Write fetched trust anchor

src/anchor.c

@@ -1014,7 +1014,10 @@ static void tas_doc_read(getdns_context *context, tas_connection *a)
 		if (tas) {
 			context->trust_anchors = tas;
 			context->trust_anchors_len = tas_len;
-			/* TODO: Try to write xml & p7s */
+			_getdns_context_write_priv_file(
+			    context, "root-anchors.xml", &a->xml);
+			_getdns_context_write_priv_file(
+			    context, "root-anchors.p7s", &p7s_bd);
 			tas_success(context, a);
 		} else
 			tas_fail(context, a);

src/context.c

@@ -4528,12 +4528,12 @@ getdns_context_config(getdns_context *context, const getdns_dict *config_dict)
 uint8_t *_getdns_context_get_priv_file(getdns_context *context,
     const char *fn, uint8_t *buf, size_t buf_len, size_t *file_sz)
 {
-	char path[FILENAME_MAX];
+	char path[PATH_MAX];
 	int n;
 	FILE *f;
 
 	n = snprintf(path, sizeof(path), "%s/.getdns/%s", getenv("HOME"), fn);
-	if (n < 0 || n > FILENAME_MAX)
+	if (n < 0 || n > PATH_MAX)
 		return NULL;
 
 	if (!(f = fopen(path, "r")))
@@ -4558,4 +4558,48 @@ uint8_t *_getdns_context_get_priv_file(getdns_context *context,
 	return buf;
 }
 
+void _getdns_context_write_priv_file(getdns_context *context,
+    const char *fn, getdns_bindata *content)
+{
+	char path[PATH_MAX], tmpfn[PATH_MAX];
+	int n, fd;
+	FILE *f;
+
+	(void)context;
+
+	DEBUG_ANCHOR("%s\n", __FUNC__);
+
+	n = snprintf( path, sizeof( path), "%s/.getdns/%s"  , getenv("HOME"), fn);
+	if (n < 0 || n > PATH_MAX) {
+		DEBUG_ANCHOR("Could not create filename for writing\n");
+		return;
+	}
+
+	n = snprintf(tmpfn, sizeof(tmpfn), "%s/.getdns/XXXXXX", getenv("HOME"));
+	if (n < 0 || n > PATH_MAX) {
+		DEBUG_ANCHOR("Could not create tmpfn for writing\n");
+		return;
+	}
+
+	if ((fd = mkstemp(tmpfn)) < 0) {
+		DEBUG_ANCHOR("Could not create temporary file from \"%s\": %s\n",
+		    tmpfn, strerror(errno));
+		return;
+	}
+
+	if (!(f = fdopen(fd, "w"))) {
+		close(fd);
+		return;
+	}
+	if (fwrite(content->data, 1, content->size, f) != content->size)
+		fclose(f);
+	else {
+		fclose(f);
+		if (rename(tmpfn, path) == -1)
+			DEBUG_ANCHOR("Could not mv \"%s\" \"%s\": %s\n",
+			    tmpfn, path, strerror(errno));
+	}
+}
+
+
 /* context.c */

src/context.h

@@ -531,4 +531,7 @@ void _getdns_upstream_shutdown(getdns_upstream *upstream);
 uint8_t *_getdns_context_get_priv_file(getdns_context *context,
     const char *fn, uint8_t *buf, size_t buf_len, size_t *file_sz);
 
+void _getdns_context_write_priv_file(getdns_context *context,
+    const char *fn, getdns_bindata *content);
+
 #endif /* _GETDNS_CONTEXT_H_ */