/[winpt]/trunk/Src/wptGPGME.cpp
ViewVC logotype

Diff of /trunk/Src/wptGPGME.cpp

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 20 by twoaday, Wed Jul 27 11:17:22 2005 UTC revision 208 by twoaday, Mon May 1 12:22:18 2006 UTC
# Line 1  Line 1 
1  /* wptGPGME.cpp - WinPT GPGME interface  /* wptGPGME.cpp - WinPT GPGME interface
2   *      Copyright (C) 2001-2004 Timo Schulz   *      Copyright (C) 2001-2005 Timo Schulz
3   *   *
4   * This file is part of WinPT.   * This file is part of WinPT.
5   *   *
6   * WinPT is free software; you can redistribute it and/or   * WinPT is free software; you can redistribute it and/or
7   * modify it under the terms of the GNU General Public License   * modify it under the terms of the GNU General Public License
8   * as published by the Free Software Foundation; either version 2   * as published by the Free Software Foundation; either version 2
9   * of the License, or (at your option) any later version.   * of the License, or (at your option) any later version.
10   *     *  
11   * WinPT is distributed in the hope that it will be useful,   * WinPT is distributed in the hope that it will be useful,
12   * but WITHOUT ANY WARRANTY; without even the implied warranty of   * but WITHOUT ANY WARRANTY; without even the implied warranty of
13   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14   * General Public License for more details.   * General Public License for more details.
15   *   *
16   * You should have received a copy of the GNU General Public License   * You should have received a copy of the GNU General Public License
17   * along with WinPT; if not, write to the Free Software Foundation,   * along with WinPT; if not, write to the Free Software Foundation,
18   * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA   * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
19   */   */
20    #ifdef HAVE_CONFIG_H
21  #include <sys/types.h>  #include <config.h>
22  #include <windows.h>  #endif
23    
24  #include "../resource.h"  #include <sys/types.h>
25  #include "wptNLS.h"  #include <windows.h>
26  #include "wptGPG.h"  
27  #include "wptErrors.h"  #include "resource.h"
28  #include "wptTypes.h"  #include "wptNLS.h"
29  #include "wptW32API.h"  #include "wptGPG.h"
30  #include "wptVersion.h"  #include "wptErrors.h"
31  #include "wptCommonCtl.h"  #include "wptTypes.h"
32  #include "wptContext.h"  #include "wptW32API.h"
33  #include "wptRegistry.h"  #include "wptVersion.h"
34  #include "wptDlgs.h"  #include "wptCommonCtl.h"
35    #include "wptContext.h"
36  #include "openpgp.h"  #include "wptRegistry.h"
37    #include "wptDlgs.h"
38  BOOL CALLBACK  keycache_dlg_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam);  
39  void progress_cleanup (progress_filter_s * pfx);  #include "openpgp.h"
40    
41  static gpgme_keycache_t pub = NULL;  BOOL CALLBACK  keycache_dlg_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam);
42  static gpgme_keycache_t sec = NULL;  void progress_cleanup (progress_filter_s * pfx);
43  static unsigned int reload = 0;  
44    static gpg_keycache_t pub = NULL;
45    static gpg_keycache_t sec = NULL;
46  void  static char *gpg_secring = NULL;
47  keycache_reload (HWND dlg)  
48  {        
49      refresh_cache_s rcs = {0};  /* Reload the key cache. */
50    void
51      rcs.kr_reload = rcs.kr_update = 1;  keycache_reload (HWND dlg)
52      /*rcs.tr_update = 1;*/  {      
53      DialogBoxParam( glob_hinst, (LPCSTR)IDD_WINPT_KEYCACHE, dlg,                                              refresh_cache_s rcs;
54                      keycache_dlg_proc, (LPARAM)&rcs );  
55  } /* keycache_reload */      memset (&rcs, 0, sizeof rcs);
56        rcs.kr_reload = rcs.kr_update = 1;
57  void      rcs.tr_update = 0;
58  keycache_release (void)      DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_KEYCACHE, dlg,                                        
59  {                      keycache_dlg_proc, (LPARAM)&rcs);
60      int n = gpgme_keycache_count (pub);  }
61      char tmpbuf[64];  
62    
63      sprintf (tmpbuf, "%d", n);  /* Release both key cache objects. If @cleanup is 1,
64      set_reg_key (HKEY_CURRENT_USER, "Software\\WinPT", "nKeys", tmpbuf);     also release other global structs. */
65    void
66      if (pub) {  keycache_release (int cleanup)
67          gpgme_keycache_release( pub );  {
68          pub = NULL;      int n = gpg_keycache_get_size (pub);
69      }      char tmpbuf[64];
70      if (sec) {  
71          gpgme_keycache_release( sec );      /* XXX: update the value when the cache has changed. */
72          sec = NULL;      sprintf (tmpbuf, "%d", n);
73      }      set_reg_key (HKEY_CURRENT_USER, "Software\\WinPT", "nKeys", tmpbuf);
74  } /* keycache_release */  
75        if (pub) {
76            gpg_keycache_release (pub);
77  gpgme_error_t          pub = NULL;
78  keycache_update (int is_sec, const char *keyid)      }
79  {      if (sec) {
80      gpgme_keycache_t ctx = pub;          gpg_keycache_release (sec);
81      if (is_sec)          sec = NULL;
82          ctx = sec;      }
83      return gpgme_keycache_update_key (ctx, is_sec, pub, keyid);      if (cleanup) {
84  }          if (gpg_secring)
85                free (gpg_secring);
86            gpg_secring = NULL;
87  gpgme_error_t      }
88  keycache_init (const char *pubring, const char * secring)  }
89  {  
90      struct progress_filter_s pfx;  
91      gpgme_error_t err;  /* Update the key with the keyid @keyid in the key cache.
92      int val = 0;     If @is_sec is 1, the secret key cache is used. */
93      char * p;  gpgme_error_t
94    keycache_update (int is_sec, const char *keyid)
95      if (reload) {  {
96          keycache_release ();      gpg_keycache_t ctx = pub;
97          reload = 0;      gpgme_error_t err;
98      }  
99      p = get_reg_entry (HKEY_CURRENT_USER, "Software\\WinPT", "nKeys");      if (is_sec)
100      if (p && *p != ' ') {          ctx = sec;
101          val = atoi (p);      err = gpg_keycache_update_key (ctx, is_sec, pub, keyid);
102          free_if_alloc (p);      if (is_sec)
103          memset (&pfx, 0, sizeof pfx);          gpg_keycache_prepare_single (ctx, keyid, NULL, gpg_secring);
104      }      return err;
105    }
106      err = gpgme_keycache_new (&pub);  
107      if (err)  
108          return err;  /* Initialize both cache contexts. Use @pubring for the public
109      if (val != 0)     keyring and @secring for the secret keyring. */
110          gpgme_keycache_set_cb (pub, progress_callback, &pfx, val);  gpgme_error_t
111      err = gpgme_keycache_new (&sec);  keycache_init (const char *pubring, const char *secring)
112      if (!err)  {
113          err = gpgme_keycache_init (pub, NULL, 0);      struct progress_filter_s pfx;
114      if (!err)      gpgme_error_t err;
115          err = gpgme_keycache_init( sec, NULL, 1 );      int val = 0;
116      if( !err && pubring && *pubring )      char *p;
117          err = gpgme_keycache_prepare( pub, pubring, NULL );  
118      if( !err && secring && * secring )      if (secring != NULL) {
119          err = gpgme_keycache_prepare( sec, NULL, secring );          free_if_alloc (gpg_secring);
120      if (!err)          gpg_secring = get_gnupg_keyring (0, NO_STRICT);
121          gpgme_keycache_sync (pub, sec);      }
122      if (val != 0)      
123          progress_cleanup (&pfx);      p = get_reg_entry (HKEY_CURRENT_USER, "Software\\WinPT", "nKeys");
124      return err;      if (p && *p != ' ') {
125  } /* keycache_init */          val = atoi (p);
126            free_if_alloc (p);      
127        }
128  void  
129  keycache_set_reload( int yes )      memset (&pfx, 0, sizeof (pfx));
130  {      /* Release old contexts first. */
131      reload = yes;      keycache_release (0);
132  } /* keycache_set_reload */  
133        err = gpg_keycache_new (&pub);
134        if (err)
135  int          return err;
136  keycache_get_reload( void )      if (val != 0)
137  {          gpg_keycache_set_cb (pub, progress_callback, &pfx, val);
138      return reload;      err = gpg_keycache_new (&sec);
139  } /* keycache_get_reload */      if (!err)
140            err = gpg_keycache_init (pub, NULL, 0);
141        if (!err)
142  gpgme_keycache_t          err = gpg_keycache_init (sec, NULL, 1);
143  keycache_get_ctx( int is_pub )      if (!err && pubring && *pubring)
144  {          err = gpg_keycache_prepare (pub, pubring, NULL);
145      return is_pub? pub : sec;      if (!err && secring && * secring)
146  } /* keycache_get_ctx */          err = gpg_keycache_prepare (sec, NULL, secring);
147        if (!err)
148            gpg_keycache_sync (pub, sec);
149  static int      if (val != 0)
150  get_key( const char *keyid, gpgme_key_t *r_key, int secret )          progress_cleanup (&pfx);
151  {      return err;
152      gpgme_keycache_t cache;  }
153      gpgme_error_t err;  
154      int mode = secret? KEYCACHE_PRV : KEYCACHE_PUB;  
155    /* Return the public cache context if @is_pub is set
156      if( !keyid )     the secre cache context otherwise. */
157          return WPTERR_GENERAL;  gpg_keycache_t
158      if( r_key )  keycache_get_ctx (int is_pub)
159          *r_key = NULL;  {
160      cache = keycache_get_ctx( mode );      gpg_keycache_t ctx;
161      if( !cache )  
162          BUG( NULL );      ctx = is_pub? pub : sec;
163      err = gpgme_keycache_find_key( cache, keyid, 0, r_key );      if (!ctx)
164      if( err )          BUG (0);
165          return WPTERR_GENERAL;      return ctx;
166      return 0;  }
167  } /* get_key */  
168    
169    /* Get the GPG key with keyid @keyid from the cache. Return it
170  static int     in @r_key on success. */
171  get_key2( const char * keyid, gpgme_key_t * r_key, int secret )  static int
172  {  get_key_from_cache (const char *keyid, gpgme_key_t *r_key,
173      gpg_iobuf_t inp;                      struct keycache_s **c, int secret)
174      char * p;  {
175      int rc;      gpg_keycache_t cache;
176        gpgme_error_t err;
177      p = get_gnupg_keyring (1, !NO_STRICT);      int mode = secret? KEYCACHE_PRV : KEYCACHE_PUB;
178      if( !p )  
179          BUG( NULL );      if (!keyid)
180            return WPTERR_GENERAL;
181      inp = gpg_iobuf_open( p );      if (r_key)
182      if( !inp ) {          *r_key = NULL;
183          const char *s = winpt_strerror( WPTERR_FILE_OPEN );      cache = keycache_get_ctx (mode);
184          log_box( _("WinPT Error"), 0, "%s: %s", p, s );      if (!cache)
185          free_if_alloc( p );          BUG (0);
186          return NULL;      if (!c)
187      }          err = gpg_keycache_find_key (cache, keyid, 0, r_key);
188      gpg_iobuf_ioctl( inp, 3, 1, NULL ); /* disable cache */      else
189      rc = gpgme_getkey_bykeyid( inp, keyid, r_key );          err = gpg_keycache_find_key2 (cache, keyid, 0, r_key, c);
190        return err? WPTERR_GENERAL : 0;
191      gpg_iobuf_close( inp );  }
192      free_if_alloc( p );  
193      return rc;  
194  } /* get_key2 */  /* Get GPG key with keyid @keyid directly from GPG and return
195       it in @r_key on success. */
196    static int
197  int  get_key_directly (const char *keyid, gpgme_key_t *r_key, int secret)
198  get_pubkey( const char *keyid, gpgme_key_t *ret_key )  {
199  {      gpgme_ctx_t ctx;
200      int rc = 0;      gpgme_error_t err;
201    
202      if( pub && sec )      err = gpgme_new (&ctx);
203          rc = get_key( keyid, ret_key, 0 );      if (err)
204      else          return WPTERR_GENERAL;
205          rc = get_key2( keyid, ret_key, 0 );      err = gpgme_get_key (ctx, keyid, r_key, secret);
206      return rc;      gpgme_release (ctx);
207  } /* get_pubkey */      return err? WPTERR_GENERAL : 0;
208    }
209    
210  int  
211  get_seckey( const char *keyid, gpgme_key_t *ret_skey )  /* Search the public key with @keyid as the keyid in the cache and
212  {     return the item in @k. */
213      int rc = 0;  int
214    winpt_get_pubkey (const char *keyid, winpt_key_s *k)
215      if( pub && sec )  {
216          rc = get_key( keyid, ret_skey, 1 );      int rc;
217      else      
218          rc = get_key2( keyid, ret_skey, 1 );      rc = get_key_from_cache (keyid, &k->ctx, &k->ext, 0);
219      return rc;      if (rc)
220  } /* get_seckey */          return rc;
221        k->is_v3 = k->ctx->subkeys->pubkey_algo == GPGME_PK_RSA &&
222                    strlen (k->ctx->subkeys->fpr) == 32;
223  int      k->is_protected = k->ext->gloflags.is_protected;
224  count_insecure_elgkeys (void)      k->keyid = k->ctx->subkeys->keyid;
225  {      k->uid = k->ctx->uids->uid;
226      gpgme_keycache_t pc;      return rc;
227      gpgme_key_t key;  }
228      int n=0;  
229    
230      pc = keycache_get_ctx (1);  int
231      if (!pc)  winpt_get_seckey (const char *keyid, winpt_key_s *k)
232          BUG (0);  {
233      while (!gpgme_keycache_next_key (pc, 0, &key)) {      int rc;
234          if (gpgme_key_get_ulong_attr (key, GPGME_ATTR_ALGO, NULL, 0)      rc = get_key_from_cache (keyid, &k->ctx, &k->ext, 1);
235              == GPGME_PK_ELG_ES)      if (rc)
236              n++;          return rc;
237      }      k->is_v3 = k->ctx->subkeys->pubkey_algo == GPGME_PK_RSA &&
238      gpgme_keycache_rewind (pc);                  strlen (k->ctx->subkeys->fpr) == 32;
239      return n;      k->is_protected = k->ext->gloflags.is_protected;
240  }      k->keyid = k->ctx->subkeys->keyid;
241        k->uid = k->ctx->uids->uid;
242        return rc;
243    }
244    
245    
246    int
247    get_pubkey (const char *keyid, gpgme_key_t *ret_key)
248    {
249        int rc;
250    
251        if (pub && sec)
252            rc = get_key_from_cache (keyid, ret_key, NULL, 0);
253        else
254            rc = get_key_directly (keyid, ret_key, 0);
255        return rc;
256    }
257    
258    
259    int
260    get_seckey (const char *keyid, gpgme_key_t *ret_skey)
261    {
262        int rc;
263    
264        if (pub && sec)
265            rc = get_key_from_cache (keyid, ret_skey, NULL, 1);
266        else
267            rc = get_key_directly (keyid, ret_skey, 1);
268        return rc;
269    }
270    
271    
272    /* Search for insecure ElGamal keys and return the
273       number of founded keys. */
274    int
275    count_insecure_elgkeys (void)
276    {
277        gpg_keycache_t pc;
278        gpgme_key_t key;
279        int n=0;
280    
281        pc = keycache_get_ctx (1);
282        if (!pc)
283            BUG (0);
284        while (!gpg_keycache_next_key (pc, 0, &key)) {
285            if (key->subkeys->pubkey_algo == GPGME_PK_ELG)
286                n++;
287        }
288        gpg_keycache_rewind (pc);
289        return n;
290    }
291    
292    
293    
294    /* Map the signature summary in @sum to signature status table index.
295       Return value: index to table. */
296    static int
297    sigsum_to_index (gpgme_sigsum_t sum)
298    {
299        if ((sum & GPGME_SIGSUM_VALID) && (sum & GPGME_SIGSUM_KEY_REVOKED))
300            return 7;
301        if ((sum & GPGME_SIGSUM_VALID) && (sum & GPGME_SIGSUM_SIG_EXPIRED))
302            return 6;
303        if (sum & GPGME_SIGSUM_GREEN)
304            return 1;
305        else if (sum & GPGME_SIGSUM_RED)
306            return 2;
307        else if (sum & GPGME_SIGSUM_KEY_MISSING)
308            return 3;
309        return 0;
310    }
311    
312    
313    /* Return a humand readable description for the signature status @sum. */
314    const char*
315    get_gpg_sigstat (gpgme_sigsum_t sum)
316    {
317        const char *gpg_sigstat[] = {
318            _("Error during verification process."),
319            _("The signature is good."),
320            _("The signature is BAD!"),
321            _("The signature could not be checked due to a missing key."),
322            _("No valid OpenPGP signature."),
323            _("Signature Error"),
324            _("Good Signature (Expired Key)"),
325            _("Good Signature (Revoked Key)"),
326            NULL
327        };
328        const unsigned int mask = 8;
329    
330        return gpg_sigstat[sigsum_to_index (sum) % mask];
331    }
332    
333    
334    /* Check if the secret keyring contains at least one
335       key with ultimate trust.
336       Return value: 0 on success. */
337    int
338    check_ultimate_trusted_key (void)
339    {
340        struct keycache_s *n;
341    
342        for (n = sec->item; n; n = n->next) {
343            if (n->pubpart &&
344                n->pubpart->key->owner_trust == GPGME_VALIDITY_ULTIMATE)
345            return 0;
346        }
347        return -1;
348    }
Legend:
Removed from v.20  
changed lines
  Added in v.208
[email protected]
 ViewVC Help
Powered by ViewVC 1.1.26