272 lines
5.7 KiB
C
272 lines
5.7 KiB
C
/* misc. universal things
|
|
* Copyright (C) 1998-2001 D. Hugh Redelmeier.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*
|
|
* RCSID $Id$
|
|
*/
|
|
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <stdio.h>
|
|
#include <dirent.h>
|
|
#include <time.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
|
|
#include <freeswan.h>
|
|
|
|
#include "constants.h"
|
|
#include "defs.h"
|
|
#include "log.h"
|
|
#include "whack.h" /* for RC_LOG_SERIOUS */
|
|
|
|
/**
|
|
* Empty chunk.
|
|
*/
|
|
const chunk_t chunk_empty = { NULL, 0 };
|
|
|
|
/**
|
|
* Create a clone of a chunk pointing to "ptr"
|
|
*/
|
|
chunk_t chunk_create_clone(u_char *ptr, chunk_t chunk)
|
|
{
|
|
chunk_t clone = chunk_empty;
|
|
|
|
if (chunk.ptr && chunk.len > 0)
|
|
{
|
|
clone.ptr = ptr;
|
|
clone.len = chunk.len;
|
|
memcpy(clone.ptr, chunk.ptr, chunk.len);
|
|
}
|
|
return clone;
|
|
}
|
|
|
|
bool
|
|
all_zero(const unsigned char *m, size_t len)
|
|
{
|
|
size_t i;
|
|
|
|
for (i = 0; i != len; i++)
|
|
if (m[i] != '\0')
|
|
return FALSE;
|
|
return TRUE;
|
|
}
|
|
|
|
void *clone_bytes(const void *orig, size_t size)
|
|
{
|
|
void *p = malloc(size);
|
|
|
|
memcpy(p, orig, size);
|
|
return p;
|
|
}
|
|
|
|
/* Note that there may be as many as six IDs that are temporary at
|
|
* one time before unsharing the two ends of a connection. So we need
|
|
* at least six temporary buffers for DER_ASN1_DN IDs.
|
|
* We rotate them. Be careful!
|
|
*/
|
|
#define MAX_BUF 10
|
|
|
|
char*
|
|
temporary_cyclic_buffer(void)
|
|
{
|
|
static char buf[MAX_BUF][BUF_LEN]; /* MAX_BUF internal buffers */
|
|
static int counter = 0; /* cyclic counter */
|
|
|
|
if (++counter == MAX_BUF) counter = 0; /* next internal buffer */
|
|
return buf[counter]; /* assign temporary buffer */
|
|
}
|
|
|
|
/* concatenates two sub paths into a string with a maximum size of BUF_LEN
|
|
* use for temporary storage only
|
|
*/
|
|
const char*
|
|
concatenate_paths(const char *a, const char *b)
|
|
{
|
|
char *c;
|
|
|
|
if (*b == '/' || *b == '.')
|
|
return b;
|
|
|
|
c = temporary_cyclic_buffer();
|
|
snprintf(c, BUF_LEN, "%s/%s", a, b);
|
|
return c;
|
|
}
|
|
|
|
/* compare two chunks, returns zero if a equals b
|
|
* negative/positive if a is earlier/later in the alphabet than b
|
|
*/
|
|
int chunk_compare(chunk_t a, chunk_t b)
|
|
{
|
|
int compare_len = a.len - b.len;
|
|
int len = (compare_len < 0)? a.len : b.len;
|
|
|
|
if (compare_len != 0 || len == 0)
|
|
{
|
|
return compare_len;
|
|
}
|
|
return memcmp(a.ptr, b.ptr, len);
|
|
}
|
|
|
|
/* moves a chunk to a memory position, chunk is freed afterwards
|
|
* position pointer is advanced after the insertion point
|
|
*/
|
|
void
|
|
mv_chunk(u_char **pos, chunk_t content)
|
|
{
|
|
if (content.len > 0)
|
|
{
|
|
chunkcpy(*pos, content);
|
|
free(content.ptr);
|
|
}
|
|
}
|
|
|
|
/*
|
|
* write the binary contents of a chunk_t to a file
|
|
*/
|
|
bool
|
|
write_chunk(const char *filename, const char *label, chunk_t ch
|
|
, mode_t mask, bool force)
|
|
{
|
|
mode_t oldmask;
|
|
FILE *fd;
|
|
size_t written;
|
|
|
|
if (!force)
|
|
{
|
|
fd = fopen(filename, "r");
|
|
if (fd)
|
|
{
|
|
fclose(fd);
|
|
plog(" %s file '%s' already exists", label, filename);
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
/* set umask */
|
|
oldmask = umask(mask);
|
|
|
|
fd = fopen(filename, "w");
|
|
|
|
if (fd)
|
|
{
|
|
written = fwrite(ch.ptr, sizeof(u_char), ch.len, fd);
|
|
fclose(fd);
|
|
if (written != ch.len)
|
|
{
|
|
plog(" writing to %s file '%s' failed", label, filename);
|
|
umask(oldmask);
|
|
return FALSE;
|
|
}
|
|
plog(" written %s file '%s' (%d bytes)", label, filename, (int)ch.len);
|
|
umask(oldmask);
|
|
return TRUE;
|
|
}
|
|
else
|
|
{
|
|
plog(" could not open %s file '%s' for writing", label, filename);
|
|
umask(oldmask);
|
|
return FALSE;
|
|
}
|
|
}
|
|
|
|
/* Names of the months */
|
|
|
|
static const char* months[] = {
|
|
"Jan", "Feb", "Mar", "Apr", "May", "Jun",
|
|
"Jul", "Aug", "Sep", "Oct", "Nov", "Dec"
|
|
};
|
|
|
|
|
|
/*
|
|
* Display a date either in local or UTC time
|
|
*/
|
|
char*
|
|
timetoa(const time_t *time, bool utc)
|
|
{
|
|
static char buf[TIMETOA_BUF];
|
|
|
|
if (*time == UNDEFINED_TIME)
|
|
sprintf(buf, "--- -- --:--:--%s----", (utc)?" UTC ":" ");
|
|
else
|
|
{
|
|
struct tm *t = (utc)? gmtime(time) : localtime(time);
|
|
|
|
sprintf(buf, "%s %02d %02d:%02d:%02d%s%04d",
|
|
months[t->tm_mon], t->tm_mday, t->tm_hour, t->tm_min, t->tm_sec,
|
|
(utc)?" UTC ":" ", t->tm_year + 1900
|
|
);
|
|
}
|
|
return buf;
|
|
}
|
|
|
|
/* checks if the expiration date has been reached and
|
|
* warns during the warning_interval of the imminent
|
|
* expiry. strict=TRUE declares a fatal error,
|
|
* strict=FALSE issues a warning upon expiry.
|
|
*/
|
|
const char*
|
|
check_expiry(time_t expiration_date, int warning_interval, bool strict)
|
|
{
|
|
time_t now;
|
|
int time_left;
|
|
|
|
if (expiration_date == UNDEFINED_TIME)
|
|
return "ok (expires never)";
|
|
|
|
/* determine the current time */
|
|
time(&now);
|
|
|
|
time_left = (expiration_date - now);
|
|
if (time_left < 0)
|
|
return strict? "fatal (expired)" : "warning (expired)";
|
|
|
|
if (time_left > 86400*warning_interval)
|
|
return "ok";
|
|
{
|
|
static char buf[35]; /* temporary storage */
|
|
const char* unit = "second";
|
|
|
|
if (time_left > 172800)
|
|
{
|
|
time_left /= 86400;
|
|
unit = "day";
|
|
}
|
|
else if (time_left > 7200)
|
|
{
|
|
time_left /= 3600;
|
|
unit = "hour";
|
|
}
|
|
else if (time_left > 120)
|
|
{
|
|
time_left /= 60;
|
|
unit = "minute";
|
|
}
|
|
snprintf(buf, 35, "warning (expires in %d %s%s)", time_left,
|
|
unit, (time_left == 1)?"":"s");
|
|
return buf;
|
|
}
|
|
}
|
|
|
|
|
|
/*
|
|
* Filter eliminating the directory entries '.' and '..'
|
|
*/
|
|
int
|
|
file_select(const struct dirent *entry)
|
|
{
|
|
return strcmp(entry->d_name, "." ) &&
|
|
strcmp(entry->d_name, "..");
|
|
}
|
|
|
|
|