To get this branch, use:
bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk
« back to all changes in this revision
Viewing changes to plugins.d/password-request.c
- browse files at revision 24.1.81
- compare with another revision
- download diff
- download tarball
- view history from revision 24.1.81
- Committer: Björn Påhlsson
- Date: 2008-09-03 18:47:50 UTC
- mto: (24.1.154 mandos) (237.4.3 mandos-release)
- mto: This revision was merged to the branch mainline in revision 149.
- Revision ID: belorn@braxen-20080903184750-s0k0jrrq0lxiamwh
removed keyring pre-requirement for starting password-request.
Keys will now be imported in run-time to a run-time created keyring
Changed seckey and pubkey to be paths to private and public keys of the pgp encrypted password and gnutls authentication credentials.
Keys will now be imported in run-time to a run-time created keyring
Changed seckey and pubkey to be paths to private and public keys of the pgp encrypted password and gnutls authentication credentials.
- files added:
- plugins.d/usplash
- files removed:
- .bzr-builddeb
- debian
- debian/po
- files renamed:
- plugins.d/mandos-client.c => plugins.d/password-request.c
- plugins.d/mandos-client.xml => plugins.d/password-request.xml
- files modified:
- .bzrignore
added
removed
plugins.d/password-request.c
1
1
/* -*- coding: utf-8 -*- */
2
2
/*
3
* Mandos-client - get and decrypt data from a Mandos server
3
* Mandos client - get and decrypt data from a Mandos server
4
4
*
5
5
* This program is partly derived from an example program for an Avahi
6
6
* service browser, downloaded from
9
9
* "browse_callback", and parts of "main".
10
10
*
11
11
* Everything else is
12
* Copyright © 2008,2009 Teddy Hogeborn
13
* Copyright © 2008,2009 Björn Påhlsson
12
* Copyright © 2007-2008 Teddy Hogeborn & Björn Påhlsson
14
13
*
15
14
* This program is free software: you can redistribute it and/or
16
15
* modify it under the terms of the GNU General Public License as
36
35
#define _GNU_SOURCE /* TEMP_FAILURE_RETRY(), asprintf() */
37
36
38
37
#include <stdio.h> /* fprintf(), stderr, fwrite(),
39
stdout, ferror(), sscanf(),
40
remove() */
38
stdout, ferror() */
41
39
#include <stdint.h> /* uint16_t, uint32_t */
42
40
#include <stddef.h> /* NULL, size_t, ssize_t */
43
41
#include <stdlib.h> /* free(), EXIT_SUCCESS, EXIT_FAILURE,
49
47
#include <sys/types.h> /* socket(), inet_pton(), sockaddr,
50
48
sockaddr_in6, PF_INET6,
51
49
SOCK_STREAM, INET6_ADDRSTRLEN,
52
uid_t, gid_t, open(), opendir(),
53
DIR */
50
uid_t, gid_t, open(), opendir(), DIR */
54
51
#include <sys/stat.h> /* open() */
55
52
#include <sys/socket.h> /* socket(), struct sockaddr_in6,
56
53
struct in6_addr, inet_pton(),
57
54
connect() */
58
55
#include <fcntl.h> /* open() */
59
#include <dirent.h> /* opendir(), struct dirent, readdir()
60
*/
61
#include <inttypes.h> /* PRIu16, intmax_t, SCNdMAX */
56
#include <dirent.h> /* opendir(), struct dirent, readdir() */
57
#include <inttypes.h> /* PRIu16 */
62
58
#include <assert.h> /* assert() */
63
59
#include <errno.h> /* perror(), errno */
64
#include <time.h> /* nanosleep(), time() */
60
#include <time.h> /* time() */
65
61
#include <net/if.h> /* ioctl, ifreq, SIOCGIFFLAGS, IFF_UP,
66
62
SIOCSIFFLAGS, if_indextoname(),
67
63
if_nametoindex(), IF_NAMESIZE */
70
66
getuid(), getgid(), setuid(),
71
67
setgid() */
72
68
#include <arpa/inet.h> /* inet_pton(), htons */
73
#include <iso646.h> /* not, and, or */
69
#include <iso646.h> /* not, and */
74
70
#include <argp.h> /* struct argp_option, error_t, struct
75
71
argp_state, struct argp,
76
72
argp_parse(), ARGP_KEY_ARG,
77
73
ARGP_KEY_END, ARGP_ERR_UNKNOWN */
78
#ifdef __linux__
79
#include <sys/klog.h> /* klogctl() */
80
#endif
81
74
82
75
/* Avahi */
83
76
/* All Avahi types, constants and functions
96
89
gnutls_*
97
90
init_gnutls_session(),
98
91
GNUTLS_* */
99
#include <gnutls/openpgp.h>
100
/* gnutls_certificate_set_openpgp_key_file(),
92
#include <gnutls/openpgp.h> /* gnutls_certificate_set_openpgp_key_file(),
101
93
GNUTLS_OPENPGP_FMT_BASE64 */
102
94
103
95
/* GPGME */
109
101
110
102
#define BUFFER_SIZE 256
111
103
104
/*
105
#define PATHDIR "/conf/conf.d/mandos"
106
*/
107
112
108
#define PATHDIR "/conf/conf.d/mandos"
113
109
#define SECKEY "seckey.txt"
114
#define PUBKEY "pubkey.txt"
110
#define PUBKEY "pupkey.txt"
115
111
116
112
bool debug = false;
117
113
static const char mandos_protocol_version[] = "1";
118
const char *argp_program_version = "mandos-client " VERSION;
114
const char *argp_program_version = "password-request 1.0";
119
115
const char *argp_program_bug_address = "<mandos@fukt.bsnet.se>";
120
116
121
117
/* Used for passing in values through the Avahi callback functions */
136
132
*/
137
133
size_t adjustbuffer(char **buffer, size_t buffer_length,
138
134
size_t buffer_capacity){
139
if(buffer_length + BUFFER_SIZE > buffer_capacity){
135
if (buffer_length + BUFFER_SIZE > buffer_capacity){
140
136
*buffer = realloc(*buffer, buffer_capacity + BUFFER_SIZE);
141
if(buffer == NULL){
137
if (buffer == NULL){
142
138
return 0;
143
139
}
144
140
buffer_capacity += BUFFER_SIZE;
154
150
int ret;
155
151
gpgme_error_t rc;
156
152
gpgme_engine_info_t engine_info;
157
153
158
154
159
155
/*
160
* Helper function to insert pub and seckey to the engine keyring.
156
* Helper function to insert pub and seckey to the enigne keyring.
161
157
*/
162
158
bool import_key(const char *filename){
163
159
int fd;
164
160
gpgme_data_t pgp_data;
165
161
166
fd = (int)TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
162
fd = TEMP_FAILURE_RETRY(open(filename, O_RDONLY));
167
163
if(fd == -1){
168
164
perror("open");
169
165
return false;
170
166
}
171
167
172
168
rc = gpgme_data_new_from_fd(&pgp_data, fd);
173
if(rc != GPG_ERR_NO_ERROR){
169
if (rc != GPG_ERR_NO_ERROR){
174
170
fprintf(stderr, "bad gpgme_data_new_from_fd: %s: %s\n",
175
171
gpgme_strsource(rc), gpgme_strerror(rc));
176
172
return false;
177
173
}
178
174
179
175
rc = gpgme_op_import(mc->ctx, pgp_data);
180
if(rc != GPG_ERR_NO_ERROR){
176
if (rc != GPG_ERR_NO_ERROR){
181
177
fprintf(stderr, "bad gpgme_op_import: %s: %s\n",
182
178
gpgme_strsource(rc), gpgme_strerror(rc));
183
179
return false;
184
180
}
185
186
ret = (int)TEMP_FAILURE_RETRY(close(fd));
181
182
ret = TEMP_FAILURE_RETRY(close(fd));
187
183
if(ret == -1){
188
184
perror("close");
189
185
}
191
187
return true;
192
188
}
193
189
194
if(debug){
190
if (debug){
195
191
fprintf(stderr, "Initialize gpgme\n");
196
192
}
197
193
198
194
/* Init GPGME */
199
195
gpgme_check_version(NULL);
200
196
rc = gpgme_engine_check_version(GPGME_PROTOCOL_OpenPGP);
201
if(rc != GPG_ERR_NO_ERROR){
197
if (rc != GPG_ERR_NO_ERROR){
202
198
fprintf(stderr, "bad gpgme_engine_check_version: %s: %s\n",
203
199
gpgme_strsource(rc), gpgme_strerror(rc));
204
200
return false;
205
201
}
206
202
207
203
/* Set GPGME home directory for the OpenPGP engine only */
208
rc = gpgme_get_engine_info(&engine_info);
209
if(rc != GPG_ERR_NO_ERROR){
204
rc = gpgme_get_engine_info (&engine_info);
205
if (rc != GPG_ERR_NO_ERROR){
210
206
fprintf(stderr, "bad gpgme_get_engine_info: %s: %s\n",
211
207
gpgme_strsource(rc), gpgme_strerror(rc));
212
208
return false;
223
219
fprintf(stderr, "Could not set GPGME home dir to %s\n", tempdir);
224
220
return false;
225
221
}
226
222
227
223
/* Create new GPGME "context" */
228
224
rc = gpgme_new(&(mc->ctx));
229
if(rc != GPG_ERR_NO_ERROR){
225
if (rc != GPG_ERR_NO_ERROR){
230
226
fprintf(stderr, "bad gpgme_new: %s: %s\n",
231
227
gpgme_strsource(rc), gpgme_strerror(rc));
232
228
return false;
233
229
}
234
230
235
if(not import_key(pubkey) or not import_key(seckey)){
231
if (not import_key(pubkey) or not import_key(seckey)){
236
232
return false;
237
233
}
238
234
243
239
* Decrypt OpenPGP data.
244
240
* Returns -1 on error
245
241
*/
246
static ssize_t pgp_packet_decrypt(const mandos_context *mc,
247
const char *cryptotext,
248
size_t crypto_size,
249
char **plaintext){
242
static ssize_t pgp_packet_decrypt (const mandos_context *mc,
243
const char *cryptotext,
244
size_t crypto_size,
245
char **plaintext){
250
246
gpgme_data_t dh_crypto, dh_plain;
251
247
gpgme_error_t rc;
252
248
ssize_t ret;
253
249
size_t plaintext_capacity = 0;
254
250
ssize_t plaintext_length = 0;
255
251
256
if(debug){
252
if (debug){
257
253
fprintf(stderr, "Trying to decrypt OpenPGP data\n");
258
254
}
259
255
260
256
/* Create new GPGME data buffer from memory cryptotext */
261
257
rc = gpgme_data_new_from_mem(&dh_crypto, cryptotext, crypto_size,
262
258
0);
263
if(rc != GPG_ERR_NO_ERROR){
259
if (rc != GPG_ERR_NO_ERROR){
264
260
fprintf(stderr, "bad gpgme_data_new_from_mem: %s: %s\n",
265
261
gpgme_strsource(rc), gpgme_strerror(rc));
266
262
return -1;
268
264
269
265
/* Create new empty GPGME data buffer for the plaintext */
270
266
rc = gpgme_data_new(&dh_plain);
271
if(rc != GPG_ERR_NO_ERROR){
267
if (rc != GPG_ERR_NO_ERROR){
272
268
fprintf(stderr, "bad gpgme_data_new: %s: %s\n",
273
269
gpgme_strsource(rc), gpgme_strerror(rc));
274
270
gpgme_data_release(dh_crypto);
278
274
/* Decrypt data from the cryptotext data buffer to the plaintext
279
275
data buffer */
280
276
rc = gpgme_op_decrypt(mc->ctx, dh_crypto, dh_plain);
281
if(rc != GPG_ERR_NO_ERROR){
277
if (rc != GPG_ERR_NO_ERROR){
282
278
fprintf(stderr, "bad gpgme_op_decrypt: %s: %s\n",
283
279
gpgme_strsource(rc), gpgme_strerror(rc));
284
280
plaintext_length = -1;
285
if(debug){
281
if (debug){
286
282
gpgme_decrypt_result_t result;
287
283
result = gpgme_op_decrypt_result(mc->ctx);
288
if(result == NULL){
284
if (result == NULL){
289
285
fprintf(stderr, "gpgme_op_decrypt_result failed\n");
290
286
} else {
291
287
fprintf(stderr, "Unsupported algorithm: %s\n",
318
314
}
319
315
320
316
/* Seek back to the beginning of the GPGME plaintext data buffer */
321
if(gpgme_data_seek(dh_plain, (off_t)0, SEEK_SET) == -1){
322
perror("gpgme_data_seek");
317
if (gpgme_data_seek(dh_plain, (off_t) 0, SEEK_SET) == -1){
318
perror("pgpme_data_seek");
323
319
plaintext_length = -1;
324
320
goto decrypt_end;
325
321
}
329
325
plaintext_capacity = adjustbuffer(plaintext,
330
326
(size_t)plaintext_length,
331
327
plaintext_capacity);
332
if(plaintext_capacity == 0){
328
if (plaintext_capacity == 0){
333
329
perror("adjustbuffer");
334
330
plaintext_length = -1;
335
331
goto decrypt_end;
338
334
ret = gpgme_data_read(dh_plain, *plaintext + plaintext_length,
339
335
BUFFER_SIZE);
340
336
/* Print the data, if any */
341
if(ret == 0){
337
if (ret == 0){
342
338
/* EOF */
343
339
break;
344
340
}
349
345
}
350
346
plaintext_length += ret;
351
347
}
352
348
353
349
if(debug){
354
350
fprintf(stderr, "Decrypted password is: ");
355
351
for(ssize_t i = 0; i < plaintext_length; i++){
368
364
return plaintext_length;
369
365
}
370
366
371
static const char * safer_gnutls_strerror(int value){
372
const char *ret = gnutls_strerror(value); /* Spurious warning from
373
-Wunreachable-code */
374
if(ret == NULL)
367
static const char * safer_gnutls_strerror (int value) {
368
const char *ret = gnutls_strerror (value); /* Spurious warning */
369
if (ret == NULL)
375
370
ret = "(unknown)";
376
371
return ret;
377
372
}
392
387
}
393
388
394
389
ret = gnutls_global_init();
395
if(ret != GNUTLS_E_SUCCESS){
396
fprintf(stderr, "GnuTLS global_init: %s\n",
397
safer_gnutls_strerror(ret));
390
if (ret != GNUTLS_E_SUCCESS) {
391
fprintf (stderr, "GnuTLS global_init: %s\n",
392
safer_gnutls_strerror(ret));
398
393
return -1;
399
394
}
400
395
401
if(debug){
396
if (debug){
402
397
/* "Use a log level over 10 to enable all debugging options."
403
398
* - GnuTLS manual
404
399
*/
408
403
409
404
/* OpenPGP credentials */
410
405
gnutls_certificate_allocate_credentials(&mc->cred);
411
if(ret != GNUTLS_E_SUCCESS){
412
fprintf(stderr, "GnuTLS memory error: %s\n", /* Spurious warning
413
* from
414
* -Wunreachable-code
415
*/
416
safer_gnutls_strerror(ret));
417
gnutls_global_deinit();
406
if (ret != GNUTLS_E_SUCCESS){
407
fprintf (stderr, "GnuTLS memory error: %s\n", /* Spurious
408
warning */
409
safer_gnutls_strerror(ret));
410
gnutls_global_deinit ();
418
411
return -1;
419
412
}
420
413
421
414
if(debug){
422
fprintf(stderr, "Attempting to use OpenPGP public key %s and"
423
" secret key %s as GnuTLS credentials\n", pubkeyfilename,
415
fprintf(stderr, "Attempting to use OpenPGP certificate %s"
416
" and keyfile %s as GnuTLS credentials\n", pubkeyfilename,
424
417
seckeyfilename);
425
418
}
426
419
427
420
ret = gnutls_certificate_set_openpgp_key_file
428
421
(mc->cred, pubkeyfilename, seckeyfilename,
429
422
GNUTLS_OPENPGP_FMT_BASE64);
430
if(ret != GNUTLS_E_SUCCESS){
423
if (ret != GNUTLS_E_SUCCESS) {
431
424
fprintf(stderr,
432
425
"Error[%d] while reading the OpenPGP key pair ('%s',"
433
426
" '%s')\n", ret, pubkeyfilename, seckeyfilename);
438
431
439
432
/* GnuTLS server initialization */
440
433
ret = gnutls_dh_params_init(&mc->dh_params);
441
if(ret != GNUTLS_E_SUCCESS){
442
fprintf(stderr, "Error in GnuTLS DH parameter initialization:"
443
" %s\n", safer_gnutls_strerror(ret));
434
if (ret != GNUTLS_E_SUCCESS) {
435
fprintf (stderr, "Error in GnuTLS DH parameter initialization:"
436
" %s\n", safer_gnutls_strerror(ret));
444
437
goto globalfail;
445
438
}
446
439
ret = gnutls_dh_params_generate2(mc->dh_params, mc->dh_bits);
447
if(ret != GNUTLS_E_SUCCESS){
448
fprintf(stderr, "Error in GnuTLS prime generation: %s\n",
449
safer_gnutls_strerror(ret));
440
if (ret != GNUTLS_E_SUCCESS) {
441
fprintf (stderr, "Error in GnuTLS prime generation: %s\n",
442
safer_gnutls_strerror(ret));
450
443
goto globalfail;
451
444
}
452
445
453
446
gnutls_certificate_set_dh_params(mc->cred, mc->dh_params);
454
447
455
448
return 0;
456
449
457
450
globalfail:
458
451
459
452
gnutls_certificate_free_credentials(mc->cred);
460
453
gnutls_global_deinit();
461
gnutls_dh_params_deinit(mc->dh_params);
462
454
return -1;
455
463
456
}
464
457
465
458
static int init_gnutls_session(mandos_context *mc,
467
460
int ret;
468
461
/* GnuTLS session creation */
469
462
ret = gnutls_init(session, GNUTLS_SERVER);
470
if(ret != GNUTLS_E_SUCCESS){
463
if (ret != GNUTLS_E_SUCCESS){
471
464
fprintf(stderr, "Error in GnuTLS session initialization: %s\n",
472
465
safer_gnutls_strerror(ret));
473
466
}
475
468
{
476
469
const char *err;
477
470
ret = gnutls_priority_set_direct(*session, mc->priority, &err);
478
if(ret != GNUTLS_E_SUCCESS){
471
if (ret != GNUTLS_E_SUCCESS) {
479
472
fprintf(stderr, "Syntax error at: %s\n", err);
480
473
fprintf(stderr, "GnuTLS error: %s\n",
481
474
safer_gnutls_strerror(ret));
482
gnutls_deinit(*session);
475
gnutls_deinit (*session);
483
476
return -1;
484
477
}
485
478
}
486
479
487
480
ret = gnutls_credentials_set(*session, GNUTLS_CRD_CERTIFICATE,
488
481
mc->cred);
489
if(ret != GNUTLS_E_SUCCESS){
482
if (ret != GNUTLS_E_SUCCESS) {
490
483
fprintf(stderr, "Error setting GnuTLS credentials: %s\n",
491
484
safer_gnutls_strerror(ret));
492
gnutls_deinit(*session);
485
gnutls_deinit (*session);
493
486
return -1;
494
487
}
495
488
496
489
/* ignore client certificate if any. */
497
gnutls_certificate_server_set_request(*session,
498
GNUTLS_CERT_IGNORE);
490
gnutls_certificate_server_set_request (*session,
491
GNUTLS_CERT_IGNORE);
499
492
500
gnutls_dh_set_prime_bits(*session, mc->dh_bits);
493
gnutls_dh_set_prime_bits (*session, mc->dh_bits);
501
494
502
495
return 0;
503
496
}
511
504
AvahiIfIndex if_index,
512
505
mandos_context *mc){
513
506
int ret, tcp_sd;
514
ssize_t sret;
515
507
union { struct sockaddr in; struct sockaddr_in6 in6; } to;
516
508
char *buffer = NULL;
517
509
char *decrypted_buffer;
523
515
char interface[IF_NAMESIZE];
524
516
gnutls_session_t session;
525
517
526
ret = init_gnutls_session(mc, &session);
527
if(ret != 0){
518
ret = init_gnutls_session (mc, &session);
519
if (ret != 0){
528
520
return -1;
529
521
}
530
522
534
526
}
535
527
536
528
tcp_sd = socket(PF_INET6, SOCK_STREAM, 0);
537
if(tcp_sd < 0){
529
if(tcp_sd < 0) {
538
530
perror("socket");
539
531
return -1;
540
532
}
541
533
542
534
if(debug){
543
535
if(if_indextoname((unsigned int)if_index, interface) == NULL){
544
536
perror("if_indextoname");
552
544
/* It would be nice to have a way to detect if we were passed an
553
545
IPv4 address here. Now we assume an IPv6 address. */
554
546
ret = inet_pton(AF_INET6, ip, &to.in6.sin6_addr);
555
if(ret < 0 ){
547
if (ret < 0 ){
556
548
perror("inet_pton");
557
549
return -1;
558
550
}
560
552
fprintf(stderr, "Bad address: %s\n", ip);
561
553
return -1;
562
554
}
563
to.in6.sin6_port = htons(port); /* Spurious warnings from
564
-Wconversion and
565
-Wunreachable-code */
555
to.in6.sin6_port = htons(port); /* Spurious warning */
566
556
567
557
to.in6.sin6_scope_id = (uint32_t)if_index;
568
558
581
571
}
582
572
583
573
ret = connect(tcp_sd, &to.in, sizeof(to));
584
if(ret < 0){
574
if (ret < 0){
585
575
perror("connect");
586
576
return -1;
587
577
}
588
578
589
579
const char *out = mandos_protocol_version;
590
580
written = 0;
591
while(true){
581
while (true){
592
582
size_t out_size = strlen(out);
593
ret = (int)TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
583
ret = TEMP_FAILURE_RETRY(write(tcp_sd, out + written,
594
584
out_size - written));
595
if(ret == -1){
585
if (ret == -1){
596
586
perror("write");
597
587
retval = -1;
598
588
goto mandos_end;
601
591
if(written < out_size){
602
592
continue;
603
593
} else {
604
if(out == mandos_protocol_version){
594
if (out == mandos_protocol_version){
605
595
written = 0;
606
596
out = "\r\n";
607
597
} else {
609
599
}
610
600
}
611
601
}
612
602
613
603
if(debug){
614
604
fprintf(stderr, "Establishing TLS session with %s\n", ip);
615
605
}
616
606
617
gnutls_transport_set_ptr(session, (gnutls_transport_ptr_t) tcp_sd);
618
607
gnutls_transport_set_ptr (session, (gnutls_transport_ptr_t) tcp_sd);
608
619
609
do{
620
ret = gnutls_handshake(session);
610
ret = gnutls_handshake (session);
621
611
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
622
612
623
if(ret != GNUTLS_E_SUCCESS){
613
if (ret != GNUTLS_E_SUCCESS){
624
614
if(debug){
625
615
fprintf(stderr, "*** GnuTLS Handshake failed ***\n");
626
gnutls_perror(ret);
616
gnutls_perror (ret);
627
617
}
628
618
retval = -1;
629
619
goto mandos_end;
635
625
fprintf(stderr, "Retrieving pgp encrypted password from %s\n",
636
626
ip);
637
627
}
638
628
639
629
while(true){
640
630
buffer_capacity = adjustbuffer(&buffer, buffer_length,
641
631
buffer_capacity);
642
if(buffer_capacity == 0){
632
if (buffer_capacity == 0){
643
633
perror("adjustbuffer");
644
634
retval = -1;
645
635
goto mandos_end;
646
636
}
647
637
648
sret = gnutls_record_recv(session, buffer+buffer_length,
649
BUFFER_SIZE);
650
if(sret == 0){
638
ret = gnutls_record_recv(session, buffer+buffer_length,
639
BUFFER_SIZE);
640
if (ret == 0){
651
641
break;
652
642
}
653
if(sret < 0){
654
switch(sret){
643
if (ret < 0){
644
switch(ret){
655
645
case GNUTLS_E_INTERRUPTED:
656
646
case GNUTLS_E_AGAIN:
657
647
break;
658
648
case GNUTLS_E_REHANDSHAKE:
659
649
do{
660
ret = gnutls_handshake(session);
650
ret = gnutls_handshake (session);
661
651
} while(ret == GNUTLS_E_AGAIN or ret == GNUTLS_E_INTERRUPTED);
662
if(ret < 0){
652
if (ret < 0){
663
653
fprintf(stderr, "*** GnuTLS Re-handshake failed ***\n");
664
gnutls_perror(ret);
654
gnutls_perror (ret);
665
655
retval = -1;
666
656
goto mandos_end;
667
657
}
670
660
fprintf(stderr, "Unknown error while reading data from"
671
661
" encrypted session with Mandos server\n");
672
662
retval = -1;
673
gnutls_bye(session, GNUTLS_SHUT_RDWR);
663
gnutls_bye (session, GNUTLS_SHUT_RDWR);
674
664
goto mandos_end;
675
665
}
676
666
} else {
677
buffer_length += (size_t) sret;
667
buffer_length += (size_t) ret;
678
668
}
679
669
}
680
670
682
672
fprintf(stderr, "Closing TLS session\n");
683
673
}
684
674
685
gnutls_bye(session, GNUTLS_SHUT_RDWR);
675
gnutls_bye (session, GNUTLS_SHUT_RDWR);
686
676
687
if(buffer_length > 0){
677
if (buffer_length > 0){
688
678
decrypted_buffer_size = pgp_packet_decrypt(mc, buffer,
689
679
buffer_length,
690
680
&decrypted_buffer);
691
if(decrypted_buffer_size >= 0){
681
if (decrypted_buffer_size >= 0){
692
682
written = 0;
693
683
while(written < (size_t) decrypted_buffer_size){
694
ret = (int)fwrite(decrypted_buffer + written, 1,
695
(size_t)decrypted_buffer_size - written,
696
stdout);
684
ret = (int)fwrite (decrypted_buffer + written, 1,
685
(size_t)decrypted_buffer_size - written,
686
stdout);
697
687
if(ret == 0 and ferror(stdout)){
698
688
if(debug){
699
689
fprintf(stderr, "Error writing encrypted data: %s\n",
716
706
717
707
mandos_end:
718
708
free(buffer);
719
ret = (int)TEMP_FAILURE_RETRY(close(tcp_sd));
709
ret = TEMP_FAILURE_RETRY(close(tcp_sd));
720
710
if(ret == -1){
721
711
perror("close");
722
712
}
723
gnutls_deinit(session);
713
gnutls_deinit (session);
724
714
return retval;
725
715
}
726
716
737
727
AVAHI_GCC_UNUSED AvahiStringList *txt,
738
728
AVAHI_GCC_UNUSED AvahiLookupResultFlags
739
729
flags,
740
void* userdata){
730
void* userdata) {
741
731
mandos_context *mc = userdata;
742
732
assert(r);
743
733
744
734
/* Called whenever a service has been resolved successfully or
745
735
timed out */
746
736
747
switch(event){
737
switch (event) {
748
738
default:
749
739
case AVAHI_RESOLVER_FAILURE:
750
740
fprintf(stderr, "(Avahi Resolver) Failed to resolve service '%s'"
758
748
avahi_address_snprint(ip, sizeof(ip), address);
759
749
if(debug){
760
750
fprintf(stderr, "Mandos server \"%s\" found on %s (%s, %"
761
PRIdMAX ") on port %" PRIu16 "\n", name, host_name,
762
ip, (intmax_t)interface, port);
751
PRIu16 ") on port %d\n", name, host_name, ip,
752
interface, port);
763
753
}
764
754
int ret = start_mandos_communication(ip, port, interface, mc);
765
if(ret == 0){
755
if (ret == 0){
766
756
avahi_simple_poll_quit(mc->simple_poll);
767
757
}
768
758
}
770
760
avahi_s_service_resolver_free(r);
771
761
}
772
762
773
static void browse_callback(AvahiSServiceBrowser *b,
774
AvahiIfIndex interface,
775
AvahiProtocol protocol,
776
AvahiBrowserEvent event,
777
const char *name,
778
const char *type,
779
const char *domain,
780
AVAHI_GCC_UNUSED AvahiLookupResultFlags
781
flags,
782
void* userdata){
763
static void browse_callback( AvahiSServiceBrowser *b,
764
AvahiIfIndex interface,
765
AvahiProtocol protocol,
766
AvahiBrowserEvent event,
767
const char *name,
768
const char *type,
769
const char *domain,
770
AVAHI_GCC_UNUSED AvahiLookupResultFlags
771
flags,
772
void* userdata) {
783
773
mandos_context *mc = userdata;
784
774
assert(b);
785
775
786
776
/* Called whenever a new services becomes available on the LAN or
787
777
is removed from the LAN */
788
778
789
switch(event){
779
switch (event) {
790
780
default:
791
781
case AVAHI_BROWSER_FAILURE:
792
782
801
791
the callback function is called the Avahi server will free the
802
792
resolver for us. */
803
793
804
if(!(avahi_s_service_resolver_new(mc->server, interface,
794
if (!(avahi_s_service_resolver_new(mc->server, interface,
805
795
protocol, name, type, domain,
806
796
AVAHI_PROTO_INET6, 0,
807
797
resolve_callback, mc)))
822
812
}
823
813
824
814
int main(int argc, char *argv[]){
825
AvahiSServiceBrowser *sb = NULL;
826
int error;
827
int ret;
828
intmax_t tmpmax;
829
int numchars;
830
int exitcode = EXIT_SUCCESS;
831
const char *interface = "eth0";
832
struct ifreq network;
833
int sd;
834
uid_t uid;
835
gid_t gid;
836
char *connect_to = NULL;
837
char tempdir[] = "/tmp/mandosXXXXXX";
838
bool tempdir_created = false;
839
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
840
const char *seckey = PATHDIR "/" SECKEY;
841
const char *pubkey = PATHDIR "/" PUBKEY;
842
843
mandos_context mc = { .simple_poll = NULL, .server = NULL,
844
.dh_bits = 1024, .priority = "SECURE256"
845
":!CTYPE-X.509:+CTYPE-OPENPGP" };
846
bool gnutls_initialized = false;
847
bool gpgme_initialized = false;
848
double delay = 2.5;
849
850
{
851
struct argp_option options[] = {
852
{ .name = "debug", .key = 128,
853
.doc = "Debug mode", .group = 3 },
854
{ .name = "connect", .key = 'c',
855
.arg = "ADDRESS:PORT",
856
.doc = "Connect directly to a specific Mandos server",
857
.group = 1 },
858
{ .name = "interface", .key = 'i',
859
.arg = "NAME",
860
.doc = "Interface that will be used to search for Mandos"
861
" servers",
862
.group = 1 },
863
{ .name = "seckey", .key = 's',
864
.arg = "FILE",
865
.doc = "OpenPGP secret key file base name",
866
.group = 1 },
867
{ .name = "pubkey", .key = 'p',
868
.arg = "FILE",
869
.doc = "OpenPGP public key file base name",
870
.group = 2 },
871
{ .name = "dh-bits", .key = 129,
872
.arg = "BITS",
873
.doc = "Bit length of the prime number used in the"
874
" Diffie-Hellman key exchange",
875
.group = 2 },
876
{ .name = "priority", .key = 130,
877
.arg = "STRING",
878
.doc = "GnuTLS priority string for the TLS handshake",
879
.group = 1 },
880
{ .name = "delay", .key = 131,
881
.arg = "SECONDS",
882
.doc = "Maximum delay to wait for interface startup",
883
.group = 2 },
884
{ .name = NULL }
885
};
886
887
error_t parse_opt(int key, char *arg,
888
struct argp_state *state){
889
switch(key){
890
case 128: /* --debug */
891
debug = true;
892
break;
893
case 'c': /* --connect */
894
connect_to = arg;
895
break;
896
case 'i': /* --interface */
897
interface = arg;
898
break;
899
case 's': /* --seckey */
900
seckey = arg;
901
break;
902
case 'p': /* --pubkey */
903
pubkey = arg;
904
break;
905
case 129: /* --dh-bits */
906
ret = sscanf(arg, "%" SCNdMAX "%n", &tmpmax, &numchars);
907
if(ret < 1 or tmpmax != (typeof(mc.dh_bits))tmpmax
908
or arg[numchars] != '\0'){
909
fprintf(stderr, "Bad number of DH bits\n");
910
exit(EXIT_FAILURE);
911
}
912
mc.dh_bits = (typeof(mc.dh_bits))tmpmax;
913
break;
914
case 130: /* --priority */
915
mc.priority = arg;
916
break;
917
case 131: /* --delay */
918
ret = sscanf(arg, "%lf%n", &delay, &numchars);
919
if(ret < 1 or arg[numchars] != '\0'){
920
fprintf(stderr, "Bad delay\n");
921
exit(EXIT_FAILURE);
922
}
923
break;
924
case ARGP_KEY_ARG:
925
argp_usage(state);
926
case ARGP_KEY_END:
927
break;
928
default:
929
return ARGP_ERR_UNKNOWN;
930
}
931
return 0;
932
}
933
934
struct argp argp = { .options = options, .parser = parse_opt,
935
.args_doc = "",
936
.doc = "Mandos client -- Get and decrypt"
937
" passwords from a Mandos server" };
938
ret = argp_parse(&argp, argc, argv, 0, 0, NULL);
939
if(ret == ARGP_ERR_UNKNOWN){
940
fprintf(stderr, "Unknown error while parsing arguments\n");
941
exitcode = EXIT_FAILURE;
942
goto end;
943
}
944
}
945
946
/* If the interface is down, bring it up */
947
{
948
#ifdef __linux__
949
/* Lower kernel loglevel to KERN_NOTICE to avoid KERN_INFO
950
messages to mess up the prompt */
951
ret = klogctl(8, NULL, 5);
952
if(ret == -1){
953
perror("klogctl");
954
}
955
#endif
956
957
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
958
if(sd < 0){
959
perror("socket");
960
exitcode = EXIT_FAILURE;
961
#ifdef __linux__
962
ret = klogctl(7, NULL, 0);
963
if(ret == -1){
964
perror("klogctl");
965
}
966
#endif
967
goto end;
968
}
969
strcpy(network.ifr_name, interface);
970
ret = ioctl(sd, SIOCGIFFLAGS, &network);
971
if(ret == -1){
972
perror("ioctl SIOCGIFFLAGS");
973
#ifdef __linux__
974
ret = klogctl(7, NULL, 0);
975
if(ret == -1){
976
perror("klogctl");
977
}
978
#endif
979
exitcode = EXIT_FAILURE;
980
goto end;
981
}
982
if((network.ifr_flags & IFF_UP) == 0){
983
network.ifr_flags |= IFF_UP;
984
ret = ioctl(sd, SIOCSIFFLAGS, &network);
985
if(ret == -1){
986
perror("ioctl SIOCSIFFLAGS");
987
exitcode = EXIT_FAILURE;
988
#ifdef __linux__
989
ret = klogctl(7, NULL, 0);
990
if(ret == -1){
991
perror("klogctl");
992
}
993
#endif
994
goto end;
995
}
996
}
997
/* sleep checking until interface is running */
998
for(int i=0; i < delay * 4; i++){
815
AvahiSServiceBrowser *sb = NULL;
816
int error;
817
int ret;
818
int exitcode = EXIT_SUCCESS;
819
const char *interface = "eth0";
820
struct ifreq network;
821
int sd;
822
uid_t uid;
823
gid_t gid;
824
char *connect_to = NULL;
825
char tempdir[] = "/tmp/mandosXXXXXX";
826
AvahiIfIndex if_index = AVAHI_IF_UNSPEC;
827
const char *seckey = PATHDIR "/" SECKEY;
828
const char *pubkey = PATHDIR "/" PUBKEY;
829
830
mandos_context mc = { .simple_poll = NULL, .server = NULL,
831
.dh_bits = 1024, .priority = "SECURE256"};
832
bool gnutls_initalized = false;
833
bool pgpme_initalized = false;
834
835
{
836
struct argp_option options[] = {
837
{ .name = "debug", .key = 128,
838
.doc = "Debug mode", .group = 3 },
839
{ .name = "connect", .key = 'c',
840
.arg = "IP",
841
.doc = "Connect directly to a sepcified mandos server",
842
.group = 1 },
843
{ .name = "interface", .key = 'i',
844
.arg = "INTERFACE",
845
.doc = "Interface that Avahi will conntect through",
846
.group = 1 },
847
{ .name = "seckey", .key = 's',
848
.arg = "SECKEY",
849
.doc = "Secret openpgp key for gnutls authentication",
850
.group = 1 },
851
{ .name = "pubkey", .key = 'p',
852
.arg = "PUBKEY",
853
.doc = "Public openpgp key for gnutls authentication",
854
.group = 2 },
855
{ .name = "dh-bits", .key = 129,
856
.arg = "BITS",
857
.doc = "dh-bits to use in gnutls communication",
858
.group = 2 },
859
{ .name = "priority", .key = 130,
860
.arg = "PRIORITY",
861
.doc = "GNUTLS priority", .group = 1 },
862
{ .name = NULL }
863
};
864
865
866
error_t parse_opt (int key, char *arg,
867
struct argp_state *state) {
868
/* Get the INPUT argument from `argp_parse', which we know is
869
a pointer to our plugin list pointer. */
870
switch (key) {
871
case 128:
872
debug = true;
873
break;
874
case 'c':
875
connect_to = arg;
876
break;
877
case 'i':
878
interface = arg;
879
break;
880
case 's':
881
seckey = arg;
882
break;
883
case 'p':
884
pubkey = arg;
885
break;
886
case 129:
887
errno = 0;
888
mc.dh_bits = (unsigned int) strtol(arg, NULL, 10);
889
if (errno){
890
perror("strtol");
891
exit(EXIT_FAILURE);
892
}
893
break;
894
case 130:
895
mc.priority = arg;
896
break;
897
case ARGP_KEY_ARG:
898
argp_usage (state);
899
case ARGP_KEY_END:
900
break;
901
default:
902
return ARGP_ERR_UNKNOWN;
903
}
904
return 0;
905
}
906
907
struct argp argp = { .options = options, .parser = parse_opt,
908
.args_doc = "",
909
.doc = "Mandos client -- Get and decrypt"
910
" passwords from mandos server" };
911
ret = argp_parse (&argp, argc, argv, 0, 0, NULL);
912
if (ret == ARGP_ERR_UNKNOWN){
913
fprintf(stderr, "Unknown error while parsing arguments\n");
914
exitcode = EXIT_FAILURE;
915
goto end;
916
}
917
}
918
919
ret = init_gnutls_global(&mc, pubkey, seckey);
920
if (ret == -1){
921
fprintf(stderr, "init_gnutls_global failed\n");
922
exitcode = EXIT_FAILURE;
923
goto end;
924
} else {
925
gnutls_initalized = true;
926
}
927
928
if(mkdtemp(tempdir) == NULL){
929
perror("mkdtemp");
930
tempdir[0] = '\0';
931
goto end;
932
}
933
934
if(not init_gpgme(&mc, pubkey, seckey, tempdir)){
935
fprintf(stderr, "pgpme_initalized failed\n");
936
exitcode = EXIT_FAILURE;
937
goto end;
938
} else {
939
pgpme_initalized = true;
940
}
941
942
/* If the interface is down, bring it up */
943
{
944
sd = socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP);
945
if(sd < 0) {
946
perror("socket");
947
exitcode = EXIT_FAILURE;
948
goto end;
949
}
950
strcpy(network.ifr_name, interface);
999
951
ret = ioctl(sd, SIOCGIFFLAGS, &network);
1000
952
if(ret == -1){
1001
953
perror("ioctl SIOCGIFFLAGS");
1002
} else if(network.ifr_flags & IFF_RUNNING){
1003
break;
1004
}
1005
struct timespec sleeptime = { .tv_nsec = 250000000 };
1006
ret = nanosleep(&sleeptime, NULL);
1007
if(ret == -1 and errno != EINTR){
1008
perror("nanosleep");
1009
}
1010
}
1011
ret = (int)TEMP_FAILURE_RETRY(close(sd));
1012
if(ret == -1){
1013
perror("close");
1014
}
1015
#ifdef __linux__
1016
/* Restores kernel loglevel to default */
1017
ret = klogctl(7, NULL, 0);
1018
if(ret == -1){
1019
perror("klogctl");
1020
}
1021
#endif
1022
}
1023
1024
uid = getuid();
1025
gid = getgid();
1026
1027
setgid(gid);
1028
if(ret == -1){
1029
perror("setgid");
1030
}
1031
1032
ret = setuid(uid);
1033
if(ret == -1){
1034
perror("setuid");
1035
}
1036
1037
ret = init_gnutls_global(&mc, pubkey, seckey);
1038
if(ret == -1){
1039
fprintf(stderr, "init_gnutls_global failed\n");
1040
exitcode = EXIT_FAILURE;
1041
goto end;
1042
} else {
1043
gnutls_initialized = true;
1044
}
1045
1046
if(mkdtemp(tempdir) == NULL){
1047
perror("mkdtemp");
1048
goto end;
1049
}
1050
tempdir_created = true;
1051
1052
if(not init_gpgme(&mc, pubkey, seckey, tempdir)){
1053
fprintf(stderr, "init_gpgme failed\n");
1054
exitcode = EXIT_FAILURE;
1055
goto end;
1056
} else {
1057
gpgme_initialized = true;
1058
}
1059
1060
if_index = (AvahiIfIndex) if_nametoindex(interface);
1061
if(if_index == 0){
1062
fprintf(stderr, "No such interface: \"%s\"\n", interface);
1063
exitcode = EXIT_FAILURE;
1064
goto end;
1065
}
1066
1067
if(connect_to != NULL){
1068
/* Connect directly, do not use Zeroconf */
1069
/* (Mainly meant for debugging) */
1070
char *address = strrchr(connect_to, ':');
1071
if(address == NULL){
1072
fprintf(stderr, "No colon in address\n");
1073
exitcode = EXIT_FAILURE;
1074
goto end;
1075
}
1076
uint16_t port;
1077
ret = sscanf(address+1, "%" SCNdMAX "%n", &tmpmax, &numchars);
1078
if(ret < 1 or tmpmax != (uint16_t)tmpmax
1079
or address[numchars+1] != '\0'){
1080
fprintf(stderr, "Bad port number\n");
1081
exitcode = EXIT_FAILURE;
1082
goto end;
1083
}
1084
port = (uint16_t)tmpmax;
1085
*address = '\0';
1086
address = connect_to;
1087
ret = start_mandos_communication(address, port, if_index, &mc);
1088
if(ret < 0){
1089
exitcode = EXIT_FAILURE;
1090
} else {
1091
exitcode = EXIT_SUCCESS;
1092
}
1093
goto end;
1094
}
1095
1096
if(not debug){
1097
avahi_set_log_function(empty_log);
1098
}
1099
1100
/* Initialize the pseudo-RNG for Avahi */
1101
srand((unsigned int) time(NULL));
1102
1103
/* Allocate main Avahi loop object */
1104
mc.simple_poll = avahi_simple_poll_new();
1105
if(mc.simple_poll == NULL){
1106
fprintf(stderr, "Avahi: Failed to create simple poll object.\n");
1107
exitcode = EXIT_FAILURE;
1108
goto end;
1109
}
1110
1111
{
1112
AvahiServerConfig config;
1113
/* Do not publish any local Zeroconf records */
1114
avahi_server_config_init(&config);
1115
config.publish_hinfo = 0;
1116
config.publish_addresses = 0;
1117
config.publish_workstation = 0;
1118
config.publish_domain = 0;
1119
1120
/* Allocate a new server */
1121
mc.server = avahi_server_new(avahi_simple_poll_get
1122
(mc.simple_poll), &config, NULL,
1123
NULL, &error);
1124
1125
/* Free the Avahi configuration data */
1126
avahi_server_config_free(&config);
1127
}
1128
1129
/* Check if creating the Avahi server object succeeded */
1130
if(mc.server == NULL){
1131
fprintf(stderr, "Failed to create Avahi server: %s\n",
1132
avahi_strerror(error));
1133
exitcode = EXIT_FAILURE;
1134
goto end;
1135
}
1136
1137
/* Create the Avahi service browser */
1138
sb = avahi_s_service_browser_new(mc.server, if_index,
1139
AVAHI_PROTO_INET6, "_mandos._tcp",
1140
NULL, 0, browse_callback, &mc);
1141
if(sb == NULL){
1142
fprintf(stderr, "Failed to create service browser: %s\n",
1143
avahi_strerror(avahi_server_errno(mc.server)));
1144
exitcode = EXIT_FAILURE;
1145
goto end;
1146
}
1147
1148
/* Run the main loop */
1149
1150
if(debug){
1151
fprintf(stderr, "Starting Avahi loop search\n");
1152
}
1153
1154
avahi_simple_poll_loop(mc.simple_poll);
1155
954
exitcode = EXIT_FAILURE;
955
goto end;
956
}
957
if((network.ifr_flags & IFF_UP) == 0){
958
network.ifr_flags |= IFF_UP;
959
ret = ioctl(sd, SIOCSIFFLAGS, &network);
960
if(ret == -1){
961
perror("ioctl SIOCSIFFLAGS");
962
exitcode = EXIT_FAILURE;
963
goto end;
964
}
965
}
966
ret = TEMP_FAILURE_RETRY(close(sd));
967
if(ret == -1){
968
perror("close");
969
}
970
}
971
972
uid = getuid();
973
gid = getgid();
974
975
ret = setuid(uid);
976
if (ret == -1){
977
perror("setuid");
978
}
979
980
setgid(gid);
981
if (ret == -1){
982
perror("setgid");
983
}
984
985
if_index = (AvahiIfIndex) if_nametoindex(interface);
986
if(if_index == 0){
987
fprintf(stderr, "No such interface: \"%s\"\n", interface);
988
exit(EXIT_FAILURE);
989
}
990
991
if(connect_to != NULL){
992
/* Connect directly, do not use Zeroconf */
993
/* (Mainly meant for debugging) */
994
char *address = strrchr(connect_to, ':');
995
if(address == NULL){
996
fprintf(stderr, "No colon in address\n");
997
exitcode = EXIT_FAILURE;
998
goto end;
999
}
1000
errno = 0;
1001
uint16_t port = (uint16_t) strtol(address+1, NULL, 10);
1002
if(errno){
1003
perror("Bad port number");
1004
exitcode = EXIT_FAILURE;
1005
goto end;
1006
}
1007
*address = '\0';
1008
address = connect_to;
1009
ret = start_mandos_communication(address, port, if_index, &mc);
1010
if(ret < 0){
1011
exitcode = EXIT_FAILURE;
1012
} else {
1013
exitcode = EXIT_SUCCESS;
1014
}
1015
goto end;
1016
}
1017
1018
if (not debug){
1019
avahi_set_log_function(empty_log);
1020
}
1021
1022
/* Initialize the pseudo-RNG for Avahi */
1023
srand((unsigned int) time(NULL));
1024
1025
/* Allocate main Avahi loop object */
1026
mc.simple_poll = avahi_simple_poll_new();
1027
if (mc.simple_poll == NULL) {
1028
fprintf(stderr, "Avahi: Failed to create simple poll"
1029
" object.\n");
1030
exitcode = EXIT_FAILURE;
1031
goto end;
1032
}
1033
1034
{
1035
AvahiServerConfig config;
1036
/* Do not publish any local Zeroconf records */
1037
avahi_server_config_init(&config);
1038
config.publish_hinfo = 0;
1039
config.publish_addresses = 0;
1040
config.publish_workstation = 0;
1041
config.publish_domain = 0;
1042
1043
/* Allocate a new server */
1044
mc.server = avahi_server_new(avahi_simple_poll_get
1045
(mc.simple_poll), &config, NULL,
1046
NULL, &error);
1047
1048
/* Free the Avahi configuration data */
1049
avahi_server_config_free(&config);
1050
}
1051
1052
/* Check if creating the Avahi server object succeeded */
1053
if (mc.server == NULL) {
1054
fprintf(stderr, "Failed to create Avahi server: %s\n",
1055
avahi_strerror(error));
1056
exitcode = EXIT_FAILURE;
1057
goto end;
1058
}
1059
1060
/* Create the Avahi service browser */
1061
sb = avahi_s_service_browser_new(mc.server, if_index,
1062
AVAHI_PROTO_INET6,
1063
"_mandos._tcp", NULL, 0,
1064
browse_callback, &mc);
1065
if (sb == NULL) {
1066
fprintf(stderr, "Failed to create service browser: %s\n",
1067
avahi_strerror(avahi_server_errno(mc.server)));
1068
exitcode = EXIT_FAILURE;
1069
goto end;
1070
}
1071
1072
/* Run the main loop */
1073
1074
if (debug){
1075
fprintf(stderr, "Starting Avahi loop search\n");
1076
}
1077
1078
avahi_simple_poll_loop(mc.simple_poll);
1079
1156
1080
end:
1157
1158
if(debug){
1159
fprintf(stderr, "%s exiting\n", argv[0]);
1160
}
1161
1162
/* Cleanup things */
1163
if(sb != NULL)
1164
avahi_s_service_browser_free(sb);
1165
1166
if(mc.server != NULL)
1167
avahi_server_free(mc.server);
1168
1169
if(mc.simple_poll != NULL)
1170
avahi_simple_poll_free(mc.simple_poll);
1171
1172
if(gnutls_initialized){
1173
gnutls_certificate_free_credentials(mc.cred);
1174
gnutls_global_deinit();
1175
gnutls_dh_params_deinit(mc.dh_params);
1176
}
1177
1178
if(gpgme_initialized){
1179
gpgme_release(mc.ctx);
1180
}
1181
1182
/* Removes the temp directory used by GPGME */
1183
if(tempdir_created){
1184
DIR *d;
1185
struct dirent *direntry;
1186
d = opendir(tempdir);
1187
if(d == NULL){
1188
if(errno != ENOENT){
1081
1082
if (debug){
1083
fprintf(stderr, "%s exiting\n", argv[0]);
1084
}
1085
1086
/* Cleanup things */
1087
if (sb != NULL)
1088
avahi_s_service_browser_free(sb);
1089
1090
if (mc.server != NULL)
1091
avahi_server_free(mc.server);
1092
1093
if (mc.simple_poll != NULL)
1094
avahi_simple_poll_free(mc.simple_poll);
1095
1096
if (gnutls_initalized){
1097
gnutls_certificate_free_credentials(mc.cred);
1098
gnutls_global_deinit ();
1099
}
1100
1101
if(pgpme_initalized){
1102
gpgme_release(mc.ctx);
1103
}
1104
1105
/* Removes the temp directory used by GPGME */
1106
if(tempdir[0] != '\0'){
1107
DIR *d;
1108
struct dirent *direntry;
1109
d = opendir(tempdir);
1110
if(d == NULL){
1189
1111
perror("opendir");
1190
}
1191
} else {
1192
while(true){
1193
direntry = readdir(d);
1194
if(direntry == NULL){
1195
break;
1196
}
1197
/* Skip "." and ".." */
1198
if(direntry->d_name[0] == '.'
1199
and (direntry->d_name[1] == '\0'
1200
or (direntry->d_name[1] == '.'
1201
and direntry->d_name[2] == '\0'))){
1202
continue;
1203
}
1204
char *fullname = NULL;
1205
ret = asprintf(&fullname, "%s/%s", tempdir,
1206
direntry->d_name);
1207
if(ret < 0){
1208
perror("asprintf");
1209
continue;
1210
}
1211
ret = remove(fullname);
1212
if(ret == -1){
1213
fprintf(stderr, "remove(\"%s\"): %s\n", fullname,
1214
strerror(errno));
1215
}
1216
free(fullname);
1217
}
1218
closedir(d);
1219
}
1220
ret = rmdir(tempdir);
1221
if(ret == -1 and errno != ENOENT){
1222
perror("rmdir");
1223
}
1224
}
1225
1226
return exitcode;
1112
} else {
1113
while(true){
1114
direntry = readdir(d);
1115
if(direntry == NULL){
1116
break;
1117
}
1118
if (direntry->d_type == DT_REG){
1119
char *fullname = NULL;
1120
ret = asprintf(&fullname, "%s/%s", tempdir,
1121
direntry->d_name);
1122
if(ret < 0){
1123
perror("asprintf");
1124
continue;
1125
}
1126
ret = unlink(fullname);
1127
if(ret == -1){
1128
fprintf(stderr, "unlink(\"%s\"): %s",
1129
fullname, strerror(errno));
1130
}
1131
free(fullname);
1132
}
1133
}
1134
}
1135
ret = rmdir(tempdir);
1136
if(ret == -1){
1137
perror("rmdir");
1138
}
1139
}
1140
1141
return exitcode;
1227
1142
}
Loggerhead is a web-based interface for Breezy
Version: 2.0.2.dev0