PageRenderTime 26ms CodeModel.GetById 12ms app.highlight 10ms RepoModel.GetById 1ms app.codeStats 0ms

/contrib/bind9/bin/named/tkeyconf.c

https://bitbucket.org/freebsd/freebsd-head/
C | 136 lines | 97 code | 21 blank | 18 comment | 17 complexity | a6c4bad80569f2673dee299b68da7786 MD5 | raw file
  1/*
  2 * Copyright (C) 2004-2007, 2009, 2010  Internet Systems Consortium, Inc. ("ISC")
  3 * Copyright (C) 1999-2001  Internet Software Consortium.
  4 *
  5 * Permission to use, copy, modify, and/or distribute this software for any
  6 * purpose with or without fee is hereby granted, provided that the above
  7 * copyright notice and this permission notice appear in all copies.
  8 *
  9 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 10 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 11 * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 12 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 13 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 14 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 15 * PERFORMANCE OF THIS SOFTWARE.
 16 */
 17
 18/* $Id: tkeyconf.c,v 1.33 2010/12/20 23:47:20 tbox Exp $ */
 19
 20/*! \file */
 21
 22#include <config.h>
 23
 24#include <isc/buffer.h>
 25#include <isc/string.h>		/* Required for HP/UX (and others?) */
 26#include <isc/mem.h>
 27
 28#include <isccfg/cfg.h>
 29
 30#include <dns/fixedname.h>
 31#include <dns/keyvalues.h>
 32#include <dns/name.h>
 33#include <dns/tkey.h>
 34
 35#include <dst/gssapi.h>
 36
 37#include <named/tkeyconf.h>
 38
 39#define RETERR(x) do { \
 40	result = (x); \
 41	if (result != ISC_R_SUCCESS) \
 42		goto failure; \
 43	} while (0)
 44
 45#include<named/log.h>
 46#define LOG(msg) \
 47	isc_log_write(ns_g_lctx, \
 48	NS_LOGCATEGORY_GENERAL, \
 49	NS_LOGMODULE_SERVER, \
 50	ISC_LOG_ERROR, \
 51	"%s", msg)
 52
 53isc_result_t
 54ns_tkeyctx_fromconfig(const cfg_obj_t *options, isc_mem_t *mctx,
 55		      isc_entropy_t *ectx, dns_tkeyctx_t **tctxp)
 56{
 57	isc_result_t result;
 58	dns_tkeyctx_t *tctx = NULL;
 59	const char *s;
 60	isc_uint32_t n;
 61	dns_fixedname_t fname;
 62	dns_name_t *name;
 63	isc_buffer_t b;
 64	const cfg_obj_t *obj;
 65	int type;
 66
 67	result = dns_tkeyctx_create(mctx, ectx, &tctx);
 68	if (result != ISC_R_SUCCESS)
 69		return (result);
 70
 71	obj = NULL;
 72	result = cfg_map_get(options, "tkey-dhkey", &obj);
 73	if (result == ISC_R_SUCCESS) {
 74		s = cfg_obj_asstring(cfg_tuple_get(obj, "name"));
 75		n = cfg_obj_asuint32(cfg_tuple_get(obj, "keyid"));
 76		isc_buffer_init(&b, s, strlen(s));
 77		isc_buffer_add(&b, strlen(s));
 78		dns_fixedname_init(&fname);
 79		name = dns_fixedname_name(&fname);
 80		RETERR(dns_name_fromtext(name, &b, dns_rootname, 0, NULL));
 81		type = DST_TYPE_PUBLIC|DST_TYPE_PRIVATE|DST_TYPE_KEY;
 82		RETERR(dst_key_fromfile(name, (dns_keytag_t) n, DNS_KEYALG_DH,
 83					type, NULL, mctx, &tctx->dhkey));
 84	}
 85
 86	obj = NULL;
 87	result = cfg_map_get(options, "tkey-domain", &obj);
 88	if (result == ISC_R_SUCCESS) {
 89		s = cfg_obj_asstring(obj);
 90		isc_buffer_init(&b, s, strlen(s));
 91		isc_buffer_add(&b, strlen(s));
 92		dns_fixedname_init(&fname);
 93		name = dns_fixedname_name(&fname);
 94		RETERR(dns_name_fromtext(name, &b, dns_rootname, 0, NULL));
 95		tctx->domain = isc_mem_get(mctx, sizeof(dns_name_t));
 96		if (tctx->domain == NULL) {
 97			result = ISC_R_NOMEMORY;
 98			goto failure;
 99		}
100		dns_name_init(tctx->domain, NULL);
101		RETERR(dns_name_dup(name, mctx, tctx->domain));
102	}
103
104	obj = NULL;
105	result = cfg_map_get(options, "tkey-gssapi-credential", &obj);
106	if (result == ISC_R_SUCCESS) {
107		s = cfg_obj_asstring(obj);
108
109		isc_buffer_init(&b, s, strlen(s));
110		isc_buffer_add(&b, strlen(s));
111		dns_fixedname_init(&fname);
112		name = dns_fixedname_name(&fname);
113		RETERR(dns_name_fromtext(name, &b, dns_rootname, 0, NULL));
114		RETERR(dst_gssapi_acquirecred(name, ISC_FALSE, &tctx->gsscred));
115	}
116
117	obj = NULL;
118	result = cfg_map_get(options, "tkey-gssapi-keytab", &obj);
119	if (result == ISC_R_SUCCESS) {
120		s = cfg_obj_asstring(obj);
121		tctx->gssapi_keytab = isc_mem_strdup(mctx, s);
122		if (tctx->gssapi_keytab == NULL) {
123			result = ISC_R_NOMEMORY;
124			goto failure;
125		}
126	}
127
128
129	*tctxp = tctx;
130	return (ISC_R_SUCCESS);
131
132 failure:
133	dns_tkeyctx_destroy(&tctx);
134	return (result);
135}
136