Return to res_sendsigned.c CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / dhcp / minires

Annotation of embedaddon/dhcp/minires/res_sendsigned.c, revision 1.1.1.1

1.1       misho       1: /*
                      2:  * Copyright (c) 2004,2007,2009 by Internet Systems Consortium, Inc. ("ISC")
                      3:  * Copyright (c) 1995-2003 by Internet Software Consortium
                      4:  *
                      5:  * Permission to use, copy, modify, and distribute this software for any
                      6:  * purpose with or without fee is hereby granted, provided that the above
                      7:  * copyright notice and this permission notice appear in all copies.
                      8:  *
                      9:  * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES
                     10:  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
                     11:  * MERCHANTABILITY AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR
                     12:  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
                     13:  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
                     14:  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
                     15:  * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
                     16:  *
                     17:  *   Internet Systems Consortium, Inc.
                     18:  *   950 Charter Street
                     19:  *   Redwood City, CA 94063
                     20:  *   <info@isc.org>
                     21:  *   https://www.isc.org/
                     22:  */
                     23: 
                     24: #include <sys/types.h>
                     25: #include <sys/param.h>
                     26: 
                     27: #include <netinet/in.h>
                     28: #include <arpa/inet.h>
                     29: #include <sys/socket.h>
                     30: 
                     31: #include <errno.h>
                     32: #include <netdb.h>
                     33: #include <stdio.h>
                     34: #include <stdlib.h>
                     35: #include <string.h>
                     36: #include <unistd.h>
                     37: 
                     38: #include "minires/minires.h"
                     39: #include "arpa/nameser.h"
                     40: 
                     41: #include <isc-dhcp/dst.h>
                     42: 
                     43: /* res_nsendsigned */
                     44: isc_result_t
                     45: res_nsendsigned(res_state statp,
                     46:                double *msg, unsigned msglen, ns_tsig_key *key,
                     47:                double *answer, unsigned anslen, unsigned *anssize)
                     48: {
                     49:        res_state nstatp;
                     50:        DST_KEY *dstkey;
                     51:        int usingTCP = 0;
                     52:        double *newmsg;
                     53:        unsigned newmsglen;
                     54:        unsigned bufsize, siglen;
                     55:        u_char sig[64];
                     56:        HEADER *hp;
                     57:        time_t tsig_time;
                     58:        unsigned ret;
                     59:        isc_result_t rcode;
                     60: 
                     61:        dst_init();
                     62: 
                     63:        nstatp = (res_state) malloc(sizeof(*statp));
                     64:        if (nstatp == NULL)
                     65:                return ISC_R_NOMEMORY;
                     66:        memcpy(nstatp, statp, sizeof(*statp));
                     67: 
                     68:        bufsize = msglen + 1024;
                     69:        newmsg = (double *) malloc(bufsize);
                     70:        if (newmsg == NULL) {
                     71:                free(nstatp);
                     72:                return ISC_R_NOMEMORY;
                     73:        }
                     74:        memcpy(newmsg, msg, msglen);
                     75:        newmsglen = msglen;
                     76: 
                     77:        if (ns_samename(key->alg, NS_TSIG_ALG_HMAC_MD5) != 1)
                     78:                dstkey = NULL;
                     79:        else
                     80:                dstkey = dst_buffer_to_key(key->name, KEY_HMAC_MD5,
                     81:                                           NS_KEY_TYPE_AUTH_ONLY,
                     82:                                           NS_KEY_PROT_ANY,
                     83:                                           key->data, key->len);
                     84:        if (dstkey == NULL) {
                     85:                free(nstatp);
                     86:                free(newmsg);
                     87:                return ISC_R_BADKEY;
                     88:        }
                     89: 
                     90:        nstatp->nscount = 1;
                     91:        siglen = sizeof(sig);
                     92:        rcode = ns_sign((u_char *)newmsg, &newmsglen, bufsize,
                     93:                        NOERROR, dstkey, NULL, 0,
                     94:                        sig, &siglen, 0);
                     95:        if (rcode != ISC_R_SUCCESS) {
                     96:                dst_free_key(dstkey);
                     97:                free (nstatp);
                     98:                free (newmsg);
                     99:                return rcode;
                    100:        }
                    101: 
                    102:        if (newmsglen > PACKETSZ || (nstatp->options & RES_IGNTC))
                    103:                usingTCP = 1;
                    104:        if (usingTCP == 0)
                    105:                nstatp->options |= RES_IGNTC;
                    106:        else
                    107:                nstatp->options |= RES_USEVC;
                    108: 
                    109: retry:
                    110: 
                    111:        rcode = res_nsend(nstatp, newmsg, newmsglen, answer, anslen, &ret);
                    112:        if (rcode != ISC_R_SUCCESS) {
                    113:                dst_free_key(dstkey);
                    114:                free (nstatp);
                    115:                free (newmsg);
                    116:                return rcode;
                    117:        }
                    118: 
                    119:        anslen = ret;
                    120:        rcode = ns_verify((u_char *)answer, &anslen, dstkey, sig, siglen,
                    121:                          NULL, NULL, &tsig_time,
                    122:                          (nstatp->options & RES_KEEPTSIG) ? 1 : 0);
                    123:        if (rcode != ISC_R_SUCCESS) {
                    124:                Dprint(nstatp->pfcode & RES_PRF_REPLY,
                    125:                       (stdout, ";; TSIG invalid (%s)\n", p_rcode(ret)));
                    126:                dst_free_key(dstkey);
                    127:                free (nstatp);
                    128:                free (newmsg);
                    129:                return rcode;
                    130:        }
                    131:        Dprint(nstatp->pfcode & RES_PRF_REPLY, (stdout, ";; TSIG ok\n"));
                    132: 
                    133:        hp = (HEADER *) answer;
                    134:        if (hp->tc && usingTCP == 0) {
                    135:                nstatp->options &= ~RES_IGNTC;
                    136:                usingTCP = 1;
                    137:                goto retry;
                    138:        }
                    139: 
                    140:        dst_free_key(dstkey);
                    141:        free (nstatp);
                    142:        free (newmsg);
                    143:        *anssize = anslen;
                    144:        return ISC_R_SUCCESS;
                    145: }