api work

[oweals/gnunet.git] / src / util / crypto_ksk.c

diff --git a/src/util/crypto_ksk.c b/src/util/crypto_ksk.c
index c3461ae61bc585ae7ffb88c4e02146ebe7cc7967..45f11f8fec08e08419ee50a9bb2cc129bba44802 100644 (file)
--- a/src/util/crypto_ksk.c
+++ b/src/util/crypto_ksk.c
@@ -35,6 +35,7 @@
 #include "platform.h"
 #include "gnunet_common.h"
 #include "gnunet_crypto_lib.h"
+#include "gnunet_os_lib.h"
 #include <gmp.h>
 #include <gcrypt.h>
 
@@ -761,6 +762,78 @@ GNUNET_CRYPTO_rsa_key_create_from_hash (const GNUNET_HashCode * hc)
   return ksk_decode_key (line->pke);
 }
 
+
+/**
+ * Process ID of the "find" process that we use for
+ * entropy gathering.
+ */
+static pid_t genproc;
+
+/**
+ * Function called by libgcrypt whenever we are
+ * blocked gathering entropy.
+ */
+static void
+entropy_generator (void *cls, 
+                  const char *what,
+                  int printchar,
+                  int current,
+                  int total)
+{
+  unsigned long code;
+  enum GNUNET_OS_ProcessStatusType type;
+  int ret;
+
+  if (0 != strcmp (what, "need_entropy"))
+    return;
+  if (current == total)
+    {
+      if (genproc != 0)
+       {
+         PLIBC_KILL(genproc, SIGTERM);
+         GNUNET_break (GNUNET_OK == GNUNET_OS_process_wait (genproc));
+         genproc = 0;
+       }
+      return;
+    }
+  if (genproc != 0)
+    {
+      ret = GNUNET_OS_process_status (genproc,
+                                     &type,
+                                     &code);
+      if (ret == GNUNET_NO)
+       return; /* still running */
+      if (ret == GNUNET_SYSERR)
+       {
+         GNUNET_break (0);
+         return;
+       }
+      PLIBC_KILL(genproc, SIGTERM);
+      GNUNET_break (GNUNET_OK == GNUNET_OS_process_wait (genproc));
+      genproc = 0;     
+    }
+  GNUNET_log(GNUNET_ERROR_TYPE_INFO,
+            _("Starting `%s' process to generate entropy\n"),
+            "find");
+  genproc = GNUNET_OS_start_process ("sh",
+                                    "sh",
+                                    "-c",
+                                    "exec find / -mount -type f -exec cp {} /dev/null \\; 2>/dev/null",
+                                    NULL);                                
+}
+
+
+static void 
+killfind ()
+{
+  if (genproc != 0)
+    {
+      PLIBC_KILL(genproc, SIGKILL);
+      genproc = 0;
+    }
+}
+
+
 void __attribute__ ((constructor)) GNUNET_CRYPTO_ksk_init ()
 {
   gcry_control (GCRYCTL_DISABLE_SECMEM, 0);
@@ -775,17 +848,22 @@ void __attribute__ ((constructor)) GNUNET_CRYPTO_ksk_init ()
 #ifdef gcry_fast_random_poll
   gcry_fast_random_poll ();
 #endif
+  gcry_set_progress_handler (&entropy_generator, NULL);
+  atexit (&killfind);
 }
 
+
 void __attribute__ ((destructor)) GNUNET_CRYPTO_ksk_fini ()
 {
   int i;
+
   for (i = 0; i < cacheSize; i++)
     {
       GNUNET_free (cache[i]->pke);
       GNUNET_free (cache[i]);
     }
   GNUNET_array_grow (cache, cacheSize, 0);
+  gcry_set_progress_handler (NULL, NULL);
 }
 
 /* end of kblockkey.c */