lib/diskio.c

   1 /* diskio.c     read and write data structures from disk
   2  * Copyright (C) 2002, 2003  Simon Josefsson
   3  *
   4  * This file is part of Shishi.
   5  *
   6  * Shishi is free software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License as published by
   8  * the Free Software Foundation; either version 2 of the License, or
   9  * (at your option) any later version.
  10  *
  11  * Shishi is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  * GNU General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * along with Shishi; if not, write to the Free Software
  18  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  19  *
  20  */
  21
  22 #include <libtasn1.h>
  23 #define _SHISHI_HAS_LIBTASN1_H 1
  24 #include "internal.h"
  25
  26 #define HEADERBEG "-----BEGIN SHISHI %s-----"
  27 #define HEADEREND "-----END SHISHI %s-----"
  28
  29 /*
  30  * Note to self: if you change any *print* function, remember to change
  31  * the corresponding *parse* function too.
  32  *
  33  */
  34
  35 int
  36 _shishi_print_armored_data (Shishi * handle,
  37                             FILE * fh,
  38                             Shishi_asn1 asn1, char *asn1type, char *headers)
  39 {
  40   char der[BUFSIZ];
  41   int derlen = BUFSIZ;
  42   char b64der[BUFSIZ];
  43   int res;
  44   size_t i;
  45
  46   if (asn1 == NULL)
  47     return !SHISHI_OK;
  48
  49   asn1_print_structure (fh, asn1, "", ASN1_PRINT_NAME_TYPE_VALUE);
  50
  51   res = shishi_a2d_field (handle, asn1, "", der, &derlen);
  52   if (res != ASN1_SUCCESS)
  53     {
  54       shishi_error_printf (handle, "Could not DER encode %s: %s\n",
  55                            asn1type, shishi_strerror (res));
  56       return !SHISHI_OK;
  57     }
  58
  59   shishi_to_base64 (b64der, der, derlen, sizeof (b64der));
  60
  61   fprintf (fh, HEADERBEG "\n", asn1type);
  62
  63   if (headers)
  64     {
  65       fprintf (fh, headers);
  66       fprintf (fh, "\n");
  67     }
  68
  69   for (i = 0; i < strlen (b64der); i++)
  70     {
  71       fprintf (fh, "%c", b64der[i]);
  72       if ((i + 1) % 64 == 0)
  73         fprintf (fh, "\n");
  74     }
  75   if ((i + 1) % 64 != 0)
  76     fprintf (fh, "\n");
  77
  78   fprintf (fh, HEADEREND "\n", asn1type);
  79
  80   return SHISHI_OK;
  81 }
  82
  83 int
  84 _shishi_save_data (Shishi * handle, FILE * fh, Shishi_asn1 asn1,
  85                    char *asn1type)
  86 {
  87   char der[BUFSIZ];
  88   int derlen;
  89   int res;
  90   int i;
  91
  92   derlen = sizeof (der);
  93   res = shishi_a2d_field (handle, asn1, asn1type, der, &derlen);
  94   if (res != SHISHI_OK)
  95     {
  96       shishi_error_printf (handle, "Could not DER encode %s: %s\n",
  97                            asn1type, shishi_strerror (res));
  98       return !SHISHI_OK;
  99     }
 100
 101   i = fwrite (der, sizeof (der[0]), derlen, fh);
 102   if (i != derlen)
 103     {
 104       shishi_error_printf (handle, "Short write to file (wrote %d of %d)\n",
 105                            i, derlen);
 106       return !SHISHI_OK;
 107     }
 108
 109   return SHISHI_OK;
 110 }
 111
 112 int
 113 shishi_enckdcreppart_print (Shishi * handle,
 114                             FILE * fh, Shishi_asn1 enckdcreppart)
 115 {
 116   return _shishi_print_armored_data (handle, fh, enckdcreppart,
 117                                      "EncKDCRepPart", NULL);
 118 }
 119
 120 int
 121 shishi_enckdcreppart_save (Shishi * handle,
 122                            FILE * fh, Shishi_asn1 enckdcreppart)
 123 {
 124   return _shishi_save_data (handle, fh, enckdcreppart, "EncKDCRepPart");
 125 }
 126
 127 int
 128 shishi_ticket_save (Shishi * handle, FILE * fh, Shishi_asn1 ticket)
 129 {
 130   return _shishi_save_data (handle, fh, ticket, "Ticket");
 131 }
 132
 133 int
 134 shishi_ticket_print (Shishi * handle, FILE * fh, Shishi_asn1 ticket)
 135 {
 136   return _shishi_print_armored_data (handle, fh, ticket, "Ticket", NULL);
 137 }
 138
 139 int
 140 shishi_encticketpart_print (Shishi * handle, FILE * fh,
 141                             Shishi_asn1 encticketpart)
 142 {
 143   return _shishi_print_armored_data (handle, fh, encticketpart,
 144                                      "EncTicketPart", NULL);
 145 }
 146
 147 static int
 148 _shishi_read_armored_data (Shishi * handle,
 149                            FILE * fh, char *buffer, size_t len, char *tag)
 150 {
 151   int lno = 0;
 152   size_t maxsize = len;
 153   char line[BUFSIZ];
 154   char armorbegin[BUFSIZ];
 155   char armorend[BUFSIZ];
 156   int in_data = 0;
 157
 158   sprintf (armorbegin, HEADERBEG, tag);
 159   sprintf (armorend, HEADEREND, tag);
 160
 161   len = 0;
 162   while (fgets (line, sizeof (line), fh))
 163     {
 164       lno++;
 165       line[sizeof (line) - 1] = '\0';
 166       if (!*line || line[strlen (line) - 1] != '\n')
 167         {
 168           fprintf (stderr, "input line %u too long or missing LF\n", lno);
 169           continue;
 170         }
 171       line[strlen (line) - 1] = '\0';
 172       if (VERBOSENOICE (handle))
 173         printf ("line %d read %d bytes: %s\n", lno, strlen (line), line);
 174
 175       /* XXX check if all chars in line are b64 data, otherwise bail out */
 176
 177       if (in_data)
 178         {
 179           if (strncmp (line, armorend, strlen (armorend)) == 0)
 180             break;
 181         }
 182       else
 183         {
 184           in_data = strncmp (line, armorbegin, strlen (armorbegin)) == 0;
 185           continue;
 186         }
 187
 188       if (len + strlen (line) >= maxsize)
 189         {
 190           shishi_error_printf (handle, "too large input size on line %d\n",
 191                                lno);
 192           return !SHISHI_OK;
 193         }
 194
 195       memcpy (buffer + len, line, strlen (line));
 196       len += strlen (line);
 197     }
 198
 199   if (len <= 0)
 200     return !SHISHI_OK;
 201
 202   buffer[len] = '\0';
 203
 204   return SHISHI_OK;
 205 }
 206
 207 static int
 208 _shishi_ticket_input (Shishi * handle,
 209                       FILE * fh, Shishi_asn1 * ticket, int type)
 210 {
 211   char der[BUFSIZ];
 212   size_t derlen;
 213   char b64der[BUFSIZ];
 214   size_t b64len = 0;
 215   int res;
 216
 217   if (type == 0)
 218     {
 219       b64len = sizeof (b64der);
 220       res = _shishi_read_armored_data (handle, fh, b64der, b64len, "Ticket");
 221       if (res != SHISHI_OK)
 222         {
 223           shishi_error_printf (handle, "armor data read fail\n");
 224           return res;
 225         }
 226
 227       derlen = shishi_from_base64 (&der[0], b64der);
 228     }
 229   else
 230     {
 231       derlen =
 232         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 233       if (derlen <= 0 || !feof (fh) || ferror (fh))
 234         {
 235           shishi_error_printf (handle,
 236                                "Error reading from file (got %d bytes)...",
 237                                derlen);
 238           return !SHISHI_OK;
 239         }
 240     }
 241
 242   *ticket = shishi_der2asn1_ticket (handle, der, derlen);
 243   if (*ticket == NULL)
 244     return SHISHI_ASN1_ERROR;
 245
 246   return SHISHI_OK;
 247 }
 248
 249 int
 250 shishi_ticket_parse (Shishi * handle, FILE * fh, Shishi_asn1 * ticket)
 251 {
 252   return _shishi_ticket_input (handle, fh, ticket, 0);
 253 }
 254
 255 int
 256 shishi_ticket_read (Shishi * handle, FILE * fh, Shishi_asn1 * ticket)
 257 {
 258   return _shishi_ticket_input (handle, fh, ticket, 1);
 259 }
 260
 261 static int
 262 _shishi_enckdcreppart_input (Shishi * handle,
 263                              FILE * fh, Shishi_asn1 * enckdcreppart, int type)
 264 {
 265   char der[BUFSIZ];
 266   size_t derlen;
 267   char b64der[BUFSIZ];
 268   size_t b64len = 0;
 269   int res;
 270
 271   if (type == 0)
 272     {
 273       b64len = sizeof (b64der);
 274       res = _shishi_read_armored_data (handle, fh,
 275                                        b64der, b64len, "EncKDCRepPart");
 276       if (res != SHISHI_OK)
 277         {
 278           shishi_error_printf (handle, "armor data read fail\n");
 279           return res;
 280         }
 281
 282       derlen = shishi_from_base64 (&der[0], b64der);
 283     }
 284   else
 285     {
 286       derlen =
 287         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 288       if (derlen <= 0 || !feof (fh) || ferror (fh))
 289         {
 290           shishi_error_printf (handle,
 291                                "Error reading from file (got %d bytes)...",
 292                                derlen);
 293           return !SHISHI_OK;
 294         }
 295     }
 296
 297   *enckdcreppart = shishi_der2asn1_encasreppart (handle, der, derlen);
 298   if (*enckdcreppart == NULL)
 299     {
 300       shishi_error_printf (handle, "Could not DER decode Encasreppart: %s",
 301                            shishi_strerror_details (handle));
 302
 303       *enckdcreppart = shishi_der2asn1_enctgsreppart (handle, der, derlen);
 304       if (*enckdcreppart == NULL)
 305         {
 306           shishi_error_printf (handle,
 307                                "Could not DER decode Enctgsreppart: %s",
 308                                shishi_strerror_details (handle));
 309
 310           *enckdcreppart =
 311             shishi_der2asn1_enckdcreppart (handle, der, derlen);
 312           if (*enckdcreppart == NULL)
 313             {
 314               shishi_error_printf (handle,
 315                                    "Could not DER decode Enckdcreppart: %s",
 316                                    shishi_strerror_details (handle));
 317               return !SHISHI_OK;
 318             }
 319         }
 320     }
 321
 322   return SHISHI_OK;
 323 }
 324
 325 int
 326 shishi_enckdcreppart_parse (Shishi * handle,
 327                             FILE * fh, Shishi_asn1 * enckdcreppart)
 328 {
 329   return _shishi_enckdcreppart_input (handle, fh, enckdcreppart, 0);
 330 }
 331
 332 int
 333 shishi_enckdcreppart_read (Shishi * handle,
 334                            FILE * fh, Shishi_asn1 * enckdcreppart)
 335 {
 336   return _shishi_enckdcreppart_input (handle, fh, enckdcreppart, 1);
 337 }
 338
 339 int
 340 _shishi_kdcreq_input (Shishi * handle, FILE * fh, Shishi_asn1 * asreq,
 341                       int type)
 342 {
 343   char der[BUFSIZ];
 344   size_t derlen;
 345   char b64der[BUFSIZ];
 346   size_t b64len = 0;
 347   int res;
 348
 349   if (type == 0)
 350     {
 351       b64len = sizeof (b64der);
 352       res = _shishi_read_armored_data (handle, fh, b64der, b64len, "KDC-REQ");
 353       if (res != SHISHI_OK)
 354         {
 355           shishi_error_printf (handle, "armor data read fail\n");
 356           return res;
 357         }
 358
 359       derlen = shishi_from_base64 (&der[0], b64der);
 360     }
 361   else
 362     {
 363       derlen =
 364         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 365       if (derlen <= 0 || !feof (fh) || ferror (fh))
 366         {
 367           shishi_error_printf (handle,
 368                                "Error reading from file (got %d bytes)...",
 369                                derlen);
 370           return !SHISHI_OK;
 371         }
 372     }
 373
 374   *asreq = shishi_der2asn1_asreq (handle, der, derlen);
 375   if (*asreq == NULL)
 376     {
 377       printf ("bad asreq magic\n");
 378       shishi_error_printf (handle, "Could not DER decode AS-REQ\n");
 379
 380       *asreq = shishi_der2asn1_tgsreq (handle, der, derlen);
 381       if (*asreq == NULL)
 382         {
 383           printf ("bad tgsreq magic\n");
 384           shishi_error_printf (handle, "Could not DER decode TGS-REQ\n");
 385
 386           *asreq = shishi_der2asn1_kdcreq (handle, der, derlen);
 387           if (*asreq == NULL)
 388             {
 389               printf ("bad kdcreq magic\n");
 390               shishi_error_printf (handle, "Could not DER decode KDC-REQ\n");
 391
 392               return !SHISHI_OK;
 393             }
 394         }
 395     }
 396
 397   return SHISHI_OK;
 398 }
 399
 400 int
 401 _shishi_kdcrep_input (Shishi * handle, FILE * fh, Shishi_asn1 * asrep,
 402                       int type)
 403 {
 404   char der[BUFSIZ];
 405   size_t derlen;
 406   char b64der[BUFSIZ];
 407   size_t b64len = 0;
 408   int res;
 409
 410   if (type == 0)
 411     {
 412       b64len = sizeof (b64der);
 413       res = _shishi_read_armored_data (handle, fh, b64der, b64len, "KDC-REP");
 414       if (res != SHISHI_OK)
 415         {
 416           shishi_error_printf (handle, "armor data read fail\n");
 417           return res;
 418         }
 419
 420       derlen = shishi_from_base64 (&der[0], b64der);
 421     }
 422   else
 423     {
 424       derlen =
 425         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 426       if (derlen <= 0 || !feof (fh) || ferror (fh))
 427         {
 428           shishi_error_printf (handle,
 429                                "Error reading from file (got %d bytes)...",
 430                                derlen);
 431           return !SHISHI_OK;
 432         }
 433     }
 434
 435   *asrep = shishi_der2asn1_asrep (handle, der, derlen);
 436   if (*asrep == NULL)
 437     {
 438       *asrep = shishi_der2asn1_tgsrep (handle, der, derlen);
 439       if (*asrep == NULL)
 440         {
 441           printf ("Could not DER decode KDC-REP: %s\n",
 442                   shishi_strerror_details (handle));
 443           printf ("Parsing AS/TGS-REP as KDC-REP (bug work around)\n");
 444
 445           *asrep = shishi_der2asn1_kdcrep (handle, der, derlen);
 446           if (*asrep == NULL)
 447             {
 448               fprintf (stderr, "Could not DER decode KDC-REP: %s\n",
 449                        shishi_strerror_details (handle));
 450               return !SHISHI_OK;
 451             }
 452
 453           fprintf (stderr, "Bug workaround code successful...\n");
 454         }
 455     }
 456
 457   return SHISHI_OK;
 458 }
 459
 460 int
 461 _shishi_apreq_input (Shishi * handle, FILE * fh, Shishi_asn1 * apreq,
 462                      int type)
 463 {
 464   char der[BUFSIZ];
 465   size_t derlen;
 466   char b64der[BUFSIZ];
 467   size_t b64len = 0;
 468   int res;
 469
 470   if (type == 0)
 471     {
 472       b64len = sizeof (b64der);
 473       res = _shishi_read_armored_data (handle, fh, b64der, b64len, "AP-REQ");
 474       if (res != SHISHI_OK)
 475         {
 476           shishi_error_printf (handle, "armor data read fail\n");
 477           return res;
 478         }
 479
 480       derlen = shishi_from_base64 (&der[0], b64der);
 481     }
 482   else
 483     {
 484       derlen =
 485         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 486       if (derlen <= 0 || !feof (fh) || ferror (fh))
 487         {
 488           shishi_error_printf (handle,
 489                                "Error reading from file (got %d bytes)...",
 490                                derlen);
 491           return !SHISHI_OK;
 492         }
 493     }
 494
 495   *apreq = shishi_der2asn1_apreq (handle, der, derlen);
 496   if (*apreq == NULL)
 497     {
 498       printf ("bad magic %s\n", shishi_strerror_details (handle));
 499       shishi_error_printf (handle, "Could not DER decode AP-REQ\n");
 500
 501       return !SHISHI_OK;
 502     }
 503
 504   return SHISHI_OK;
 505 }
 506
 507 int
 508 _shishi_aprep_input (Shishi * handle, FILE * fh, Shishi_asn1 * aprep,
 509                      int type)
 510 {
 511   char der[BUFSIZ];
 512   size_t derlen;
 513   char b64der[BUFSIZ];
 514   size_t b64len = 0;
 515   int res;
 516
 517   if (type == 0)
 518     {
 519       b64len = sizeof (b64der);
 520       res = _shishi_read_armored_data (handle, fh, b64der, b64len, "AP-REP");
 521       if (res != SHISHI_OK)
 522         {
 523           shishi_error_printf (handle, "armor data read fail\n");
 524           return res;
 525         }
 526
 527       derlen = shishi_from_base64 (&der[0], b64der);
 528     }
 529   else
 530     {
 531       derlen =
 532         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 533       if (derlen <= 0 || !feof (fh) || ferror (fh))
 534         {
 535           shishi_error_printf (handle,
 536                                "Error reading from file (got %d bytes)...",
 537                                derlen);
 538           return !SHISHI_OK;
 539         }
 540     }
 541
 542   *aprep = shishi_der2asn1_aprep (handle, der, derlen);
 543   if (*aprep == NULL)
 544     {
 545       printf ("bad magic %s\n", shishi_strerror_details (handle));
 546       shishi_error_printf (handle, "Could not DER decode AP-REP\n");
 547
 548       return !SHISHI_OK;
 549     }
 550
 551   return SHISHI_OK;
 552 }
 553
 554 int
 555 _shishi_encapreppart_input (Shishi * handle, FILE * fh,
 556                             Shishi_asn1 * encapreppart, int type)
 557 {
 558   char der[BUFSIZ];
 559   size_t derlen;
 560   char b64der[BUFSIZ];
 561   size_t b64len = 0;
 562   int res;
 563
 564   if (type == 0)
 565     {
 566       b64len = sizeof (b64der);
 567       res =
 568         _shishi_read_armored_data (handle, fh, b64der, b64len,
 569                                    "EncAPRepPart");
 570       if (res != SHISHI_OK)
 571         {
 572           shishi_error_printf (handle, "armor data read fail\n");
 573           return res;
 574         }
 575
 576       derlen = shishi_from_base64 (&der[0], b64der);
 577     }
 578   else
 579     {
 580       derlen =
 581         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 582       if (derlen <= 0 || !feof (fh) || ferror (fh))
 583         {
 584           shishi_error_printf (handle,
 585                                "Error reading from file (got %d bytes)...",
 586                                derlen);
 587           return !SHISHI_OK;
 588         }
 589     }
 590
 591   *encapreppart = shishi_der2asn1_encapreppart (handle, der, derlen);
 592   if (*encapreppart == NULL)
 593     {
 594       printf ("bad magic %s\n", shishi_strerror_details (handle));
 595       shishi_error_printf (handle, "Could not DER decode EncAPRepPart\n");
 596
 597       return !SHISHI_OK;
 598     }
 599
 600   return SHISHI_OK;
 601 }
 602
 603 int
 604 _shishi_authenticator_input (Shishi * handle,
 605                              FILE * fh, Shishi_asn1 * authenticator, int type)
 606 {
 607   char der[BUFSIZ];
 608   size_t derlen;
 609   char b64der[BUFSIZ];
 610   size_t b64len = 0;
 611   int res;
 612
 613   if (type == 0)
 614     {
 615       b64len = sizeof (b64der);
 616       res = _shishi_read_armored_data (handle, fh, b64der, b64len,
 617                                        "Authenticator");
 618       if (res != SHISHI_OK)
 619         {
 620           shishi_error_printf (handle, "armor data read fail\n");
 621           return res;
 622         }
 623
 624       derlen = shishi_from_base64 (&der[0], b64der);
 625     }
 626   else
 627     {
 628       derlen =
 629         fread (der, sizeof (der[0]), sizeof (der) / sizeof (der[0]), fh);
 630       if (derlen <= 0 || !feof (fh) || ferror (fh))
 631         {
 632           shishi_error_printf (handle,
 633                                "Error reading from file (got %d bytes)...",
 634                                derlen);
 635           return !SHISHI_OK;
 636         }
 637     }
 638
 639   *authenticator = shishi_der2asn1_authenticator (handle, der, derlen);
 640   if (*authenticator == NULL)
 641     {
 642       printf ("bad magic %s\n", shishi_strerror_details (handle));
 643       shishi_error_printf (handle, "Could not DER decode AP-REQ\n");
 644
 645       return !SHISHI_OK;
 646     }
 647
 648   return SHISHI_OK;
 649 }
 650
 651 int
 652 _shishi_krberror_input (Shishi * handle,
 653                         FILE * fh, Shishi_asn1 * krberror, int type)
 654 {
 655   char der[BUFSIZ];
 656   size_t derlen;
 657   char b64der[BUFSIZ];
 658   size_t b64len = 0;
 659   int res;
 660
 661   if (type == 0)
 662     {
 663       b64len = sizeof (b64der);
 664       res = _shishi_read_armored_data (handle, fh, b64der, b64len,
 665                                        "KRB-ERROR");
 666       if (res != SHISHI_OK)
 667         {
 668           shishi_error_printf (handle, "armor data read fail\n");
 669           return res;
 670         }
 671
 672       derlen = shishi_from_base64 (&der[0], b64der);
 673     }
 674   else
 675     {
 676       derlen = fread (der, sizeof (der[0]),
 677                       sizeof (der) / sizeof (der[0]), fh);
 678       if (derlen <= 0 || !feof (fh) || ferror (fh))
 679         {
 680           shishi_error_printf (handle,
 681                                "Error reading from file (got %d bytes)...",
 682                                derlen);
 683           return !SHISHI_OK;
 684         }
 685     }
 686
 687   *krberror = shishi_der2asn1_krberror (handle, der, derlen);
 688   if (*krberror == NULL)
 689     {
 690       printf ("bad magic %s\n", shishi_strerror_details (handle));
 691       shishi_error_printf (handle, "Could not DER decode AP-REQ\n");
 692
 693       return !SHISHI_OK;
 694     }
 695
 696   return SHISHI_OK;
 697 }
 698
 699 int
 700 _shishi_safe_input (Shishi * handle, FILE * fh, Shishi_asn1 * safe, int type)
 701 {
 702   char der[BUFSIZ];
 703   size_t derlen;
 704   char b64der[BUFSIZ];
 705   size_t b64len = 0;
 706   int res;
 707
 708   if (type == 0)
 709     {
 710       b64len = sizeof (b64der);
 711       res = _shishi_read_armored_data (handle, fh, b64der, b64len,
 712                                        "KRB-SAFE");
 713       if (res != SHISHI_OK)
 714         {
 715           shishi_error_printf (handle, "armor data read fail\n");
 716           return res;
 717         }
 718
 719       derlen = shishi_from_base64 (&der[0], b64der);
 720     }
 721   else
 722     {
 723       derlen = fread (der, sizeof (der[0]),
 724                       sizeof (der) / sizeof (der[0]), fh);
 725       if (derlen <= 0 || !feof (fh) || ferror (fh))
 726         {
 727           shishi_error_printf (handle,
 728                                "Error reading from file (got %d bytes)...",
 729                                derlen);
 730           return !SHISHI_OK;
 731         }
 732     }
 733
 734   *safe = shishi_der2asn1_krbsafe (handle, der, derlen);
 735   if (*safe == NULL)
 736     {
 737       printf ("bad magic %s\n", shishi_strerror_details (handle));
 738       shishi_error_printf (handle, "Could not DER decode KRB-SAFE\n");
 739
 740       return !SHISHI_OK;
 741     }
 742
 743   return SHISHI_OK;
 744 }
 745
 746 int
 747 shishi_key_parse (Shishi * handle, FILE * fh, Shishi_key ** key)
 748 {
 749   int lno = 0;
 750   char line[BUFSIZ];
 751   char buffer[BUFSIZ];
 752   char armorbegin[BUFSIZ];
 753   char armorend[BUFSIZ];
 754   int in_key = 0, in_body = 0;
 755   int res;
 756   size_t len, buflen;
 757   Shishi_key *lkey = NULL;
 758
 759   sprintf (armorbegin, HEADERBEG, "KEY");
 760   sprintf (armorend, HEADEREND, "KEY");
 761
 762   len = 0;
 763   while (fgets (line, sizeof (line), fh))
 764     {
 765       lno++;
 766       line[sizeof (line) - 1] = '\0';
 767       if (!*line || line[strlen (line) - 1] != '\n')
 768         {
 769           fprintf (stderr, "input line %u too long or missing LF\n", lno);
 770           continue;
 771         }
 772       line[strlen (line) - 1] = '\0';
 773       if (VERBOSENOICE (handle))
 774         printf ("line %d read %d bytes: %s\n", lno, strlen (line), line);
 775
 776       if (!in_key)
 777         {
 778           in_key = strncmp (line, armorbegin, strlen (armorbegin)) == 0;
 779           if (in_key)
 780             {
 781               res = shishi_key (handle, &lkey);
 782               if (res != SHISHI_OK)
 783                 return res;
 784
 785             }
 786           continue;
 787         }
 788
 789       if (strcmp (line, armorend) == 0)
 790         break;
 791
 792       if (in_body)
 793         {
 794           buflen = shishi_from_base64 (buffer, line);
 795           shishi_key_value_set (lkey, buffer);
 796         }
 797       else
 798         {
 799           if (in_body == 0 && strcmp (line, "") == 0)
 800             in_body = 1;
 801
 802           if (strncmp (line, "Keytype: ", strlen ("Keytype: ")) == 0)
 803             {
 804               int type;
 805               if (sscanf (line, "Keytype: %d (", &type) == 1)
 806                 shishi_key_type_set (lkey, type);
 807             }
 808           else if (strncmp (line, "Key-Version-Number: ",
 809                             strlen ("Key-Version-Number: ")) == 0)
 810             {
 811               int type;
 812               if (sscanf (line, "Key-Version-Number: %d", &type) == 1)
 813                 shishi_key_version_set (lkey, type);
 814             }
 815           else if (strncmp (line, "Realm: ", strlen ("Realm: ")) == 0)
 816             {
 817               shishi_key_realm_set (lkey, line + strlen ("Realm: "));
 818             }
 819           else if (strncmp (line, "Principal: ", strlen ("Principal: ")) == 0)
 820             {
 821               shishi_key_principal_set (lkey, line + strlen ("Principal: "));
 822             }
 823         }
 824     }
 825
 826   if (!lkey)
 827     return SHISHI_OK;
 828
 829   *key = lkey;
 830
 831   return SHISHI_OK;
 832 }
 833
 834 /**
 835  * shishi_key_print:
 836  * @handle: shishi handle as allocated by shishi_init().
 837  * @fh: file handle opened for writing.
 838  * @key: key to print.
 839  *
 840  * Print an ASCII representation of a key structure to file
 841  * descriptor.  Example output:
 842  *
 843  * -----BEGIN SHISHI KEY-----
 844  * Keytype: 18 (aes256-cts-hmac-sha1-96)
 845  * Principal: host/latte.josefsson.org
 846  * Realm: JOSEFSSON.ORG
 847  * Key-Version-Number: 1
 848  *
 849  * P1QdeW/oSiag/bTyVEBAY2msiGSTmgLXlopuCKoppDs=
 850  * -----END SHISHI KEY-----
 851  *
 852  * Return value: Returns SHISHI_OK iff successful.
 853  **/
 854 int
 855 shishi_key_print (Shishi * handle, FILE * fh, Shishi_key * key)
 856 {
 857   char b64key[BUFSIZ];
 858   size_t i;
 859
 860   shishi_to_base64 (b64key, shishi_key_value (key),
 861                     shishi_key_length (key), sizeof (b64key));
 862
 863   fprintf (fh, HEADERBEG "\n", "KEY");
 864
 865   fprintf (fh, "Keytype: %d (%s)\n", shishi_key_type (key),
 866            shishi_cipher_name (shishi_key_type (key)));
 867   if (shishi_key_principal (key))
 868     fprintf (fh, "Principal: %s\n", shishi_key_principal (key));
 869   if (shishi_key_realm (key))
 870     fprintf (fh, "Realm: %s\n", shishi_key_realm (key));
 871   if (shishi_key_version (key))
 872     fprintf (fh, "Key-Version-Number: %d\n", shishi_key_version (key));
 873   fprintf (fh, "\n");
 874
 875   for (i = 0; i < strlen (b64key); i++)
 876     {
 877       fprintf (fh, "%c", b64key[i]);
 878       if ((i + 1) % 64 == 0)
 879         fprintf (fh, "\n");
 880     }
 881   if ((i + 1) % 64 != 0)
 882     fprintf (fh, "\n");
 883
 884   if (VERBOSENOICE (handle))
 885     {
 886       for (i = 0; i < shishi_key_length (key); i++)
 887         fprintf (stdout, "%02x", shishi_key_value (key)[i] & 0xFF);
 888       fprintf (stdout, "\n");
 889     }
 890
 891   fprintf (fh, HEADEREND "\n", "KEY");
 892
 893   return SHISHI_OK;
 894 }
 895
 896 /**
 897  * shishi_key_to_file:
 898  * @handle: shishi handle as allocated by shishi_init().
 899  * @filename: filename to append key to.
 900  * @key: key to print.
 901  *
 902  * Print an ASCII representation of a key structure to a file.  The
 903  * file is appended to if it exists.  See shishi_key_print() for
 904  * format of output.
 905  *
 906  * Return value: Returns SHISHI_OK iff successful.
 907  **/
 908 int
 909 shishi_key_to_file (Shishi * handle, const char *filename, Shishi_key * key)
 910 {
 911   FILE *fh;
 912   int res;
 913
 914   if (VERBOSE (handle))
 915     printf (_("Writing KEY to %s...\n"), filename);
 916
 917   fh = fopen (filename, "a");
 918   if (fh == NULL)
 919     return SHISHI_FOPEN_ERROR;
 920
 921   res = shishi_key_print (handle, fh, key);
 922   if (res != SHISHI_OK)
 923     return res;
 924
 925   res = fclose (fh);
 926   if (res != 0)
 927     return SHISHI_FCLOSE_ERROR;
 928
 929   if (VERBOSE (handle))
 930     printf (_("Writing KEY to %s...done\n"), filename);
 931
 932   return SHISHI_OK;
 933 }