1 /* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
2 /* kadmin/dbutil/kdb5_stash.c - Store the master database key in a file */
3 /*
4 * Copyright 1990 by the Massachusetts Institute of Technology.
5 * All Rights Reserved.
6 *
7 * Export of this software from the United States of America may
8 * require a specific license from the United States Government.
9 * It is the responsibility of any person or organization contemplating
10 * export to obtain such a license before exporting.
11 *
12 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
13 * distribute this software and its documentation for any purpose and
14 * without fee is hereby granted, provided that the above copyright
15 * notice appear in all copies and that both that copyright notice and
16 * this permission notice appear in supporting documentation, and that
17 * the name of M.I.T. not be used in advertising or publicity pertaining
18 * to distribution of the software without specific, written prior
19 * permission. Furthermore if you modify this software you must label
20 * your software as modified software and not distribute it in such a
21 * fashion that it might be confused with the original M.I.T. software.
22 * M.I.T. makes no representations about the suitability of
23 * this software for any purpose. It is provided "as is" without express
24 * or implied warranty.
25 */
26 /*
27 * Copyright (C) 1998 by the FundsXpress, INC.
28 *
29 * All rights reserved.
30 *
31 * Export of this software from the United States of America may require
32 * a specific license from the United States Government. It is the
33 * responsibility of any person or organization contemplating export to
34 * obtain such a license before exporting.
35 *
36 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
37 * distribute this software and its documentation for any purpose and
38 * without fee is hereby granted, provided that the above copyright
39 * notice appear in all copies and that both that copyright notice and
40 * this permission notice appear in supporting documentation, and that
41 * the name of FundsXpress. not be used in advertising or publicity pertaining
42 * to distribution of the software without specific, written prior
43 * permission. FundsXpress makes no representations about the suitability of
44 * this software for any purpose. It is provided "as is" without express
45 * or implied warranty.
46 *
47 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
48 * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
49 * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
50 */
51
52 #include "k5-int.h"
53 #include "com_err.h"
54 #include <kadm5/admin.h>
55 #include <stdio.h>
56 #include "kdb5_util.h"
57
58 extern krb5_keyblock master_keyblock;
59 extern krb5_principal master_princ;
60 extern kadm5_config_params global_params;
61
62 extern int exit_status;
63 extern int close_policy_db;
64
65 void
kdb5_stash(argc,argv)66 kdb5_stash(argc, argv)
67 int argc;
68 char *argv[];
69 {
70 extern char *optarg;
71 extern int optind;
72 int optchar;
73 krb5_error_code retval;
74 char *keyfile = 0;
75 krb5_kvno mkey_kvno;
76
77 keyfile = global_params.stash_file;
78
79 optind = 1;
80 while ((optchar = getopt(argc, argv, "f:")) != -1) {
81 switch(optchar) {
82 case 'f':
83 keyfile = optarg;
84 break;
85 case '?':
86 default:
87 usage();
88 return;
89 }
90 }
91
92 if (!krb5_c_valid_enctype(master_keyblock.enctype)) {
93 char tmp[32];
94 if (krb5_enctype_to_name(master_keyblock.enctype, FALSE,
95 tmp, sizeof(tmp)))
96 com_err(progname, KRB5_PROG_KEYTYPE_NOSUPP,
97 _("while setting up enctype %d"), master_keyblock.enctype);
98 else
99 com_err(progname, KRB5_PROG_KEYTYPE_NOSUPP, "%s", tmp);
100 exit_status++; return;
101 }
102
103 if (global_params.mask & KADM5_CONFIG_KVNO)
104 mkey_kvno = global_params.kvno; /* user specified */
105 else
106 mkey_kvno = IGNORE_VNO; /* use whatever krb5_db_fetch_mkey finds */
107
108 if (!valid_master_key) {
109 /* TRUE here means read the keyboard, but only once */
110 retval = krb5_db_fetch_mkey(util_context, master_princ,
111 master_keyblock.enctype,
112 TRUE, FALSE, (char *) NULL,
113 &mkey_kvno,
114 NULL, &master_keyblock);
115 if (retval) {
116 com_err(progname, retval, _("while reading master key"));
117 exit_status++; return;
118 }
119
120 retval = krb5_db_fetch_mkey_list(util_context, master_princ,
121 &master_keyblock);
122 if (retval) {
123 com_err(progname, retval, _("while getting master key list"));
124 exit_status++; return;
125 }
126 } else {
127 printf(_("Using existing stashed keys to update stash file.\n"));
128 }
129
130 retval = krb5_db_store_master_key_list(util_context, keyfile, master_princ,
131 NULL);
132 if (retval) {
133 com_err(progname, retval, _("while storing key"));
134 exit_status++; return;
135 }
136
137 exit_status = 0;
138 return;
139 }
140