blob: bcf7ca02aefeb19f7fca9efe9248999cff46e7fa [file] [log] [blame]
Alexander Afanasyevc169a812014-05-20 20:37:29 -04001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Davide Pesaventob310efb2019-04-11 22:10:24 -04002/*
Davide Pesaventof2cae612021-03-24 18:47:05 -04003 * Copyright (c) 2013-2021 Regents of the University of California.
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07006 *
Alexander Afanasyevc169a812014-05-20 20:37:29 -04007 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
Yingdi Yu8d7468f2014-02-21 14:49:45 -080020 */
21
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080022#include "ndnsec.hpp"
Alexander Afanasyevd7db8bf2015-01-04 15:31:02 -080023#include "util.hpp"
Yingdi Yu8d7468f2014-02-21 14:49:45 -080024
Davide Pesaventob310efb2019-04-11 22:10:24 -040025#include "ndn-cxx/security/impl/openssl.hpp"
26
27#include <cerrno>
28#include <cstring>
29#include <unistd.h>
30
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080031namespace ndn {
32namespace ndnsec {
33
Yingdi Yu8d7468f2014-02-21 14:49:45 -080034int
35ndnsec_unlock_tpm(int argc, char** argv)
36{
Yingdi Yu8d7468f2014-02-21 14:49:45 -080037 namespace po = boost::program_options;
38
Davide Pesaventob310efb2019-04-11 22:10:24 -040039 po::options_description description(
40 "Usage: ndnsec unlock-tpm [-h]\n"
41 "\n"
42 "Options");
43 description.add_options()
44 ("help,h", "produce help message")
45 ;
Yingdi Yu8d7468f2014-02-21 14:49:45 -080046
47 po::variables_map vm;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080048 try {
49 po::store(po::parse_command_line(argc, argv, description), vm);
50 po::notify(vm);
51 }
52 catch (const std::exception& e) {
Davide Pesaventob310efb2019-04-11 22:10:24 -040053 std::cerr << "ERROR: " << e.what() << "\n\n"
54 << description << std::endl;
55 return 2;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080056 }
Yingdi Yu8d7468f2014-02-21 14:49:45 -080057
Davide Pesaventob310efb2019-04-11 22:10:24 -040058 if (vm.count("help") > 0) {
59 std::cout << description << std::endl;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080060 return 0;
61 }
Yingdi Yub61f5402014-02-26 17:46:11 -080062
Davide Pesaventob310efb2019-04-11 22:10:24 -040063#ifdef NDN_CXX_HAVE_GETPASS
Davide Pesaventof2cae612021-03-24 18:47:05 -040064 KeyChain keyChain;
Yingdi Yub61f5402014-02-26 17:46:11 -080065
Davide Pesaventob310efb2019-04-11 22:10:24 -040066 char* password = ::getpass("Password to unlock the TPM: ");
67 if (password == nullptr) {
68 std::cerr << "ERROR: getpass() failed: " << std::strerror(errno) << std::endl;
69 return 1;
70 }
71
72 bool isUnlocked = keyChain.getTpm().unlockTpm(password, std::strlen(password));
73 OPENSSL_cleanse(password, std::strlen(password));
Yingdi Yub61f5402014-02-26 17:46:11 -080074
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080075 if (isUnlocked) {
76 std::cerr << "OK: TPM is unlocked" << std::endl;
77 return 0;
78 }
79 else {
80 std::cerr << "ERROR: TPM is still locked" << std::endl;
81 return 1;
82 }
Alexander Afanasyeva2ada222015-01-22 18:34:16 -080083#else
84 std::cerr << "ERROR: Command not supported on this platform" << std::endl;
85 return 1;
86#endif // NDN_CXX_HAVE_GETPASS
Yingdi Yu8d7468f2014-02-21 14:49:45 -080087}
88
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080089} // namespace ndnsec
90} // namespace ndn