Annotation of embedaddon/axTLS/httpd/htpasswd.c, revision 1.1

1.1     ! misho       1: /*
        !             2:  * Copyright (c) Cameron Rich
        !             3:  * 
        !             4:  * All rights reserved.
        !             5:  * 
        !             6:  * Redistribution and use in source and binary forms, with or without 
        !             7:  * modification, are permitted provided that the following conditions are met:
        !             8:  *
        !             9:  * * Redistributions of source code must retain the above copyright notice, 
        !            10:  *   this list of conditions and the following disclaimer.
        !            11:  * * Redistributions in binary form must reproduce the above copyright notice, 
        !            12:  *   this list of conditions and the following disclaimer in the documentation 
        !            13:  *   and/or other materials provided with the distribution.
        !            14:  * * Neither the name of the axTLS project nor the names of its contributors 
        !            15:  *   may be used to endorse or promote products derived from this software 
        !            16:  *   without specific prior written permission.
        !            17:  *
        !            18:  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
        !            19:  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
        !            20:  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
        !            21:  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
        !            22:  * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
        !            23:  * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
        !            24:  * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
        !            25:  * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
        !            26:  * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
        !            27:  * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
        !            28:  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
        !            29:  */
        !            30: 
        !            31: #include <stdio.h>
        !            32: #include <string.h>
        !            33: #include <stdlib.h>
        !            34: #include "os_port.h"
        !            35: #include "ssl.h"
        !            36: 
        !            37: int tfd;
        !            38: 
        !            39: void base64_encode(const uint8_t *in, size_t inlen, char *out, size_t outlen)
        !            40: {
        !            41:     static const char b64str[64] =
        !            42:             "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
        !            43: 
        !            44:     while (inlen && outlen)
        !            45:     {
        !            46:         *out++ = b64str[(in[0] >> 2) & 0x3f];
        !            47:         if (!--outlen)
        !            48:             break;
        !            49: 
        !            50:         *out++ = b64str[((in[0] << 4)
        !            51:                 + (--inlen ? in[1] >> 4 : 0)) & 0x3f];
        !            52:         if (!--outlen)
        !            53:             break;
        !            54:         *out++ = (inlen
        !            55:              ? b64str[((in[1] << 2)
        !            56:                  + (--inlen ? in[2] >> 6 : 0))
        !            57:              & 0x3f]
        !            58:              : '=');
        !            59:         if (!--outlen)
        !            60:             break;
        !            61:         *out++ = inlen ? b64str[in[2] & 0x3f] : '=';
        !            62:         if (!--outlen)
        !            63:             break;
        !            64:         if (inlen)
        !            65:             inlen--;
        !            66:         if (inlen)
        !            67:             in += 3;
        !            68:     }
        !            69: 
        !            70:     if (outlen)
        !            71:         *out = '\0';
        !            72: }
        !            73: 
        !            74: static void usage(void) 
        !            75: {
        !            76:     fprintf(stderr,"Usage: htpasswd username\n");
        !            77:     exit(1);
        !            78: }
        !            79: 
        !            80: #ifdef WIN32
        !            81: static char * getpass(const char *prompt)
        !            82: {
        !            83:     static char buf[127];
        !            84:     FILE *fp = stdin;
        !            85: 
        !            86:     printf(prompt); TTY_FLUSH();
        !            87: #if 0
        !            88:     fp = fopen("/dev/tty", "w");
        !            89:     if (fp == NULL) 
        !            90:     {
        !            91:         printf("null\n"); TTY_FLUSH();
        !            92:         fp = stdin;
        !            93:     }
        !            94: #endif
        !            95: 
        !            96:     fgets(buf, sizeof(buf), fp);
        !            97:     while (buf[strlen(buf)-1] < ' ') 
        !            98:         buf[strlen(buf)-1] = '\0';
        !            99: 
        !           100:     //if (fp != stdin) 
        !           101:     //    fclose(fp);
        !           102:     return buf;
        !           103: }
        !           104: #endif
        !           105: 
        !           106: int main(int argc, char *argv[]) 
        !           107: {
        !           108:     char* pw;
        !           109:     uint8_t md5_salt[MD5_SIZE], md5_pass[MD5_SIZE];
        !           110:     char b64_salt[MD5_SIZE+10], b64_pass[MD5_SIZE+10];
        !           111:     MD5_CTX ctx;
        !           112: 
        !           113:     if (argc != 2)
        !           114:         usage();
        !           115: 
        !           116:     pw = strdup(getpass("New password:"));
        !           117:     if (strcmp(pw, getpass("Re-type new password:")) != 0)
        !           118:     {
        !           119:         fprintf(stderr, "They don't match, sorry.\n" );
        !           120:         exit(1);
        !           121:     }
        !           122: 
        !           123:     RNG_initialize();
        !           124:     get_random(MD5_SIZE, md5_salt);
        !           125:     RNG_terminate();
        !           126:     base64_encode(md5_salt, MD5_SIZE, b64_salt, sizeof(b64_salt));
        !           127: 
        !           128:     MD5_Init(&ctx);
        !           129:     MD5_Update(&ctx, md5_salt, MD5_SIZE);
        !           130:     MD5_Update(&ctx, (uint8_t *)pw, strlen(pw));
        !           131:     MD5_Final(md5_pass, &ctx);
        !           132:     base64_encode(md5_pass, MD5_SIZE, b64_pass, sizeof(b64_pass));
        !           133: 
        !           134:     printf("Add the following to your '.htpasswd' file\n");
        !           135:     printf("%s:%s$%s\n", argv[1], b64_salt, b64_pass);
        !           136:     return 0;
        !           137: }

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>