dnssec-dsfromkey.c revision 1.2.2.2
1 1.2.2.2 pgoyette /* $NetBSD: dnssec-dsfromkey.c,v 1.2.2.2 2018/09/06 06:53:55 pgoyette Exp $ */ 2 1.2.2.2 pgoyette 3 1.2.2.2 pgoyette /* 4 1.2.2.2 pgoyette * Copyright (C) Internet Systems Consortium, Inc. ("ISC") 5 1.2.2.2 pgoyette * 6 1.2.2.2 pgoyette * This Source Code Form is subject to the terms of the Mozilla Public 7 1.2.2.2 pgoyette * License, v. 2.0. If a copy of the MPL was not distributed with this 8 1.2.2.2 pgoyette * file, You can obtain one at http://mozilla.org/MPL/2.0/. 9 1.2.2.2 pgoyette * 10 1.2.2.2 pgoyette * See the COPYRIGHT file distributed with this work for additional 11 1.2.2.2 pgoyette * information regarding copyright ownership. 12 1.2.2.2 pgoyette */ 13 1.2.2.2 pgoyette 14 1.2.2.2 pgoyette /*! \file */ 15 1.2.2.2 pgoyette 16 1.2.2.2 pgoyette #include <config.h> 17 1.2.2.2 pgoyette 18 1.2.2.2 pgoyette #include <stdlib.h> 19 1.2.2.2 pgoyette 20 1.2.2.2 pgoyette #include <isc/buffer.h> 21 1.2.2.2 pgoyette #include <isc/commandline.h> 22 1.2.2.2 pgoyette #include <isc/entropy.h> 23 1.2.2.2 pgoyette #include <isc/hash.h> 24 1.2.2.2 pgoyette #include <isc/mem.h> 25 1.2.2.2 pgoyette #include <isc/print.h> 26 1.2.2.2 pgoyette #include <isc/string.h> 27 1.2.2.2 pgoyette #include <isc/util.h> 28 1.2.2.2 pgoyette 29 1.2.2.2 pgoyette #include <dns/callbacks.h> 30 1.2.2.2 pgoyette #include <dns/db.h> 31 1.2.2.2 pgoyette #include <dns/dbiterator.h> 32 1.2.2.2 pgoyette #include <dns/ds.h> 33 1.2.2.2 pgoyette #include <dns/fixedname.h> 34 1.2.2.2 pgoyette #include <dns/keyvalues.h> 35 1.2.2.2 pgoyette #include <dns/log.h> 36 1.2.2.2 pgoyette #include <dns/master.h> 37 1.2.2.2 pgoyette #include <dns/name.h> 38 1.2.2.2 pgoyette #include <dns/rdata.h> 39 1.2.2.2 pgoyette #include <dns/rdataclass.h> 40 1.2.2.2 pgoyette #include <dns/rdataset.h> 41 1.2.2.2 pgoyette #include <dns/rdatasetiter.h> 42 1.2.2.2 pgoyette #include <dns/rdatatype.h> 43 1.2.2.2 pgoyette #include <dns/result.h> 44 1.2.2.2 pgoyette 45 1.2.2.2 pgoyette #include <dst/dst.h> 46 1.2.2.2 pgoyette 47 1.2.2.2 pgoyette #ifdef PKCS11CRYPTO 48 1.2.2.2 pgoyette #include <pk11/result.h> 49 1.2.2.2 pgoyette #endif 50 1.2.2.2 pgoyette 51 1.2.2.2 pgoyette #include "dnssectool.h" 52 1.2.2.2 pgoyette 53 1.2.2.2 pgoyette #ifndef PATH_MAX 54 1.2.2.2 pgoyette #define PATH_MAX 1024 /* AIX, WIN32, and others don't define this. */ 55 1.2.2.2 pgoyette #endif 56 1.2.2.2 pgoyette 57 1.2.2.2 pgoyette const char *program = "dnssec-dsfromkey"; 58 1.2.2.2 pgoyette int verbose; 59 1.2.2.2 pgoyette 60 1.2.2.2 pgoyette static dns_rdataclass_t rdclass; 61 1.2.2.2 pgoyette static dns_fixedname_t fixed; 62 1.2.2.2 pgoyette static dns_name_t *name = NULL; 63 1.2.2.2 pgoyette static isc_mem_t *mctx = NULL; 64 1.2.2.2 pgoyette static isc_uint32_t ttl; 65 1.2.2.2 pgoyette static isc_boolean_t emitttl = ISC_FALSE; 66 1.2.2.2 pgoyette 67 1.2.2.2 pgoyette static isc_result_t 68 1.2.2.2 pgoyette initname(char *setname) { 69 1.2.2.2 pgoyette isc_result_t result; 70 1.2.2.2 pgoyette isc_buffer_t buf; 71 1.2.2.2 pgoyette 72 1.2.2.2 pgoyette name = dns_fixedname_initname(&fixed); 73 1.2.2.2 pgoyette 74 1.2.2.2 pgoyette isc_buffer_init(&buf, setname, strlen(setname)); 75 1.2.2.2 pgoyette isc_buffer_add(&buf, strlen(setname)); 76 1.2.2.2 pgoyette result = dns_name_fromtext(name, &buf, dns_rootname, 0, NULL); 77 1.2.2.2 pgoyette return (result); 78 1.2.2.2 pgoyette } 79 1.2.2.2 pgoyette 80 1.2.2.2 pgoyette static void 81 1.2.2.2 pgoyette db_load_from_stream(dns_db_t *db, FILE *fp) { 82 1.2.2.2 pgoyette isc_result_t result; 83 1.2.2.2 pgoyette dns_rdatacallbacks_t callbacks; 84 1.2.2.2 pgoyette 85 1.2.2.2 pgoyette dns_rdatacallbacks_init(&callbacks); 86 1.2.2.2 pgoyette result = dns_db_beginload(db, &callbacks); 87 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 88 1.2.2.2 pgoyette fatal("dns_db_beginload failed: %s", isc_result_totext(result)); 89 1.2.2.2 pgoyette 90 1.2.2.2 pgoyette result = dns_master_loadstream(fp, name, name, rdclass, 0, 91 1.2.2.2 pgoyette &callbacks, mctx); 92 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 93 1.2.2.2 pgoyette fatal("can't load from input: %s", isc_result_totext(result)); 94 1.2.2.2 pgoyette 95 1.2.2.2 pgoyette result = dns_db_endload(db, &callbacks); 96 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 97 1.2.2.2 pgoyette fatal("dns_db_endload failed: %s", isc_result_totext(result)); 98 1.2.2.2 pgoyette } 99 1.2.2.2 pgoyette 100 1.2.2.2 pgoyette static isc_result_t 101 1.2.2.2 pgoyette loadset(const char *filename, dns_rdataset_t *rdataset) { 102 1.2.2.2 pgoyette isc_result_t result; 103 1.2.2.2 pgoyette dns_db_t *db = NULL; 104 1.2.2.2 pgoyette dns_dbnode_t *node = NULL; 105 1.2.2.2 pgoyette char setname[DNS_NAME_FORMATSIZE]; 106 1.2.2.2 pgoyette 107 1.2.2.2 pgoyette dns_name_format(name, setname, sizeof(setname)); 108 1.2.2.2 pgoyette 109 1.2.2.2 pgoyette result = dns_db_create(mctx, "rbt", name, dns_dbtype_zone, 110 1.2.2.2 pgoyette rdclass, 0, NULL, &db); 111 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 112 1.2.2.2 pgoyette fatal("can't create database"); 113 1.2.2.2 pgoyette 114 1.2.2.2 pgoyette if (strcmp(filename, "-") == 0) { 115 1.2.2.2 pgoyette db_load_from_stream(db, stdin); 116 1.2.2.2 pgoyette filename = "input"; 117 1.2.2.2 pgoyette } else { 118 1.2.2.2 pgoyette result = dns_db_load(db, filename); 119 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS && result != DNS_R_SEENINCLUDE) 120 1.2.2.2 pgoyette fatal("can't load %s: %s", filename, 121 1.2.2.2 pgoyette isc_result_totext(result)); 122 1.2.2.2 pgoyette } 123 1.2.2.2 pgoyette 124 1.2.2.2 pgoyette result = dns_db_findnode(db, name, ISC_FALSE, &node); 125 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 126 1.2.2.2 pgoyette fatal("can't find %s node in %s", setname, filename); 127 1.2.2.2 pgoyette 128 1.2.2.2 pgoyette result = dns_db_findrdataset(db, node, NULL, dns_rdatatype_dnskey, 129 1.2.2.2 pgoyette 0, 0, rdataset, NULL); 130 1.2.2.2 pgoyette 131 1.2.2.2 pgoyette if (result == ISC_R_NOTFOUND) 132 1.2.2.2 pgoyette fatal("no DNSKEY RR for %s in %s", setname, filename); 133 1.2.2.2 pgoyette else if (result != ISC_R_SUCCESS) 134 1.2.2.2 pgoyette fatal("dns_db_findrdataset"); 135 1.2.2.2 pgoyette 136 1.2.2.2 pgoyette if (node != NULL) 137 1.2.2.2 pgoyette dns_db_detachnode(db, &node); 138 1.2.2.2 pgoyette if (db != NULL) 139 1.2.2.2 pgoyette dns_db_detach(&db); 140 1.2.2.2 pgoyette return (result); 141 1.2.2.2 pgoyette } 142 1.2.2.2 pgoyette 143 1.2.2.2 pgoyette static isc_result_t 144 1.2.2.2 pgoyette loadkeyset(char *dirname, dns_rdataset_t *rdataset) { 145 1.2.2.2 pgoyette isc_result_t result; 146 1.2.2.2 pgoyette char filename[PATH_MAX + 1]; 147 1.2.2.2 pgoyette isc_buffer_t buf; 148 1.2.2.2 pgoyette 149 1.2.2.2 pgoyette dns_rdataset_init(rdataset); 150 1.2.2.2 pgoyette 151 1.2.2.2 pgoyette isc_buffer_init(&buf, filename, sizeof(filename)); 152 1.2.2.2 pgoyette if (dirname != NULL) { 153 1.2.2.2 pgoyette /* allow room for a trailing slash */ 154 1.2.2.2 pgoyette if (strlen(dirname) >= isc_buffer_availablelength(&buf)) 155 1.2.2.2 pgoyette return (ISC_R_NOSPACE); 156 1.2.2.2 pgoyette isc_buffer_putstr(&buf, dirname); 157 1.2.2.2 pgoyette if (dirname[strlen(dirname) - 1] != '/') 158 1.2.2.2 pgoyette isc_buffer_putstr(&buf, "/"); 159 1.2.2.2 pgoyette } 160 1.2.2.2 pgoyette 161 1.2.2.2 pgoyette if (isc_buffer_availablelength(&buf) < 7) 162 1.2.2.2 pgoyette return (ISC_R_NOSPACE); 163 1.2.2.2 pgoyette isc_buffer_putstr(&buf, "keyset-"); 164 1.2.2.2 pgoyette 165 1.2.2.2 pgoyette result = dns_name_tofilenametext(name, ISC_FALSE, &buf); 166 1.2.2.2 pgoyette check_result(result, "dns_name_tofilenametext()"); 167 1.2.2.2 pgoyette if (isc_buffer_availablelength(&buf) == 0) 168 1.2.2.2 pgoyette return (ISC_R_NOSPACE); 169 1.2.2.2 pgoyette isc_buffer_putuint8(&buf, 0); 170 1.2.2.2 pgoyette 171 1.2.2.2 pgoyette return (loadset(filename, rdataset)); 172 1.2.2.2 pgoyette } 173 1.2.2.2 pgoyette 174 1.2.2.2 pgoyette static void 175 1.2.2.2 pgoyette loadkey(char *filename, unsigned char *key_buf, unsigned int key_buf_size, 176 1.2.2.2 pgoyette dns_rdata_t *rdata) 177 1.2.2.2 pgoyette { 178 1.2.2.2 pgoyette isc_result_t result; 179 1.2.2.2 pgoyette dst_key_t *key = NULL; 180 1.2.2.2 pgoyette isc_buffer_t keyb; 181 1.2.2.2 pgoyette isc_region_t r; 182 1.2.2.2 pgoyette 183 1.2.2.2 pgoyette dns_rdata_init(rdata); 184 1.2.2.2 pgoyette 185 1.2.2.2 pgoyette isc_buffer_init(&keyb, key_buf, key_buf_size); 186 1.2.2.2 pgoyette 187 1.2.2.2 pgoyette result = dst_key_fromnamedfile(filename, NULL, DST_TYPE_PUBLIC, 188 1.2.2.2 pgoyette mctx, &key); 189 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 190 1.2.2.2 pgoyette fatal("can't load %s.key: %s", 191 1.2.2.2 pgoyette filename, isc_result_totext(result)); 192 1.2.2.2 pgoyette 193 1.2.2.2 pgoyette if (verbose > 2) { 194 1.2.2.2 pgoyette char keystr[DST_KEY_FORMATSIZE]; 195 1.2.2.2 pgoyette 196 1.2.2.2 pgoyette dst_key_format(key, keystr, sizeof(keystr)); 197 1.2.2.2 pgoyette fprintf(stderr, "%s: %s\n", program, keystr); 198 1.2.2.2 pgoyette } 199 1.2.2.2 pgoyette 200 1.2.2.2 pgoyette result = dst_key_todns(key, &keyb); 201 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 202 1.2.2.2 pgoyette fatal("can't decode key"); 203 1.2.2.2 pgoyette 204 1.2.2.2 pgoyette isc_buffer_usedregion(&keyb, &r); 205 1.2.2.2 pgoyette dns_rdata_fromregion(rdata, dst_key_class(key), 206 1.2.2.2 pgoyette dns_rdatatype_dnskey, &r); 207 1.2.2.2 pgoyette 208 1.2.2.2 pgoyette rdclass = dst_key_class(key); 209 1.2.2.2 pgoyette 210 1.2.2.2 pgoyette name = dns_fixedname_initname(&fixed); 211 1.2.2.2 pgoyette result = dns_name_copy(dst_key_name(key), name, NULL); 212 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 213 1.2.2.2 pgoyette fatal("can't copy name"); 214 1.2.2.2 pgoyette 215 1.2.2.2 pgoyette dst_key_free(&key); 216 1.2.2.2 pgoyette } 217 1.2.2.2 pgoyette 218 1.2.2.2 pgoyette static void 219 1.2.2.2 pgoyette logkey(dns_rdata_t *rdata) 220 1.2.2.2 pgoyette { 221 1.2.2.2 pgoyette isc_result_t result; 222 1.2.2.2 pgoyette dst_key_t *key = NULL; 223 1.2.2.2 pgoyette isc_buffer_t buf; 224 1.2.2.2 pgoyette char keystr[DST_KEY_FORMATSIZE]; 225 1.2.2.2 pgoyette 226 1.2.2.2 pgoyette isc_buffer_init(&buf, rdata->data, rdata->length); 227 1.2.2.2 pgoyette isc_buffer_add(&buf, rdata->length); 228 1.2.2.2 pgoyette result = dst_key_fromdns(name, rdclass, &buf, mctx, &key); 229 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 230 1.2.2.2 pgoyette return; 231 1.2.2.2 pgoyette 232 1.2.2.2 pgoyette dst_key_format(key, keystr, sizeof(keystr)); 233 1.2.2.2 pgoyette fprintf(stderr, "%s: %s\n", program, keystr); 234 1.2.2.2 pgoyette 235 1.2.2.2 pgoyette dst_key_free(&key); 236 1.2.2.2 pgoyette } 237 1.2.2.2 pgoyette 238 1.2.2.2 pgoyette static void 239 1.2.2.2 pgoyette emit(unsigned int dtype, isc_boolean_t showall, char *lookaside, 240 1.2.2.2 pgoyette isc_boolean_t cds, dns_rdata_t *rdata) 241 1.2.2.2 pgoyette { 242 1.2.2.2 pgoyette isc_result_t result; 243 1.2.2.2 pgoyette unsigned char buf[DNS_DS_BUFFERSIZE]; 244 1.2.2.2 pgoyette char text_buf[DST_KEY_MAXTEXTSIZE]; 245 1.2.2.2 pgoyette char name_buf[DNS_NAME_MAXWIRE]; 246 1.2.2.2 pgoyette char class_buf[10]; 247 1.2.2.2 pgoyette isc_buffer_t textb, nameb, classb; 248 1.2.2.2 pgoyette isc_region_t r; 249 1.2.2.2 pgoyette dns_rdata_t ds; 250 1.2.2.2 pgoyette dns_rdata_dnskey_t dnskey; 251 1.2.2.2 pgoyette 252 1.2.2.2 pgoyette isc_buffer_init(&textb, text_buf, sizeof(text_buf)); 253 1.2.2.2 pgoyette isc_buffer_init(&nameb, name_buf, sizeof(name_buf)); 254 1.2.2.2 pgoyette isc_buffer_init(&classb, class_buf, sizeof(class_buf)); 255 1.2.2.2 pgoyette 256 1.2.2.2 pgoyette dns_rdata_init(&ds); 257 1.2.2.2 pgoyette 258 1.2.2.2 pgoyette result = dns_rdata_tostruct(rdata, &dnskey, NULL); 259 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 260 1.2.2.2 pgoyette fatal("can't convert DNSKEY"); 261 1.2.2.2 pgoyette 262 1.2.2.2 pgoyette if ((dnskey.flags & DNS_KEYFLAG_KSK) == 0 && !showall) 263 1.2.2.2 pgoyette return; 264 1.2.2.2 pgoyette 265 1.2.2.2 pgoyette result = dns_ds_buildrdata(name, rdata, dtype, buf, &ds); 266 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 267 1.2.2.2 pgoyette fatal("can't build record"); 268 1.2.2.2 pgoyette 269 1.2.2.2 pgoyette result = dns_name_totext(name, ISC_FALSE, &nameb); 270 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 271 1.2.2.2 pgoyette fatal("can't print name"); 272 1.2.2.2 pgoyette 273 1.2.2.2 pgoyette /* Add lookaside origin, if set */ 274 1.2.2.2 pgoyette if (lookaside != NULL) { 275 1.2.2.2 pgoyette if (isc_buffer_availablelength(&nameb) < strlen(lookaside)) 276 1.2.2.2 pgoyette fatal("DLV origin '%s' is too long", lookaside); 277 1.2.2.2 pgoyette isc_buffer_putstr(&nameb, lookaside); 278 1.2.2.2 pgoyette if (lookaside[strlen(lookaside) - 1] != '.') { 279 1.2.2.2 pgoyette if (isc_buffer_availablelength(&nameb) < 1) 280 1.2.2.2 pgoyette fatal("DLV origin '%s' is too long", lookaside); 281 1.2.2.2 pgoyette isc_buffer_putstr(&nameb, "."); 282 1.2.2.2 pgoyette } 283 1.2.2.2 pgoyette } 284 1.2.2.2 pgoyette 285 1.2.2.2 pgoyette result = dns_rdata_tofmttext(&ds, (dns_name_t *) NULL, 0, 0, 0, "", 286 1.2.2.2 pgoyette &textb); 287 1.2.2.2 pgoyette 288 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 289 1.2.2.2 pgoyette fatal("can't print rdata"); 290 1.2.2.2 pgoyette 291 1.2.2.2 pgoyette result = dns_rdataclass_totext(rdclass, &classb); 292 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 293 1.2.2.2 pgoyette fatal("can't print class"); 294 1.2.2.2 pgoyette 295 1.2.2.2 pgoyette isc_buffer_usedregion(&nameb, &r); 296 1.2.2.2 pgoyette printf("%.*s ", (int)r.length, r.base); 297 1.2.2.2 pgoyette 298 1.2.2.2 pgoyette if (emitttl) 299 1.2.2.2 pgoyette printf("%u ", ttl); 300 1.2.2.2 pgoyette 301 1.2.2.2 pgoyette isc_buffer_usedregion(&classb, &r); 302 1.2.2.2 pgoyette printf("%.*s", (int)r.length, r.base); 303 1.2.2.2 pgoyette 304 1.2.2.2 pgoyette if (lookaside == NULL) { 305 1.2.2.2 pgoyette if (cds) 306 1.2.2.2 pgoyette printf(" CDS "); 307 1.2.2.2 pgoyette else 308 1.2.2.2 pgoyette printf(" DS "); 309 1.2.2.2 pgoyette } else 310 1.2.2.2 pgoyette printf(" DLV "); 311 1.2.2.2 pgoyette 312 1.2.2.2 pgoyette isc_buffer_usedregion(&textb, &r); 313 1.2.2.2 pgoyette printf("%.*s\n", (int)r.length, r.base); 314 1.2.2.2 pgoyette } 315 1.2.2.2 pgoyette 316 1.2.2.2 pgoyette ISC_PLATFORM_NORETURN_PRE static void 317 1.2.2.2 pgoyette usage(void) ISC_PLATFORM_NORETURN_POST; 318 1.2.2.2 pgoyette 319 1.2.2.2 pgoyette static void 320 1.2.2.2 pgoyette usage(void) { 321 1.2.2.2 pgoyette fprintf(stderr, "Usage:\n"); 322 1.2.2.2 pgoyette fprintf(stderr, " %s options [-K dir] keyfile\n\n", program); 323 1.2.2.2 pgoyette fprintf(stderr, " %s options [-K dir] [-c class] -s dnsname\n\n", 324 1.2.2.2 pgoyette program); 325 1.2.2.2 pgoyette fprintf(stderr, " %s options -f zonefile (as zone name)\n\n", program); 326 1.2.2.2 pgoyette fprintf(stderr, " %s options -f zonefile zonename\n\n", program); 327 1.2.2.2 pgoyette fprintf(stderr, "Version: %s\n", VERSION); 328 1.2.2.2 pgoyette fprintf(stderr, "Options:\n"); 329 1.2.2.2 pgoyette fprintf(stderr, " -v <verbose level>\n"); 330 1.2.2.2 pgoyette fprintf(stderr, " -V: print version information\n"); 331 1.2.2.2 pgoyette fprintf(stderr, " -K <directory>: directory in which to find " 332 1.2.2.2 pgoyette "key file or keyset file\n"); 333 1.2.2.2 pgoyette fprintf(stderr, " -a algorithm: digest algorithm " 334 1.2.2.2 pgoyette "(SHA-1, SHA-256, GOST or SHA-384)\n"); 335 1.2.2.2 pgoyette fprintf(stderr, " -1: use SHA-1\n"); 336 1.2.2.2 pgoyette fprintf(stderr, " -2: use SHA-256\n"); 337 1.2.2.2 pgoyette fprintf(stderr, " -C: print CDS record\n"); 338 1.2.2.2 pgoyette fprintf(stderr, " -l: add lookaside zone and print DLV records\n"); 339 1.2.2.2 pgoyette fprintf(stderr, " -s: read keyset from keyset-<dnsname> file\n"); 340 1.2.2.2 pgoyette fprintf(stderr, " -c class: rdata class for DS set (default: IN)\n"); 341 1.2.2.2 pgoyette fprintf(stderr, " -T TTL\n"); 342 1.2.2.2 pgoyette fprintf(stderr, " -f file: read keyset from zone file\n"); 343 1.2.2.2 pgoyette fprintf(stderr, " -A: when used with -f, " 344 1.2.2.2 pgoyette "include all keys in DS set, not just KSKs\n"); 345 1.2.2.2 pgoyette fprintf(stderr, "Output: DS or DLV RRs\n"); 346 1.2.2.2 pgoyette 347 1.2.2.2 pgoyette exit (-1); 348 1.2.2.2 pgoyette } 349 1.2.2.2 pgoyette 350 1.2.2.2 pgoyette int 351 1.2.2.2 pgoyette main(int argc, char **argv) { 352 1.2.2.2 pgoyette char *classname = NULL; 353 1.2.2.2 pgoyette char *filename = NULL, *dir = NULL, *namestr; 354 1.2.2.2 pgoyette char *lookaside = NULL; 355 1.2.2.2 pgoyette char *endp; 356 1.2.2.2 pgoyette int ch; 357 1.2.2.2 pgoyette unsigned int dtype = DNS_DSDIGEST_SHA1; 358 1.2.2.2 pgoyette isc_boolean_t cds = ISC_FALSE; 359 1.2.2.2 pgoyette isc_boolean_t both = ISC_TRUE; 360 1.2.2.2 pgoyette isc_boolean_t usekeyset = ISC_FALSE; 361 1.2.2.2 pgoyette isc_boolean_t showall = ISC_FALSE; 362 1.2.2.2 pgoyette isc_result_t result; 363 1.2.2.2 pgoyette isc_log_t *log = NULL; 364 1.2.2.2 pgoyette isc_entropy_t *ectx = NULL; 365 1.2.2.2 pgoyette dns_rdataset_t rdataset; 366 1.2.2.2 pgoyette dns_rdata_t rdata; 367 1.2.2.2 pgoyette 368 1.2.2.2 pgoyette dns_rdata_init(&rdata); 369 1.2.2.2 pgoyette 370 1.2.2.2 pgoyette if (argc == 1) 371 1.2.2.2 pgoyette usage(); 372 1.2.2.2 pgoyette 373 1.2.2.2 pgoyette result = isc_mem_create(0, 0, &mctx); 374 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 375 1.2.2.2 pgoyette fatal("out of memory"); 376 1.2.2.2 pgoyette 377 1.2.2.2 pgoyette #ifdef PKCS11CRYPTO 378 1.2.2.2 pgoyette pk11_result_register(); 379 1.2.2.2 pgoyette #endif 380 1.2.2.2 pgoyette dns_result_register(); 381 1.2.2.2 pgoyette 382 1.2.2.2 pgoyette isc_commandline_errprint = ISC_FALSE; 383 1.2.2.2 pgoyette 384 1.2.2.2 pgoyette #define OPTIONS "12Aa:Cc:d:Ff:K:l:sT:v:hV" 385 1.2.2.2 pgoyette while ((ch = isc_commandline_parse(argc, argv, OPTIONS)) != -1) { 386 1.2.2.2 pgoyette switch (ch) { 387 1.2.2.2 pgoyette case '1': 388 1.2.2.2 pgoyette dtype = DNS_DSDIGEST_SHA1; 389 1.2.2.2 pgoyette both = ISC_FALSE; 390 1.2.2.2 pgoyette break; 391 1.2.2.2 pgoyette case '2': 392 1.2.2.2 pgoyette dtype = DNS_DSDIGEST_SHA256; 393 1.2.2.2 pgoyette both = ISC_FALSE; 394 1.2.2.2 pgoyette break; 395 1.2.2.2 pgoyette case 'A': 396 1.2.2.2 pgoyette showall = ISC_TRUE; 397 1.2.2.2 pgoyette break; 398 1.2.2.2 pgoyette case 'a': 399 1.2.2.2 pgoyette dtype = strtodsdigest(isc_commandline_argument); 400 1.2.2.2 pgoyette both = ISC_FALSE; 401 1.2.2.2 pgoyette break; 402 1.2.2.2 pgoyette case 'C': 403 1.2.2.2 pgoyette if (lookaside != NULL) 404 1.2.2.2 pgoyette fatal("lookaside and CDS are mutually" 405 1.2.2.2 pgoyette " exclusive"); 406 1.2.2.2 pgoyette cds = ISC_TRUE; 407 1.2.2.2 pgoyette break; 408 1.2.2.2 pgoyette case 'c': 409 1.2.2.2 pgoyette classname = isc_commandline_argument; 410 1.2.2.2 pgoyette break; 411 1.2.2.2 pgoyette case 'd': 412 1.2.2.2 pgoyette fprintf(stderr, "%s: the -d option is deprecated; " 413 1.2.2.2 pgoyette "use -K\n", program); 414 1.2.2.2 pgoyette /* fall through */ 415 1.2.2.2 pgoyette case 'K': 416 1.2.2.2 pgoyette dir = isc_commandline_argument; 417 1.2.2.2 pgoyette if (strlen(dir) == 0U) 418 1.2.2.2 pgoyette fatal("directory must be non-empty string"); 419 1.2.2.2 pgoyette break; 420 1.2.2.2 pgoyette case 'f': 421 1.2.2.2 pgoyette filename = isc_commandline_argument; 422 1.2.2.2 pgoyette break; 423 1.2.2.2 pgoyette case 'l': 424 1.2.2.2 pgoyette if (cds) 425 1.2.2.2 pgoyette fatal("lookaside and CDS are mutually" 426 1.2.2.2 pgoyette " exclusive"); 427 1.2.2.2 pgoyette lookaside = isc_commandline_argument; 428 1.2.2.2 pgoyette if (strlen(lookaside) == 0U) 429 1.2.2.2 pgoyette fatal("lookaside must be a non-empty string"); 430 1.2.2.2 pgoyette break; 431 1.2.2.2 pgoyette case 's': 432 1.2.2.2 pgoyette usekeyset = ISC_TRUE; 433 1.2.2.2 pgoyette break; 434 1.2.2.2 pgoyette case 'T': 435 1.2.2.2 pgoyette emitttl = ISC_TRUE; 436 1.2.2.2 pgoyette ttl = strtottl(isc_commandline_argument); 437 1.2.2.2 pgoyette break; 438 1.2.2.2 pgoyette case 'v': 439 1.2.2.2 pgoyette verbose = strtol(isc_commandline_argument, &endp, 0); 440 1.2.2.2 pgoyette if (*endp != '\0') 441 1.2.2.2 pgoyette fatal("-v must be followed by a number"); 442 1.2.2.2 pgoyette break; 443 1.2.2.2 pgoyette case 'F': 444 1.2.2.2 pgoyette /* Reserved for FIPS mode */ 445 1.2.2.2 pgoyette /* FALLTHROUGH */ 446 1.2.2.2 pgoyette case '?': 447 1.2.2.2 pgoyette if (isc_commandline_option != '?') 448 1.2.2.2 pgoyette fprintf(stderr, "%s: invalid argument -%c\n", 449 1.2.2.2 pgoyette program, isc_commandline_option); 450 1.2.2.2 pgoyette /* FALLTHROUGH */ 451 1.2.2.2 pgoyette case 'h': 452 1.2.2.2 pgoyette /* Does not return. */ 453 1.2.2.2 pgoyette usage(); 454 1.2.2.2 pgoyette 455 1.2.2.2 pgoyette case 'V': 456 1.2.2.2 pgoyette /* Does not return. */ 457 1.2.2.2 pgoyette version(program); 458 1.2.2.2 pgoyette 459 1.2.2.2 pgoyette default: 460 1.2.2.2 pgoyette fprintf(stderr, "%s: unhandled option -%c\n", 461 1.2.2.2 pgoyette program, isc_commandline_option); 462 1.2.2.2 pgoyette exit(1); 463 1.2.2.2 pgoyette } 464 1.2.2.2 pgoyette } 465 1.2.2.2 pgoyette 466 1.2.2.2 pgoyette rdclass = strtoclass(classname); 467 1.2.2.2 pgoyette 468 1.2.2.2 pgoyette if (usekeyset && filename != NULL) 469 1.2.2.2 pgoyette fatal("cannot use both -s and -f"); 470 1.2.2.2 pgoyette 471 1.2.2.2 pgoyette /* When not using -f, -A is implicit */ 472 1.2.2.2 pgoyette if (filename == NULL) 473 1.2.2.2 pgoyette showall = ISC_TRUE; 474 1.2.2.2 pgoyette 475 1.2.2.2 pgoyette if (argc < isc_commandline_index + 1 && filename == NULL) 476 1.2.2.2 pgoyette fatal("the key file name was not specified"); 477 1.2.2.2 pgoyette if (argc > isc_commandline_index + 1) 478 1.2.2.2 pgoyette fatal("extraneous arguments"); 479 1.2.2.2 pgoyette 480 1.2.2.2 pgoyette if (ectx == NULL) 481 1.2.2.2 pgoyette setup_entropy(mctx, NULL, &ectx); 482 1.2.2.2 pgoyette result = dst_lib_init(mctx, ectx, 483 1.2.2.2 pgoyette ISC_ENTROPY_BLOCKING | ISC_ENTROPY_GOODONLY); 484 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 485 1.2.2.2 pgoyette fatal("could not initialize dst: %s", 486 1.2.2.2 pgoyette isc_result_totext(result)); 487 1.2.2.2 pgoyette result = isc_hash_create(mctx, ectx, DNS_NAME_MAXWIRE); 488 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 489 1.2.2.2 pgoyette fatal("could not initialize hash"); 490 1.2.2.2 pgoyette isc_entropy_stopcallbacksources(ectx); 491 1.2.2.2 pgoyette 492 1.2.2.2 pgoyette setup_logging(mctx, &log); 493 1.2.2.2 pgoyette 494 1.2.2.2 pgoyette dns_rdataset_init(&rdataset); 495 1.2.2.2 pgoyette 496 1.2.2.2 pgoyette if (usekeyset || filename != NULL) { 497 1.2.2.2 pgoyette if (argc < isc_commandline_index + 1 && filename != NULL) { 498 1.2.2.2 pgoyette /* using zone name as the zone file name */ 499 1.2.2.2 pgoyette namestr = filename; 500 1.2.2.2 pgoyette } else 501 1.2.2.2 pgoyette namestr = argv[isc_commandline_index]; 502 1.2.2.2 pgoyette 503 1.2.2.2 pgoyette result = initname(namestr); 504 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 505 1.2.2.2 pgoyette fatal("could not initialize name %s", namestr); 506 1.2.2.2 pgoyette 507 1.2.2.2 pgoyette if (usekeyset) 508 1.2.2.2 pgoyette result = loadkeyset(dir, &rdataset); 509 1.2.2.2 pgoyette else 510 1.2.2.2 pgoyette result = loadset(filename, &rdataset); 511 1.2.2.2 pgoyette 512 1.2.2.2 pgoyette if (result != ISC_R_SUCCESS) 513 1.2.2.2 pgoyette fatal("could not load DNSKEY set: %s\n", 514 1.2.2.2 pgoyette isc_result_totext(result)); 515 1.2.2.2 pgoyette 516 1.2.2.2 pgoyette for (result = dns_rdataset_first(&rdataset); 517 1.2.2.2 pgoyette result == ISC_R_SUCCESS; 518 1.2.2.2 pgoyette result = dns_rdataset_next(&rdataset)) { 519 1.2.2.2 pgoyette dns_rdata_init(&rdata); 520 1.2.2.2 pgoyette dns_rdataset_current(&rdataset, &rdata); 521 1.2.2.2 pgoyette 522 1.2.2.2 pgoyette if (verbose > 2) 523 1.2.2.2 pgoyette logkey(&rdata); 524 1.2.2.2 pgoyette 525 1.2.2.2 pgoyette if (both) { 526 1.2.2.2 pgoyette emit(DNS_DSDIGEST_SHA1, showall, lookaside, 527 1.2.2.2 pgoyette cds, &rdata); 528 1.2.2.2 pgoyette emit(DNS_DSDIGEST_SHA256, showall, lookaside, 529 1.2.2.2 pgoyette cds, &rdata); 530 1.2.2.2 pgoyette } else 531 1.2.2.2 pgoyette emit(dtype, showall, lookaside, cds, &rdata); 532 1.2.2.2 pgoyette } 533 1.2.2.2 pgoyette } else { 534 1.2.2.2 pgoyette unsigned char key_buf[DST_KEY_MAXSIZE]; 535 1.2.2.2 pgoyette 536 1.2.2.2 pgoyette loadkey(argv[isc_commandline_index], key_buf, 537 1.2.2.2 pgoyette DST_KEY_MAXSIZE, &rdata); 538 1.2.2.2 pgoyette 539 1.2.2.2 pgoyette if (both) { 540 1.2.2.2 pgoyette emit(DNS_DSDIGEST_SHA1, showall, lookaside, cds, 541 1.2.2.2 pgoyette &rdata); 542 1.2.2.2 pgoyette emit(DNS_DSDIGEST_SHA256, showall, lookaside, cds, 543 1.2.2.2 pgoyette &rdata); 544 1.2.2.2 pgoyette } else 545 1.2.2.2 pgoyette emit(dtype, showall, lookaside, cds, &rdata); 546 1.2.2.2 pgoyette } 547 1.2.2.2 pgoyette 548 1.2.2.2 pgoyette if (dns_rdataset_isassociated(&rdataset)) 549 1.2.2.2 pgoyette dns_rdataset_disassociate(&rdataset); 550 1.2.2.2 pgoyette cleanup_logging(&log); 551 1.2.2.2 pgoyette isc_hash_destroy(); 552 1.2.2.2 pgoyette dst_lib_destroy(); 553 1.2.2.2 pgoyette cleanup_entropy(&ectx); 554 1.2.2.2 pgoyette dns_name_destroy(); 555 1.2.2.2 pgoyette if (verbose > 10) 556 1.2.2.2 pgoyette isc_mem_stats(mctx, stdout); 557 1.2.2.2 pgoyette isc_mem_destroy(&mctx); 558 1.2.2.2 pgoyette 559 1.2.2.2 pgoyette fflush(stdout); 560 1.2.2.2 pgoyette if (ferror(stdout)) { 561 1.2.2.2 pgoyette fprintf(stderr, "write error\n"); 562 1.2.2.2 pgoyette return (1); 563 1.2.2.2 pgoyette } else 564 1.2.2.2 pgoyette return (0); 565 1.2.2.2 pgoyette } 566
Indexes created Mon Oct 26 00:26:21 UTC 2026