1 /* $Id: rsalist.c,v 1.3 2004/11/08 12:04:23 ludvigm Exp $ */
4 * Copyright (C) 2004 SuSE Linux AG, Nuernberg, Germany.
5 * Contributed by: Michal Ludvig <mludvig@suse.cz>, SUSE Labs
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of the project nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
20 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
38 #include <sys/types.h>
39 #include <sys/queue.h>
40 #include <sys/socket.h>
43 #include <openssl/bn.h>
44 #include <openssl/rsa.h>
51 #include "remoteconf.h"
52 #include "crypto_openssl.h"
55 #define LIST_FIRST(head) ((head)->lh_first)
59 #define LIST_NEXT(elm, field) ((elm)->field.le_next)
63 int prsa_parse_file(struct genlist *list, const char *fname, enum rsa_key_type type);
66 rsa_key_insert(struct genlist *list, struct netaddr *src,
67 struct netaddr *dst, RSA *rsa)
69 struct rsa_key *rsa_key;
71 rsa_key = calloc(sizeof(struct rsa_key), 1);
77 rsa_key->src = calloc(sizeof(*rsa_key->src), 1);
82 rsa_key->dst = calloc(sizeof(*rsa_key->dst), 1);
84 genlist_append(list, rsa_key);
90 rsa_key_dump_one(void *entry, void *arg)
92 struct rsa_key *key = entry;
94 plog(LLV_DEBUG, LOCATION, NULL, "Entry %s\n",
95 naddrwop2str_fromto("%s -> %s", key->src,
97 if (loglevel > LLV_DEBUG)
98 RSA_print_fp(stdout, key->rsa, 4);
104 rsa_key_dump(struct genlist *list)
106 genlist_foreach(list, rsa_key_dump_one, NULL);
110 rsa_list_count_one(void *entry, void *arg)
113 (*(unsigned long *)arg)++;
118 rsa_list_count(struct genlist *list)
120 unsigned long count = 0;
121 genlist_foreach(list, rsa_list_count_one, &count);
125 struct lookup_result {
126 struct ph1handle *iph1;
128 struct genlist *winners;
132 rsa_lookup_key_one(void *entry, void *data)
134 int local_score, remote_score;
135 struct lookup_result *req = data;
136 struct rsa_key *key = entry;
138 local_score = naddr_score(key->src, req->iph1->local);
139 remote_score = naddr_score(key->dst, req->iph1->remote);
141 plog(LLV_DEBUG, LOCATION, NULL, "Entry %s scored %d/%d\n",
142 naddrwop2str_fromto("%s -> %s", key->src, key->dst),
143 local_score, remote_score);
145 if (local_score >= 0 && remote_score >= 0) {
146 if (local_score + remote_score > req->max_score) {
147 req->max_score = local_score + remote_score;
148 // genlist_free(req->winners, NULL);
151 if (local_score + remote_score >= req->max_score) {
152 genlist_append(req->winners, key);
156 /* Always traverse the whole list */
161 rsa_lookup_keys(struct ph1handle *iph1, int my)
163 struct genlist *list;
164 struct lookup_result r;
166 plog(LLV_DEBUG, LOCATION, NULL, "Looking up RSA key for %s\n",
167 saddr2str_fromto("%s <-> %s", iph1->local, iph1->remote));
171 r.winners = genlist_init();
174 list = iph1->rmconf->rsa_private;
176 list = iph1->rmconf->rsa_public;
178 genlist_foreach(list, rsa_lookup_key_one, &r);
180 if (loglevel >= LLV_DEBUG)
181 rsa_key_dump(r.winners);
187 rsa_parse_file(struct genlist *list, const char *fname, enum rsa_key_type type)
191 plog(LLV_DEBUG, LOCATION, NULL, "Parsing %s\n", fname);
192 ret = prsa_parse_file(list, fname, type);
193 if (loglevel >= LLV_DEBUG)
199 rsa_try_check_rsasign(vchar_t *source, vchar_t *sig, struct genlist *list)
202 struct genlist_entry *gp;
204 for(key = genlist_next(list, &gp); key; key = genlist_next(NULL, &gp)) {
205 plog(LLV_DEBUG, LOCATION, NULL, "Checking key %s...\n",
206 naddrwop2str_fromto("%s -> %s", key->src, key->dst));
207 if (eay_check_rsasign(source, sig, key->rsa) == 0) {
208 plog(LLV_DEBUG, LOCATION, NULL, " ... YEAH!\n");
211 plog(LLV_DEBUG, LOCATION, NULL, " ... nope.\n");