aheinecke@25: /** @brief Main entry point for the cinst process.
aheinecke@25:  *
aheinecke@25:  *  The cinst process may or may not be run with elevated
aheinecke@25:  *  privileges. When run with elevated privileges this
aheinecke@25:  *  process will modify system wide certificate stores.
aheinecke@25:  *  Otherwise only the users certificate stores are modified.
aheinecke@25:  *
aheinecke@59:  *  It expects a certificatelist on stdin enclosed in a
aheinecke@59:  *  -----BEGIN CERTIFICATE LIST-----
aheinecke@59:  *  ...
aheinecke@59:  *  -----END CERTIFICATE LIST-----
aheinecke@59:  *
aheinecke@59:  *  Followed by additional instruction lines of:
aheinecke@59:  *  I:<certificate>
aheinecke@59:  *  R:<certificate>
aheinecke@59:  *
aheinecke@59:  *  It will only execute the instructions if the
aheinecke@59:  *  I and R instructions are also part of the signed
aheinecke@59:  *  certificate list. The signature is validated with the
aheinecke@59:  *  built in key.
aheinecke@59:  *
aheinecke@59:  *  The special instruction "UNINSTALL" will cause the installer
aheinecke@59:  *  to remove all certificates (Even those marked with I) that
aheinecke@59:  *  are part of the list to be removed.
aheinecke@25:  *
aheinecke@25:  **/
aheinecke@59: #define MAX_LINE_LENGTH 1000
aheinecke@59: #define MAX_LINES 1000
aheinecke@59: #define MAX_INPUT_SIZE 2000000 /* MAX_LINE_LENGTH * (MAX_LINES *2) */
aheinecke@25: 
aheinecke@25: #include <stdio.h>
aheinecke@59: #include <string.h>
aheinecke@59: #include <assert.h>
aheinecke@59: 
aheinecke@59: #include "strhelp.h"
aheinecke@59: #include "listutil.h"
aheinecke@59: 
aheinecke@59: /* @brief Read stdin into data structures.
aheinecke@59:  *
aheinecke@59:  * Reads from stdin and sorts the input into the respective
aheinecke@59:  * variables. The pointers returned need to be freed by the caller.
aheinecke@59:  * Terminates in OOM conditions.
aheinecke@59:  *
aheinecke@59:  * @returns: 0 on success. -1 otherwise.
aheinecke@59:  */
aheinecke@59: void readInput(char **certificateList, char ***to_install,
aheinecke@59:               char ***to_remove)
aheinecke@59: {
aheinecke@59:     int lines_read = 0;
aheinecke@59:     int readingList = 0;
aheinecke@59:     char buf[MAX_LINE_LENGTH + 1];
aheinecke@59: 
aheinecke@59:     while (fgets(buf, MAX_LINE_LENGTH + 1, stdin)) {
aheinecke@59:         if (lines_read ++ > MAX_LINES) {
aheinecke@59:             printf("Too many lines\n");
aheinecke@59:         }
aheinecke@59:         if (strcmp("-----BEGIN CERTIFICATE LIST-----", buf) == 0){
aheinecke@59:             readingList = 1;
aheinecke@59:             continue;
aheinecke@59:         }
aheinecke@59:         if (strcmp("-----END CERTIFICATE LIST-----", buf) == 0){
aheinecke@59:             readingList = 0;
aheinecke@59:             continue;
aheinecke@59:         }
aheinecke@59:         if (readingList) {
aheinecke@59:             str_append_str(certificateList, buf);
aheinecke@59:             continue;
aheinecke@59:         }
aheinecke@59:         if (*buf == 'I') {
aheinecke@59:             array_append_str(to_install, buf+2);
aheinecke@59:             continue;
aheinecke@59:         }
aheinecke@59:         if (*buf == 'R') {
aheinecke@59:             array_append_str(to_remove, buf+2);
aheinecke@59:             continue;
aheinecke@59:         }
aheinecke@59:         if (strcmp("UNINSTALL", buf) == 0) {
aheinecke@59:             array_append_str(to_remove, buf);
aheinecke@59:         }
aheinecke@59:     }
aheinecke@59: 
aheinecke@59:     return;
aheinecke@59: }
aheinecke@25: 
andre@26: int main() {
aheinecke@59: 
aheinecke@59:     char **to_install = NULL;
aheinecke@59:     char **to_remove = NULL;
aheinecke@59:     char *certificateList = NULL;
aheinecke@59:     int ret = -1;
aheinecke@59: 
aheinecke@59:     readInput(&certificateList, &to_install, &to_remove);
aheinecke@59: 
aheinecke@59:     ret = verify_list(certificateList, strlen(certificateList));
aheinecke@59: 
aheinecke@59:     printf ("Verify List returned %i\n", ret);
aheinecke@59: 
aheinecke@25:     return 0;
aheinecke@25: }