/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk

« back to all changes in this revision

Viewing changes to plugins.d/mandos-client.c

  • Committer: Teddy Hogeborn
  • Date: 2015-07-08 21:18:49 UTC
  • Revision ID: teddy@recompile.se-20150708211849-scisutuofnxumqc7
mandos-client: Add --dh-params FILE option.

* plugins.d/mandos-client.c: Added --dh-params FILE option.
  (init_gnutls_global): New "dhparamsfilename" argument.  All callers
                        changed.  Read and use Diffie-Hellman
                        parameters from it.  Bug fix:  check for error
                        when opening seckeyfile for the second time.
  (init_gnutls_session): Remove unnecessary call to
                         gnutls_dh_set_prime_bits();
  (main): New variable "dh_params_file".
  (main/argp_options): Added "--dh-params" option.
  (main/parse_opt): - '' -
* plugins.d/mandos-client.xml (SYNOPSIS): Add --dh-params option.
  (OPTIONS): Document --dh-params option and document that the
             --dh-bits options is potentially overridden by the
             --dh-params option.

Show diffs side-by-side

added added

removed removed

Lines of Context:
plugins.d/mandos-client.c
2546
2546
        }
2547
2547
      }
2548
2548
      
2549
 
      if(strcmp(dh_params_file, PATHDIR "/client-dhparams.pem" )
2550
 
         == 0){
2551
 
        int dhparams_fd = open(dh_params_file, O_RDONLY);
2552
 
        if(dhparams_fd == -1){
2553
 
          perror_plus("open");
2554
 
        } else {
2555
 
          ret = (int)TEMP_FAILURE_RETRY(fstat(dhparams_fd, &st));
2556
 
          if(ret == -1){
2557
 
            perror_plus("fstat");
2558
 
          } else {
2559
 
            if(S_ISREG(st.st_mode)
2560
 
               and st.st_uid == 0 and st.st_gid == 0){
2561
 
              ret = fchown(dhparams_fd, uid, gid);
2562
 
              if(ret == -1){
2563
 
                perror_plus("fchown");
2564
 
              }
2565
 
            }
2566
 
          }
2567
 
          TEMP_FAILURE_RETRY(close(dhparams_fd));
2568
 
        }
2569
 
      }
2570
 
      
2571
2549
      /* Lower privileges */
2572
2550
      ret_errno = lower_privileges();
2573
2551
      if(ret_errno != 0){