416080203b
Each file will be read and then concatenated for the effictive password. This can be used as a kind of multi-factor authenticiton. Fixes https://github.com/rfjakob/gocryptfs/issues/288
54 lines
1.7 KiB
Go
54 lines
1.7 KiB
Go
package readpassword
|
|
|
|
import (
|
|
"bytes"
|
|
"os"
|
|
|
|
"github.com/rfjakob/gocryptfs/internal/exitcodes"
|
|
"github.com/rfjakob/gocryptfs/internal/tlog"
|
|
)
|
|
|
|
// readPassFileConcatenate reads the first line from each file name and
|
|
// concatenates the results. The result does not contain any newlines.
|
|
func readPassFileConcatenate(passfileSlice []string) (result []byte) {
|
|
for _, e := range passfileSlice {
|
|
result = append(result, readPassFile(e)...)
|
|
}
|
|
return result
|
|
}
|
|
|
|
// readPassFile reads the first line from the passed file name.
|
|
func readPassFile(passfile string) []byte {
|
|
tlog.Info.Printf("passfile: reading from file %q", passfile)
|
|
f, err := os.Open(passfile)
|
|
if err != nil {
|
|
tlog.Fatal.Printf("fatal: passfile: could not open %q: %v", passfile, err)
|
|
os.Exit(exitcodes.ReadPassword)
|
|
}
|
|
defer f.Close()
|
|
// +1 for an optional trailing newline,
|
|
// +2 so we can detect if maxPasswordLen is exceeded.
|
|
buf := make([]byte, maxPasswordLen+2)
|
|
n, err := f.Read(buf)
|
|
if err != nil {
|
|
tlog.Fatal.Printf("fatal: passfile: could not read from %q: %v", passfile, err)
|
|
os.Exit(exitcodes.ReadPassword)
|
|
}
|
|
buf = buf[:n]
|
|
// Split into first line and "trailing garbage"
|
|
lines := bytes.SplitN(buf, []byte("\n"), 2)
|
|
if len(lines[0]) == 0 {
|
|
tlog.Fatal.Printf("fatal: passfile: empty first line in %q", passfile)
|
|
os.Exit(exitcodes.ReadPassword)
|
|
}
|
|
if len(lines[0]) > maxPasswordLen {
|
|
tlog.Fatal.Printf("fatal: passfile: max password length (%d bytes) exceeded", maxPasswordLen)
|
|
os.Exit(exitcodes.ReadPassword)
|
|
}
|
|
if len(lines) > 1 && len(lines[1]) > 0 {
|
|
tlog.Warn.Printf("warning: passfile: ignoring trailing garbage (%d bytes) after first line",
|
|
len(lines[1]))
|
|
}
|
|
return lines[0]
|
|
}
|