1 /* $Id: revokeproc.c,v 1.18 2021/10/13 18:09:42 tb Exp $ */ 2 /* 3 * Copyright (c) 2016 Kristaps Dzonsons <kristaps@bsd.lv> 4 * 5 * Permission to use, copy, modify, and distribute this software for any 6 * purpose with or without fee is hereby granted, provided that the above 7 * copyright notice and this permission notice appear in all copies. 8 * 9 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHORS DISCLAIM ALL WARRANTIES 10 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 11 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR 12 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 13 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 14 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 15 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 16 */ 17 18 #include <assert.h> 19 #include <ctype.h> 20 #include <err.h> 21 #include <errno.h> 22 #include <stdio.h> 23 #include <stdlib.h> 24 #include <string.h> 25 #include <unistd.h> 26 27 #include <openssl/pem.h> 28 #include <openssl/x509.h> 29 #include <openssl/x509v3.h> 30 #include <openssl/err.h> 31 32 #include "extern.h" 33 34 #define RENEW_ALLOW (30 * 24 * 60 * 60) 35 36 /* 37 * Convert the X509's expiration time (which is in ASN1_TIME format) 38 * into a time_t value. 39 * There are lots of suggestions on the Internet on how to do this and 40 * they're really, really unsafe. 41 * Adapt those poor solutions to a safe one. 42 */ 43 static time_t 44 X509expires(X509 *x) 45 { 46 ASN1_TIME *atim; 47 struct tm t; 48 unsigned char *str; 49 size_t i = 0; 50 51 atim = X509_get_notAfter(x); 52 str = atim->data; 53 memset(&t, 0, sizeof(t)); 54 55 /* Account for 2 and 4-digit time. */ 56 57 if (atim->type == V_ASN1_UTCTIME) { 58 if (atim->length <= 2) { 59 warnx("invalid ASN1_TIME"); 60 return (time_t)-1; 61 } 62 t.tm_year = (str[0] - '0') * 10 + (str[1] - '0'); 63 if (t.tm_year < 70) 64 t.tm_year += 100; 65 i = 2; 66 } else if (atim->type == V_ASN1_GENERALIZEDTIME) { 67 if (atim->length <= 4) { 68 warnx("invalid ASN1_TIME"); 69 return (time_t)-1; 70 } 71 t.tm_year = (str[0] - '0') * 1000 + (str[1] - '0') * 100 + 72 (str[2] - '0') * 10 + (str[3] - '0'); 73 t.tm_year -= 1900; 74 i = 4; 75 } 76 77 /* Now the post-year parts. */ 78 79 if (atim->length <= (int)i + 10) { 80 warnx("invalid ASN1_TIME"); 81 return (time_t)-1; 82 } 83 84 t.tm_mon = ((str[i + 0] - '0') * 10 + (str[i + 1] - '0')) - 1; 85 t.tm_mday = (str[i + 2] - '0') * 10 + (str[i + 3] - '0'); 86 t.tm_hour = (str[i + 4] - '0') * 10 + (str[i + 5] - '0'); 87 t.tm_min = (str[i + 6] - '0') * 10 + (str[i + 7] - '0'); 88 t.tm_sec = (str[i + 8] - '0') * 10 + (str[i + 9] - '0'); 89 90 return mktime(&t); 91 } 92 93 int 94 revokeproc(int fd, const char *certfile, int force, 95 int revocate, const char *const *alts, size_t altsz) 96 { 97 char *der = NULL, *dercp, *der64 = NULL; 98 char *san = NULL, *str, *tok; 99 int rc = 0, cc, i, ssz, len; 100 size_t *found = NULL; 101 BIO *bio = NULL; 102 FILE *f = NULL; 103 X509 *x = NULL; 104 long lval; 105 enum revokeop op, rop; 106 time_t t; 107 const STACK_OF(X509_EXTENSION) *exts; 108 X509_EXTENSION *ex; 109 ASN1_OBJECT *obj; 110 size_t j; 111 112 /* 113 * First try to open the certificate before we drop privileges 114 * and jail ourselves. 115 * We allow "f" to be NULL IFF the cert doesn't exist yet. 116 */ 117 118 if ((f = fopen(certfile, "r")) == NULL && errno != ENOENT) { 119 warn("%s", certfile); 120 goto out; 121 } 122 123 /* File-system and sandbox jailing. */ 124 125 ERR_load_crypto_strings(); 126 127 if (pledge("stdio", NULL) == -1) { 128 warn("pledge"); 129 goto out; 130 } 131 132 /* 133 * If we couldn't open the certificate, it doesn't exist so we 134 * haven't submitted it yet, so obviously we can mark that it 135 * has expired and we should renew it. 136 * If we're revoking, however, then that's an error! 137 * Ignore if the reader isn't reading in either case. 138 */ 139 140 if (f == NULL && revocate) { 141 warnx("%s: no certificate found", certfile); 142 (void)writeop(fd, COMM_REVOKE_RESP, REVOKE_OK); 143 goto out; 144 } else if (f == NULL && !revocate) { 145 if (writeop(fd, COMM_REVOKE_RESP, REVOKE_EXP) >= 0) 146 rc = 1; 147 goto out; 148 } 149 150 if ((x = PEM_read_X509(f, NULL, NULL, NULL)) == NULL) { 151 warnx("PEM_read_X509"); 152 goto out; 153 } 154 155 /* Read out the expiration date. */ 156 157 if ((t = X509expires(x)) == (time_t)-1) { 158 warnx("X509expires"); 159 goto out; 160 } 161 162 /* 163 * Next, the long process to make sure that the SAN entries 164 * listed with the certificate fully cover those passed on the 165 * command line. 166 */ 167 168 exts = X509_get0_extensions(x); 169 170 /* Scan til we find the SAN NID. */ 171 172 for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { 173 ex = sk_X509_EXTENSION_value(exts, i); 174 assert(ex != NULL); 175 obj = X509_EXTENSION_get_object(ex); 176 assert(obj != NULL); 177 if (NID_subject_alt_name != OBJ_obj2nid(obj)) 178 continue; 179 180 if (san != NULL) { 181 warnx("%s: two SAN entries", certfile); 182 goto out; 183 } 184 185 bio = BIO_new(BIO_s_mem()); 186 if (bio == NULL) { 187 warnx("BIO_new"); 188 goto out; 189 } else if (!X509V3_EXT_print(bio, ex, 0, 0)) { 190 warnx("X509V3_EXT_print"); 191 goto out; 192 } else if ((san = calloc(1, bio->num_write + 1)) == NULL) { 193 warn("calloc"); 194 goto out; 195 } 196 ssz = BIO_read(bio, san, bio->num_write); 197 if (ssz < 0 || (unsigned)ssz != bio->num_write) { 198 warnx("BIO_read"); 199 goto out; 200 } 201 } 202 203 if (san == NULL) { 204 warnx("%s: does not have a SAN entry", certfile); 205 if (revocate) 206 goto out; 207 force = 2; 208 } 209 210 /* An array of buckets: the number of entries found. */ 211 212 if ((found = calloc(altsz, sizeof(size_t))) == NULL) { 213 warn("calloc"); 214 goto out; 215 } 216 217 /* 218 * Parse the SAN line. 219 * Make sure that all of the domains are represented only once. 220 */ 221 222 str = san; 223 while ((tok = strsep(&str, ",")) != NULL) { 224 if (*tok == '\0') 225 continue; 226 while (isspace((int)*tok)) 227 tok++; 228 if (strncmp(tok, "DNS:", 4)) 229 continue; 230 tok += 4; 231 for (j = 0; j < altsz; j++) 232 if (strcmp(tok, alts[j]) == 0) 233 break; 234 if (j == altsz) { 235 if (revocate) { 236 warnx("%s: unknown SAN entry: %s", certfile, tok); 237 goto out; 238 } 239 force = 2; 240 } 241 if (found[j]++) { 242 if (revocate) { 243 warnx("%s: duplicate SAN entry: %s", certfile, tok); 244 goto out; 245 } 246 force = 2; 247 } 248 } 249 250 for (j = 0; j < altsz; j++) { 251 if (found[j]) 252 continue; 253 if (revocate) { 254 warnx("%s: domain not listed: %s", certfile, alts[j]); 255 goto out; 256 } 257 force = 2; 258 } 259 260 /* 261 * If we're going to revoke, write the certificate to the 262 * netproc in DER and base64-encoded format. 263 * Then exit: we have nothing left to do. 264 */ 265 266 if (revocate) { 267 dodbg("%s: revocation", certfile); 268 269 /* 270 * First, tell netproc we're online. 271 * If they're down, then just exit without warning. 272 */ 273 274 cc = writeop(fd, COMM_REVOKE_RESP, REVOKE_EXP); 275 if (cc == 0) 276 rc = 1; 277 if (cc <= 0) 278 goto out; 279 280 if ((len = i2d_X509(x, NULL)) < 0) { 281 warnx("i2d_X509"); 282 goto out; 283 } else if ((der = dercp = malloc(len)) == NULL) { 284 warn("malloc"); 285 goto out; 286 } else if (len != i2d_X509(x, (u_char **)&dercp)) { 287 warnx("i2d_X509"); 288 goto out; 289 } else if ((der64 = base64buf_url(der, len)) == NULL) { 290 warnx("base64buf_url"); 291 goto out; 292 } else if (writestr(fd, COMM_CSR, der64) >= 0) 293 rc = 1; 294 295 goto out; 296 } 297 298 rop = time(NULL) >= (t - RENEW_ALLOW) ? REVOKE_EXP : REVOKE_OK; 299 300 if (rop == REVOKE_EXP) 301 dodbg("%s: certificate renewable: %lld days left", 302 certfile, (long long)(t - time(NULL)) / 24 / 60 / 60); 303 else 304 dodbg("%s: certificate valid: %lld days left", 305 certfile, (long long)(t - time(NULL)) / 24 / 60 / 60); 306 307 if (rop == REVOKE_OK && force) { 308 warnx("%s: %sforcing renewal", certfile, 309 force == 2 ? "domain list changed, " : ""); 310 rop = REVOKE_EXP; 311 } 312 313 /* 314 * We can re-submit it given RENEW_ALLOW time before. 315 * If netproc is down, just exit. 316 */ 317 318 if ((cc = writeop(fd, COMM_REVOKE_RESP, rop)) == 0) 319 rc = 1; 320 if (cc <= 0) 321 goto out; 322 323 op = REVOKE__MAX; 324 if ((lval = readop(fd, COMM_REVOKE_OP)) == 0) 325 op = REVOKE_STOP; 326 else if (lval == REVOKE_CHECK) 327 op = lval; 328 329 if (op == REVOKE__MAX) { 330 warnx("unknown operation from netproc"); 331 goto out; 332 } else if (op == REVOKE_STOP) { 333 rc = 1; 334 goto out; 335 } 336 337 rc = 1; 338 out: 339 close(fd); 340 if (f != NULL) 341 fclose(f); 342 X509_free(x); 343 BIO_free(bio); 344 free(san); 345 free(der); 346 free(found); 347 free(der64); 348 ERR_print_errors_fp(stderr); 349 ERR_free_strings(); 350 return rc; 351 } 352