xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-06-16 08:30:49 +00:00
Code Issues Projects Releases Wiki Activity

Add a genpasshmac utility

Browse Source 
For far edge deployment, create utility
that can hmac a password for use in a REST
api call to skip need for tcp port 13001 access.
This commit is contained in:
Jarrod Johnson
2022-03-08 16:27:37 -05:00
parent 31dad09b0c
commit a8c2f859e4
2 changed files with 70 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
confluent_osdeploy/utils/Makefile
+5 -1
View File
@@ -2,7 +2,7 @@ CC := gcc
CFLAGS := -Os
TARGETS := copernicus autocons start_root confluent_imginfo
all: $(TARGETS) clortho urlmount
all: $(TARGETS) clortho urlmount genpasshmac
urlmount: urlmount.c
$(CC) $(CFLAGS) -o $@ $^ -D_FILE_OFFSET_BITS=64 -lcurl -lm -lfuse -lpthread
@@ -12,6 +12,10 @@ clortho: clortho.c sha-256.c
$(CC) $(CFLAGS) -o $@ $^ -lcrypt
strip -s $@
genpasshmac: genpasshmac.c sha-256.c
$(CC) $(CFLAGS) -o $@ $^ -lcrypt
strip -s $@
$(TARGETS): % : %.c
$(CC) $(CFLAGS) -o $@ $^
strip -s $@
confluent_osdeploy/utils/genpasshmac.c
+65
View File
@@ -0,0 +1,65 @@
#include "sha-256.h"
#include <stdlib.h>
#include <unistd.h>
#include <fcntl.h>
#include <stdio.h>
static const char cryptalpha[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789./";
unsigned char* genpasswd(int len) {
unsigned char * passwd;
int urandom, ret;
passwd = calloc(len + 1, sizeof(char));
urandom = open("/dev/urandom", O_RDONLY);
if (urandom < 0) {
fprintf(stderr, "Failed reading /dev/urandom\n");
exit(1);
}
ret = read(urandom, passwd, len);
close(urandom);
for (urandom = 0; urandom < len; urandom++) {
passwd[urandom] = cryptalpha[passwd[urandom] >> 2];
}
passwd[len] = 0; // Should be redundant with calloc, but be explicit
return passwd;
}
int main(int argc, char* argv[]) {
FILE *outfile;
uint8_t *passwd;
uint8_t *buffer;
uint8_t *tmps;
uint8_t *cryptpass;
uint8_t hmac[32];
uint8_t hmackey[64];
int hmackeysize;
if (argc < 5) {
fprintf(stderr, "Usage: %s passfile cryptfile hmacfile hmackey\n", argv[0]);
exit(1);
}
outfile = fopen(argv[4], "r");
hmackeysize = fread(hmackey, 1, 64, outfile);
fclose(outfile);
passwd = genpasswd(48);
outfile = fopen(argv[1], "w");
buffer = malloc(20);
tmps = genpasswd(16);
memcpy(buffer, "$5$", 3);
memcpy(buffer + 3, tmps, 16);
buffer[19] = 0;
fwrite(passwd, 1, 48, outfile);
fclose(outfile);
cryptpass = crypt(passwd, buffer);
outfile = fopen(argv[2], "w");
fwrite(cryptpass, 1, strlen(cryptpass), outfile);
fclose(outfile);
hmac_sha256(hmac, cryptpass, strlen(cryptpass), hmackey, hmackeysize);
outfile = fopen(argv[3], "w");
fwrite(hmac, 1, 32, outfile);
fclose(outfile);
free(passwd);
free(buffer);
}