Annotation of embedaddon/quagga/lib/keychain.c, revision 1.1
1.1 ! misho 1: /* key-chain for authentication.
! 2: Copyright (C) 2000 Kunihiro Ishiguro
! 3:
! 4: This file is part of GNU Zebra.
! 5:
! 6: GNU Zebra is free software; you can redistribute it and/or modify
! 7: it under the terms of the GNU General Public License as published
! 8: by the Free Software Foundation; either version 2, or (at your
! 9: option) any later version.
! 10:
! 11: GNU Zebra is distributed in the hope that it will be useful, but
! 12: WITHOUT ANY WARRANTY; without even the implied warranty of
! 13: MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
! 14: General Public License for more details.
! 15:
! 16: You should have received a copy of the GNU General Public License
! 17: along with GNU Zebra; see the file COPYING. If not, write to the
! 18: Free Software Foundation, Inc., 59 Temple Place - Suite 330,
! 19: Boston, MA 02111-1307, USA. */
! 20:
! 21: #include <zebra.h>
! 22:
! 23: #include "command.h"
! 24: #include "memory.h"
! 25: #include "linklist.h"
! 26: #include "keychain.h"
! 27:
! 28: /* Master list of key chain. */
! 29: struct list *keychain_list;
! 30:
! 31: static struct keychain *
! 32: keychain_new (void)
! 33: {
! 34: return XCALLOC (MTYPE_KEYCHAIN, sizeof (struct keychain));
! 35: }
! 36:
! 37: static void
! 38: keychain_free (struct keychain *keychain)
! 39: {
! 40: XFREE (MTYPE_KEYCHAIN, keychain);
! 41: }
! 42:
! 43: static struct key *
! 44: key_new (void)
! 45: {
! 46: return XCALLOC (MTYPE_KEY, sizeof (struct key));
! 47: }
! 48:
! 49: static void
! 50: key_free (struct key *key)
! 51: {
! 52: XFREE (MTYPE_KEY, key);
! 53: }
! 54:
! 55: struct keychain *
! 56: keychain_lookup (const char *name)
! 57: {
! 58: struct listnode *node;
! 59: struct keychain *keychain;
! 60:
! 61: if (name == NULL)
! 62: return NULL;
! 63:
! 64: for (ALL_LIST_ELEMENTS_RO (keychain_list, node, keychain))
! 65: {
! 66: if (strcmp (keychain->name, name) == 0)
! 67: return keychain;
! 68: }
! 69: return NULL;
! 70: }
! 71:
! 72: static int
! 73: key_cmp_func (void *arg1, void *arg2)
! 74: {
! 75: const struct key *k1 = arg1;
! 76: const struct key *k2 = arg2;
! 77:
! 78: if (k1->index > k2->index)
! 79: return 1;
! 80: if (k1->index < k2->index)
! 81: return -1;
! 82: return 0;
! 83: }
! 84:
! 85: static void
! 86: key_delete_func (struct key *key)
! 87: {
! 88: if (key->string)
! 89: free (key->string);
! 90: key_free (key);
! 91: }
! 92:
! 93: static struct keychain *
! 94: keychain_get (const char *name)
! 95: {
! 96: struct keychain *keychain;
! 97:
! 98: keychain = keychain_lookup (name);
! 99:
! 100: if (keychain)
! 101: return keychain;
! 102:
! 103: keychain = keychain_new ();
! 104: keychain->name = strdup (name);
! 105: keychain->key = list_new ();
! 106: keychain->key->cmp = (int (*)(void *, void *)) key_cmp_func;
! 107: keychain->key->del = (void (*)(void *)) key_delete_func;
! 108: listnode_add (keychain_list, keychain);
! 109:
! 110: return keychain;
! 111: }
! 112:
! 113: static void
! 114: keychain_delete (struct keychain *keychain)
! 115: {
! 116: if (keychain->name)
! 117: free (keychain->name);
! 118:
! 119: list_delete (keychain->key);
! 120: listnode_delete (keychain_list, keychain);
! 121: keychain_free (keychain);
! 122: }
! 123:
! 124: static struct key *
! 125: key_lookup (const struct keychain *keychain, u_int32_t index)
! 126: {
! 127: struct listnode *node;
! 128: struct key *key;
! 129:
! 130: for (ALL_LIST_ELEMENTS_RO (keychain->key, node, key))
! 131: {
! 132: if (key->index == index)
! 133: return key;
! 134: }
! 135: return NULL;
! 136: }
! 137:
! 138: struct key *
! 139: key_lookup_for_accept (const struct keychain *keychain, u_int32_t index)
! 140: {
! 141: struct listnode *node;
! 142: struct key *key;
! 143: time_t now;
! 144:
! 145: now = time (NULL);
! 146:
! 147: for (ALL_LIST_ELEMENTS_RO (keychain->key, node, key))
! 148: {
! 149: if (key->index >= index)
! 150: {
! 151: if (key->accept.start == 0)
! 152: return key;
! 153:
! 154: if (key->accept.start <= now)
! 155: if (key->accept.end >= now || key->accept.end == -1)
! 156: return key;
! 157: }
! 158: }
! 159: return NULL;
! 160: }
! 161:
! 162: struct key *
! 163: key_match_for_accept (const struct keychain *keychain, const char *auth_str)
! 164: {
! 165: struct listnode *node;
! 166: struct key *key;
! 167: time_t now;
! 168:
! 169: now = time (NULL);
! 170:
! 171: for (ALL_LIST_ELEMENTS_RO (keychain->key, node, key))
! 172: {
! 173: if (key->accept.start == 0 ||
! 174: (key->accept.start <= now &&
! 175: (key->accept.end >= now || key->accept.end == -1)))
! 176: if (strncmp (key->string, auth_str, 16) == 0)
! 177: return key;
! 178: }
! 179: return NULL;
! 180: }
! 181:
! 182: struct key *
! 183: key_lookup_for_send (const struct keychain *keychain)
! 184: {
! 185: struct listnode *node;
! 186: struct key *key;
! 187: time_t now;
! 188:
! 189: now = time (NULL);
! 190:
! 191: for (ALL_LIST_ELEMENTS_RO (keychain->key, node, key))
! 192: {
! 193: if (key->send.start == 0)
! 194: return key;
! 195:
! 196: if (key->send.start <= now)
! 197: if (key->send.end >= now || key->send.end == -1)
! 198: return key;
! 199: }
! 200: return NULL;
! 201: }
! 202:
! 203: static struct key *
! 204: key_get (const struct keychain *keychain, u_int32_t index)
! 205: {
! 206: struct key *key;
! 207:
! 208: key = key_lookup (keychain, index);
! 209:
! 210: if (key)
! 211: return key;
! 212:
! 213: key = key_new ();
! 214: key->index = index;
! 215: listnode_add_sort (keychain->key, key);
! 216:
! 217: return key;
! 218: }
! 219:
! 220: static void
! 221: key_delete (struct keychain *keychain, struct key *key)
! 222: {
! 223: listnode_delete (keychain->key, key);
! 224:
! 225: if (key->string)
! 226: free (key->string);
! 227: key_free (key);
! 228: }
! 229:
! 230: DEFUN (key_chain,
! 231: key_chain_cmd,
! 232: "key chain WORD",
! 233: "Authentication key management\n"
! 234: "Key-chain management\n"
! 235: "Key-chain name\n")
! 236: {
! 237: struct keychain *keychain;
! 238:
! 239: keychain = keychain_get (argv[0]);
! 240: vty->index = keychain;
! 241: vty->node = KEYCHAIN_NODE;
! 242:
! 243: return CMD_SUCCESS;
! 244: }
! 245:
! 246: DEFUN (no_key_chain,
! 247: no_key_chain_cmd,
! 248: "no key chain WORD",
! 249: NO_STR
! 250: "Authentication key management\n"
! 251: "Key-chain management\n"
! 252: "Key-chain name\n")
! 253: {
! 254: struct keychain *keychain;
! 255:
! 256: keychain = keychain_lookup (argv[0]);
! 257:
! 258: if (! keychain)
! 259: {
! 260: vty_out (vty, "Can't find keychain %s%s", argv[0], VTY_NEWLINE);
! 261: return CMD_WARNING;
! 262: }
! 263:
! 264: keychain_delete (keychain);
! 265:
! 266: return CMD_SUCCESS;
! 267: }
! 268:
! 269: DEFUN (key,
! 270: key_cmd,
! 271: "key <0-2147483647>",
! 272: "Configure a key\n"
! 273: "Key identifier number\n")
! 274: {
! 275: struct keychain *keychain;
! 276: struct key *key;
! 277: u_int32_t index;
! 278:
! 279: keychain = vty->index;
! 280:
! 281: VTY_GET_INTEGER ("key identifier", index, argv[0]);
! 282: key = key_get (keychain, index);
! 283: vty->index_sub = key;
! 284: vty->node = KEYCHAIN_KEY_NODE;
! 285:
! 286: return CMD_SUCCESS;
! 287: }
! 288:
! 289: DEFUN (no_key,
! 290: no_key_cmd,
! 291: "no key <0-2147483647>",
! 292: NO_STR
! 293: "Delete a key\n"
! 294: "Key identifier number\n")
! 295: {
! 296: struct keychain *keychain;
! 297: struct key *key;
! 298: u_int32_t index;
! 299:
! 300: keychain = vty->index;
! 301:
! 302: VTY_GET_INTEGER ("key identifier", index, argv[0]);
! 303: key = key_lookup (keychain, index);
! 304: if (! key)
! 305: {
! 306: vty_out (vty, "Can't find key %d%s", index, VTY_NEWLINE);
! 307: return CMD_WARNING;
! 308: }
! 309:
! 310: key_delete (keychain, key);
! 311:
! 312: vty->node = KEYCHAIN_NODE;
! 313:
! 314: return CMD_SUCCESS;
! 315: }
! 316:
! 317: DEFUN (key_string,
! 318: key_string_cmd,
! 319: "key-string LINE",
! 320: "Set key string\n"
! 321: "The key\n")
! 322: {
! 323: struct key *key;
! 324:
! 325: key = vty->index_sub;
! 326:
! 327: if (key->string)
! 328: free (key->string);
! 329: key->string = strdup (argv[0]);
! 330:
! 331: return CMD_SUCCESS;
! 332: }
! 333:
! 334: DEFUN (no_key_string,
! 335: no_key_string_cmd,
! 336: "no key-string [LINE]",
! 337: NO_STR
! 338: "Unset key string\n"
! 339: "The key\n")
! 340: {
! 341: struct key *key;
! 342:
! 343: key = vty->index_sub;
! 344:
! 345: if (key->string)
! 346: {
! 347: free (key->string);
! 348: key->string = NULL;
! 349: }
! 350:
! 351: return CMD_SUCCESS;
! 352: }
! 353:
! 354: /* Convert HH:MM:SS MON DAY YEAR to time_t value. -1 is returned when
! 355: given string is malformed. */
! 356: static time_t
! 357: key_str2time (const char *time_str, const char *day_str, const char *month_str,
! 358: const char *year_str)
! 359: {
! 360: int i = 0;
! 361: char *colon;
! 362: struct tm tm;
! 363: time_t time;
! 364: unsigned int sec, min, hour;
! 365: unsigned int day, month, year;
! 366:
! 367: const char *month_name[] =
! 368: {
! 369: "January",
! 370: "February",
! 371: "March",
! 372: "April",
! 373: "May",
! 374: "June",
! 375: "July",
! 376: "August",
! 377: "September",
! 378: "October",
! 379: "November",
! 380: "December",
! 381: NULL
! 382: };
! 383:
! 384: #define GET_LONG_RANGE(V,STR,MIN,MAX) \
! 385: { \
! 386: unsigned long tmpl; \
! 387: char *endptr = NULL; \
! 388: tmpl = strtoul ((STR), &endptr, 10); \
! 389: if (*endptr != '\0' || tmpl == ULONG_MAX) \
! 390: return -1; \
! 391: if ( tmpl < (MIN) || tmpl > (MAX)) \
! 392: return -1; \
! 393: (V) = tmpl; \
! 394: }
! 395:
! 396: /* Check hour field of time_str. */
! 397: colon = strchr (time_str, ':');
! 398: if (colon == NULL)
! 399: return -1;
! 400: *colon = '\0';
! 401:
! 402: /* Hour must be between 0 and 23. */
! 403: GET_LONG_RANGE (hour, time_str, 0, 23);
! 404:
! 405: /* Check min field of time_str. */
! 406: time_str = colon + 1;
! 407: colon = strchr (time_str, ':');
! 408: if (*time_str == '\0' || colon == NULL)
! 409: return -1;
! 410: *colon = '\0';
! 411:
! 412: /* Min must be between 0 and 59. */
! 413: GET_LONG_RANGE (min, time_str, 0, 59);
! 414:
! 415: /* Check sec field of time_str. */
! 416: time_str = colon + 1;
! 417: if (*time_str == '\0')
! 418: return -1;
! 419:
! 420: /* Sec must be between 0 and 59. */
! 421: GET_LONG_RANGE (sec, time_str, 0, 59);
! 422:
! 423: /* Check day_str. Day must be <1-31>. */
! 424: GET_LONG_RANGE (day, day_str, 1, 31);
! 425:
! 426: /* Check month_str. Month must match month_name. */
! 427: month = 0;
! 428: if (strlen (month_str) >= 3)
! 429: for (i = 0; month_name[i]; i++)
! 430: if (strncmp (month_str, month_name[i], strlen (month_str)) == 0)
! 431: {
! 432: month = i;
! 433: break;
! 434: }
! 435: if (! month_name[i])
! 436: return -1;
! 437:
! 438: /* Check year_str. Year must be <1993-2035>. */
! 439: GET_LONG_RANGE (year, year_str, 1993, 2035);
! 440:
! 441: memset (&tm, 0, sizeof (struct tm));
! 442: tm.tm_sec = sec;
! 443: tm.tm_min = min;
! 444: tm.tm_hour = hour;
! 445: tm.tm_mon = month;
! 446: tm.tm_mday = day;
! 447: tm.tm_year = year - 1900;
! 448:
! 449: time = mktime (&tm);
! 450:
! 451: return time;
! 452: #undef GET_LONG_RANGE
! 453: }
! 454:
! 455: static int
! 456: key_lifetime_set (struct vty *vty, struct key_range *krange,
! 457: const char *stime_str, const char *sday_str,
! 458: const char *smonth_str, const char *syear_str,
! 459: const char *etime_str, const char *eday_str,
! 460: const char *emonth_str, const char *eyear_str)
! 461: {
! 462: time_t time_start;
! 463: time_t time_end;
! 464:
! 465: time_start = key_str2time (stime_str, sday_str, smonth_str, syear_str);
! 466: if (time_start < 0)
! 467: {
! 468: vty_out (vty, "Malformed time value%s", VTY_NEWLINE);
! 469: return CMD_WARNING;
! 470: }
! 471: time_end = key_str2time (etime_str, eday_str, emonth_str, eyear_str);
! 472:
! 473: if (time_end < 0)
! 474: {
! 475: vty_out (vty, "Malformed time value%s", VTY_NEWLINE);
! 476: return CMD_WARNING;
! 477: }
! 478:
! 479: if (time_end <= time_start)
! 480: {
! 481: vty_out (vty, "Expire time is not later than start time%s", VTY_NEWLINE);
! 482: return CMD_WARNING;
! 483: }
! 484:
! 485: krange->start = time_start;
! 486: krange->end = time_end;
! 487:
! 488: return CMD_SUCCESS;
! 489: }
! 490:
! 491: static int
! 492: key_lifetime_duration_set (struct vty *vty, struct key_range *krange,
! 493: const char *stime_str, const char *sday_str,
! 494: const char *smonth_str, const char *syear_str,
! 495: const char *duration_str)
! 496: {
! 497: time_t time_start;
! 498: u_int32_t duration;
! 499:
! 500: time_start = key_str2time (stime_str, sday_str, smonth_str, syear_str);
! 501: if (time_start < 0)
! 502: {
! 503: vty_out (vty, "Malformed time value%s", VTY_NEWLINE);
! 504: return CMD_WARNING;
! 505: }
! 506: krange->start = time_start;
! 507:
! 508: VTY_GET_INTEGER ("duration", duration, duration_str);
! 509: krange->duration = 1;
! 510: krange->end = time_start + duration;
! 511:
! 512: return CMD_SUCCESS;
! 513: }
! 514:
! 515: static int
! 516: key_lifetime_infinite_set (struct vty *vty, struct key_range *krange,
! 517: const char *stime_str, const char *sday_str,
! 518: const char *smonth_str, const char *syear_str)
! 519: {
! 520: time_t time_start;
! 521:
! 522: time_start = key_str2time (stime_str, sday_str, smonth_str, syear_str);
! 523: if (time_start < 0)
! 524: {
! 525: vty_out (vty, "Malformed time value%s", VTY_NEWLINE);
! 526: return CMD_WARNING;
! 527: }
! 528: krange->start = time_start;
! 529:
! 530: krange->end = -1;
! 531:
! 532: return CMD_SUCCESS;
! 533: }
! 534:
! 535: DEFUN (accept_lifetime_day_month_day_month,
! 536: accept_lifetime_day_month_day_month_cmd,
! 537: "accept-lifetime HH:MM:SS <1-31> MONTH <1993-2035> HH:MM:SS <1-31> MONTH <1993-2035>",
! 538: "Set accept lifetime of the key\n"
! 539: "Time to start\n"
! 540: "Day of th month to start\n"
! 541: "Month of the year to start\n"
! 542: "Year to start\n"
! 543: "Time to expire\n"
! 544: "Day of th month to expire\n"
! 545: "Month of the year to expire\n"
! 546: "Year to expire\n")
! 547: {
! 548: struct key *key;
! 549:
! 550: key = vty->index_sub;
! 551:
! 552: return key_lifetime_set (vty, &key->accept, argv[0], argv[1], argv[2],
! 553: argv[3], argv[4], argv[5], argv[6], argv[7]);
! 554: }
! 555:
! 556: DEFUN (accept_lifetime_day_month_month_day,
! 557: accept_lifetime_day_month_month_day_cmd,
! 558: "accept-lifetime HH:MM:SS <1-31> MONTH <1993-2035> HH:MM:SS MONTH <1-31> <1993-2035>",
! 559: "Set accept lifetime of the key\n"
! 560: "Time to start\n"
! 561: "Day of th month to start\n"
! 562: "Month of the year to start\n"
! 563: "Year to start\n"
! 564: "Time to expire\n"
! 565: "Month of the year to expire\n"
! 566: "Day of th month to expire\n"
! 567: "Year to expire\n")
! 568: {
! 569: struct key *key;
! 570:
! 571: key = vty->index_sub;
! 572:
! 573: return key_lifetime_set (vty, &key->accept, argv[0], argv[1], argv[2],
! 574: argv[3], argv[4], argv[6], argv[5], argv[7]);
! 575: }
! 576:
! 577: DEFUN (accept_lifetime_month_day_day_month,
! 578: accept_lifetime_month_day_day_month_cmd,
! 579: "accept-lifetime HH:MM:SS MONTH <1-31> <1993-2035> HH:MM:SS <1-31> MONTH <1993-2035>",
! 580: "Set accept lifetime of the key\n"
! 581: "Time to start\n"
! 582: "Month of the year to start\n"
! 583: "Day of th month to start\n"
! 584: "Year to start\n"
! 585: "Time to expire\n"
! 586: "Day of th month to expire\n"
! 587: "Month of the year to expire\n"
! 588: "Year to expire\n")
! 589: {
! 590: struct key *key;
! 591:
! 592: key = vty->index_sub;
! 593:
! 594: return key_lifetime_set (vty, &key->accept, argv[0], argv[2], argv[1],
! 595: argv[3], argv[4], argv[5], argv[6], argv[7]);
! 596: }
! 597:
! 598: DEFUN (accept_lifetime_month_day_month_day,
! 599: accept_lifetime_month_day_month_day_cmd,
! 600: "accept-lifetime HH:MM:SS MONTH <1-31> <1993-2035> HH:MM:SS MONTH <1-31> <1993-2035>",
! 601: "Set accept lifetime of the key\n"
! 602: "Time to start\n"
! 603: "Month of the year to start\n"
! 604: "Day of th month to start\n"
! 605: "Year to start\n"
! 606: "Time to expire\n"
! 607: "Month of the year to expire\n"
! 608: "Day of th month to expire\n"
! 609: "Year to expire\n")
! 610: {
! 611: struct key *key;
! 612:
! 613: key = vty->index_sub;
! 614:
! 615: return key_lifetime_set (vty, &key->accept, argv[0], argv[2], argv[1],
! 616: argv[3], argv[4], argv[6], argv[5], argv[7]);
! 617: }
! 618:
! 619: DEFUN (accept_lifetime_infinite_day_month,
! 620: accept_lifetime_infinite_day_month_cmd,
! 621: "accept-lifetime HH:MM:SS <1-31> MONTH <1993-2035> infinite",
! 622: "Set accept lifetime of the key\n"
! 623: "Time to start\n"
! 624: "Day of th month to start\n"
! 625: "Month of the year to start\n"
! 626: "Year to start\n"
! 627: "Never expires")
! 628: {
! 629: struct key *key;
! 630:
! 631: key = vty->index_sub;
! 632:
! 633: return key_lifetime_infinite_set (vty, &key->accept, argv[0], argv[1],
! 634: argv[2], argv[3]);
! 635: }
! 636:
! 637: DEFUN (accept_lifetime_infinite_month_day,
! 638: accept_lifetime_infinite_month_day_cmd,
! 639: "accept-lifetime HH:MM:SS MONTH <1-31> <1993-2035> infinite",
! 640: "Set accept lifetime of the key\n"
! 641: "Time to start\n"
! 642: "Month of the year to start\n"
! 643: "Day of th month to start\n"
! 644: "Year to start\n"
! 645: "Never expires")
! 646: {
! 647: struct key *key;
! 648:
! 649: key = vty->index_sub;
! 650:
! 651: return key_lifetime_infinite_set (vty, &key->accept, argv[0], argv[2],
! 652: argv[1], argv[3]);
! 653: }
! 654:
! 655: DEFUN (accept_lifetime_duration_day_month,
! 656: accept_lifetime_duration_day_month_cmd,
! 657: "accept-lifetime HH:MM:SS <1-31> MONTH <1993-2035> duration <1-2147483646>",
! 658: "Set accept lifetime of the key\n"
! 659: "Time to start\n"
! 660: "Day of th month to start\n"
! 661: "Month of the year to start\n"
! 662: "Year to start\n"
! 663: "Duration of the key\n"
! 664: "Duration seconds\n")
! 665: {
! 666: struct key *key;
! 667:
! 668: key = vty->index_sub;
! 669:
! 670: return key_lifetime_duration_set (vty, &key->accept, argv[0], argv[1],
! 671: argv[2], argv[3], argv[4]);
! 672: }
! 673:
! 674: DEFUN (accept_lifetime_duration_month_day,
! 675: accept_lifetime_duration_month_day_cmd,
! 676: "accept-lifetime HH:MM:SS MONTH <1-31> <1993-2035> duration <1-2147483646>",
! 677: "Set accept lifetime of the key\n"
! 678: "Time to start\n"
! 679: "Month of the year to start\n"
! 680: "Day of th month to start\n"
! 681: "Year to start\n"
! 682: "Duration of the key\n"
! 683: "Duration seconds\n")
! 684: {
! 685: struct key *key;
! 686:
! 687: key = vty->index_sub;
! 688:
! 689: return key_lifetime_duration_set (vty, &key->accept, argv[0], argv[2],
! 690: argv[1], argv[3], argv[4]);
! 691: }
! 692:
! 693: DEFUN (send_lifetime_day_month_day_month,
! 694: send_lifetime_day_month_day_month_cmd,
! 695: "send-lifetime HH:MM:SS <1-31> MONTH <1993-2035> HH:MM:SS <1-31> MONTH <1993-2035>",
! 696: "Set send lifetime of the key\n"
! 697: "Time to start\n"
! 698: "Day of th month to start\n"
! 699: "Month of the year to start\n"
! 700: "Year to start\n"
! 701: "Time to expire\n"
! 702: "Day of th month to expire\n"
! 703: "Month of the year to expire\n"
! 704: "Year to expire\n")
! 705: {
! 706: struct key *key;
! 707:
! 708: key = vty->index_sub;
! 709:
! 710: return key_lifetime_set (vty, &key->send, argv[0], argv[1], argv[2], argv[3],
! 711: argv[4], argv[5], argv[6], argv[7]);
! 712: }
! 713:
! 714: DEFUN (send_lifetime_day_month_month_day,
! 715: send_lifetime_day_month_month_day_cmd,
! 716: "send-lifetime HH:MM:SS <1-31> MONTH <1993-2035> HH:MM:SS MONTH <1-31> <1993-2035>",
! 717: "Set send lifetime of the key\n"
! 718: "Time to start\n"
! 719: "Day of th month to start\n"
! 720: "Month of the year to start\n"
! 721: "Year to start\n"
! 722: "Time to expire\n"
! 723: "Month of the year to expire\n"
! 724: "Day of th month to expire\n"
! 725: "Year to expire\n")
! 726: {
! 727: struct key *key;
! 728:
! 729: key = vty->index_sub;
! 730:
! 731: return key_lifetime_set (vty, &key->send, argv[0], argv[1], argv[2], argv[3],
! 732: argv[4], argv[6], argv[5], argv[7]);
! 733: }
! 734:
! 735: DEFUN (send_lifetime_month_day_day_month,
! 736: send_lifetime_month_day_day_month_cmd,
! 737: "send-lifetime HH:MM:SS MONTH <1-31> <1993-2035> HH:MM:SS <1-31> MONTH <1993-2035>",
! 738: "Set send lifetime of the key\n"
! 739: "Time to start\n"
! 740: "Month of the year to start\n"
! 741: "Day of th month to start\n"
! 742: "Year to start\n"
! 743: "Time to expire\n"
! 744: "Day of th month to expire\n"
! 745: "Month of the year to expire\n"
! 746: "Year to expire\n")
! 747: {
! 748: struct key *key;
! 749:
! 750: key = vty->index_sub;
! 751:
! 752: return key_lifetime_set (vty, &key->send, argv[0], argv[2], argv[1], argv[3],
! 753: argv[4], argv[5], argv[6], argv[7]);
! 754: }
! 755:
! 756: DEFUN (send_lifetime_month_day_month_day,
! 757: send_lifetime_month_day_month_day_cmd,
! 758: "send-lifetime HH:MM:SS MONTH <1-31> <1993-2035> HH:MM:SS MONTH <1-31> <1993-2035>",
! 759: "Set send lifetime of the key\n"
! 760: "Time to start\n"
! 761: "Month of the year to start\n"
! 762: "Day of th month to start\n"
! 763: "Year to start\n"
! 764: "Time to expire\n"
! 765: "Month of the year to expire\n"
! 766: "Day of th month to expire\n"
! 767: "Year to expire\n")
! 768: {
! 769: struct key *key;
! 770:
! 771: key = vty->index_sub;
! 772:
! 773: return key_lifetime_set (vty, &key->send, argv[0], argv[2], argv[1], argv[3],
! 774: argv[4], argv[6], argv[5], argv[7]);
! 775: }
! 776:
! 777: DEFUN (send_lifetime_infinite_day_month,
! 778: send_lifetime_infinite_day_month_cmd,
! 779: "send-lifetime HH:MM:SS <1-31> MONTH <1993-2035> infinite",
! 780: "Set send lifetime of the key\n"
! 781: "Time to start\n"
! 782: "Day of th month to start\n"
! 783: "Month of the year to start\n"
! 784: "Year to start\n"
! 785: "Never expires")
! 786: {
! 787: struct key *key;
! 788:
! 789: key = vty->index_sub;
! 790:
! 791: return key_lifetime_infinite_set (vty, &key->send, argv[0], argv[1], argv[2],
! 792: argv[3]);
! 793: }
! 794:
! 795: DEFUN (send_lifetime_infinite_month_day,
! 796: send_lifetime_infinite_month_day_cmd,
! 797: "send-lifetime HH:MM:SS MONTH <1-31> <1993-2035> infinite",
! 798: "Set send lifetime of the key\n"
! 799: "Time to start\n"
! 800: "Month of the year to start\n"
! 801: "Day of th month to start\n"
! 802: "Year to start\n"
! 803: "Never expires")
! 804: {
! 805: struct key *key;
! 806:
! 807: key = vty->index_sub;
! 808:
! 809: return key_lifetime_infinite_set (vty, &key->send, argv[0], argv[2], argv[1],
! 810: argv[3]);
! 811: }
! 812:
! 813: DEFUN (send_lifetime_duration_day_month,
! 814: send_lifetime_duration_day_month_cmd,
! 815: "send-lifetime HH:MM:SS <1-31> MONTH <1993-2035> duration <1-2147483646>",
! 816: "Set send lifetime of the key\n"
! 817: "Time to start\n"
! 818: "Day of th month to start\n"
! 819: "Month of the year to start\n"
! 820: "Year to start\n"
! 821: "Duration of the key\n"
! 822: "Duration seconds\n")
! 823: {
! 824: struct key *key;
! 825:
! 826: key = vty->index_sub;
! 827:
! 828: return key_lifetime_duration_set (vty, &key->send, argv[0], argv[1], argv[2],
! 829: argv[3], argv[4]);
! 830: }
! 831:
! 832: DEFUN (send_lifetime_duration_month_day,
! 833: send_lifetime_duration_month_day_cmd,
! 834: "send-lifetime HH:MM:SS MONTH <1-31> <1993-2035> duration <1-2147483646>",
! 835: "Set send lifetime of the key\n"
! 836: "Time to start\n"
! 837: "Month of the year to start\n"
! 838: "Day of th month to start\n"
! 839: "Year to start\n"
! 840: "Duration of the key\n"
! 841: "Duration seconds\n")
! 842: {
! 843: struct key *key;
! 844:
! 845: key = vty->index_sub;
! 846:
! 847: return key_lifetime_duration_set (vty, &key->send, argv[0], argv[2], argv[1],
! 848: argv[3], argv[4]);
! 849: }
! 850:
! 851: static struct cmd_node keychain_node =
! 852: {
! 853: KEYCHAIN_NODE,
! 854: "%s(config-keychain)# ",
! 855: 1
! 856: };
! 857:
! 858: static struct cmd_node keychain_key_node =
! 859: {
! 860: KEYCHAIN_KEY_NODE,
! 861: "%s(config-keychain-key)# ",
! 862: 1
! 863: };
! 864:
! 865: static int
! 866: keychain_strftime (char *buf, int bufsiz, time_t *time)
! 867: {
! 868: struct tm *tm;
! 869: size_t len;
! 870:
! 871: tm = localtime (time);
! 872:
! 873: len = strftime (buf, bufsiz, "%T %b %d %Y", tm);
! 874:
! 875: return len;
! 876: }
! 877:
! 878: static int
! 879: keychain_config_write (struct vty *vty)
! 880: {
! 881: struct keychain *keychain;
! 882: struct key *key;
! 883: struct listnode *node;
! 884: struct listnode *knode;
! 885: char buf[BUFSIZ];
! 886:
! 887: for (ALL_LIST_ELEMENTS_RO (keychain_list, node, keychain))
! 888: {
! 889: vty_out (vty, "key chain %s%s", keychain->name, VTY_NEWLINE);
! 890:
! 891: for (ALL_LIST_ELEMENTS_RO (keychain->key, knode, key))
! 892: {
! 893: vty_out (vty, " key %d%s", key->index, VTY_NEWLINE);
! 894:
! 895: if (key->string)
! 896: vty_out (vty, " key-string %s%s", key->string, VTY_NEWLINE);
! 897:
! 898: if (key->accept.start)
! 899: {
! 900: keychain_strftime (buf, BUFSIZ, &key->accept.start);
! 901: vty_out (vty, " accept-lifetime %s", buf);
! 902:
! 903: if (key->accept.end == -1)
! 904: vty_out (vty, " infinite");
! 905: else if (key->accept.duration)
! 906: vty_out (vty, " duration %ld",
! 907: (long)(key->accept.end - key->accept.start));
! 908: else
! 909: {
! 910: keychain_strftime (buf, BUFSIZ, &key->accept.end);
! 911: vty_out (vty, " %s", buf);
! 912: }
! 913: vty_out (vty, "%s", VTY_NEWLINE);
! 914: }
! 915:
! 916: if (key->send.start)
! 917: {
! 918: keychain_strftime (buf, BUFSIZ, &key->send.start);
! 919: vty_out (vty, " send-lifetime %s", buf);
! 920:
! 921: if (key->send.end == -1)
! 922: vty_out (vty, " infinite");
! 923: else if (key->send.duration)
! 924: vty_out (vty, " duration %ld", (long)(key->send.end - key->send.start));
! 925: else
! 926: {
! 927: keychain_strftime (buf, BUFSIZ, &key->send.end);
! 928: vty_out (vty, " %s", buf);
! 929: }
! 930: vty_out (vty, "%s", VTY_NEWLINE);
! 931: }
! 932: }
! 933: vty_out (vty, "!%s", VTY_NEWLINE);
! 934: }
! 935:
! 936: return 0;
! 937: }
! 938:
! 939: void
! 940: keychain_init ()
! 941: {
! 942: keychain_list = list_new ();
! 943:
! 944: install_node (&keychain_node, keychain_config_write);
! 945: install_node (&keychain_key_node, NULL);
! 946:
! 947: install_default (KEYCHAIN_NODE);
! 948: install_default (KEYCHAIN_KEY_NODE);
! 949:
! 950: install_element (CONFIG_NODE, &key_chain_cmd);
! 951: install_element (CONFIG_NODE, &no_key_chain_cmd);
! 952: install_element (KEYCHAIN_NODE, &key_cmd);
! 953: install_element (KEYCHAIN_NODE, &no_key_cmd);
! 954:
! 955: install_element (KEYCHAIN_NODE, &key_chain_cmd);
! 956: install_element (KEYCHAIN_NODE, &no_key_chain_cmd);
! 957:
! 958: install_element (KEYCHAIN_KEY_NODE, &key_string_cmd);
! 959: install_element (KEYCHAIN_KEY_NODE, &no_key_string_cmd);
! 960:
! 961: install_element (KEYCHAIN_KEY_NODE, &key_chain_cmd);
! 962: install_element (KEYCHAIN_KEY_NODE, &no_key_chain_cmd);
! 963:
! 964: install_element (KEYCHAIN_KEY_NODE, &key_cmd);
! 965: install_element (KEYCHAIN_KEY_NODE, &no_key_cmd);
! 966:
! 967: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_day_month_day_month_cmd);
! 968: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_day_month_month_day_cmd);
! 969: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_month_day_day_month_cmd);
! 970: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_month_day_month_day_cmd);
! 971: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_infinite_day_month_cmd);
! 972: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_infinite_month_day_cmd);
! 973: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_duration_day_month_cmd);
! 974: install_element (KEYCHAIN_KEY_NODE, &accept_lifetime_duration_month_day_cmd);
! 975:
! 976: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_day_month_day_month_cmd);
! 977: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_day_month_month_day_cmd);
! 978: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_month_day_day_month_cmd);
! 979: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_month_day_month_day_cmd);
! 980: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_infinite_day_month_cmd);
! 981: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_infinite_month_day_cmd);
! 982: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_duration_day_month_cmd);
! 983: install_element (KEYCHAIN_KEY_NODE, &send_lifetime_duration_month_day_cmd);
! 984: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to keychain.c CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / quagga / lib