bin/dnssec/dnssectool.c

	dnssectool.c revision ee303f481dfefcd4e4994f8b8b17f2de32aa4d69
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews/*
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Copyright (C) 2000  Internet Software Consortium.
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Permission to use, copy, modify, and distribute this software for any
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * purpose with or without fee is hereby granted, provided that the above
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * copyright notice and this permission notice appear in all copies.
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews *
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews * THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt * DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews * INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT,
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews * FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews * NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
f333ea9bdd3f85b74ae790e6c8ce2684295b3483Andreas Gustafsson * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews */
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews/* $Id: dnssectool.c,v 1.26 2000/12/27 00:11:23 bwelling Exp $ */
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews
5a77e9620a0b2f7417469c98be374de49d0eccc6Andreas Gustafsson#include <config.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews#include <stdlib.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews#include <isc/buffer.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews#include <isc/entropy.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews#include <isc/keyboard.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews#include <isc/string.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews#include <isc/time.h>
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson#include <isc/util.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews#include <isc/print.h>
23dd2af8d3aaefcb05bf3664f6aa087d24d9cca8Mark Andrews
2c35c682362049f823248542e07e7dca4008b986Mark Andrews#include <dns/log.h>
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews#include <dns/name.h>
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews#include <dns/rdatastruct.h>
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews#include <dns/rdatatype.h>
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews#include <dns/result.h>
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews#include <dns/secalg.h>
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews#include <dns/time.h>
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews
2c35c682362049f823248542e07e7dca4008b986Mark Andrews#include "dnssectool.h"
2c35c682362049f823248542e07e7dca4008b986Mark Andrews
56a520ef3a357f2085d49d8a364839ad01e1b04bMark Andrewsextern int verbose;
2c35c682362049f823248542e07e7dca4008b986Mark Andrewsextern const char *program;
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt
2c35c682362049f823248542e07e7dca4008b986Mark Andrewsstatic isc_entropysource_t *source = NULL;
2c35c682362049f823248542e07e7dca4008b986Mark Andrewsstatic isc_keyboard_t kbd;
static isc_boolean_t wantkeyboard = ISC_FALSE;

void
fatal(const char *format, ...) {
    va_list args;

    fprintf(stderr, "%s: ", program);
    va_start(args, format);
    vfprintf(stderr, format, args);
    va_end(args);
    fprintf(stderr, "\n");
    exit(1);
}

void
check_result(isc_result_t result, const char *message) {
    if (result != ISC_R_SUCCESS) {
        fprintf(stderr, "%s: %s: %s\n", program, message,
            isc_result_totext(result));
        exit(1);
    }
}

void
vbprintf(int level, const char *fmt, ...) {
    va_list ap;
    if (level > verbose)
        return;
    va_start(ap, fmt);
    fprintf(stderr, "%s: ", program);
    vfprintf(stderr, fmt, ap);
    va_end(ap);
}

void
type_format(const dns_rdatatype_t type, char *cp, unsigned int size) {
    isc_buffer_t b;
    isc_region_t r;
    isc_result_t result;

    isc_buffer_init(&b, cp, size - 1);
    result = dns_rdatatype_totext(type, &b);
    check_result(result, "dns_rdatatype_totext()");
    isc_buffer_usedregion(&b, &r);
    r.base[r.length] = 0;
}

void
alg_format(const dns_secalg_t alg, char *cp, unsigned int size) {
    isc_buffer_t b;
    isc_region_t r;
    isc_result_t result;

    isc_buffer_init(&b, cp, size - 1);
    result = dns_secalg_totext(alg, &b);
    check_result(result, "dns_secalg_totext()");
    isc_buffer_usedregion(&b, &r);
    r.base[r.length] = 0;
}

void
sig_format(dns_rdata_sig_t *sig, char *cp, unsigned int size) {
    char namestr[DNS_NAME_FORMATSIZE];
    char algstr[DNS_NAME_FORMATSIZE];

    dns_name_format(&sig->signer, namestr, sizeof namestr);
    alg_format(sig->algorithm, algstr, sizeof algstr);
    snprintf(cp, size, "%s/%s/%d", namestr, algstr, sig->keyid);
}

void
key_format(const dst_key_t *key, char *cp, unsigned int size) {
    char namestr[DNS_NAME_FORMATSIZE];
    char algstr[DNS_NAME_FORMATSIZE];

    dns_name_format(dst_key_name(key), namestr, sizeof namestr);
    alg_format(dst_key_alg(key), algstr, sizeof algstr);
    snprintf(cp, size, "%s/%s/%d", namestr, algstr, dst_key_id(key));
}

void
setup_logging(int verbose, isc_mem_t *mctx, isc_log_t **logp) {
    isc_result_t result;
    isc_logdestination_t destination;
    isc_logconfig_t *logconfig = NULL;
    isc_log_t *log = NULL;
    int level;

    switch (verbose) {
    case 0:
        /*
         * We want to see warnings about things like out-of-zone
         * data in the master file even when not verbose.
         */
        level = ISC_LOG_WARNING;
        break;
    case 1:
        level = ISC_LOG_INFO;
        break;
    default:
        level = ISC_LOG_DEBUG(verbose - 2 + 1);
        break;
    }

    RUNTIME_CHECK(isc_log_create(mctx, &log, &logconfig) == ISC_R_SUCCESS);
    isc_log_setcontext(log);
    dns_log_init(log);
    dns_log_setcontext(log);

    RUNTIME_CHECK(isc_log_settag(logconfig, program) == ISC_R_SUCCESS);

    /*
     * Set up a channel similar to default_stderr except:
     *  - the logging level is passed in
     *  - the program name and logging level are printed
     *  - no time stamp is printed
     */
    destination.file.stream = stderr;
    destination.file.name = NULL;
    destination.file.versions = ISC_LOG_ROLLNEVER;
    destination.file.maximum_size = 0;
    result = isc_log_createchannel(logconfig, "stderr",
                       ISC_LOG_TOFILEDESC,
                       level,
                       &destination,
                       ISC_LOG_PRINTTAG|ISC_LOG_PRINTLEVEL);
    check_result(result, "isc_log_createchannel()");

    RUNTIME_CHECK(isc_log_usechannel(logconfig, "stderr",
                     NULL, NULL) == ISC_R_SUCCESS);

    *logp = log;
}

void
cleanup_logging(isc_log_t **logp) {
    isc_log_t *log;

    REQUIRE(logp != NULL);

    log = *logp;
    if (log == NULL)
        return;
    isc_log_destroy(&log);
    isc_log_setcontext(NULL);
    dns_log_setcontext(NULL);
    logp = NULL;
}

static isc_result_t
kbdstart(isc_entropysource_t *source, void *arg, isc_boolean_t blocking) {
    isc_keyboard_t *kbd = (isc_keyboard_t *)arg;
    static isc_boolean_t first = ISC_TRUE;

    UNUSED(source);

    if (!blocking)
        return (ISC_R_NOENTROPY);
    if (first) {
        if (!wantkeyboard) {
            fprintf(stderr, "You must use the keyboard to create "
                "entropy, since your system is lacking\n");
            fprintf(stderr, "/dev/random (or equivalent)\n\n");
        }
        first = ISC_FALSE;
    }
    fprintf(stderr, "start typing:\n");
    return (isc_keyboard_open(kbd));
}

static void
kbdstop(isc_entropysource_t *source, void *arg) {
    isc_keyboard_t *kbd = (isc_keyboard_t *)arg;

    UNUSED(source);

    if (!isc_keyboard_canceled(kbd))
        fprintf(stderr, "stop typing.\r\n");
    (void)isc_keyboard_close(kbd, 3);
}

static isc_result_t
kbdget(isc_entropysource_t *source, void *arg, isc_boolean_t blocking) {
    isc_keyboard_t *kbd = (isc_keyboard_t *)arg;
    isc_result_t result;
    isc_time_t t;
    isc_uint32_t sample;
    isc_uint32_t extra;
    unsigned char c;

    if (!blocking)
        return (ISC_R_NOTBLOCKING);

    result = isc_keyboard_getchar(kbd, &c);
    if (result != ISC_R_SUCCESS)
        return (result);

    result = isc_time_now(&t);
    if (result != ISC_R_SUCCESS)
        return (result);

    sample = isc_time_nanoseconds(&t);
    extra = c;

    result = isc_entropy_addcallbacksample(source, sample, extra);
    if (result != ISC_R_SUCCESS) {
        fprintf(stderr, "\r\n");
        return (result);
    }

    fprintf(stderr, ".");
    fflush(stderr);

    return (result);
}

void
setup_entropy(isc_mem_t *mctx, const char *randomfile, isc_entropy_t **ectx) {
    isc_result_t result;

    result = isc_entropy_create(mctx, ectx);
    if (result != ISC_R_SUCCESS)
        fatal("could not create entropy object");
    if (randomfile != NULL && strcasecmp(randomfile, "keyboard") != 0) {
        result = isc_entropy_createfilesource(*ectx, randomfile);
        if (result != ISC_R_SUCCESS)
            fatal("could not open randomdev %s: %s", randomfile,
                  isc_result_totext(result));
    }
    else {
#ifdef PATH_RANDOMDEV
        if (randomfile == NULL) {
            result = isc_entropy_createfilesource(*ectx,
                                  PATH_RANDOMDEV);
            if (result == ISC_R_SUCCESS)
                return;
        }
        else
#endif
            wantkeyboard = ISC_TRUE;
        result = isc_entropy_createcallbacksource(*ectx, kbdstart,
                              kbdget, kbdstop,
                              &kbd, &source);
        if (result != ISC_R_SUCCESS)
            fatal("failed to open keyboard: %s\n",
                  isc_result_totext(result));
    }
}

void
cleanup_entropy(isc_entropy_t **ectx) {
    if (source != NULL)
        isc_entropy_destroysource(&source);
    isc_entropy_detach(ectx);
}

isc_stdtime_t
strtotime(char *str, isc_int64_t now, isc_int64_t base) {
    isc_int64_t val, offset;
    isc_result_t result;
    char *endp;

    if (str[0] == '+') {
        offset = strtol(str + 1, &endp, 0);
        if (*endp != '\0')
            fatal("time value %s is invalid", str);
        val = base + offset;
    } else if (strncmp(str, "now+", 4) == 0) {
        offset = strtol(str + 4, &endp, 0);
        if (*endp != '\0')
            fatal("time value %s is invalid", str);
        val = now + offset;
    } else if (strlen(str) == 8) {
        char timestr[15];
        sprintf(timestr, "%s000000", str);
        result = dns_time64_fromtext(timestr, &val);
        if (result != ISC_R_SUCCESS)
            fatal("time value %s is invalid", str);
    } else {
        result = dns_time64_fromtext(str, &val);
        if (result != ISC_R_SUCCESS)
            fatal("time value %s is invalid", str);
    }

    return ((isc_stdtime_t) val);
}