2005-06-08 17:28:20 +00:00
|
|
|
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
|
|
/* vim:set ts=2 sw=2 sts=2 et cindent: */
|
|
|
|
/* ***** BEGIN LICENSE BLOCK *****
|
|
|
|
* Version: MPL 1.1/GPL 2.0/LGPL 2.1
|
|
|
|
*
|
|
|
|
* The contents of this file are subject to the Mozilla Public License Version
|
|
|
|
* 1.1 (the "License"); you may not use this file except in compliance with
|
|
|
|
* the License. You may obtain a copy of the License at
|
|
|
|
* http://www.mozilla.org/MPL/
|
|
|
|
*
|
|
|
|
* Software distributed under the License is distributed on an "AS IS" basis,
|
|
|
|
* WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
|
|
* for the specific language governing rights and limitations under the
|
|
|
|
* License.
|
|
|
|
*
|
|
|
|
* The Original Code is Mozilla Archive code.
|
|
|
|
*
|
|
|
|
* The Initial Developer of the Original Code is Google Inc.
|
|
|
|
* Portions created by the Initial Developer are Copyright (C) 2005
|
|
|
|
* the Initial Developer. All Rights Reserved.
|
|
|
|
*
|
|
|
|
* Contributor(s):
|
|
|
|
* Darin Fisher <darin@meer.net>
|
|
|
|
*
|
|
|
|
* Alternatively, the contents of this file may be used under the terms of
|
|
|
|
* either the GNU General Public License Version 2 or later (the "GPL"), or
|
|
|
|
* the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
|
|
|
|
* in which case the provisions of the GPL or the LGPL are applicable instead
|
|
|
|
* of those above. If you wish to allow use of your version of this file only
|
|
|
|
* under the terms of either the GPL or the LGPL, and not to allow others to
|
|
|
|
* use your version of this file under the terms of the MPL, indicate your
|
|
|
|
* decision by deleting the provisions above and replace them with the notice
|
|
|
|
* and other provisions required by the GPL or the LGPL. If you do not delete
|
|
|
|
* the provisions above, a recipient may use your version of this file under
|
|
|
|
* the terms of any one of the MPL, the GPL or the LGPL.
|
|
|
|
*
|
|
|
|
* ***** END LICENSE BLOCK ***** */
|
|
|
|
|
|
|
|
#include <stdio.h>
|
2012-02-24 21:29:41 +00:00
|
|
|
#include <stdlib.h>
|
2005-06-08 17:28:20 +00:00
|
|
|
#include "mar.h"
|
2012-02-24 21:29:41 +00:00
|
|
|
#include "mar_cmdline.h"
|
2005-06-08 17:28:20 +00:00
|
|
|
|
2005-06-22 00:26:29 +00:00
|
|
|
#ifdef XP_WIN
|
2012-02-24 21:29:41 +00:00
|
|
|
#include <windows.h>
|
2005-06-22 00:26:29 +00:00
|
|
|
#include <direct.h>
|
|
|
|
#define chdir _chdir
|
|
|
|
#else
|
|
|
|
#include <unistd.h>
|
|
|
|
#endif
|
|
|
|
|
2012-02-24 21:29:41 +00:00
|
|
|
#if !defined(NO_SIGN_VERIFY) && (!defined(XP_WIN) || defined(MAR_NSS))
|
|
|
|
int NSSInitCryptoContext(const char *NSSConfigDir);
|
|
|
|
#endif
|
|
|
|
|
|
|
|
int mar_repackage_and_sign(const char *NSSConfigDir,
|
|
|
|
const char *certName,
|
|
|
|
const char *src,
|
|
|
|
const char * dest);
|
|
|
|
|
2005-06-08 17:28:20 +00:00
|
|
|
static void print_usage() {
|
2012-02-24 21:29:41 +00:00
|
|
|
printf("usage:\n");
|
|
|
|
printf(" mar [-C workingDir] {-c|-x|-t} archive.mar [files...]\n");
|
|
|
|
#ifndef NO_SIGN_VERIFY
|
|
|
|
printf(" mar [-C workingDir] -d NSSConfigDir -n certname -s "
|
|
|
|
"archive.mar out_signed_archive.mar\n");
|
|
|
|
|
|
|
|
#if defined(XP_WIN) && !defined(MAR_NSS)
|
|
|
|
printf(" mar [-C workingDir] -D DERFilePath -v signed_archive.mar\n");
|
|
|
|
#else
|
|
|
|
printf(" mar [-C workingDir] -d NSSConfigDir -n certname "
|
|
|
|
"-v signed_archive.mar\n");
|
|
|
|
#endif
|
|
|
|
#endif
|
2005-06-08 17:28:20 +00:00
|
|
|
}
|
|
|
|
|
2012-02-24 21:29:41 +00:00
|
|
|
static int mar_test_callback(MarFile *mar,
|
|
|
|
const MarItem *item,
|
|
|
|
void *unused) {
|
2005-06-08 17:28:20 +00:00
|
|
|
printf("%u\t0%o\t%s\n", item->length, item->flags, item->name);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int mar_test(const char *path) {
|
|
|
|
MarFile *mar;
|
|
|
|
|
|
|
|
mar = mar_open(path);
|
|
|
|
if (!mar)
|
|
|
|
return -1;
|
|
|
|
|
|
|
|
printf("SIZE\tMODE\tNAME\n");
|
|
|
|
mar_enum_items(mar, mar_test_callback, NULL);
|
|
|
|
|
|
|
|
mar_close(mar);
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
int main(int argc, char **argv) {
|
2012-02-24 21:29:41 +00:00
|
|
|
char *NSSConfigDir = NULL;
|
|
|
|
char *certName = NULL;
|
|
|
|
#if defined(XP_WIN) && !defined(MAR_NSS) && !defined(NO_SIGN_VERIFY)
|
|
|
|
HANDLE certFile;
|
|
|
|
DWORD fileSize;
|
|
|
|
DWORD read;
|
|
|
|
char *certBuffer;
|
|
|
|
char *DERFilePath = NULL;
|
|
|
|
#endif
|
2005-06-08 17:28:20 +00:00
|
|
|
|
|
|
|
if (argc < 3) {
|
|
|
|
print_usage();
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
2012-02-24 21:29:41 +00:00
|
|
|
while (argc > 0) {
|
|
|
|
if (argv[1][0] == '-' && (argv[1][1] == 'c' ||
|
|
|
|
argv[1][1] == 't' || argv[1][1] == 'x' ||
|
|
|
|
argv[1][1] == 'v' || argv[1][1] == 's')) {
|
|
|
|
break;
|
|
|
|
/* -C workingdirectory */
|
|
|
|
} else if (argv[1][0] == '-' && argv[1][1] == 'C') {
|
|
|
|
chdir(argv[2]);
|
|
|
|
argv += 2;
|
|
|
|
argc -= 2;
|
|
|
|
}
|
|
|
|
#if defined(XP_WIN) && !defined(MAR_NSS) && !defined(NO_SIGN_VERIFY)
|
|
|
|
/* -D DERFilePath */
|
|
|
|
else if (argv[1][0] == '-' && argv[1][1] == 'D') {
|
|
|
|
DERFilePath = argv[2];
|
|
|
|
argv += 2;
|
|
|
|
argc -= 2;
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
/* -d NSSConfigdir */
|
|
|
|
else if (argv[1][0] == '-' && argv[1][1] == 'd') {
|
|
|
|
NSSConfigDir = argv[2];
|
|
|
|
argv += 2;
|
|
|
|
argc -= 2;
|
|
|
|
/* -n certName */
|
|
|
|
} else if (argv[1][0] == '-' && argv[1][1] == 'n') {
|
|
|
|
certName = argv[2];
|
|
|
|
argv += 2;
|
|
|
|
argc -= 2;
|
|
|
|
} else {
|
|
|
|
print_usage();
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (argv[1][0] != '-') {
|
|
|
|
print_usage();
|
|
|
|
return -1;
|
2005-06-22 00:26:29 +00:00
|
|
|
}
|
|
|
|
|
2005-06-08 17:28:20 +00:00
|
|
|
switch (argv[1][1]) {
|
|
|
|
case 'c':
|
|
|
|
return mar_create(argv[2], argc - 3, argv + 3);
|
|
|
|
case 't':
|
|
|
|
return mar_test(argv[2]);
|
|
|
|
case 'x':
|
|
|
|
return mar_extract(argv[2]);
|
2012-02-24 21:29:41 +00:00
|
|
|
|
|
|
|
#ifndef NO_SIGN_VERIFY
|
|
|
|
case 'v':
|
|
|
|
|
|
|
|
#if defined(XP_WIN) && !defined(MAR_NSS)
|
|
|
|
if (!DERFilePath) {
|
|
|
|
print_usage();
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
/* If the mar program was built using CryptoAPI, then read in the buffer
|
|
|
|
containing the cert from disk. */
|
|
|
|
certFile = CreateFileA(DERFilePath, GENERIC_READ,
|
|
|
|
FILE_SHARE_READ |
|
|
|
|
FILE_SHARE_WRITE |
|
|
|
|
FILE_SHARE_DELETE,
|
|
|
|
NULL,
|
|
|
|
OPEN_EXISTING,
|
|
|
|
0, NULL);
|
|
|
|
if (INVALID_HANDLE_VALUE == certFile) {
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
fileSize = GetFileSize(certFile, NULL);
|
|
|
|
certBuffer = malloc(fileSize);
|
|
|
|
if (!ReadFile(certFile, certBuffer, fileSize, &read, NULL) ||
|
|
|
|
fileSize != read) {
|
|
|
|
CloseHandle(certFile);
|
|
|
|
free(certBuffer);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
CloseHandle(certFile);
|
|
|
|
|
|
|
|
if (mar_verify_signature(argv[2], certBuffer, fileSize, NULL)) {
|
|
|
|
int oldMar = 0;
|
|
|
|
free(certBuffer);
|
|
|
|
|
|
|
|
/* Determine if the source MAR file has the new fields for signing or not */
|
|
|
|
if (is_old_mar(argv[2], &oldMar)) {
|
|
|
|
fprintf(stderr, "ERROR: could not determine if MAR is old or new.\n");
|
|
|
|
} else if (oldMar) {
|
|
|
|
fprintf(stderr, "ERROR: The MAR file is in the old format so has"
|
|
|
|
" no signature to verify.\n");
|
|
|
|
}
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
free(certBuffer);
|
|
|
|
return 0;
|
|
|
|
#else
|
|
|
|
if (!NSSConfigDir || !certName) {
|
|
|
|
print_usage();
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (NSSInitCryptoContext(NSSConfigDir)) {
|
|
|
|
fprintf(stderr, "ERROR: Could not initialize crypto library.\n");
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
return mar_verify_signature(argv[2], NULL, 0,
|
|
|
|
certName);
|
|
|
|
|
|
|
|
#endif /* defined(XP_WIN) && !defined(MAR_NSS) */
|
|
|
|
case 's':
|
|
|
|
if (!NSSConfigDir || !certName || argc < 4) {
|
|
|
|
print_usage();
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
return mar_repackage_and_sign(NSSConfigDir, certName, argv[2], argv[3]);
|
|
|
|
#endif /* endif NO_SIGN_VERIFY disabled */
|
|
|
|
|
2005-06-08 17:28:20 +00:00
|
|
|
default:
|
|
|
|
print_usage();
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|