blob: 91603399a36cdd31c40d397af1269b0857595aed [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 * Author: Tatu Ylonen <ylo@cs.hut.fi>
3 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
4 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11005 * Adds an identity to the authentication server, or removes an identity.
Damien Millerad833b32000-08-23 10:46:23 +10006 *
Damien Millere4340be2000-09-16 13:29:08 +11007 * As far as I am concerned, the code I have written for this software
8 * can be used freely for any purpose. Any derived versions of this
9 * software must be clearly marked as such, and if the derived work is
10 * incompatible with the protocol description in the RFC file, it must be
11 * called by a name other than "ssh" or "Secure Shell".
12 *
Damien Millerad833b32000-08-23 10:46:23 +100013 * SSH2 implementation,
Ben Lindstrom44697232001-07-04 03:32:30 +000014 * Copyright (c) 2000, 2001 Markus Friedl. All rights reserved.
Damien Millere4340be2000-09-16 13:29:08 +110015 *
16 * Redistribution and use in source and binary forms, with or without
17 * modification, are permitted provided that the following conditions
18 * are met:
19 * 1. Redistributions of source code must retain the above copyright
20 * notice, this list of conditions and the following disclaimer.
21 * 2. Redistributions in binary form must reproduce the above copyright
22 * notice, this list of conditions and the following disclaimer in the
23 * documentation and/or other materials provided with the distribution.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
26 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
27 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
28 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
29 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
30 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
31 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
32 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
33 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
34 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Damien Miller95def091999-11-25 00:26:21 +110035 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100036
37#include "includes.h"
Damien Miller9f0f5c62001-12-21 14:45:46 +110038RCSID("$OpenBSD: ssh-add.c,v 1.47 2001/12/19 07:18:56 deraadt Exp $");
Damien Millereba71ba2000-04-29 23:57:08 +100039
Damien Millerad833b32000-08-23 10:46:23 +100040#include <openssl/evp.h>
Damien Millerd4a8b7e1999-10-27 13:42:43 +100041
Damien Millerd4a8b7e1999-10-27 13:42:43 +100042#include "ssh.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000043#include "rsa.h"
44#include "log.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100045#include "xmalloc.h"
Damien Millereba71ba2000-04-29 23:57:08 +100046#include "key.h"
Damien Miller994cf142000-07-21 10:19:44 +100047#include "authfd.h"
Damien Millereba71ba2000-04-29 23:57:08 +100048#include "authfile.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000049#include "pathnames.h"
50#include "readpass.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100051
Damien Miller3f905871999-11-15 17:10:57 +110052#ifdef HAVE___PROGNAME
53extern char *__progname;
Ben Lindstrom49a79c02000-11-17 03:47:20 +000054#else
55char *__progname;
56#endif
Damien Miller3f905871999-11-15 17:10:57 +110057
Ben Lindstromddfb1e32001-08-06 22:06:35 +000058/* argv0 */
59extern char *__progname;
60
Ben Lindstromee617942001-04-10 02:45:32 +000061/* we keep a cache of one passphrases */
62static char *pass = NULL;
Ben Lindstrombba81212001-06-25 05:01:22 +000063static void
Ben Lindstromee617942001-04-10 02:45:32 +000064clear_pass(void)
65{
66 if (pass) {
67 memset(pass, 0, strlen(pass));
68 xfree(pass);
69 pass = NULL;
70 }
71}
72
Ben Lindstrom569f88d2001-10-03 17:43:01 +000073static int
Damien Miller01ab4a21999-10-28 15:23:30 +100074delete_file(AuthenticationConnection *ac, const char *filename)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100075{
Damien Millereba71ba2000-04-29 23:57:08 +100076 Key *public;
Ben Lindstromd5730a82001-04-08 18:04:36 +000077 char *comment = NULL;
Ben Lindstrom569f88d2001-10-03 17:43:01 +000078 int ret = -1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100079
Ben Lindstromd0fca422001-03-26 13:44:06 +000080 public = key_load_public(filename, &comment);
81 if (public == NULL) {
82 printf("Bad key file %s\n", filename);
Ben Lindstrom569f88d2001-10-03 17:43:01 +000083 return -1;
Damien Miller95def091999-11-25 00:26:21 +110084 }
Ben Lindstrom569f88d2001-10-03 17:43:01 +000085 if (ssh_remove_identity(ac, public)) {
Damien Miller95def091999-11-25 00:26:21 +110086 fprintf(stderr, "Identity removed: %s (%s)\n", filename, comment);
Ben Lindstrom569f88d2001-10-03 17:43:01 +000087 ret = 0;
88 } else
Damien Miller95def091999-11-25 00:26:21 +110089 fprintf(stderr, "Could not remove identity: %s\n", filename);
Ben Lindstrom569f88d2001-10-03 17:43:01 +000090
Damien Millereba71ba2000-04-29 23:57:08 +100091 key_free(public);
Damien Miller95def091999-11-25 00:26:21 +110092 xfree(comment);
Damien Miller9f0f5c62001-12-21 14:45:46 +110093
Ben Lindstrom569f88d2001-10-03 17:43:01 +000094 return ret;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100095}
96
Damien Millerad833b32000-08-23 10:46:23 +100097/* Send a request to remove all identities. */
Ben Lindstrom569f88d2001-10-03 17:43:01 +000098static int
Damien Miller01ab4a21999-10-28 15:23:30 +100099delete_all(AuthenticationConnection *ac)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000100{
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000101 int ret = -1;
Damien Millerad833b32000-08-23 10:46:23 +1000102
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000103 if (ssh_remove_all_identities(ac, 1))
104 ret = 0;
Damien Millerad833b32000-08-23 10:46:23 +1000105 /* ignore error-code for ssh2 */
106 ssh_remove_all_identities(ac, 2);
107
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000108 if (ret == 0)
Damien Miller95def091999-11-25 00:26:21 +1100109 fprintf(stderr, "All identities removed.\n");
110 else
Ben Lindstrombf555ba2001-01-18 02:04:35 +0000111 fprintf(stderr, "Failed to remove all identities.\n");
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000112
113 return ret;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000114}
115
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000116static int
Damien Miller01ab4a21999-10-28 15:23:30 +1000117add_file(AuthenticationConnection *ac, const char *filename)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000118{
Damien Millerad833b32000-08-23 10:46:23 +1000119 struct stat st;
Damien Millereba71ba2000-04-29 23:57:08 +1000120 Key *private;
Ben Lindstrom5eb97b62001-04-19 20:33:07 +0000121 char *comment = NULL;
122 char msg[1024];
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000123 int ret = -1;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000124
Damien Millerad833b32000-08-23 10:46:23 +1000125 if (stat(filename, &st) < 0) {
126 perror(filename);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000127 return -1;
Damien Millerad833b32000-08-23 10:46:23 +1000128 }
Damien Miller95def091999-11-25 00:26:21 +1100129 /* At first, try empty passphrase */
Ben Lindstromd0fca422001-03-26 13:44:06 +0000130 private = key_load_private(filename, "", &comment);
131 if (comment == NULL)
132 comment = xstrdup(filename);
Ben Lindstromee617942001-04-10 02:45:32 +0000133 /* try last */
134 if (private == NULL && pass != NULL)
135 private = key_load_private(filename, pass, NULL);
Ben Lindstromd0fca422001-03-26 13:44:06 +0000136 if (private == NULL) {
Ben Lindstromee617942001-04-10 02:45:32 +0000137 /* clear passphrase since it did not work */
138 clear_pass();
Ben Lindstrom8a137132001-05-02 22:40:12 +0000139 snprintf(msg, sizeof msg, "Enter passphrase for %.200s: ",
Ben Lindstrom5eb97b62001-04-19 20:33:07 +0000140 comment);
Damien Miller5428f641999-11-25 11:54:57 +1100141 for (;;) {
Ben Lindstrom949974b2001-06-25 05:20:31 +0000142 pass = read_passphrase(msg, RP_ALLOW_STDIN);
Damien Miller95def091999-11-25 00:26:21 +1100143 if (strcmp(pass, "") == 0) {
Ben Lindstrom7457f2a2001-04-14 23:10:09 +0000144 clear_pass();
Ben Lindstromd0fca422001-03-26 13:44:06 +0000145 xfree(comment);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000146 return -1;
Damien Miller95def091999-11-25 00:26:21 +1100147 }
Ben Lindstromd0fca422001-03-26 13:44:06 +0000148 private = key_load_private(filename, pass, &comment);
Ben Lindstromd0fca422001-03-26 13:44:06 +0000149 if (private != NULL)
Damien Miller95def091999-11-25 00:26:21 +1100150 break;
Ben Lindstromee617942001-04-10 02:45:32 +0000151 clear_pass();
Ben Lindstrom8a137132001-05-02 22:40:12 +0000152 strlcpy(msg, "Bad passphrase, try again: ", sizeof msg);
Damien Miller95def091999-11-25 00:26:21 +1100153 }
154 }
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000155 if (ssh_add_identity(ac, private, comment)) {
Ben Lindstromd0fca422001-03-26 13:44:06 +0000156 fprintf(stderr, "Identity added: %s (%s)\n", filename, comment);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000157 ret = 0;
158 } else
Damien Miller95def091999-11-25 00:26:21 +1100159 fprintf(stderr, "Could not add identity: %s\n", filename);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000160
Ben Lindstromd0fca422001-03-26 13:44:06 +0000161 xfree(comment);
Damien Millereba71ba2000-04-29 23:57:08 +1000162 key_free(private);
Damien Miller9f0f5c62001-12-21 14:45:46 +1100163
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000164 return ret;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000165}
166
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000167static int
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000168update_card(AuthenticationConnection *ac, int add, const char *id)
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000169{
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000170 if (ssh_update_card(ac, add, id)) {
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000171 fprintf(stderr, "Card %s: %s\n",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100172 add ? "added" : "removed", id);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000173 return 0;
174 } else {
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000175 fprintf(stderr, "Could not %s card: %s\n",
Damien Miller9f0f5c62001-12-21 14:45:46 +1100176 add ? "add" : "remove", id);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000177 return -1;
178 }
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000179}
180
181static void
Ben Lindstromcfccef92001-03-13 04:57:58 +0000182list_identities(AuthenticationConnection *ac, int do_fp)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000183{
Damien Millerad833b32000-08-23 10:46:23 +1000184 Key *key;
Ben Lindstromcfccef92001-03-13 04:57:58 +0000185 char *comment, *fp;
Damien Millerad833b32000-08-23 10:46:23 +1000186 int had_identities = 0;
187 int version;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000188
Damien Millerad833b32000-08-23 10:46:23 +1000189 for (version = 1; version <= 2; version++) {
190 for (key = ssh_get_first_identity(ac, &comment, version);
Damien Miller9f0f5c62001-12-21 14:45:46 +1100191 key != NULL;
192 key = ssh_get_next_identity(ac, &comment, version)) {
Damien Millerad833b32000-08-23 10:46:23 +1000193 had_identities = 1;
Ben Lindstromcfccef92001-03-13 04:57:58 +0000194 if (do_fp) {
195 fp = key_fingerprint(key, SSH_FP_MD5,
196 SSH_FP_HEX);
Damien Miller0bc1bd82000-11-13 22:57:25 +1100197 printf("%d %s %s (%s)\n",
Ben Lindstromcfccef92001-03-13 04:57:58 +0000198 key_size(key), fp, comment, key_type(key));
199 xfree(fp);
Damien Miller95def091999-11-25 00:26:21 +1100200 } else {
Damien Millerad833b32000-08-23 10:46:23 +1000201 if (!key_write(key, stdout))
202 fprintf(stderr, "key_write failed");
203 fprintf(stdout, " %s\n", comment);
Damien Miller95def091999-11-25 00:26:21 +1100204 }
Damien Millerad833b32000-08-23 10:46:23 +1000205 key_free(key);
206 xfree(comment);
Damien Miller95def091999-11-25 00:26:21 +1100207 }
Damien Miller10f6f6b1999-11-17 17:29:08 +1100208 }
Damien Miller95def091999-11-25 00:26:21 +1100209 if (!had_identities)
210 printf("The agent has no identities.\n");
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000211}
212
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000213static void
214usage(void)
215{
Ben Lindstromddfb1e32001-08-06 22:06:35 +0000216 fprintf(stderr, "Usage: %s [options]\n", __progname);
217 fprintf(stderr, "Options:\n");
218 fprintf(stderr, " -l List fingerprints of all identities.\n");
219 fprintf(stderr, " -L List public key parameters of all identities.\n");
220 fprintf(stderr, " -d Delete identity.\n");
221 fprintf(stderr, " -D Delete all identities.\n");
222#ifdef SMARTCARD
223 fprintf(stderr, " -s reader Add key in smartcard reader.\n");
224 fprintf(stderr, " -e reader Remove key in smartcard reader.\n");
225#endif
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000226}
227
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000228int
Damien Miller01ab4a21999-10-28 15:23:30 +1000229main(int argc, char **argv)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000230{
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000231 extern char *optarg;
232 extern int optind;
Damien Miller95def091999-11-25 00:26:21 +1100233 AuthenticationConnection *ac = NULL;
234 struct passwd *pw;
235 char buf[1024];
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000236 char *sc_reader_id = NULL;
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000237 int i, ch, deleting = 0, ret = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000238
Ben Lindstrom49a79c02000-11-17 03:47:20 +0000239 __progname = get_progname(argv[0]);
Damien Millerf9b625c2000-07-09 22:42:32 +1000240 init_rng();
Ben Lindstrom93d1fe82001-05-06 02:57:20 +0000241 seed_rng();
Damien Millerf9b625c2000-07-09 22:42:32 +1000242
Kevin Stevesef4eea92001-02-05 12:42:17 +0000243 SSLeay_add_all_algorithms();
Damien Millerad833b32000-08-23 10:46:23 +1000244
Damien Miller95def091999-11-25 00:26:21 +1100245 /* At first, get a connection to the authentication agent. */
246 ac = ssh_get_authentication_connection();
247 if (ac == NULL) {
248 fprintf(stderr, "Could not open a connection to your authentication agent.\n");
249 exit(1);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000250 }
Damien Miller9f0f5c62001-12-21 14:45:46 +1100251 while ((ch = getopt(argc, argv, "lLdDe:s:")) != -1) {
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000252 switch (ch) {
253 case 'l':
254 case 'L':
255 list_identities(ac, ch == 'l' ? 1 : 0);
256 goto done;
257 break;
258 case 'd':
Damien Miller95def091999-11-25 00:26:21 +1100259 deleting = 1;
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000260 break;
261 case 'D':
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000262 if (delete_all(ac) == -1)
263 ret = 1;
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000264 goto done;
265 break;
266 case 's':
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000267 sc_reader_id = optarg;
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000268 break;
269 case 'e':
Damien Miller9f0f5c62001-12-21 14:45:46 +1100270 deleting = 1;
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000271 sc_reader_id = optarg;
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000272 break;
273 default:
274 usage();
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000275 ret = 1;
276 goto done;
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000277 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000278 }
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000279 argc -= optind;
280 argv += optind;
Ben Lindstromf7db3bb2001-08-06 21:35:51 +0000281 if (sc_reader_id != NULL) {
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000282 if (update_card(ac, !deleting, sc_reader_id) == -1)
283 ret = 1;
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000284 goto done;
Ben Lindstrom036a6b22001-07-04 03:50:02 +0000285 }
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000286 if (argc == 0) {
Damien Miller95def091999-11-25 00:26:21 +1100287 pw = getpwuid(getuid());
288 if (!pw) {
Damien Millercaf6dd62000-08-29 11:33:50 +1100289 fprintf(stderr, "No user found with uid %u\n",
290 (u_int)getuid());
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000291 ret = 1;
292 goto done;
Damien Miller95def091999-11-25 00:26:21 +1100293 }
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000294 snprintf(buf, sizeof buf, "%s/%s", pw->pw_dir, _PATH_SSH_CLIENT_IDENTITY);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000295 if (deleting) {
296 if (delete_file(ac, buf) == -1)
297 ret = 1;
298 } else {
299 if (add_file(ac, buf) == -1)
300 ret = 1;
301 }
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000302 } else {
303 for (i = 0; i < argc; i++) {
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000304 if (deleting) {
305 if (delete_file(ac, argv[i]) == -1)
306 ret = 1;
307 } else {
308 if (add_file(ac, argv[i]) == -1)
309 ret = 1;
310 }
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000311 }
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000312 }
Ben Lindstromee617942001-04-10 02:45:32 +0000313 clear_pass();
Ben Lindstrom44e49af2001-07-04 05:03:51 +0000314
315done:
Damien Miller95def091999-11-25 00:26:21 +1100316 ssh_close_authentication_connection(ac);
Ben Lindstrom569f88d2001-10-03 17:43:01 +0000317 return ret;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000318}