X-Git-Url: https://the.earth.li/gitweb/?a=blobdiff_plain;f=keydb_keyd.c;h=cd1a2819d98eefc04b53a060d718e7c1fc58ab19;hb=adc800dbc424a1e246dd4a82a0c2e88eeda25531;hp=0f501fe47c07e17b09f1d63b5913c336f7968e66;hpb=5e1b22d763640c4d7a09d07920403d8d491b4410;p=onak.git

diff --git a/keydb_keyd.c b/keydb_keyd.c
index 0f501fe..cd1a281 100644
--- a/keydb_keyd.c
+++ b/keydb_keyd.c
@@ -13,12 +13,13 @@
  * more details.
  *
  * You should have received a copy of the GNU General Public License along with
- * this program; if not, write to the Free Software Foundation, Inc., 51
- * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+ * this program.  If not, see <https://www.gnu.org/licenses/>.
  */
 
 #include <errno.h>
 #include <fcntl.h>
+#include <stdbool.h>
+#include <stdint.h>
 #include <stdio.h>
 #include <stdlib.h>
 #include <string.h>
@@ -34,126 +35,10 @@
 #include "keystructs.h"
 #include "log.h"
 #include "mem.h"
+#include "onak.h"
 #include "onak-conf.h"
 #include "parsekey.h"
 
-/**
- *	keyd_fd - our file descriptor for the socket connection to keyd.
- */
-static int keyd_fd = -1;
-
-/**
- *	initdb - Initialize the key database.
- *	@readonly: If we'll only be reading the DB, not writing to it.
- *
- *	This function should be called before any of the other functions in
- *	this file are called in order to allow the DB to be initialized ready
- *	for access.
- */
-static void keyd_initdb(bool readonly)
-{
-	struct sockaddr_un sock;
-	uint32_t	   cmd = KEYD_CMD_UNKNOWN;
-	uint32_t	   reply = KEYD_REPLY_UNKNOWN_CMD;
-	ssize_t		   count;
-
-	keyd_fd = socket(PF_UNIX, SOCK_STREAM, 0);
-	if (keyd_fd < 0) {
-		logthing(LOGTHING_CRITICAL,
-				"Couldn't open socket: %s (%d)",
-				strerror(errno),
-				errno);
-		exit(EXIT_FAILURE);
-	}
-
-	sock.sun_family = AF_UNIX;
-	snprintf(sock.sun_path, sizeof(sock.sun_path) - 1, "%s/%s",
-			config.db_dir,
-			KEYD_SOCKET);
-	if (connect(keyd_fd, (struct sockaddr *) &sock, sizeof(sock)) < 0) {
-		logthing(LOGTHING_CRITICAL,
-				"Couldn't connect to socket %s: %s (%d)",
-				sock.sun_path,
-				strerror(errno),
-				errno);
-		exit(EXIT_FAILURE);
-	}
-
-	cmd = KEYD_CMD_VERSION;
-	if (write(keyd_fd, &cmd, sizeof(cmd)) != sizeof(cmd)) {
-		logthing(LOGTHING_CRITICAL,
-				"Couldn't write version cmd: %s (%d)",
-				strerror(errno),
-				errno);
-	} else {
-		count = read(keyd_fd, &reply, sizeof(reply));
-		if (count == sizeof(reply) && reply == KEYD_REPLY_OK) {
-			count = read(keyd_fd, &reply, sizeof(reply));
-			if (count != sizeof(reply) || reply != sizeof(reply)) {
-				logthing(LOGTHING_CRITICAL,
-					"Error! Unexpected keyd version "
-					"length: %d != %d",
-					reply, sizeof(reply));
-				exit(EXIT_FAILURE);
-			}
-
-			count = read(keyd_fd, &reply, sizeof(reply));
-			logthing(LOGTHING_DEBUG,
-					"keyd protocol version %d",
-					reply);
-			if (reply != keyd_version) {
-				logthing(LOGTHING_CRITICAL,
-					"Error! keyd protocol version "
-					"mismatch. (us = %d, it = %d)",
-						keyd_version, reply);
-			}
-		}
-	}
-
-	return;
-}
-
-/**
- *	cleanupdb - De-initialize the key database.
- *
- *	This function should be called upon program exit to allow the DB to
- *	cleanup after itself.
- */
-static void keyd_cleanupdb(void)
-{
-	uint32_t cmd = KEYD_CMD_CLOSE;
-
-	if (write(keyd_fd, &cmd, sizeof(cmd)) != sizeof(cmd)) {
-		logthing(LOGTHING_CRITICAL,
-				"Couldn't send close cmd: %s (%d)",
-				strerror(errno),
-				errno);
-	}
-	
-	if (read(keyd_fd, &cmd, sizeof(cmd)) != sizeof(cmd)) {
-		logthing(LOGTHING_CRITICAL,
-			"Couldn't read close cmd reply: %s (%d)",
-			strerror(errno),
-			errno);
-	} else if (cmd != KEYD_REPLY_OK) {
-		logthing(LOGTHING_CRITICAL,
-			"Got bad reply to KEYD_CMD_CLOSE: %d", cmd);
-	}
-
-	if (shutdown(keyd_fd, SHUT_RDWR) < 0) {
-		logthing(LOGTHING_NOTICE, "Error shutting down socket: %d",
-				errno);
-	}
-	if (close(keyd_fd) < 0) {
-		logthing(LOGTHING_NOTICE, "Error closing down socket: %d",
-				errno);
-	}
-	keyd_fd = -1;
-
-	return;
-}
-
-
 /**
  *	starttrans - Start a transaction.
  *
@@ -161,7 +46,7 @@ static void keyd_cleanupdb(void)
  *	operations on the database to help speed it all up, or if we want
  *	something to only succeed if all relevant operations are successful.
  */
-static bool keyd_starttrans(void)
+static bool keyd_starttrans(struct onak_dbctx *dbctx)
 {
 	return true;
 }
@@ -171,11 +56,33 @@ static bool keyd_starttrans(void)
  *
  *	Ends a transaction.
  */
-static void keyd_endtrans(void)
+static void keyd_endtrans(struct onak_dbctx *dbctx)
 {
 	return;
 }
 
+static bool keyd_send_cmd(int fd, enum keyd_ops _cmd)
+{
+	uint32_t cmd = _cmd;
+	ssize_t bytes;
+
+	bytes = write(fd, &cmd, sizeof(cmd));
+	if (bytes != sizeof(cmd)) {
+		return false;
+	}
+
+	bytes = read(fd, &cmd, sizeof(cmd));
+	if (bytes != sizeof(cmd)) {
+		return false;
+	}
+
+	if (cmd != KEYD_REPLY_OK) {
+		return false;
+	}
+
+	return true;
+}
+
 /**
  *	fetch_key - Given a keyid fetch the key from storage.
  *	@keyid: The keyid to fetch.
@@ -187,18 +94,18 @@ static void keyd_endtrans(void)
  *
  *      TODO: What about keyid collisions? Should we use fingerprint instead?
  */
-static int keyd_fetch_key(uint64_t keyid, struct openpgp_publickey **publickey,
+static int keyd_fetch_key_id(struct onak_dbctx *dbctx,
+		uint64_t keyid,
+		struct openpgp_publickey **publickey,
 		bool intrans)
 {
+	int keyd_fd = (intptr_t) dbctx->priv;
 	struct buffer_ctx           keybuf;
 	struct openpgp_packet_list *packets = NULL;
-	uint32_t                    cmd = KEYD_CMD_GET;
 	ssize_t                     bytes = 0;
 	ssize_t                     count = 0;
 
-	write(keyd_fd, &cmd, sizeof(cmd));
-	read(keyd_fd, &cmd, sizeof(cmd));
-	if (cmd == KEYD_REPLY_OK) {
+	if (keyd_send_cmd(keyd_fd, KEYD_CMD_GET_ID)) {
 		write(keyd_fd, &keyid, sizeof(keyid));
 		keybuf.offset = 0;
 		read(keyd_fd, &keybuf.size, sizeof(keybuf.size));
@@ -225,7 +132,56 @@ static int keyd_fetch_key(uint64_t keyid, struct openpgp_publickey **publickey,
 			keybuf.size = 0;
 		}
 	}
-	
+
+	return (count > 0) ? 1 : 0;
+}
+
+static int keyd_fetch_key_fp(struct onak_dbctx *dbctx,
+		struct openpgp_fingerprint *fingerprint,
+		struct openpgp_publickey **publickey,
+		bool intrans)
+{
+	int keyd_fd = (intptr_t) dbctx->priv;
+	struct buffer_ctx           keybuf;
+	struct openpgp_packet_list *packets = NULL;
+	ssize_t                     bytes = 0;
+	ssize_t                     count = 0;
+	uint8_t                     size;
+
+	if (fingerprint->length > MAX_FINGERPRINT_LEN) {
+		return 0;
+	}
+
+	if (keyd_send_cmd(keyd_fd, KEYD_CMD_GET_FP)) {
+		size = fingerprint->length;
+		write(keyd_fd, &size, sizeof(size));
+		write(keyd_fd, fingerprint->fp, size);
+		keybuf.offset = 0;
+		read(keyd_fd, &keybuf.size, sizeof(keybuf.size));
+		if (keybuf.size > 0) {
+			keybuf.buffer = malloc(keybuf.size);
+			bytes = count = 0;
+			logthing(LOGTHING_TRACE,
+					"Getting %d bytes of key data.",
+					keybuf.size);
+			while (bytes >= 0 && count < keybuf.size) {
+				bytes = read(keyd_fd, &keybuf.buffer[count],
+						keybuf.size - count);
+				logthing(LOGTHING_TRACE,
+						"Read %d bytes.", bytes);
+				count += bytes;
+			}
+			read_openpgp_stream(buffer_fetchchar, &keybuf,
+					&packets, 0);
+			parse_keys(packets, publickey);
+			free_packet_list(packets);
+			packets = NULL;
+			free(keybuf.buffer);
+			keybuf.buffer = NULL;
+			keybuf.size = 0;
+		}
+	}
+
 	return (count > 0) ? 1 : 0;
 }
 
@@ -237,13 +193,12 @@ static int keyd_fetch_key(uint64_t keyid, struct openpgp_publickey **publickey,
 *	This function deletes a public key from whatever storage mechanism we
 *	are using. Returns 0 if the key existed.
 */
-static int keyd_delete_key(uint64_t keyid, bool intrans)
+static int keyd_delete_key(struct onak_dbctx *dbctx,
+		uint64_t keyid, bool intrans)
 {
-	uint32_t cmd = KEYD_CMD_DELETE;
+	int keyd_fd = (intptr_t) dbctx->priv;
 
-	write(keyd_fd, &cmd, sizeof(cmd));
-	read(keyd_fd, &cmd, sizeof(cmd));
-	if (cmd == KEYD_REPLY_OK) {
+	if (keyd_send_cmd(keyd_fd, KEYD_CMD_DELETE)) {
 		write(keyd_fd, &keyid, sizeof(keyid));
 	}
 
@@ -264,25 +219,28 @@ static int keyd_delete_key(uint64_t keyid, bool intrans)
  *	TODO: Do we store multiple keys of the same id? Or only one and replace
  *	it?
  */
-static int keyd_store_key(struct openpgp_publickey *publickey, bool intrans,
+static int keyd_store_key(struct onak_dbctx *dbctx,
+		struct openpgp_publickey *publickey, bool intrans,
 		bool update)
 {
+	int keyd_fd = (intptr_t) dbctx->priv;
 	struct buffer_ctx           keybuf;
 	struct openpgp_packet_list *packets = NULL;
 	struct openpgp_packet_list *list_end = NULL;
 	struct openpgp_publickey   *next = NULL;
-	uint32_t                    cmd = KEYD_CMD_STORE;
 	uint64_t                    keyid;
+	enum keyd_ops               cmd = KEYD_CMD_STORE;
+
+	if (get_keyid(publickey, &keyid) != ONAK_E_OK) {
+		logthing(LOGTHING_ERROR, "Couldn't find key ID for key.");
+		return 0;
+	}
 
-	keyid = get_keyid(publickey);
-	
 	if (update) {
-		keyd_delete_key(keyid, false);
+		cmd = KEYD_CMD_UPDATE;
 	}
 
-	write(keyd_fd, &cmd, sizeof(cmd));
-	read(keyd_fd, &cmd, sizeof(cmd));
-	if (cmd == KEYD_REPLY_OK) {
+	if (keyd_send_cmd(keyd_fd, cmd)) {
 		keybuf.offset = 0;
 		keybuf.size = 8192;
 		keybuf.buffer = malloc(keybuf.size);
@@ -305,7 +263,7 @@ static int keyd_store_key(struct openpgp_publickey *publickey, bool intrans,
 		keybuf.buffer = NULL;
 		keybuf.size = keybuf.offset = 0;
 	}
-	
+
 	return 0;
 }
 
@@ -317,18 +275,17 @@ static int keyd_store_key(struct openpgp_publickey *publickey, bool intrans,
  *	This function searches for the supplied text and returns the keys that
  *	contain it.
  */
-static int keyd_fetch_key_text(const char *search,
+static int keyd_fetch_key_text(struct onak_dbctx *dbctx,
+		const char *search,
 		struct openpgp_publickey **publickey)
 {
+	int keyd_fd = (intptr_t) dbctx->priv;
 	struct buffer_ctx           keybuf;
 	struct openpgp_packet_list *packets = NULL;
-	uint32_t                    cmd = KEYD_CMD_GETTEXT;
 	ssize_t                     bytes = 0;
 	ssize_t                     count = 0;
 
-	write(keyd_fd, &cmd, sizeof(cmd));
-	read(keyd_fd, &cmd, sizeof(cmd));
-	if (cmd == KEYD_REPLY_OK) {
+	if (keyd_send_cmd(keyd_fd, KEYD_CMD_GET_TEXT)) {
 		bytes = strlen(search);
 		write(keyd_fd, &bytes, sizeof(bytes));
 		write(keyd_fd, search, bytes);
@@ -357,24 +314,23 @@ static int keyd_fetch_key_text(const char *search,
 			keybuf.size = 0;
 		}
 	}
-	
+
 	return (count > 0) ? 1 : 0;
 
 	return 0;
 }
 
-static int keyd_fetch_key_skshash(const struct skshash *hash,
+static int keyd_fetch_key_skshash(struct onak_dbctx *dbctx,
+		const struct skshash *hash,
 		struct openpgp_publickey **publickey)
 {
+	int keyd_fd = (intptr_t) dbctx->priv;
 	struct buffer_ctx           keybuf;
 	struct openpgp_packet_list *packets = NULL;
-	uint32_t                    cmd = KEYD_CMD_GETSKSHASH;
 	ssize_t                     bytes = 0;
 	ssize_t                     count = 0;
 
-	write(keyd_fd, &cmd, sizeof(cmd));
-	read(keyd_fd, &cmd, sizeof(cmd));
-	if (cmd == KEYD_REPLY_OK) {
+	if (keyd_send_cmd(keyd_fd, KEYD_CMD_GET_SKSHASH)) {
 		write(keyd_fd, hash->hash, sizeof(hash->hash));
 		keybuf.offset = 0;
 		read(keyd_fd, &keybuf.size, sizeof(keybuf.size));
@@ -401,7 +357,7 @@ static int keyd_fetch_key_skshash(const struct skshash *hash,
 			keybuf.size = 0;
 		}
 	}
-	
+
 	return (count > 0) ? 1 : 0;
 }
 
@@ -413,13 +369,12 @@ static int keyd_fetch_key_skshash(const struct skshash *hash,
  *	This function maps a 32bit key id to the full 64bit one. It returns the
  *	full keyid. If the key isn't found a keyid of 0 is returned.
  */
-static uint64_t keyd_getfullkeyid(uint64_t keyid)
+static uint64_t keyd_getfullkeyid(struct onak_dbctx *dbctx, uint64_t keyid)
 {
+	int keyd_fd = (intptr_t) dbctx->priv;
 	uint32_t cmd = KEYD_CMD_GETFULLKEYID;
 
-	write(keyd_fd, &cmd, sizeof(cmd));
-	read(keyd_fd, &cmd, sizeof(cmd));
-	if (cmd == KEYD_REPLY_OK) {
+	if (keyd_send_cmd(keyd_fd, KEYD_CMD_GETFULLKEYID)) {
 		write(keyd_fd, &keyid, sizeof(keyid));
 		read(keyd_fd, &cmd, sizeof(cmd));
 		if (cmd != sizeof(keyid)) {
@@ -442,20 +397,19 @@ static uint64_t keyd_getfullkeyid(uint64_t keyid)
  *
  *	Returns the number of keys we iterated over.
  */
-static int keyd_iterate_keys(void (*iterfunc)(void *ctx,
+static int keyd_iterate_keys(struct onak_dbctx *dbctx,
+		void (*iterfunc)(void *ctx,
 		struct openpgp_publickey *key),	void *ctx)
 {
+	int keyd_fd = (intptr_t) dbctx->priv;
 	struct buffer_ctx           keybuf;
 	struct openpgp_packet_list *packets = NULL;
 	struct openpgp_publickey   *key = NULL;
-	uint32_t                    cmd = KEYD_CMD_KEYITER;
 	ssize_t                     bytes = 0;
 	ssize_t                     count = 0;
 	int                         numkeys = 0;
 
-	write(keyd_fd, &cmd, sizeof(cmd));
-	read(keyd_fd, &cmd, sizeof(cmd));
-	if (cmd == KEYD_REPLY_OK) {
+	if (keyd_send_cmd(keyd_fd, KEYD_CMD_KEYITER)) {
 		keybuf.offset = 0;
 		read(keyd_fd, &keybuf.size, sizeof(keybuf.size));
 		while (keybuf.size > 0) {
@@ -492,7 +446,7 @@ static int keyd_iterate_keys(void (*iterfunc)(void *ctx,
 			read(keyd_fd, &keybuf.size, sizeof(keybuf.size));
 		}
 	}
-	
+
 	return numkeys;
 }
 
@@ -501,20 +455,147 @@ static int keyd_iterate_keys(void (*iterfunc)(void *ctx,
 #define NEED_UPDATEKEYS 1
 #include "keydb.c"
 
-struct dbfuncs keydb_keyd_funcs = {
-	.initdb			= keyd_initdb,
-	.cleanupdb		= keyd_cleanupdb,
-	.starttrans		= keyd_starttrans,
-	.endtrans		= keyd_endtrans,
-	.fetch_key		= keyd_fetch_key,
-	.fetch_key_text		= keyd_fetch_key_text,
-	.fetch_key_skshash	= keyd_fetch_key_skshash,
-	.store_key		= keyd_store_key,
-	.update_keys		= generic_update_keys,
-	.delete_key		= keyd_delete_key,
-	.getkeysigs		= generic_getkeysigs,
-	.cached_getkeysigs	= generic_cached_getkeysigs,
-	.keyid2uid		= generic_keyid2uid,
-	.getfullkeyid		= keyd_getfullkeyid,
-	.iterate_keys		= keyd_iterate_keys,
-};
+/**
+ *	cleanupdb - De-initialize the key database.
+ *
+ *	This function should be called upon program exit to allow the DB to
+ *	cleanup after itself.
+ */
+static void keyd_cleanupdb(struct onak_dbctx *dbctx)
+{
+	int keyd_fd = (intptr_t) dbctx->priv;
+	uint32_t cmd = KEYD_CMD_CLOSE;
+
+	if (write(keyd_fd, &cmd, sizeof(cmd)) != sizeof(cmd)) {
+		logthing(LOGTHING_CRITICAL,
+				"Couldn't send close cmd: %s (%d)",
+				strerror(errno),
+				errno);
+	}
+
+	if (read(keyd_fd, &cmd, sizeof(cmd)) != sizeof(cmd)) {
+		logthing(LOGTHING_CRITICAL,
+			"Couldn't read close cmd reply: %s (%d)",
+			strerror(errno),
+			errno);
+	} else if (cmd != KEYD_REPLY_OK) {
+		logthing(LOGTHING_CRITICAL,
+			"Got bad reply to KEYD_CMD_CLOSE: %d", cmd);
+	}
+
+	if (shutdown(keyd_fd, SHUT_RDWR) < 0) {
+		logthing(LOGTHING_NOTICE, "Error shutting down socket: %d",
+				errno);
+	}
+	if (close(keyd_fd) < 0) {
+		logthing(LOGTHING_NOTICE, "Error closing down socket: %d",
+				errno);
+	}
+
+	free(dbctx);
+
+	return;
+}
+
+/**
+ *	initdb - Initialize the key database.
+ *	@readonly: If we'll only be reading the DB, not writing to it.
+ *
+ *	This function should be called before any of the other functions in
+ *	this file are called in order to allow the DB to be initialized ready
+ *	for access.
+ */
+struct onak_dbctx *keydb_keyd_init(struct onak_db_config *dbcfg, bool readonly)
+{
+	struct sockaddr_un sock;
+	uint32_t	   cmd = KEYD_CMD_UNKNOWN;
+	uint32_t	   reply = KEYD_REPLY_UNKNOWN_CMD;
+	ssize_t		   count;
+	int keyd_fd;
+	struct onak_dbctx *dbctx;
+
+	dbctx = malloc(sizeof(*dbctx));
+	if (dbctx == NULL) {
+		return NULL;
+	}
+	dbctx->config = dbcfg;
+
+	keyd_fd = socket(PF_UNIX, SOCK_STREAM, 0);
+	if (keyd_fd < 0) {
+		logthing(LOGTHING_CRITICAL,
+				"Couldn't open socket: %s (%d)",
+				strerror(errno),
+				errno);
+		exit(EXIT_FAILURE);
+	}
+
+	sock.sun_family = AF_UNIX;
+	snprintf(sock.sun_path, sizeof(sock.sun_path) - 1, "%s/%s",
+			config.sock_dir,
+			KEYD_SOCKET);
+	if (connect(keyd_fd, (struct sockaddr *) &sock, sizeof(sock)) < 0) {
+		logthing(LOGTHING_CRITICAL,
+				"Couldn't connect to socket %s: %s (%d)",
+				sock.sun_path,
+				strerror(errno),
+				errno);
+		exit(EXIT_FAILURE);
+	}
+
+	cmd = KEYD_CMD_VERSION;
+	if (write(keyd_fd, &cmd, sizeof(cmd)) != sizeof(cmd)) {
+		logthing(LOGTHING_CRITICAL,
+				"Couldn't write version cmd: %s (%d)",
+				strerror(errno),
+				errno);
+	} else {
+		count = read(keyd_fd, &reply, sizeof(reply));
+		if (count == sizeof(reply) && reply == KEYD_REPLY_OK) {
+			count = read(keyd_fd, &reply, sizeof(reply));
+			if (count != sizeof(reply) || reply != sizeof(reply)) {
+				logthing(LOGTHING_CRITICAL,
+					"Error! Unexpected keyd version "
+					"length: %d != %d",
+					reply, sizeof(reply));
+				exit(EXIT_FAILURE);
+			}
+
+			count = read(keyd_fd, &reply, sizeof(reply));
+			if (count != sizeof(reply)) {
+				logthing(LOGTHING_CRITICAL,
+					"Error! Unexpected keyd version "
+					"length: %d != %d",
+					count, sizeof(reply));
+				exit(EXIT_FAILURE);
+			}
+			logthing(LOGTHING_DEBUG,
+					"keyd protocol version %d",
+					reply);
+			if (reply != keyd_version) {
+				logthing(LOGTHING_CRITICAL,
+					"Error! keyd protocol version "
+					"mismatch. (us = %d, it = %d)",
+						keyd_version, reply);
+			}
+		}
+	}
+
+	dbctx->priv			= (void *) (intptr_t) keyd_fd;
+	dbctx->cleanupdb		= keyd_cleanupdb;
+	dbctx->starttrans		= keyd_starttrans;
+	dbctx->endtrans			= keyd_endtrans;
+	dbctx->fetch_key_id		= keyd_fetch_key_id;
+	dbctx->fetch_key_fp		= keyd_fetch_key_fp;
+	dbctx->fetch_key_text		= keyd_fetch_key_text;
+	dbctx->fetch_key_skshash	= keyd_fetch_key_skshash;
+	dbctx->store_key		= keyd_store_key;
+	dbctx->update_keys		= generic_update_keys;
+	dbctx->delete_key		= keyd_delete_key;
+	dbctx->getkeysigs		= generic_getkeysigs;
+	dbctx->cached_getkeysigs	= generic_cached_getkeysigs;
+	dbctx->keyid2uid		= generic_keyid2uid;
+	dbctx->getfullkeyid		= keyd_getfullkeyid;
+	dbctx->iterate_keys		= keyd_iterate_keys;
+
+	return dbctx;
+}