mirror of
https://github.com/openssl/openssl.git
synced 2024-12-03 05:41:46 +08:00
6d2a1eff55
The OTC decided that all low level APIs should be deprecated. This extends to SRP, even though at the current time there is no "EVP" interface to it. This could be added in a future release. Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14132)
628 lines
20 KiB
C
628 lines
20 KiB
C
/*
|
|
* Copyright 2004-2021 The OpenSSL Project Authors. All Rights Reserved.
|
|
* Copyright (c) 2004, EdelKey Project. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*
|
|
* Originally written by Christophe Renou and Peter Sylvester,
|
|
* for the EdelKey project.
|
|
*/
|
|
|
|
/* SRP is deprecated, so we're going to have to use some deprecated APIs */
|
|
#define OPENSSL_SUPPRESS_DEPRECATED
|
|
|
|
#include <openssl/opensslconf.h>
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <openssl/conf.h>
|
|
#include <openssl/bio.h>
|
|
#include <openssl/err.h>
|
|
#include <openssl/txt_db.h>
|
|
#include <openssl/buffer.h>
|
|
#include <openssl/srp.h>
|
|
#include "apps.h"
|
|
#include "progs.h"
|
|
|
|
#define BASE_SECTION "srp"
|
|
#define CONFIG_FILE "openssl.cnf"
|
|
|
|
|
|
#define ENV_DATABASE "srpvfile"
|
|
#define ENV_DEFAULT_SRP "default_srp"
|
|
|
|
static int get_index(CA_DB *db, char *id, char type)
|
|
{
|
|
char **pp;
|
|
int i;
|
|
if (id == NULL)
|
|
return -1;
|
|
if (type == DB_SRP_INDEX) {
|
|
for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
|
|
pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
|
|
if (pp[DB_srptype][0] == DB_SRP_INDEX
|
|
&& strcmp(id, pp[DB_srpid]) == 0)
|
|
return i;
|
|
}
|
|
} else {
|
|
for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
|
|
pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
|
|
|
|
if (pp[DB_srptype][0] != DB_SRP_INDEX
|
|
&& strcmp(id, pp[DB_srpid]) == 0)
|
|
return i;
|
|
}
|
|
}
|
|
|
|
return -1;
|
|
}
|
|
|
|
static void print_entry(CA_DB *db, int indx, int verbose, char *s)
|
|
{
|
|
if (indx >= 0 && verbose) {
|
|
int j;
|
|
char **pp = sk_OPENSSL_PSTRING_value(db->db->data, indx);
|
|
BIO_printf(bio_err, "%s \"%s\"\n", s, pp[DB_srpid]);
|
|
for (j = 0; j < DB_NUMBER; j++) {
|
|
BIO_printf(bio_err, " %d = \"%s\"\n", j, pp[j]);
|
|
}
|
|
}
|
|
}
|
|
|
|
static void print_index(CA_DB *db, int indexindex, int verbose)
|
|
{
|
|
print_entry(db, indexindex, verbose, "g N entry");
|
|
}
|
|
|
|
static void print_user(CA_DB *db, int userindex, int verbose)
|
|
{
|
|
if (verbose > 0) {
|
|
char **pp = sk_OPENSSL_PSTRING_value(db->db->data, userindex);
|
|
|
|
if (pp[DB_srptype][0] != 'I') {
|
|
print_entry(db, userindex, verbose, "User entry");
|
|
print_entry(db, get_index(db, pp[DB_srpgN], 'I'), verbose,
|
|
"g N entry");
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
static int update_index(CA_DB *db, char **row)
|
|
{
|
|
char **irow;
|
|
int i;
|
|
|
|
irow = app_malloc(sizeof(*irow) * (DB_NUMBER + 1), "row pointers");
|
|
for (i = 0; i < DB_NUMBER; i++)
|
|
irow[i] = row[i];
|
|
irow[DB_NUMBER] = NULL;
|
|
|
|
if (!TXT_DB_insert(db->db, irow)) {
|
|
BIO_printf(bio_err, "failed to update srpvfile\n");
|
|
BIO_printf(bio_err, "TXT_DB error number %ld\n", db->db->error);
|
|
OPENSSL_free(irow);
|
|
return 0;
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
static char *lookup_conf(const CONF *conf, const char *section, const char *tag)
|
|
{
|
|
char *entry = NCONF_get_string(conf, section, tag);
|
|
if (entry == NULL)
|
|
BIO_printf(bio_err, "variable lookup failed for %s::%s\n", section, tag);
|
|
return entry;
|
|
}
|
|
|
|
static char *srp_verify_user(const char *user, const char *srp_verifier,
|
|
char *srp_usersalt, const char *g, const char *N,
|
|
const char *passin, int verbose)
|
|
{
|
|
char password[1025];
|
|
PW_CB_DATA cb_tmp;
|
|
char *verifier = NULL;
|
|
char *gNid = NULL;
|
|
int len;
|
|
|
|
cb_tmp.prompt_info = user;
|
|
cb_tmp.password = passin;
|
|
|
|
len = password_callback(password, sizeof(password)-1, 0, &cb_tmp);
|
|
if (len > 0) {
|
|
password[len] = 0;
|
|
if (verbose)
|
|
BIO_printf(bio_err,
|
|
"Validating\n user=\"%s\"\n srp_verifier=\"%s\"\n srp_usersalt=\"%s\"\n g=\"%s\"\n N=\"%s\"\n",
|
|
user, srp_verifier, srp_usersalt, g, N);
|
|
if (verbose > 1)
|
|
BIO_printf(bio_err, "Pass %s\n", password);
|
|
|
|
OPENSSL_assert(srp_usersalt != NULL);
|
|
if ((gNid = SRP_create_verifier(user, password, &srp_usersalt,
|
|
&verifier, N, g)) == NULL) {
|
|
BIO_printf(bio_err, "Internal error validating SRP verifier\n");
|
|
} else {
|
|
if (strcmp(verifier, srp_verifier))
|
|
gNid = NULL;
|
|
OPENSSL_free(verifier);
|
|
}
|
|
OPENSSL_cleanse(password, len);
|
|
}
|
|
return gNid;
|
|
}
|
|
|
|
static char *srp_create_user(char *user, char **srp_verifier,
|
|
char **srp_usersalt, char *g, char *N,
|
|
char *passout, int verbose)
|
|
{
|
|
char password[1025];
|
|
PW_CB_DATA cb_tmp;
|
|
char *gNid = NULL;
|
|
char *salt = NULL;
|
|
int len;
|
|
cb_tmp.prompt_info = user;
|
|
cb_tmp.password = passout;
|
|
|
|
len = password_callback(password, sizeof(password)-1, 1, &cb_tmp);
|
|
if (len > 0) {
|
|
password[len] = 0;
|
|
if (verbose)
|
|
BIO_printf(bio_err, "Creating\n user=\"%s\"\n g=\"%s\"\n N=\"%s\"\n",
|
|
user, g, N);
|
|
if ((gNid = SRP_create_verifier(user, password, &salt,
|
|
srp_verifier, N, g)) == NULL) {
|
|
BIO_printf(bio_err, "Internal error creating SRP verifier\n");
|
|
} else {
|
|
*srp_usersalt = salt;
|
|
}
|
|
OPENSSL_cleanse(password, len);
|
|
if (verbose > 1)
|
|
BIO_printf(bio_err, "gNid=%s salt =\"%s\"\n verifier =\"%s\"\n",
|
|
gNid, salt, *srp_verifier);
|
|
|
|
}
|
|
return gNid;
|
|
}
|
|
|
|
typedef enum OPTION_choice {
|
|
OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
|
|
OPT_VERBOSE, OPT_CONFIG, OPT_NAME, OPT_SRPVFILE, OPT_ADD,
|
|
OPT_DELETE, OPT_MODIFY, OPT_LIST, OPT_GN, OPT_USERINFO,
|
|
OPT_PASSIN, OPT_PASSOUT, OPT_ENGINE, OPT_R_ENUM, OPT_PROV_ENUM
|
|
} OPTION_CHOICE;
|
|
|
|
const OPTIONS srp_options[] = {
|
|
{OPT_HELP_STR, 1, '-', "Usage: %s [options] [user...]\n"},
|
|
|
|
OPT_SECTION("General"),
|
|
{"help", OPT_HELP, '-', "Display this summary"},
|
|
{"verbose", OPT_VERBOSE, '-', "Talk a lot while doing things"},
|
|
{"config", OPT_CONFIG, '<', "A config file"},
|
|
{"name", OPT_NAME, 's', "The particular srp definition to use"},
|
|
#ifndef OPENSSL_NO_ENGINE
|
|
{"engine", OPT_ENGINE, 's', "Use engine, possibly a hardware device"},
|
|
#endif
|
|
|
|
OPT_SECTION("Action"),
|
|
{"add", OPT_ADD, '-', "Add a user and srp verifier"},
|
|
{"modify", OPT_MODIFY, '-', "Modify the srp verifier of an existing user"},
|
|
{"delete", OPT_DELETE, '-', "Delete user from verifier file"},
|
|
{"list", OPT_LIST, '-', "List users"},
|
|
|
|
OPT_SECTION("Configuration"),
|
|
{"srpvfile", OPT_SRPVFILE, '<', "The srp verifier file name"},
|
|
{"gn", OPT_GN, 's', "Set g and N values to be used for new verifier"},
|
|
{"userinfo", OPT_USERINFO, 's', "Additional info to be set for user"},
|
|
{"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
|
|
{"passout", OPT_PASSOUT, 's', "Output file pass phrase source"},
|
|
|
|
OPT_R_OPTIONS,
|
|
OPT_PROV_OPTIONS,
|
|
|
|
OPT_PARAMETERS(),
|
|
{"user", 0, 0, "Username(s) to process (optional)"},
|
|
{NULL}
|
|
};
|
|
|
|
int srp_main(int argc, char **argv)
|
|
{
|
|
ENGINE *e = NULL;
|
|
CA_DB *db = NULL;
|
|
CONF *conf = NULL;
|
|
int gNindex = -1, maxgN = -1, ret = 1, errors = 0, verbose = 0, i;
|
|
int doupdatedb = 0, mode = OPT_ERR;
|
|
char *user = NULL, *passinarg = NULL, *passoutarg = NULL;
|
|
char *passin = NULL, *passout = NULL, *gN = NULL, *userinfo = NULL;
|
|
char *section = NULL;
|
|
char **gNrow = NULL, *configfile = NULL;
|
|
char *srpvfile = NULL, **pp, *prog;
|
|
OPTION_CHOICE o;
|
|
|
|
prog = opt_init(argc, argv, srp_options);
|
|
while ((o = opt_next()) != OPT_EOF) {
|
|
switch (o) {
|
|
case OPT_EOF:
|
|
case OPT_ERR:
|
|
opthelp:
|
|
BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
|
|
goto end;
|
|
case OPT_HELP:
|
|
opt_help(srp_options);
|
|
ret = 0;
|
|
goto end;
|
|
case OPT_VERBOSE:
|
|
verbose++;
|
|
break;
|
|
case OPT_CONFIG:
|
|
configfile = opt_arg();
|
|
break;
|
|
case OPT_NAME:
|
|
section = opt_arg();
|
|
break;
|
|
case OPT_SRPVFILE:
|
|
srpvfile = opt_arg();
|
|
break;
|
|
case OPT_ADD:
|
|
case OPT_DELETE:
|
|
case OPT_MODIFY:
|
|
case OPT_LIST:
|
|
if (mode != OPT_ERR) {
|
|
BIO_printf(bio_err,
|
|
"%s: Only one of -add/-delete/-modify/-list\n",
|
|
prog);
|
|
goto opthelp;
|
|
}
|
|
mode = o;
|
|
break;
|
|
case OPT_GN:
|
|
gN = opt_arg();
|
|
break;
|
|
case OPT_USERINFO:
|
|
userinfo = opt_arg();
|
|
break;
|
|
case OPT_PASSIN:
|
|
passinarg = opt_arg();
|
|
break;
|
|
case OPT_PASSOUT:
|
|
passoutarg = opt_arg();
|
|
break;
|
|
case OPT_ENGINE:
|
|
e = setup_engine(opt_arg(), 0);
|
|
break;
|
|
case OPT_R_CASES:
|
|
if (!opt_rand(o))
|
|
goto end;
|
|
break;
|
|
case OPT_PROV_CASES:
|
|
if (!opt_provider(o))
|
|
goto end;
|
|
break;
|
|
}
|
|
}
|
|
|
|
/* Optional parameters are usernames. */
|
|
argc = opt_num_rest();
|
|
argv = opt_rest();
|
|
|
|
app_RAND_load();
|
|
if (srpvfile != NULL && configfile != NULL) {
|
|
BIO_printf(bio_err,
|
|
"-srpvfile and -configfile cannot be specified together.\n");
|
|
goto end;
|
|
}
|
|
if (mode == OPT_ERR) {
|
|
BIO_printf(bio_err,
|
|
"Exactly one of the options -add, -delete, -modify -list must be specified.\n");
|
|
goto opthelp;
|
|
}
|
|
if (mode == OPT_DELETE || mode == OPT_MODIFY || mode == OPT_ADD) {
|
|
if (argc == 0) {
|
|
BIO_printf(bio_err, "Need at least one user.\n");
|
|
goto opthelp;
|
|
}
|
|
user = *argv++;
|
|
}
|
|
if ((passinarg != NULL || passoutarg != NULL) && argc != 1) {
|
|
BIO_printf(bio_err,
|
|
"-passin, -passout arguments only valid with one user.\n");
|
|
goto opthelp;
|
|
}
|
|
|
|
if (!app_passwd(passinarg, passoutarg, &passin, &passout)) {
|
|
BIO_printf(bio_err, "Error getting passwords\n");
|
|
goto end;
|
|
}
|
|
|
|
if (srpvfile == NULL) {
|
|
if (configfile == NULL)
|
|
configfile = default_config_file;
|
|
|
|
conf = app_load_config_verbose(configfile, verbose);
|
|
if (conf == NULL)
|
|
goto end;
|
|
if (configfile != default_config_file && !app_load_modules(conf))
|
|
goto end;
|
|
|
|
/* Lets get the config section we are using */
|
|
if (section == NULL) {
|
|
if (verbose)
|
|
BIO_printf(bio_err,
|
|
"trying to read " ENV_DEFAULT_SRP
|
|
" in " BASE_SECTION "\n");
|
|
|
|
section = lookup_conf(conf, BASE_SECTION, ENV_DEFAULT_SRP);
|
|
if (section == NULL)
|
|
goto end;
|
|
}
|
|
|
|
app_RAND_load_conf(conf, BASE_SECTION);
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err,
|
|
"trying to read " ENV_DATABASE " in section \"%s\"\n",
|
|
section);
|
|
|
|
srpvfile = lookup_conf(conf, section, ENV_DATABASE);
|
|
if (srpvfile == NULL)
|
|
goto end;
|
|
}
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err, "Trying to read SRP verifier file \"%s\"\n",
|
|
srpvfile);
|
|
|
|
db = load_index(srpvfile, NULL);
|
|
if (db == NULL)
|
|
goto end;
|
|
|
|
/* Lets check some fields */
|
|
for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
|
|
pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
|
|
|
|
if (pp[DB_srptype][0] == DB_SRP_INDEX) {
|
|
maxgN = i;
|
|
if ((gNindex < 0) && (gN != NULL) && strcmp(gN, pp[DB_srpid]) == 0)
|
|
gNindex = i;
|
|
|
|
print_index(db, i, verbose > 1);
|
|
}
|
|
}
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err, "Database initialised\n");
|
|
|
|
if (gNindex >= 0) {
|
|
gNrow = sk_OPENSSL_PSTRING_value(db->db->data, gNindex);
|
|
print_entry(db, gNindex, verbose > 1, "Default g and N");
|
|
} else if (maxgN > 0 && !SRP_get_default_gN(gN)) {
|
|
BIO_printf(bio_err, "No g and N value for index \"%s\"\n", gN);
|
|
goto end;
|
|
} else {
|
|
if (verbose)
|
|
BIO_printf(bio_err, "Database has no g N information.\n");
|
|
gNrow = NULL;
|
|
}
|
|
|
|
if (verbose > 1)
|
|
BIO_printf(bio_err, "Starting user processing\n");
|
|
|
|
while (mode == OPT_LIST || user != NULL) {
|
|
int userindex = -1;
|
|
|
|
if (user != NULL && verbose > 1)
|
|
BIO_printf(bio_err, "Processing user \"%s\"\n", user);
|
|
if ((userindex = get_index(db, user, 'U')) >= 0)
|
|
print_user(db, userindex, (verbose > 0) || mode == OPT_LIST);
|
|
|
|
if (mode == OPT_LIST) {
|
|
if (user == NULL) {
|
|
BIO_printf(bio_err, "List all users\n");
|
|
|
|
for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++)
|
|
print_user(db, i, 1);
|
|
} else if (userindex < 0) {
|
|
BIO_printf(bio_err,
|
|
"user \"%s\" does not exist, ignored. t\n", user);
|
|
errors++;
|
|
}
|
|
} else if (mode == OPT_ADD) {
|
|
if (userindex >= 0) {
|
|
/* reactivation of a new user */
|
|
char **row =
|
|
sk_OPENSSL_PSTRING_value(db->db->data, userindex);
|
|
BIO_printf(bio_err, "user \"%s\" reactivated.\n", user);
|
|
row[DB_srptype][0] = 'V';
|
|
|
|
doupdatedb = 1;
|
|
} else {
|
|
char *row[DB_NUMBER];
|
|
char *gNid;
|
|
row[DB_srpverifier] = NULL;
|
|
row[DB_srpsalt] = NULL;
|
|
row[DB_srpinfo] = NULL;
|
|
if (!
|
|
(gNid =
|
|
srp_create_user(user, &(row[DB_srpverifier]),
|
|
&(row[DB_srpsalt]),
|
|
gNrow ? gNrow[DB_srpsalt] : gN,
|
|
gNrow ? gNrow[DB_srpverifier] : NULL,
|
|
passout, verbose))) {
|
|
BIO_printf(bio_err,
|
|
"Cannot create srp verifier for user \"%s\", operation abandoned .\n",
|
|
user);
|
|
errors++;
|
|
goto end;
|
|
}
|
|
row[DB_srpid] = OPENSSL_strdup(user);
|
|
row[DB_srptype] = OPENSSL_strdup("v");
|
|
row[DB_srpgN] = OPENSSL_strdup(gNid);
|
|
|
|
if ((row[DB_srpid] == NULL)
|
|
|| (row[DB_srpgN] == NULL)
|
|
|| (row[DB_srptype] == NULL)
|
|
|| (row[DB_srpverifier] == NULL)
|
|
|| (row[DB_srpsalt] == NULL)
|
|
|| (userinfo
|
|
&& ((row[DB_srpinfo] = OPENSSL_strdup(userinfo)) == NULL))
|
|
|| !update_index(db, row)) {
|
|
OPENSSL_free(row[DB_srpid]);
|
|
OPENSSL_free(row[DB_srpgN]);
|
|
OPENSSL_free(row[DB_srpinfo]);
|
|
OPENSSL_free(row[DB_srptype]);
|
|
OPENSSL_free(row[DB_srpverifier]);
|
|
OPENSSL_free(row[DB_srpsalt]);
|
|
goto end;
|
|
}
|
|
doupdatedb = 1;
|
|
}
|
|
} else if (mode == OPT_MODIFY) {
|
|
if (userindex < 0) {
|
|
BIO_printf(bio_err,
|
|
"user \"%s\" does not exist, operation ignored.\n",
|
|
user);
|
|
errors++;
|
|
} else {
|
|
|
|
char **row =
|
|
sk_OPENSSL_PSTRING_value(db->db->data, userindex);
|
|
char type = row[DB_srptype][0];
|
|
if (type == 'v') {
|
|
BIO_printf(bio_err,
|
|
"user \"%s\" already updated, operation ignored.\n",
|
|
user);
|
|
errors++;
|
|
} else {
|
|
char *gNid;
|
|
|
|
if (row[DB_srptype][0] == 'V') {
|
|
int user_gN;
|
|
char **irow = NULL;
|
|
if (verbose)
|
|
BIO_printf(bio_err,
|
|
"Verifying password for user \"%s\"\n",
|
|
user);
|
|
if ((user_gN =
|
|
get_index(db, row[DB_srpgN], DB_SRP_INDEX)) >= 0)
|
|
irow =
|
|
sk_OPENSSL_PSTRING_value(db->db->data,
|
|
userindex);
|
|
|
|
if (!srp_verify_user
|
|
(user, row[DB_srpverifier], row[DB_srpsalt],
|
|
irow ? irow[DB_srpsalt] : row[DB_srpgN],
|
|
irow ? irow[DB_srpverifier] : NULL, passin,
|
|
verbose)) {
|
|
BIO_printf(bio_err,
|
|
"Invalid password for user \"%s\", operation abandoned.\n",
|
|
user);
|
|
errors++;
|
|
goto end;
|
|
}
|
|
}
|
|
if (verbose)
|
|
BIO_printf(bio_err, "Password for user \"%s\" ok.\n",
|
|
user);
|
|
|
|
if (!
|
|
(gNid =
|
|
srp_create_user(user, &(row[DB_srpverifier]),
|
|
&(row[DB_srpsalt]),
|
|
gNrow ? gNrow[DB_srpsalt] : NULL,
|
|
gNrow ? gNrow[DB_srpverifier] : NULL,
|
|
passout, verbose))) {
|
|
BIO_printf(bio_err,
|
|
"Cannot create srp verifier for user \"%s\", operation abandoned.\n",
|
|
user);
|
|
errors++;
|
|
goto end;
|
|
}
|
|
|
|
row[DB_srptype][0] = 'v';
|
|
row[DB_srpgN] = OPENSSL_strdup(gNid);
|
|
|
|
if (row[DB_srpid] == NULL
|
|
|| row[DB_srpgN] == NULL
|
|
|| row[DB_srptype] == NULL
|
|
|| row[DB_srpverifier] == NULL
|
|
|| row[DB_srpsalt] == NULL
|
|
|| (userinfo
|
|
&& ((row[DB_srpinfo] = OPENSSL_strdup(userinfo))
|
|
== NULL)))
|
|
goto end;
|
|
|
|
doupdatedb = 1;
|
|
}
|
|
}
|
|
} else if (mode == OPT_DELETE) {
|
|
if (userindex < 0) {
|
|
BIO_printf(bio_err,
|
|
"user \"%s\" does not exist, operation ignored. t\n",
|
|
user);
|
|
errors++;
|
|
} else {
|
|
char **xpp = sk_OPENSSL_PSTRING_value(db->db->data, userindex);
|
|
|
|
BIO_printf(bio_err, "user \"%s\" revoked. t\n", user);
|
|
xpp[DB_srptype][0] = 'R';
|
|
doupdatedb = 1;
|
|
}
|
|
}
|
|
user = *argv++;
|
|
if (user == NULL) {
|
|
/* no more processing in any mode if no users left */
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err, "User procession done.\n");
|
|
|
|
if (doupdatedb) {
|
|
/* Lets check some fields */
|
|
for (i = 0; i < sk_OPENSSL_PSTRING_num(db->db->data); i++) {
|
|
pp = sk_OPENSSL_PSTRING_value(db->db->data, i);
|
|
|
|
if (pp[DB_srptype][0] == 'v') {
|
|
pp[DB_srptype][0] = 'V';
|
|
print_user(db, i, verbose);
|
|
}
|
|
}
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err, "Trying to update srpvfile.\n");
|
|
if (!save_index(srpvfile, "new", db))
|
|
goto end;
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err, "Temporary srpvfile created.\n");
|
|
if (!rotate_index(srpvfile, "new", "old"))
|
|
goto end;
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err, "srpvfile updated.\n");
|
|
}
|
|
|
|
ret = (errors != 0);
|
|
end:
|
|
if (errors != 0)
|
|
if (verbose)
|
|
BIO_printf(bio_err, "User errors %d.\n", errors);
|
|
|
|
if (verbose)
|
|
BIO_printf(bio_err, "SRP terminating with code %d.\n", ret);
|
|
|
|
OPENSSL_free(passin);
|
|
OPENSSL_free(passout);
|
|
if (ret)
|
|
ERR_print_errors(bio_err);
|
|
NCONF_free(conf);
|
|
free_index(db);
|
|
release_engine(e);
|
|
return ret;
|
|
}
|