1 // -*- mode:C++; tab-width:8; c-basic-offset:2; indent-tabs-mode:t -*-
2 // vim: ts=8 sw=2 smarttab
4 * Ceph - scalable distributed file system
6 * Copyright (C) 2011 New Dream Network
8 * This is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License version 2.1, as published by the Free Software
11 * Foundation. See file COPYING.
22 #include "common/armor.h"
23 #include "common/safe_io.h"
25 int read_secret_from_file(const char *filename, char *secret, size_t max_len)
31 fd = open(filename, O_RDONLY);
33 perror("unable to read secretfile");
36 len = safe_read(fd, secret, max_len);
38 perror("unable to read secret from file");
43 while (end < secret + len && *end && *end != '\n' && *end != '\r')
51 int set_kernel_secret(const char *secret, const char *key_name)
53 /* try to submit key to kernel via the keys api */
56 int secret_len = strlen(secret);
57 char payload[((secret_len * 3) / 4) + 4];
60 fprintf(stderr, "secret is empty.\n");
64 ret = ceph_unarmor(payload, payload+sizeof(payload), secret, secret+secret_len);
67 fprintf(stderr, "secret is not valid base64: %s.\n",
68 strerror_r(-ret, error_buf, sizeof(error_buf)));
72 serial = add_key("ceph", key_name, payload, sizeof(payload), KEY_SPEC_PROCESS_KEYRING);
80 int is_kernel_secret(const char *key_name)
83 serial = request_key("ceph", key_name, NULL, KEY_SPEC_USER_KEYRING);
87 int get_secret_option(const char *secret, const char *key_name,
88 char *secret_option, size_t max_len)
95 int olen = strlen(key_name) + 7;
97 olen += strlen(secret);
106 ret = set_kernel_secret(secret, key_name);
108 if (ret == -ENODEV || ret == -ENOSYS) {
109 /* running against older kernel; fall back to secret= in options */
110 snprintf(option, olen, "secret=%s", secret);
115 fprintf(stderr, "adding ceph secret key to kernel failed: %s.\n",
116 strerror_r(-ret, error_buf, sizeof(error_buf)));
123 /* add key= option to identify key to use */
124 snprintf(option, olen, "key=%s", key_name);
127 if (strlen(option) + 1 > max_len) {
130 secret_option[max_len-1] = '\0';
131 strncpy(secret_option, option, max_len-1);