Zabbix

/*

** Zabbix

** Copyright (C) 2001-2023 Zabbix SIA

**

** This program is free software; you can redistribute it and/or modify

** it under the terms of the GNU General Public License as published by

** the Free Software Foundation; either version 2 of the License, or

** (at your option) any later version.

**

** This program is distributed in the hope that it will be useful,

** but WITHOUT ANY WARRANTY; without even the implied warranty of

** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

** GNU General Public License for more details.

**

** You should have received a copy of the GNU General Public License

** along with this program; if not, write to the Free Software

** Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

**/

​

#include "zbxcrypto.h"

#include "zbxstr.h"

​

#if defined(HAVE_OPENSSL)

#include <openssl/evp.h>

#include <openssl/rsa.h>

#include <openssl/err.h>

#include <openssl/bio.h>

#include <openssl/pem.h>

#elif defined(HAVE_GNUTLS)

#include <gnutls/gnutls.h>

#include <gnutls/crypto.h>

#include <gnutls/x509.h>

#include <gnutls/abstract.h>

#endif

​

#if defined(HAVE_OPENSSL) || defined(HAVE_GNUTLS)

static void pem_replace_spaces(char *s)

{

    while ('\0' != *s && '-' != *s)

    {

        if (' ' == *s)

            *s = '\n';

​

        s++;

    }

}

​

/******************************************************************************

 *                                                                            *

 * Purpose: receive PEM container with arbitrary newlines, validate if        *

 *          contains necessary newlines after header and before footer,       *

 *          insert them if they are absent.                                   *

 *                                                                            *

 * Parameters:                                                                *

 *     key     - [OUT/IN] key in PEM container                                *

 *     key_len - [OUT/IN] key length                                          *

 *                                                                            *

 ******************************************************************************/

void    zbx_normalize_pem(char **key, size_t *key_len)

{

#define PEM_BEGIN       "-----BEGIN"

#define PEM_BEGIN_HEADER_END    "-----"

#define PEM_FOOTER_END      "-----END"

    char    *ptr;

    size_t  offset;

​

    if (0 == strncmp(*key, PEM_BEGIN, ZBX_CONST_STRLEN(PEM_BEGIN)))

    {

        if (NULL == (ptr = strstr(*key + ZBX_CONST_STRLEN(PEM_BEGIN), PEM_BEGIN_HEADER_END)))

            return;

​

        ptr += ZBX_CONST_STRLEN(PEM_BEGIN_HEADER_END);

​

        pem_replace_spaces(ptr);

​

        if ('\n' != *ptr)

        {

            offset = ptr - *key - 1;

            zbx_replace_string(key, offset, &offset, "-\n");

            *key_len = *key_len + 1;

        }

​

        if (NULL == (ptr = strstr(*key, PEM_FOOTER_END)))

            return;

​

        if ('\n' != *(ptr = ptr - 1))

        {

            offset = ptr - *key + 1;

            zbx_replace_string(key, offset, &offset, "\n-");

            *key_len = *key_len + 1;

        }