sippasswd.cpp

Go to the documentation of this file.

// Copyright (C) 2010-2014 David Sugar, Tycho Softworks.
// Copyright (C) 2015 Cherokees of Idaho.
//
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program.  If not, see <http://www.gnu.org/licenses/>.

#include <sipwitch-config.h>
#include <ucommon/ucommon.h>
#include <ucommon/secure.h>
#include <sipwitch/sipwitch.h>
#ifdef  HAVE_PWD_H
#include <pwd.h>
#endif

using namespace sipwitch;

#ifdef  _MSWINDOWS_
#include <io.h>
static char *getpass(const char *prompt)
{
    static char buf[128];
    size_t i;

    fputs(prompt, stderr);
    fflush(stderr);
    for (i = 0; i < sizeof(buf) - 1; i++) {
        buf[i] = fgetc(stdin);
        if (buf[i] == '\r' || buf[i] == '\n')
            break;
        fputs("*", stderr);
        fflush(stderr);
    }
    buf[i] = 0;
    fputs("\n", stderr);
    fflush(stderr);
    return buf;
}
#endif

PROGRAM_MAIN(argc, argv)
{
    const char *realm = NULL, *secret, *verify;
    const char *mode = "md5";
    char buffer[128];
    char replace[128];
    string_t digestbuf;
    fpos_t pos;
    FILE *fp;

#ifdef  _MSWINDOWS_
    const char *control = "\\\\.\\mailslot\\sipwitch_ctrl";
#else
    const char *control = DEFAULT_VARPATH "/run/sipwitch/control";
#endif

    const char *user = *(++argv);

    if(String::equal(user, "-version")) {
        printf("sippasswd 0.1\n"
            "Copyright (C) 2010 David Sugar, Tycho Softworks\n"
            "License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>\n"
            "This is free software: you are free to change and redistribute it.\n"
            "There is NO WARRANTY, to the extent permitted by law.\n");
        exit(0);
    }

#ifdef  HAVE_PWD_H
    if(user && getuid() != 0)
        shell::errexit(3, "*** sippasswd: only root can change other user's digests\n");

    if(!user) {
        struct passwd *pwd = getpwuid(getuid());
        if(!pwd)
            shell::errexit(3, "*** sippasswd: user id cannot be determined\n");

        user = strdup(pwd->pw_name);
    }
    if(geteuid() != 0)
        shell::errexit(3, "*** sippasswd: root privilege required\n");
#else
    if(!user)
        shell::errexit(3, "*** sippasswd: user id not specified\n");

#endif

    fsys_t fs;
    fs.open(DEFAULT_CFGPATH "/siprealm", fsys::RDONLY);

    if(!is(fs))
        fs.open(DEFAULT_VARPATH "/lib/sipwitch/uuid", fsys::RDONLY);

    if(!is(fs))
        shell::errexit(4, "*** sippasswd: no realm active\n");

    memset(buffer, 0, sizeof(buffer));
    fs.read(buffer, sizeof(buffer) - 1);
    fs.close();

    char *cp = strchr(buffer, '\n');
    if(cp)
        *cp = 0;

    cp = strchr(buffer, ':');
    if(cp)
        *(cp++) = 0;

    if(cp && *cp)
        mode = cp;

    realm = strdup(buffer);
    secret = getpass("Enter new SIP secret: ");
    if(!secret || !*secret) {
        printf("no password supplied\n");
        exit(0);
    }

    verify = getpass("Retype new SIP secret: ");
    if(!verify || !*verify || !String::equal(secret, verify)) {
        printf("sorry, secrets do not match\n");
        exit(0);
    }

    digest_t digest(mode);

    if(!digest.puts((string_t)user + ":" + (string_t)realm + ":" + (string_t)secret))
        shell::errexit(1, "*** sippasswd: cannot compute");
    else
        digestbuf = *digest;

    snprintf(replace, sizeof(replace), "%s:%s\n", user, *digestbuf);

    // create work directory if it does not exist
    dir::create(DEFAULT_VARPATH "/lib/sipwitch", fsys::GROUP_PRIVATE);
    dir::create(DEFAULT_VARPATH "/lib/sipwitch/digests", fsys::GROUP_PRIVATE);

    // make sure always created root only
    string_t path = str(DEFAULT_VARPATH "/lib/sipwitch/digests/") + realm;
    fs.open(*path, fsys::OWNER_PRIVATE, fsys::RDONLY);
    fs.close();

    fp = fopen(*path, "r+");
    if(!fp)
        shell::errexit(1, "*** sippasswd: cannot access digest");

    for(;;) {
        fgetpos(fp, &pos);
        if(NULL == fgets(buffer, sizeof(buffer), fp) || feof(fp))
            break;

        if(String::equal(buffer, replace)) {
            fclose(fp);
            printf("digest unchanged\n");
            exit(0);
        }

        cp = strchr(buffer, ':');
        if(!cp)
            continue;

        *cp = 0;
        if(String::equal(buffer, user))
            break;
    }

    // update digest file
    fsetpos(fp, &pos);
    fputs(replace, fp);
    fclose(fp);

    // if server is up, also sync server with digest change...
    fp = fopen(control, "w");
    if(fp) {
        fprintf(fp, "digest %s %s\n", user, *digestbuf);
        fclose(fp);
    }

    printf("digest updated\n");
    PROGRAM_EXIT(0);
}