1 /*
2 * Copyright (C) 2009 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #include <stdio.h>
18 #include <stdint.h>
19 #include <string.h>
20 #include <sys/types.h>
21
22 #include <keystore/IKeystoreService.h>
23 #include <binder/IPCThreadState.h>
24 #include <binder/IServiceManager.h>
25
26 #include <keystore/keystore.h>
27
28 using namespace android;
29 using namespace keystore;
30
31 static const char* responses[] = {
32 NULL,
33 /* [NO_ERROR] = */ "No error",
34 /* [LOCKED] = */ "Locked",
35 /* [UNINITIALIZED] = */ "Uninitialized",
36 /* [SYSTEM_ERROR] = */ "System error",
37 /* [PROTOCOL_ERROR] = */ "Protocol error",
38 /* [PERMISSION_DENIED] = */ "Permission denied",
39 /* [KEY_NOT_FOUND] = */ "Key not found",
40 /* [VALUE_CORRUPTED] = */ "Value corrupted",
41 /* [UNDEFINED_ACTION] = */ "Undefined action",
42 /* [WRONG_PASSWORD] = */ "Wrong password (last chance)",
43 /* [WRONG_PASSWORD + 1] = */ "Wrong password (2 tries left)",
44 /* [WRONG_PASSWORD + 2] = */ "Wrong password (3 tries left)",
45 /* [WRONG_PASSWORD + 3] = */ "Wrong password (4 tries left)",
46 };
47
48 #define NO_ARG_INT_RETURN(cmd) \
49 do { \
50 if (strcmp(argv[1], #cmd) == 0) { \
51 int32_t ret = service->cmd(); \
52 if (ret < 0) { \
53 fprintf(stderr, "%s: could not connect: %d\n", argv[0], ret); \
54 return 1; \
55 } else { \
56 printf(#cmd ": %s (%d)\n", responses[ret], ret); \
57 return 0; \
58 } \
59 } \
60 } while (0)
61
62 #define SINGLE_ARG_INT_RETURN(cmd) \
63 do { \
64 if (strcmp(argv[1], #cmd) == 0) { \
65 if (argc < 3) { \
66 fprintf(stderr, "Usage: %s " #cmd " <name>\n", argv[0]); \
67 return 1; \
68 } \
69 int32_t ret = service->cmd(String16(argv[2])); \
70 if (ret < 0) { \
71 fprintf(stderr, "%s: could not connect: %d\n", argv[0], ret); \
72 return 1; \
73 } else { \
74 printf(#cmd ": %s (%d)\n", responses[ret], ret); \
75 return 0; \
76 } \
77 } \
78 } while (0)
79
80 #define SINGLE_INT_ARG_INT_RETURN(cmd) \
81 do { \
82 if (strcmp(argv[1], #cmd) == 0) { \
83 if (argc < 3) { \
84 fprintf(stderr, "Usage: %s " #cmd " <name>\n", argv[0]); \
85 return 1; \
86 } \
87 int32_t ret = service->cmd(atoi(argv[2])); \
88 if (ret < 0) { \
89 fprintf(stderr, "%s: could not connect: %d\n", argv[0], ret); \
90 return 1; \
91 } else { \
92 printf(#cmd ": %s (%d)\n", responses[ret], ret); \
93 return 0; \
94 } \
95 } \
96 } while (0)
97
98 #define SINGLE_ARG_PLUS_UID_INT_RETURN(cmd) \
99 do { \
100 if (strcmp(argv[1], #cmd) == 0) { \
101 if (argc < 3) { \
102 fprintf(stderr, "Usage: %s " #cmd " <name> <uid>\n", argv[0]); \
103 return 1; \
104 } \
105 int uid = -1; \
106 if (argc > 3) { \
107 uid = atoi(argv[3]); \
108 fprintf(stderr, "Running as uid %d\n", uid); \
109 } \
110 int32_t ret = service->cmd(String16(argv[2]), uid); \
111 if (ret < 0) { \
112 fprintf(stderr, "%s: could not connect: %d\n", argv[0], ret); \
113 return 1; \
114 } else { \
115 printf(#cmd ": %s (%d)\n", responses[ret], ret); \
116 return 0; \
117 } \
118 } \
119 } while (0)
120
121 #define SINGLE_ARG_PLUS_UID_DATA_RETURN(cmd) \
122 do { \
123 if (strcmp(argv[1], #cmd) == 0) { \
124 if (argc < 3) { \
125 fprintf(stderr, "Usage: %s " #cmd " <name> <uid>\n", argv[0]); \
126 return 1; \
127 } \
128 hidl_vec<uint8_t> data; \
129 int uid = -1; \
130 if (argc > 3) { \
131 uid = atoi(argv[3]); \
132 fprintf(stderr, "Running as uid %d\n", uid); \
133 } \
134 int32_t ret = service->cmd(String16(argv[2]), uid, &data); \
135 if (ret < 0) { \
136 fprintf(stderr, "%s: could not connect: %d\n", argv[0], ret); \
137 return 1; \
138 } else if (ret != ::NO_ERROR) { \
139 fprintf(stderr, "%s: " #cmd ": %s (%d)\n", argv[0], responses[ret], ret); \
140 return 1; \
141 } else { \
142 fwrite(&data[0], data.size(), 1, stdout); \
143 fflush(stdout); \
144 return 0; \
145 } \
146 } \
147 } while (0)
148
149 #define STING_ARG_DATA_STDIN_INT_RETURN(cmd) \
150 do { \
151 if (strcmp(argv[1], #cmd) == 0) { \
152 if (argc < 3) { \
153 fprintf(stderr, "Usage: %s " #cmd " <name>\n", argv[0]); \
154 return 1; \
155 } \
156 uint8_t* data; \
157 size_t dataSize; \
158 read_input(&data, &dataSize); \
159 int32_t ret = service->cmd(String16(argv[2]), data, dataSize); \
160 if (ret < 0) { \
161 fprintf(stderr, "%s: could not connect: %d\n", argv[0], ret); \
162 return 1; \
163 } else { \
164 printf(#cmd ": %s (%d)\n", responses[ret], ret); \
165 return 0; \
166 } \
167 } \
168 } while (0)
169
170 #define SINGLE_ARG_DATA_RETURN(cmd) \
171 do { \
172 if (strcmp(argv[1], #cmd) == 0) { \
173 if (argc < 3) { \
174 fprintf(stderr, "Usage: %s " #cmd " <name>\n", argv[0]); \
175 return 1; \
176 } \
177 hidl_vec<uint8_t> data; \
178 int32_t ret = service->cmd(String16(argv[2]), &data); \
179 if (ret < 0) { \
180 fprintf(stderr, "%s: could not connect: %d\n", argv[0], ret); \
181 return 1; \
182 } else if (ret != ::NO_ERROR) { \
183 fprintf(stderr, "%s: " #cmd ": %s (%d)\n", argv[0], responses[ret], ret); \
184 return 1; \
185 } else { \
186 fwrite(&data[0], data.size(), 1, stdout); \
187 fflush(stdout); \
188 return 0; \
189 } \
190 } \
191 } while (0)
192
list(const sp<IKeystoreService> & service,const String16 & name,int uid)193 static int list(const sp<IKeystoreService>& service, const String16& name, int uid) {
194 Vector<String16> matches;
195 int32_t ret = service->list(name, uid, &matches);
196 if (ret < 0) {
197 fprintf(stderr, "list: could not connect: %d\n", ret);
198 return 1;
199 } else if (ret != ::NO_ERROR) {
200 fprintf(stderr, "list: %s (%d)\n", responses[ret], ret);
201 return 1;
202 } else {
203 Vector<String16>::const_iterator it = matches.begin();
204 for (; it != matches.end(); ++it) {
205 printf("%s\n", String8(*it).string());
206 }
207 return 0;
208 }
209 }
210
main(int argc,char * argv[])211 int main(int argc, char* argv[])
212 {
213 if (argc < 2) {
214 fprintf(stderr, "Usage: %s action [parameter ...]\n", argv[0]);
215 return 1;
216 }
217
218 sp<IServiceManager> sm = defaultServiceManager();
219 sp<IBinder> binder = sm->getService(String16("android.security.keystore"));
220 sp<IKeystoreService> service = interface_cast<IKeystoreService>(binder);
221
222 if (service == NULL) {
223 fprintf(stderr, "%s: error: could not connect to keystore service\n", argv[0]);
224 return 1;
225 }
226
227 /*
228 * All the commands should return a value
229 */
230
231 SINGLE_INT_ARG_INT_RETURN(getState);
232
233 SINGLE_ARG_PLUS_UID_DATA_RETURN(get);
234
235 // TODO: insert
236
237 SINGLE_ARG_PLUS_UID_INT_RETURN(del);
238
239 SINGLE_ARG_PLUS_UID_INT_RETURN(exist);
240
241 if (strcmp(argv[1], "list") == 0) {
242 return list(service, argc < 3 ? String16("") : String16(argv[2]),
243 argc < 4 ? -1 : atoi(argv[3]));
244 }
245
246 NO_ARG_INT_RETURN(reset);
247
248 // TODO: notifyUserPasswordChanged
249
250 SINGLE_INT_ARG_INT_RETURN(lock);
251
252 // TODO: unlock
253
254 SINGLE_INT_ARG_INT_RETURN(isEmpty);
255
256 // TODO: generate
257
258 SINGLE_ARG_DATA_RETURN(get_pubkey);
259
260 // TODO: grant
261
262 // TODO: ungrant
263
264 // TODO: getmtime
265
266 fprintf(stderr, "%s: unknown command: %s\n", argv[0], argv[1]);
267 return 1;
268 }
269