mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
074de1e14e
Add host-key document verification support to genprotimg. This ensures that a host-key document is genuine and provided by IBM. For this the user must provide the IBM Z signing key, the intermediate CA certificate (signed by the root CA used) so a chain of trust starting from the host-key document and ending in the root CA can be established. By default, genprotimg tries to download all revocation lists needed by looking up in the corresponding certificate on how CRL information can be obtained (see https://tools.ietf.org/html/rfc5280#section-4.2.1.13 for details). Acked-by: Patrick Steuer <patrick.steuer@de.ibm.com> Signed-off-by: Marc Hartmayer <mhartmay@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
122 lines
2.8 KiB
C
122 lines
2.8 KiB
C
/*
|
|
* Libcurl utils
|
|
*
|
|
* Copyright IBM Corp. 2020
|
|
*
|
|
* s390-tools is free software; you can redistribute it and/or modify
|
|
* it under the terms of the MIT license. See LICENSE for details.
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <glib.h>
|
|
#include <glib/gtypes.h>
|
|
#include <curl/curl.h>
|
|
|
|
#include "lib/zt_common.h"
|
|
#include "pv/pv_error.h"
|
|
|
|
#include "curl.h"
|
|
|
|
struct UserData {
|
|
GByteArray *buffer;
|
|
guint max_size;
|
|
};
|
|
|
|
static size_t write_callback(char *ptr, size_t size, size_t nmemb, void *userdata)
|
|
{
|
|
g_assert(userdata);
|
|
struct UserData *data = (struct UserData *)userdata;
|
|
GByteArray *buffer = data->buffer;
|
|
guint64 actual_size;
|
|
size_t err;
|
|
|
|
g_assert(buffer);
|
|
|
|
if (!g_uint64_checked_mul(&actual_size, size, nmemb))
|
|
g_abort();
|
|
|
|
/* Signal an error condition by returning a amount that differs
|
|
* from the amount passed to the callback. This results in a
|
|
* CURLE_WRITE_ERROR.
|
|
*/
|
|
err = actual_size + 1;
|
|
|
|
if (actual_size > G_MAXUINT)
|
|
return err;
|
|
|
|
data->buffer = g_byte_array_append(buffer, (guchar *)ptr, (guint)actual_size);
|
|
if (data->buffer->len > data->max_size)
|
|
return err;
|
|
|
|
return actual_size;
|
|
}
|
|
|
|
gint curl_init(void)
|
|
{
|
|
if (curl_global_init(CURL_GLOBAL_ALL) != 0)
|
|
return -1;
|
|
return 0;
|
|
}
|
|
|
|
void curl_cleanup(void)
|
|
{
|
|
curl_global_cleanup();
|
|
}
|
|
|
|
GByteArray *curl_download(const gchar *url, long timeout_ms, guint max_size,
|
|
GError **err)
|
|
{
|
|
g_autoptr(GByteArray) ret = NULL;
|
|
g_autoptr(CURL) handle = NULL;
|
|
g_autofree gchar *agent = NULL;
|
|
struct UserData userdata;
|
|
CURLcode rc;
|
|
|
|
/* set up curl session */
|
|
handle = curl_easy_init();
|
|
if (!handle)
|
|
g_abort();
|
|
|
|
/* follow redirection */
|
|
rc = curl_easy_setopt(handle, CURLOPT_FOLLOWLOCATION, 1l);
|
|
if (rc != CURLE_OK)
|
|
goto curl_err;
|
|
rc = curl_easy_setopt(handle, CURLOPT_TIMEOUT_MS, timeout_ms);
|
|
if (rc != CURLE_OK)
|
|
goto curl_err;
|
|
rc = curl_easy_setopt(handle, CURLOPT_NOSIGNAL, 1l);
|
|
if (rc != CURLE_OK)
|
|
goto curl_err;
|
|
agent = g_strdup_printf("%s/%s", tool_name, RELEASE_STRING);
|
|
rc = curl_easy_setopt(handle, CURLOPT_USERAGENT, agent);
|
|
if (rc != CURLE_OK)
|
|
goto curl_err;
|
|
rc = curl_easy_setopt(handle, CURLOPT_WRITEFUNCTION, write_callback);
|
|
if (rc != CURLE_OK)
|
|
goto curl_err;
|
|
ret = g_byte_array_new();
|
|
userdata.buffer = ret;
|
|
userdata.max_size = max_size;
|
|
rc = curl_easy_setopt(handle, CURLOPT_WRITEDATA, (void *)&userdata);
|
|
if (rc != CURLE_OK)
|
|
goto curl_err;
|
|
rc = curl_easy_setopt(handle, CURLOPT_URL, url);
|
|
if (rc != CURLE_OK)
|
|
goto curl_err;
|
|
|
|
rc = curl_easy_perform(handle);
|
|
if (rc != CURLE_OK) {
|
|
g_set_error(err, PV_ERROR, PV_ERROR_DOWNLOAD_FAILED,
|
|
_("download failed: %s"), curl_easy_strerror(rc));
|
|
return NULL;
|
|
}
|
|
|
|
return g_steal_pointer(&ret);
|
|
curl_err:
|
|
g_set_error(err, PV_ERROR,
|
|
PV_ERROR_CURL_INIT_FAILED,
|
|
_("cURL initialization failed: %s"),
|
|
curl_easy_strerror(rc));
|
|
return NULL;
|
|
}
|