blob: dc930527bc6700a0fb53d77e6fbfc6a7405e98e9 [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 * Author: Tatu Ylonen <ylo@cs.hut.fi>
3 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
4 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11005 * Adds an identity to the authentication server, or removes an identity.
Damien Millerad833b32000-08-23 10:46:23 +10006 *
Damien Millere4340be2000-09-16 13:29:08 +11007 * As far as I am concerned, the code I have written for this software
8 * can be used freely for any purpose. Any derived versions of this
9 * software must be clearly marked as such, and if the derived work is
10 * incompatible with the protocol description in the RFC file, it must be
11 * called by a name other than "ssh" or "Secure Shell".
12 *
Damien Millerad833b32000-08-23 10:46:23 +100013 * SSH2 implementation,
Ben Lindstrom92a2e382001-03-05 06:59:27 +000014 * Copyright (c) 2000 Markus Friedl. All rights reserved.
Damien Millere4340be2000-09-16 13:29:08 +110015 *
16 * Redistribution and use in source and binary forms, with or without
17 * modification, are permitted provided that the following conditions
18 * are met:
19 * 1. Redistributions of source code must retain the above copyright
20 * notice, this list of conditions and the following disclaimer.
21 * 2. Redistributions in binary form must reproduce the above copyright
22 * notice, this list of conditions and the following disclaimer in the
23 * documentation and/or other materials provided with the distribution.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
26 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
27 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
28 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
29 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
30 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
31 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
32 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
33 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
34 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Damien Miller95def091999-11-25 00:26:21 +110035 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100036
37#include "includes.h"
Ben Lindstrom92a2e382001-03-05 06:59:27 +000038RCSID("$OpenBSD: ssh-add.c,v 1.29 2001/03/02 18:54:31 deraadt Exp $");
Damien Millereba71ba2000-04-29 23:57:08 +100039
Damien Millerad833b32000-08-23 10:46:23 +100040#include <openssl/evp.h>
Damien Millerd4a8b7e1999-10-27 13:42:43 +100041
Damien Millerd4a8b7e1999-10-27 13:42:43 +100042#include "ssh.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000043#include "rsa.h"
44#include "log.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100045#include "xmalloc.h"
Damien Millereba71ba2000-04-29 23:57:08 +100046#include "key.h"
Damien Miller994cf142000-07-21 10:19:44 +100047#include "authfd.h"
Damien Millereba71ba2000-04-29 23:57:08 +100048#include "authfile.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000049#include "pathnames.h"
50#include "readpass.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100051
Damien Miller3f905871999-11-15 17:10:57 +110052#ifdef HAVE___PROGNAME
53extern char *__progname;
Ben Lindstrom49a79c02000-11-17 03:47:20 +000054#else
55char *__progname;
56#endif
Damien Miller3f905871999-11-15 17:10:57 +110057
Damien Millerd4a8b7e1999-10-27 13:42:43 +100058void
Damien Miller01ab4a21999-10-28 15:23:30 +100059delete_file(AuthenticationConnection *ac, const char *filename)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100060{
Damien Millereba71ba2000-04-29 23:57:08 +100061 Key *public;
Damien Miller95def091999-11-25 00:26:21 +110062 char *comment;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100063
Damien Miller0bc1bd82000-11-13 22:57:25 +110064 public = key_new(KEY_RSA1);
Damien Millereba71ba2000-04-29 23:57:08 +100065 if (!load_public_key(filename, public, &comment)) {
Damien Millere4340be2000-09-16 13:29:08 +110066 key_free(public);
Damien Miller0bc1bd82000-11-13 22:57:25 +110067 public = key_new(KEY_UNSPEC);
Damien Millere4340be2000-09-16 13:29:08 +110068 if (!try_load_public_key(filename, public, &comment)) {
69 printf("Bad key file %s\n", filename);
70 return;
71 }
Damien Miller95def091999-11-25 00:26:21 +110072 }
Damien Millerad833b32000-08-23 10:46:23 +100073 if (ssh_remove_identity(ac, public))
Damien Miller95def091999-11-25 00:26:21 +110074 fprintf(stderr, "Identity removed: %s (%s)\n", filename, comment);
75 else
76 fprintf(stderr, "Could not remove identity: %s\n", filename);
Damien Millereba71ba2000-04-29 23:57:08 +100077 key_free(public);
Damien Miller95def091999-11-25 00:26:21 +110078 xfree(comment);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100079}
80
Damien Millerad833b32000-08-23 10:46:23 +100081/* Send a request to remove all identities. */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100082void
Damien Miller01ab4a21999-10-28 15:23:30 +100083delete_all(AuthenticationConnection *ac)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100084{
Damien Millerad833b32000-08-23 10:46:23 +100085 int success = 1;
86
87 if (!ssh_remove_all_identities(ac, 1))
88 success = 0;
89 /* ignore error-code for ssh2 */
90 ssh_remove_all_identities(ac, 2);
91
92 if (success)
Damien Miller95def091999-11-25 00:26:21 +110093 fprintf(stderr, "All identities removed.\n");
94 else
Ben Lindstrombf555ba2001-01-18 02:04:35 +000095 fprintf(stderr, "Failed to remove all identities.\n");
Damien Millerd4a8b7e1999-10-27 13:42:43 +100096}
97
Damien Miller5428f641999-11-25 11:54:57 +110098char *
99ssh_askpass(char *askpass, char *msg)
100{
101 pid_t pid;
102 size_t len;
103 char *nl, *pass;
104 int p[2], status;
105 char buf[1024];
106
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000107 if (fflush(stdout) != 0)
108 error("ssh_askpass: fflush: %s", strerror(errno));
Damien Miller5428f641999-11-25 11:54:57 +1100109 if (askpass == NULL)
110 fatal("internal error: askpass undefined");
111 if (pipe(p) < 0)
112 fatal("ssh_askpass: pipe: %s", strerror(errno));
113 if ((pid = fork()) < 0)
114 fatal("ssh_askpass: fork: %s", strerror(errno));
115 if (pid == 0) {
116 close(p[0]);
117 if (dup2(p[1], STDOUT_FILENO) < 0)
118 fatal("ssh_askpass: dup2: %s", strerror(errno));
119 execlp(askpass, askpass, msg, (char *) 0);
120 fatal("ssh_askpass: exec(%s): %s", askpass, strerror(errno));
121 }
122 close(p[1]);
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000123 len = read(p[0], buf, sizeof buf);
Damien Miller5428f641999-11-25 11:54:57 +1100124 close(p[0]);
125 while (waitpid(pid, &status, 0) < 0)
126 if (errno != EINTR)
127 break;
128 if (len <= 1)
129 return xstrdup("");
130 nl = strchr(buf, '\n');
131 if (nl)
132 *nl = '\0';
133 pass = xstrdup(buf);
134 memset(buf, 0, sizeof(buf));
135 return pass;
136}
137
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000138void
Damien Miller01ab4a21999-10-28 15:23:30 +1000139add_file(AuthenticationConnection *ac, const char *filename)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000140{
Damien Millerad833b32000-08-23 10:46:23 +1000141 struct stat st;
Damien Millereba71ba2000-04-29 23:57:08 +1000142 Key *public;
143 Key *private;
Damien Miller5428f641999-11-25 11:54:57 +1100144 char *saved_comment, *comment, *askpass = NULL;
145 char buf[1024], msg[1024];
Damien Miller95def091999-11-25 00:26:21 +1100146 int success;
Damien Miller5428f641999-11-25 11:54:57 +1100147 int interactive = isatty(STDIN_FILENO);
Damien Miller0bc1bd82000-11-13 22:57:25 +1100148 int type = KEY_RSA1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000149
Damien Millerad833b32000-08-23 10:46:23 +1000150 if (stat(filename, &st) < 0) {
151 perror(filename);
152 exit(1);
153 }
Damien Miller994cf142000-07-21 10:19:44 +1000154 /*
155 * try to load the public key. right now this only works for RSA,
156 * since DSA keys are fully encrypted
157 */
Damien Miller0bc1bd82000-11-13 22:57:25 +1100158 public = key_new(KEY_RSA1);
Damien Millereba71ba2000-04-29 23:57:08 +1000159 if (!load_public_key(filename, public, &saved_comment)) {
Damien Miller0bc1bd82000-11-13 22:57:25 +1100160 /* ok, so we will assume this is 'some' key */
161 type = KEY_UNSPEC;
Damien Miller994cf142000-07-21 10:19:44 +1000162 saved_comment = xstrdup(filename);
Damien Miller95def091999-11-25 00:26:21 +1100163 }
Damien Millereba71ba2000-04-29 23:57:08 +1000164 key_free(public);
Damien Miller95def091999-11-25 00:26:21 +1100165
Damien Milleraae6c611999-12-06 11:47:28 +1100166 if (!interactive && getenv("DISPLAY")) {
167 if (getenv(SSH_ASKPASS_ENV))
168 askpass = getenv(SSH_ASKPASS_ENV);
169 else
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000170 askpass = _PATH_SSH_ASKPASS_DEFAULT;
Damien Milleraae6c611999-12-06 11:47:28 +1100171 }
Damien Miller5428f641999-11-25 11:54:57 +1100172
Damien Miller95def091999-11-25 00:26:21 +1100173 /* At first, try empty passphrase */
Damien Miller994cf142000-07-21 10:19:44 +1000174 private = key_new(type);
Damien Millereba71ba2000-04-29 23:57:08 +1000175 success = load_private_key(filename, "", private, &comment);
Damien Miller95def091999-11-25 00:26:21 +1100176 if (!success) {
Damien Miller5428f641999-11-25 11:54:57 +1100177 printf("Need passphrase for %.200s\n", filename);
178 if (!interactive && askpass == NULL) {
179 xfree(saved_comment);
180 return;
Damien Miller95def091999-11-25 00:26:21 +1100181 }
Damien Miller5428f641999-11-25 11:54:57 +1100182 snprintf(msg, sizeof msg, "Enter passphrase for %.200s", saved_comment);
183 for (;;) {
184 char *pass;
185 if (interactive) {
186 snprintf(buf, sizeof buf, "%s: ", msg);
187 pass = read_passphrase(buf, 1);
188 } else {
189 pass = ssh_askpass(askpass, msg);
190 }
Damien Miller95def091999-11-25 00:26:21 +1100191 if (strcmp(pass, "") == 0) {
192 xfree(pass);
193 xfree(saved_comment);
194 return;
195 }
Damien Millereba71ba2000-04-29 23:57:08 +1000196 success = load_private_key(filename, pass, private, &comment);
Damien Miller95def091999-11-25 00:26:21 +1100197 memset(pass, 0, strlen(pass));
198 xfree(pass);
199 if (success)
200 break;
Damien Miller5428f641999-11-25 11:54:57 +1100201 strlcpy(msg, "Bad passphrase, try again", sizeof msg);
Damien Miller95def091999-11-25 00:26:21 +1100202 }
203 }
Damien Millerad833b32000-08-23 10:46:23 +1000204 xfree(comment);
205 if (ssh_add_identity(ac, private, saved_comment))
206 fprintf(stderr, "Identity added: %s (%s)\n", filename, saved_comment);
Damien Miller95def091999-11-25 00:26:21 +1100207 else
208 fprintf(stderr, "Could not add identity: %s\n", filename);
Damien Millereba71ba2000-04-29 23:57:08 +1000209 key_free(private);
Damien Millerad833b32000-08-23 10:46:23 +1000210 xfree(saved_comment);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000211}
212
213void
Damien Miller10f6f6b1999-11-17 17:29:08 +1100214list_identities(AuthenticationConnection *ac, int fp)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000215{
Damien Millerad833b32000-08-23 10:46:23 +1000216 Key *key;
Damien Miller95def091999-11-25 00:26:21 +1100217 char *comment;
Damien Millerad833b32000-08-23 10:46:23 +1000218 int had_identities = 0;
219 int version;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000220
Damien Millerad833b32000-08-23 10:46:23 +1000221 for (version = 1; version <= 2; version++) {
222 for (key = ssh_get_first_identity(ac, &comment, version);
223 key != NULL;
224 key = ssh_get_next_identity(ac, &comment, version)) {
225 had_identities = 1;
226 if (fp) {
Damien Miller0bc1bd82000-11-13 22:57:25 +1100227 printf("%d %s %s (%s)\n",
228 key_size(key), key_fingerprint(key),
229 comment, key_type(key));
Damien Miller95def091999-11-25 00:26:21 +1100230 } else {
Damien Millerad833b32000-08-23 10:46:23 +1000231 if (!key_write(key, stdout))
232 fprintf(stderr, "key_write failed");
233 fprintf(stdout, " %s\n", comment);
Damien Miller95def091999-11-25 00:26:21 +1100234 }
Damien Millerad833b32000-08-23 10:46:23 +1000235 key_free(key);
236 xfree(comment);
Damien Miller95def091999-11-25 00:26:21 +1100237 }
Damien Miller10f6f6b1999-11-17 17:29:08 +1100238 }
Damien Miller95def091999-11-25 00:26:21 +1100239 if (!had_identities)
240 printf("The agent has no identities.\n");
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000241}
242
243int
Damien Miller01ab4a21999-10-28 15:23:30 +1000244main(int argc, char **argv)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000245{
Damien Miller95def091999-11-25 00:26:21 +1100246 AuthenticationConnection *ac = NULL;
247 struct passwd *pw;
248 char buf[1024];
249 int no_files = 1;
250 int i;
251 int deleting = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000252
Ben Lindstrom49a79c02000-11-17 03:47:20 +0000253 __progname = get_progname(argv[0]);
Damien Millerf9b625c2000-07-09 22:42:32 +1000254 init_rng();
255
Kevin Stevesef4eea92001-02-05 12:42:17 +0000256 SSLeay_add_all_algorithms();
Damien Millerad833b32000-08-23 10:46:23 +1000257
Damien Miller95def091999-11-25 00:26:21 +1100258 /* At first, get a connection to the authentication agent. */
259 ac = ssh_get_authentication_connection();
260 if (ac == NULL) {
261 fprintf(stderr, "Could not open a connection to your authentication agent.\n");
262 exit(1);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000263 }
Damien Miller95def091999-11-25 00:26:21 +1100264 for (i = 1; i < argc; i++) {
265 if ((strcmp(argv[i], "-l") == 0) ||
266 (strcmp(argv[i], "-L") == 0)) {
267 list_identities(ac, argv[i][1] == 'l' ? 1 : 0);
268 /* Don't default-add/delete if -l. */
269 no_files = 0;
270 continue;
271 }
272 if (strcmp(argv[i], "-d") == 0) {
273 deleting = 1;
274 continue;
275 }
276 if (strcmp(argv[i], "-D") == 0) {
277 delete_all(ac);
278 no_files = 0;
279 continue;
280 }
281 no_files = 0;
282 if (deleting)
283 delete_file(ac, argv[i]);
284 else
285 add_file(ac, argv[i]);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000286 }
Damien Miller95def091999-11-25 00:26:21 +1100287 if (no_files) {
288 pw = getpwuid(getuid());
289 if (!pw) {
Damien Millercaf6dd62000-08-29 11:33:50 +1100290 fprintf(stderr, "No user found with uid %u\n",
291 (u_int)getuid());
Damien Miller95def091999-11-25 00:26:21 +1100292 ssh_close_authentication_connection(ac);
293 exit(1);
294 }
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000295 snprintf(buf, sizeof buf, "%s/%s", pw->pw_dir, _PATH_SSH_CLIENT_IDENTITY);
Damien Miller95def091999-11-25 00:26:21 +1100296 if (deleting)
297 delete_file(ac, buf);
298 else
299 add_file(ac, buf);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000300 }
Damien Miller95def091999-11-25 00:26:21 +1100301 ssh_close_authentication_connection(ac);
302 exit(0);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000303}