| /* |
| * Note: this file originally auto-generated by mib2c using |
| * $ |
| */ |
| |
| #include <net-snmp/net-snmp-config.h> |
| #include <net-snmp/net-snmp-features.h> |
| #undef NETSNMP_USE_ASSERT |
| #include <net-snmp/net-snmp-includes.h> |
| #include <net-snmp/agent/net-snmp-agent-includes.h> |
| |
| netsnmp_feature_require(tls_fingerprint_build) |
| |
| #include <ctype.h> |
| |
| #include <openssl/ssl.h> |
| #include <openssl/x509.h> |
| #include <net-snmp/library/cert_util.h> |
| |
| #include "tlstm-mib.h" |
| #include "tlstm-mib/snmpTlstmAddrTable/snmpTlstmAddrTable.h" |
| #include "tlstm-mib/snmpTlstmParamsTable/snmpTlstmParamsTable.h" |
| #include "tlstm-mib/snmpTlstmCertToTSNTable/snmpTlstmCertToTSNTable.h" |
| |
| |
| |
| /* |
| #define COL_SNMPTLSTMCERTTOTSN_ID 1 |
| #define COL_SNMPTLSTMCERTTOTSN_FINGERPRINT 2 |
| #define COL_SNMPTLSTMCERTTOTSN_MAPTYPE 3 |
| #define COL_SNMPTLSTMCERTTOTSN_DATA 4 |
| #define COL_SNMPTLSTMCERTTOTSN_STORAGETYPE 5 |
| #define COL_SNMPTLSTMCERTTOTSN_ROWSTATUS 6 |
| */ |
| const oid certNum[] = { SNMP_TLS_TM_CERT_COUNT }; |
| const oid certChg[] = { SNMP_TLS_TM_CERT_CHANGED }; |
| const oid certTbl[] = { SNMP_TLS_TM_CERT_TABLE }; |
| |
| /* |
| #define COLUMN_SNMPTLSTMPARAMSCLIENTFINGERPRINT 1 |
| #define COLUMN_SNMPTLSTMPARAMSSTORAGETYPE 2 |
| #define COLUMN_SNMPTLSTMPARAMSROWSTATUS 3 |
| */ |
| |
| const oid paramsNum[] = { SNMP_TLS_TM_PARAMS_COUNT }; |
| const oid paramsChg[] = { SNMP_TLS_TM_PARAMS_CHANGED }; |
| const oid paramsTbl[] = { SNMP_TLS_TM_PARAMS_TABLE }; |
| |
| const oid addrNum[] = { SNMP_TLS_TM_ADDR_COUNT }; |
| const oid addrChg[] = { SNMP_TLS_TM_ADDR_CHANGED }; |
| const oid addrTbl[] = { SNMP_TLS_TM_ADDR_TABLE }; |
| |
| |
| const oid tlstmCertSpecified[] = { SNMP_TLS_TM_BASE, 1, 1, 1 }; |
| const oid tlstmCertSANRFC822Name[] = { SNMP_TLS_TM_BASE, 1, 1, 2 }; |
| const oid tlstmCertSANDNSName[] = { SNMP_TLS_TM_BASE, 1, 1, 3 }; |
| const oid tlstmCertSANIpAddress[] = { SNMP_TLS_TM_BASE, 1, 1, 4 }; |
| const oid tlstmCertSANAny[] = { SNMP_TLS_TM_BASE, 1, 1, 5 }; |
| const oid tlstmCertCommonName[] = { SNMP_TLS_TM_BASE, 1, 1, 6 }; |
| |
| const oid *certMapTypes[TSNM_tlstmCert_MAX + 1] = { |
| 0, tlstmCertSpecified, tlstmCertSANRFC822Name, tlstmCertSANDNSName, |
| tlstmCertSANIpAddress, tlstmCertSANAny, tlstmCertCommonName }; |
| |
| /** ************************************************************************** |
| * |
| * cert rows |
| * |
| */ |
| netsnmp_variable_list * |
| cert_row_create(uint32_t priority, int hash_type, const char *fp, |
| const oid *map_type, int map_type_len, const u_char *data, |
| int data_len, uint32_t st, int *row_status_index) |
| { |
| oid name[] = { SNMP_TLS_TM_CERT_TABLE, 1, -1, -1 }; |
| int name_len = OID_LENGTH(name), col_pos = name_len - 2; |
| int rs_index = 4; |
| u_char bin_fp[SNMP_MAXBUF_SMALL], *bin_fp_ptr = bin_fp; |
| u_int rs; |
| size_t bin_fp_len; |
| netsnmp_variable_list *vl = NULL, *vb; |
| |
| netsnmp_require_ptr_LRV( fp, NULL ); |
| |
| DEBUGMSGT(("cert:create", "creating varbinds for pri %d, fp %s\n", priority, |
| fp)); |
| |
| bin_fp_len = sizeof(bin_fp); |
| netsnmp_tls_fingerprint_build(hash_type, fp, &bin_fp_ptr, &bin_fp_len, 0); |
| |
| name[name_len-1] = priority; |
| name[col_pos] = COL_SNMPTLSTMCERTTOTSN_FINGERPRINT; |
| vl = snmp_varlist_add_variable(&vl, name, name_len, ASN_OCTET_STR, |
| &bin_fp, bin_fp_len); |
| netsnmp_require_ptr_LRV(vl, NULL); |
| |
| if (map_type_len && map_type) { |
| name[col_pos] = COL_SNMPTLSTMCERTTOTSN_MAPTYPE; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_OBJECT_ID, |
| map_type, map_type_len * sizeof(oid)); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| } |
| else |
| --rs_index; |
| |
| if (data) { |
| name[col_pos] = COL_SNMPTLSTMCERTTOTSN_DATA; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_OCTET_STR, |
| data, data_len); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| } |
| else |
| --rs_index; |
| |
| if (st) { |
| name[col_pos] = COL_SNMPTLSTMCERTTOTSN_STORAGETYPE; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_INTEGER, |
| &st, sizeof(st)); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| } |
| else |
| --rs_index; |
| |
| name[col_pos] = COL_SNMPTLSTMCERTTOTSN_ROWSTATUS; |
| rs = RS_CREATEANDGO; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_INTEGER, |
| &rs, sizeof(rs)); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| |
| if (row_status_index) |
| *row_status_index = rs_index; |
| |
| return vl; |
| } |
| |
| /** ************************************************************************** |
| * |
| * param rows |
| * |
| */ |
| netsnmp_variable_list * |
| params_row_create(const char *param_name, int hash_type, const char *fp, |
| uint32_t st, int *row_status_index) |
| { |
| oid name[MAX_OID_LEN]; |
| int name_len, col_pos, rs_index = 2; |
| u_char bin_fp[SNMP_MAXBUF_SMALL], *bin_fp_ptr = bin_fp; |
| u_int rs; |
| size_t bin_fp_len; |
| netsnmp_variable_list *vl = NULL, *vb; |
| |
| netsnmp_require_ptr_LRV( param_name, NULL ); |
| netsnmp_require_ptr_LRV( fp, NULL ); |
| |
| DEBUGMSGT(("params:create", "creating varbinds for %s params, fp %s\n", |
| param_name, fp)); |
| |
| /* |
| * build base name |
| */ |
| name_len = OID_LENGTH(paramsTbl); |
| memcpy(name, paramsTbl, sizeof(paramsTbl)); |
| name[name_len++] = 1; /* entry */ |
| col_pos = name_len++; /* column */ |
| while (*param_name) |
| name[name_len++] = *param_name++; |
| |
| bin_fp_len = sizeof(bin_fp); |
| netsnmp_tls_fingerprint_build(hash_type, fp, &bin_fp_ptr, &bin_fp_len, 0); |
| |
| name[col_pos] = COLUMN_SNMPTLSTMPARAMSCLIENTFINGERPRINT; |
| vl = snmp_varlist_add_variable(&vl, name, name_len, ASN_OCTET_STR, |
| &bin_fp, bin_fp_len); |
| netsnmp_require_ptr_LRV(vl, NULL); |
| |
| if (st) { |
| name[col_pos] = COLUMN_SNMPTLSTMPARAMSSTORAGETYPE; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_INTEGER, |
| &st, sizeof(st)); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| } |
| else |
| --rs_index; |
| |
| name[col_pos] = COLUMN_SNMPTLSTMPARAMSROWSTATUS; |
| rs = RS_CREATEANDGO; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_INTEGER, |
| &rs, sizeof(rs)); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| |
| if (row_status_index) |
| *row_status_index = rs_index; |
| |
| return vl; |
| } |
| |
| /** ************************************************************************** |
| * |
| * addr rows |
| * |
| */ |
| netsnmp_variable_list * |
| addr_row_create(const char *target_name, int hash_type, const char *fp, |
| const char *identity, uint32_t st, int *row_status_index) |
| { |
| oid name[MAX_OID_LEN]; |
| int name_len, col_pos, rs_index = 3; |
| u_char bin_fp[SNMP_MAXBUF_SMALL], *bin_fp_ptr = bin_fp; |
| u_int rs; |
| size_t bin_fp_len; |
| netsnmp_variable_list *vl = NULL, *vb; |
| |
| netsnmp_require_ptr_LRV( target_name, NULL ); |
| |
| DEBUGMSGT(("addr:create", "creating varbinds for %s addr, fp %s, id %s\n", |
| target_name, fp, identity)); |
| |
| /* |
| * build base name |
| */ |
| name_len = OID_LENGTH(addrTbl); |
| memcpy(name, addrTbl, sizeof(addrTbl)); |
| name[name_len++] = 1; /* entry */ |
| col_pos = name_len++; /* column */ |
| while (*target_name) |
| name[name_len++] = *target_name++; |
| |
| if (fp) { |
| bin_fp_len = sizeof(bin_fp); |
| netsnmp_tls_fingerprint_build(hash_type, fp, &bin_fp_ptr, |
| &bin_fp_len, 0); |
| |
| name[col_pos] = COLUMN_SNMPTLSTMADDRSERVERFINGERPRINT; |
| vl = snmp_varlist_add_variable(&vl, name, name_len, ASN_OCTET_STR, |
| &bin_fp, bin_fp_len); |
| netsnmp_require_ptr_LRV(vl, NULL); |
| } |
| else |
| --rs_index; |
| |
| if (identity) { |
| name[col_pos] = COLUMN_SNMPTLSTMADDRSERVERIDENTITY; |
| vl = snmp_varlist_add_variable(&vl, name, name_len, ASN_OCTET_STR, |
| identity, strlen(identity)); |
| netsnmp_require_ptr_LRV(vl, NULL); |
| } |
| else |
| --rs_index; |
| |
| if (st) { |
| name[col_pos] = COLUMN_SNMPTLSTMADDRSTORAGETYPE; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_INTEGER, |
| &st, sizeof(st)); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| } |
| else |
| --rs_index; |
| |
| name[col_pos] = COLUMN_SNMPTLSTMADDRROWSTATUS; |
| rs = RS_CREATEANDGO; |
| vb = snmp_varlist_add_variable(&vl, name, name_len, ASN_INTEGER, |
| &rs, sizeof(rs)); |
| if (NULL == vb) { |
| snmp_free_varbind(vl); |
| return NULL; |
| } |
| |
| if (row_status_index) |
| *row_status_index = rs_index; |
| |
| return vl; |
| } |
| |
| /** ************************************************************************** |
| * |
| * application code |
| * |
| */ |
| static char *_data = NULL, *_map_type_str = NULL, *_id_str = NULL; |
| static char *_storage_type_str = NULL, *_fp_str = NULL; |
| static int _storage_type = ST_NONE, _hash_type = NS_HASH_NONE; |
| static size_t _data_len; |
| |
| static void |
| optProc(int argc, char *const *argv, int opt) |
| { |
| if ('C' != opt) |
| return; |
| |
| while (*optarg) { |
| switch (*optarg++) { |
| case 'm': |
| if (optind < argc) |
| _map_type_str = argv[optind++]; |
| else { |
| fprintf(stderr, "Bad -Cm option: no argument given\n"); |
| exit(1); |
| } |
| break; |
| |
| case 'd': |
| if (optind < argc) { |
| _data = argv[optind++]; |
| _data_len = strlen(_data); |
| } |
| else { |
| fprintf(stderr, "Bad -Cd option: no argument given\n"); |
| exit(1); |
| } |
| break; |
| |
| case 's': |
| if (optind < argc) { |
| if (isdigit(0xFF & argv[optind][0])) |
| _storage_type = atoi(argv[optind++]); |
| else |
| _storage_type_str = argv[optind++]; |
| } |
| else { |
| fprintf(stderr, "Bad -Cs option: no argument given\n"); |
| exit(1); |
| } |
| break; |
| |
| case 'h': |
| if (optind < argc) { |
| if (isdigit(0xFF & argv[optind][0])) |
| _hash_type = atoi(argv[optind++]); |
| } |
| else { |
| fprintf(stderr, "Bad -Ch option: no argument given\n"); |
| exit(1); |
| } |
| break; |
| |
| case 'f': |
| if (optind < argc) |
| _fp_str = argv[optind++]; |
| else { |
| fprintf(stderr, "Bad -Cf option: no argument given\n"); |
| exit(1); |
| } |
| break; |
| |
| case 'i': |
| if (optind < argc) |
| _id_str = argv[optind++]; |
| else { |
| fprintf(stderr, "Bad -Ci option: no argument given\n"); |
| exit(1); |
| } |
| break; |
| |
| default: |
| fprintf(stderr, "Unknown flag passed to -C: %c\n", |
| optarg[-1]); |
| exit(1); |
| } |
| } |
| } |
| |
| void |
| _parse_storage_type(const char *arg) |
| { |
| netsnmp_pdu dummy; |
| oid name[] = { SNMP_TLS_TM_CERT_TABLE, 1, |
| COL_SNMPTLSTMCERTTOTSN_STORAGETYPE }; |
| int name_len = OID_LENGTH(name); |
| |
| if (NULL == arg) |
| return; |
| |
| memset(&dummy, 0x00, sizeof(dummy)); |
| snmp_add_var(&dummy, name, name_len, 'i', arg); |
| if (dummy.variables) { |
| _storage_type = *dummy.variables->val.integer; |
| snmp_free_varbind(dummy.variables); |
| } |
| else { |
| fprintf(stderr, "unknown storage type %s for -Cs\n", arg); |
| exit(1); |
| } |
| |
| return; |
| } |
| |
| void |
| usage(void) |
| { |
| fprintf(stderr, "USAGE: snmptls [-Cm mapTypeOID] [-Cd data] [-Cs storageType] "); |
| snmp_parse_args_usage(stderr); |
| fprintf(stderr, "<command> [command options]\n\n"); |
| snmp_parse_args_descriptions(stderr); |
| fprintf(stderr, " [options] certToSecName add <priority> <hashType> <fingerprint>\n"); |
| fprintf(stderr, "\t-Cm\t\tMaptype; [snmpTlstmCertCommonName|snmpTlstmCertSANRFC822Name|snmpTlstmCertSANIpAddress|snmpTlstmCertSANDNSName|snmpTlstmCertSpecified]\n"); |
| fprintf(stderr, "\t\t\t(default is snmpTlstmCertSpecified)\n"); |
| fprintf(stderr, "\t-Cd\t\tData; data for snmpTlstmCertSpecified.\n"); |
| fprintf(stderr, "\t-Cs\t\tstorageType; default is nonVolatile.\n"); |
| |
| fprintf(stderr, " [options] targetParamsFingerprint add <params-name> <hashType> <fingerprint>\n"); |
| fprintf(stderr, "\t-Cs\t\tstorageType; default is nonVolatile.\n"); |
| |
| fprintf(stderr, " [options] targetAddr add <target-name> <hashType> [<hash_type> <remote-fingerprint>] [server-identity]\n"); |
| fprintf(stderr, "\t-Cs\t\tstorageType; default is nonVolatile.\n"); |
| |
| exit(1); |
| } |
| |
| int |
| main(int argc, char **argv) |
| { |
| netsnmp_session session, *ss; |
| netsnmp_variable_list *var_list = NULL; |
| int arg, rs_idx = 0; |
| u_int hash_type; |
| char *fingerprint, *tmp; |
| |
| /* |
| * get the common command line arguments |
| */ |
| switch (arg = snmp_parse_args(argc, argv, &session, "C:", optProc)) { |
| case NETSNMP_PARSE_ARGS_ERROR: |
| exit(1); |
| case NETSNMP_PARSE_ARGS_SUCCESS_EXIT: |
| exit(0); |
| case NETSNMP_PARSE_ARGS_ERROR_USAGE: |
| usage(); |
| default: |
| break; |
| } |
| |
| /* |
| * Open an SNMP session. |
| */ |
| SOCK_STARTUP; |
| ss = snmp_open(&session); |
| if (ss == NULL) { |
| /* |
| * diagnose snmp_open errors with the input netsnmp_session pointer |
| */ |
| snmp_sess_perror("snmptls", &session); |
| SOCK_CLEANUP; |
| exit(1); |
| } |
| |
| if (strcmp(argv[arg], "certToSecName") == 0) { |
| |
| oid map_type[MAX_OID_LEN]; |
| u_int pri; |
| size_t map_type_len = 0; |
| |
| if (strcmp(argv[++arg], "add") != 0) { |
| fprintf(stderr, "only add is supported at this time\n"); |
| exit(1); |
| } |
| |
| pri = atoi(argv[++arg]); |
| tmp = argv[++arg]; |
| hash_type = atoi(tmp); |
| fingerprint = argv[++arg]; |
| |
| DEBUGMSGT(("snmptls", |
| "create pri %d, hash type %d, fp %s", |
| pri, hash_type, fingerprint)); |
| if (_map_type_str) { |
| map_type_len = MAX_OID_LEN; |
| if (snmp_parse_oid(_map_type_str, map_type, &map_type_len) |
| == NULL) { |
| snmp_perror(_map_type_str); |
| exit(1); |
| } |
| DEBUGMSG(("snmptls", ", map type ")); |
| DEBUGMSGOID(("snmptls", map_type, map_type_len)); |
| } |
| if (_data) |
| DEBUGMSG(("snmptls", ", data %s", _data)); |
| |
| _parse_storage_type(_storage_type_str); |
| |
| DEBUGMSG(("snmptls", "\n")); |
| var_list = cert_row_create(pri, hash_type, fingerprint, map_type, |
| map_type_len, (u_char*)_data, _data_len, |
| _storage_type, &rs_idx); |
| } |
| else if (strcmp(argv[arg], "targetParamsFingerprint") == 0) { |
| |
| char * params_name; |
| |
| if (strcmp(argv[++arg], "add") != 0) { |
| fprintf(stderr, "only add is supported at this time\n"); |
| exit(1); |
| } |
| |
| params_name = argv[++arg]; |
| hash_type = atoi(argv[++arg]); |
| fingerprint = argv[++arg]; |
| |
| _parse_storage_type(_storage_type_str); |
| |
| DEBUGMSGT(("snmptls", |
| "create %s param fp, hash type %d, fp %s\n", |
| params_name, hash_type, fingerprint)); |
| |
| var_list = params_row_create(params_name, hash_type, fingerprint, |
| _storage_type, &rs_idx); |
| } |
| |
| else if (strcmp(argv[arg], "targetAddr") == 0) { |
| |
| char * addr_name; |
| |
| if (strcmp(argv[++arg], "add") != 0) { |
| fprintf(stderr, "only add is supported at this time\n"); |
| exit(1); |
| } |
| |
| addr_name = argv[++arg]; |
| |
| _parse_storage_type(_storage_type_str); |
| |
| DEBUGMSGT(("snmptls", |
| "create %s addr fp, hash type %d, fp %s, id %s\n", |
| addr_name, _hash_type, _fp_str, _id_str)); |
| |
| var_list = addr_row_create(addr_name, _hash_type, _fp_str, _id_str, |
| _storage_type, &rs_idx); |
| } |
| |
| if (! var_list) { |
| fprintf(stderr, "no command specified\n"); |
| usage(); |
| } |
| |
| netsnmp_row_create(ss, var_list, rs_idx); |
| |
| SOCK_CLEANUP; |
| return 0; |
| } |
