1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
#include <common.h>
#include <command.h>
#include <getopt.h>
#include <libfile.h>
#include <crypto/keystore.h>
#include <linux/kernel.h>
#include <fs.h>
static int do_keystore(int argc, char *argv[])
{
int opt;
int ret;
int do_remove = 0;
const char *name;
const char *file = NULL;
char *secret_str = NULL;
void *secret;
size_t s_len;
while ((opt = getopt(argc, argv, "rs:f:")) > 0) {
switch (opt) {
case 'r':
do_remove = 1;
break;
case 's':
secret_str = optarg;
break;
case 'f':
file = optarg;
break;
default:
return COMMAND_ERROR_USAGE;
}
}
if (argc == optind)
return COMMAND_ERROR_USAGE;
if (!do_remove && !file && !secret_str)
return COMMAND_ERROR_USAGE;
if (file && secret_str)
return COMMAND_ERROR_USAGE;
name = argv[optind];
if (do_remove) {
keystore_forget_secret(name);
printf("forgotten secret for key %s\n", name);
return 0;
}
if (file) {
ret = read_file_2(file, &s_len, (void *)&secret_str, FILESIZE_MAX);
if (ret) {
printf("Cannot open %s: %s\n", file, strerror(-ret));
return 1;
}
} else if (secret_str) {
s_len = strlen(secret_str);
}
if (s_len & 1) {
printf("invalid secret len. Must be whole bytes\n");
return 1;
}
secret = xzalloc(s_len / 2);
ret = hex2bin(secret, secret_str, s_len / 2);
if (ret) {
printf("Cannot convert %s to binary: %s\n", secret_str, strerror(-ret));
return 1;
}
ret = keystore_set_secret(name, secret, s_len / 2);
if (ret)
printf("cannot set secret for key %s: %s\n", name, strerror(-ret));
else
printf("Added secret for key %s\n", name);
free(secret);
return ret ? 1 : 0;
}
BAREBOX_CMD_HELP_START(keystore)
BAREBOX_CMD_HELP_TEXT("")
BAREBOX_CMD_HELP_TEXT("Options:")
BAREBOX_CMD_HELP_OPT("-r", "remove a key from the keystore")
BAREBOX_CMD_HELP_OPT("-s <key>", "set a key in the keystore")
BAREBOX_CMD_HELP_OPT("-f <keyfile>", "set a key in the keystore, read secret from file")
BAREBOX_CMD_HELP_END
BAREBOX_CMD_START(keystore)
.cmd = do_keystore,
BAREBOX_CMD_DESC("manage keys")
BAREBOX_CMD_OPTS("[-rsf] <keyname>")
BAREBOX_CMD_GROUP(CMD_GRP_MISC)
BAREBOX_CMD_HELP(cmd_keystore_help)
BAREBOX_CMD_END
|