1 |
/* wptKeyserver.cpp - W32 Keyserver Access |
/* wptKeyserver.cpp - W32 Keyserver Access |
2 |
* Copyright (C) 2000-2005 Timo Schulz |
* Copyright (C) 2000-2006 Timo Schulz |
3 |
* Copyright (C) 2001 Marco Cunha |
* Copyright (C) 2001 Marco Cunha |
4 |
* |
* |
5 |
* This file is part of WinPT. |
* This file is part of WinPT. |
36 |
#include "wptW32API.h" |
#include "wptW32API.h" |
37 |
#include "wptGPG.h" |
#include "wptGPG.h" |
38 |
#include "wptRegistry.h" |
#include "wptRegistry.h" |
39 |
|
#include "wptUTF8.h" |
40 |
|
|
41 |
/* just map net_errno to a winsock error. */ |
/* Map net_errno to a winsock error. */ |
42 |
#define net_errno ((int)WSAGetLastError ()) |
#define net_errno ((int)WSAGetLastError ()) |
43 |
|
|
44 |
|
|
45 |
keyserver server[MAX_KEYSERVERS] = {0}; |
keyserver server[MAX_KEYSERVERS] = {0}; |
46 |
keyserver_proxy_s proxy = {0}; |
keyserver_proxy_s proxy = {0}; |
47 |
static const char *server_list[] = { |
static const char *server_list[] = { |
48 |
"hkp://wwwkeys.nl.pgp.net", |
"hkp://sks.keyserver.penguin.de", |
|
"hkp://wwwkeys.pl.pgp.net", |
|
|
"hkp://wwwkeys.at.pgp.net", |
|
|
"hkp://wwwkeys.ch.pgp.net", |
|
|
"hkp://wwwkeys.de.pgp.net", |
|
|
"hkp://wwwkeys.dk.pgp.net", |
|
|
"hkp://wwwkeys.cz.pgp.net", |
|
|
"hkp://wwwkeys.es.pgp.net", |
|
|
"hkp://wwwkeys.eu.pgp.net", |
|
|
"hkp://wwwkeys.uk.pgp.net", |
|
|
"hkp://wwwkeys.us.pgp.net", |
|
49 |
"hkp://subkeys.pgp.net", |
"hkp://subkeys.pgp.net", |
50 |
"ldap://keyserver.pgp.com", |
"ldap://keyserver.pgp.com", |
51 |
NULL |
NULL |
54 |
|
|
55 |
static char hkp_errmsg[1024]; /* Holds the error message from the server */ |
static char hkp_errmsg[1024]; /* Holds the error message from the server */ |
56 |
static int hkp_err = 0; /* != 0 indicates an error occurred. */ |
static int hkp_err = 0; /* != 0 indicates an error occurred. */ |
|
static DWORD conf_timestamp = 0;/* timestamp of the configuration fiele. */ |
|
57 |
|
|
58 |
/* Default keyserver and port. */ |
/* Default keyserver and port. */ |
59 |
char *default_keyserver = NULL; |
char *default_keyserver = NULL; |
60 |
WORD default_keyserver_port = 0; |
WORD default_keyserver_port = 0; |
61 |
|
|
62 |
/* Default socket timeout. */ |
/* Default socket timeout. */ |
63 |
static int default_socket_timeout = 10; |
static int default_socket_timeout = 6; |
64 |
|
|
65 |
|
|
66 |
|
/* Wrapper for safe memory allocation. */ |
67 |
|
static char* |
68 |
|
safe_alloc (DWORD n) |
69 |
|
{ |
70 |
|
char *p; |
71 |
|
|
72 |
|
p = new char[n+1]; |
73 |
|
if (!p) |
74 |
|
BUG (0); |
75 |
|
memset (p, 0, n); |
76 |
|
return p; |
77 |
|
} |
78 |
|
|
79 |
/* Basic64 encode the input @inbuf to @outbuf. */ |
/* Basic64 encode the input @inbuf to @outbuf. */ |
80 |
static void |
static void |
121 |
} |
} |
122 |
|
|
123 |
|
|
124 |
|
/* Check that the given buffer contains a valid keyserver URL |
125 |
|
and return the prefix length, 0 in case of an error. */ |
126 |
|
static int |
127 |
|
check_URL (const char *buf) |
128 |
|
{ |
129 |
|
const char *proto[] = { |
130 |
|
"ldap://", |
131 |
|
"http://", |
132 |
|
"finger://", |
133 |
|
"hkp://", |
134 |
|
NULL}; |
135 |
|
int i; |
136 |
|
|
137 |
|
if (strlen (buf) < 7) |
138 |
|
return 0; |
139 |
|
|
140 |
|
for (i=0; proto[i] != NULL; i++) { |
141 |
|
if (strstr (buf, proto[i])) |
142 |
|
return strlen (proto[i]); |
143 |
|
} |
144 |
|
return 0; |
145 |
|
} |
146 |
|
|
147 |
|
|
148 |
/* Skip the URL schema and return only the host part of it. */ |
/* Skip the URL schema and return only the host part of it. */ |
149 |
static const char* |
static const char* |
150 |
skip_type_prefix (const char *hostname) |
skip_type_prefix (const char *hostname) |
151 |
{ |
{ |
152 |
if (hostname && !strncmp (hostname, "http://", 7)) |
int pos; |
153 |
hostname += 7; |
|
154 |
else if (hostname && !strncmp (hostname, "hkp://", 6)) |
if (!hostname) |
155 |
hostname += 6; |
return hostname; |
156 |
else if (hostname && !strncmp (hostname, "finger://", 9)) |
|
157 |
hostname += 9; |
pos = check_URL (hostname); |
158 |
else if (hostname && !strncmp (hostname, "ldap://", 7)) |
if (pos > 0) |
159 |
hostname += 7; |
hostname += pos; |
160 |
return hostname; |
return hostname; |
161 |
} |
} |
162 |
|
|
163 |
|
/* Parse the keyserver response and extract the human |
164 |
|
readable text passages. */ |
165 |
|
static int |
166 |
|
parse_keyserver_error (const char *resp, char *txt, size_t txtlen) |
167 |
|
{ |
168 |
|
char *p, *p2; |
169 |
|
|
170 |
|
/* If we find no 'Error' substring, we assume a success. */ |
171 |
|
if (!stristr (resp, "Error")) |
172 |
|
return 0; |
173 |
|
|
174 |
|
memset (txt, 0, txtlen); |
175 |
|
p = strstr (resp, "\r\n\r\n"); |
176 |
|
if (!p) |
177 |
|
return -1; |
178 |
|
resp += (p-resp); |
179 |
|
p = strstr (resp, "<h1>"); |
180 |
|
if (!p) |
181 |
|
return -1; |
182 |
|
resp += (p-resp)+strlen ("<h1>"); |
183 |
|
p = strstr (resp, "</h1>"); |
184 |
|
if (!p) |
185 |
|
return -1; |
186 |
|
resp += (p-resp)+strlen ("</h1>"); |
187 |
|
p2 = strstr (resp, "</body>"); |
188 |
|
if (p2 != NULL) |
189 |
|
memcpy (txt, resp, (p2-resp)); |
190 |
|
else { |
191 |
|
if (!strnicmp (resp, "<p>", 3)) |
192 |
|
resp += 3; |
193 |
|
while (resp && *resp == '\r' || *resp == '\n') |
194 |
|
resp++; |
195 |
|
memcpy (txt, resp, strlen (resp)); |
196 |
|
} |
197 |
|
return 0; |
198 |
|
} |
199 |
|
|
200 |
|
|
201 |
/* Check that the keyserver response indicates an OK. |
/* Check that the keyserver response indicates an OK. |
202 |
Return 0 on success. */ |
Return 0 on success. */ |
203 |
static int |
static int |
204 |
check_hkp_response (const char *resp, int recv) |
check_hkp_response (const char *resp, int recv) |
205 |
{ |
{ |
206 |
char *p, *end; |
int ec; |
|
int ec, len; |
|
207 |
|
|
208 |
|
log_debug ("check_hkp_response: '%s'\r\n", resp); |
209 |
ec = recv ? WPTERR_WINSOCK_RECVKEY : WPTERR_WINSOCK_SENDKEY; |
ec = recv ? WPTERR_WINSOCK_RECVKEY : WPTERR_WINSOCK_SENDKEY; |
210 |
if (!strstr (resp, "HTTP/1.0 200 OK") && |
if (!strstr (resp, "HTTP/1.0 200 OK") && |
211 |
!strstr (resp, "HTTP/1.1 200 OK")) /* http error */ |
!strstr (resp, "HTTP/1.1 200 OK") && |
212 |
return ec; |
!strstr (resp, "HTTP/1.0 500 OK") && |
213 |
if (strstr (resp, "Public Key Server -- Error") |
!strstr (resp, "HTTP/1.1 500 OK")) |
214 |
|| strstr (resp, "Public Key Server -- Error") |
return ec; /* http error */ |
215 |
|| strstr (resp, "No matching keys in database")) { |
|
216 |
p = strstr (resp, "<p>"); |
if (parse_keyserver_error (resp, hkp_errmsg, sizeof (hkp_errmsg)-2)) { |
217 |
if (p && strlen (p) < sizeof (hkp_errmsg)) { |
if (!strlen (hkp_errmsg)) |
218 |
end = strstr (p, "</p>"); |
_snprintf (hkp_errmsg, sizeof (hkp_errmsg)-1, |
219 |
len = end? (end - p + 1) : strlen (p); |
"Unknown keyserver error"); |
220 |
memset (hkp_errmsg, 0, sizeof (hkp_errmsg)); |
hkp_err = 1; |
|
strncpy (hkp_errmsg, p, len); |
|
|
hkp_err = 1; |
|
|
} |
|
221 |
return ec; |
return ec; |
222 |
} |
} |
223 |
return 0; |
return 0; |
282 |
DWORD nread; |
DWORD nread; |
283 |
int nleft = buflen; |
int nleft = buflen; |
284 |
int rc, n = 0; |
int rc, n = 0; |
285 |
|
|
286 |
|
if (nbytes) |
287 |
|
*nbytes = 0; |
288 |
while (nleft > 0) { |
while (nleft > 0) { |
289 |
if (n >= default_socket_timeout) |
if (n >= default_socket_timeout) |
290 |
return WPTERR_WINSOCK_TIMEOUT; |
return WPTERR_WINSOCK_TIMEOUT; |
311 |
return 0; |
return 0; |
312 |
} |
} |
313 |
|
|
314 |
|
|
315 |
|
/* Helper to create a string from the gpgme data and |
316 |
|
then release the gpgme data object. */ |
317 |
|
char* |
318 |
|
data_release_and_get_mem (gpgme_data_t in, int *r_bufferlen) |
319 |
|
{ |
320 |
|
size_t n; |
321 |
|
char *buffer, *p; |
322 |
|
|
323 |
|
gpg_data_putc (in, '\0'); |
324 |
|
p = gpgme_data_release_and_get_mem (in, &n); |
325 |
|
buffer = m_strdup (p); |
326 |
|
if (r_bufferlen) |
327 |
|
*r_bufferlen = (int)n; |
328 |
|
gpgme_free (p); |
329 |
|
return buffer; |
330 |
|
} |
331 |
|
|
332 |
|
|
333 |
/* Read much data as possible from the socket @fd and |
/* Read much data as possible from the socket @fd and |
334 |
return the data in @buffer. Caller must free data. |
return the data in @buffer. Caller must free data. |
335 |
Return value: 0 on success. */ |
Return value: 0 on success. */ |
337 |
sock_read_ext (int fd, char **buffer, int *r_bufferlen) |
sock_read_ext (int fd, char **buffer, int *r_bufferlen) |
338 |
{ |
{ |
339 |
gpgme_data_t dh; |
gpgme_data_t dh; |
340 |
char buf[1024], *p; |
char buf[1024]; |
341 |
size_t n=0; |
size_t n=0; |
342 |
int nread, rc; |
int nread, rc; |
343 |
|
|
344 |
gpgme_data_new (&dh); |
if (gpgme_data_new (&dh)) |
345 |
|
BUG (0); |
346 |
while (n < 10) { |
while (n < 10) { |
347 |
rc = sock_select (fd, 1); |
rc = sock_select (fd, 1); |
348 |
if (rc == SOCKET_ERROR) { |
if (rc == SOCKET_ERROR) { |
360 |
gpgme_data_write (dh, buf, nread); |
gpgme_data_write (dh, buf, nread); |
361 |
} |
} |
362 |
} |
} |
363 |
gpg_data_putc (dh, '\0'); |
|
364 |
p = gpgme_data_release_and_get_mem (dh, &n); |
*buffer = data_release_and_get_mem (dh, r_bufferlen); |
|
*buffer = m_strdup (p); |
|
|
if (r_bufferlen) |
|
|
*r_bufferlen = n; |
|
|
gpgme_free (p); |
|
365 |
return 0; |
return 0; |
366 |
} |
} |
367 |
|
|
418 |
} |
} |
419 |
kserver_proxy_release (&proxy); |
kserver_proxy_release (&proxy); |
420 |
WSACleanup (); |
WSACleanup (); |
421 |
|
log_debug ("wsock_end: cleanup finished.\r\n"); |
422 |
} |
} |
423 |
|
|
424 |
|
|
425 |
/* Return a string representation of a winsock error. */ |
/* Return a string representation of a winsock error. */ |
426 |
const char* |
const char* |
427 |
wsock_strerror (void) |
wsock_strerror (void) |
428 |
{ |
{ |
|
static char buf[384]; |
|
429 |
int ec = WSAGetLastError (); |
int ec = WSAGetLastError (); |
430 |
|
|
431 |
|
if (!ec) |
432 |
|
return ""; |
433 |
switch (ec) { |
switch (ec) { |
434 |
case WSAENETDOWN: |
case WSAENETDOWN: |
435 |
return _("The network subsystem has failed"); |
return _("Network unreachable"); |
436 |
|
|
437 |
|
case WSAEHOSTUNREACH: |
438 |
|
return _("Host unreachable"); |
439 |
|
|
440 |
case WSAHOST_NOT_FOUND: |
case WSAHOST_NOT_FOUND: |
441 |
return _("Authoritative Answer Host not found"); |
return _("Could not resolve host name"); |
442 |
|
|
443 |
|
case WSAECONNREFUSED: |
444 |
|
return _("Connection refused"); |
445 |
|
|
446 |
case WSAETIMEDOUT: |
case WSAETIMEDOUT: |
447 |
return _("The connection has been dropped because of a network failure"); |
case WSAECONNABORTED: |
448 |
|
return _("Connection timeout"); |
449 |
|
|
450 |
|
case WSAENETRESET: |
451 |
|
case WSAECONNRESET: |
452 |
|
return _("Connection resetted by peer"); |
453 |
|
|
454 |
|
case WSAESHUTDOWN: |
455 |
|
return _("Socket has been shutdown"); |
456 |
|
|
457 |
default: |
default: |
458 |
_snprintf (buf, sizeof (buf) -1, _("Unknown Winsock error ec=%d"),ec); |
break; |
|
return buf; |
|
459 |
} |
} |
460 |
return NULL; |
|
461 |
|
return ""; |
462 |
} |
} |
463 |
|
|
464 |
|
|
466 |
void |
void |
467 |
kserver_set_socket_timeout (int nsec) |
kserver_set_socket_timeout (int nsec) |
468 |
{ |
{ |
469 |
if (nsec < 0) |
if (nsec < 0 || nsec > 3600) |
470 |
nsec = 0; |
nsec = 0; |
471 |
default_socket_timeout = nsec; |
default_socket_timeout = nsec; |
472 |
} |
} |
492 |
return default_keyserver; |
return default_keyserver; |
493 |
} |
} |
494 |
else if (!type && idx < DIM (server_list)) { |
else if (!type && idx < DIM (server_list)) { |
495 |
|
/* XXX: handle non HKP servers. */ |
496 |
*port = HKP_PORT; |
*port = HKP_PORT; |
497 |
return server_list[idx]; |
return server_list[idx]; |
498 |
} |
} |
511 |
closesocket (fd); |
closesocket (fd); |
512 |
return 0; |
return 0; |
513 |
} |
} |
514 |
|
log_debug ("kserver_check_inet_connection: no inet connection.\r\n"); |
515 |
return -1; |
return -1; |
516 |
} |
} |
517 |
|
|
523 |
const char* |
const char* |
524 |
kserver_check_keyid (const char *keyid) |
kserver_check_keyid (const char *keyid) |
525 |
{ |
{ |
526 |
static char id[21]; |
static char id[22]; |
527 |
|
|
528 |
if (strstr (keyid, "@")) |
if (strstr (keyid, "@")) |
529 |
return keyid; /* email address */ |
return keyid; /* email address */ |
545 |
|
|
546 |
n = 4*strlen (proxy_user) / 3 + 32 + strlen (proxy_pass) + 2; |
n = 4*strlen (proxy_user) / 3 + 32 + strlen (proxy_pass) + 2; |
547 |
free_if_alloc (proxy.base64_user); |
free_if_alloc (proxy.base64_user); |
548 |
proxy.base64_user = new char[n]; |
proxy.base64_user = safe_alloc (n+1); |
|
if (!proxy.base64_user) |
|
|
BUG (0); |
|
549 |
_snprintf (t, sizeof (t)-1, "%s:%s", proxy_user, proxy_pass); |
_snprintf (t, sizeof (t)-1, "%s:%s", proxy_user, proxy_pass); |
550 |
base64_encode (t, proxy.base64_user); |
base64_encode (t, proxy.base64_user); |
551 |
free_if_alloc (proxy.user); |
free_if_alloc (proxy.user); |
553 |
proxy.user = m_strdup (proxy_user); |
proxy.user = m_strdup (proxy_user); |
554 |
proxy.pass = m_strdup (proxy_pass); |
proxy.pass = m_strdup (proxy_pass); |
555 |
} |
} |
|
|
|
|
|
|
|
/* Check that the given buffer contains a valid keyserver URL. */ |
|
|
static int |
|
|
check_URL (const char * buf) |
|
|
{ |
|
|
if (strlen (buf) < 7) |
|
|
return -1; |
|
|
if (!strstr (buf, "ldap://") |
|
|
&& !strstr (buf, "http://") |
|
|
&& !strstr (buf, "finger://") |
|
|
&& !strstr (buf, "hkp://")) |
|
|
return -1; |
|
|
return 0; |
|
|
} |
|
556 |
|
|
557 |
|
|
558 |
/* Get the port number from the given protocol. */ |
/* Get the port number from the given protocol. */ |
560 |
port_from_proto (int proto) |
port_from_proto (int proto) |
561 |
{ |
{ |
562 |
switch (proto) { |
switch (proto) { |
563 |
case KSPROTO_LDAP: return 0; |
case KSPROTO_LDAP: return LDAP_PORT; |
564 |
case KSPROTO_FINGER: return FINGER_PORT; |
case KSPROTO_FINGER: return FINGER_PORT; |
565 |
case KSPROTO_HTTP: return HKP_PORT; |
case KSPROTO_HTTP: return HKP_PORT; |
566 |
} |
} |
567 |
return 0; |
return 0; |
568 |
} |
} |
572 |
static int |
static int |
573 |
proto_from_URL (const char *buf) |
proto_from_URL (const char *buf) |
574 |
{ |
{ |
575 |
if (strstr( buf, "ldap")) |
if (strstr (buf, "ldap")) |
576 |
return KSPROTO_LDAP; |
return KSPROTO_LDAP; |
577 |
else if (strstr( buf, "finger")) |
else if (strstr (buf, "finger")) |
578 |
return KSPROTO_FINGER; |
return KSPROTO_FINGER; |
579 |
return KSPROTO_HKP; |
return KSPROTO_HKP; |
580 |
} |
} |
581 |
|
|
582 |
|
|
583 |
|
/* Set the default keyserver. |
584 |
|
If @hostname is NULL, use the predefined keyserver. */ |
585 |
void |
void |
586 |
keyserver_set_default (const char *hostname, WORD port) |
keyserver_set_default (const char *hostname, WORD port) |
587 |
{ |
{ |
588 |
|
if (!port) |
589 |
|
port = HKP_PORT; |
590 |
if (hostname != NULL) { |
if (hostname != NULL) { |
591 |
free_if_alloc (default_keyserver); |
free_if_alloc (default_keyserver); |
592 |
default_keyserver = m_strdup (hostname); |
default_keyserver = m_strdup (hostname); |
|
if (!default_keyserver) |
|
|
BUG (0); |
|
593 |
default_keyserver_port = port; |
default_keyserver_port = port; |
594 |
} |
} |
595 |
if (!port) |
if (!default_keyserver) { |
|
port = HKP_PORT; |
|
|
if (!default_keyserver) |
|
596 |
default_keyserver = m_strdup (DEF_HKP_KEYSERVER); |
default_keyserver = m_strdup (DEF_HKP_KEYSERVER); |
597 |
|
default_keyserver_port = HKP_PORT; |
598 |
|
} |
599 |
server[0].name = m_strdup (default_keyserver); |
server[0].name = m_strdup (default_keyserver); |
600 |
server[0].used = 1; |
server[0].used = 1; |
601 |
server[0].port = port; |
server[0].port = port; |
650 |
/* Load the keyserver config file @conf. */ |
/* Load the keyserver config file @conf. */ |
651 |
int |
int |
652 |
kserver_load_conf (const char *conf) |
kserver_load_conf (const char *conf) |
653 |
{ |
{ |
|
struct stat statbuf; |
|
654 |
FILE *fp; |
FILE *fp; |
655 |
char buf[1024], *s, *p; |
char buf[1024], *s, *p; |
656 |
char *user = NULL, *pass = NULL; |
char *user = NULL, *pass = NULL; |
683 |
/* check if the host has a http:// prefix and skip it */ |
/* check if the host has a http:// prefix and skip it */ |
684 |
if (proxy.host && !strncmp (proxy.host, "http://", 7)) { |
if (proxy.host && !strncmp (proxy.host, "http://", 7)) { |
685 |
char *host = m_strdup (proxy.host+7); |
char *host = m_strdup (proxy.host+7); |
|
if (!host) |
|
|
BUG (0); |
|
686 |
free_if_alloc (proxy.host); |
free_if_alloc (proxy.host); |
687 |
proxy.host = host; |
proxy.host = host; |
688 |
} |
} |
701 |
s = (char *)skip_whitespace (buf); |
s = (char *)skip_whitespace (buf); |
702 |
if (*s == '#' || strlen (s) < 7) |
if (*s == '#' || strlen (s) < 7) |
703 |
continue; |
continue; |
704 |
if (check_URL (s)) { |
chk_pos = check_URL (s); |
705 |
|
if (!chk_pos) { |
706 |
msg_box (NULL, _("All entries of this file must have a valid prefix.\n" |
msg_box (NULL, _("All entries of this file must have a valid prefix.\n" |
707 |
"Currently HKP/HTTP, LDAP and FINGER are supported.\n"), |
"Currently HKP/HTTP, LDAP and FINGER are supported.\n"), |
708 |
_("Keyserver Error"), MB_ERR); |
_("Keyserver Error"), MB_ERR); |
709 |
continue; |
continue; |
710 |
} |
} |
|
chk_pos = 6; |
|
|
if (strstr (s, "finger")) |
|
|
chk_pos = 10; |
|
711 |
p = strchr (s+chk_pos, ':'); |
p = strchr (s+chk_pos, ':'); |
712 |
server[pos].used = 1; |
server[pos].used = 1; |
713 |
server[pos].proto = proto_from_URL (s); |
server[pos].proto = proto_from_URL (s); |
718 |
server[pos].port = atol (p+1); |
server[pos].port = atol (p+1); |
719 |
if (server[pos].port < 0 || server[pos].port > 65536) |
if (server[pos].port < 0 || server[pos].port > 65536) |
720 |
server[pos].port = HKP_PORT; |
server[pos].port = HKP_PORT; |
721 |
server[pos].name = new char [(p-s)+2]; |
server[pos].name = safe_alloc ((p-s)+2); |
|
if (!server[pos].name) |
|
|
BUG (0); |
|
722 |
memset (server[pos].name, 0, (p-s)+2); |
memset (server[pos].name, 0, (p-s)+2); |
723 |
memcpy (server[pos].name, s, (p-s)); |
memcpy (server[pos].name, s, (p-s)); |
724 |
} |
} |
739 |
return WPTERR_CONFIG_FILE; |
return WPTERR_CONFIG_FILE; |
740 |
} |
} |
741 |
|
|
|
if (!stat (conf, &statbuf)) |
|
|
conf_timestamp = statbuf.st_mtime; |
|
742 |
return 0; |
return 0; |
743 |
} |
} |
744 |
|
|
747 |
Return value: 0 on success */ |
Return value: 0 on success */ |
748 |
int |
int |
749 |
kserver_connect (const char *hostname, WORD port, int *conn_fd) |
kserver_connect (const char *hostname, WORD port, int *conn_fd) |
750 |
{ |
{ |
|
int rc, fd; |
|
|
DWORD iaddr; |
|
|
char host[128] = {0}; |
|
751 |
struct hostent *hp; |
struct hostent *hp; |
752 |
struct sockaddr_in sock; |
struct sockaddr_in sock; |
753 |
|
char host[128] = {0}; |
754 |
|
DWORD iaddr; |
755 |
|
int rc, fd; |
756 |
|
|
757 |
log_debug ("kserver_connect: %s:%d\r\n", hostname, port); |
log_debug ("kserver_connect: %s:%d\r\n", hostname, port); |
758 |
|
|
762 |
*conn_fd = 0; |
*conn_fd = 0; |
763 |
hostname = skip_type_prefix (hostname); |
hostname = skip_type_prefix (hostname); |
764 |
|
|
765 |
|
if (proxy.host && proxy.proto == PROXY_PROTO_HTTP) |
766 |
|
port = proxy.port; |
767 |
memset (&sock, 0, sizeof (sock)); |
memset (&sock, 0, sizeof (sock)); |
768 |
sock.sin_family = AF_INET; |
sock.sin_family = AF_INET; |
769 |
sock.sin_port = proxy.host? htons (proxy.port) : htons (port); |
sock.sin_port = htons (port); |
770 |
if (proxy.host) |
if (proxy.host) |
771 |
strncpy (host, proxy.host, 127); |
strncpy (host, proxy.host, 127); |
772 |
else |
else |
773 |
strncpy (host, hostname, 127); |
strncpy (host, hostname, 127); |
774 |
|
|
775 |
if ((iaddr = inet_addr (host)) != INADDR_NONE) |
if ((iaddr = inet_addr (host)) != INADDR_NONE) |
776 |
memcpy (&sock.sin_addr, &iaddr, sizeof (iaddr)); |
memcpy (&sock.sin_addr, &iaddr, sizeof (iaddr)); |
777 |
else if ((hp = gethostbyname (host))) { |
else if ((hp = gethostbyname (host))) { |
795 |
return WPTERR_WINSOCK_CONNECT; |
return WPTERR_WINSOCK_CONNECT; |
796 |
} |
} |
797 |
|
|
798 |
if (proxy.proto != PROXY_PROTO_HTTP) { |
if (proxy.proto == PROXY_PROTO_SOCKS5) { |
799 |
rc = socks_handshake (&proxy, fd, hostname, port); |
rc = socks_handshake (&proxy, fd, hostname, port); |
800 |
if (rc) { |
if (rc) { |
801 |
closesocket (fd); |
closesocket (fd); |
810 |
} |
} |
811 |
|
|
812 |
|
|
813 |
|
/* Check if the URL needs to be encoded or not. */ |
814 |
static bool |
static bool |
815 |
URL_must_encoded (const char *url) |
URL_must_encoded (const char *url) |
816 |
{ |
{ |
822 |
|
|
823 |
/* Perform URL encoding of the given data. */ |
/* Perform URL encoding of the given data. */ |
824 |
static char* |
static char* |
825 |
URL_encode (const char *url, size_t ulen, size_t *ret_nlen) |
URL_encode (const char *url, DWORD ulen, DWORD *ret_nlen) |
826 |
{ |
{ |
827 |
gpgme_data_t hd; |
gpgme_data_t hd; |
828 |
char numbuf[5], *pp, *p; |
char numbuf[5], *p; |
829 |
size_t i, n; |
size_t i; |
830 |
|
int nlen; |
831 |
|
|
832 |
gpgme_data_new (&hd); |
if (gpgme_data_new (&hd)) |
833 |
|
BUG (0); |
834 |
for (i=0; i < ulen; i++) { |
for (i=0; i < ulen; i++) { |
835 |
if (isalnum (url[i]) || url[i] == '-') |
if (isalnum (url[i]) || url[i] == '-') |
836 |
gpg_data_putc (hd, url[i]); |
gpg_data_putc (hd, url[i]); |
841 |
gpgme_data_write (hd, numbuf, strlen (numbuf)); |
gpgme_data_write (hd, numbuf, strlen (numbuf)); |
842 |
} |
} |
843 |
} |
} |
|
gpg_data_putc (hd, '\0'); |
|
844 |
|
|
845 |
/* Copy memory to avoid that we need to use gpgme_free later. */ |
p = data_release_and_get_mem (hd, &nlen); |
|
pp = gpgme_data_release_and_get_mem (hd, &n); |
|
|
p = m_strdup (pp); |
|
|
gpgme_free (pp); |
|
846 |
if (ret_nlen) |
if (ret_nlen) |
847 |
*ret_nlen = n; |
*ret_nlen = nlen; |
848 |
return p; |
return p; |
849 |
} |
} |
850 |
|
|
852 |
/* Format a request for the given keyid (send). */ |
/* Format a request for the given keyid (send). */ |
853 |
static char* |
static char* |
854 |
kserver_send_request (const char *hostname, WORD port, |
kserver_send_request (const char *hostname, WORD port, |
855 |
const char *pubkey, int octets) |
const char *pubkey, DWORD octets) |
856 |
{ |
{ |
857 |
char *request = NULL; |
const char *fmt; |
858 |
char *enc_pubkey = NULL; |
char *request; |
859 |
size_t enc_octets; |
char *enc_pubkey; |
860 |
|
DWORD enc_octets; |
861 |
int reqlen; |
int reqlen; |
862 |
|
|
863 |
log_debug ("kserver_send_request: %s:%d\r\n", hostname, port); |
log_debug ("kserver_send_request: %s:%d\r\n", hostname, port); |
864 |
|
|
865 |
if (!port) |
if (!port) |
866 |
port = HKP_PORT; |
port = HKP_PORT; |
|
reqlen = 512 + strlen (hostname) + 2*strlen (pubkey); |
|
|
request = new char[reqlen]; |
|
|
if (!request) |
|
|
BUG (0); |
|
867 |
enc_pubkey = URL_encode (pubkey, octets, &enc_octets); |
enc_pubkey = URL_encode (pubkey, octets, &enc_octets); |
868 |
if (!enc_pubkey || !enc_octets) { |
reqlen = 2*strlen (hostname) + 2*32/*port*/ + enc_octets + 32 /*len*/ + 1; |
|
free_if_alloc (request); |
|
|
return NULL; |
|
|
} |
|
869 |
|
|
870 |
if (proxy.user && proxy.proto == PROXY_PROTO_HTTP) { |
if (proxy.user && proxy.proto == PROXY_PROTO_HTTP) { |
871 |
_snprintf (request, reqlen-1, |
fmt = "POST http://%s:%d/pks/add HTTP/1.0\r\n" |
872 |
"POST http://%s:%d/pks/add HTTP/1.0\r\n" |
"Referer: \r\n" |
873 |
"Referer: \r\n" |
"User-Agent: WinPT/W32\r\n" |
874 |
"User-Agent: WinPT/W32\r\n" |
"Host: %s:%d\r\n" |
875 |
"Host: %s:%d\r\n" |
"Proxy-Authorization: Basic %s\r\n" |
876 |
"Proxy-Authorization: Basic %s\r\n" |
"Content-type: application/x-www-form-urlencoded\r\n" |
877 |
"Content-type: application/x-www-form-urlencoded\r\n" |
"Content-length: %d\r\n" |
878 |
"Content-length: %d\r\n" |
"\r\n" |
879 |
"\r\n" |
"keytext=%s" |
880 |
"keytext=%s" |
"\r\n"; |
881 |
"\n", |
reqlen += strlen (fmt) + strlen (proxy.base64_user) + 1; |
882 |
skip_type_prefix (hostname), port, hostname, port, |
request = safe_alloc (reqlen+1); |
883 |
|
_snprintf (request, reqlen, fmt, |
884 |
|
skip_type_prefix (hostname), port, hostname, port, |
885 |
proxy.base64_user, enc_octets+9, enc_pubkey); |
proxy.base64_user, enc_octets+9, enc_pubkey); |
886 |
} |
} |
887 |
else { |
else { |
888 |
_snprintf (request, reqlen-1, |
fmt = "POST /pks/add HTTP/1.0\r\n" |
889 |
"POST /pks/add HTTP/1.0\r\n" |
"Referer: \r\n" |
890 |
"Referer: \r\n" |
"User-Agent: WinPT/W32\r\n" |
891 |
"User-Agent: WinPT/W32\r\n" |
"Host: %s:%d\r\n" |
892 |
"Host: %s:%d\r\n" |
"Content-type: application/x-www-form-urlencoded\r\n" |
893 |
"Content-type: application/x-www-form-urlencoded\r\n" |
"Content-length: %d\r\n" |
894 |
"Content-length: %d\r\n" |
"\r\n" |
895 |
"\r\n" |
"keytext=%s" |
896 |
"keytext=%s" |
"\r\n"; |
897 |
"\n", |
reqlen += strlen (fmt)+1; |
898 |
skip_type_prefix (hostname), port, |
request = safe_alloc (reqlen+1); |
899 |
|
_snprintf (request, reqlen, fmt, |
900 |
|
skip_type_prefix (hostname), port, |
901 |
enc_octets+9, enc_pubkey); |
enc_octets+9, enc_pubkey); |
902 |
} |
} |
|
free_if_alloc (enc_pubkey); |
|
903 |
|
|
904 |
log_debug ("%s\r\n", request); |
free_if_alloc (enc_pubkey); |
905 |
|
log_debug ("request:\r\n%s\r\n", request); |
906 |
return request; |
return request; |
907 |
} |
} |
908 |
|
|
909 |
|
|
910 |
|
/* Interface for receiving a public key. */ |
911 |
int |
int |
912 |
kserver_recvkey_ext (const char *hostname, WORD port, const char *keyid, |
kserver_recvkey (const char *hostname, WORD port, const char *keyid, |
913 |
char **r_key, int *r_keylen) |
char **r_key, int *r_keylen) |
914 |
{ |
{ |
915 |
|
const char *fmt; |
916 |
char *request = NULL; |
char *request = NULL; |
917 |
int conn_fd; |
int conn_fd; |
918 |
int rc, n; |
int rc, reqlen; |
919 |
|
|
920 |
if (!port) |
if (!port) |
921 |
port = HKP_PORT; |
port = HKP_PORT; |
922 |
hkp_err = 0; /* reset */ |
hkp_err = 0; /* reset */ |
923 |
rc = kserver_connect (hostname, port, &conn_fd); |
rc = kserver_connect (hostname, port, &conn_fd); |
924 |
if (rc) |
if (rc) |
925 |
goto leave; |
goto leave; |
926 |
|
|
927 |
request = new char[300+1]; |
reqlen = strlen (hostname)+32+strlen (keyid)+1; |
|
if (!request) |
|
|
BUG (0); |
|
|
|
|
928 |
if (proxy.host && proxy.user && proxy.proto == PROXY_PROTO_HTTP) { |
if (proxy.host && proxy.user && proxy.proto == PROXY_PROTO_HTTP) { |
929 |
_snprintf (request, 300, |
fmt = "GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n" |
930 |
"GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n" |
"Proxy-Authorization: Basic %s\r\n\r\n"; |
931 |
"Proxy-Authorization: Basic %s\r\n\r\n", |
reqlen =+ strlen (fmt) + strlen (proxy.base64_user)+1; |
932 |
skip_type_prefix (hostname), port, keyid, proxy.base64_user); |
request = safe_alloc (reqlen+1); |
933 |
|
_snprintf (request, reqlen, fmt, skip_type_prefix (hostname), port, |
934 |
|
keyid, proxy.base64_user); |
935 |
} |
} |
936 |
else if (proxy.host && proxy.proto == PROXY_PROTO_HTTP) { |
else if (proxy.host && proxy.proto == PROXY_PROTO_HTTP) { |
937 |
_snprintf (request, 300, |
fmt = "GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n"; |
938 |
"GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n", |
reqlen += strlen (fmt)+1; |
939 |
skip_type_prefix (hostname), port, keyid); |
request = safe_alloc (reqlen+1); |
940 |
} |
_snprintf (request, reqlen, fmt, skip_type_prefix (hostname), |
941 |
|
port, keyid); |
942 |
|
} |
943 |
else { |
else { |
944 |
_snprintf (request, 300, |
fmt = "GET /pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n"; |
945 |
"GET /pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n", keyid); |
reqlen += strlen (fmt)+1; |
946 |
|
request = safe_alloc (reqlen+1); |
947 |
|
_snprintf (request, reqlen, fmt, keyid); |
948 |
} |
} |
949 |
|
|
950 |
log_debug ("%s\r\n", request); |
log_debug ("request:\r\n%s\r\n", request); |
951 |
|
|
952 |
rc = sock_write (conn_fd, request, strlen (request)); |
rc = sock_write (conn_fd, request, strlen (request)); |
953 |
if (rc == SOCKET_ERROR) { |
if (rc == SOCKET_ERROR) { |
955 |
goto leave; |
goto leave; |
956 |
} |
} |
957 |
|
|
958 |
rc = sock_read_ext (conn_fd, r_key, &n); |
rc = sock_read_ext (conn_fd, r_key, r_keylen); |
959 |
if (rc == SOCKET_ERROR) { |
if (rc == SOCKET_ERROR) { |
960 |
rc = WPTERR_WINSOCK_RECVKEY; |
rc = WPTERR_WINSOCK_RECVKEY; |
961 |
goto leave; |
goto leave; |
962 |
} |
} |
963 |
|
|
964 |
if (r_keylen) |
log_debug ("response:\r\n%s\r\n", *r_key); |
|
*r_keylen = n; |
|
|
log_debug("%s\r\n", *r_key); |
|
965 |
rc = check_hkp_response (*r_key, 1); |
rc = check_hkp_response (*r_key, 1); |
966 |
if (rc) |
if (rc) |
967 |
goto leave; |
goto leave; |
974 |
return rc; |
return rc; |
975 |
} |
} |
976 |
|
|
|
/* Interface for receiving a public key. */ |
|
|
int |
|
|
kserver_recvkey (const char *hostname, WORD port, const char *keyid, |
|
|
char *key, int maxkeylen) |
|
|
{ |
|
|
char *tmpkey; |
|
|
int rc, nread=0; |
|
|
|
|
|
/* XXX: just a wrapper around the new method, replace it |
|
|
soon as possible. */ |
|
|
rc = kserver_recvkey_ext (hostname, port, keyid, &tmpkey, &nread); |
|
|
if (rc) |
|
|
return rc; |
|
|
|
|
|
if (nread > maxkeylen) { |
|
|
free_if_alloc (tmpkey); |
|
|
return WPTERR_GENERAL; |
|
|
} |
|
|
strcpy (key, tmpkey); |
|
|
free_if_alloc (tmpkey); |
|
|
return 0; |
|
|
} |
|
|
|
|
977 |
|
|
978 |
/* Interface to send a public key. */ |
/* Interface to send a public key. */ |
979 |
int |
int |
980 |
kserver_sendkey (const char *hostname, WORD port, const char *pubkey, int len ) |
kserver_sendkey (const char *hostname, WORD port, const char *pubkey, int len ) |
981 |
{ |
{ |
982 |
char *request = NULL; |
char *request = NULL; |
983 |
char log[2048]; |
char log[2048] = {0}; |
984 |
int conn_fd, n; |
int conn_fd, n; |
985 |
int rc; |
int rc; |
986 |
|
|
1007 |
goto leave; |
goto leave; |
1008 |
} |
} |
1009 |
|
|
1010 |
log_debug ("kserver_sendkey:\r\n%s\r\n", log); |
log_debug ("kserver_sendkey: read %d bytes\r\n%s\r\n", n, log); |
1011 |
rc = check_hkp_response (log, 0); |
rc = check_hkp_response (log, 0); |
1012 |
if (rc) |
if (rc) |
1013 |
goto leave; |
goto leave; |
1021 |
} |
} |
1022 |
|
|
1023 |
|
|
1024 |
|
/* Check keyserver response. */ |
1025 |
|
static int |
1026 |
|
kserver_search_chkresp (int fd) |
1027 |
|
{ |
1028 |
|
char buf[128]; |
1029 |
|
int n=0; |
1030 |
|
|
1031 |
|
/* parse response 'HTTP/1.0 500 OK' */ |
1032 |
|
if (sock_getline (fd, buf, sizeof (buf)-1, &n)) |
1033 |
|
return WPTERR_KEYSERVER_NOTFOUND; |
1034 |
|
|
1035 |
|
log_debug ("kserver_search_chkpresp: %s\r\n", buf); |
1036 |
|
if (strncmp (buf, "HTTP/1.", 7)) |
1037 |
|
return WPTERR_KEYSERVER_NOTFOUND; |
1038 |
|
if (strncmp (buf+(8+1), "200", 3)) |
1039 |
|
return WPTERR_KEYSERVER_NOTFOUND; |
1040 |
|
return 0; |
1041 |
|
} |
1042 |
|
|
1043 |
|
|
1044 |
|
/* End the keyserver search procedure. */ |
1045 |
|
void |
1046 |
|
kserver_search_end (int conn_fd) |
1047 |
|
{ |
1048 |
|
log_debug ("kserver_search_end: fd=%d\r\n", conn_fd); |
1049 |
|
closesocket (conn_fd); |
1050 |
|
} |
1051 |
|
|
1052 |
|
|
1053 |
|
/* Extract the amount of keys from the info record. */ |
1054 |
|
static int |
1055 |
|
count_keys_in_response (char *buf) |
1056 |
|
{ |
1057 |
|
char *p; |
1058 |
|
int recno = 0; |
1059 |
|
int n = 0; |
1060 |
|
|
1061 |
|
/* info:1:4 */ |
1062 |
|
if (strncmp (buf, "info", 4)) |
1063 |
|
return 0; |
1064 |
|
p = strtok (buf, ":"); |
1065 |
|
while (p != NULL) { |
1066 |
|
recno++; |
1067 |
|
if (recno == 3) |
1068 |
|
n = atoi (p); |
1069 |
|
p = strtok (NULL, ":"); |
1070 |
|
} |
1071 |
|
return n; |
1072 |
|
} |
1073 |
|
|
1074 |
|
|
1075 |
|
/* Start the keyserver search. |
1076 |
|
Connect to host @hostname and port @port. |
1077 |
|
The pattern are given in @pattern. |
1078 |
|
The socket is returned in @conn_fd and @nkeys contains |
1079 |
|
the amount of keys which were found. */ |
1080 |
int |
int |
1081 |
kserver_search_init (const char *hostname, WORD port, |
kserver_search_begin (const char *hostname, WORD port, |
1082 |
const char *keyid, int *conn_fd) |
const char *pattern, int *conn_fd, int *nkeys) |
1083 |
{ |
{ |
1084 |
|
const char *fmt; |
1085 |
char *request = NULL; |
char *request = NULL; |
1086 |
char *enc_keyid = NULL; |
char *enc_patt = NULL; |
1087 |
int n = 0; |
char status[128]; |
1088 |
int rc, sock_fd; |
int rc, sock_fd; |
1089 |
|
int reqlen; |
1090 |
|
|
1091 |
|
*conn_fd = 0; |
1092 |
|
|
1093 |
rc = kserver_connect (hostname, port, &sock_fd); |
rc = kserver_connect (hostname, port, &sock_fd); |
1094 |
if (rc) { |
if (rc) |
|
*conn_fd = 0; |
|
1095 |
goto leave; |
goto leave; |
|
} |
|
1096 |
|
|
1097 |
enc_keyid = URL_encode (keyid, strlen (keyid), NULL); |
enc_patt = URL_encode (pattern, strlen (pattern), NULL); |
1098 |
n=300; |
reqlen = strlen (enc_patt) + strlen (hostname) + 32 + 1; |
1099 |
request = new char[n+1]; |
|
|
if (!request) |
|
|
BUG (0); |
|
|
|
|
1100 |
if (proxy.host && proxy.user && proxy.proto == PROXY_PROTO_HTTP) { |
if (proxy.host && proxy.user && proxy.proto == PROXY_PROTO_HTTP) { |
1101 |
_snprintf (request, n, |
fmt = "GET http://%s:%d/pks/lookup?options=mr&op=index&search=%s HTTP/1.0\r\n" |
1102 |
"GET http://%s:%d/pks/lookup?op=index&search=%s HTTP/1.0\r\n" |
"Proxy-Authorization: Basic %s\r\n\r\n"; |
1103 |
"Proxy-Authorization: Basic %s\r\n\r\n", |
reqlen += strlen (proxy.base64_user) + strlen (fmt) + 1; |
1104 |
skip_type_prefix (hostname), port, enc_keyid, proxy.base64_user); |
request = safe_alloc (reqlen+1); |
1105 |
|
_snprintf (request, reqlen, fmt, skip_type_prefix (hostname), port, |
1106 |
|
enc_patt, proxy.base64_user); |
1107 |
} |
} |
1108 |
else if (proxy.host && proxy.proto == PROXY_PROTO_HTTP) { |
else if (proxy.host && proxy.proto == PROXY_PROTO_HTTP) { |
1109 |
_snprintf (request, n, |
fmt = "GET http://%s:%d/pks/lookup?options=mr&op=index&search=%s HTTP/1.0\r\n\r\n"; |
1110 |
"GET http://%s:%d/pks/lookup?op=index&search=%s HTTP/1.0\r\n\r\n", |
reqlen += strlen (fmt)+1; |
1111 |
skip_type_prefix (hostname), port, enc_keyid); |
request = safe_alloc (reqlen+1); |
1112 |
|
_snprintf (request, reqlen, skip_type_prefix (hostname), port, |
1113 |
|
enc_patt); |
1114 |
} |
} |
1115 |
else { |
else { |
1116 |
_snprintf (request, n, |
fmt = "GET /pks/lookup?options=mr&op=index&search=%s HTTP/1.0\r\n\r\n"; |
1117 |
"GET /pks/lookup?op=index&search=%s HTTP/1.0\r\n\r\n", |
reqlen += strlen (fmt)+1; |
1118 |
enc_keyid); |
request = safe_alloc (reqlen+1); |
1119 |
|
_snprintf (request, reqlen, fmt, enc_patt); |
1120 |
} |
} |
1121 |
|
|
1122 |
log_debug ("kserver_search_init:\r\n%s\r\n", request); |
log_debug ("kserver_search_begin:\r\n%s\r\n", request); |
|
|
|
1123 |
if (sock_write (sock_fd, request, strlen (request)) == SOCKET_ERROR) { |
if (sock_write (sock_fd, request, strlen (request)) == SOCKET_ERROR) { |
1124 |
rc = WPTERR_GENERAL; |
rc = WPTERR_GENERAL; |
1125 |
goto leave; |
goto leave; |
1126 |
} |
} |
1127 |
|
|
1128 |
|
rc = kserver_search_chkresp (sock_fd); |
1129 |
|
if (rc) { |
1130 |
|
closesocket (sock_fd); |
1131 |
|
sock_fd = 0; |
1132 |
|
goto leave; |
1133 |
|
} |
1134 |
|
|
1135 |
|
/* Skip all lines until we reach the "info:" record. */ |
1136 |
|
for (;;) { |
1137 |
|
if (sock_getline (sock_fd, status, sizeof (status)-1, &reqlen)) { |
1138 |
|
log_debug ("kserver_search_begin: retrieving status line failed.\r\n"); |
1139 |
|
closesocket (sock_fd); |
1140 |
|
sock_fd = 0; |
1141 |
|
rc = WPTERR_GENERAL; |
1142 |
|
break; |
1143 |
|
} |
1144 |
|
if (!strncmp (status, "info:", 5)) |
1145 |
|
break; |
1146 |
|
} |
1147 |
|
|
1148 |
|
if (!rc) |
1149 |
|
*nkeys = count_keys_in_response (status); |
1150 |
*conn_fd = sock_fd; |
*conn_fd = sock_fd; |
1151 |
|
|
1152 |
leave: |
leave: |
1153 |
free_if_alloc (request); |
free_if_alloc (request); |
1154 |
free_if_alloc (enc_keyid); |
free_if_alloc (enc_patt); |
1155 |
return rc; |
return rc; |
1156 |
} |
} |
1157 |
|
|
1158 |
|
|
1159 |
/* Check keyserver response. */ |
/* Parse a single pub record returned by the keyserver. */ |
1160 |
int |
static void |
1161 |
kserver_search_chkresp (int fd) |
parse_pub_record (keyserver_key_s *key, char *buf) |
1162 |
{ |
{ |
1163 |
char buf[128]; |
enum pub_rec_t {ID=1, KEYID, ALGO, SIZE, CREATE, EXPIRE}; |
1164 |
int n=0; |
char *p; |
1165 |
|
int recno = 0; |
|
/* parse response 'HTTP/1.0 500 OK' */ |
|
|
if (sock_getline (fd, buf, 127, &n)) |
|
|
return WPTERR_KEYSERVER_NOTFOUND; |
|
1166 |
|
|
1167 |
log_debug ("kserver_search_chkpresp: %s\r\n", buf); |
/* pub:BF3DF9B4:17:1024:925411133:: */ |
1168 |
if (strncmp (buf, "HTTP/1.", 7)) |
p = strtok (buf, ":"); |
1169 |
return WPTERR_KEYSERVER_NOTFOUND; |
while (p != NULL) { |
1170 |
if (strncmp (buf+(8+1), "200", 3)) |
recno++; |
1171 |
return WPTERR_KEYSERVER_NOTFOUND; |
switch (recno) { |
1172 |
return 0; |
case ID: |
1173 |
|
break; |
1174 |
|
|
1175 |
|
case KEYID: |
1176 |
|
free_if_alloc (key->keyid); |
1177 |
|
key->keyid = m_strdup (p); |
1178 |
|
break; |
1179 |
|
|
1180 |
|
case ALGO: |
1181 |
|
key->algo = atoi (p); |
1182 |
|
break; |
1183 |
|
|
1184 |
|
case SIZE: |
1185 |
|
key->bits = atoi (p); |
1186 |
|
break; |
1187 |
|
|
1188 |
|
case CREATE: |
1189 |
|
key->creation = strtoul (p, NULL, 10); |
1190 |
|
break; |
1191 |
|
|
1192 |
|
case EXPIRE: |
1193 |
|
key->expires = strtoul (p, NULL, 10); |
1194 |
|
break; |
1195 |
|
} |
1196 |
|
p = strtok (NULL, ":"); |
1197 |
|
} |
1198 |
|
|
1199 |
} |
} |
1200 |
|
|
1201 |
|
|
1202 |
/* Convert an iso date @iso_date (YYYY-MM-DD) into the locale |
/* Parse a single user id returned by the keyserver. */ |
1203 |
representation and store it into @loc_date. |
static void |
1204 |
Return value: 0 on success. */ |
parse_uid_record (keyserver_key_s *key, char *buf) |
|
static int |
|
|
parse_iso_date (const char *iso_date, char *loc_date, size_t loclen) |
|
1205 |
{ |
{ |
1206 |
SYSTEMTIME st; |
enum uid_rec_t {ID=1, UID, CREATE, EXPIRE}; |
1207 |
char buf[16] = {0}, *p; |
keyserver_uid_s *u, *n; |
1208 |
int pos=0; |
char *p, *raw; |
1209 |
|
int recno = 0; |
1210 |
|
|
1211 |
|
/* uid:Timo Schulz <[email protected]>:1138440360:: */ |
1212 |
|
u = new keyserver_uid_s; |
1213 |
|
memset (u, 0, sizeof *u); |
1214 |
|
|
1215 |
strncpy (buf, iso_date, sizeof (buf)-1); |
p = strtok (buf, ":"); |
|
p = strtok (buf, "-"); |
|
1216 |
while (p != NULL) { |
while (p != NULL) { |
1217 |
switch (pos) { |
recno++; |
1218 |
case 0: st.wYear = (WORD)atoi (p); pos++; break; |
|
1219 |
case 1: st.wMonth = (WORD)atoi (p); pos++; break; |
switch (recno) { |
1220 |
case 2: st.wDay = (WORD)atoi (p); pos++; break; |
case ID: |
1221 |
default: break; |
break; |
1222 |
|
|
1223 |
|
case UID: |
1224 |
|
unhexify_buffer (p, &raw); |
1225 |
|
u->uid = utf8_to_native (raw); |
1226 |
|
free_if_alloc (raw); |
1227 |
|
break; |
1228 |
|
|
1229 |
|
case CREATE: |
1230 |
|
u->creation = strtoul (p, NULL, 10); |
1231 |
|
break; |
1232 |
|
|
1233 |
|
case EXPIRE: |
1234 |
|
u->expires = strtoul (p, NULL, 10); |
1235 |
|
break; |
1236 |
} |
} |
1237 |
p = strtok (NULL, "-"); |
|
1238 |
|
p = strtok (NULL, ":"); |
1239 |
} |
} |
1240 |
if (pos != 3) |
if (!key->uids) |
1241 |
return -1; |
key->uids = u; |
1242 |
|
else { |
1243 |
if (!GetDateFormat (LOCALE_USER_DEFAULT, DATE_SHORTDATE, &st, |
for (n = key->uids; n->next; n=n->next) |
1244 |
NULL, loc_date, loclen)) |
; |
1245 |
return -1; |
n->next = u; |
1246 |
return 0; |
} |
1247 |
|
} |
1248 |
|
|
1249 |
|
|
1250 |
|
/* Peek the next 3 bytes to check if the next line |
1251 |
|
would be a new "pub" record. In this case, return |
1252 |
|
-1 as an EOF indication, 0 otherwise. */ |
1253 |
|
static int |
1254 |
|
is_key_eof (int fd) |
1255 |
|
{ |
1256 |
|
char buf[64]; |
1257 |
|
int n; |
1258 |
|
|
1259 |
|
n = recv (fd, buf, 3, MSG_PEEK); |
1260 |
|
if (n < 3 || strncmp (buf, "pub", 3)) |
1261 |
|
return 0; |
1262 |
|
return -1; |
1263 |
} |
} |
1264 |
|
|
1265 |
|
|
1266 |
|
/* Return the next key from the search response. */ |
1267 |
int |
int |
1268 |
kserver_search (int fd, keyserver_key *key) |
kserver_search_next (int fd, keyserver_key_s **r_key) |
1269 |
{ |
{ |
1270 |
char buf[1024], *p; |
keyserver_uid_s *uid, *u = NULL; |
1271 |
int uidlen, nbytes, pos = 0; |
keyserver_key_s *key; |
1272 |
|
char buf[512]; |
1273 |
|
int n = 0; |
1274 |
|
long max = 0; |
1275 |
|
|
1276 |
log_debug ("keyserver_search:\r\n"); |
log_debug ("keyserver_search_next:\r\n"); |
1277 |
|
*r_key = NULL; |
|
if (sock_getline (fd, buf, sizeof (buf) - 1, &nbytes)) |
|
|
return WPTERR_GENERAL; |
|
1278 |
|
|
1279 |
log_debug ("%s\r\n", buf); |
key = new keyserver_key_s; |
1280 |
|
memset (key, 0, sizeof *key); |
1281 |
if (!strncmp (buf, "pub", 3)) { |
for (;;) { |
1282 |
int revoked = strstr (buf, "KEY REVOKED") != NULL? 1 : 0; |
if (sock_getline (fd, buf, sizeof (buf)-1, &n)) |
1283 |
key->bits = atol (buf+3); |
break; |
1284 |
p = strchr (buf, '>'); |
/*log_debug ("record: '%s'\r\n", buf); */ |
1285 |
if (!p) |
if (!strncmp (buf, "pub", 3)) |
1286 |
goto fail; |
parse_pub_record (key, buf); |
1287 |
pos = p - buf + 1; |
else |
1288 |
memcpy (key->keyid, buf + pos, 8); |
parse_uid_record (key, buf); |
1289 |
key->keyid[8] = '\0'; |
if (is_key_eof (fd)) |
1290 |
p = strstr (buf, "</a>"); |
break; |
1291 |
if (!p) |
} |
|
goto fail; |
|
|
pos = p - buf + 5; |
|
|
memcpy (key->date, buf + pos, 10); |
|
|
key->date[10] = '\0'; |
|
|
parse_iso_date (key->date, key->date, sizeof (key->date)-1); |
|
|
if (revoked) { |
|
|
strcpy (key->uid, "KEY REVOKED: not checked"); |
|
|
return 0; |
|
|
} |
|
|
pos += 10; |
|
|
p = buf + pos + 1; |
|
|
while (p && *p != '>') |
|
|
p++; |
|
|
p++; |
|
|
uidlen = strlen (p) - 10; |
|
|
if (!strstr (p, "<") && !strstr (p, ">")) { |
|
|
pos=0; |
|
|
while (p && *p && pos < sizeof (key->uid)-1) { |
|
|
if (*p == '<') |
|
|
break; |
|
|
key->uid[pos++] = *p++; |
|
|
} |
|
|
key->uid[pos] ='\0'; |
|
|
return 0; |
|
|
} |
|
1292 |
|
|
1293 |
if (uidlen > sizeof (key->uid)-1) |
/* the uid with the newest self sig is used as the |
1294 |
uidlen = sizeof (key->uid)-1; |
primary user id. */ |
1295 |
memcpy (key->uid, p, uidlen); |
for (uid = key->uids; uid; uid = uid->next) { |
1296 |
key->uid[uidlen] = '\0'; |
if (uid->creation > max) { |
1297 |
strcat (key->uid, ">"); |
max = uid->creation; |
1298 |
p = strchr (key->uid, '&'); |
u = uid; |
|
if (p) { |
|
|
key->uid[(p-key->uid)] = '<'; |
|
|
memmove (key->uid+(p-key->uid)+1, key->uid+(p-key->uid)+4, |
|
|
strlen (key->uid)-3); |
|
1299 |
} |
} |
|
return 0; |
|
1300 |
} |
} |
1301 |
|
|
1302 |
fail: |
key->main_uid = u? u : key->uids; |
1303 |
key->bits = 0; |
*r_key = key; |
|
memset (key, 0, sizeof *key); |
|
1304 |
return 0; |
return 0; |
1305 |
} |
} |
1306 |
|
|
1307 |
|
|
1308 |
|
/* Release the keyserver key @key and all its elements. */ |
1309 |
|
void |
1310 |
|
kserver_release_key (keyserver_key_s *key) |
1311 |
|
{ |
1312 |
|
keyserver_uid_s *u; |
1313 |
|
|
1314 |
|
while (key->uids) { |
1315 |
|
u = key->uids->next; |
1316 |
|
free_if_alloc (key->uids->uid); |
1317 |
|
free_if_alloc (key->uids); |
1318 |
|
key->uids = u; |
1319 |
|
} |
1320 |
|
free_if_alloc (key->keyid); |
1321 |
|
free_if_alloc (key); |
1322 |
|
} |
1323 |
|
|
1324 |
|
|
1325 |
/* Release mbmers in the proxy context @ctx. */ |
/* Release mbmers in the proxy context @ctx. */ |
1326 |
void |
void |
1327 |
kserver_proxy_release (keyserver_proxy_t ctx) |
kserver_proxy_release (keyserver_proxy_t ctx) |
1329 |
free_if_alloc (ctx->host); |
free_if_alloc (ctx->host); |
1330 |
free_if_alloc (ctx->pass); |
free_if_alloc (ctx->pass); |
1331 |
free_if_alloc (ctx->user); |
free_if_alloc (ctx->user); |
1332 |
|
ctx->port = ctx->proto = 0; |
1333 |
} |
} |
1334 |
|
|
1335 |
|
|
1360 |
} |
} |
1361 |
|
|
1362 |
|
|
1363 |
/* Receive an key via LDAP from host @host with the keyid @keyid. |
static FILE* |
1364 |
@key contains the key on success. */ |
do_spawn_ldap_helper (const char *host, const char *keyid) |
1365 |
int |
{ |
1366 |
ldap_recvkey (const char *host, const char *keyid, char *key, int maxkeylen) |
FILE *fp = NULL; |
1367 |
{ |
char *p, *sep; |
1368 |
FILE *fp; |
char *ksprg; |
1369 |
const char *s; |
char outf[256], inf[256]; |
1370 |
char *ksprg = NULL, *p = NULL, *sep; |
size_t n; |
|
char inf[256], outf[256], buf[512]; |
|
|
DWORD n; |
|
|
int start_key = 0, failed = 0; |
|
|
int rc = 0; |
|
1371 |
|
|
1372 |
p = get_gnupg_prog (); |
p = get_gnupg_prog (); |
1373 |
n = strlen (p) + 1 + 128; |
n = strlen (p) + 1 + 128; |
1374 |
ksprg = new char[n+1]; |
ksprg = safe_alloc (n+1); |
1375 |
if (!ksprg) |
if (!ksprg) |
1376 |
BUG (0); |
BUG (0); |
1377 |
sep = strrchr (p, '\\'); |
sep = strrchr (p, '\\'); |
1383 |
if (file_exist_check (ksprg)) { |
if (file_exist_check (ksprg)) { |
1384 |
log_box ("LDAP Keyserver Plugin", MB_ERR, |
log_box ("LDAP Keyserver Plugin", MB_ERR, |
1385 |
"%s: could not find LDAP keyserver module!", ksprg); |
"%s: could not find LDAP keyserver module!", ksprg); |
1386 |
rc = -1; |
fp = NULL; |
1387 |
goto leave; |
goto leave; |
1388 |
} |
} |
1389 |
get_temp_name (outf, sizeof (outf)-1, keyid); |
get_temp_name (outf, sizeof (outf)-1, keyid); |
1392 |
if (!fp) { |
if (!fp) { |
1393 |
log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", inf, |
log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", inf, |
1394 |
winpt_strerror (WPTERR_FILE_OPEN)); |
winpt_strerror (WPTERR_FILE_OPEN)); |
|
rc = -1; |
|
1395 |
goto leave; |
goto leave; |
1396 |
} |
} |
1397 |
fprintf (fp, |
fprintf (fp, |
1405 |
host? skip_type_prefix (host): "64.94.85.200", keyid); |
host? skip_type_prefix (host): "64.94.85.200", keyid); |
1406 |
fclose (fp); |
fclose (fp); |
1407 |
|
|
1408 |
p = new char[strlen (ksprg) + strlen (inf) + strlen (outf) + 32]; |
p = safe_alloc (strlen (ksprg) + strlen (inf) + strlen (outf) + 32); |
|
if (!p) |
|
|
BUG (NULL); |
|
1409 |
sprintf (p, "%s -o %s %s", ksprg, outf, inf); |
sprintf (p, "%s -o %s %s", ksprg, outf, inf); |
1410 |
if (spawn_application (p)) { |
if (spawn_application (p)) { |
1411 |
rc = -1; |
fp = NULL; |
1412 |
goto leave; |
goto leave; |
1413 |
} |
} |
|
|
|
1414 |
fp = fopen (outf, "rb"); |
fp = fopen (outf, "rb"); |
1415 |
if (!fp) { |
if (!fp) |
1416 |
log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", outf, |
log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", outf, |
1417 |
winpt_strerror (WPTERR_FILE_OPEN)); |
winpt_strerror (WPTERR_FILE_OPEN)); |
1418 |
rc = -1; |
|
1419 |
goto leave; |
leave: |
1420 |
} |
DeleteFile (inf); |
1421 |
memset (key, 0, maxkeylen); |
DeleteFile (outf); |
1422 |
|
free_if_alloc (p); |
1423 |
|
free_if_alloc (ksprg); |
1424 |
|
return fp; |
1425 |
|
} |
1426 |
|
|
1427 |
|
/* Receive an key via LDAP from host @host with the keyid @keyid. |
1428 |
|
@key contains the key on success. */ |
1429 |
|
int |
1430 |
|
ldap_recvkey (const char *host, const char *keyid, |
1431 |
|
char **r_key, int *r_keylen) |
1432 |
|
{ |
1433 |
|
gpgme_data_t raw; |
1434 |
|
FILE *fp; |
1435 |
|
const char *s; |
1436 |
|
char buf[512]; |
1437 |
|
int start_key = 0, failed = 0; |
1438 |
|
int rc = 0; |
1439 |
|
|
1440 |
|
fp = do_spawn_ldap_helper (host, keyid); |
1441 |
|
if (!fp) |
1442 |
|
return WPTERR_GENERAL; |
1443 |
|
|
1444 |
|
if (gpgme_data_new (&raw)) |
1445 |
|
BUG (0); |
1446 |
while (!feof (fp)) { |
while (!feof (fp)) { |
1447 |
s = fgets (buf, sizeof (buf)-1, fp); |
s = fgets (buf, sizeof (buf)-1, fp); |
1448 |
if (!s) |
if (!s) |
1454 |
if (!start_key && strstr (s, "KEY") && strstr (s, "BEGIN")) { |
if (!start_key && strstr (s, "KEY") && strstr (s, "BEGIN")) { |
1455 |
start_key = 1; |
start_key = 1; |
1456 |
continue; |
continue; |
1457 |
} |
} |
1458 |
if (!start_key) |
if (!start_key) |
1459 |
continue; |
continue; |
1460 |
strcat (key, buf); |
gpgme_data_write (raw, buf, strlen (buf)); |
1461 |
maxkeylen -= strlen (buf); |
if (strstr (s, "KEY") && strstr (s, "END")) |
|
if (maxkeylen < 0 || (strstr (s, "KEY") && strstr (s, "END"))) |
|
1462 |
break; |
break; |
1463 |
} |
} |
1464 |
fclose (fp); |
fclose (fp); |
1465 |
|
|
1466 |
leave: |
if (failed) |
|
if (failed || !strlen (key)) |
|
1467 |
rc = WPTERR_WINSOCK_RECVKEY; |
rc = WPTERR_WINSOCK_RECVKEY; |
1468 |
DeleteFile (inf); |
*r_key = data_release_and_get_mem (raw, r_keylen); |
|
DeleteFile (outf); |
|
|
free_if_alloc (p); |
|
|
free_if_alloc (ksprg); |
|
1469 |
return rc; |
return rc; |
1470 |
} |
} |
1471 |
|
|
1473 |
/* Receive an key via FINGER from host @host with the user @user. |
/* Receive an key via FINGER from host @host with the user @user. |
1474 |
On success @key contains the key. */ |
On success @key contains the key. */ |
1475 |
int |
int |
1476 |
finger_recvkey (const char *host, const char *user, char *key, int maxkeylen) |
finger_recvkey (const char *host, const char *user, |
1477 |
|
char **r_key, int *r_keylen) |
1478 |
{ |
{ |
1479 |
char buf[128]; |
gpgme_data_t raw; |
1480 |
|
char buf[256]; |
1481 |
int fd, nread; |
int fd, nread; |
1482 |
int start_key = 0; |
int start_key = 0; |
1483 |
int rc=0; |
int rc=0; |
1489 |
sock_write (fd, user, strlen (user)); |
sock_write (fd, user, strlen (user)); |
1490 |
sock_write (fd, "\r\n", 2); |
sock_write (fd, "\r\n", 2); |
1491 |
|
|
1492 |
memset (key, 0, maxkeylen); |
if (gpgme_data_new (&raw)) |
1493 |
while (maxkeylen > 0) { |
BUG (0); |
1494 |
|
|
1495 |
|
for (;;) { |
1496 |
if (sock_getline (fd, buf, sizeof (buf), &nread)) |
if (sock_getline (fd, buf, sizeof (buf), &nread)) |
1497 |
break; |
break; |
1498 |
strcat (buf, "\n"); |
strcat (buf, "\n"); |
1499 |
if (strstr (buf, "BEGIN PGP PUBLIC KEY BLOCK")) { |
if (strstr (buf, "BEGIN PGP PUBLIC KEY BLOCK")) { |
1500 |
strcat (key, buf); |
gpgme_data_write (raw, buf, nread); |
1501 |
start_key = 1; |
start_key = 1; |
|
maxkeylen -= nread; |
|
1502 |
} |
} |
1503 |
else if (strstr (buf, "END PGP PUBLIC KEY BLOCK" ) && start_key) { |
else if (strstr (buf, "END PGP PUBLIC KEY BLOCK" ) && start_key) { |
1504 |
strcat (key, buf); |
gpgme_data_write (raw, buf, nread); |
1505 |
start_key--; |
start_key--; |
|
maxkeylen -= nread; |
|
1506 |
break; |
break; |
1507 |
} |
} |
1508 |
else if (start_key) { |
else if (start_key) |
1509 |
strcat (key, buf); |
gpgme_data_write (raw, buf, nread); |
|
maxkeylen -= nread; |
|
|
} |
|
1510 |
} |
} |
1511 |
|
|
1512 |
closesocket (fd); |
closesocket (fd); |
1513 |
if (start_key != 0) |
if (start_key != 0) |
1514 |
rc = WPTERR_WINSOCK_RECVKEY; |
rc = WPTERR_WINSOCK_RECVKEY; |
1515 |
|
*r_key = data_release_and_get_mem (raw, r_keylen); |
1516 |
return rc; |
return rc; |
1517 |
} |
} |
1518 |
|
|
1532 |
} |
} |
1533 |
return 0; |
return 0; |
1534 |
} |
} |
1535 |
|
|
1536 |
|
|
1537 |
|
/* Split the URL @r_keyserver into the host and the port |
1538 |
|
part if possible. */ |
1539 |
|
gpgme_error_t |
1540 |
|
parse_keyserver_url (char **r_keyserver, unsigned short *r_port) |
1541 |
|
{ |
1542 |
|
char *p; |
1543 |
|
char *url = *r_keyserver; |
1544 |
|
int off = 0; |
1545 |
|
|
1546 |
|
/* no port is given so use the default port. */ |
1547 |
|
p = strrchr (url, ':'); |
1548 |
|
if (p == strchr (url, ':')) { |
1549 |
|
int port = port_from_proto (proto_from_URL (url)); |
1550 |
|
if (!port) |
1551 |
|
port = HKP_PORT; |
1552 |
|
*r_port = port; |
1553 |
|
return 0; |
1554 |
|
} |
1555 |
|
|
1556 |
|
if (url[(p-url)-1] == '/') /* remove / in .de/:11371 */ |
1557 |
|
off = 1; |
1558 |
|
|
1559 |
|
*r_keyserver = substr (url, 0, (p-url)-off); |
1560 |
|
*r_port = atoi (url+(p-url)+1); |
1561 |
|
free_if_alloc (url); |
1562 |
|
return 0; |
1563 |
|
} |