path: root/pass_util.c

#include <unistd.h>
#include <stdlib.h>
#include <errno.h>
#include <string.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <linux/limits.h>
#include <libgen.h>
#include <termios.h>
#include <stdio.h>

#include "pass_util.h"
#include "util.h"
#include "gpg.h"

#define DEF_PASS_DIR	"pass"
#define FPR_MAX		256

static char pass_dir[PATH_MAX] = {0};
static char pass_out[PASS_MAX] = {0};

int set_pass_dir(void);

int set_pass_dir(void) {
	const char *env;

	env = getenv("PASSWORD_STORE_DIR");
	if (env) {
		strncpy(pass_dir, env, sizeof(pass_dir) - 1);
		return 0;
	}

	env = getenv("XDG_DATA_HOME");
	if (env) {
		snprintf(pass_dir, sizeof(pass_dir) - 1, "%s/%s", env,
			DEF_PASS_DIR);
		return 0;
	}

	env = getenv("HOME");
	if (env) {
		snprintf(pass_dir, sizeof(pass_dir) - 1, "%s/%s/%s", env,
			".local/share", DEF_PASS_DIR);
		return 0;
	}

	return 1;
}

int pass_init(const char *fpr)
{
	int r;
	char gpg_id_path[PATH_MAX];
	FILE *gpg_id;

	r = set_pass_dir();
	if (r)
		err_die(1, "PASSWORD_STORE_DIR not set");

	r = gpg_key_validate(fpr);
	if (r)
		err_die(1, "key not usable, try gpg --full-generate-key");


	r = r_mkdir(pass_dir, S_IRWXU);
	if (r)
		err_die(1, "%s %s", pass_dir, strerror(errno));

	r = snprintf(gpg_id_path, sizeof(gpg_id_path), "%s/%s", pass_dir, ".gpg-id");
	if (r > (int) sizeof(gpg_id_path))
		err_die(1, "path exceeded PATH_MAX");

	gpg_id = fopen(gpg_id_path, "w");
	if (!gpg_id)
		err_die(1, "%s %s", gpg_id_path, strerror(errno));

	r = fwrite(fpr, strlen(fpr), 1,gpg_id);
	fclose(gpg_id);
	if (!r)
		err_die(1, "write failed");

	return 0;
}

const char *pass_cat(const char *path)
{
	int r;
	char *rc;
	char gpg_id_path[PATH_MAX], fpr[FPR_MAX], pass_path[PATH_MAX];
	FILE *gpg_id;

	r = set_pass_dir();
	if (r)
		err_die(NULL, "PASSWORD_STORE_DIR not set");

	r = snprintf(gpg_id_path, sizeof(gpg_id_path), "%s/%s", pass_dir, ".gpg-id");
	if (r > (int) sizeof(gpg_id_path))
		err_die(NULL, "path exceeded PATH_MAX");

	gpg_id = fopen(gpg_id_path, "r");
	if (!gpg_id)
		err_die(NULL, "%s %s", gpg_id_path, strerror(errno));

	rc = fgets(fpr, sizeof(fpr), gpg_id);
	if (!rc)
		err_die(NULL, "failed to read %s", gpg_id_path);

	fclose(gpg_id);

	r = gpg_key_validate(fpr);
	if (r)
		err_die(NULL, "key not usable, try gpg --list-keys");

	r = snprintf(pass_path, sizeof(pass_path), "%s/%s.gpg", pass_dir, path);
	if (r > (int) sizeof(gpg_id_path))
		err_die(NULL, "path exceeded PATH_MAX");

	r = gpg_decrypt(fpr, pass_path, pass_out, sizeof(pass_out));
	return r ? NULL : pass_out;
}

size_t pass_getpass(char **lineptr, size_t *n, FILE *stream)
{
	int r;
	struct termios new, old;

	r = tcgetattr(fileno(stream), &old);
	if (r)
		return -1;

	new = old;
	new.c_lflag &= ~ECHO;
	r = tcsetattr(fileno(stream), TCSAFLUSH, &new);
	if (r)
		return -1;

	r = getline (lineptr, n, stream);
	if (r > 0 && (*lineptr)[r - 1] == '\n')
		(*lineptr)[r - 1] = '\0';

	(void) tcsetattr (fileno (stream), TCSAFLUSH, &old);

	return r;
}

int pass_add(const char *path, const char *pass, size_t n)
{
	int r;
	char *rc;
	FILE *gpg_id, *out_stream;
	char gpg_id_path[PATH_MAX], fpr[FPR_MAX], pass_path[PATH_MAX];

	r = set_pass_dir();
	if (r)
		err_die(1, "PASSWORD_STORE_DIR not set");

	r = snprintf(gpg_id_path, sizeof(gpg_id_path), "%s/%s", pass_dir, ".gpg-id");
	if (r > (int) sizeof(gpg_id_path))
		err_die(1, "path exceeded PATH_MAX");

	gpg_id = fopen(gpg_id_path, "r");
	if (!gpg_id)
		err_die(1, "%s %s", gpg_id_path, strerror(errno));

	rc = fgets(fpr, sizeof(fpr), gpg_id);
	if (!rc)
		err_die(1, "failed to read %s", gpg_id_path);
	fclose(gpg_id);

	r = gpg_key_validate(fpr);
	if (r)
		err_die(1, "key not usable, try gpg --list-keys");

	r = snprintf(pass_path, sizeof(pass_path), "%s/%s.gpg", pass_dir, path);
	if (r > (int) sizeof(gpg_id_path))
		err_die(1, "path exceeded PATH_MAX");

	rc = strdup(pass_path);
	if (!rc)
		err_die(1, "%s", strerror(errno));
	(void) r_mkdir(dirname(rc), S_IRWXU);
	free(rc);

	r = access(pass_path, F_OK);
	if (!(errno & ENOENT))
		err_die(1, "an entry already exists for %s", path);

	out_stream = fopen(pass_path, "w");
	if (!out_stream)
		err_die(1, "%s", strerror(errno));

	r = gpg_encrypt(out_stream, fpr, pass, n);

	fclose(out_stream);
	return r;
}