E_SUCCESS){
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
452
    fprintf(stderr, "Error in GnuTLS prime generation: %s\n",
453
	    safer_gnutls_strerror(ret));
24.1.20 by Björn Påhlsson
mandosclient
454
    goto globalfail;
13 by Björn Påhlsson
Added following support:
455
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
456
  
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
457
  gnutls_certificate_set_dh_params(mc.cred, mc.dh_params);
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
458
  
24.1.13 by Björn Påhlsson
mandosclient
459
  return 0;
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
460
  
24.1.20 by Björn Påhlsson
mandosclient
461
 globalfail:
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
462
  
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
463
  gnutls_certificate_free_credentials(mc.cred);
24.1.26 by Björn Påhlsson
tally count of used symbols
464
  gnutls_global_deinit();
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
465
  gnutls_dh_params_deinit(mc.dh_params);
24.1.20 by Björn Påhlsson
mandosclient
466
  return -1;
24.1.13 by Björn Påhlsson
mandosclient
467
}
468
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
469
static int init_gnutls_session(gnutls_session_t *session){
24.1.13 by Björn Påhlsson
mandosclient
470
  int ret;
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
471
  /* GnuTLS session creation */
472
  ret = gnutls_init(session, GNUTLS_SERVER);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
473
  if(ret != GNUTLS_E_SUCCESS){
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
474
    fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
13 by Björn Påhlsson
Added following support:
475
	    safer_gnutls_strerror(ret));
476
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
477
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
478
  {
479
    const char *err;
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
480
    ret = gnutls_priority_set_direct(*session, mc.priority, &err);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
481
    if(ret != GNUTLS_E_SUCCESS){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
482
      fprintf(stderr, "Syntax error at: %s\n", err);
483
      fprintf(stderr, "GnuTLS error: %s\n",
484
	      safer_gnutls_strerror(ret));
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
485
      gnutls_deinit(*session);
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
486
      return -1;
487
    }
13 by Björn Påhlsson
Added following support:
488
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
489
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
490
  ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
491
			       mc.cred);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
492
  if(ret != GNUTLS_E_SUCCESS){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
493
    fprintf(stderr, "Error setting GnuTLS credentials: %s\n",
13 by Björn Påhlsson
Added following support:
494
	    safer_gnutls_strerror(ret));
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
495
    gnutls_deinit(*session);
13 by Björn Påhlsson
Added following support:
496
    return -1;
497
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
498
  
13 by Björn Påhlsson
Added following support:
499
  /* ignore client certificate if any. */
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
500
  gnutls_certificate_server_set_request(*session,
501
					GNUTLS_CERT_IGNORE);
13 by Björn Påhlsson
Added following support:
502
  
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
503
  gnutls_dh_set_prime_bits(*session, mc.dh_bits);
13 by Björn Påhlsson
Added following support:
504
  
505
  return 0;
506
}
507
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
508
/* Avahi log function callback */
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
509
static void empty_log(__attribute__((unused)) AvahiLogLevel level,
510
		      __attribute__((unused)) const char *txt){}
13 by Björn Påhlsson
Added following support:
511
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
512
/* Called when a Mandos server is found */
36 by Teddy Hogeborn
* TODO: Converted to org-mode style
513
static int start_mandos_communication(const char *ip, uint16_t port,
24.1.9 by Björn Påhlsson
not working midwork...
514
				      AvahiIfIndex if_index,
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
515
				      int af){
13 by Björn Påhlsson
Added following support:
516
  int ret, tcp_sd;
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
517
  ssize_t sret;
304 by Teddy Hogeborn
Four new interrelated features:
518
  union {
519
    struct sockaddr_in in;
520
    struct sockaddr_in6 in6;
521
  } to;
13 by Björn Påhlsson
Added following support:
522
  char *buffer = NULL;
523
  char *decrypted_buffer;
524
  size_t buffer_length = 0;
525
  size_t buffer_capacity = 0;
526
  ssize_t decrypted_buffer_size;
24.1.10 by Björn Påhlsson
merge commit
527
  size_t written;
13 by Björn Påhlsson
Added following support:
528
  int retval = 0;
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
529
  gnutls_session_t session;
304 by Teddy Hogeborn
Four new interrelated features:
530
  int pf;			/* Protocol family */
531
  
532
  switch(af){
533
  case AF_INET6:
534
    pf = PF_INET6;
535
    break;
536
  case AF_INET:
537
    pf = PF_INET;
538
    break;
539
  default:
540
    fprintf(stderr, "Bad address family: %d\n", af);
541
    return -1;
542
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
543
  
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
544
  ret = init_gnutls_session(&session);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
545
  if(ret != 0){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
546
    return -1;
547
  }
548
  
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
549
  if(debug){
304 by Teddy Hogeborn
Four new interrelated features:
550
    fprintf(stderr, "Setting up a TCP connection to %s, port %" PRIu16
60 by Teddy Hogeborn
* mandos-client.c (main): Cast pid_t to unsigned int before printing.
551
	    "\n", ip, port);
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
552
  }
13 by Björn Påhlsson
Added following support:
553
  
304 by Teddy Hogeborn
Four new interrelated features:
554
  tcp_sd = socket(pf, SOCK_STREAM, 0);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
555
  if(tcp_sd < 0){
13 by Björn Påhlsson
Added following support:
556
    perror("socket");
557
    return -1;
558
  }
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
559
  
84 by Teddy Hogeborn
* Makefile (DOCBOOKTOMAN): Use the local manpages/docbook.xsl file, do
560
  memset(&to, 0, sizeof(to));
304 by Teddy Hogeborn
Four new interrelated features:
561
  if(af == AF_INET6){
562
    to.in6.sin6_family = (uint16_t)af;
563
    ret = inet_pton(af, ip, &to.in6.sin6_addr);
564
  } else {			/* IPv4 */
565
    to.in.sin_family = (sa_family_t)af;
566
    ret = inet_pton(af, ip, &to.in.sin_addr);
567
  }
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
568
  if(ret < 0 ){
13 by Björn Påhlsson
Added following support:
569
    perror("inet_pton");
570
    return -1;
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
571
  }
13 by Björn Påhlsson
Added following support:
572
  if(ret == 0){
573
    fprintf(stderr, "Bad address: %s\n", ip);
574
    return -1;
575
  }
304 by Teddy Hogeborn
Four new interrelated features:
576
  if(af == AF_INET6){
577
    to.in6.sin6_port = htons(port); /* Spurious warnings from
578
				       -Wconversion and
579
				       -Wunreachable-code */
580
    
581
    if(IN6_IS_ADDR_LINKLOCAL /* Spurious warnings from */
582
       (&to.in6.sin6_addr)){ /* -Wstrict-aliasing=2 or lower and
583
			      -Wunreachable-code*/
584
      if(if_index == AVAHI_IF_UNSPEC){
585
	fprintf(stderr, "An IPv6 link-local address is incomplete"
586
		" without a network interface\n");
587
	return -1;
588
      }
589
      /* Set the network interface number as scope */
590
      to.in6.sin6_scope_id = (uint32_t)if_index;
591
    }
592
  } else {
593
    to.in.sin_port = htons(port); /* Spurious warnings from
267 by Teddy Hogeborn
* plugins.d/mandos-client.c: Only comment changes.
594
				     -Wconversion and
595
				     -Wunreachable-code */
304 by Teddy Hogeborn
Four new interrelated features:
596
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
597
  
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
598
  if(debug){
304 by Teddy Hogeborn
Four new interrelated features:
599
    if(af == AF_INET6 and if_index != AVAHI_IF_UNSPEC){
600
      char interface[IF_NAMESIZE];
601
      if(if_indextoname((unsigned int)if_index, interface) == NULL){
602
	perror("if_indextoname");
603
      } else {
604
	fprintf(stderr, "Connection to: %s%%%s, port %" PRIu16 "\n",
605
		ip, interface, port);
606
      }
607
    } else {
608
      fprintf(stderr, "Connection to: %s, port %" PRIu16 "\n", ip,
609
	      port);
610
    }
611
    char addrstr[(INET_ADDRSTRLEN > INET6_ADDRSTRLEN) ?
612
		 INET_ADDRSTRLEN : INET6_ADDRSTRLEN] = "";
613
    const char *pcret;
614
    if(af == AF_INET6){
615
      pcret = inet_ntop(af, &(to.in6.sin6_addr), addrstr,
616
			sizeof(addrstr));
617
    } else {
618
      pcret = inet_ntop(af, &(to.in.sin_addr), addrstr,
619
			sizeof(addrstr));
620
    }
621
    if(pcret == NULL){
37 by Teddy Hogeborn
Non-tested commit for merge purposes.
622
      perror("inet_ntop");
623
    } else {
624
      if(strcmp(addrstr, ip) != 0){
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
625
	fprintf(stderr, "Canonical address form: %s\n", addrstr);
37 by Teddy Hogeborn
Non-tested commit for merge purposes.
626
      }
627
    }
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
628
  }
13 by Björn Påhlsson
Added following support:
629
  
304 by Teddy Hogeborn
Four new interrelated features:
630
  if(af == AF_INET6){
631
    ret = connect(tcp_sd, &to.in6, sizeof(to));
632
  } else {
633
    ret = connect(tcp_sd, &to.in, sizeof(to)); /* IPv4 */
634
  }
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
635
  if(ret < 0){
13 by Björn Påhlsson
Added following support:
636
    perror("connect");
637
    return -1;
638
  }
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
639
  
24.1.12 by Björn Påhlsson
merge +
640
  const char *out = mandos_protocol_version;
24.1.10 by Björn Påhlsson
merge commit
641
  written = 0;
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
642
  while(true){
24.1.10 by Björn Påhlsson
merge commit
643
    size_t out_size = strlen(out);
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
644
    ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
24.1.10 by Björn Påhlsson
merge commit
645
				   out_size - written));
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
646
    if(ret == -1){
24.1.10 by Björn Påhlsson
merge commit
647
      perror("write");
648
      retval = -1;
24.1.12 by Björn Påhlsson
merge +
649
      goto mandos_end;
24.1.10 by Björn Påhlsson
merge commit
650
    }
24.1.12 by Björn Påhlsson
merge +
651
    written += (size_t)ret;
24.1.10 by Björn Påhlsson
merge commit
652
    if(written < out_size){
653
      continue;
654
    } else {
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
655
      if(out == mandos_protocol_version){
24.1.10 by Björn Påhlsson
merge commit
656
	written = 0;
657
	out = "\r\n";
658
      } else {
659
	break;
660
      }
661
    }
662
  }
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
663
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
664
  if(debug){
665
    fprintf(stderr, "Establishing TLS session with %s\n", ip);
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
666
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
667
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
668
  gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
669
  
24.1.29 by Björn Påhlsson
Added more header file comments
670
  do{
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
671
    ret = gnutls_handshake(session);
24.1.29 by Björn Påhlsson
Added more header file comments
672
  } while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
13 by Björn Påhlsson
Added following support:
673
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
674
  if(ret != GNUTLS_E_SUCCESS){
25 by Teddy Hogeborn
* mandos-clients.conf ([DEFAULT]): New section.
675
    if(debug){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
676
      fprintf(stderr, "*** GnuTLS Handshake failed ***\n");
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
677
      gnutls_perror(ret);
25 by Teddy Hogeborn
* mandos-clients.conf ([DEFAULT]): New section.
678
    }
13 by Björn Påhlsson
Added following support:
679
    retval = -1;
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
680
    goto mandos_end;
13 by Björn Påhlsson
Added following support:
681
  }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
682
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
683
  /* Read OpenPGP packet that contains the wanted password */
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
684
  
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
685
  if(debug){
304 by Teddy Hogeborn
Four new interrelated features:
686
    fprintf(stderr, "Retrieving OpenPGP encrypted password from %s\n",
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
687
	    ip);
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
688
  }
143 by Teddy Hogeborn
* Makefile (mandos.8): Add dependency on "overview.xml" and
689
  
13 by Björn Påhlsson
Added following support:
690
  while(true){
24.1.132 by Björn Påhlsson
Fixed a bug in fallback handling
691
    buffer_capacity = incbuffer(&buffer, buffer_length,
42 by Teddy Hogeborn
* plugins.d/mandosclient.c (start_mandos_communication): Change "to"
692
				   buffer_capacity);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
693
    if(buffer_capacity == 0){
24.1.132 by Björn Påhlsson
Fixed a bug in fallback handling
694
      perror("incbuffer");
24.1.10 by Björn Påhlsson
merge commit
695
      retval = -1;
24.1.12 by Björn Påhlsson
merge +
696
      goto mandos_end;
13 by Björn Påhlsson
Added following support:
697
    }
698
    
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
699
    sret = gnutls_record_recv(session, buffer+buffer_length,
700
			      BUFFER_SIZE);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
701
    if(sret == 0){
13 by Björn Påhlsson
Added following support:
702
      break;
703
    }
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
704
    if(sret < 0){
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
705
      switch(sret){
13 by Björn Påhlsson
Added following support:
706
      case GNUTLS_E_INTERRUPTED:
707
      case GNUTLS_E_AGAIN:
708
	break;
709
      case GNUTLS_E_REHANDSHAKE:
24.1.29 by Björn Påhlsson
Added more header file comments
710
	do{
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
711
	  ret = gnutls_handshake(session);
24.1.29 by Björn Påhlsson
Added more header file comments
712
	} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
713
	if(ret < 0){
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
714
	  fprintf(stderr, "*** GnuTLS Re-handshake failed ***\n");
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
715
	  gnutls_perror(ret);
13 by Björn Påhlsson
Added following support:
716
	  retval = -1;
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
717
	  goto mandos_end;
13 by Björn Påhlsson
Added following support:
718
	}
719
	break;
720
      default:
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
721
	fprintf(stderr, "Unknown error while reading data from"
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
722
		" encrypted session with Mandos server\n");
13 by Björn Påhlsson
Added following support:
723
	retval = -1;
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
724
	gnutls_bye(session, GNUTLS_SHUT_RDWR);
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
725
	goto mandos_end;
13 by Björn Påhlsson
Added following support:
726
      }
727
    } else {
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
728
      buffer_length += (size_t) sret;
13 by Björn Påhlsson
Added following support:
729
    }
730
  }
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
731
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
732
  if(debug){
733
    fprintf(stderr, "Closing TLS session\n");
734
  }
735
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
736
  gnutls_bye(session, GNUTLS_SHUT_RDWR);
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
737
  
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
738
  if(buffer_length > 0){
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
739
    decrypted_buffer_size = pgp_packet_decrypt(buffer,
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
740
					       buffer_length,
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
741
					       &decrypted_buffer);
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
742
    if(decrypted_buffer_size >= 0){
24.1.10 by Björn Påhlsson
merge commit
743
      written = 0;
28 by Teddy Hogeborn
* server.conf: New file.
744
      while(written < (size_t) decrypted_buffer_size){
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
745
	ret = (int)fwrite(decrypted_buffer + written, 1,
746
			  (size_t)decrypted_buffer_size - written,
747
			  stdout);
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
748
	if(ret == 0 and ferror(stdout)){
749
	  if(debug){
750
	    fprintf(stderr, "Error writing encrypted data: %s\n",
751
		    strerror(errno));
752
	  }
753
	  retval = -1;
754
	  break;
755
	}
22 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Cast "0" argument to
756
	written += (size_t)ret;
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
757
      }
13 by Björn Påhlsson
Added following support:
758
      free(decrypted_buffer);
15.1.1 by Björn Påhlsson
Added debugg support in form off --debug and --debug=mandosclient
759
    } else {
760
      retval = -1;
13 by Björn Påhlsson
Added following support:
761
    }
24.1.63 by Björn Påhlsson
merge + fallback bugg
762
  } else {
763
    retval = -1;
13 by Björn Påhlsson
Added following support:
764
  }
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
765
  
766
  /* Shutdown procedure */
767
  
768
 mandos_end:
13 by Björn Påhlsson
Added following support:
769
  free(buffer);
257.1.2 by Mooie
Fixed warnings in the 64 bit build. Added explicit cast to int for
770
  ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
24.1.81 by Björn Påhlsson
removed keyring pre-requirement for starting password-request.
771
  if(ret == -1){
772
    perror("close");
773
  }
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
774
  gnutls_deinit(session);
13 by Björn Påhlsson
Added following support:
775
  return retval;
776
}
777
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
778
static void resolve_callback(AvahiSServiceResolver *r,
779
			     AvahiIfIndex interface,
304 by Teddy Hogeborn
Four new interrelated features:
780
			     AvahiProtocol proto,
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
781
			     AvahiResolverEvent event,
782
			     const char *name,
783
			     const char *type,
784
			     const char *domain,
785
			     const char *host_name,
786
			     const AvahiAddress *address,
787
			     uint16_t port,
788
			     AVAHI_GCC_UNUSED AvahiStringList *txt,
789
			     AVAHI_GCC_UNUSED AvahiLookupResultFlags
790
			     flags,
307 by Teddy Hogeborn
Merge from Björn:
791
			     AVAHI_GCC_UNUSED void* userdata){
84 by Teddy Hogeborn
* Makefile (DOCBOOKTOMAN): Use the local manpages/docbook.xsl file, do
792
  assert(r);
22 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Cast "0" argument to
793
  
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
794
  /* Called whenever a service has been resolved successfully or
795
     timed out */
22 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Cast "0" argument to
796
  
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
797
  switch(event){
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
798
  default:
799
  case AVAHI_RESOLVER_FAILURE:
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
800
    fprintf(stderr, "(Avahi Resolver) Failed to resolve service '%s'"
801
	    " of type '%s' in domain '%s': %s\n", name, type, domain,
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
802
	    avahi_strerror(avahi_server_errno(mc.server)));
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
803
    break;
22 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Cast "0" argument to
804
    
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
805
  case AVAHI_RESOLVER_FOUND:
806
    {
807
      char ip[AVAHI_ADDRESS_STR_MAX];
808
      avahi_address_snprint(ip, sizeof(ip), address);
809
      if(debug){
60 by Teddy Hogeborn
* mandos-client.c (main): Cast pid_t to unsigned int before printing.
810
	fprintf(stderr, "Mandos server \"%s\" found on %s (%s, %"
268 by Teddy Hogeborn
Fixes for sscanf usage:
811
		PRIdMAX ") on port %" PRIu16 "\n", name, host_name,
812
		ip, (intmax_t)interface, port);
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
813
      }
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
814
      int ret = start_mandos_communication(ip, port, interface,
304 by Teddy Hogeborn
Four new interrelated features:
815
					   avahi_proto_to_af(proto));
266 by Teddy Hogeborn
* plugin-runner.c: Only space changes.
816
      if(ret == 0){
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
817
	avahi_simple_poll_quit(mc.simple_poll);
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
818
      }
13 by Björn Påhlsson
Added following support:
819
    }
21 by Teddy Hogeborn
* Makefile (CFLAGS): Changed to use $(WARN), $(DEBUG), $(COVERAGE) and
820
  }
821
  avahi_s_service_resolver_free(r);
13 by Björn Påhlsson
Added following support:
822
}
823
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
824
static void browse_callback(AvahiSServiceBrowser *b,
825
			    AvahiIfIndex interface,
826
			    AvahiProtocol protocol,
827
			    AvahiBrowserEvent event,
828
			    const char *name,
829
			    const char *type,
830
			    const char *domain,
831
			    AVAHI_GCC_UNUSED AvahiLookupResultFlags
832
			    flags,
307 by Teddy Hogeborn
Merge from Björn:
833
			    AVAHI_GCC_UNUSED void* userdata){
84 by Teddy Hogeborn
* Makefile (DOCBOOKTOMAN): Use the local manpages/docbook.xsl file, do
834
  assert(b);
24.1.9 by Björn Påhlsson
not working midwork...
835
  
836
  /* Called whenever a new services becomes available on the LAN or
837
     is removed from the LAN */
838
  
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
839
  switch(event){
24.1.9 by Björn Påhlsson
not working midwork...
840
  default:
841
  case AVAHI_BROWSER_FAILURE:
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
842
    
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
843
    fprintf(stderr, "(Avahi browser) %s\n",
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
844
	    avahi_strerror(avahi_server_errno(mc.server)));
845
    avahi_simple_poll_quit(mc.simple_poll);
24.1.9 by Björn Påhlsson
not working midwork...
846
    return;
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
847
    
24.1.9 by Björn Påhlsson
not working midwork...
848
  case AVAHI_BROWSER_NEW:
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
849
    /* We ignore the returned Avahi resolver object. In the callback
850
       function we free it. If the Avahi server is terminated before
851
       the callback function is called the Avahi server will free the
852
       resolver for us. */
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
853
    
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
854
    if(!(avahi_s_service_resolver_new(mc.server, interface,
39 by Teddy Hogeborn
* plugins.d/mandosclient.c (pgp_packet_decrypt): Renamed variables.
855
				       protocol, name, type, domain,
24.1.9 by Björn Påhlsson
not working midwork...
856
				       AVAHI_PROTO_INET6, 0,
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
857
				       resolve_callback, NULL)))
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
858
      fprintf(stderr, "Avahi: Failed to resolve service '%s': %s\n",
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
859
	      name, avahi_strerror(avahi_server_errno(mc.server)));
24.1.9 by Björn Påhlsson
not working midwork...
860
    break;
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
861
    
24.1.9 by Björn Påhlsson
not working midwork...
862
  case AVAHI_BROWSER_REMOVE:
863
    break;
38 by Teddy Hogeborn
* plugbasedclient.c (main): New "--userid" and "--groupid" options.
864
    
24.1.9 by Björn Påhlsson
not working midwork...
865
  case AVAHI_BROWSER_ALL_FOR_NOW:
866
  case AVAHI_BROWSER_CACHE_EXHAUSTED:
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
867
    if(debug){
868
      fprintf(stderr, "No Mandos server found, still searching...\n");
869
    }
24.1.9 by Björn Påhlsson
not working midwork...
870
    break;
871
  }
13 by Björn Påhlsson
Added following support:
872
}
873
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
874
static void handle_sigterm(__attribute__((unused)) int sig){
875
  int old_errno = errno;
876
  avahi_simple_poll_quit(mc.simple_poll);
877
  errno = old_errno;
878
}
879
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
880
int main(int argc, char *argv[]){
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
881
  AvahiSServiceBrowser *sb = NULL;
882
  int error;
883
  int ret;
884
  intmax_t tmpmax;
885
  int numchars;
886
  int exitcode = EXIT_SUCCESS;
887
  const char *interface = "eth0";
888
  struct ifreq network;
889
  int sd;
890
  uid_t uid;
891
  gid_t gid;
892
  char *connect_to = NULL;
893
  char tempdir[] = "/tmp/mandosXXXXXX";
894
  bool tempdir_created = false;
895
  AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
896
  const char *seckey = PATHDIR "/" SECKEY;
897
  const char *pubkey = PATHDIR "/" PUBKEY;
898
  
307 by Teddy Hogeborn
Merge from Björn:
899
  /* Initialize Mandos context */
900
  mc = (mandos_context){ .simple_poll = NULL, .server = NULL,
901
			 .dh_bits = 1024, .priority = "SECURE256"
902
			 ":!CTYPE-X.509:+CTYPE-OPENPGP" };
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
903
  bool gnutls_initialized = false;
904
  bool gpgme_initialized = false;
905
  double delay = 2.5;
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
906
907
  struct sigaction old_sigterm_action;
908
  struct sigaction sigterm_action = { .sa_handler = handle_sigterm };
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
909
  
910
  {
911
    struct argp_option options[] = {
912
      { .name = "debug", .key = 128,
913
	.doc = "Debug mode", .group = 3 },
914
      { .name = "connect", .key = 'c',
915
	.arg = "ADDRESS:PORT",
916
	.doc = "Connect directly to a specific Mandos server",
917
	.group = 1 },
918
      { .name = "interface", .key = 'i',
919
	.arg = "NAME",
304 by Teddy Hogeborn
Four new interrelated features:
920
	.doc = "Network interface that will be used to search for"
921
	" Mandos servers",
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
922
	.group = 1 },
923
      { .name = "seckey", .key = 's',
924
	.arg = "FILE",
925
	.doc = "OpenPGP secret key file base name",
926
	.group = 1 },
927
      { .name = "pubkey", .key = 'p',
928
	.arg = "FILE",
929
	.doc = "OpenPGP public key file base name",
930
	.group = 2 },
931
      { .name = "dh-bits", .key = 129,
932
	.arg = "BITS",
933
	.doc = "Bit length of the prime number used in the"
934
	" Diffie-Hellman key exchange",
935
	.group = 2 },
936
      { .name = "priority", .key = 130,
937
	.arg = "STRING",
938
	.doc = "GnuTLS priority string for the TLS handshake",
939
	.group = 1 },
940
      { .name = "delay", .key = 131,
941
	.arg = "SECONDS",
942
	.doc = "Maximum delay to wait for interface startup",
943
	.group = 2 },
944
      { .name = NULL }
945
    };
946
    
947
    error_t parse_opt(int key, char *arg,
948
		      struct argp_state *state){
949
      switch(key){
950
      case 128:			/* --debug */
951
	debug = true;
952
	break;
953
      case 'c':			/* --connect */
954
	connect_to = arg;
955
	break;
956
      case 'i':			/* --interface */
957
	interface = arg;
958
	break;
959
      case 's':			/* --seckey */
960
	seckey = arg;
961
	break;
962
      case 'p':			/* --pubkey */
963
	pubkey = arg;
964
	break;
965
      case 129:			/* --dh-bits */
966
	ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
967
	if(ret < 1 or tmpmax != (typeof(mc.dh_bits))tmpmax
968
	   or arg[numchars] != '\0'){
969
	  fprintf(stderr, "Bad number of DH bits\n");
970
	  exit(EXIT_FAILURE);
971
	}
972
	mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
973
	break;
974
      case 130:			/* --priority */
975
	mc.priority = arg;
976
	break;
977
      case 131:			/* --delay */
978
	ret = sscanf(arg, "%lf%n", &delay, &numchars);
979
	if(ret < 1 or arg[numchars] != '\0'){
980
	  fprintf(stderr, "Bad delay\n");
981
	  exit(EXIT_FAILURE);
982
	}
983
	break;
984
      case ARGP_KEY_ARG:
985
	argp_usage(state);
986
      case ARGP_KEY_END:
987
	break;
988
      default:
989
	return ARGP_ERR_UNKNOWN;
990
      }
991
      return 0;
992
    }
993
    
994
    struct argp argp = { .options = options, .parser = parse_opt,
995
			 .args_doc = "",
996
			 .doc = "Mandos client -- Get and decrypt"
997
			 " passwords from a Mandos server" };
998
    ret = argp_parse(&argp, argc, argv, 0, 0, NULL);
999
    if(ret == ARGP_ERR_UNKNOWN){
1000
      fprintf(stderr, "Unknown error while parsing arguments\n");
1001
      exitcode = EXIT_FAILURE;
1002
      goto end;
1003
    }
1004
  }
1005
  
1006
  /* If the interface is down, bring it up */
304 by Teddy Hogeborn
Four new interrelated features:
1007
  if(interface[0] != '\0'){
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1008
#ifdef __linux__
1009
    /* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
1010
       messages to mess up the prompt */
1011
    ret = klogctl(8, NULL, 5);
304 by Teddy Hogeborn
Four new interrelated features:
1012
    bool restore_loglevel = true;
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1013
    if(ret == -1){
304 by Teddy Hogeborn
Four new interrelated features:
1014
      restore_loglevel = false;
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1015
      perror("klogctl");
1016
    }
1017
#endif
1018
    
1019
    sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
1020
    if(sd < 0){
1021
      perror("socket");
1022
      exitcode = EXIT_FAILURE;
1023
#ifdef __linux__
304 by Teddy Hogeborn
Four new interrelated features:
1024
      if(restore_loglevel){
1025
	ret = klogctl(7, NULL, 0);
1026
	if(ret == -1){
1027
	  perror("klogctl");
1028
	}
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1029
      }
1030
#endif
1031
      goto end;
1032
    }
1033
    strcpy(network.ifr_name, interface);
1034
    ret = ioctl(sd, SIOCGIFFLAGS, &network);
1035
    if(ret == -1){
1036
      perror("ioctl SIOCGIFFLAGS");
1037
#ifdef __linux__
304 by Teddy Hogeborn
Four new interrelated features:
1038
      if(restore_loglevel){
1039
	ret = klogctl(7, NULL, 0);
1040
	if(ret == -1){
1041
	  perror("klogctl");
1042
	}
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1043
      }
1044
#endif
1045
      exitcode = EXIT_FAILURE;
1046
      goto end;
1047
    }
1048
    if((network.ifr_flags & IFF_UP) == 0){
1049
      network.ifr_flags |= IFF_UP;
1050
      ret = ioctl(sd, SIOCSIFFLAGS, &network);
1051
      if(ret == -1){
1052
	perror("ioctl SIOCSIFFLAGS");
1053
	exitcode = EXIT_FAILURE;
1054
#ifdef __linux__
304 by Teddy Hogeborn
Four new interrelated features:
1055
	if(restore_loglevel){
1056
	  ret = klogctl(7, NULL, 0);
1057
	  if(ret == -1){
1058
	    perror("klogctl");
1059
	  }
24.1.124 by Björn Påhlsson
Added lower kernel loglevel to reduce clutter on system console.
1060
	}
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1061
#endif
65 by Teddy Hogeborn
* plugins.d/password-request.c (main): Bug fix: Bring up network
1062
	goto end;
1063
      }
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1064
    }
1065
    /* sleep checking until interface is running */
1066
    for(int i=0; i < delay * 4; i++){
65 by Teddy Hogeborn
* plugins.d/password-request.c (main): Bug fix: Bring up network
1067
      ret = ioctl(sd, SIOCGIFFLAGS, &network);
1068
      if(ret == -1){
1069
	perror("ioctl SIOCGIFFLAGS");
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1070
      } else if(network.ifr_flags & IFF_RUNNING){
1071
	break;
1072
      }
1073
      struct timespec sleeptime = { .tv_nsec = 250000000 };
1074
      ret = nanosleep(&sleeptime, NULL);
1075
      if(ret == -1 and errno != EINTR){
1076
	perror("nanosleep");
1077
      }
1078
    }
1079
    ret = (int)TEMP_FAILURE_RETRY(close(sd));
1080
    if(ret == -1){
1081
      perror("close");
1082
    }
1083
#ifdef __linux__
304 by Teddy Hogeborn
Four new interrelated features:
1084
    if(restore_loglevel){
1085
      /* Restores kernel loglevel to default */
1086
      ret = klogctl(7, NULL, 0);
1087
      if(ret == -1){
1088
	perror("klogctl");
1089
      }
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1090
    }
1091
#endif
1092
  }
1093
  
1094
  uid = getuid();
1095
  gid = getgid();
1096
  
304 by Teddy Hogeborn
Four new interrelated features:
1097
  errno = 0;
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1098
  setgid(gid);
1099
  if(ret == -1){
1100
    perror("setgid");
1101
  }
1102
  
1103
  ret = setuid(uid);
1104
  if(ret == -1){
1105
    perror("setuid");
1106
  }
1107
  
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
1108
  ret = init_gnutls_global(pubkey, seckey);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1109
  if(ret == -1){
1110
    fprintf(stderr, "init_gnutls_global failed\n");
1111
    exitcode = EXIT_FAILURE;
1112
    goto end;
1113
  } else {
1114
    gnutls_initialized = true;
1115
  }
1116
  
1117
  if(mkdtemp(tempdir) == NULL){
1118
    perror("mkdtemp");
1119
    goto end;
1120
  }
1121
  tempdir_created = true;
1122
  
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
1123
  if(not init_gpgme(pubkey, seckey, tempdir)){
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1124
    fprintf(stderr, "init_gpgme failed\n");
1125
    exitcode = EXIT_FAILURE;
1126
    goto end;
1127
  } else {
1128
    gpgme_initialized = true;
1129
  }
1130
  
304 by Teddy Hogeborn
Four new interrelated features:
1131
  if(interface[0] != '\0'){
1132
    if_index = (AvahiIfIndex) if_nametoindex(interface);
1133
    if(if_index == 0){
1134
      fprintf(stderr, "No such interface: \"%s\"\n", interface);
1135
      exitcode = EXIT_FAILURE;
1136
      goto end;
1137
    }
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1138
  }
1139
  
1140
  if(connect_to != NULL){
1141
    /* Connect directly, do not use Zeroconf */
1142
    /* (Mainly meant for debugging) */
1143
    char *address = strrchr(connect_to, ':');
1144
    if(address == NULL){
1145
      fprintf(stderr, "No colon in address\n");
1146
      exitcode = EXIT_FAILURE;
1147
      goto end;
1148
    }
1149
    uint16_t port;
1150
    ret = sscanf(address+1, "%" SCNdMAX "%n", &tmpmax, &numchars);
1151
    if(ret < 1 or tmpmax != (uint16_t)tmpmax
1152
       or address[numchars+1] != '\0'){
1153
      fprintf(stderr, "Bad port number\n");
1154
      exitcode = EXIT_FAILURE;
1155
      goto end;
1156
    }
1157
    port = (uint16_t)tmpmax;
1158
    *address = '\0';
1159
    address = connect_to;
304 by Teddy Hogeborn
Four new interrelated features:
1160
    /* Colon in address indicates IPv6 */
1161
    int af;
1162
    if(strchr(address, ':') != NULL){
1163
      af = AF_INET6;
1164
    } else {
1165
      af = AF_INET;
1166
    }
307 by Teddy Hogeborn
Merge from Björn:
1167
    ret = start_mandos_communication(address, port, if_index, af);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1168
    if(ret < 0){
1169
      exitcode = EXIT_FAILURE;
1170
    } else {
1171
      exitcode = EXIT_SUCCESS;
1172
    }
1173
    goto end;
1174
  }
1175
  
1176
  if(not debug){
1177
    avahi_set_log_function(empty_log);
1178
  }
1179
  
1180
  /* Initialize the pseudo-RNG for Avahi */
1181
  srand((unsigned int) time(NULL));
1182
  
1183
  /* Allocate main Avahi loop object */
1184
  mc.simple_poll = avahi_simple_poll_new();
1185
  if(mc.simple_poll == NULL){
1186
    fprintf(stderr, "Avahi: Failed to create simple poll object.\n");
1187
    exitcode = EXIT_FAILURE;
1188
    goto end;
1189
  }
1190
  
1191
  {
1192
    AvahiServerConfig config;
1193
    /* Do not publish any local Zeroconf records */
1194
    avahi_server_config_init(&config);
1195
    config.publish_hinfo = 0;
1196
    config.publish_addresses = 0;
1197
    config.publish_workstation = 0;
1198
    config.publish_domain = 0;
1199
    
1200
    /* Allocate a new server */
1201
    mc.server = avahi_server_new(avahi_simple_poll_get
1202
				 (mc.simple_poll), &config, NULL,
1203
				 NULL, &error);
1204
    
1205
    /* Free the Avahi configuration data */
1206
    avahi_server_config_free(&config);
1207
  }
1208
  
1209
  /* Check if creating the Avahi server object succeeded */
1210
  if(mc.server == NULL){
1211
    fprintf(stderr, "Failed to create Avahi server: %s\n",
1212
	    avahi_strerror(error));
1213
    exitcode = EXIT_FAILURE;
1214
    goto end;
1215
  }
1216
  
1217
  /* Create the Avahi service browser */
1218
  sb = avahi_s_service_browser_new(mc.server, if_index,
1219
				   AVAHI_PROTO_INET6, "_mandos._tcp",
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
1220
				   NULL, 0, browse_callback, NULL);
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1221
  if(sb == NULL){
1222
    fprintf(stderr, "Failed to create service browser: %s\n",
1223
	    avahi_strerror(avahi_server_errno(mc.server)));
1224
    exitcode = EXIT_FAILURE;
1225
    goto end;
1226
  }
307 by Teddy Hogeborn
Merge from Björn:
1227
  
24.1.134 by Björn Påhlsson
plugin-runner: Added support for empty string arguments
1228
  sigemptyset(&sigterm_action.sa_mask);
1229
  ret = sigaddset(&sigterm_action.sa_mask, SIGTERM);
1230
  if(ret == -1){
1231
    perror("sigaddset");
1232
    exitcode = EXIT_FAILURE;
1233
    goto end;
1234
  }
1235
  ret = sigaction(SIGTERM, &sigterm_action, &old_sigterm_action);
1236
  if(ret == -1){
1237
    perror("sigaction");
1238
    exitcode = EXIT_FAILURE;
1239
    goto end;
1240
  }  
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1241
  
1242
  /* Run the main loop */
1243
  
1244
  if(debug){
1245
    fprintf(stderr, "Starting Avahi loop search\n");
1246
  }
1247
  
1248
  avahi_simple_poll_loop(mc.simple_poll);
1249
  
40 by Teddy Hogeborn
* plugins.d/mandosclient.c (initgnutls): Moved "err" variable into its
1250
 end:
293 by Teddy Hogeborn
* plugin-runner.c: Whitespace changes only.
1251
  
1252
  if(debug){
1253
    fprintf(stderr, "%s exiting\n", argv[0]);
1254
  }
1255
  
1256
  /* Cleanup things */
1257
  if(sb != NULL)
1258
    avahi_s_service_browser_free(sb);
1259
  
1260
  if(mc.server != NULL)
1261
    avahi_server_free(mc.server);
1262
  
1263
  if(mc.simple_poll != NULL)
1264
    avahi_simple_poll_free(mc.simple_poll);
1265
  
1266
  if(gnutls_initialized){
1267
    gnutls_certificate_free_credentials(mc.cred);
1268
    gnutls_global_deinit();
1269
    gnutls_dh_params_deinit(mc.dh_params);
1270
  }
1271
  
1272
  if(gpgme_initialized){
1273
    gpgme_release(mc.ctx);
1274
  }
1275
  
1276
  /* Removes the temp directory used by GPGME */
1277
  if(tempdir_created){
1278
    DIR *d;
1279
    struct dirent *direntry;
1280
    d = opendir(tempdir);
1281
    if(d == NULL){
1282
      if(errno != ENOENT){
1283
	perror("opendir");
1284
      }
1285
    } else {
1286
      while(true){
1287
	direntry = readdir(d);
1288
	if(direntry == NULL){
1289
	  break;
1290
	}
1291
	/* Skip "." and ".." */
1292
	if(direntry->d_name[0] == '.'
1293
	   and (direntry->d_name[1] == '\0'
1294
		or (direntry->d_name[1] == '.'
1295
		    and direntry->d_name[2] == '\0'))){
1296
	  continue;
1297
	}
1298
	char *fullname = NULL;
1299
	ret = asprintf(&fullname, "%s/%s", tempdir,
1300
		       direntry->d_name);
1301
	if(ret < 0){
1302
	  perror("asprintf");
1303
	  continue;
1304
	}
1305
	ret = remove(fullname);
1306
	if(ret == -1){
1307
	  fprintf(stderr, "remove(\"%s\"): %s\n", fullname,
1308
		  strerror(errno));
1309
	}
1310
	free(fullname);
1311
      }
1312
      closedir(d);
1313
    }
1314
    ret = rmdir(tempdir);
1315
    if(ret == -1 and errno != ENOENT){
1316
      perror("rmdir");
1317
    }
1318
  }
1319
  
1320
  return exitcode;
13 by Björn Påhlsson
Added following support:
1321
}