trunk/Src/wptClipDecryptDlg.cpp

/* wptClipDecryptDlg.cpp - Clipboard decrypt dialog
 *      Copyright (C) 2000-2005 Timo Schulz
 *      Copyright (C) 2005 g10 Code GmbH
 *
 * This file is part of WinPT.
 *
 * WinPT is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 * 
 * WinPT is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with WinPT; if not, write to the Free Software Foundation, 
 * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
 */

#ifdef HAVE_CONFIG_H
#include <config.h>
#endif

#include <windows.h>

#include "wptTypes.h"
#include "wptW32API.h"
#include "wptAgent.h"
#include "wptNLS.h"
#include "wptGPG.h"
#include "wptVersion.h"
#include "wptErrors.h"
#include "wptCommonCtl.h"
#include "wptContext.h"
#include "wptDlgs.h"
#include "wptKeylist.h"
#include "wptFileManager.h"
#include "wptUTF8.h"
#include "resource.h"

bool secret_key_available (gpgme_recipient_t rset);

/* Return the primary user-ID of the key with the keyid @keyid. 
   Caller must free string. */
char*
get_key_userid (const char *keyid)
{
    gpgme_key_t key;
    char *p, *uid;

    if (get_pubkey (keyid, &key))
        return m_strdup (_("user ID not found"));
    uid = utf8_to_native (key->uids->uid);
    if (!uid)
        uid = strdup (_("user ID not found"));
    p = new char[strlen (uid) + 4 + 8];
    if (!p)
        BUG (NULL);
    sprintf (p, "\n    \"%s\"", uid);
    safe_free (uid);
    return p;
}


/* Decrypt the clipboard contents and on success
   replace the data with the plaintext.
   Return value: 0 on success. */
gpgme_error_t
gpgme_op_clip_decrypt (gpgme_ctx_t ctx)
{
    gpgme_error_t err;
    gpgme_data_t ciph = NULL;
    gpgme_data_t plain = NULL;
    
    err = gpg_data_new_from_clipboard (&ciph, 0);
    if (err)
        return err;

    err = gpgme_data_new (&plain);
    if (err) {
        gpgme_data_release (ciph);
        return err;
    }

    err = gpgme_op_decrypt_verify (ctx, ciph, plain);

    gpg_data_release_and_set_clipboard (plain, 0);
    gpgme_data_release (ciph);
    return err;
}


/* Convenient function to provide clipboard decryption.
   @hwnd is the parent window used for showing messsages.
   Return value: 0 on success. */
gpgme_error_t
clip_decrypt_dlg (HWND hwnd)
{
    gpgme_error_t err;
    gpgme_ctx_t ctx = NULL;
    gpgme_signature_t sig = NULL;
    gpgme_decrypt_result_t res;
    gpgme_verify_result_t sigres;
    passphrase_cb_s pwd;
    const char *s;
    char *uid;
    int pgp_type = 0;
    int novalid = 0;

    /* allow to verify data generated by 'gpg -a --sign foo' */
    if (fm_assume_onepass_sig (NULL) == 0) {
        /* XXX: addtitional steps needed? */
    }

    err = gpgme_new (&ctx);
    if (err)
        BUG (NULL);
    set_gpg_passphrase_cb (&pwd, ctx, GPG_CMD_DECRYPT, hwnd, _("Decryption"));
    gpg_get_recipients (NULL, &pwd.recipients);

    err = gpgme_op_clip_decrypt (ctx);
    if (pwd.cancel)
        goto leave;
    if (gpgme_err_code (err) ==  GPG_ERR_BAD_PASSPHRASE)
        agent_del_cache (pwd.keyid);

    res = gpgme_op_decrypt_result (ctx);
    if (err && res->recipients && !secret_key_available (res->recipients)) {
        gpgme_recipient_t r = res->recipients;
        uid = get_key_userid (r->keyid+8);
        log_box (_("Decryption"), MB_ERR, 
                 _("Encrypted with %s key, ID %s.%s\n"
                   "Decryption failed: secret key not available."), 
                   get_key_pubalgo (r->pubkey_algo), r->keyid+8, uid);
        free_if_alloc (uid);
        goto leave;
    }
    else if (res->unsupported_algorithm) {
        log_box (_("Decryption"), MB_ERR, _("Unsupported algorithm: %s"), 
                 res->unsupported_algorithm);
    }
    else if (err) {
        gpg_clip_get_pgptype (&pgp_type);
        if (gpgme_err_code (err) == GPG_ERR_NO_DATA && (pgp_type & PGP_MESSAGE))
            msg_box (hwnd, _("Broken OpenPGP message (maybe: quoted printable "
                             "character in armor)."), _("Decryption"), MB_INFO);
        else
            msg_box (hwnd, gpgme_strerror (err), _("Decryption"), MB_ERR);
        goto leave;
    }

    if (0) { /* XXX: Bad MDC */
        s = _("WARNING: encrypted message has been manipulated!\n"
            "\n"
            "Do *NOT* trust any text or data output from this file!\n"
            "It is likely, the data was corrupted during the transport\n"
            "but it might be also possible that this is part of an attack.");
        msg_box (hwnd, s, _("*** IMPORTANT ***"), MB_INFO);
    }

    show_msg (GetDesktopWindow (), 1500, _("GnuPG Status: Finished"));

    sigres = gpgme_op_verify_result (ctx);
    if (sigres && sigres->signatures) {
        gpgme_key_t key=NULL;
        const char *keyid;

        sig = sigres->signatures;
        if (!sig->fpr)
            BUG (NULL);
        if (strlen (sig->fpr) > 16)
            keyid = strlen (sig->fpr) == 40? sig->fpr+24 : sig->fpr+16;
        else
            keyid = sig->fpr;

        get_pubkey (keyid, &key);
        if (key) {
            if (key->owner_trust == GPGME_VALIDITY_FULL || 
                key->owner_trust == GPGME_VALIDITY_ULTIMATE)
                s = _("Signature Status: Created with a fully trusted key");
            else if (key->owner_trust == GPGME_VALIDITY_MARGINAL)
                s = _("Signature Status: Created with a marginal trusted key");
            else if (key->owner_trust == GPGME_VALIDITY_NEVER) {
                novalid = 1;
                s =  _("Signature Status: Created with an UNTRUSTED key");
            }
            else
                s = _("Signature Status: Created with an undefined trusted key");
            uid = utf8_to_native (key->uids->uid);
        }
        else {
            s = "";
            uid = strdup (_("user ID not found"));
        }
        log_box (_("WinPT Verify"), MB_OK, 
                 _("%s\n"
                   "%s\n"
                   "Signature made: %s\n"
                   "From \"%s\" using key ID 0x%s"
                   "%s %s"),
                   s, get_gpg_sigstat (sig->summary), 
                   strtimestamp (sig->timestamp),
                   uid, keyid+8, 
                   novalid? "\nPrimary key fingerprint: " : "",
                   novalid? get_key_fpr (key) : "");
        safe_free (uid);
    }
    
leave:
    release_gpg_passphrase_cb (&pwd);
    gpgme_release (ctx);
    return err;
}
1	werner	36	/* wptClipDecryptDlg.cpp - Clipboard decrypt dialog
2			* Copyright (C) 2000-2005 Timo Schulz
3			* Copyright (C) 2005 g10 Code GmbH
4			*
5			* This file is part of WinPT.
6			*
7			* WinPT is free software; you can redistribute it and/or modify
8			* it under the terms of the GNU General Public License as published by
9			* the Free Software Foundation; either version 2 of the License, or
10			* (at your option) any later version.
11			*
12			* WinPT is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15			* GNU General Public License for more details.
16			*
17			* You should have received a copy of the GNU General Public License
18			* along with WinPT; if not, write to the Free Software Foundation,
19			* Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
20			*/
21
22	werner	42	#ifdef HAVE_CONFIG_H
23			#include <config.h>
24			#endif
25
26	werner	36	#include <windows.h>
27
28			#include "wptTypes.h"
29			#include "wptW32API.h"
30			#include "wptAgent.h"
31			#include "wptNLS.h"
32			#include "wptGPG.h"
33			#include "wptVersion.h"
34			#include "wptErrors.h"
35			#include "wptCommonCtl.h"
36			#include "wptContext.h"
37			#include "wptDlgs.h"
38			#include "wptKeylist.h"
39			#include "wptFileManager.h"
40	twoaday	129	#include "wptUTF8.h"
41	werner	47	#include "resource.h"
42	werner	36
43			bool secret_key_available (gpgme_recipient_t rset);
44
45			/* Return the primary user-ID of the key with the keyid @keyid.
46			Caller must free string. */
47			char*
48			get_key_userid (const char *keyid)
49			{
50			gpgme_key_t key;
51	twoaday	129	char p, uid;
52	werner	36
53			if (get_pubkey (keyid, &key))
54			return m_strdup (_("user ID not found"));
55	twoaday	187	uid = utf8_to_native (key->uids->uid);
56	twoaday	129	if (!uid)
57			uid = strdup (_("user ID not found"));
58			p = new char[strlen (uid) + 4 + 8];
59	werner	36	if (!p)
60			BUG (NULL);
61	twoaday	129	sprintf (p, "\n \"%s\"", uid);
62			safe_free (uid);
63	werner	36	return p;
64			}
65
66
67			/* Decrypt the clipboard contents and on success
68			replace the data with the plaintext.
69			Return value: 0 on success. */
70			gpgme_error_t
71			gpgme_op_clip_decrypt (gpgme_ctx_t ctx)
72			{
73			gpgme_error_t err;
74			gpgme_data_t ciph = NULL;
75			gpgme_data_t plain = NULL;
76
77			err = gpg_data_new_from_clipboard (&ciph, 0);
78			if (err)
79			return err;
80
81			err = gpgme_data_new (&plain);
82			if (err) {
83			gpgme_data_release (ciph);
84			return err;
85			}
86
87	twoaday	41	err = gpgme_op_decrypt_verify (ctx, ciph, plain);
88	werner	36
89			gpg_data_release_and_set_clipboard (plain, 0);
90			gpgme_data_release (ciph);
91			return err;
92			}
93
94
95			/* Convenient function to provide clipboard decryption.
96			@hwnd is the parent window used for showing messsages.
97			Return value: 0 on success. */
98			gpgme_error_t
99			clip_decrypt_dlg (HWND hwnd)
100			{
101			gpgme_error_t err;
102			gpgme_ctx_t ctx = NULL;
103			gpgme_signature_t sig = NULL;
104			gpgme_decrypt_result_t res;
105			gpgme_verify_result_t sigres;
106			passphrase_cb_s pwd;
107	twoaday	41	const char *s;
108	twoaday	179	char *uid;
109			int pgp_type = 0;
110	werner	36	int novalid = 0;
111
112			/* allow to verify data generated by 'gpg -a --sign foo' */
113			if (fm_assume_onepass_sig (NULL) == 0) {
114			/* XXX: addtitional steps needed? */
115			}
116
117			err = gpgme_new (&ctx);
118			if (err)
119			BUG (NULL);
120			set_gpg_passphrase_cb (&pwd, ctx, GPG_CMD_DECRYPT, hwnd, _("Decryption"));
121	twoaday	179	gpg_get_recipients (NULL, &pwd.recipients);
122
123	werner	36	err = gpgme_op_clip_decrypt (ctx);
124			if (pwd.cancel)
125			goto leave;
126			if (gpgme_err_code (err) == GPG_ERR_BAD_PASSPHRASE)
127			agent_del_cache (pwd.keyid);
128
129			res = gpgme_op_decrypt_result (ctx);
130			if (err && res->recipients && !secret_key_available (res->recipients)) {
131			gpgme_recipient_t r = res->recipients;
132	twoaday	179	uid = get_key_userid (r->keyid+8);
133	werner	36	log_box (_("Decryption"), MB_ERR,
134			_("Encrypted with %s key, ID %s.%s\n"
135			"Decryption failed: secret key not available."),
136	twoaday	179	get_key_pubalgo (r->pubkey_algo), r->keyid+8, uid);
137			free_if_alloc (uid);
138	werner	36	goto leave;
139			}
140	twoaday	41	else if (res->unsupported_algorithm) {
141			log_box (_("Decryption"), MB_ERR, _("Unsupported algorithm: %s"),
142			res->unsupported_algorithm);
143			}
144	werner	36	else if (err) {
145			gpg_clip_get_pgptype (&pgp_type);
146	twoaday	129	if (gpgme_err_code (err) == GPG_ERR_NO_DATA && (pgp_type & PGP_MESSAGE))
147	werner	36	msg_box (hwnd, _("Broken OpenPGP message (maybe: quoted printable "
148	twoaday	129	"character in armor)."), _("Decryption"), MB_INFO);
149	werner	36	else
150			msg_box (hwnd, gpgme_strerror (err), _("Decryption"), MB_ERR);
151			goto leave;
152			}
153
154	twoaday	179	if (0) { /* XXX: Bad MDC */
155	werner	36	s = _("WARNING: encrypted message has been manipulated!\n"
156			"\n"
157			"Do NOT trust any text or data output from this file!\n"
158			"It is likely, the data was corrupted during the transport\n"
159			"but it might be also possible that this is part of an attack.");
160			msg_box (hwnd, s, _("* IMPORTANT *"), MB_INFO);
161	twoaday	179	}
162	werner	36
163			show_msg (GetDesktopWindow (), 1500, _("GnuPG Status: Finished"));
164
165			sigres = gpgme_op_verify_result (ctx);
166			if (sigres && sigres->signatures) {
167	twoaday	41	gpgme_key_t key=NULL;
168			const char *keyid;
169	werner	36
170			sig = sigres->signatures;
171			if (!sig->fpr)
172	twoaday	41	BUG (NULL);
173	twoaday	129	if (strlen (sig->fpr) > 16)
174			keyid = strlen (sig->fpr) == 40? sig->fpr+24 : sig->fpr+16;
175			else
176			keyid = sig->fpr;
177	werner	36
178			get_pubkey (keyid, &key);
179	twoaday	41	if (key) {
180			if (key->owner_trust == GPGME_VALIDITY_FULL \|\|
181			key->owner_trust == GPGME_VALIDITY_ULTIMATE)
182			s = _("Signature Status: Created with a fully trusted key");
183			else if (key->owner_trust == GPGME_VALIDITY_MARGINAL)
184			s = _("Signature Status: Created with a marginal trusted key");
185			else if (key->owner_trust == GPGME_VALIDITY_NEVER) {
186			novalid = 1;
187			s = _("Signature Status: Created with an UNTRUSTED key");
188			}
189			else
190			s = _("Signature Status: Created with an undefined trusted key");
191	twoaday	187	uid = utf8_to_native (key->uids->uid);
192	werner	36	}
193	twoaday	179	else {
194	twoaday	41	s = "";
195	twoaday	129	uid = strdup (_("user ID not found"));
196	twoaday	179	}
197	werner	36	log_box (_("WinPT Verify"), MB_OK,
198			_("%s\n"
199			"%s\n"
200	twoaday	129	"Signature made: %s\n"
201	werner	36	"From \"%s\" using key ID 0x%s"
202			"%s %s"),
203	twoaday	41	s, get_gpg_sigstat (sig->summary),
204			strtimestamp (sig->timestamp),
205			uid, keyid+8,
206	werner	36	novalid? "\nPrimary key fingerprint: " : "",
207			novalid? get_key_fpr (key) : "");
208	twoaday	129	safe_free (uid);
209	werner	36	}
210
211			leave:
212			release_gpg_passphrase_cb (&pwd);
213			gpgme_release (ctx);
214			return err;
215			}