1  /*
  2   * Copyright (c) 2005 Kungliga Tekniska Högskolan
  3   * (Royal Institute of Technology, Stockholm, Sweden).
  4   * All rights reserved.
  5   *
  6   * Redistribution and use in source and binary forms, with or without
  7   * modification, are permitted provided that the following conditions
  8   * are met:
  9   *
 10   * 1. Redistributions of source code must retain the above copyright
 11   *    notice, this list of conditions and the following disclaimer.
 12   *
 13   * 2. Redistributions in binary form must reproduce the above copyright
 14   *    notice, this list of conditions and the following disclaimer in the
 15   *    documentation and/or other materials provided with the distribution.
 16   *
 17   * 3. Neither the name of the Institute nor the names of its contributors
 18   *    may be used to endorse or promote products derived from this software
 19   *    without specific prior written permission.
 20   *
 21   * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
 22   * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 23   * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 24   * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
 25   * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 26   * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 27   * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 28   * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 29   * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 30   * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 31   * SUCH DAMAGE.
 32   */
 33  
 34  #include "hdb_locl.h"
 35  #include <getarg.h>
 36  #include <base64.h>
 37  
 38  static int help_flag;
 39  static int version_flag;
 40  static int kvno_integer = 1;
 41  
 42  struct getargs args[] = {
 43      { "kvno",		'd',	arg_integer, &kvno_integer },
 44      { "help",		'h',	arg_flag,   &help_flag },
 45      { "version",	0,	arg_flag,   &version_flag }
 46  };
 47  
 48  static int num_args = sizeof(args) / sizeof(args[0]);
 49  
 50  int
 51  main(int argc, char **argv)
 52  {
 53      krb5_principal principal;
 54      krb5_context context;
 55      char *principal_str, *password_str, *str;
 56      int ret, o = 0;
 57      hdb_keyset keyset;
 58      size_t length, len;
 59      void *data;
 60  
 61      setprogname(argv[0]);
 62  
 63      if(getarg(args, num_args, argc, argv, &o))
 64  	krb5_std_usage(1, args, num_args);
 65  
 66      if(help_flag)
 67  	krb5_std_usage(0, args, num_args);
 68  
 69      if(version_flag){
 70  	print_version(NULL);
 71  	exit(0);
 72      }
 73  
 74      ret = krb5_init_context(&context);
 75      if (ret)
 76  	errx (1, "krb5_init_context failed: %d", ret);
 77  
 78      if (argc != 3)
 79  	errx(1, "username and password missing");
 80  
 81      principal_str = argv[1];
 82      password_str = argv[2];
 83  
 84      ret = krb5_parse_name (context, principal_str, &principal);
 85      if (ret)
 86  	krb5_err (context, 1, ret, "krb5_parse_name %s", principal_str);
 87  
 88      memset(&keyset, 0, sizeof(keyset));
 89  
 90      keyset.kvno = kvno_integer;
 91      keyset.set_time = malloc(sizeof (*keyset.set_time));
 92      if (keyset.set_time == NULL)
 93  	errx(1, "couldn't allocate set_time field of keyset");
 94      *keyset.set_time = time(NULL);
 95  
 96      ret = hdb_generate_key_set_password(context, principal, password_str, 0, NULL,
 97  					NULL, &keyset.keys.val, &len);
 98      if (ret)
 99  	krb5_err(context, 1, ret, "hdb_generate_key_set_password");
100      keyset.keys.len = len;
101  
102      if (keyset.keys.len == 0)
103  	krb5_errx (context, 1, "hdb_generate_key_set_password length 0");
104  
105      krb5_free_principal (context, principal);
106  
107      ASN1_MALLOC_ENCODE(hdb_keyset, data, length, &keyset, &len, ret);
108      if (ret)
109  	krb5_errx(context, 1, "encode keyset");
110      if (len != length)
111  	krb5_abortx(context, "foo");
112  
113      krb5_free_context(context);
114  
115      ret = base64_encode(data, length, &str);
116      if (ret < 0)
117  	errx(1, "base64_encode");
118  
119      printf("keyset: %s\n", str);
120  
121      free(data);
122  
123      return 0;
124  }