int
queue_message_commit(uint32_t msgid)
{
int r;
char msgpath[PATH_MAX];
char tmppath[PATH_MAX];
FILE *ifp = NULL;
FILE *ofp = NULL;
profile_enter("queue_message_commit");
queue_message_path(msgid, msgpath, sizeof(msgpath));
if (env->sc_queue_flags & QUEUE_COMPRESSION) {
bsnprintf(tmppath, sizeof tmppath, "%s.comp", msgpath);
ifp = fopen(msgpath, "r");
ofp = fopen(tmppath, "w+");
if (ifp == NULL || ofp == NULL)
goto err;
if (! compress_file(ifp, ofp))
goto err;
fclose(ifp);
fclose(ofp);
ifp = NULL;
ofp = NULL;
if (rename(tmppath, msgpath) == -1) {
if (errno == ENOSPC)
return (0);
unlink(tmppath);
log_warn("rename");
return (0);
}
}
if (env->sc_queue_flags & QUEUE_ENCRYPTION) {
bsnprintf(tmppath, sizeof tmppath, "%s.enc", msgpath);
ifp = fopen(msgpath, "r");
ofp = fopen(tmppath, "w+");
if (ifp == NULL || ofp == NULL)
goto err;
if (! crypto_encrypt_file(ifp, ofp))
goto err;
fclose(ifp);
fclose(ofp);
ifp = NULL;
ofp = NULL;
if (rename(tmppath, msgpath) == -1) {
if (errno == ENOSPC)
return (0);
unlink(tmppath);
log_warn("rename");
return (0);
}
}
r = handler_message_commit(msgid, msgpath);
profile_leave();
/* in case it's not done by the backend */
unlink(msgpath);
log_trace(TRACE_QUEUE,
"queue-backend: queue_message_commit(%08"PRIx32") -> %d",
msgid, r);
return (r);
err:
if (ifp)
fclose(ifp);
if (ofp)
fclose(ofp);
return 0;
}
int
main(int argc, char *argv[])
{
if (argc != 3) {
printf("usage: crypto <key> <buffer>\n");
return 1;
}
if (!crypto_setup(argv[1], strlen(argv[1]))) {
printf("crypto_setup failed\n");
return 1;
}
{
char encbuffer[4096];
size_t enclen;
char decbuffer[4096];
size_t declen;
printf("encrypt/decrypt buffer: ");
enclen = crypto_encrypt_buffer(argv[2], strlen(argv[2]),
encbuffer, sizeof encbuffer);
/* uncomment below to provoke integrity check failure */
/*
* encbuffer[13] = 0x42;
* encbuffer[14] = 0x42;
* encbuffer[15] = 0x42;
* encbuffer[16] = 0x42;
*/
declen = crypto_decrypt_buffer(encbuffer, enclen,
decbuffer, sizeof decbuffer);
if (declen != 0 && !strncmp(argv[2], decbuffer, declen))
printf("ok\n");
else
printf("nope\n");
}
{
FILE *fpin;
FILE *fpout;
printf("encrypt/decrypt file: ");
fpin = fopen("/etc/passwd", "r");
fpout = fopen("/tmp/passwd.enc", "w");
if (!crypto_encrypt_file(fpin, fpout)) {
printf("encryption failed\n");
return 1;
}
fclose(fpin);
fclose(fpout);
/* uncomment below to provoke integrity check failure */
/*
* fpin = fopen("/tmp/passwd.enc", "a");
* fprintf(fpin, "borken");
* fclose(fpin);
*/
fpin = fopen("/tmp/passwd.enc", "r");
fpout = fopen("/tmp/passwd.dec", "w");
if (!crypto_decrypt_file(fpin, fpout))
printf("nope\n");
else
printf("ok\n");
fclose(fpin);
fclose(fpout);
}
return 0;
}