src/util/authtok-utils.c

bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose/*
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   SSSD - auth utils helpers
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   Copyright (C) Sumit Bose <sbose@redhat.com> 2015
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   This program is free software; you can redistribute it and/or modify
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   it under the terms of the GNU General Public License as published by
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   the Free Software Foundation; either version 3 of the License, or
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   (at your option) any later version.
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   This program is distributed in the hope that it will be useful,
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   but WITHOUT ANY WARRANTY; without even the implied warranty of
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   GNU General Public License for more details.
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   You should have received a copy of the GNU General Public License
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose   along with this program.  If not, see <http://www.gnu.org/licenses/>.
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose*/
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose/* This file is use by SSSD clients and the main daemons. Please do not add
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose * code which is specific to only one of them. */
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose#include <errno.h>
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose#include "sss_client/sss_cli.h"
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Boseerrno_t sss_auth_pack_2fa_blob(const char *fa1, size_t fa1_len,
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose                               const char *fa2, size_t fa2_len,
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose                               uint8_t *buf, size_t buf_len,
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose                               size_t *_2fa_blob_len)
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose{
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    size_t c;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    uint32_t tmp_uint32_t;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    if (fa1 == NULL || *fa1 == '\0' || fa1_len > UINT32_MAX
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose            || fa2 == NULL || *fa2 == '\0' || fa2_len > UINT32_MAX
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose            || (buf == NULL && buf_len != 0)) {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        return EINVAL;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    }
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    if (fa1_len == 0) {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        fa1_len = strlen(fa1);
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    } else {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        if (fa1[fa1_len] != '\0') {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose            return EINVAL;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        }
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    }
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    if (fa2_len == 0) {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        fa2_len = strlen(fa2);
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    } else {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        if (fa2[fa2_len] != '\0') {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose            return EINVAL;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        }
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    }
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    *_2fa_blob_len = fa1_len + fa2_len + 2 + 2 * sizeof(uint32_t);
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    if (buf == NULL || buf_len < *_2fa_blob_len) {
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose        return EAGAIN;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    }
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    c = 0;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    tmp_uint32_t = (uint32_t) fa1_len + 1;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    SAFEALIGN_COPY_UINT32(buf, &tmp_uint32_t, &c);
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    tmp_uint32_t = (uint32_t) fa2_len + 1;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    SAFEALIGN_COPY_UINT32(buf + c, &tmp_uint32_t, &c);
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    memcpy(buf + c, fa1, fa1_len + 1);
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    c += fa1_len + 1;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    memcpy(buf + c, fa2, fa2_len + 1);
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose    return 0;
bc052ea17d858c19f9cb9c9e2bc602e754f68831Sumit Bose}
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Boseerrno_t sss_auth_pack_sc_blob(const char *pin, size_t pin_len,
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose                              const char *token_name, size_t token_name_len,
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose                              const char *module_name, size_t module_name_len,
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose                              const char *key_id, size_t key_id_len,
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose                              uint8_t *buf, size_t buf_len,
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose                              size_t *_sc_blob_len)
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose{
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    size_t c;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    uint32_t tmp_uint32_t;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (pin_len > UINT32_MAX || token_name_len > UINT32_MAX
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose            || module_name_len > UINT32_MAX
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose            || (pin_len != 0 && pin == NULL)
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose            || (token_name_len != 0 && token_name == NULL)
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose            || (module_name_len != 0 && module_name == NULL)
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose            || (key_id_len != 0 && key_id == NULL)) {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        return EINVAL;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    /* A missing pin is ok in the case of a reader with a keyboard */
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (pin == NULL) {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        pin = "";
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        pin_len = 0;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (token_name == NULL) {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        token_name = "";
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        token_name_len = 0;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (module_name == NULL) {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        module_name = "";
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        module_name_len = 0;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (key_id == NULL) {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        key_id = "";
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        key_id_len = 0;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    /* len should not include the trailing \0 */
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (pin_len == 0 || pin[pin_len - 1] == '\0') {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        pin_len = strlen(pin);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (token_name_len == 0 || token_name[token_name_len - 1] == '\0') {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        token_name_len = strlen(token_name);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (module_name_len == 0 || module_name[module_name_len - 1] == '\0') {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        module_name_len = strlen(module_name);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (key_id_len == 0 || key_id[key_id_len - 1] == '\0') {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        key_id_len = strlen(key_id);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    *_sc_blob_len = pin_len + token_name_len + module_name_len + key_id_len + 4
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose                            + 4 * sizeof(uint32_t);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    if (buf == NULL || buf_len < *_sc_blob_len) {
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose        return EAGAIN;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    }
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    c = 0;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    tmp_uint32_t = (uint32_t) pin_len + 1;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    SAFEALIGN_COPY_UINT32(buf, &tmp_uint32_t, &c);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    tmp_uint32_t = (uint32_t) token_name_len + 1;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    SAFEALIGN_COPY_UINT32(buf + c, &tmp_uint32_t, &c);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    tmp_uint32_t = (uint32_t) module_name_len + 1;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    SAFEALIGN_COPY_UINT32(buf + c, &tmp_uint32_t, &c);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    tmp_uint32_t = (uint32_t) key_id_len + 1;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    SAFEALIGN_COPY_UINT32(buf + c, &tmp_uint32_t, &c);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    memcpy(buf + c, pin, pin_len);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    buf[c + pin_len] = '\0';
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    c += pin_len + 1;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    memcpy(buf + c, token_name, token_name_len);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    buf[c + token_name_len] = '\0';
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    c += token_name_len + 1;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    memcpy(buf + c, module_name, module_name_len);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    buf[c + module_name_len] = '\0';
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    c += module_name_len + 1;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    memcpy(buf + c, key_id, key_id_len);
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    buf[c + key_id_len] = '\0';
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose    return 0;
dd17a3aaddab6f122dff3bd15b7005464c07c0eaSumit Bose}