X-Git-Url: http://www.average.org/gitweb/?p=pam_pcsc_cr.git;a=blobdiff_plain;f=test_auth.c;h=8a68810e07b93854655ee3f13650a31d15dd60d5;hp=421c8b93149e3c232cf3e36673b9433f3e515ef0;hb=dc8959a3cb5615448ea9307a3277e608ffd8a6dd;hpb=1e82444d55250382a5521bf4442fdb90369d2c2f

diff --git a/test_auth.c b/test_auth.c
index 421c8b9..8a68810 100644
--- a/test_auth.c
+++ b/test_auth.c
@@ -4,22 +4,49 @@
 #include "authobj.h"
 #include "crypto.h"
 
+unsigned char secret[] = {
+	0xb4, 0x62, 0xf2, 0x60, 0x87, 0x78, 0x16, 0x87, 0xde, 0xce,
+	0x80, 0x09, 0x24, 0x0b, 0x93, 0xfc, 0xa0, 0xfc, 0x56, 0x56
+};
+
+static struct _auth_chunk
+fetch_key(const unsigned char *challenge, const int challengesize)
+{
+	struct _auth_chunk ho = {0};
+	long rc;
+	int keysize = sizeof(ho.data);
+
+#if 0	/* The "real" fetch_key shall do this: */
+	if ((rc = pcsc_cr(challenge, challengesize, ho.data, &keysize))) {
+		ho.err = pcsc_errstr(rc);
+	}
+#else	/* Instead, duplicate make_key so it works without the token */
+	if ((rc = hmac(secret, sizeof(secret), challenge, challengesize,
+						&ho.data, &keysize))) {
+		ho.err = crypto_errstr(rc);
+	} else if (keysize != sizeof(ho.data)) {
+		ho.err = "make_key: hash size is wrong";
+	}
+#endif
+	return ho;
+}
+
 int main(int argc, char *argv[])
 {
 	const char *id = "testuser";
 	const char *pass = "testpassword";
 	const char *nonce = "1";
-	const unsigned char secret[] = {0xb4, 0x62, 0xf2, 0x60, 0x87,
-					0x78, 0x16, 0x87, 0xde, 0xce,
-					0x80, 0x09, 0x24, 0x0b, 0x93,
-					0xfc, 0xa0, 0xfc, 0x56, 0x56};
 	const unsigned char *payload = (unsigned char *)
 					"To authorize or not to authorize?";
 	int i;
 	struct _auth_obj ao;
 	struct _auth_obj nao;
 
-	printf("using crypto %s\n", crypto_init(0));
+	if (argc == 2 && strlen(argv[1]) == 40 &&
+			strspn(argv[1], "0123456789abcdefABCDEF") == 40) {
+		for (i = 0; i < sizeof(secret); i++)
+			sscanf(&argv[1][i*2], "%2hhx", &secret[i]);
+	}
 	ao = new_authobj(id, pass, nonce, secret, sizeof(secret),
 			payload, strlen((char *)payload));
 	printf("new_authobj err=%s\n", ao.err?ao.err:"<no error>");