blob: c07b509921e2659ebb782a448d435a77f86ea39f [file] [log] [blame]
Alexander Afanasyev82c359c2017-01-04 14:48:07 -08001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Alexander Afanasyev22ee0892017-09-02 12:29:16 -04002/*
Davide Pesavento25d4f1c2020-04-29 23:31:04 -04003 * Copyright (c) 2013-2020 Regents of the University of California.
Alexander Afanasyev82c359c2017-01-04 14:48:07 -08004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
6 *
7 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
20 */
21
22#include "util.hpp"
23
Junxiao Shi24c5a002018-12-12 04:47:15 +000024#include "ndn-cxx/security/impl/openssl.hpp"
Davide Pesavento25d4f1c2020-04-29 23:31:04 -040025#include "ndn-cxx/util/io.hpp"
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040026
Davide Pesaventofa995ac2019-03-27 23:44:46 -040027#include <unistd.h>
28
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080029namespace ndn {
30namespace ndnsec {
31
32bool
Alexander Afanasyev35109a12017-01-04 15:39:06 -080033getPassword(std::string& password, const std::string& prompt, bool shouldConfirm)
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080034{
35#ifdef NDN_CXX_HAVE_GETPASS
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040036 char* pw0 = getpass(prompt.c_str());
37 if (!pw0 || strlen(pw0) == 0) {
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080038 return false;
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040039 }
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080040 std::string password1 = pw0;
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040041 OPENSSL_cleanse(pw0, strlen(pw0));
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080042
Alexander Afanasyev35109a12017-01-04 15:39:06 -080043 if (!shouldConfirm) {
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040044 password.swap(password1);
Alexander Afanasyev35109a12017-01-04 15:39:06 -080045 return true;
46 }
47
Davide Pesaventofa995ac2019-03-27 23:44:46 -040048 pw0 = getpass("Confirm: ");
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080049 if (!pw0) {
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040050 OPENSSL_cleanse(&password1.front(), password1.size());
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080051 return false;
52 }
53
Alexander Afanasyev35109a12017-01-04 15:39:06 -080054 bool isReady = false;
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040055 if (password1.size() == strlen(pw0) &&
56 CRYPTO_memcmp(password1.data(), pw0, password1.size()) == 0) {
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080057 isReady = true;
58 password.swap(password1);
59 }
Alexander Afanasyev22ee0892017-09-02 12:29:16 -040060 else {
61 OPENSSL_cleanse(&password1.front(), password1.size());
62 }
63 OPENSSL_cleanse(pw0, strlen(pw0));
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080064
65 return isReady;
66#else
67 return false;
68#endif // NDN_CXX_HAVE_GETPASS
69}
70
Alexander Afanasyev35109a12017-01-04 15:39:06 -080071security::v2::Certificate
Junxiao Shibc2e78e2020-05-20 15:01:08 -060072getCertificateFromPib(const security::pib::Pib& pib, const Name& name,
73 bool isIdentityName, bool isKeyName, bool isCertName)
74{
75 if (isIdentityName) {
76 return pib.getIdentity(name)
77 .getDefaultKey()
78 .getDefaultCertificate();
79 }
80 else if (isKeyName) {
81 return pib.getIdentity(security::v2::extractIdentityFromKeyName(name))
82 .getKey(name)
83 .getDefaultCertificate();
84 }
85 else if (isCertName) {
86 return pib.getIdentity(security::v2::extractIdentityFromCertName(name))
87 .getKey(security::v2::extractKeyNameFromCertName(name))
88 .getCertificate(name);
89 }
90 NDN_CXX_UNREACHABLE;
91}
92
93security::v2::Certificate
Alexander Afanasyev35109a12017-01-04 15:39:06 -080094loadCertificate(const std::string& fileName)
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080095{
Alexander Afanasyev35109a12017-01-04 15:39:06 -080096 shared_ptr<security::v2::Certificate> cert;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080097 if (fileName == "-")
Alexander Afanasyev35109a12017-01-04 15:39:06 -080098 cert = io::load<security::v2::Certificate>(std::cin);
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080099 else
Alexander Afanasyev35109a12017-01-04 15:39:06 -0800100 cert = io::load<security::v2::Certificate>(fileName);
101
102 if (cert == nullptr) {
Davide Pesavento923ba442019-02-12 22:00:38 -0500103 NDN_THROW(CannotLoadCertificate(fileName));
Alexander Afanasyev35109a12017-01-04 15:39:06 -0800104 }
105 return *cert;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -0800106}
107
108} // namespace ndnsec
109} // namespace ndn