1 files changed, 149 insertions, 0 deletions
diff --git a/pki/base/migrate/kra/RecoverPin.java b/pki/base/migrate/kra/RecoverPin.java
new file mode 100755
index 000000000..2ad268c37
--- /dev/null
+++ b/pki/base/migrate/kra/RecoverPin.java
@@ -0,0 +1,149 @@
+// --- BEGIN COPYRIGHT BLOCK ---
+// This program is free software; you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation; version 2 of the License.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License along
+// with this program; if not, write to the Free Software Foundation, Inc.,
+// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+//
+// (C) 2007 Red Hat, Inc.
+// All rights reserved.
+// --- END COPYRIGHT BLOCK ---
+
+
+// package com.netscape.cmstools;
+
+import org.mozilla.jss.pkix.cmc.*;
+import org.mozilla.jss.pkix.cms.*;
+import org.mozilla.jss.pkix.cert.*;
+import org.mozilla.jss.pkix.primitive.*;
+import org.mozilla.jss.asn1.*;
+import org.mozilla.jss.pkcs10.*;
+import org.mozilla.jss.crypto.*;
+import org.mozilla.jss.CryptoManager;
+import org.mozilla.jss.crypto.CryptoToken;
+import org.mozilla.jss.crypto.SignatureAlgorithm;
+import org.mozilla.jss.crypto.DigestAlgorithm;
+import org.mozilla.jss.crypto.X509Certificate;
+import org.mozilla.jss.util.*;
+import org.mozilla.jss.*;
+
+import sun.misc.BASE64Encoder;
+import sun.misc.*;
+
+import java.io.*;
+import java.util.*;
+
+import com.netscape.cmscore.shares.*;
+
+public class RecoverPin {
+    
+    public static String getPassword(Hashtable shares) throws Exception
+    {
+        System.out.println("Share size '" + shares.size() + "'");
+        JoinShares j = new JoinShares(shares.size());
+
+        Enumeration e = shares.keys();
+        while (e.hasMoreElements()) {
+          String next = (String) e.nextElement();
+System.out.println("Add share " + (int)(Integer.parseInt(next) + 1));
+          j.addShare(Integer.parseInt(next) + 1,
+                (byte[]) shares.get(next));
+        }
+        byte secret[] = j.recoverSecret();
+        String pwd = new String(secret);
+        return pwd;
+    }
+
+    public static byte[] resizeShare(byte share[]) {
+        byte data[] = new byte[share.length - 2];
+
+        for (int i = 2; i < share.length; i++) {
+            data[i - 2] = share[i];
+        }
+        return data;
+    }
+
+    public static Hashtable getShares(CryptoToken token,
+              Properties kra_mn_p) throws Exception
+    {
+        BufferedReader br = new BufferedReader( new InputStreamReader(System.in));
+        Hashtable v = new Hashtable();
+        Enumeration e = kra_mn_p.keys();
+        int n = Integer.parseInt((String)kra_mn_p.get("n"));
+        for (int i = 0; i < n; i++) {
+          String uid = (String)kra_mn_p.get("uid"+i);
+          System.out.println("Got uid '" + uid + "'");
+
+          String encrypted = (String)kra_mn_p.get("share"+i);
+          System.out.println("Got share '" + encrypted + "'");
+
+          BASE64Decoder decoder = new BASE64Decoder();
+          byte share[] = decoder.decodeBuffer(encrypted);
+          System.out.println("Got encrypted share length '" + 
+                  share.length + "'");
+
+          System.out.println("Please input password for " + uid + ":");
+          String pwd = br.readLine();
+          System.out.println("Got password '" + pwd + "'");
+
+          Cipher cipher = token.getCipherContext(
+                    EncryptionAlgorithm.DES3_CBC_PAD);
+          byte iv[] = {0x01, 0x01, 0x01, 0x01, 0x01,
+                    0x01, 0x01, 0x01};
+          Password pass = new Password(pwd.toCharArray());
+          KeyGenerator kg = token.getKeyGenerator(
+                        PBEAlgorithm.PBE_SHA1_DES3_CBC);
+          PBEKeyGenParams kgp = new PBEKeyGenParams(pass,
+                    iv, 5);
+          kg.initialize(kgp);
+          SymmetricKey sk = kg.generate();
+          cipher.initDecrypt(sk, new IVParameterSpec(iv));
+          byte dec[] = cipher.doFinal(share);
+          System.out.println("Got decrypted share length '" + dec.length + "'");
+          System.out.println("Got share[0] '" + dec[0] + "'");
+          System.out.println("Got share[1] '" + dec[1] + "'");
+          byte res[] = resizeShare(dec);
+          v.put(Integer.toString(i), res);
+        }
+        return v;
+    }
+
+    public static void main(String args[]) throws Exception
+    {
+       if (args.length != 4) {
+             System.out.println("Usage: RecoverPin <alias directory> <prefix> <password> <kra-mn.conf path>");
+             System.exit(0);
+        }
+
+        String alias = args[0];
+        String prefix = args[1];
+        String password = args[2];
+        String path_kra_mn = args[3];
+
+        CryptoManager.InitializationValues vals = 
+                 new CryptoManager.InitializationValues(alias,
+                 prefix, prefix, "secmod.db");
+
+        CryptoManager.initialize(vals);
+        CryptoManager cm = CryptoManager.getInstance();
+
+        // load files into properties
+        Properties kra_mn_p = new Properties();
+        kra_mn_p.load(new FileInputStream(path_kra_mn));
+
+        CryptoToken token = cm.getInternalKeyStorageToken();
+        token.login(new Password(password.toCharArray()));
+
+        Hashtable shares = getShares(token, kra_mn_p);
+
+        String pwd = getPassword(shares);
+        System.out.println("=> Pin is '" + pwd + "'");
+    }
+}