blob: b97e9345f7f1fce75c85dd5f00117213b0c8f84e [file] [log] [blame]
Alexander Afanasyev82c359c2017-01-04 14:48:07 -08001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Alexander Afanasyev22ee0892017-09-02 12:29:16 -04002/*
Davide Pesavento19442812018-11-23 14:00:04 -05003 * Copyright (c) 2013-2018 Regents of the University of California.
Alexander Afanasyev82c359c2017-01-04 14:48:07 -08004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
6 *
7 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
20 */
21
22#include "util.hpp"
23
Davide Pesavento19442812018-11-23 14:00:04 -050024#include <ndn-cxx/security/detail/openssl.hpp>
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040025
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080026namespace ndn {
27namespace ndnsec {
28
29bool
Alexander Afanasyev35109a12017-01-04 15:39:06 -080030getPassword(std::string& password, const std::string& prompt, bool shouldConfirm)
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080031{
32#ifdef NDN_CXX_HAVE_GETPASS
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040033 char* pw0 = getpass(prompt.c_str());
34 if (!pw0 || strlen(pw0) == 0) {
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080035 return false;
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040036 }
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080037 std::string password1 = pw0;
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040038 OPENSSL_cleanse(pw0, strlen(pw0));
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080039
Alexander Afanasyev35109a12017-01-04 15:39:06 -080040 if (!shouldConfirm) {
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040041 password.swap(password1);
Alexander Afanasyev35109a12017-01-04 15:39:06 -080042 return true;
43 }
44
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080045 pw0 = getpass("Confirm:");
46 if (!pw0) {
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040047 OPENSSL_cleanse(&password1.front(), password1.size());
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080048 return false;
49 }
50
Alexander Afanasyev35109a12017-01-04 15:39:06 -080051 bool isReady = false;
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040052 if (password1.size() == strlen(pw0) &&
53 CRYPTO_memcmp(password1.data(), pw0, password1.size()) == 0) {
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080054 isReady = true;
55 password.swap(password1);
56 }
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040057 else {
58 OPENSSL_cleanse(&password1.front(), password1.size());
59 }
60 OPENSSL_cleanse(pw0, strlen(pw0));
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080061
62 return isReady;
63#else
64 return false;
65#endif // NDN_CXX_HAVE_GETPASS
66}
67
Alexander Afanasyev35109a12017-01-04 15:39:06 -080068security::v2::Certificate
69loadCertificate(const std::string& fileName)
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080070{
Alexander Afanasyev35109a12017-01-04 15:39:06 -080071 shared_ptr<security::v2::Certificate> cert;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080072 if (fileName == "-")
Alexander Afanasyev35109a12017-01-04 15:39:06 -080073 cert = io::load<security::v2::Certificate>(std::cin);
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080074 else
Alexander Afanasyev35109a12017-01-04 15:39:06 -080075 cert = io::load<security::v2::Certificate>(fileName);
76
77 if (cert == nullptr) {
78 BOOST_THROW_EXCEPTION(CannotLoadCertificate(fileName));
79 }
80 return *cert;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080081}
82
83} // namespace ndnsec
84} // namespace ndn