blob: f887455bfd7a631a64f7e70d48a489c83912cb7a [file] [log] [blame]
Damien Millerd4a8b7e1999-10-27 13:42:43 +10001/*
Damien Miller95def091999-11-25 00:26:21 +11002 * Author: Tatu Ylonen <ylo@cs.hut.fi>
3 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
4 * All rights reserved
Damien Miller95def091999-11-25 00:26:21 +11005 * Adds an identity to the authentication server, or removes an identity.
Damien Millerad833b32000-08-23 10:46:23 +10006 *
Damien Millere4340be2000-09-16 13:29:08 +11007 * As far as I am concerned, the code I have written for this software
8 * can be used freely for any purpose. Any derived versions of this
9 * software must be clearly marked as such, and if the derived work is
10 * incompatible with the protocol description in the RFC file, it must be
11 * called by a name other than "ssh" or "Secure Shell".
12 *
Damien Millerad833b32000-08-23 10:46:23 +100013 * SSH2 implementation,
Ben Lindstrom92a2e382001-03-05 06:59:27 +000014 * Copyright (c) 2000 Markus Friedl. All rights reserved.
Damien Millere4340be2000-09-16 13:29:08 +110015 *
16 * Redistribution and use in source and binary forms, with or without
17 * modification, are permitted provided that the following conditions
18 * are met:
19 * 1. Redistributions of source code must retain the above copyright
20 * notice, this list of conditions and the following disclaimer.
21 * 2. Redistributions in binary form must reproduce the above copyright
22 * notice, this list of conditions and the following disclaimer in the
23 * documentation and/or other materials provided with the distribution.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
26 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
27 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
28 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
29 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
30 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
31 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
32 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
33 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
34 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
Damien Miller95def091999-11-25 00:26:21 +110035 */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100036
37#include "includes.h"
Ben Lindstromee617942001-04-10 02:45:32 +000038RCSID("$OpenBSD: ssh-add.c,v 1.33 2001/04/09 15:12:23 markus Exp $");
Damien Millereba71ba2000-04-29 23:57:08 +100039
Damien Millerad833b32000-08-23 10:46:23 +100040#include <openssl/evp.h>
Damien Millerd4a8b7e1999-10-27 13:42:43 +100041
Damien Millerd4a8b7e1999-10-27 13:42:43 +100042#include "ssh.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000043#include "rsa.h"
44#include "log.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100045#include "xmalloc.h"
Damien Millereba71ba2000-04-29 23:57:08 +100046#include "key.h"
Damien Miller994cf142000-07-21 10:19:44 +100047#include "authfd.h"
Damien Millereba71ba2000-04-29 23:57:08 +100048#include "authfile.h"
Ben Lindstrom226cfa02001-01-22 05:34:40 +000049#include "pathnames.h"
50#include "readpass.h"
Damien Millerd4a8b7e1999-10-27 13:42:43 +100051
Damien Miller3f905871999-11-15 17:10:57 +110052#ifdef HAVE___PROGNAME
53extern char *__progname;
Ben Lindstrom49a79c02000-11-17 03:47:20 +000054#else
55char *__progname;
56#endif
Damien Miller3f905871999-11-15 17:10:57 +110057
Ben Lindstromee617942001-04-10 02:45:32 +000058/* we keep a cache of one passphrases */
59static char *pass = NULL;
60void
61clear_pass(void)
62{
63 if (pass) {
64 memset(pass, 0, strlen(pass));
65 xfree(pass);
66 pass = NULL;
67 }
68}
69
Damien Millerd4a8b7e1999-10-27 13:42:43 +100070void
Damien Miller01ab4a21999-10-28 15:23:30 +100071delete_file(AuthenticationConnection *ac, const char *filename)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100072{
Damien Millereba71ba2000-04-29 23:57:08 +100073 Key *public;
Ben Lindstromd5730a82001-04-08 18:04:36 +000074 char *comment = NULL;
Damien Millerd4a8b7e1999-10-27 13:42:43 +100075
Ben Lindstromd0fca422001-03-26 13:44:06 +000076 public = key_load_public(filename, &comment);
77 if (public == NULL) {
78 printf("Bad key file %s\n", filename);
79 return;
Damien Miller95def091999-11-25 00:26:21 +110080 }
Damien Millerad833b32000-08-23 10:46:23 +100081 if (ssh_remove_identity(ac, public))
Damien Miller95def091999-11-25 00:26:21 +110082 fprintf(stderr, "Identity removed: %s (%s)\n", filename, comment);
83 else
84 fprintf(stderr, "Could not remove identity: %s\n", filename);
Damien Millereba71ba2000-04-29 23:57:08 +100085 key_free(public);
Damien Miller95def091999-11-25 00:26:21 +110086 xfree(comment);
Damien Millerd4a8b7e1999-10-27 13:42:43 +100087}
88
Damien Millerad833b32000-08-23 10:46:23 +100089/* Send a request to remove all identities. */
Damien Millerd4a8b7e1999-10-27 13:42:43 +100090void
Damien Miller01ab4a21999-10-28 15:23:30 +100091delete_all(AuthenticationConnection *ac)
Damien Millerd4a8b7e1999-10-27 13:42:43 +100092{
Damien Millerad833b32000-08-23 10:46:23 +100093 int success = 1;
94
95 if (!ssh_remove_all_identities(ac, 1))
96 success = 0;
97 /* ignore error-code for ssh2 */
98 ssh_remove_all_identities(ac, 2);
99
100 if (success)
Damien Miller95def091999-11-25 00:26:21 +1100101 fprintf(stderr, "All identities removed.\n");
102 else
Ben Lindstrombf555ba2001-01-18 02:04:35 +0000103 fprintf(stderr, "Failed to remove all identities.\n");
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000104}
105
Damien Miller5428f641999-11-25 11:54:57 +1100106char *
107ssh_askpass(char *askpass, char *msg)
108{
109 pid_t pid;
110 size_t len;
111 char *nl, *pass;
112 int p[2], status;
113 char buf[1024];
114
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000115 if (fflush(stdout) != 0)
116 error("ssh_askpass: fflush: %s", strerror(errno));
Damien Miller5428f641999-11-25 11:54:57 +1100117 if (askpass == NULL)
118 fatal("internal error: askpass undefined");
119 if (pipe(p) < 0)
120 fatal("ssh_askpass: pipe: %s", strerror(errno));
121 if ((pid = fork()) < 0)
122 fatal("ssh_askpass: fork: %s", strerror(errno));
123 if (pid == 0) {
124 close(p[0]);
125 if (dup2(p[1], STDOUT_FILENO) < 0)
126 fatal("ssh_askpass: dup2: %s", strerror(errno));
127 execlp(askpass, askpass, msg, (char *) 0);
128 fatal("ssh_askpass: exec(%s): %s", askpass, strerror(errno));
129 }
130 close(p[1]);
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000131 len = read(p[0], buf, sizeof buf);
Damien Miller5428f641999-11-25 11:54:57 +1100132 close(p[0]);
133 while (waitpid(pid, &status, 0) < 0)
134 if (errno != EINTR)
135 break;
136 if (len <= 1)
137 return xstrdup("");
138 nl = strchr(buf, '\n');
139 if (nl)
140 *nl = '\0';
141 pass = xstrdup(buf);
142 memset(buf, 0, sizeof(buf));
143 return pass;
144}
145
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000146void
Damien Miller01ab4a21999-10-28 15:23:30 +1000147add_file(AuthenticationConnection *ac, const char *filename)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000148{
Damien Millerad833b32000-08-23 10:46:23 +1000149 struct stat st;
Damien Millereba71ba2000-04-29 23:57:08 +1000150 Key *private;
Ben Lindstromee617942001-04-10 02:45:32 +0000151 char *comment = NULL, *askpass = NULL;
Damien Miller5428f641999-11-25 11:54:57 +1100152 char buf[1024], msg[1024];
Damien Miller5428f641999-11-25 11:54:57 +1100153 int interactive = isatty(STDIN_FILENO);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000154
Damien Millerad833b32000-08-23 10:46:23 +1000155 if (stat(filename, &st) < 0) {
156 perror(filename);
157 exit(1);
158 }
Damien Milleraae6c611999-12-06 11:47:28 +1100159 if (!interactive && getenv("DISPLAY")) {
160 if (getenv(SSH_ASKPASS_ENV))
161 askpass = getenv(SSH_ASKPASS_ENV);
162 else
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000163 askpass = _PATH_SSH_ASKPASS_DEFAULT;
Damien Milleraae6c611999-12-06 11:47:28 +1100164 }
Damien Miller5428f641999-11-25 11:54:57 +1100165
Damien Miller95def091999-11-25 00:26:21 +1100166 /* At first, try empty passphrase */
Ben Lindstromd0fca422001-03-26 13:44:06 +0000167 private = key_load_private(filename, "", &comment);
168 if (comment == NULL)
169 comment = xstrdup(filename);
Ben Lindstromee617942001-04-10 02:45:32 +0000170 /* try last */
171 if (private == NULL && pass != NULL)
172 private = key_load_private(filename, pass, NULL);
Ben Lindstromd0fca422001-03-26 13:44:06 +0000173 if (private == NULL) {
Ben Lindstromee617942001-04-10 02:45:32 +0000174 /* clear passphrase since it did not work */
175 clear_pass();
Damien Miller5428f641999-11-25 11:54:57 +1100176 printf("Need passphrase for %.200s\n", filename);
177 if (!interactive && askpass == NULL) {
Ben Lindstromd0fca422001-03-26 13:44:06 +0000178 xfree(comment);
Damien Miller5428f641999-11-25 11:54:57 +1100179 return;
Damien Miller95def091999-11-25 00:26:21 +1100180 }
Ben Lindstromd0fca422001-03-26 13:44:06 +0000181 snprintf(msg, sizeof msg, "Enter passphrase for %.200s", comment);
Damien Miller5428f641999-11-25 11:54:57 +1100182 for (;;) {
Damien Miller5428f641999-11-25 11:54:57 +1100183 if (interactive) {
184 snprintf(buf, sizeof buf, "%s: ", msg);
185 pass = read_passphrase(buf, 1);
186 } else {
187 pass = ssh_askpass(askpass, msg);
188 }
Damien Miller95def091999-11-25 00:26:21 +1100189 if (strcmp(pass, "") == 0) {
190 xfree(pass);
Ben Lindstromd0fca422001-03-26 13:44:06 +0000191 xfree(comment);
Damien Miller95def091999-11-25 00:26:21 +1100192 return;
193 }
Ben Lindstromd0fca422001-03-26 13:44:06 +0000194 private = key_load_private(filename, pass, &comment);
Ben Lindstromd0fca422001-03-26 13:44:06 +0000195 if (private != NULL)
Damien Miller95def091999-11-25 00:26:21 +1100196 break;
Ben Lindstromee617942001-04-10 02:45:32 +0000197 clear_pass();
Damien Miller5428f641999-11-25 11:54:57 +1100198 strlcpy(msg, "Bad passphrase, try again", sizeof msg);
Damien Miller95def091999-11-25 00:26:21 +1100199 }
200 }
Ben Lindstromd0fca422001-03-26 13:44:06 +0000201 if (ssh_add_identity(ac, private, comment))
202 fprintf(stderr, "Identity added: %s (%s)\n", filename, comment);
Damien Miller95def091999-11-25 00:26:21 +1100203 else
204 fprintf(stderr, "Could not add identity: %s\n", filename);
Ben Lindstromd0fca422001-03-26 13:44:06 +0000205 xfree(comment);
Damien Millereba71ba2000-04-29 23:57:08 +1000206 key_free(private);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000207}
208
209void
Ben Lindstromcfccef92001-03-13 04:57:58 +0000210list_identities(AuthenticationConnection *ac, int do_fp)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000211{
Damien Millerad833b32000-08-23 10:46:23 +1000212 Key *key;
Ben Lindstromcfccef92001-03-13 04:57:58 +0000213 char *comment, *fp;
Damien Millerad833b32000-08-23 10:46:23 +1000214 int had_identities = 0;
215 int version;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000216
Damien Millerad833b32000-08-23 10:46:23 +1000217 for (version = 1; version <= 2; version++) {
218 for (key = ssh_get_first_identity(ac, &comment, version);
219 key != NULL;
220 key = ssh_get_next_identity(ac, &comment, version)) {
221 had_identities = 1;
Ben Lindstromcfccef92001-03-13 04:57:58 +0000222 if (do_fp) {
223 fp = key_fingerprint(key, SSH_FP_MD5,
224 SSH_FP_HEX);
Damien Miller0bc1bd82000-11-13 22:57:25 +1100225 printf("%d %s %s (%s)\n",
Ben Lindstromcfccef92001-03-13 04:57:58 +0000226 key_size(key), fp, comment, key_type(key));
227 xfree(fp);
Damien Miller95def091999-11-25 00:26:21 +1100228 } else {
Damien Millerad833b32000-08-23 10:46:23 +1000229 if (!key_write(key, stdout))
230 fprintf(stderr, "key_write failed");
231 fprintf(stdout, " %s\n", comment);
Damien Miller95def091999-11-25 00:26:21 +1100232 }
Damien Millerad833b32000-08-23 10:46:23 +1000233 key_free(key);
234 xfree(comment);
Damien Miller95def091999-11-25 00:26:21 +1100235 }
Damien Miller10f6f6b1999-11-17 17:29:08 +1100236 }
Damien Miller95def091999-11-25 00:26:21 +1100237 if (!had_identities)
238 printf("The agent has no identities.\n");
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000239}
240
241int
Damien Miller01ab4a21999-10-28 15:23:30 +1000242main(int argc, char **argv)
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000243{
Damien Miller95def091999-11-25 00:26:21 +1100244 AuthenticationConnection *ac = NULL;
245 struct passwd *pw;
246 char buf[1024];
247 int no_files = 1;
248 int i;
249 int deleting = 0;
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000250
Ben Lindstrom49a79c02000-11-17 03:47:20 +0000251 __progname = get_progname(argv[0]);
Damien Millerf9b625c2000-07-09 22:42:32 +1000252 init_rng();
253
Kevin Stevesef4eea92001-02-05 12:42:17 +0000254 SSLeay_add_all_algorithms();
Damien Millerad833b32000-08-23 10:46:23 +1000255
Damien Miller95def091999-11-25 00:26:21 +1100256 /* At first, get a connection to the authentication agent. */
257 ac = ssh_get_authentication_connection();
258 if (ac == NULL) {
259 fprintf(stderr, "Could not open a connection to your authentication agent.\n");
260 exit(1);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000261 }
Damien Miller95def091999-11-25 00:26:21 +1100262 for (i = 1; i < argc; i++) {
263 if ((strcmp(argv[i], "-l") == 0) ||
264 (strcmp(argv[i], "-L") == 0)) {
265 list_identities(ac, argv[i][1] == 'l' ? 1 : 0);
266 /* Don't default-add/delete if -l. */
267 no_files = 0;
268 continue;
269 }
270 if (strcmp(argv[i], "-d") == 0) {
271 deleting = 1;
272 continue;
273 }
274 if (strcmp(argv[i], "-D") == 0) {
275 delete_all(ac);
276 no_files = 0;
277 continue;
278 }
279 no_files = 0;
280 if (deleting)
281 delete_file(ac, argv[i]);
282 else
283 add_file(ac, argv[i]);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000284 }
Damien Miller95def091999-11-25 00:26:21 +1100285 if (no_files) {
286 pw = getpwuid(getuid());
287 if (!pw) {
Damien Millercaf6dd62000-08-29 11:33:50 +1100288 fprintf(stderr, "No user found with uid %u\n",
289 (u_int)getuid());
Damien Miller95def091999-11-25 00:26:21 +1100290 ssh_close_authentication_connection(ac);
291 exit(1);
292 }
Ben Lindstrom226cfa02001-01-22 05:34:40 +0000293 snprintf(buf, sizeof buf, "%s/%s", pw->pw_dir, _PATH_SSH_CLIENT_IDENTITY);
Damien Miller95def091999-11-25 00:26:21 +1100294 if (deleting)
295 delete_file(ac, buf);
296 else
297 add_file(ac, buf);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000298 }
Ben Lindstromee617942001-04-10 02:45:32 +0000299 clear_pass();
Damien Miller95def091999-11-25 00:26:21 +1100300 ssh_close_authentication_connection(ac);
301 exit(0);
Damien Millerd4a8b7e1999-10-27 13:42:43 +1000302}