58bd26b6cf
This commit converts the license handling to adhere to the REUSE specification. It specifically: 1. Adds used licnses to LICENSES/ directory 2. Add "isc" template for adding the copyright boilerplate 3. Changes all source files to include copyright and SPDX license header, this includes all the C sources, documentation, zone files, configuration files. There are notes in the doc/dev/copyrights file on how to add correct headers to the new files. 4. Handle the rest that can't be modified via .reuse/dep5 file. The binary (or otherwise unmodifiable) files could have license places next to them in <foo>.license file, but this would lead to cluttered repository and most of the files handled in the .reuse/dep5 file are system test files.
116 lines
3.1 KiB
C
116 lines
3.1 KiB
C
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
/*! \file */
|
|
|
|
#include <inttypes.h>
|
|
|
|
#include <isc/buffer.h>
|
|
#include <isc/mem.h>
|
|
#include <isc/string.h> /* Required for HP/UX (and others?) */
|
|
|
|
#include <dns/fixedname.h>
|
|
#include <dns/keyvalues.h>
|
|
#include <dns/name.h>
|
|
#include <dns/tkey.h>
|
|
|
|
#include <dst/gssapi.h>
|
|
|
|
#include <isccfg/cfg.h>
|
|
|
|
#include <named/tkeyconf.h>
|
|
|
|
#define RETERR(x) \
|
|
do { \
|
|
result = (x); \
|
|
if (result != ISC_R_SUCCESS) \
|
|
goto failure; \
|
|
} while (0)
|
|
|
|
#include <named/log.h>
|
|
#define LOG(msg) \
|
|
isc_log_write(named_g_lctx, NAMED_LOGCATEGORY_GENERAL, \
|
|
NAMED_LOGMODULE_SERVER, ISC_LOG_ERROR, "%s", msg)
|
|
|
|
isc_result_t
|
|
named_tkeyctx_fromconfig(const cfg_obj_t *options, isc_mem_t *mctx,
|
|
dns_tkeyctx_t **tctxp) {
|
|
isc_result_t result;
|
|
dns_tkeyctx_t *tctx = NULL;
|
|
const char *s;
|
|
uint32_t n;
|
|
dns_fixedname_t fname;
|
|
dns_name_t *name;
|
|
isc_buffer_t b;
|
|
const cfg_obj_t *obj;
|
|
int type;
|
|
|
|
result = dns_tkeyctx_create(mctx, &tctx);
|
|
if (result != ISC_R_SUCCESS) {
|
|
return (result);
|
|
}
|
|
|
|
obj = NULL;
|
|
result = cfg_map_get(options, "tkey-dhkey", &obj);
|
|
if (result == ISC_R_SUCCESS) {
|
|
s = cfg_obj_asstring(cfg_tuple_get(obj, "name"));
|
|
n = cfg_obj_asuint32(cfg_tuple_get(obj, "keyid"));
|
|
isc_buffer_constinit(&b, s, strlen(s));
|
|
isc_buffer_add(&b, strlen(s));
|
|
name = dns_fixedname_initname(&fname);
|
|
RETERR(dns_name_fromtext(name, &b, dns_rootname, 0, NULL));
|
|
type = DST_TYPE_PUBLIC | DST_TYPE_PRIVATE | DST_TYPE_KEY;
|
|
RETERR(dst_key_fromfile(name, (dns_keytag_t)n, DNS_KEYALG_DH,
|
|
type, NULL, mctx, &tctx->dhkey));
|
|
}
|
|
|
|
obj = NULL;
|
|
result = cfg_map_get(options, "tkey-domain", &obj);
|
|
if (result == ISC_R_SUCCESS) {
|
|
s = cfg_obj_asstring(obj);
|
|
isc_buffer_constinit(&b, s, strlen(s));
|
|
isc_buffer_add(&b, strlen(s));
|
|
name = dns_fixedname_initname(&fname);
|
|
RETERR(dns_name_fromtext(name, &b, dns_rootname, 0, NULL));
|
|
tctx->domain = isc_mem_get(mctx, sizeof(dns_name_t));
|
|
dns_name_init(tctx->domain, NULL);
|
|
dns_name_dup(name, mctx, tctx->domain);
|
|
}
|
|
|
|
obj = NULL;
|
|
result = cfg_map_get(options, "tkey-gssapi-credential", &obj);
|
|
if (result == ISC_R_SUCCESS) {
|
|
s = cfg_obj_asstring(obj);
|
|
|
|
isc_buffer_constinit(&b, s, strlen(s));
|
|
isc_buffer_add(&b, strlen(s));
|
|
name = dns_fixedname_initname(&fname);
|
|
RETERR(dns_name_fromtext(name, &b, dns_rootname, 0, NULL));
|
|
RETERR(dst_gssapi_acquirecred(name, false, &tctx->gsscred));
|
|
}
|
|
|
|
obj = NULL;
|
|
result = cfg_map_get(options, "tkey-gssapi-keytab", &obj);
|
|
if (result == ISC_R_SUCCESS) {
|
|
s = cfg_obj_asstring(obj);
|
|
tctx->gssapi_keytab = isc_mem_strdup(mctx, s);
|
|
}
|
|
|
|
*tctxp = tctx;
|
|
return (ISC_R_SUCCESS);
|
|
|
|
failure:
|
|
dns_tkeyctx_destroy(&tctx);
|
|
return (result);
|
|
}
|