10102111197

Committed 25 Jul 2024 10:49AM UTC coverage: 62.321% (-2.4%) from 64.7%

Build # 10102111197

Build Type

push

github

Committed by

web-flow

Commit Message

Merge pull request #11678 from cmouse/lua-global-include

Lua global include

Run Details

48170 of 123162 branches covered (39.11%)

Branch coverage included in aggregate %.

54 of 60 new or added lines in 12 files covered. (90.0%)

6087 existing lines in 115 files now uncovered.

137796 of 175240 relevant lines covered (78.63%)

5198630.05 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

33.82

/pdns/dnsdistdist/dnsdist-lua-bindings-dnscrypt.cc

/*
 * This file is part of PowerDNS or dnsdist.
 * Copyright -- PowerDNS.COM B.V. and its contributors
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * In addition, for the avoidance of any doubt, permission is granted to
 * link this program with OpenSSL and to (re)distribute the binaries
 * produced as the result of such linking.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
 */

#include "config.h"
#include "dnsdist.hh"
#include "dnsdist-lua.hh"

#include "dolog.hh"

void setupLuaBindingsDNSCrypt(LuaContext& luaCtx, bool client)
{
#ifdef HAVE_DNSCRYPT
  /* DNSCryptContext bindings */
  luaCtx.registerFunction<std::string (DNSCryptContext::*)() const>("getProviderName", [](const DNSCryptContext& ctx) { return ctx.getProviderName().toStringNoDot(); });
  luaCtx.registerFunction("markActive", &DNSCryptContext::markActive);
  luaCtx.registerFunction("markInactive", &DNSCryptContext::markInactive);
  luaCtx.registerFunction("reloadCertificates", &DNSCryptContext::reloadCertificates);
  luaCtx.registerFunction("removeInactiveCertificate", &DNSCryptContext::removeInactiveCertificate);
  luaCtx.registerFunction<void (std::shared_ptr<DNSCryptContext>::*)(const std::string& certFile, const std::string& keyFile, boost::optional<bool> active)>("loadNewCertificate", [](std::shared_ptr<DNSCryptContext>& ctx, const std::string& certFile, const std::string& keyFile, boost::optional<bool> active) {
    if (ctx == nullptr) {
      throw std::runtime_error("DNSCryptContext::loadNewCertificate() called on a nil value");
    }

    ctx->loadNewCertificate(certFile, keyFile, active ? *active : true);
  });
  luaCtx.registerFunction<void (std::shared_ptr<DNSCryptContext>::*)(const DNSCryptCert& newCert, const DNSCryptPrivateKey& newKey, boost::optional<bool> active)>("addNewCertificate", [](std::shared_ptr<DNSCryptContext>& ctx, const DNSCryptCert& newCert, const DNSCryptPrivateKey& newKey, boost::optional<bool> active) {
    if (ctx == nullptr) {
      throw std::runtime_error("DNSCryptContext::addNewCertificate() called on a nil value");
    }

    ctx->addNewCertificate(newCert, newKey, active ? *active : true);
  });
  luaCtx.registerFunction<LuaArray<std::shared_ptr<DNSCryptCertificatePair>> (std::shared_ptr<DNSCryptContext>::*)()>("getCertificatePairs", [](std::shared_ptr<DNSCryptContext>& ctx) {
    LuaArray<std::shared_ptr<DNSCryptCertificatePair>> result;

    if (ctx != nullptr) {
      size_t idx = 1;
      for (const auto& pair : ctx->getCertificates()) {
        result.emplace_back(idx++, pair);
      }
    }

    return result;
  });

  luaCtx.registerFunction<std::shared_ptr<DNSCryptCertificatePair> (std::shared_ptr<DNSCryptContext>::*)(size_t idx)>("getCertificatePair", [](std::shared_ptr<DNSCryptContext>& ctx, size_t idx) {
    if (ctx == nullptr) {
      throw std::runtime_error("DNSCryptContext::getCertificatePair() called on a nil value");
    }

    std::shared_ptr<DNSCryptCertificatePair> result = nullptr;
    auto pairs = ctx->getCertificates();
    if (idx < pairs.size()) {
      result = pairs.at(idx);
    }

    return result;
  });

  luaCtx.registerFunction<const DNSCryptCert (std::shared_ptr<DNSCryptContext>::*)(size_t idx)>("getCertificate", [](std::shared_ptr<DNSCryptContext>& ctx, size_t idx) {
    if (ctx == nullptr) {
      throw std::runtime_error("DNSCryptContext::getCertificate() called on a nil value");
    }

    auto pairs = ctx->getCertificates();
    if (idx < pairs.size()) {
      return pairs.at(idx)->cert;
    }

    throw std::runtime_error("This DNSCrypt context has no certificate at index " + std::to_string(idx));
  });

  luaCtx.registerFunction<std::string (std::shared_ptr<DNSCryptContext>::*)() const>("printCertificates", [](const std::shared_ptr<DNSCryptContext>& ctx) {
    ostringstream ret;

    if (ctx != nullptr) {
      size_t idx = 1;
      boost::format fmt("%1$-3d %|5t|%2$-8d %|10t|%3$-7d %|20t|%4$-21.21s %|41t|%5$-21.21s");
      ret << (fmt % "#" % "Serial" % "Version" % "From" % "To") << endl;

      for (const auto& pair : ctx->getCertificates()) {
        const auto& cert = pair->cert;
        const DNSCryptExchangeVersion version = DNSCryptContext::getExchangeVersion(cert);

        ret << (fmt % idx % cert.getSerial() % (version == DNSCryptExchangeVersion::VERSION1 ? 1 : 2) % DNSCryptContext::certificateDateToStr(cert.getTSStart()) % DNSCryptContext::certificateDateToStr(cert.getTSEnd())) << endl;
      }
    }

    return ret.str();
  });

  luaCtx.registerFunction<void (DNSCryptContext::*)(const std::string& providerPrivateKeyFile, uint32_t serial, time_t begin, time_t end, boost::optional<DNSCryptExchangeVersion> version)>("generateAndLoadInMemoryCertificate", [](DNSCryptContext& ctx, const std::string& providerPrivateKeyFile, uint32_t serial, time_t begin, time_t end, boost::optional<DNSCryptExchangeVersion> version) {
    DNSCryptPrivateKey privateKey;
    DNSCryptCert cert;

    try {
      if (generateDNSCryptCertificate(providerPrivateKeyFile, serial, begin, end, version ? *version : DNSCryptExchangeVersion::VERSION1, cert, privateKey)) {
        ctx.addNewCertificate(cert, privateKey);
      }
    }
    catch (const std::exception& e) {
      errlog("Error generating a DNSCrypt certificate: %s", e.what());
      g_outputBuffer = "Error generating a DNSCrypt certificate: " + string(e.what()) + "\n";
    }
  });

  /* DNSCryptCertificatePair */
  luaCtx.registerFunction<const DNSCryptCert (std::shared_ptr<DNSCryptCertificatePair>::*)() const>("getCertificate", [](const std::shared_ptr<DNSCryptCertificatePair>& pair) {
    if (pair == nullptr) {
      throw std::runtime_error("DNSCryptCertificatePair::getCertificate() called on a nil value");
    }
    return pair->cert;
  });
  luaCtx.registerFunction<bool (std::shared_ptr<DNSCryptCertificatePair>::*)() const>("isActive", [](const std::shared_ptr<DNSCryptCertificatePair>& pair) {
    if (pair == nullptr) {
      throw std::runtime_error("DNSCryptCertificatePair::isActive() called on a nil value");
    }
    return pair->active;
  });

  /* DNSCryptCert */
  luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getMagic", [](const DNSCryptCert& cert) {
    // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
    return std::string(reinterpret_cast<const char*>(cert.magic.data()), cert.magic.size());
  });
  luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getEsVersion", [](const DNSCryptCert& cert) {
    // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
    return std::string(reinterpret_cast<const char*>(cert.esVersion.data()), cert.esVersion.size());
  });
  luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getProtocolMinorVersion", [](const DNSCryptCert& cert) {
    // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
    return std::string(reinterpret_cast<const char*>(cert.protocolMinorVersion.data()), cert.protocolMinorVersion.size());
  });
  luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getSignature", [](const DNSCryptCert& cert) {
    // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
    return std::string(reinterpret_cast<const char*>(cert.signature.data()), cert.signature.size());
  });
  luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getResolverPublicKey", [](const DNSCryptCert& cert) {
    // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
    return std::string(reinterpret_cast<const char*>(cert.signedData.resolverPK.data()), cert.signedData.resolverPK.size());
  });
  luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getClientMagic", [](const DNSCryptCert& cert) {
    // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
    return std::string(reinterpret_cast<const char*>(cert.signedData.clientMagic.data()), cert.signedData.clientMagic.size());
  });
  luaCtx.registerFunction<uint32_t (DNSCryptCert::*)() const>("getSerial", [](const DNSCryptCert& cert) { return cert.getSerial(); });
  luaCtx.registerFunction<uint32_t (DNSCryptCert::*)() const>("getTSStart", [](const DNSCryptCert& cert) { return ntohl(cert.getTSStart()); });
  luaCtx.registerFunction<uint32_t (DNSCryptCert::*)() const>("getTSEnd", [](const DNSCryptCert& cert) { return ntohl(cert.getTSEnd()); });

  luaCtx.writeFunction("generateDNSCryptCertificate", [client](const std::string& providerPrivateKeyFile, const std::string& certificateFile, const std::string& privateKeyFile, uint32_t serial, time_t begin, time_t end, boost::optional<DNSCryptExchangeVersion> version) {
    setLuaNoSideEffect();
    if (client) {
      return;
    }
    DNSCryptPrivateKey privateKey;
    DNSCryptCert cert;

    try {
      if (generateDNSCryptCertificate(providerPrivateKeyFile, serial, begin, end, version ? *version : DNSCryptExchangeVersion::VERSION1, cert, privateKey)) {
        privateKey.saveToFile(privateKeyFile);
        DNSCryptContext::saveCertFromFile(cert, certificateFile);
      }
    }
    catch (const std::exception& e) {
      errlog("Error generating a DNSCrypt certificate: %s", e.what());
      g_outputBuffer = "Error generating a DNSCrypt certificate: " + string(e.what()) + "\n";
    }
  });

  luaCtx.writeFunction("generateDNSCryptProviderKeys", [client](const std::string& publicKeyFile, const std::string& privateKeyFile) {
    setLuaNoSideEffect();
    if (client) {
      return;
    }
    DNSCryptCertSignedData::ResolverPublicKeyType publicKey;
    DNSCryptCertSignedData::ResolverPrivateKeyType privateKey;
    sodium_mlock(privateKey.data(), privateKey.size());

    try {
      DNSCryptContext::generateProviderKeys(publicKey, privateKey);

      ofstream pubKStream(publicKeyFile);
      // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): ofstream's API
      pubKStream.write(reinterpret_cast<char*>(publicKey.data()), publicKey.size());
      pubKStream.close();

      ofstream privKStream(privateKeyFile);
      // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): ofstream's API
      privKStream.write(reinterpret_cast<char*>(privateKey.data()), privateKey.size());
      privKStream.close();

      g_outputBuffer = "Provider fingerprint is: " + DNSCryptContext::getProviderFingerprint(publicKey) + "\n";
    }
    catch (const std::exception& e) {
      errlog("Error generating a DNSCrypt provider key: %s", e.what());
      g_outputBuffer = "Error generating a DNSCrypt provider key: " + string(e.what()) + "\n";
    }

    sodium_memzero(privateKey.data(), privateKey.size());
    sodium_munlock(privateKey.data(), privateKey.size());
  });

  luaCtx.writeFunction("printDNSCryptProviderFingerprint", [](const std::string& publicKeyFile) {
    setLuaNoSideEffect();
    DNSCryptCertSignedData::ResolverPublicKeyType publicKey;

    try {
      ifstream file(publicKeyFile);
      // NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): ifstream's API
      file.read(reinterpret_cast<char*>(publicKey.data()), publicKey.size());

      if (file.fail()) {
        throw std::runtime_error("Invalid dnscrypt provider public key file " + publicKeyFile);
      }

      file.close();
      g_outputBuffer = "Provider fingerprint is: " + DNSCryptContext::getProviderFingerprint(publicKey) + "\n";
    }
    catch (const std::exception& e) {
      errlog("Error getting a DNSCrypt provider fingerprint: %s", e.what());
      g_outputBuffer = "Error getting a DNSCrypt provider fingerprint: " + string(e.what()) + "\n";
    }
  });
#endif
}

1	/*
2	* This file is part of PowerDNS or dnsdist.
3	* Copyright -- PowerDNS.COM B.V. and its contributors
4	*
5	* This program is free software; you can redistribute it and/or modify
6	* it under the terms of version 2 of the GNU General Public License as
7	* published by the Free Software Foundation.
8	*
9	* In addition, for the avoidance of any doubt, permission is granted to
10	* link this program with OpenSSL and to (re)distribute the binaries
11	* produced as the result of such linking.
12	*
13	* This program is distributed in the hope that it will be useful,
14	* but WITHOUT ANY WARRANTY; without even the implied warranty of
15	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16	* GNU General Public License for more details.
17	*
18	* You should have received a copy of the GNU General Public License
19	* along with this program; if not, write to the Free Software
20	* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
21	*/
22
23	#include "config.h"
24	#include "dnsdist.hh"
25	#include "dnsdist-lua.hh"
26
27	#include "dolog.hh"
28
29	void setupLuaBindingsDNSCrypt(LuaContext& luaCtx, bool client)
30	{	631✔
31	#ifdef HAVE_DNSCRYPT	631✔
32	/* DNSCryptContext bindings */
33	luaCtx.registerFunction<std::string (DNSCryptContext::*)() const>("getProviderName", [](const DNSCryptContext& ctx) { return ctx.getProviderName().toStringNoDot(); });	631✔
34	luaCtx.registerFunction("markActive", &DNSCryptContext::markActive);	631✔
35	luaCtx.registerFunction("markInactive", &DNSCryptContext::markInactive);	631✔
36	luaCtx.registerFunction("reloadCertificates", &DNSCryptContext::reloadCertificates);	631✔
37	luaCtx.registerFunction("removeInactiveCertificate", &DNSCryptContext::removeInactiveCertificate);	631✔
38	luaCtx.registerFunction<void (std::shared_ptr<DNSCryptContext>::*)(const std::string& certFile, const std::string& keyFile, boost::optional<bool> active)>("loadNewCertificate", [](std::shared_ptr<DNSCryptContext>& ctx, const std::string& certFile, const std::string& keyFile, boost::optional<bool> active) {	631✔
39	if (ctx == nullptr) {
40	throw std::runtime_error("DNSCryptContext::loadNewCertificate() called on a nil value");	1!
41	}	×
UNCOV 42		×
43	ctx->loadNewCertificate(certFile, keyFile, active ? *active : true);
44	});	1!
45	luaCtx.registerFunction<void (std::shared_ptr<DNSCryptContext>::*)(const DNSCryptCert& newCert, const DNSCryptPrivateKey& newKey, boost::optional<bool> active)>("addNewCertificate", [](std::shared_ptr<DNSCryptContext>& ctx, const DNSCryptCert& newCert, const DNSCryptPrivateKey& newKey, boost::optional<bool> active) {	1✔
46	if (ctx == nullptr) {	631✔
47	throw std::runtime_error("DNSCryptContext::addNewCertificate() called on a nil value");
48	}	×
UNCOV 49		×
50	ctx->addNewCertificate(newCert, newKey, active ? *active : true);	×
51	});
UNCOV 52	luaCtx.registerFunction<LuaArray<std::shared_ptr<DNSCryptCertificatePair>> (std::shared_ptr<DNSCryptContext>::*)()>("getCertificatePairs", [](std::shared_ptr<DNSCryptContext>& ctx) {	×
53	LuaArray<std::shared_ptr<DNSCryptCertificatePair>> result;	×
54		631✔
55	if (ctx != nullptr) {	×
56	size_t idx = 1;
57	for (const auto& pair : ctx->getCertificates()) {	×
58	result.emplace_back(idx++, pair);	×
59	}	×
60	}	×
UNCOV 61		×
62	return result;	×
63	});
UNCOV 64		×
UNCOV 65	luaCtx.registerFunction<std::shared_ptr<DNSCryptCertificatePair> (std::shared_ptr<DNSCryptContext>::*)(size_t idx)>("getCertificatePair", [](std::shared_ptr<DNSCryptContext>& ctx, size_t idx) {	×
66	if (ctx == nullptr) {
67	throw std::runtime_error("DNSCryptContext::getCertificatePair() called on a nil value");	631✔
68	}
UNCOV 69		×
70	std::shared_ptr<DNSCryptCertificatePair> result = nullptr;	×
71	auto pairs = ctx->getCertificates();	×
72	if (idx < pairs.size()) {
73	result = pairs.at(idx);	×
74	}	×
UNCOV 75		×
76	return result;	×
77	});	×
78
UNCOV 79	luaCtx.registerFunction<const DNSCryptCert (std::shared_ptr<DNSCryptContext>::*)(size_t idx)>("getCertificate", [](std::shared_ptr<DNSCryptContext>& ctx, size_t idx) {	×
UNCOV 80	if (ctx == nullptr) {	×
81	throw std::runtime_error("DNSCryptContext::getCertificate() called on a nil value");
82	}	631✔
83
84	auto pairs = ctx->getCertificates();	4!
UNCOV 85	if (idx < pairs.size()) {	×
UNCOV 86	return pairs.at(idx)->cert;	×
87	}
88		4✔
89	throw std::runtime_error("This DNSCrypt context has no certificate at index " + std::to_string(idx));	4!
90	});	4✔
91		4✔
92	luaCtx.registerFunction<std::string (std::shared_ptr<DNSCryptContext>::*)() const>("printCertificates", [](const std::shared_ptr<DNSCryptContext>& ctx) {
93	ostringstream ret;	×
94		4✔
95	if (ctx != nullptr) {
96	size_t idx = 1;	631✔
97	boost::format fmt("%1$-3d %\|5t\|%2$-8d %\|10t\|%3$-7d %\|20t\|%4$-21.21s %\|41t\|%5$-21.21s");	×
98	ret << (fmt % "#" % "Serial" % "Version" % "From" % "To") << endl;
UNCOV 99		×
100	for (const auto& pair : ctx->getCertificates()) {	×
101	const auto& cert = pair->cert;	×
102	const DNSCryptExchangeVersion version = DNSCryptContext::getExchangeVersion(cert);	×
103
104	ret << (fmt % idx % cert.getSerial() % (version == DNSCryptExchangeVersion::VERSION1 ? 1 : 2) % DNSCryptContext::certificateDateToStr(cert.getTSStart()) % DNSCryptContext::certificateDateToStr(cert.getTSEnd())) << endl;	×
105	}	×
106	}	×
107
108	return ret.str();	×
109	});	×
UNCOV 110		×
111	luaCtx.registerFunction<void (DNSCryptContext::*)(const std::string& providerPrivateKeyFile, uint32_t serial, time_t begin, time_t end, boost::optional<DNSCryptExchangeVersion> version)>("generateAndLoadInMemoryCertificate", [](DNSCryptContext& ctx, const std::string& providerPrivateKeyFile, uint32_t serial, time_t begin, time_t end, boost::optional<DNSCryptExchangeVersion> version) {
UNCOV 112	DNSCryptPrivateKey privateKey;	×
UNCOV 113	DNSCryptCert cert;	×
114
115	try {	631✔
116	if (generateDNSCryptCertificate(providerPrivateKeyFile, serial, begin, end, version ? *version : DNSCryptExchangeVersion::VERSION1, cert, privateKey)) {	3✔
117	ctx.addNewCertificate(cert, privateKey);	3✔
118	}
119	}	3✔
120	catch (const std::exception& e) {	3!
121	errlog("Error generating a DNSCrypt certificate: %s", e.what());	3✔
122	g_outputBuffer = "Error generating a DNSCrypt certificate: " + string(e.what()) + "\n";	3✔
123	}	3✔
124	});	3✔
UNCOV 125		×
UNCOV 126	/* DNSCryptCertificatePair */	×
UNCOV 127	luaCtx.registerFunction<const DNSCryptCert (std::shared_ptr<DNSCryptCertificatePair>::*)() const>("getCertificate", [](const std::shared_ptr<DNSCryptCertificatePair>& pair) {	×
128	if (pair == nullptr) {	3✔
129	throw std::runtime_error("DNSCryptCertificatePair::getCertificate() called on a nil value");
130	}
131	return pair->cert;	631✔
132	});	×
UNCOV 133	luaCtx.registerFunction<bool (std::shared_ptr<DNSCryptCertificatePair>::*)() const>("isActive", [](const std::shared_ptr<DNSCryptCertificatePair>& pair) {	×
134	if (pair == nullptr) {	×
135	throw std::runtime_error("DNSCryptCertificatePair::isActive() called on a nil value");	×
136	}	×
137	return pair->active;	631✔
138	});	×
UNCOV 139		×
UNCOV 140	/* DNSCryptCert */	×
UNCOV 141	luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getMagic", [](const DNSCryptCert& cert) {	×
UNCOV 142	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API	×
143	return std::string(reinterpret_cast<const char*>(cert.magic.data()), cert.magic.size());
144	});
145	luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getEsVersion", [](const DNSCryptCert& cert) {	631✔
146	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API	631✔
147	return std::string(reinterpret_cast<const char*>(cert.esVersion.data()), cert.esVersion.size());	631✔
148	});	631✔
149	luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getProtocolMinorVersion", [](const DNSCryptCert& cert) {	631✔
150	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API	631✔
151	return std::string(reinterpret_cast<const char*>(cert.protocolMinorVersion.data()), cert.protocolMinorVersion.size());	631✔
152	});	631✔
153	luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getSignature", [](const DNSCryptCert& cert) {	631✔
154	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
155	return std::string(reinterpret_cast<const char*>(cert.signature.data()), cert.signature.size());	631✔
156	});	7✔
157	luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getResolverPublicKey", [](const DNSCryptCert& cert) {	7!
UNCOV 158	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API	×
159	return std::string(reinterpret_cast<const char*>(cert.signedData.resolverPK.data()), cert.signedData.resolverPK.size());	×
160	});	7✔
161	luaCtx.registerFunction<std::string (DNSCryptCert::*)() const>("getClientMagic", [](const DNSCryptCert& cert) {	7✔
162	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): std::string's API
163	return std::string(reinterpret_cast<const char*>(cert.signedData.clientMagic.data()), cert.signedData.clientMagic.size());	7✔
164	});	7!
165	luaCtx.registerFunction<uint32_t (DNSCryptCert::*)() const>("getSerial", [](const DNSCryptCert& cert) { return cert.getSerial(); });	7✔
166	luaCtx.registerFunction<uint32_t (DNSCryptCert::*)() const>("getTSStart", [](const DNSCryptCert& cert) { return ntohl(cert.getTSStart()); });	7✔
167	luaCtx.registerFunction<uint32_t (DNSCryptCert::*)() const>("getTSEnd", [](const DNSCryptCert& cert) { return ntohl(cert.getTSEnd()); });	7✔
168		7✔
169	luaCtx.writeFunction("generateDNSCryptCertificate", [client](const std::string& providerPrivateKeyFile, const std::string& certificateFile, const std::string& privateKeyFile, uint32_t serial, time_t begin, time_t end, boost::optional<DNSCryptExchangeVersion> version) {	7✔
UNCOV 170	setLuaNoSideEffect();	×
UNCOV 171	if (client) {	×
172	return;	×
173	}	7✔
174	DNSCryptPrivateKey privateKey;
175	DNSCryptCert cert;	631✔
UNCOV 176		×
UNCOV 177	try {	×
UNCOV 178	if (generateDNSCryptCertificate(providerPrivateKeyFile, serial, begin, end, version ? *version : DNSCryptExchangeVersion::VERSION1, cert, privateKey)) {	×
UNCOV 179	privateKey.saveToFile(privateKeyFile);	×
UNCOV 180	DNSCryptContext::saveCertFromFile(cert, certificateFile);	×
UNCOV 181	}	×
UNCOV 182	}	×
183	catch (const std::exception& e) {
184	errlog("Error generating a DNSCrypt certificate: %s", e.what());	×
185	g_outputBuffer = "Error generating a DNSCrypt certificate: " + string(e.what()) + "\n";	×
186	}
UNCOV 187	});	×
UNCOV 188		×
UNCOV 189	luaCtx.writeFunction("generateDNSCryptProviderKeys", [client](const std::string& publicKeyFile, const std::string& privateKeyFile) {	×
190	setLuaNoSideEffect();
191	if (client) {	×
192	return;	×
193	}	×
194	DNSCryptCertSignedData::ResolverPublicKeyType publicKey;
195	DNSCryptCertSignedData::ResolverPrivateKeyType privateKey;	×
196	sodium_mlock(privateKey.data(), privateKey.size());	×
UNCOV 197		×
198	try {	×
199	DNSCryptContext::generateProviderKeys(publicKey, privateKey);	×
UNCOV 200		×
201	ofstream pubKStream(publicKeyFile);
UNCOV 202	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): ofstream's API	×
203	pubKStream.write(reinterpret_cast<char*>(publicKey.data()), publicKey.size());	×
204	pubKStream.close();	×
205
206	ofstream privKStream(privateKeyFile);	631✔
UNCOV 207	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): ofstream's API	×
208	privKStream.write(reinterpret_cast<char*>(privateKey.data()), privateKey.size());	×
209	privKStream.close();
UNCOV 210		×
211	g_outputBuffer = "Provider fingerprint is: " + DNSCryptContext::getProviderFingerprint(publicKey) + "\n";	×
212	}	×
213	catch (const std::exception& e) {
214	errlog("Error generating a DNSCrypt provider key: %s", e.what());	×
215	g_outputBuffer = "Error generating a DNSCrypt provider key: " + string(e.what()) + "\n";	×
216	}	×
217
218	sodium_memzero(privateKey.data(), privateKey.size());	×
219	sodium_munlock(privateKey.data(), privateKey.size());	×
220	});	×
UNCOV 221		×
UNCOV 222	luaCtx.writeFunction("printDNSCryptProviderFingerprint", [](const std::string& publicKeyFile) {	×
223	setLuaNoSideEffect();	×
224	DNSCryptCertSignedData::ResolverPublicKeyType publicKey;	×
UNCOV 225		×
226	try {	631✔
227	ifstream file(publicKeyFile);	631✔
228	// NOLINTNEXTLINE(cppcoreguidelines-pro-type-reinterpret-cast): ifstream's API
229	file.read(reinterpret_cast<char*>(publicKey.data()), publicKey.size());
230
231	if (file.fail()) {
232	throw std::runtime_error("Invalid dnscrypt provider public key file " + publicKeyFile);
233	}
234
235	file.close();
236	g_outputBuffer = "Provider fingerprint is: " + DNSCryptContext::getProviderFingerprint(publicKey) + "\n";
237	}
238	catch (const std::exception& e) {
239	errlog("Error getting a DNSCrypt provider fingerprint: %s", e.what());
240	g_outputBuffer = "Error getting a DNSCrypt provider fingerprint: " + string(e.what()) + "\n";
241	}
242	});
243	#endif
244	}

PowerDNS / pdns / 10102111197

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous