httpd/support/htdigest.c

	htdigest.c revision 46d8f3df5a564fd58591687e66cbde1e863a9a74
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose/* Licensed to the Apache Software Foundation (ASF) under one or more
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * contributor license agreements.  See the NOTICE file distributed with
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * this work for additional information regarding copyright ownership.
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * The ASF licenses this file to You under the Apache License, Version 2.0
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * (the "License"); you may not use this file except in compliance with
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * the License.  You may obtain a copy of the License at
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose *
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose *     http://www.apache.org/licenses/LICENSE-2.0
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose *
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * Unless required by applicable law or agreed to in writing, software
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * distributed under the License is distributed on an "AS IS" BASIS,
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * See the License for the specific language governing permissions and
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * limitations under the License.
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose */
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose/******************************************************************************
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose ******************************************************************************
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * NOTE! This program is not safe as a setuid executable!  Do not make it
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * setuid!
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose ******************************************************************************
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose *****************************************************************************/
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose/*
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * htdigest.c: simple program for manipulating digest passwd file for Apache
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose *
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose * by Alexei Kosut, based on htpasswd.c, by Rob McCool
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose */
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr.h"
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr_file_io.h"
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr_md5.h"
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr_lib.h"            /* for apr_getpass() */
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr_general.h"
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr_signal.h"
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr_strings.h"        /* for apr_pstrdup() */
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#define APR_WANT_STDIO
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#define APR_WANT_STRFUNC
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include "apr_want.h"
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#if APR_HAVE_SYS_TYPES_H
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include <sys/types.h>
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#endif
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#if APR_HAVE_STDLIB_H
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include <stdlib.h>
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#endif
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#ifdef WIN32
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#include <conio.h>
b6cd138f1e444d73295d3d3869de2dc4194f1742Lukas Slebodnik#endif
b6cd138f1e444d73295d3d3869de2dc4194f1742Lukas Slebodnik
b6cd138f1e444d73295d3d3869de2dc4194f1742Lukas Slebodnik
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#if APR_CHARSET_EBCDIC
b6cd138f1e444d73295d3d3869de2dc4194f1742Lukas Slebodnik#define LF '\n'
b6cd138f1e444d73295d3d3869de2dc4194f1742Lukas Slebodnik#define CR '\r'
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#else
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#define LF 10
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#define CR 13
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#endif /* APR_CHARSET_EBCDIC */
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose#define MAX_STRING_LEN 256
1d1a0a019d8d4d9ab0f51ada03604cd2cada287eSumit Bose
apr_file_t *tfp = NULL;
apr_file_t *errfile;
apr_pool_t *cntxt;
#if APR_CHARSET_EBCDIC
apr_xlate_t *to_ascii;
#endif

static void cleanup_tempfile_and_exit(int rc)
{
    if (tfp) {
        apr_file_close(tfp);
    }
    exit(rc);
}

static void getword(char *word, char *line, char stop)
{
    int x = 0, y;

    for (x = 0; ((line[x]) && (line[x] != stop)); x++)
        word[x] = line[x];

    word[x] = '\0';
    if (line[x])
        ++x;
    y = 0;

    while ((line[y++] = line[x++]));
}

static int get_line(char *s, int n, apr_file_t *f)
{
    register int i = 0;
    char ch;
    apr_status_t rv = APR_EINVAL;

    while (i < (n - 1) &&
           ((rv = apr_file_getc(&ch, f)) == APR_SUCCESS) && (ch != '\n')) {
        s[i++] = ch;
    }
    if (ch == '\n')
        s[i++] = ch;
    s[i] = '\0';

    if (rv != APR_SUCCESS)
        return 1;

    return 0;
}

static void putline(apr_file_t *f, char *l)
{
    int x;

    for (x = 0; l[x]; x++)
        apr_file_putc(l[x], f);
}


static void add_password(const char *user, const char *realm, apr_file_t *f)
{
    char *pw;
    apr_md5_ctx_t context;
    unsigned char digest[16];
    char string[MAX_STRING_LEN];
    char pwin[MAX_STRING_LEN];
    char pwv[MAX_STRING_LEN];
    unsigned int i;
    apr_size_t len = sizeof(pwin);

    if (apr_password_get("New password: ", pwin, &len) != APR_SUCCESS) {
        apr_file_printf(errfile, "password too long");
        cleanup_tempfile_and_exit(5);
    }
    len = sizeof(pwin);
    apr_password_get("Re-type new password: ", pwv, &len);
    if (strcmp(pwin, pwv) != 0) {
        apr_file_printf(errfile, "They don't match, sorry.\n");
        cleanup_tempfile_and_exit(1);
    }
    pw = pwin;
    apr_file_printf(f, "%s:%s:", user, realm);

    /* Do MD5 stuff */
    sprintf(string, "%s:%s:%s", user, realm, pw);

    apr_md5_init(&context);
#if APR_CHARSET_EBCDIC
    apr_md5_set_xlate(&context, to_ascii);
#endif
    apr_md5_update(&context, (unsigned char *) string, strlen(string));
    apr_md5_final(digest, &context);

    for (i = 0; i < 16; i++)
        apr_file_printf(f, "%02x", digest[i]);

    apr_file_printf(f, "\n");
}

static void usage(void)
{
    apr_file_printf(errfile, "Usage: htdigest [-c] passwordfile realm username\n");
    apr_file_printf(errfile, "The -c flag creates a new file.\n");
    exit(1);
}

static void interrupted(void)
{
    apr_file_printf(errfile, "Interrupted.\n");
    cleanup_tempfile_and_exit(1);
}

static void terminate(void)
{
    apr_terminate();
#ifdef NETWARE
    pressanykey();
#endif
}

int main(int argc, const char * const argv[])
{
    apr_file_t *f;
    apr_status_t rv;
    char tn[] = "htdigest.tmp.XXXXXX";
    char *dirname;
    char user[MAX_STRING_LEN];
    char realm[MAX_STRING_LEN];
    char line[MAX_STRING_LEN];
    char l[MAX_STRING_LEN];
    char w[MAX_STRING_LEN];
    char x[MAX_STRING_LEN];
    int found;

    apr_app_initialize(&argc, &argv, NULL);
    atexit(terminate);
    apr_pool_create(&cntxt, NULL);
    apr_file_open_stderr(&errfile, cntxt);

#if APR_CHARSET_EBCDIC
    rv = apr_xlate_open(&to_ascii, "ISO-8859-1", APR_DEFAULT_CHARSET, cntxt);
    if (rv) {
        apr_file_printf(errfile, "apr_xlate_open(): %s (%d)\n",
                apr_strerror(rv, line, sizeof(line)), rv);
        exit(1);
    }
#endif

    apr_signal(SIGINT, (void (*)(int)) interrupted);
    if (argc == 5) {
        if (strcmp(argv[1], "-c"))
            usage();
        rv = apr_file_open(&f, argv[2], APR_WRITE | APR_CREATE,
                           APR_OS_DEFAULT, cntxt);
        if (rv != APR_SUCCESS) {
            char errmsg[120];

            apr_file_printf(errfile, "Could not open passwd file %s for writing: %s\n",
                    argv[2],
                    apr_strerror(rv, errmsg, sizeof errmsg));
            exit(1);
        }
        apr_cpystrn(user, argv[4], sizeof(user));
        apr_cpystrn(realm, argv[3], sizeof(realm));
        apr_file_printf(errfile, "Adding password for %s in realm %s.\n",
                    user, realm);
        add_password(user, realm, f);
        apr_file_close(f);
        exit(0);
    }
    else if (argc != 4)
        usage();

    if (apr_temp_dir_get((const char**)&dirname, cntxt) != APR_SUCCESS) {
        apr_file_printf(errfile, "%s: could not determine temp dir\n",
                        argv[0]);
        exit(1);
    }
    dirname = apr_psprintf(cntxt, "%s/%s", dirname, tn);

    if (apr_file_mktemp(&tfp, dirname, 0, cntxt) != APR_SUCCESS) {
        apr_file_printf(errfile, "Could not open temp file %s.\n", dirname);
        exit(1);
    }

    if (apr_file_open(&f, argv[1], APR_READ, APR_OS_DEFAULT, cntxt) != APR_SUCCESS) {
        apr_file_printf(errfile,
                "Could not open passwd file %s for reading.\n", argv[1]);
        apr_file_printf(errfile, "Use -c option to create new one.\n");
        cleanup_tempfile_and_exit(1);
    }
    apr_cpystrn(user, argv[3], sizeof(user));
    apr_cpystrn(realm, argv[2], sizeof(realm));

    found = 0;
    while (!(get_line(line, MAX_STRING_LEN, f))) {
        if (found || (line[0] == '#') || (!line[0])) {
            putline(tfp, line);
            continue;
        }
        strcpy(l, line);
        getword(w, l, ':');
        getword(x, l, ':');
        if (strcmp(user, w) || strcmp(realm, x)) {
            putline(tfp, line);
            continue;
        }
        else {
            apr_file_printf(errfile, "Changing password for user %s in realm %s\n",
                    user, realm);
            add_password(user, realm, tfp);
            found = 1;
        }
    }
    if (!found) {
        apr_file_printf(errfile, "Adding user %s in realm %s\n", user, realm);
        add_password(user, realm, tfp);
    }
    apr_file_close(f);

    /* The temporary file has all the data, just copy it to the new location.
     */
    if (apr_file_copy(dirname, argv[1], APR_FILE_SOURCE_PERMS, cntxt) !=
                APR_SUCCESS) {
        apr_file_printf(errfile, "%s: unable to update file %s\n",
                        argv[0], argv[1]);
    }
    apr_file_close(tfp);

    return 0;
}