Security-59306.11.20.tar.gz

[apple/security.git] / SecurityTool / macOS / keychain_create.c

diff --git a/SecurityTool/macOS/keychain_create.c b/SecurityTool/macOS/keychain_create.c
new file mode 100644 (file)
index 0000000..8564f08
--- /dev/null
+++ b/SecurityTool/macOS/keychain_create.c
@@ -0,0 +1,180 @@
+/*
+ * Copyright (c) 2003-2004,2008,2012,2014 Apple Inc. All Rights Reserved.
+ *
+ * @APPLE_LICENSE_HEADER_START@
+ * 
+ * This file contains Original Code and/or Modifications of Original Code
+ * as defined in and that are subject to the Apple Public Source License
+ * Version 2.0 (the 'License'). You may not use this file except in
+ * compliance with the License. Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this
+ * file.
+ * 
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
+ * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
+ * Please see the License for the specific language governing rights and
+ * limitations under the License.
+ * 
+ * @APPLE_LICENSE_HEADER_END@
+ *
+ * keychain_create.c
+ */
+
+#include "keychain_create.h"
+
+#include "readline_cssm.h"
+#include "security_tool.h"
+
+#include <pwd.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include <Security/SecKeychain.h>
+
+static int
+do_create(const char *keychain, const char *password, Boolean do_prompt)
+{
+       SecKeychainRef keychainRef = NULL;
+       OSStatus result;
+
+       result = SecKeychainCreate(keychain, password ? (UInt32) strlen(password) : 0, password, do_prompt, NULL, &keychainRef);
+       if (keychainRef)
+               CFRelease(keychainRef);
+
+       if (result)
+               sec_error("SecKeychainCreate %s: %s", keychain, sec_errstr(result));
+
+       return result;
+}
+
+int
+keychain_create(int argc, char * const *argv)
+{
+       int free_keychain = 0, zero_password = 0;
+       char *password = NULL, *keychain = NULL;
+       int ch, result = 0;
+       Boolean do_prompt = FALSE;
+
+/* AG: getopts optstring name [args]
+    AG: while loop calling getopt is used to extract password from cl from user
+    password is the only option to keychain_create
+    optstring  is  a  string  containing the legitimate option
+    characters.  If such a character is followed by  a  colon,
+    the  option  requires  an  argument,  so  getopt  places a
+    pointer to the following text in the same argv-element, or
+    the  text  of  the following argv-element, in optarg.
+*/
+       while ((ch = getopt(argc, argv, "hp:P")) != -1)
+       {
+               switch  (ch)
+               {
+               case 'p':
+                       password = optarg;
+                       break;
+               case 'P':
+                       do_prompt = TRUE;
+                       break;
+               case '?':
+               default:
+                       return SHOW_USAGE_MESSAGE;
+               }
+       }
+/*
+    AG:   The external variable optind is  the  index  of  the  next
+       array  element  of argv[] to be processed; it communicates
+       from one call of getopt() to the  next  which  element  to
+       process.
+       The variable optind is the index of the next element of the argv[] vector to    be processed. It shall be initialized to 1 by the system, and getopt() shall    update it when it finishes with each element of argv[]. When an element of argv[]       contains multiple option characters, it is unspecified how getopt() determines  which options have already been processed.
+
+*/
+       argc -= optind;
+       argv += optind;
+
+       if (argc > 0)
+               keychain = *argv;
+       else
+       {
+               fprintf(stderr, "keychain to create: ");
+               keychain = readline(NULL, 0);
+               if (!keychain)
+               {
+                       result = -1;
+                       goto loser;
+               }
+
+               free_keychain = 1;
+               if (*keychain == '\0')
+                       goto loser;
+       }
+
+       if (!password && !do_prompt)
+       {
+               int compare = 1;
+               int tries;
+
+               for (tries = 3; tries-- > 0;)
+               {
+                       char *firstpass;
+
+                       password = getpass("password for new keychain: ");
+                       if (!password)
+                       {
+                               result = -1;
+                               goto loser;
+                       }
+
+                       firstpass = malloc(strlen(password) + 1);
+                       strcpy(firstpass, password);
+                       password = getpass("retype password for new keychain: ");
+                       compare = password ? strcmp(password, firstpass) : 1;
+                       memset(firstpass, 0, strlen(firstpass));
+                       free(firstpass);
+                       if (!password)
+                       {
+                               result = -1;
+                               goto loser;
+                       }
+
+                       if (compare)
+                       {
+                               fprintf(stderr, "passwords don't match\n");
+                               memset(password, 0, strlen(password));
+                       }
+                       else
+                       {
+                               zero_password = 1;
+                               break;
+                       }
+               }
+
+               if (compare)
+               {
+                       result = 1;
+                       goto loser;
+               }
+       }
+
+       do
+       {
+               result = do_create(keychain, password, do_prompt);
+               if (zero_password)
+                       memset(password, 0, strlen(password));
+               if (result)
+                       goto loser;
+
+               argc--;
+               argv++;
+               if (!free_keychain)
+                       keychain = *argv;
+       } while (argc > 0);
+
+loser:
+       if (free_keychain)
+               free(keychain);
+
+       return result;
+}