Add a function to calculate the proper response to a AUTH challenge

from the CLI.

Put in a separate source file, as it should be included in libvarnishapi
as well.



git-svn-id: http://www.varnish-cache.org/svn/trunk/varnish-cache@4590 d4fa192b-c00b-0410-8231-f00ffab90ce4

include/cli_common.h

@@ -47,3 +47,5 @@ struct cli {
 
 int cli_writeres(int fd, const struct cli *cli);
 int cli_readres(int fd, unsigned *status, char **ptr, double tmo);
+
+void CLI_response(int S_fd, const char *challenge, char *reponse);

lib/libvarnish/Makefile.am

@@ -11,6 +11,7 @@ libvarnish_la_SOURCES = \
 	assert.c \
 	binary_heap.c \
 	subproc.c \
+	cli_auth.c \
 	cli_common.c \
 	cli_serve.c \
 	flopen.c \

lib/libvarnish/cli_auth.c

+/*-
+ * Copyright (c) 2010 Linpro AS
+ * All rights reserved.
+ *
+ * Author: Poul-Henning Kamp <phk@phk.freebsd.dk>
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#include "config.h"
+
+#include "svnid.h"
+SVNID("$Id$");
+
+#include <sys/types.h>
+#include <stdio.h>
+#include <unistd.h>
+#include <stdint.h>
+#include <string.h>
+
+#include "cli.h"
+#include "cli_common.h"
+#include "vsha256.h"
+
+void
+CLI_response(int S_fd, const char *challenge, char *response)
+{
+	SHA256_CTX ctx;
+	uint8_t buf[BUFSIZ];
+	int i;
+
+	SHA256_Init(&ctx);
+	SHA256_Update(&ctx, challenge, 32);
+	SHA256_Update(&ctx, "\n", 1);
+	do {
+		i = read(S_fd, buf, sizeof buf);
+		if (i > 0)
+			SHA256_Update(&ctx, buf, i);
+	} while (i > 0);
+	SHA256_Update(&ctx, challenge, 32);
+	SHA256_Update(&ctx, "\n", 1);
+	SHA256_Final(buf, &ctx);
+	for(i = 0; i < SHA256_LEN; i++)
+		sprintf(response + 2 * i, "%02x", buf[i]);
+}