1 /*
2  * This file and its contents are supplied under the terms of the
3  * Common Development and Distribution License ("CDDL"), version 1.0.
4  * You may only use this file in accordance with the terms of version
5  * 1.0 of the CDDL.
6  *
7  * A full copy of the text of the CDDL should have accompanied this
8  * source.  A copy of the CDDL is also available via the Internet at
9  * http://www.illumos.org/license/CDDL.
10  */
11 
12 /*
13  * Copyright 2019, Joyent, Inc.
14  */
15 
16 /*
17  * Verify that we can issue ICC_MODIFY ioctls. Also, check some of the failure
18  * modes.
19  */
20 
21 #include <err.h>
22 #include <stdlib.h>
23 #include <sys/types.h>
24 #include <sys/stat.h>
25 #include <fcntl.h>
26 #include <strings.h>
27 #include <unistd.h>
28 #include <sys/debug.h>
29 #include <errno.h>
30 #include <sys/mman.h>
31 #include <sys/param.h>
32 
33 #include <sys/usb/clients/ccid/uccid.h>
34 
35 static const uint8_t yk_req[] = {
36 	0x00, 0xa4, 0x04, 0x00, 0x07, 0xa0, 0x00, 0x00, 0x05, 0x27, 0x20, 0x01
37 };
38 
39 int
40 main(int argc, char *argv[])
41 {
42 	int fd, ret;
43 	uccid_cmd_icc_modify_t uci;
44 	uccid_cmd_status_t ucs;
45 	uccid_cmd_txn_begin_t begin;
46 	uint8_t buf[UCCID_APDU_SIZE_MAX];
47 
48 	if (argc != 2) {
49 		errx(EXIT_FAILURE, "missing required ccid path");
50 	}
51 
52 	if ((fd = open(argv[1], O_RDWR)) < 0) {
53 		err(EXIT_FAILURE, "failed to open %s", argv[1]);
54 	}
55 
56 	/* power off the card outside of a transaction */
57 	bzero(&uci, sizeof (uci));
58 	uci.uci_version = UCCID_CURRENT_VERSION;
59 	uci.uci_action = UCCID_ICC_POWER_OFF;
60 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
61 	VERIFY3S(ret, ==, 0);
62 
63 	/* make sure the card is inactive now */
64 	bzero(&ucs, sizeof (ucs));
65 	ucs.ucs_version = UCCID_CURRENT_VERSION;
66 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
67 	VERIFY3S(ret, ==, 0);
68 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, ==, 0);
69 
70 	/* power on the card outside of a transaction */
71 	bzero(&uci, sizeof (uci));
72 	uci.uci_version = UCCID_CURRENT_VERSION;
73 	uci.uci_action = UCCID_ICC_POWER_ON;
74 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
75 	VERIFY3S(ret, ==, 0);
76 
77 	/* make sure the card is active again */
78 	bzero(&ucs, sizeof (ucs));
79 	ucs.ucs_version = UCCID_CURRENT_VERSION;
80 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
81 	VERIFY3S(ret, ==, 0);
82 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, !=, 0);
83 
84 
85 	/* enter transaction */
86 	bzero(&begin, sizeof (begin));
87 	begin.uct_version = UCCID_CURRENT_VERSION;
88 	if (ioctl(fd, UCCID_CMD_TXN_BEGIN, &begin) != 0) {
89 		err(EXIT_FAILURE, "failed to issue begin ioctl");
90 	}
91 
92 	/* make sure the card is active (power on) */
93 	bzero(&ucs, sizeof (ucs));
94 	ucs.ucs_version = UCCID_CURRENT_VERSION;
95 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
96 	VERIFY3S(ret, ==, 0);
97 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, !=, 0);
98 
99 	/* power off the card */
100 	bzero(&uci, sizeof (uci));
101 	uci.uci_version = UCCID_CURRENT_VERSION;
102 	uci.uci_action = UCCID_ICC_POWER_OFF;
103 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
104 	VERIFY3S(ret, ==, 0);
105 
106 	/* make sure the card is inactive now */
107 	bzero(&ucs, sizeof (ucs));
108 	ucs.ucs_version = UCCID_CURRENT_VERSION;
109 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
110 	VERIFY3S(ret, ==, 0);
111 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, ==, 0);
112 
113 	/* power on the card */
114 	bzero(&uci, sizeof (uci));
115 	uci.uci_version = UCCID_CURRENT_VERSION;
116 	uci.uci_action = UCCID_ICC_POWER_ON;
117 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
118 	VERIFY3S(ret, ==, 0);
119 
120 	/* make sure the card is active again */
121 	bzero(&ucs, sizeof (ucs));
122 	ucs.ucs_version = UCCID_CURRENT_VERSION;
123 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
124 	VERIFY3S(ret, ==, 0);
125 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, !=, 0);
126 
127 	/* do a warm reset of the card */
128 	bzero(&uci, sizeof (uci));
129 	uci.uci_version = UCCID_CURRENT_VERSION;
130 	uci.uci_action = UCCID_ICC_WARM_RESET;
131 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
132 	VERIFY3S(ret, ==, 0);
133 
134 	/* make sure the card is still active */
135 	bzero(&ucs, sizeof (ucs));
136 	ucs.ucs_version = UCCID_CURRENT_VERSION;
137 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
138 	VERIFY3S(ret, ==, 0);
139 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, !=, 0);
140 
141 	/* write a command to the card, which is assumed to be a YubiKey */
142 	if ((ret = write(fd, yk_req, sizeof (yk_req))) < 0) {
143 		err(EXIT_FAILURE, "failed to write data");
144 	}
145 
146 	/* power off the card */
147 	bzero(&uci, sizeof (uci));
148 	uci.uci_version = UCCID_CURRENT_VERSION;
149 	uci.uci_action = UCCID_ICC_POWER_OFF;
150 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
151 	VERIFY3S(ret, ==, 0);
152 
153 	/* make sure the card is inactive now */
154 	bzero(&ucs, sizeof (ucs));
155 	ucs.ucs_version = UCCID_CURRENT_VERSION;
156 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
157 	VERIFY3S(ret, ==, 0);
158 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, ==, 0);
159 
160 	/* try to read the answer from the YubiKey. */
161 	ret = read(fd, buf, sizeof (buf));
162 	VERIFY3S(ret, ==, -1);
163 	VERIFY3S(errno, ==, ENXIO);
164 
165 	/* power on the card */
166 	bzero(&uci, sizeof (uci));
167 	uci.uci_version = UCCID_CURRENT_VERSION;
168 	uci.uci_action = UCCID_ICC_POWER_ON;
169 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
170 	VERIFY3S(ret, ==, 0);
171 
172 	/* make sure the card is active again */
173 	bzero(&ucs, sizeof (ucs));
174 	ucs.ucs_version = UCCID_CURRENT_VERSION;
175 	ret = ioctl(fd, UCCID_CMD_STATUS, &ucs);
176 	VERIFY3S(ret, ==, 0);
177 	VERIFY3U(ucs.ucs_status & UCCID_STATUS_F_CARD_ACTIVE, !=, 0);
178 
179 	/* test various failure modes */
180 	uci.uci_version = UCCID_VERSION_ONE - 1;
181 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
182 	VERIFY3S(ret, ==, -1);
183 	VERIFY3S(errno, ==, EINVAL);
184 
185 	uci.uci_version = UCCID_VERSION_ONE + 1;
186 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
187 	VERIFY3S(ret, ==, -1);
188 	VERIFY3S(errno, ==, EINVAL);
189 
190 	uci.uci_version = UCCID_CURRENT_VERSION;
191 	uci.uci_action = 0;
192 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
193 	VERIFY3S(ret, ==, -1);
194 	VERIFY3S(errno, ==, EINVAL);
195 
196 	uci.uci_version = UCCID_CURRENT_VERSION;
197 	uci.uci_action = -1;
198 	ret = ioctl(fd, UCCID_CMD_ICC_MODIFY, &uci);
199 	VERIFY3S(ret, ==, -1);
200 	VERIFY3S(errno, ==, EINVAL);
201 
202 	return (0);
203 }
204