diff src/c/driver.c @ 734:f2a2be93331c

Cookie signing working for forms
author Adam Chlipala <adamc@hcoop.net>
date Thu, 16 Apr 2009 19:12:12 -0400
parents 1b1047992ecf
children d049d31a1966
line wrap: on
line diff
--- a/src/c/driver.c	Thu Apr 16 15:38:01 2009 -0400
+++ b/src/c/driver.c	Thu Apr 16 19:12:12 2009 -0400
@@ -10,6 +10,8 @@
 
 #include <pthread.h>
 
+#include <mhash.h>
+
 #include "urweb.h"
 
 int uw_backlog = 10;
@@ -102,6 +104,46 @@
   return ctx;
 }
 
+#define KEYSIZE 16
+#define PASSSIZE 4
+
+#define HASH_ALGORITHM MHASH_SHA256
+#define HASH_BLOCKSIZE 32
+#define KEYGEN_ALGORITHM KEYGEN_MCRYPT
+
+int uw_hash_blocksize = HASH_BLOCKSIZE;
+
+static int password[PASSSIZE];
+static unsigned char private_key[KEYSIZE];
+
+static void init_crypto() {
+  KEYGEN kg = {{HASH_ALGORITHM, HASH_ALGORITHM}};
+  int i;
+
+  assert(mhash_get_block_size(HASH_ALGORITHM) == HASH_BLOCKSIZE);
+
+  for (i = 0; i < PASSSIZE; ++i)
+    password[i] = rand();
+
+  if (mhash_keygen_ext(KEYGEN_ALGORITHM, kg,
+                       private_key, sizeof(private_key),
+                       (unsigned char*)password, sizeof(password)) < 0) {
+    printf("Key generation failed\n");
+    exit(1);
+  }
+}
+
+void uw_sign(const char *in, char *out) {
+  MHASH td;
+
+  td = mhash_hmac_init(HASH_ALGORITHM, private_key, sizeof(private_key),
+                       mhash_get_hash_pblock(HASH_ALGORITHM));
+  
+  mhash(td, in, strlen(in));
+  if (mhash_hmac_deinit(td, out) < 0)
+    printf("Signing failed");
+}
+
 static void *worker(void *data) {
   int me = *(int *)data, retries_left = MAX_RETRIES;
   uw_context ctx = new_context();
@@ -344,9 +386,13 @@
 }
 
 static void initialize() {
-  uw_context ctx = new_context();
+  uw_context ctx;
   failure_kind fk;
 
+  init_crypto();
+
+  ctx = new_context();
+
   if (!ctx)
     exit(1);
 
@@ -411,6 +457,7 @@
     }
   }
 
+  uw_global_init();
   initialize();
 
   names = calloc(nthreads, sizeof(int));
@@ -444,8 +491,6 @@
 
   sin_size = sizeof their_addr;
 
-  uw_global_init();
-
   printf("Listening on port %d....\n", uw_port);
 
   {