trunk/Src/wptGPGUtil.cpp

/* wptGPGUtil.cpp - GPG util functions
 *      Copyright (C) 2005, 2006 Timo Schulz
 *      Copyright (C) 2005 g10 Code GmbH
 *
 * This file is part of WinPT.
 *
 * WinPT is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 * 
 * WinPT is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with WinPT; if not, write to the Free Software Foundation, 
 * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
 */

#ifdef HAVE_CONFIG_H
#include <config.h>
#endif

#include <windows.h>
#include <sys/stat.h>

#include "gpgme.h"
#include "wptTypes.h"
#include "wptErrors.h"

#define NROFHEXDIGITS 2  
/* Convert two hexadecimal digits from STR to the value they
   represent.  Returns -1 if one of the characters is not a
   hexadecimal digit.  */
static int
hextobyte (const unsigned char *str)
{
    int val = 0;  
    int i;

    for (i = 0; i < NROFHEXDIGITS; i++) {
        if (*str >= '0' && *str <= '9')
            val += *str - '0';
        else if (*str >= 'A' && *str <= 'F')
            val += 10 + *str - 'A';
        else if (*str >= 'a' && *str <= 'f')
            val += 10 + *str - 'a';
        else
            return -1;
        if (i < NROFHEXDIGITS - 1)
            val *= 16;
        str++;
    }
    return val;
}

/* Decode the C formatted string @src and store the result in the
   buffer @destp which is @len bytes long.  If @len is zero, then a
   large enough buffer is allocated with malloc and @destp is set to
   the result.  Currently, @len is only used to specify if allocation
   is desired or not, the caller is expected to make sure that @destp
   is large enough if @len is not zero.  */
gpgme_error_t
gpg_decode_c_string (const char *src, char **destp, size_t len)
{
  char *dest;

  /* Set up the destination buffer.  */
  if (len) {
      if (len < strlen (src) + 1)
          return gpg_error (GPG_ERR_TOO_SHORT);
      dest = *destp;
  }
  else {      
  /* The converted string will never be larger than the original string.  */
      dest = (char*)malloc (strlen (src) + 1);
      if (!dest)
          return gpg_error (GPG_ERR_ENOMEM);
      *destp = dest;
  }

  /* Convert the string.  */
  while (*src) {    
      if (*src != '\\') {
          *(dest++) = *(src++);
          continue;
      }

      switch (src[1]) {
#define DECODE_ONE(match,result)        \
      case match:                       \
          src += 2;                     \
          *(dest++) = result;           \
          break;

          DECODE_ONE ('\'', '\'');
          DECODE_ONE ('\"', '\"');
          DECODE_ONE ('\?', '\?');
          DECODE_ONE ('\\', '\\');
          DECODE_ONE ('a', '\a');
          DECODE_ONE ('b', '\b');
          DECODE_ONE ('f', '\f');
          DECODE_ONE ('n', '\n');
          DECODE_ONE ('r', '\r');
          DECODE_ONE ('t', '\t');
          DECODE_ONE ('v', '\v');

      case 'x': {
            int val = hextobyte ((unsigned char*)&src[2]);
            if (val == -1) { /* Should not happen.  */
                *(dest++) = *(src++);
                *(dest++) = *(src++);
                if (*src)
                  *(dest++) = *(src++);
                if (*src)
                  *(dest++) = *(src++);
            }
            else {
                if (!val) {
                    /* A binary zero is not representable in a C string.  */
                    *(dest++) = '\\';
                    *(dest++) = '0'; 
                }
                else 
                    *((unsigned char *) dest++) = val;
                src += 4;
            }
        }

        default: /* Should not happen.  */
          {
            *(dest++) = *(src++);
            *(dest++) = *(src++);
          }
        } 
  }
  *(dest++) = 0;
  return 0;
}

/* Replace %foo% entries with its real values.
   Return value: expanded path or NULL on error. */
static char *
expand_path (const char *path)
{
    DWORD len;
    char *p;

    len = ExpandEnvironmentStrings (path, NULL, 0);
    if (!len)
        return NULL;
    len += 1;
    p = (char*)calloc (1, len+1);
    if (!p)
        BUG (NULL);
    len = ExpandEnvironmentStrings (path, p, len);
    if (!len) {
        free (p);
        return NULL;
    }
    return p; 
}


/* Read a string from the W32 registry. The directory is given
   in @dir and the name of the value in @name, */
static char *
read_w32_registry (HKEY root_key, const char *dir, const char *name)
{
    HKEY key_handle;
    DWORD n1, nbytes;
    DWORD type;
    char *result = NULL;
    
    if (RegOpenKeyEx (root_key, dir, 0, KEY_READ, &key_handle))
        return NULL; /* no need for a RegClose, so return direct */
    
    nbytes = 1;
    if (RegQueryValueEx (key_handle, name, 0, NULL, NULL, &nbytes))
        goto leave;
    result = (char*)calloc (1, (n1=nbytes+1));
    if (!result)
        BUG (NULL);
    if (RegQueryValueEx (key_handle, name, 0, &type, (BYTE*)result, &n1)) {
        free (result); 
        result = NULL;
        goto leave;
    }
    if (type == REG_EXPAND_SZ && strchr (result, '%')) {
        char *p = expand_path (result);
        free (result);
        result = p;
    }
    
leave:
    RegCloseKey (key_handle);
    return result;
}

static char*
read_gpg_program (void)
{
    return read_w32_registry (HKEY_CURRENT_USER, 
                              "Software\\GNU\\GnuPG", "gpgProgram");
}


/* Create a temp file based on the name of @name.
   Return value: handle to the file in case of success. */
static HANDLE
create_tmpfile (const char *name)
{    
    HANDLE out;
    SECURITY_ATTRIBUTES sec_attr;
    char tmp[300]; 

    memset (&sec_attr, 0, sizeof sec_attr);
    sec_attr.bInheritHandle = TRUE;
    sec_attr.lpSecurityDescriptor = NULL;
    sec_attr.nLength = sizeof sec_attr;

    GetTempPath (sizeof (tmp)-1 - strlen (name)-1, tmp);
    strcat (tmp, name);
    out = CreateFile (tmp, GENERIC_READ|GENERIC_WRITE, 
                      FILE_SHARE_WRITE, &sec_attr,
                      OPEN_ALWAYS, FILE_FLAG_DELETE_ON_CLOSE, NULL);
    if (out == INVALID_HANDLE_VALUE)
        log_debug ("create_tmpfile: CreateFile failed ec=%d\r\n",
                   (int)GetLastError ());
    return out;
}


/* Create a pipe with a readable remote end and
   write the data from @dat to the local end.
   Return value: read handle on success. */
static HANDLE
create_in_pipe (const char *dat)
{
    HANDLE r, w;
    SECURITY_ATTRIBUTES sec_attr;
    DWORD n;

    memset (&sec_attr, 0, sizeof sec_attr);
    sec_attr.bInheritHandle = TRUE;
    sec_attr.nLength = sizeof sec_attr;

    if (!CreatePipe (&r, &w, &sec_attr, 4096)) {
        log_debug ("create_in_pipe: CreatePipeFailed ec=%d\r\n", 
                   (int)GetLastError ());
        return NULL;
    }

    WriteFile (w, dat, strlen (dat), &n, NULL);
    CloseHandle (w);

    return r;
}


/* Map the contents of the file handle @out to
   a buffer and return it. */
static char*
map_tmpfile (HANDLE out, DWORD *nread)
{
    DWORD n;
    char *p;

    FlushFileBuffers (out);
    SetFilePointer (out, 0, NULL, FILE_BEGIN);
    n = GetFileSize (out, NULL);
    p = (char*)calloc (1, n+1);
    if (!p)
        BUG (NULL);
    ReadFile (out, p, n, &n, NULL);
    p[n] = 0;
    if (nread)
        *nread = n;
    return p;
}


/* Create a process from the command line in @cmd.
   If @out is != NULL, the output of the process will
   be redirected to @out. If @in is != NULL the input
   will be read from @in.
   Return value: 0 on success. */
static int
create_process (const char *cmd, HANDLE in, HANDLE out, HANDLE err)
{
    STARTUPINFO si;
    PROCESS_INFORMATION pi;

    memset (&si, 0, sizeof (si));
    si.cb = sizeof si;
    if (in || out || err)
        si.dwFlags = STARTF_USESTDHANDLES;
    if (out)
        si.hStdOutput = out;
    if (in)
        si.hStdInput = in;
    if (err)
        si.hStdError = err;
    si.dwFlags |= STARTF_USESHOWWINDOW;
    si.wShowWindow = SW_HIDE;
    if (!CreateProcess (NULL, (char*)cmd, NULL, NULL, TRUE, 0, 
                        NULL, NULL, &si, &pi)) {
        log_debug ("create_process: CreateProcess failed ec=%d\r\n", 
                   (int)GetLastError ());
        return -1;
    }
    WaitForSingleObject (pi.hProcess, INFINITE);
    CloseHandle (pi.hProcess);
    return 0;
}


/* Export a GPG secret key given by @keyid into the file @outfile.
   Return value: 0 on success. */
gpgme_error_t
gpg_export_seckey (const char *keyid, const char *outfile)
{
    gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
    struct stat st;
    char *p;
    char *cmd;

    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);
    cmd = (char*)calloc (1, strlen (p) + strlen (keyid) 
                            + strlen (outfile) + 64 + 2);
    if (!cmd)
        BUG (NULL);
    sprintf (cmd, "%s --yes --output \"%s\" --export-secret-key %s", 
             p, outfile, keyid);
    if (create_process (cmd, NULL, NULL, NULL))
        err = gpg_error (GPG_ERR_INTERNAL);

    if (stat (outfile, &st) == -1 || st.st_size == 0)
        err = gpg_error (GPG_ERR_NO_DATA);

    free (p);
    free (cmd);
    return err;
}


/* If @export is 1, export the ownertrust data to the
   buffer @data. Otherwise import the ownertrust data from @data.
   Return value: 0 on success. */
gpgme_error_t
gpg_manage_ownertrust (char **data, int do_export)
{
    gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
    HANDLE out = NULL, in = NULL;
    char *p;
    char *cmd;

    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);

    cmd = (char*)calloc (1, strlen (p) + 64 + 1);
    if (!cmd)
        BUG (NULL);
    sprintf (cmd, "%s %s", p, 
             do_export? "--export-ownertrust" : "--import-ownertrust");

    if (do_export)
        out = create_tmpfile ("gpg_ot_out");
    else {
        DWORD nw;
        in = create_tmpfile ("gpg_ot_in");
        WriteFile (in, *data, strlen (*data), &nw, NULL);
        FlushFileBuffers (in);
        /* XXX: need a rewind? */
    }
    if (create_process (cmd, in, out, NULL))
        err = gpg_error (GPG_ERR_INTERNAL);

    free (p);
    free (cmd);

    if (in)
        CloseHandle (in);
    if (out) {
        *data = map_tmpfile (out, NULL);
        CloseHandle (out);
    }

    return err;
}


/* Call gpg --rebuild-keydb-caches to speed up signature listings. */
gpgme_error_t
gpg_rebuild_cache (char **r_inf)
{
    gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
    HANDLE out = NULL;
    char *p;
    char *cmd;

    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);
    cmd = (char*)calloc (1, strlen (p) + 64);
    if (!cmd)
        BUG (NULL);
    sprintf (cmd, "%s --logger-fd=1 --rebuild-keydb-caches", p);

    if (r_inf)
        out = create_tmpfile ("gpg_rebuild_cache");

    if (create_process (cmd, NULL, out, NULL))
        err = gpg_error (GPG_ERR_INTERNAL);

    if (r_inf)
        *r_inf = map_tmpfile (out, NULL);
    if (out)
        CloseHandle (out);
    free (p);
    free (cmd);
    return 0;
}


/* Call gpg --version to retrieve the 'about' information. */
gpgme_error_t
gpg_get_version (char **r_inf)
{
    gpgme_error_t err= gpg_error (GPG_ERR_NO_ERROR);
    HANDLE out;    
    char *p, *cmd;

    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);
    cmd = (char*)calloc (1, strlen (p) + 32);
    if (!cmd)
        BUG (NULL);
    sprintf (cmd, "%s --version", p);

    out = create_tmpfile ("gpg_out");
    if (create_process (cmd, NULL, out, NULL))
        err = gpg_error (GPG_ERR_INTERNAL);

    free (p);
    free (cmd);

    *r_inf = map_tmpfile (out, NULL);
    CloseHandle (out);    
    return err;
}


/* Return the colon file output of the given file @fname in @r_out.
   Return value: 0 on success. */ 
gpgme_error_t
gpg_import_key_list (const char *fname, char **r_out)
{
    gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
    char *cmd, *p;
    HANDLE out;

    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);

    cmd = (char*)calloc (1, strlen (p) + strlen (fname) + 2+2 + 64);
    if (!cmd)
        BUG (NULL);
    sprintf (cmd, "%s --fixed-list-mode --with-colons \"%s\"", p, fname);

    out = create_tmpfile ("gpg_keys");
    if (create_process (cmd, NULL, out, NULL))
        err = gpg_error (GPG_ERR_INTERNAL);

    free (p);
    free (cmd);

    *r_out = map_tmpfile (out, NULL);
    CloseHandle (out);
    return err;
}


char* 
generate_revoke_input (int code, const char *cmt, const char *pass)
{
    const char *fmt;
    char *p;
    size_t n;

    fmt = "Y\n"     /*  gen_revoke.okay */
          "%d\n"    /* ask_revocation_reason.code */
          "%s\n"    /* ask_revocation_reason.text */
          "%s"      /* text != NULL '\n' otherwise '' */
          "Y\n"     /* ask_revocation_reason.okay */
          "%s\n";   /* passphrase.enter. */
    n = strlen (fmt) + 32;
    if (pass)
        n += strlen (pass) + 1;
    if (cmt)
        n += strlen (cmt) + 1;
    p = (char*)calloc (1, n+1);
    if (!p)
        BUG (NULL);
    sprintf (p, fmt, code, cmt? cmt : "", cmt? "\n" : "", pass? pass : "");
    return p;
}
    

/* Generate a revocation certificate for the key with the keyid @keyid.
   @inp_data contains all needed data to answer the questions of the
   command handler. Each separate with a '\n'.
   @r_revcert contains the revocation cert on success.
   Return value: 0 on success. */
gpgme_error_t
gpg_revoke_cert (const char *inp_data, const char *keyid, char **r_revcert)
{
    gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
    char *rcrt;
    char *cmd, *p;
    HANDLE in, out;
    
    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);

    cmd = (char*)calloc (1, strlen (p) + strlen (keyid)+1 + 128);
    if (!cmd)
        BUG (NULL);
    sprintf (cmd, "%s --pgp7 --command-fd=0 --status-fd=2 --gen-revoke %s", 
             p, keyid);

    in = create_in_pipe (inp_data);
    out = create_tmpfile ("gpg_revcert");
    if (create_process (cmd, in, out, NULL)) {
        *r_revcert = NULL;
        err = gpg_error (GPG_ERR_INTERNAL);
    }
    else {
        rcrt = map_tmpfile (out, NULL);
        *r_revcert = rcrt;
        if (rcrt && strlen (rcrt) == 0)
            err = gpg_error (GPG_ERR_BAD_PASSPHRASE);
    }

    free (p);
    free (cmd);

    CloseHandle (in);
    CloseHandle (out);
    return err;
}


/* Return the raw photo-id data combined with the status-fd
   entry in @r_data. If @keyid is set, only the data for this 
   key will be returned.
   Return value: 0 on success. */
gpgme_error_t
gpg_get_photoid_data (const char *keyid, char **r_status_data,
                      unsigned char **r_data, unsigned long *ndata)
{
    gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
    HANDLE herr, hdat;
    char *p, *cmd;
    DWORD n;

    if (ndata)
        *ndata = 0;
    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);
    n = strlen (p) + 128;
    if (keyid)
        n += strlen (keyid) + 1;
    cmd = (char*)calloc (1, n+1);
    if (!cmd)
        BUG (NULL);
    hdat = create_tmpfile ("gpg_uat_data");
    herr = create_tmpfile ("gpg_uat_status");
    /* XXX: add --list-options show-unsuable-uid to display
            revoked attribute IDs */
    sprintf (cmd, "%s --attribute-fd=%d --status-fd=2 --list-keys %s",
             p, (int)hdat, keyid? keyid : "");
    if (create_process (cmd, NULL, NULL, herr))
        err = gpg_error (GPG_ERR_INTERNAL);

    free (p);
    free (cmd);

    *r_data = (BYTE*)map_tmpfile (hdat, ndata);
    *r_status_data = map_tmpfile (herr, NULL);
    CloseHandle (hdat);
    CloseHandle (herr);

    return err;
}


/* Return the validity of the user attribute, informerly known 
   as photo-ID. If no uat was found, return 0 for unknown. */
gpgme_error_t
get_uat_validity (const char *keyid, gpgme_validity_t *r_valid)
{
    gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
    HANDLE out;
    char *p, *cmd;
    char *uat;

    *r_valid = GPGME_VALIDITY_UNKNOWN;
    p = read_gpg_program ();
    if (!p)
        return gpg_error (GPG_ERR_INV_ARG);

    cmd = (char*)calloc (1, strlen (p) + strlen (keyid)+1 + 128);
    if (!cmd)
        BUG (NULL);
    sprintf (cmd, "%s --with-colons --fixed-list-mode --list-keys \"%s\"",
             p, keyid);

    out = create_tmpfile ("gpg_keys");
    if (create_process (cmd, NULL, out, NULL))
        err = gpg_error (GPG_ERR_INTERNAL);

    free (p);
    free (cmd);
    
    p = map_tmpfile (out, NULL);
    if ((uat = strstr (p, "uat:"))) {
        switch (*(uat+4)) {
        case 'm': *r_valid = GPGME_VALIDITY_MARGINAL; break;
        case 'f':
        case 'u': *r_valid = GPGME_VALIDITY_FULL; break;
        default: *r_valid = GPGME_VALIDITY_UNDEFINED; break;
        }
    }

    free (p);    
    CloseHandle (out);
    return err;
}


#if 0
/* Extract all recipients from the file @file.
   Return value: 0 on success. */
static int
do_get_recipients (const char *file, gpgme_recipient_t *r_list)
{
    gpgme_recipient_t l;
    PACKET *pkt;
    gpg_iobuf_t inp = NULL;
    armor_filter_context_t afx;
    int rc = 0, quit=0;

    if (!file || !r_list) {
        log_debug ("do_list_packets: !r_list || !file");
        return -1;
    }

    *r_list=NULL;
    inp = gpg_iobuf_open (file);
    if (!inp)
        return WPTERR_FILE_OPEN;
    gpg_iobuf_ioctl (inp, 3, 1, NULL); /* disable cache */
    if (gpg_use_armor_filter (inp)) {
        memset (&afx, 0, sizeof (afx));
        gpg_iobuf_push_filter (inp, gpg_armor_filter, &afx);
    }
    pkt = (PACKET *)calloc(1, sizeof *pkt);
    gpg_init_packet (pkt);
    while (!quit && (rc = gpg_parse_packet (inp, pkt)) != -1) {
        switch (pkt->pkttype) {
        case PKT_PUBKEY_ENC:
            {PKT_pubkey_enc *enc = pkt->pkt.pubkey_enc;
            if (!enc)
                break;
            l = calloc (1, sizeof *l);
            l->keyid = calloc (1, 16+1);
            _snprintf (l->keyid, 16, "%08lX%08lX", enc->keyid[0], enc->keyid[1]);
            l->pubkey_algo = enc->pubkey_algo;
            l->status = 0;
            l->next = (*r_list);
            *r_list = l;
            break;}

        case PKT_ENCRYPTED:     
        case PKT_ENCRYPTED_MDC:
        case PKT_COMPRESSED:
        case PKT_PUBLIC_KEY:
        case PKT_SECRET_KEY:
            quit = 1;
            break;
        }
        gpg_free_packet (pkt);
        gpg_init_packet (pkt);
    }
    gpg_iobuf_close (inp);
    safe_free (pkt);
    return 0;
}
#endif
1	twoaday	121	/* wptGPGUtil.cpp - GPG util functions
2	twoaday	133	* Copyright (C) 2005, 2006 Timo Schulz
3	werner	36	* Copyright (C) 2005 g10 Code GmbH
4			*
5			* This file is part of WinPT.
6			*
7			* WinPT is free software; you can redistribute it and/or modify
8			* it under the terms of the GNU General Public License as published by
9			* the Free Software Foundation; either version 2 of the License, or
10			* (at your option) any later version.
11			*
12			* WinPT is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15			* GNU General Public License for more details.
16			*
17			* You should have received a copy of the GNU General Public License
18			* along with WinPT; if not, write to the Free Software Foundation,
19			* Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
20			*/
21	twoaday	121
22	werner	36	#ifdef HAVE_CONFIG_H
23			#include <config.h>
24			#endif
25
26			#include <windows.h>
27			#include <sys/stat.h>
28
29	twoaday	121	#include "gpgme.h"
30			#include "wptTypes.h"
31	twoaday	73	#include "wptErrors.h"
32	werner	36
33			#define NROFHEXDIGITS 2
34			/* Convert two hexadecimal digits from STR to the value they
35			represent. Returns -1 if one of the characters is not a
36			hexadecimal digit. */
37			static int
38			hextobyte (const unsigned char *str)
39			{
40			int val = 0;
41			int i;
42
43			for (i = 0; i < NROFHEXDIGITS; i++) {
44			if (str >= '0' && str <= '9')
45			val += *str - '0';
46			else if (str >= 'A' && str <= 'F')
47			val += 10 + *str - 'A';
48			else if (str >= 'a' && str <= 'f')
49			val += 10 + *str - 'a';
50			else
51			return -1;
52			if (i < NROFHEXDIGITS - 1)
53			val *= 16;
54			str++;
55			}
56			return val;
57			}
58
59			/* Decode the C formatted string @src and store the result in the
60			buffer @destp which is @len bytes long. If @len is zero, then a
61			large enough buffer is allocated with malloc and @destp is set to
62			the result. Currently, @len is only used to specify if allocation
63			is desired or not, the caller is expected to make sure that @destp
64			is large enough if @len is not zero. */
65			gpgme_error_t
66			gpg_decode_c_string (const char src, char *destp, size_t len)
67			{
68			char *dest;
69
70			/* Set up the destination buffer. */
71			if (len) {
72			if (len < strlen (src) + 1)
73			return gpg_error (GPG_ERR_TOO_SHORT);
74			dest = *destp;
75			}
76			else {
77			/* The converted string will never be larger than the original string. */
78			dest = (char*)malloc (strlen (src) + 1);
79			if (!dest)
80			return gpg_error (GPG_ERR_ENOMEM);
81			*destp = dest;
82			}
83
84			/* Convert the string. */
85			while (*src) {
86			if (*src != '\\') {
87			(dest++) = (src++);
88			continue;
89			}
90
91			switch (src[1]) {
92			#define DECODE_ONE(match,result) \
93			case match: \
94			src += 2; \
95			*(dest++) = result; \
96			break;
97
98			DECODE_ONE ('\'', '\'');
99			DECODE_ONE ('\"', '\"');
100			DECODE_ONE ('\?', '\?');
101			DECODE_ONE ('\\', '\\');
102			DECODE_ONE ('a', '\a');
103			DECODE_ONE ('b', '\b');
104			DECODE_ONE ('f', '\f');
105			DECODE_ONE ('n', '\n');
106			DECODE_ONE ('r', '\r');
107			DECODE_ONE ('t', '\t');
108			DECODE_ONE ('v', '\v');
109
110			case 'x': {
111			int val = hextobyte ((unsigned char*)&src[2]);
112			if (val == -1) { /* Should not happen. */
113			(dest++) = (src++);
114			(dest++) = (src++);
115			if (*src)
116			(dest++) = (src++);
117			if (*src)
118			(dest++) = (src++);
119			}
120			else {
121			if (!val) {
122			/* A binary zero is not representable in a C string. */
123			*(dest++) = '\\';
124			*(dest++) = '0';
125			}
126			else
127			((unsigned char ) dest++) = val;
128			src += 4;
129			}
130			}
131
132			default: /* Should not happen. */
133			{
134			(dest++) = (src++);
135			(dest++) = (src++);
136			}
137			}
138			}
139			*(dest++) = 0;
140			return 0;
141			}
142
143			/* Replace %foo% entries with its real values.
144			Return value: expanded path or NULL on error. */
145			static char *
146			expand_path (const char *path)
147			{
148			DWORD len;
149			char *p;
150
151			len = ExpandEnvironmentStrings (path, NULL, 0);
152			if (!len)
153			return NULL;
154			len += 1;
155			p = (char*)calloc (1, len+1);
156			if (!p)
157	twoaday	121	BUG (NULL);
158	werner	36	len = ExpandEnvironmentStrings (path, p, len);
159			if (!len) {
160			free (p);
161			return NULL;
162			}
163			return p;
164			}
165
166
167			/* Read a string from the W32 registry. The directory is given
168			in @dir and the name of the value in @name, */
169			static char *
170			read_w32_registry (HKEY root_key, const char dir, const char name)
171			{
172			HKEY key_handle;
173			DWORD n1, nbytes;
174			DWORD type;
175			char *result = NULL;
176
177			if (RegOpenKeyEx (root_key, dir, 0, KEY_READ, &key_handle))
178			return NULL; /* no need for a RegClose, so return direct */
179
180			nbytes = 1;
181			if (RegQueryValueEx (key_handle, name, 0, NULL, NULL, &nbytes))
182			goto leave;
183			result = (char*)calloc (1, (n1=nbytes+1));
184			if (!result)
185	twoaday	121	BUG (NULL);
186	werner	36	if (RegQueryValueEx (key_handle, name, 0, &type, (BYTE*)result, &n1)) {
187			free (result);
188			result = NULL;
189			goto leave;
190			}
191			if (type == REG_EXPAND_SZ && strchr (result, '%')) {
192			char *p = expand_path (result);
193			free (result);
194			result = p;
195			}
196
197			leave:
198			RegCloseKey (key_handle);
199			return result;
200			}
201
202	twoaday	133	static char*
203			read_gpg_program (void)
204			{
205			return read_w32_registry (HKEY_CURRENT_USER,
206			"Software\\GNU\\GnuPG", "gpgProgram");
207			}
208	werner	36
209	twoaday	133
210	werner	36	/* Create a temp file based on the name of @name.
211			Return value: handle to the file in case of success. */
212			static HANDLE
213			create_tmpfile (const char *name)
214			{
215			HANDLE out;
216	twoaday	121	SECURITY_ATTRIBUTES sec_attr;
217	werner	36	char tmp[300];
218
219	twoaday	121	memset (&sec_attr, 0, sizeof sec_attr);
220			sec_attr.bInheritHandle = TRUE;
221			sec_attr.lpSecurityDescriptor = NULL;
222			sec_attr.nLength = sizeof sec_attr;
223	werner	36
224			GetTempPath (sizeof (tmp)-1 - strlen (name)-1, tmp);
225			strcat (tmp, name);
226			out = CreateFile (tmp, GENERIC_READ\|GENERIC_WRITE,
227	twoaday	121	FILE_SHARE_WRITE, &sec_attr,
228	werner	36	OPEN_ALWAYS, FILE_FLAG_DELETE_ON_CLOSE, NULL);
229	twoaday	121	if (out == INVALID_HANDLE_VALUE)
230			log_debug ("create_tmpfile: CreateFile failed ec=%d\r\n",
231			(int)GetLastError ());
232	werner	36	return out;
233			}
234
235
236			/* Create a pipe with a readable remote end and
237			write the data from @dat to the local end.
238			Return value: read handle on success. */
239			static HANDLE
240			create_in_pipe (const char *dat)
241			{
242			HANDLE r, w;
243			SECURITY_ATTRIBUTES sec_attr;
244			DWORD n;
245
246			memset (&sec_attr, 0, sizeof sec_attr);
247			sec_attr.bInheritHandle = TRUE;
248			sec_attr.nLength = sizeof sec_attr;
249
250	twoaday	121	if (!CreatePipe (&r, &w, &sec_attr, 4096)) {
251			log_debug ("create_in_pipe: CreatePipeFailed ec=%d\r\n",
252			(int)GetLastError ());
253	werner	36	return NULL;
254	twoaday	121	}
255	werner	36
256			WriteFile (w, dat, strlen (dat), &n, NULL);
257			CloseHandle (w);
258
259			return r;
260			}
261
262
263			/* Map the contents of the file handle @out to
264			a buffer and return it. */
265			static char*
266	twoaday	133	map_tmpfile (HANDLE out, DWORD *nread)
267	werner	36	{
268			DWORD n;
269			char *p;
270
271			FlushFileBuffers (out);
272			SetFilePointer (out, 0, NULL, FILE_BEGIN);
273			n = GetFileSize (out, NULL);
274			p = (char*)calloc (1, n+1);
275			if (!p)
276	twoaday	121	BUG (NULL);
277	werner	36	ReadFile (out, p, n, &n, NULL);
278			p[n] = 0;
279	twoaday	133	if (nread)
280			*nread = n;
281	werner	36	return p;
282			}
283
284
285			/* Create a process from the command line in @cmd.
286			If @out is != NULL, the output of the process will
287			be redirected to @out. If @in is != NULL the input
288			will be read from @in.
289			Return value: 0 on success. */
290			static int
291	twoaday	133	create_process (const char *cmd, HANDLE in, HANDLE out, HANDLE err)
292	werner	36	{
293			STARTUPINFO si;
294			PROCESS_INFORMATION pi;
295
296			memset (&si, 0, sizeof (si));
297			si.cb = sizeof si;
298	twoaday	133	if (in \|\| out \|\| err)
299	twoaday	121	si.dwFlags = STARTF_USESTDHANDLES;
300	werner	36	if (out)
301			si.hStdOutput = out;
302			if (in)
303			si.hStdInput = in;
304	twoaday	133	if (err)
305			si.hStdError = err;
306	twoaday	121	si.dwFlags \|= STARTF_USESHOWWINDOW;
307	werner	36	si.wShowWindow = SW_HIDE;
308			if (!CreateProcess (NULL, (char*)cmd, NULL, NULL, TRUE, 0,
309	twoaday	121	NULL, NULL, &si, &pi)) {
310			log_debug ("create_process: CreateProcess failed ec=%d\r\n",
311	twoaday	73	(int)GetLastError ());
312	werner	36	return -1;
313	twoaday	73	}
314	werner	36	WaitForSingleObject (pi.hProcess, INFINITE);
315			CloseHandle (pi.hProcess);
316			return 0;
317			}
318
319
320			/* Export a GPG secret key given by @keyid into the file @outfile.
321			Return value: 0 on success. */
322			gpgme_error_t
323			gpg_export_seckey (const char keyid, const char outfile)
324			{
325			gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
326			struct stat st;
327			char *p;
328			char *cmd;
329
330	twoaday	133	p = read_gpg_program ();
331	werner	36	if (!p)
332			return gpg_error (GPG_ERR_INV_ARG);
333			cmd = (char*)calloc (1, strlen (p) + strlen (keyid)
334			+ strlen (outfile) + 64 + 2);
335			if (!cmd)
336	twoaday	121	BUG (NULL);
337	werner	36	sprintf (cmd, "%s --yes --output \"%s\" --export-secret-key %s",
338			p, outfile, keyid);
339	twoaday	133	if (create_process (cmd, NULL, NULL, NULL))
340	werner	36	err = gpg_error (GPG_ERR_INTERNAL);
341
342			if (stat (outfile, &st) == -1 \|\| st.st_size == 0)
343			err = gpg_error (GPG_ERR_NO_DATA);
344
345			free (p);
346			free (cmd);
347			return err;
348			}
349
350
351	twoaday	121	/* If @export is 1, export the ownertrust data to the
352			buffer @data. Otherwise import the ownertrust data from @data.
353	werner	36	Return value: 0 on success. */
354			gpgme_error_t
355	twoaday	121	gpg_manage_ownertrust (char **data, int do_export)
356	werner	36	{
357			gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
358			HANDLE out = NULL, in = NULL;
359			char *p;
360			char *cmd;
361
362	twoaday	133	p = read_gpg_program ();
363	werner	36	if (!p)
364			return gpg_error (GPG_ERR_INV_ARG);
365
366			cmd = (char*)calloc (1, strlen (p) + 64 + 1);
367			if (!cmd)
368	twoaday	121	BUG (NULL);
369	werner	36	sprintf (cmd, "%s %s", p,
370	twoaday	121	do_export? "--export-ownertrust" : "--import-ownertrust");
371	werner	36
372	twoaday	121	if (do_export)
373	werner	36	out = create_tmpfile ("gpg_ot_out");
374			else {
375			DWORD nw;
376			in = create_tmpfile ("gpg_ot_in");
377			WriteFile (in, data, strlen (data), &nw, NULL);
378			FlushFileBuffers (in);
379			/* XXX: need a rewind? */
380			}
381	twoaday	133	if (create_process (cmd, in, out, NULL))
382	werner	36	err = gpg_error (GPG_ERR_INTERNAL);
383
384			free (p);
385			free (cmd);
386
387			if (in)
388			CloseHandle (in);
389			if (out) {
390	twoaday	133	*data = map_tmpfile (out, NULL);
391	werner	36	CloseHandle (out);
392			}
393	twoaday	129
394	werner	36	return err;
395			}
396
397
398			/* Call gpg --rebuild-keydb-caches to speed up signature listings. */
399			gpgme_error_t
400			gpg_rebuild_cache (char **r_inf)
401			{
402			gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
403			HANDLE out = NULL;
404			char *p;
405			char *cmd;
406
407	twoaday	133	p = read_gpg_program ();
408	werner	36	if (!p)
409			return gpg_error (GPG_ERR_INV_ARG);
410			cmd = (char*)calloc (1, strlen (p) + 64);
411			if (!cmd)
412	twoaday	121	BUG (NULL);
413	werner	36	sprintf (cmd, "%s --logger-fd=1 --rebuild-keydb-caches", p);
414
415			if (r_inf)
416			out = create_tmpfile ("gpg_rebuild_cache");
417
418	twoaday	133	if (create_process (cmd, NULL, out, NULL))
419	werner	36	err = gpg_error (GPG_ERR_INTERNAL);
420
421			if (r_inf)
422	twoaday	133	*r_inf = map_tmpfile (out, NULL);
423	werner	36	if (out)
424			CloseHandle (out);
425			free (p);
426			free (cmd);
427			return 0;
428			}
429
430
431			/* Call gpg --version to retrieve the 'about' information. */
432			gpgme_error_t
433			gpg_get_version (char **r_inf)
434			{
435			gpgme_error_t err= gpg_error (GPG_ERR_NO_ERROR);
436			HANDLE out;
437			char p, cmd;
438
439	twoaday	133	p = read_gpg_program ();
440	werner	36	if (!p)
441			return gpg_error (GPG_ERR_INV_ARG);
442			cmd = (char*)calloc (1, strlen (p) + 32);
443			if (!cmd)
444	twoaday	121	BUG (NULL);
445	werner	36	sprintf (cmd, "%s --version", p);
446
447			out = create_tmpfile ("gpg_out");
448	twoaday	133	if (create_process (cmd, NULL, out, NULL))
449	werner	36	err = gpg_error (GPG_ERR_INTERNAL);
450
451			free (p);
452			free (cmd);
453
454	twoaday	133	*r_inf = map_tmpfile (out, NULL);
455	werner	36	CloseHandle (out);
456			return err;
457			}
458
459
460			/* Return the colon file output of the given file @fname in @r_out.
461			Return value: 0 on success. */
462			gpgme_error_t
463			gpg_import_key_list (const char fname, char *r_out)
464			{
465			gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
466			char cmd, p;
467			HANDLE out;
468
469	twoaday	133	p = read_gpg_program ();
470	werner	36	if (!p)
471			return gpg_error (GPG_ERR_INV_ARG);
472
473			cmd = (char*)calloc (1, strlen (p) + strlen (fname) + 2+2 + 64);
474			if (!cmd)
475	twoaday	121	BUG (NULL);
476	werner	36	sprintf (cmd, "%s --fixed-list-mode --with-colons \"%s\"", p, fname);
477
478			out = create_tmpfile ("gpg_keys");
479	twoaday	133	if (create_process (cmd, NULL, out, NULL))
480	werner	36	err = gpg_error (GPG_ERR_INTERNAL);
481
482			free (p);
483			free (cmd);
484
485	twoaday	133	*r_out = map_tmpfile (out, NULL);
486	werner	36	CloseHandle (out);
487			return err;
488			}
489
490	twoaday	129
491	werner	36	char*
492	twoaday	129	generate_revoke_input (int code, const char cmt, const char pass)
493	werner	36	{
494			const char *fmt;
495			char *p;
496			size_t n;
497
498			fmt = "Y\n" /* gen_revoke.okay */
499			"%d\n" /* ask_revocation_reason.code */
500			"%s\n" /* ask_revocation_reason.text */
501			"%s" /* text != NULL '\n' otherwise '' */
502			"Y\n" /* ask_revocation_reason.okay */
503			"%s\n"; /* passphrase.enter. */
504			n = strlen (fmt) + 32;
505			if (pass)
506			n += strlen (pass) + 1;
507			if (cmt)
508			n += strlen (cmt) + 1;
509			p = (char*)calloc (1, n+1);
510			if (!p)
511	twoaday	121	BUG (NULL);
512	werner	36	sprintf (p, fmt, code, cmt? cmt : "", cmt? "\n" : "", pass? pass : "");
513			return p;
514			}
515
516
517			/* Generate a revocation certificate for the key with the keyid @keyid.
518			@inp_data contains all needed data to answer the questions of the
519			command handler. Each separate with a '\n'.
520			@r_revcert contains the revocation cert on success.
521			Return value: 0 on success. */
522			gpgme_error_t
523	twoaday	129	gpg_revoke_cert (const char inp_data, const char keyid, char **r_revcert)
524	werner	36	{
525			gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
526			char *rcrt;
527			char cmd, p;
528			HANDLE in, out;
529
530	twoaday	133	p = read_gpg_program ();
531	werner	36	if (!p)
532			return gpg_error (GPG_ERR_INV_ARG);
533
534			cmd = (char*)calloc (1, strlen (p) + strlen (keyid)+1 + 128);
535			if (!cmd)
536	twoaday	121	BUG (NULL);
537	werner	36	sprintf (cmd, "%s --pgp7 --command-fd=0 --status-fd=2 --gen-revoke %s",
538			p, keyid);
539
540			in = create_in_pipe (inp_data);
541			out = create_tmpfile ("gpg_revcert");
542	twoaday	133	if (create_process (cmd, in, out, NULL)) {
543	werner	36	*r_revcert = NULL;
544			err = gpg_error (GPG_ERR_INTERNAL);
545			}
546			else {
547	twoaday	133	rcrt = map_tmpfile (out, NULL);
548	werner	36	*r_revcert = rcrt;
549	twoaday	129	if (rcrt && strlen (rcrt) == 0)
550			err = gpg_error (GPG_ERR_BAD_PASSPHRASE);
551	werner	36	}
552
553			free (p);
554			free (cmd);
555
556			CloseHandle (in);
557			CloseHandle (out);
558			return err;
559			}
560
561
562	twoaday	133	/* Return the raw photo-id data combined with the status-fd
563			entry in @r_data. If @keyid is set, only the data for this
564			key will be returned.
565			Return value: 0 on success. */
566			gpgme_error_t
567			gpg_get_photoid_data (const char keyid, char *r_status_data,
568			unsigned char *r_data, unsigned long ndata)
569			{
570			gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
571			HANDLE herr, hdat;
572			char p, cmd;
573			DWORD n;
574
575	twoaday	164	if (ndata)
576			*ndata = 0;
577	twoaday	133	p = read_gpg_program ();
578			if (!p)
579			return gpg_error (GPG_ERR_INV_ARG);
580			n = strlen (p) + 128;
581			if (keyid)
582			n += strlen (keyid) + 1;
583			cmd = (char*)calloc (1, n+1);
584			if (!cmd)
585			BUG (NULL);
586			hdat = create_tmpfile ("gpg_uat_data");
587			herr = create_tmpfile ("gpg_uat_status");
588			/* XXX: add --list-options show-unsuable-uid to display
589			revoked attribute IDs */
590			sprintf (cmd, "%s --attribute-fd=%d --status-fd=2 --list-keys %s",
591			p, (int)hdat, keyid? keyid : "");
592			if (create_process (cmd, NULL, NULL, herr))
593			err = gpg_error (GPG_ERR_INTERNAL);
594
595			free (p);
596			free (cmd);
597
598			r_data = (BYTE)map_tmpfile (hdat, ndata);
599			*r_status_data = map_tmpfile (herr, NULL);
600			CloseHandle (hdat);
601			CloseHandle (herr);
602
603			return err;
604			}
605
606
607	werner	36	/* Return the validity of the user attribute, informerly known
608			as photo-ID. If no uat was found, return 0 for unknown. */
609			gpgme_error_t
610			get_uat_validity (const char keyid, gpgme_validity_t r_valid)
611			{
612			gpgme_error_t err = gpg_error (GPG_ERR_NO_ERROR);
613			HANDLE out;
614			char p, cmd;
615			char *uat;
616
617			*r_valid = GPGME_VALIDITY_UNKNOWN;
618	twoaday	133	p = read_gpg_program ();
619	werner	36	if (!p)
620			return gpg_error (GPG_ERR_INV_ARG);
621
622			cmd = (char*)calloc (1, strlen (p) + strlen (keyid)+1 + 128);
623			if (!cmd)
624	twoaday	121	BUG (NULL);
625	werner	36	sprintf (cmd, "%s --with-colons --fixed-list-mode --list-keys \"%s\"",
626			p, keyid);
627
628			out = create_tmpfile ("gpg_keys");
629	twoaday	133	if (create_process (cmd, NULL, out, NULL))
630	werner	36	err = gpg_error (GPG_ERR_INTERNAL);
631
632			free (p);
633			free (cmd);
634
635	twoaday	133	p = map_tmpfile (out, NULL);
636	werner	36	if ((uat = strstr (p, "uat:"))) {
637			switch (*(uat+4)) {
638			case 'm': *r_valid = GPGME_VALIDITY_MARGINAL; break;
639			case 'f':
640			case 'u': *r_valid = GPGME_VALIDITY_FULL; break;
641			default: *r_valid = GPGME_VALIDITY_UNDEFINED; break;
642			}
643			}
644
645			free (p);
646			CloseHandle (out);
647			return err;
648			}
649
650
651			#if 0
652			/* Extract all recipients from the file @file.
653			Return value: 0 on success. */
654			static int
655			do_get_recipients (const char file, gpgme_recipient_t r_list)
656			{
657			gpgme_recipient_t l;
658			PACKET *pkt;
659			gpg_iobuf_t inp = NULL;
660			armor_filter_context_t afx;
661			int rc = 0, quit=0;
662
663			if (!file \|\| !r_list) {
664			log_debug ("do_list_packets: !r_list \|\| !file");
665			return -1;
666			}
667
668			*r_list=NULL;
669			inp = gpg_iobuf_open (file);
670			if (!inp)
671			return WPTERR_FILE_OPEN;
672			gpg_iobuf_ioctl (inp, 3, 1, NULL); /* disable cache */
673			if (gpg_use_armor_filter (inp)) {
674			memset (&afx, 0, sizeof (afx));
675			gpg_iobuf_push_filter (inp, gpg_armor_filter, &afx);
676			}
677			pkt = (PACKET )calloc(1, sizeof pkt);
678			gpg_init_packet (pkt);
679			while (!quit && (rc = gpg_parse_packet (inp, pkt)) != -1) {
680			switch (pkt->pkttype) {
681			case PKT_PUBKEY_ENC:
682			{PKT_pubkey_enc *enc = pkt->pkt.pubkey_enc;
683			if (!enc)
684			break;
685			l = calloc (1, sizeof *l);
686			l->keyid = calloc (1, 16+1);
687			_snprintf (l->keyid, 16, "%08lX%08lX", enc->keyid[0], enc->keyid[1]);
688			l->pubkey_algo = enc->pubkey_algo;
689			l->status = 0;
690			l->next = (*r_list);
691			*r_list = l;
692			break;}
693
694			case PKT_ENCRYPTED:
695			case PKT_ENCRYPTED_MDC:
696			case PKT_COMPRESSED:
697			case PKT_PUBLIC_KEY:
698			case PKT_SECRET_KEY:
699			quit = 1;
700			break;
701			}
702			gpg_free_packet (pkt);
703			gpg_init_packet (pkt);
704			}
705			gpg_iobuf_close (inp);
706			safe_free (pkt);
707			return 0;
708			}
709			#endif