j3d1/tinc
1
0
Fork 0
Code Issues 1 Pull requests Releases Wiki Activity

Use ECDSA to sign ECDH key exchange for UDP session keys.

Browse source 
The ECDSA public keys will also be included in the ANS_KEY requests,
but are only used when no ECDSA public key is known yet.
This commit is contained in:
Guus Sliepen 2011-07-16 20:21:44 +02:00
parent 03ac48ea19
commit cff27a258f
11 changed files with 116 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

47
src/net_setup.c
View file

@ -45,6 +45,53 @@
char *myport;
static struct event device_ev;
bool node_read_ecdsa_public_key(node_t *n) {
if(ecdsa_active(&n->ecdsa))
return true;
splay_tree_t *config_tree;
FILE *fp;
char *fname;
char *p;
bool result = false;
xasprintf(&fname, "%s/hosts/%s", confbase, n->name);
init_configuration(&config_tree);
if(!read_config_file(config_tree, fname))
goto exit;
/* First, check for simple ECDSAPublicKey statement */
if(get_config_string(lookup_config(config_tree, "ECDSAPublicKey"), &p)) {
result = ecdsa_set_base64_public_key(&n->ecdsa, p);
free(p);
goto exit;
}
/* Else, check for ECDSAPublicKeyFile statement and read it */
free(fname);
if(!get_config_string(lookup_config(config_tree, "ECDSAPublicKeyFile"), &fname))
xasprintf(&fname, "%s/hosts/%s", confbase, n->name);
fp = fopen(fname, "r");
if(!fp) {
logger(LOG_ERR, "Error reading ECDSA public key file `%s': %s", fname, strerror(errno));
goto exit;
}
result = ecdsa_read_pem_public_key(&n->ecdsa, fp);
fclose(fp);
exit:
exit_configuration(&config_tree);
free(fname);
return result;
}
bool read_ecdsa_public_key(connection_t *c) {
FILE *fp;
char *fname;