77 lines
2.2 KiB
C
77 lines
2.2 KiB
C
/*
|
|
luksrku - Tool to remotely unlock LUKS disks using TLS.
|
|
Copyright (C) 2016-2016 Johannes Bauer
|
|
|
|
This file is part of luksrku.
|
|
|
|
luksrku is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; this program is ONLY licensed under
|
|
version 3 of the License, later versions are explicitly excluded.
|
|
|
|
luksrku is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with luksrku; if not, write to the Free Software
|
|
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
Johannes Bauer <JohannesBauer@gmx.de>
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <strings.h>
|
|
|
|
#include "keyfile.h"
|
|
#include "parse-keyfile.h"
|
|
#include "binkeyfile.h"
|
|
#include "util.h"
|
|
|
|
int main(int argc, char **argv) {
|
|
#ifdef DEBUG
|
|
fprintf(stderr, "WARNING: This has been compiled in DEBUG mode and uses reduced security.\n");
|
|
#endif
|
|
|
|
if (argc != 4) {
|
|
fprintf(stderr, "%s [server|client] [Infile] [Outfile]\n", argv[0]);
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
bool server = !strcasecmp(argv[1], "server");
|
|
bool client = !strcasecmp(argv[1], "client");
|
|
if (!server && !client) {
|
|
fprintf(stderr, "First parameter must be either 'client' or 'server'.\n");
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
const char *infile = argv[2];
|
|
const char *outfile = argv[3];
|
|
|
|
struct keydb_t keydb;
|
|
if (!parse_keyfile(infile, &keydb, server)) {
|
|
fprintf(stderr, "Failed to parse key file %s. Aborting.\n", infile);
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
fprintf(stderr, "Successfully read key file with %d entries.\n", keydb.entrycnt);
|
|
|
|
char *passphrase = NULL;
|
|
if (client) {
|
|
passphrase = query_passphrase("Passphrase to encrypt keyfile: ");
|
|
if (!passphrase) {
|
|
fprintf(stderr, "Failed to get passphrase.\n");
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
}
|
|
if (!write_binary_keyfile(outfile, &keydb, passphrase)) {
|
|
fprintf(stderr, "Failed to write binary key file %s. Aborting.\n", outfile);
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
free(passphrase);
|
|
|
|
return 0;
|
|
}
|