#!/usr/bin/perl # Written by Simon Josefsson . # Copyright (c) 2009-2012 Yubico AB # All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are # met: # # * Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # # * Redistributions in binary form must reproduce the above # copyright notice, this list of conditions and the following # disclaimer in the documentation and/or other materials provided # with the distribution. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR # A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT # OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, # DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY # THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. use strict; use DBI; use MIME::Base64; sub usage { print "Usage: $0 [--verbose] [--help] [--database DBI] [--db-user USER] [--db-passwd PASSWD]\n"; print "\n"; print "Tool to export keys to the YKKSM-KEYPROV format.\n"; print "\n"; print " --database DBI: Database identifier, see http://dbi.perl.org/\n"; print " defaults to a MySQL database ykksm on localhost,\n"; print " i.e., DBI::mysql:ykksm.\n"; print "\n"; print " --db-user USER: Database username to use, defaults to empty string.\n"; print "\n"; print " --db-passwd PASSWD: Database password to use, defaults to empty string.\n"; print "\n"; print "Usage example:\n"; print "\n"; print " ./ykksm-export --db-user foo --db-passwd pass123 |\n"; print " gpg -a --sign --encrypt -r 1D2F473E > keys.txt\n"; print "\n"; exit 1; } #Support dbconfig-common generated database settings, if available our ($dbuser, $dbpass, $basepath, $dbname, $dbserver, $dbport, $dbtype); if( -e '/etc/ykksm/config-db.cfg' ) { require '/etc/ykksm/config-db.cfg'; } else { $dbtype = 'mysql'; $dbname = 'ykksm'; } my $verbose = 0; my $db = "dbi:$dbtype:$dbname"; while ($ARGV[0] =~ m/^-(.*)/) { my $cmd = shift @ARGV; if (($cmd eq "-v") || ($cmd eq "--verbose")) { $verbose = 1; } elsif (($cmd eq "-h") || ($cmd eq "--help")) { usage(); } elsif ($cmd eq "--database") { $db = shift; } elsif ($cmd eq "--db-user") { $dbuser = shift; } elsif ($cmd eq "--db-passwd") { $dbpass = shift; } } if ($#ARGV>=0) { usage(); } my $dbh = DBI->connect($db, $dbuser, $dbpass, {'RaiseError' => 1}); my $sth = $dbh->prepare ('SELECT serialnr, publicname, internalname, aeskey, lockcode, created FROM yubikeys') or die "Couldn't prepare statement: " . $dbh->errstr; $sth->execute() or die "Couldn't execute statement: " . $sth->errstr; my $row; while ($row = $sth->fetchrow_hashref()) { if ($verbose) { print "# "; foreach my $key (keys %$row) { print $key . "=" . $row->{$key} . " "; } print "\n"; } print $row->{'serialnr'} . ","; print $row->{'publicname'} . ","; print $row->{'internalname'} . ","; print $row->{'aeskey'} . ","; print $row->{'lockcode'} . ","; print $row->{'created'} . ",\n"; } if ($sth->rows == 0) { print "No data?!\n\n"; } $sth->finish; $dbh->disconnect(); exit 0;