4871328f72
buffers with constant data. [RT #32064] Squashed commit of the following: commit 3433b96bf11f8c90ccbe412f01d02a6d8bbc2d33 Author: Mark Andrews <marka@isc.org> Date: Sat Dec 8 12:41:16 2012 +1100 isc_buffer_init -> isc_buffer_constinit commit c22dbcc1122a0a44f7b46068e0ccbc25353a57d5 Author: Mark Andrews <marka@isc.org> Date: Sat Dec 8 12:38:39 2012 +1100 isc_buffer_init -> isc_buffer_constinit commit 900820416c45c1887d0d22d7a010df60a903bd56 Author: Mark Andrews <marka@isc.org> Date: Sat Dec 8 12:24:19 2012 +1100 remove isc_buffer_reconstinit commit f815711c17b05f9961786a90b9bae902d3c01494 Author: Mark Andrews <marka@isc.org> Date: Wed Dec 5 15:42:57 2012 +1100 add isc_buffer_constinit
129 lines
3.5 KiB
C
129 lines
3.5 KiB
C
/*
|
|
* Copyright (C) 2004-2007, 2012 Internet Systems Consortium, Inc. ("ISC")
|
|
* Copyright (C) 1999-2001 Internet Software Consortium.
|
|
*
|
|
* Permission to use, copy, modify, and/or distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
|
|
* REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
* AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
* INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
* LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
|
|
* OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
* PERFORMANCE OF THIS SOFTWARE.
|
|
*/
|
|
|
|
/* $Id$ */
|
|
|
|
/*! \file */
|
|
|
|
#include <config.h>
|
|
|
|
#include <isc/buffer.h>
|
|
#include <isc/string.h> /* Required for HP/UX (and others?) */
|
|
#include <isc/mem.h>
|
|
|
|
#include <isccfg/cfg.h>
|
|
|
|
#include <dns/fixedname.h>
|
|
#include <dns/keyvalues.h>
|
|
#include <dns/name.h>
|
|
#include <dns/tkey.h>
|
|
|
|
#include <dst/gssapi.h>
|
|
|
|
#include <named/tkeyconf.h>
|
|
|
|
#define RETERR(x) do { \
|
|
result = (x); \
|
|
if (result != ISC_R_SUCCESS) \
|
|
goto failure; \
|
|
} while (0)
|
|
|
|
#include<named/log.h>
|
|
#define LOG(msg) \
|
|
isc_log_write(ns_g_lctx, \
|
|
NS_LOGCATEGORY_GENERAL, \
|
|
NS_LOGMODULE_SERVER, \
|
|
ISC_LOG_ERROR, \
|
|
"%s", msg)
|
|
|
|
isc_result_t
|
|
ns_tkeyctx_fromconfig(const cfg_obj_t *options, isc_mem_t *mctx,
|
|
isc_entropy_t *ectx, dns_tkeyctx_t **tctxp)
|
|
{
|
|
isc_result_t result;
|
|
dns_tkeyctx_t *tctx = NULL;
|
|
const char *s;
|
|
isc_uint32_t n;
|
|
dns_fixedname_t fname;
|
|
dns_name_t *name;
|
|
isc_buffer_t b;
|
|
const cfg_obj_t *obj;
|
|
int type;
|
|
|
|
result = dns_tkeyctx_create(mctx, ectx, &tctx);
|
|
if (result != ISC_R_SUCCESS)
|
|
return (result);
|
|
|
|
obj = NULL;
|
|
result = cfg_map_get(options, "tkey-dhkey", &obj);
|
|
if (result == ISC_R_SUCCESS) {
|
|
s = cfg_obj_asstring(cfg_tuple_get(obj, "name"));
|
|
n = cfg_obj_asuint32(cfg_tuple_get(obj, "keyid"));
|
|
isc_buffer_constinit(&b, s, strlen(s));
|
|
isc_buffer_add(&b, strlen(s));
|
|
dns_fixedname_init(&fname);
|
|
name = dns_fixedname_name(&fname);
|
|
RETERR(dns_name_fromtext(name, &b, dns_rootname,
|
|
ISC_FALSE, NULL));
|
|
type = DST_TYPE_PUBLIC|DST_TYPE_PRIVATE|DST_TYPE_KEY;
|
|
RETERR(dst_key_fromfile(name, (dns_keytag_t) n, DNS_KEYALG_DH,
|
|
type, NULL, mctx, &tctx->dhkey));
|
|
}
|
|
|
|
obj = NULL;
|
|
result = cfg_map_get(options, "tkey-domain", &obj);
|
|
if (result == ISC_R_SUCCESS) {
|
|
s = cfg_obj_asstring(obj);
|
|
isc_buffer_constinit(&b, s, strlen(s));
|
|
isc_buffer_add(&b, strlen(s));
|
|
dns_fixedname_init(&fname);
|
|
name = dns_fixedname_name(&fname);
|
|
RETERR(dns_name_fromtext(name, &b, dns_rootname, ISC_FALSE,
|
|
NULL));
|
|
tctx->domain = isc_mem_get(mctx, sizeof(dns_name_t));
|
|
if (tctx->domain == NULL) {
|
|
result = ISC_R_NOMEMORY;
|
|
goto failure;
|
|
}
|
|
dns_name_init(tctx->domain, NULL);
|
|
RETERR(dns_name_dup(name, mctx, tctx->domain));
|
|
}
|
|
|
|
obj = NULL;
|
|
result = cfg_map_get(options, "tkey-gssapi-credential", &obj);
|
|
if (result == ISC_R_SUCCESS) {
|
|
s = cfg_obj_asstring(obj);
|
|
|
|
isc_buffer_constinit(&b, s, strlen(s));
|
|
isc_buffer_add(&b, strlen(s));
|
|
dns_fixedname_init(&fname);
|
|
name = dns_fixedname_name(&fname);
|
|
RETERR(dns_name_fromtext(name, &b, dns_rootname, ISC_FALSE,
|
|
NULL));
|
|
RETERR(dst_gssapi_acquirecred(name, ISC_FALSE,
|
|
&tctx->gsscred));
|
|
}
|
|
|
|
*tctxp = tctx;
|
|
return (ISC_R_SUCCESS);
|
|
|
|
failure:
|
|
dns_tkeyctx_destroy(&tctx);
|
|
return (result);
|
|
}
|
|
|