#include "apr.h"

#include "apr_file_io.h"

#include "apr_md5.h"

#include "apr_lib.h" /* for apr_getpass() */

#include "apr_general.h"

#if APR_HAVE_STDIO_H

#include <stdio.h>

#endif

#if APR_HAVE_SYS_TYPES_H

#include <sys/types.h>

#endif

#if APR_HAVE_SYS_SIGNAL_H

#include <sys/signal.h>

#endif

#if APR_HAVE_SIGNAL_H

#include <signal.h>

#endif

#include <stdlib.h>

#ifdef WIN32

#include <conio.h>

#endif

#if APR_CHARSET_EBCDIC

#define LF '\n'

#define CR '\r'

#else

#define LF 10

#define CR 13

#endif /* APR_CHARSET_EBCDIC */

#define MAX_STRING_LEN 256

char *tn;

apr_pool_t *cntxt;

#if APR_CHARSET_EBCDIC

apr_xlate_t *to_ascii;

#endif

static void getword(char *word, char *line, char stop)

{

int x = 0, y;

for (x = 0; ((line[x]) && (line[x] != stop)); x++)

word[x] = line[x];

word[x] = '\0';

if (line[x])

++x;

y = 0;

while ((line[y++] = line[x++]));

}

static int getline(char *s, int n, apr_file_t *f)

{

register int i = 0;

char ch;

while (1) {

apr_getc(&ch, f);

s[i] = ch;

if (s[i] == CR)

apr_getc(&ch, f);

s[i] = ch;

if ((s[i] == 0x4) || (s[i] == LF) || (i == (n - 1))) {

s[i] = '\0';

if (apr_eof(f) == APR_EOF) {

return 1;

}

return 0;

}

++i;

}

}

static void putline(apr_file_t *f, char *l)

{

int x;

for (x = 0; l[x]; x++)

apr_putc(l[x], f);

apr_putc('\n', f);

}

static void add_password(char *user, char *realm, apr_file_t *f)

{

char *pw;

apr_md5_ctx_t context;

unsigned char digest[16];

char string[MAX_STRING_LEN];

char pwin[MAX_STRING_LEN];

char pwv[MAX_STRING_LEN];

unsigned int i;

size_t len = sizeof(pwin);

if (apr_getpass("New password: ", pwin, &len) != APR_SUCCESS) {

fprintf(stderr, "password too long");

exit(5);

}

len = sizeof(pwin);

apr_getpass("Re-type new password: ", pwv, &len);

if (strcmp(pwin, pwv) != 0) {

fprintf(stderr, "They don't match, sorry.\n");

if (tn) {

apr_remove_file(tn, cntxt);

}

exit(1);

}

pw = pwin;

apr_fprintf(f, "%s:%s:", user, realm);

/* Do MD5 stuff */

sprintf(string, "%s:%s:%s", user, realm, pw);

apr_MD5Init(&context);

#if APR_CHARSET_EBCDIC

apr_MD5SetXlate(&context, to_ascii);

#endif

apr_MD5Update(&context, (unsigned char *) string, strlen(string));

apr_MD5Final(digest, &context);

for (i = 0; i < 16; i++)

apr_fprintf(f, "%02x", digest[i]);

apr_fprintf(f, "\n");

}

static void usage(void)

{

fprintf(stderr, "Usage: htdigest [-c] passwordfile realm username\n");

fprintf(stderr, "The -c flag creates a new file.\n");

exit(1);

}

static void interrupted(void)

{

fprintf(stderr, "Interrupted.\n");

if (tn)

apr_remove_file(tn, cntxt);

exit(1);

}

static void terminate(void)

{

apr_terminate();

}

int main(int argc, char *argv[])

{

apr_file_t *tfp = NULL, *f;

apr_status_t rv;

char user[MAX_STRING_LEN];

char realm[MAX_STRING_LEN];

char line[MAX_STRING_LEN];

char l[MAX_STRING_LEN];

char w[MAX_STRING_LEN];

char x[MAX_STRING_LEN];

char command[MAX_STRING_LEN];

int found;

rv = apr_initialize();

if (rv) {

fprintf(stderr, "apr_initialize(): %s (%d)\n",

apr_strerror(rv, line, sizeof(line)), rv);

exit(1);

}

atexit(terminate);

apr_create_pool(&cntxt, NULL);

#if APR_CHARSET_EBCDIC

rv = apr_xlate_open(&to_ascii, "ISO8859-1", APR_DEFAULT_CHARSET, cntxt);

if (rv) {

fprintf(stderr, "apr_xlate_open(): %s (%d)\n",

apr_strerror(rv, line, sizeof(line)), rv);

exit(1);

}

#endif

tn = NULL;

apr_signal(SIGINT, (void (*)(int)) interrupted);

if (argc == 5) {

if (strcmp(argv[1], "-c"))

usage();

rv = apr_open(&tfp, argv[2], APR_WRITE | APR_CREATE, -1, cntxt);

if (rv != APR_SUCCESS) {

char errmsg[120];

fprintf(stderr, "Could not open passwd file %s for writing: %s\n",

argv[2],

apr_strerror(rv, errmsg, sizeof errmsg));

exit(1);

}

printf("Adding password for %s in realm %s.\n", argv[4], argv[3]);

add_password(argv[4], argv[3], tfp);

apr_close(tfp);

exit(0);

}

else if (argc != 4)

usage();

tn = tmpnam(NULL);

if (apr_open(&tfp, tn, APR_WRITE | APR_CREATE, -1, cntxt)!= APR_SUCCESS) {

fprintf(stderr, "Could not open temp file.\n");

exit(1);

}

if (apr_open(&f, argv[1], APR_READ, -1, cntxt) != APR_SUCCESS) {

fprintf(stderr,

"Could not open passwd file %s for reading.\n", argv[1]);

fprintf(stderr, "Use -c option to create new one.\n");

exit(1);

}

strcpy(user, argv[3]);

strcpy(realm, argv[2]);

found = 0;

while (!(getline(line, MAX_STRING_LEN, f))) {

if (found || (line[0] == '#') || (!line[0])) {

putline(tfp, line);

continue;

}

strcpy(l, line);

getword(w, l, ':');

getword(x, l, ':');

if (strcmp(user, w) || strcmp(realm, x)) {

putline(tfp, line);

continue;

}

else {

printf("Changing password for user %s in realm %s\n", user, realm);

add_password(user, realm, tfp);

found = 1;

}

}

if (!found) {

printf("Adding user %s in realm %s\n", user, realm);

add_password(user, realm, tfp);

}

apr_close(f);

apr_close(tfp);

#if defined(OS2) || defined(WIN32)

sprintf(command, "copy \"%s\" \"%s\"", tn, argv[1]);

#else

sprintf(command, "cp %s %s", tn, argv[1]);

#endif

system(command);

apr_remove_file(tn, cntxt);

return 0;

}