start on yubico-piv-signer

2014-09-26 15:22:40 +02:00
parent 8d8257583e
commit 86d4adfeeb
3 changed files with 153 additions and 2 deletions
@@ -0,0 +1,102 @@
+ /*
+ * Copyright (c) 2014 Yubico AB
+ * All rights reserved.
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ *
+ * Additional permission under GNU GPL version 3 section 7
+ *
+ * If you modify this program, or any covered work, by linking or
+ * combining it with the OpenSSL project's OpenSSL library (or a
+ * modified version of that library), containing parts covered by the
+ * terms of the OpenSSL or SSLeay licenses, We grant you additional 
+ * permission to convey the resulting work. Corresponding Source for a
+ * non-source form of such a combination shall include the source code
+ * for the parts of OpenSSL used as well as that of the covered work.
+ *
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <stdbool.h>
+#include <string.h>
+
+#include "ykpiv.h"
+
+#ifdef _WIN32
+#include <windows.h>
+#endif
+
+#include "util.h"
+
+static bool verify_pin(ykpiv_state *state, const char *pin) {
+  int tries = -1;
+  ykpiv_rc res;
+  int len = strlen(pin);
+
+  if(len > 8) {
+    fprintf(stderr, "Maximum 8 digits of PIN supported.\n");
+  }
+
+  res = ykpiv_verify(state, pin, &tries);
+  if(res == YKPIV_OK) {
+    return true;
+  } else if(res == YKPIV_WRONG_PIN) {
+    if(tries > 0) {
+      fprintf(stderr, "Pin verification failed, %d tries left before pin is blocked.\n", tries);
+    } else {
+      fprintf(stderr, "Pin code blocked, use unblock-pin action to unblock.\n");
+    }
+  } else {
+    fprintf(stderr, "Pin code verification failed: '%s'\n", ykpiv_strerror(res));
+  }
+  return false;
+}
+
+int main(int argc, char *argv[]) {
+  struct gengetopt_args_info args_info;
+  ykpiv_state *state;
+  int verbosity;
+  enum enum_action action;
+  int ret = EXIT_SUCCESS;
+
+  if(cmdline_parser(argc, argv, &args_info) != 0) {
+    return EXIT_FAILURE;
+  }
+
+  verbosity = args_info.verbose_arg + (int)args_info.verbose_given;
+
+  if(ykpiv_init(&state, verbosity) != YKPIV_OK) {
+    fprintf(stderr, "Failed initializing library.\n");
+    return EXIT_FAILURE;
+  }
+
+  if(ykpiv_connect(state, args_info.reader_arg) != YKPIV_OK) {
+    fprintf(stderr, "Failed to connect to reader.\n");
+    return EXIT_FAILURE;
+  }
+
+  if(verify_pin(state, args_info.pin_arg)) {
+    printf("Successfully verified PIN.\n");
+  } else {
+    return EXIT_FAILURE;
+  }
+
+  /* openssl setup.. */
+  OpenSSL_add_all_algorithms();
+
+  ykpiv_done(state);
+  EVP_cleanup();
+  return ret;
+}