1*0Sstevel@tonic-gate /*
2*0Sstevel@tonic-gate  * CDDL HEADER START
3*0Sstevel@tonic-gate  *
4*0Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5*0Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
6*0Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
7*0Sstevel@tonic-gate  * with the License.
8*0Sstevel@tonic-gate  *
9*0Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10*0Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
11*0Sstevel@tonic-gate  * See the License for the specific language governing permissions
12*0Sstevel@tonic-gate  * and limitations under the License.
13*0Sstevel@tonic-gate  *
14*0Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
15*0Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16*0Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
17*0Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
18*0Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
19*0Sstevel@tonic-gate  *
20*0Sstevel@tonic-gate  * CDDL HEADER END
21*0Sstevel@tonic-gate  */
22*0Sstevel@tonic-gate /*
23*0Sstevel@tonic-gate  * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
24*0Sstevel@tonic-gate  * Use is subject to license terms.
25*0Sstevel@tonic-gate  */
26*0Sstevel@tonic-gate 
27*0Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
28*0Sstevel@tonic-gate 
29*0Sstevel@tonic-gate #include <stdio.h>
30*0Sstevel@tonic-gate #include <stdlib.h>
31*0Sstevel@tonic-gate #include <stdarg.h>
32*0Sstevel@tonic-gate #include <syslog.h>
33*0Sstevel@tonic-gate #include <string.h>
34*0Sstevel@tonic-gate #include <cryptoutil.h>
35*0Sstevel@tonic-gate 
36*0Sstevel@tonic-gate #define	CRYPTO_DEBUG_ENV	"SUNW_CRYPTO_DEBUG"
37*0Sstevel@tonic-gate 
38*0Sstevel@tonic-gate static char *_cryptodebug_prefix = NULL;
39*0Sstevel@tonic-gate static int _cryptodebug_enabled = -1; /* -1 unknown, 0 disabled, 1 enabled */
40*0Sstevel@tonic-gate static boolean_t _cryptodebug_syslog = B_TRUE;
41*0Sstevel@tonic-gate 
42*0Sstevel@tonic-gate /*PRINTFLIKE1*/
43*0Sstevel@tonic-gate void
44*0Sstevel@tonic-gate cryptodebug(const char *fmt, ...)
45*0Sstevel@tonic-gate {
46*0Sstevel@tonic-gate 	va_list args;
47*0Sstevel@tonic-gate 	char fmtbuf[BUFSIZ];
48*0Sstevel@tonic-gate 	char msgbuf[BUFSIZ];
49*0Sstevel@tonic-gate 
50*0Sstevel@tonic-gate 	if (fmt == NULL || _cryptodebug_enabled != 1)
51*0Sstevel@tonic-gate 		return;
52*0Sstevel@tonic-gate 
53*0Sstevel@tonic-gate 	va_start(args, fmt);
54*0Sstevel@tonic-gate 	if (_cryptodebug_prefix == NULL) {
55*0Sstevel@tonic-gate 		(void) vsnprintf(msgbuf, sizeof (msgbuf), fmt, args);
56*0Sstevel@tonic-gate 	} else {
57*0Sstevel@tonic-gate 		(void) snprintf(fmtbuf, sizeof (fmtbuf), "%s: %s",
58*0Sstevel@tonic-gate 		    _cryptodebug_prefix, fmt);
59*0Sstevel@tonic-gate 		(void) vsnprintf(msgbuf, sizeof (msgbuf), fmtbuf, args);
60*0Sstevel@tonic-gate 	}
61*0Sstevel@tonic-gate 
62*0Sstevel@tonic-gate 	if (_cryptodebug_syslog) {
63*0Sstevel@tonic-gate 		syslog(LOG_DEBUG, msgbuf);
64*0Sstevel@tonic-gate 	} else {
65*0Sstevel@tonic-gate 		(void) fprintf(stderr, "%s\n", msgbuf);
66*0Sstevel@tonic-gate 	}
67*0Sstevel@tonic-gate 	va_end(args);
68*0Sstevel@tonic-gate }
69*0Sstevel@tonic-gate 
70*0Sstevel@tonic-gate /*
71*0Sstevel@tonic-gate  * cryptoerror
72*0Sstevel@tonic-gate  *
73*0Sstevel@tonic-gate  * This is intended to be used both by interactive commands like cryptoadm(1m)
74*0Sstevel@tonic-gate  * digest(1) etc, and by libraries libpkcs11, libelfsign etc.
75*0Sstevel@tonic-gate  *
76*0Sstevel@tonic-gate  * A library probably wants most (all?) of its errors going to syslog but
77*0Sstevel@tonic-gate  * commands are usually happy for them to go to stderr.
78*0Sstevel@tonic-gate  *
79*0Sstevel@tonic-gate  * If a syslog priority is passed we log on that priority.  Otherwise we
80*0Sstevel@tonic-gate  * use LOG_STDERR to mean use stderr instead. LOG_STDERR is defined in
81*0Sstevel@tonic-gate  * cryptoutil.h
82*0Sstevel@tonic-gate  */
83*0Sstevel@tonic-gate 
84*0Sstevel@tonic-gate /*PRINTFLIKE2*/
85*0Sstevel@tonic-gate void
86*0Sstevel@tonic-gate cryptoerror(int priority, const char *fmt, ...)
87*0Sstevel@tonic-gate {
88*0Sstevel@tonic-gate 	char fmtbuf[BUFSIZ];
89*0Sstevel@tonic-gate 	char msgbuf[BUFSIZ];
90*0Sstevel@tonic-gate 	va_list args;
91*0Sstevel@tonic-gate 
92*0Sstevel@tonic-gate 	if (fmt == NULL)
93*0Sstevel@tonic-gate 		return;
94*0Sstevel@tonic-gate 
95*0Sstevel@tonic-gate 	va_start(args, fmt);
96*0Sstevel@tonic-gate 	if (_cryptodebug_prefix == NULL) {
97*0Sstevel@tonic-gate 		(void) vsnprintf(msgbuf, sizeof (msgbuf), fmt, args);
98*0Sstevel@tonic-gate 	} else {
99*0Sstevel@tonic-gate 		(void) snprintf(fmtbuf, sizeof (fmtbuf), "%s: %s",
100*0Sstevel@tonic-gate 		    _cryptodebug_prefix, fmt);
101*0Sstevel@tonic-gate 		(void) vsnprintf(msgbuf, sizeof (msgbuf), fmtbuf, args);
102*0Sstevel@tonic-gate 	}
103*0Sstevel@tonic-gate 
104*0Sstevel@tonic-gate 	if ((priority == LOG_STDERR) || (priority < 0))  {
105*0Sstevel@tonic-gate 		(void) fprintf(stderr, "%s\n", msgbuf);
106*0Sstevel@tonic-gate 	} else {
107*0Sstevel@tonic-gate 		syslog(priority, msgbuf);
108*0Sstevel@tonic-gate 	}
109*0Sstevel@tonic-gate 	va_end(args);
110*0Sstevel@tonic-gate }
111*0Sstevel@tonic-gate 
112*0Sstevel@tonic-gate void
113*0Sstevel@tonic-gate cryptodebug_init(const char *prefix)
114*0Sstevel@tonic-gate {
115*0Sstevel@tonic-gate 	char *envval = NULL;
116*0Sstevel@tonic-gate 
117*0Sstevel@tonic-gate 	if (prefix != NULL) {
118*0Sstevel@tonic-gate 		_cryptodebug_prefix = strdup(prefix);
119*0Sstevel@tonic-gate 	}
120*0Sstevel@tonic-gate 
121*0Sstevel@tonic-gate 	if (_cryptodebug_enabled == -1) {
122*0Sstevel@tonic-gate 		envval = getenv(CRYPTO_DEBUG_ENV);
123*0Sstevel@tonic-gate 		/*
124*0Sstevel@tonic-gate 		 * If unset or it isn't one of syslog or stderr
125*0Sstevel@tonic-gate 		 * disable debug.
126*0Sstevel@tonic-gate 		 */
127*0Sstevel@tonic-gate 		if (envval == NULL || (strcmp(envval, "") == 0)) {
128*0Sstevel@tonic-gate 			_cryptodebug_enabled = 0;
129*0Sstevel@tonic-gate 			return;
130*0Sstevel@tonic-gate 		} else if (strcmp(envval, "stderr") == 0) {
131*0Sstevel@tonic-gate 			_cryptodebug_syslog = B_FALSE;
132*0Sstevel@tonic-gate 			_cryptodebug_enabled = 1;
133*0Sstevel@tonic-gate 		} else if (strcmp(envval, "syslog") == 0) {
134*0Sstevel@tonic-gate 			_cryptodebug_syslog = B_TRUE;
135*0Sstevel@tonic-gate 			_cryptodebug_enabled = 1;
136*0Sstevel@tonic-gate 		}
137*0Sstevel@tonic-gate 	}
138*0Sstevel@tonic-gate 
139*0Sstevel@tonic-gate 	openlog(_cryptodebug_prefix, LOG_PID, LOG_USER);
140*0Sstevel@tonic-gate }
141*0Sstevel@tonic-gate 
142*0Sstevel@tonic-gate #pragma fini(_cryptodebug_fini)
143*0Sstevel@tonic-gate 
144*0Sstevel@tonic-gate static void
145*0Sstevel@tonic-gate _cryptodebug_fini(void)
146*0Sstevel@tonic-gate {
147*0Sstevel@tonic-gate 	if (_cryptodebug_prefix != NULL)
148*0Sstevel@tonic-gate 		free(_cryptodebug_prefix);
149*0Sstevel@tonic-gate }
150