/[winpt]/trunk/Src/wptKeyserver.cpp

Diff of /trunk/Src/wptKeyserver.cpp

Parent Directory | Revision Log | View Patch Patch

-revision 32 by twoaday,
Mon Oct 24 08:03:48 2005 UTC
+revision 278 by twoaday,
Mon Jan 15 22:02:04 2007 UTC
 Line 1
  /* wptKeyserver.cpp - W32 Keyserver Access
-  *      Copyright (C) 2000-2005 Timo Schulz
+  *      Copyright (C) 2000-2006 Timo Schulz
   *      Copyright (C) 2001 Marco Cunha
   *
   * This file is part of WinPT.
   *
   * WinPT is free software; you can redistribute it and/or
   * modify it under the terms of the GNU General Public License
   * as published by the Free Software Foundation; either version 2
   * of the License, or (at your option) any later version.
   *
   * WinPT is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
   * General Public License for more details.
   *
   * You should have received a copy of the GNU General Public License
   * along with WinPT; if not, write to the Free Software Foundation,
   * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
   */
- #include <windows.h>
+ #ifdef HAVE_CONFIG_H
- #include <stdio.h>
+ #include <config.h>
- #include <sys/stat.h>
+ #endif
- #include <ctype.h>
+ #include <windows.h>
- #include "wptKeyserver.h"
+ #include <shlobj.h>
- #include "wptErrors.h"
+ #include <stdio.h>
- #include "wptTypes.h"
+ #include <sys/stat.h>
- #include "wptNLS.h"
+ #include <ctype.h>
- #include "wptW32API.h"
- #include "wptVersion.h"
+ #include "wptGPG.h"
- #include "wptGPG.h"
+ #include "wptKeyserver.h"
- #include "wptRegistry.h"
+ #include "wptErrors.h"
+ #include "wptTypes.h"
- static char base64code[] =
+ #include "wptNLS.h"
-   "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+ #include "wptW32API.h"
+ #include "wptRegistry.h"
- keyserver server[MAX_KEYSERVERS] = {0};
+ #include "wptUTF8.h"
- static keyserver_proxy_ctx proxy = {0};
+ #include "wptVersion.h"
- static const char * server_list[] = {
+ #include "StringBuffer.h"
-     "hkp://wwwkeys.nl.pgp.net",
-     "hkp://wwwkeys.pl.pgp.net",
-     "hkp://wwwkeys.at.pgp.net",
+ /* Map net_errno to a winsock error. */
-     "hkp://wwwkeys.ch.pgp.net",
+ #define net_errno ((int)WSAGetLastError ())
-     "hkp://wwwkeys.de.pgp.net",
-     "hkp://wwwkeys.dk.pgp.net",
-     "hkp://wwwkeys.cz.pgp.net",
+ keyserver server[MAX_KEYSERVERS] = {0};
-     "hkp://wwwkeys.es.pgp.net",
+ keyserver_proxy_s proxy = {0};
-     "hkp://wwwkeys.eu.pgp.net",
+ static const char *server_list[] = {
-     "hkp://wwwkeys.uk.pgp.net",
+     "hkp://sks.keyserver.penguin.de",
-     "hkp://wwwkeys.us.pgp.net",
+     "hkp://subkeys.pgp.net",
-     "hkp://gnv.us.ks.cryptnet.net",
+     "ldap://keyserver.pgp.com",
-     "hkp://subkeys.pgp.net",
+     NULL
-     "ldap://keyserver.pgp.com",
+ };
-     NULL
- };
- static char hkp_errmsg[1024];
+ static char  hkp_errmsg[1024];  /* Holds the error message from the server */
- static int hkp_err = 0;
+ static int   hkp_err = 0;       /* != 0 indicates an error occurred. */
- static u32 conf_timestamp = 0;
- char * default_keyserver = NULL;
+ /* Default keyserver and port. */
- unsigned short default_keyserver_port = 0;
+ char *default_keyserver = NULL;
+ WORD default_keyserver_port = 0;
- static void
+ /* Default socket timeout (secs). */
- base64_encode( const char *inputstr, char *outputstr, int maxlen )
+ static size_t default_socket_timeout = 6;
- {
-     int index = 0, temp = 0, res = 0, i = 0, inputlen = 0, len = 0;
+ /* Wrapper for safe memory allocation. */
-     inputlen = strlen (inputstr); /* fixme: check if len > maxlen */
+ static char*
-     for (i = 0; i <inputlen; i++) {
+ safe_alloc (DWORD n)
-         res = temp;
+ {
-         res = (res << 8) | (inputstr[i] & 0xFF);
+     char *p;
-         switch (index++) {
-         case 0: outputstr[len++] = base64code[res >> 2 & 0x3F]; res &= 0x3; break;
+     p = new char[n+1];
-         case 1: outputstr[len++] = base64code[res >> 4 & 0x3F]; res &= 0xF; break;
+     if (!p)
-         case 2: outputstr[len++] = base64code[res >> 6 & 0x3F];
+         BUG (0);
-                 outputstr[len++] = base64code[res & 0x3F]; res = index = 0; break;
+     memset (p, 0, n);
-         }
+     return p;
-         temp = res;
+ }
-     }
+ /* Basic64 encode the input @inbuf to @outbuf. */
-     switch( index ) {
+ static void
-     case 0: break;
+ base64_encode (const char *inbuf, char *outbuf)
-     case 2: outputstr[len++] = base64code[temp << 2 & 0x3F];
+ {
-             outputstr[len++] = '='; break;
+     char base64code[] =
-     case 1: outputstr[len++] = base64code[temp << 4 & 0x3F];
+         "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-             outputstr[len++] = '=';
+     int index = 0, temp = 0, res = 0;
-             outputstr[len++] = '=';
+     int i, inputlen, len = 0;
-     }
+     inputlen = strlen (inbuf);
-     outputstr[len] = '\0';
+     for (i = 0; i < inputlen; i++) {
- } /* base64_encode */
+         res = temp;
+         res = (res << 8) | (inbuf[i] & 0xFF);
+         switch (index++) {
- /* Skip the URL schema and return only the host part of it. */
+         case 0:
- static const char *
+             outbuf[len++] = base64code[res >> 2 & 0x3F];
- skip_type_prefix (const char * hostname)
+             res &= 0x3;
- {
+             break;
-     if (hostname && !strncmp (hostname, "http://", 7))
+         case 1:
-         hostname += 7;
+             outbuf[len++] = base64code[res >> 4 & 0x3F];
-     else if (hostname && !strncmp (hostname, "hkp://", 6))
+             res &= 0xF;
-         hostname += 6;
+             break;
-     else if (hostname && !strncmp (hostname, "finger://", 9))
+         case 2:
-         hostname += 9;
+             outbuf[len++] = base64code[res >> 6 & 0x3F];
-     else if (hostname && !strncmp (hostname, "ldap://", 7))
+             outbuf[len++] = base64code[res & 0x3F];
-         hostname += 7;
+             res = index = 0;
-     return hostname;
+             break;
- }
+         }
+         temp = res;
+     }
- /* Check that the keyserver response indicates an OK.
-    Return 0 on success. */
+     if (index == 2) {
- static int
+         outbuf[len++] = base64code[temp << 2 & 0x3F];
- check_hkp_response (const char *resp, int recv)
+         outbuf[len++] = '=';
- {
+     }
-     int ec, len;
+     else if (index == 1) {
-     char *p, * end;
+         outbuf[len++] = base64code[temp << 4 & 0x3F];
+         outbuf[len++] = '=';
-     ec = recv ? WPTERR_WINSOCK_RECVKEY : WPTERR_WINSOCK_SENDKEY;
+         outbuf[len++] = '=';
-     if (!strstr (resp, "HTTP/1.0 200 OK") &&
+     }
-         !strstr (resp, "HTTP/1.1 200 OK")) /* http error */
-         return ec;
+     outbuf[len] = '\0';
-     if (strstr (resp, "Public Key Server -- Error")
+ }
-         || strstr (resp, "Public Key Server -- Error")
-         || strstr (resp, "No matching keys in database")) {
-         p = strstr (resp, "<p>");
+ /* Check that the given buffer contains a valid keyserver URL
-         if (p && strlen (p) < sizeof (hkp_errmsg)) {
+    and return the prefix length, 0 in case of an error. */
-             end = strstr (p, "</p>");
+ static int
-             len = end? (end - p + 1) : strlen (p);
+ check_URL (const char *buf)
-             strncpy (hkp_errmsg, p, len);
+ {
-             hkp_err = 1;
+     const char *proto[] = {
-         }
+         "ldap://",
-         return ec;
+         "http://",
-     }
+         "finger://",
-     return 0;
+         "hkp://",
- }
+         NULL};
+     int i;
- /* Read a single line (\r\n) from a socket.
+     if (strlen (buf) < 7)
-    Return 0 on success. */
+         return 0;
- static int
- sock_getline (int fd, char *buf, int buflen, int *nbytes)
+     for (i=0; proto[i] != NULL; i++) {
- {
+         if (strstr (buf, proto[i]))
-     char ch;
+             return strlen (proto[i]);
-     int count = 0;
+     }
+     return 0;
-     if (nbytes)
+ }
-         *nbytes = 0;
-     *buf = 0;
-     while (recv (fd, &ch, 1, 0) > 0) {
+ /* Skip the URL schema and return only the host part of it. */
-         *buf++ = ch;
+ static const char*
-         count++;
+ skip_type_prefix (const char *hostname)
-         if (ch == '\n' || count == (buflen - 1)) {
+ {
-             *buf = 0;
+     int pos;
-             if (nbytes)
-                 *nbytes = count;
+     if (!hostname)
-             return 0;
+         return hostname;
-         }
-     }
+     pos = check_URL (hostname);
+     if (pos > 0)
-     return -1;
+         hostname += pos;
- }
+     return hostname;
+ }
- /* Perform a select() on the given fd to find out
+ /* Parse the keyserver response and extract the human
-    is there is data for reading. Wait at least @nsecs seconds. */
+    readable text passages. */
  static int
- sock_select (int fd, int nsecs)
+ parse_keyserver_error (const char *resp, char *txt, size_t txtlen)
  {
-     FD_SET rfd;
+     char *p, *p2;
-     timeval tv = {nsecs, 0};
+     /* If we find no 'Error' substring, we assume a success. */
-     FD_ZERO (&rfd);
+     if (!stristr (resp, "Error"))
-     FD_SET (fd, &rfd);
+         return -1;
-     if (select (fd + 1, &rfd, NULL, NULL, &tv) == SOCKET_ERROR)
-         return SOCKET_ERROR;
+     memset (txt, 0, txtlen);
-     if (FD_ISSET (fd, &rfd))
+     p = strstr (resp, "\r\n\r\n");
-         return 1;
+     if (!p)
-     return 0;
+         return -1;
- }
+     resp += (p-resp);
+     p = strstr (resp, "<h1>");
+     if (!p)
- /* Read from a socket with a fixed timeout of 10 seconds.
+         return -1;
-    Return value: 0 on success. */
+     resp += (p-resp)+strlen ("<h1>");
- static int
+     p = strstr (resp, "</h1>");
- sock_read (int fd, char *buf, int buflen, int *nbytes)
+     if (!p)
- {
+         return -1;
-     DWORD nread;
+     resp += (p-resp)+strlen ("</h1>");
-     int nleft = buflen;
+     p2 = strstr (resp, "</body>");
-     int rc, n = 0;
+     if (p2 != NULL)
+         memcpy (txt, resp, (p2-resp));
-     while (nleft > 0) {
+     else {
-         if (n >= 10)
+         if (!strnicmp (resp, "<p>", 3))
-             return WPTERR_WINSOCK_TIMEOUT;
+             resp += 3;
-         rc = sock_select (fd, 1);
+         while (resp && *resp == '\r' || *resp == '\n')
-         if (rc == SOCKET_ERROR)
+             resp++;
-             return SOCKET_ERROR;
+         memcpy (txt, resp, strlen (resp));
-         else if( !rc )
+     }
-             n++;
+     return 0;
-         else {
+ }
-             nread = recv (fd, buf, nleft, 0);
-             if (nread == SOCKET_ERROR)
-                 return SOCKET_ERROR;
+ /* Check that the keyserver response indicates an OK.
-             else if (!nread)
+    Return 0 on success. */
-                 break;
+ static int
-             nleft -= nread;
+ check_hkp_response (const char *resp, int recv)
-             buf += nread;
+ {
-         }
+     int ec;
-     }
-     if (nbytes)
+     log_debug ("check_hkp_response: '%s'\r\n", resp);
-         *nbytes = buflen - nleft;
+     ec = recv ? WPTERR_WINSOCK_RECVKEY : WPTERR_WINSOCK_SENDKEY;
+     if (!strstr (resp, "HTTP/1.0 200 OK") &&
-     return 0;
+         !strstr (resp, "HTTP/1.1 200 OK") &&
- }
+         !strstr (resp, "HTTP/1.0 500 OK") &&
+         !strstr (resp, "HTTP/1.1 500 OK"))
+         return ec; /* http error */
- /* Write @buf to a socket @fd. */
- static int
+     if (!parse_keyserver_error (resp, hkp_errmsg, DIM (hkp_errmsg)-2)) {
- sock_write (int fd, const char *buf, int buflen)
+         if (!strlen (hkp_errmsg))
- {
+             _snprintf (hkp_errmsg, DIM (hkp_errmsg)-1,
-     DWORD nwritten;
+                         "Unknown keyserver error");
-     int nleft = buflen;
+         hkp_err = 1;
+         return ec;
-     while (nleft > 0) {
+     }
-         nwritten = send (fd, buf, nleft, 0);
+     return 0;
-         if (nwritten == SOCKET_ERROR)
+ }
-             return SOCKET_ERROR;
-         nleft -= nwritten;
-         buf += nwritten;
+ /* Read a single line (\r\n) from a socket.
-     }
+    Return 0 on success. */
+ static int
-     return 0;
+ sock_getline (int fd, char *buf, int buflen, int *nbytes)
- }
+ {
+     char ch;
+     int nread = 0;
- void
- set_default_kserver (void)
+     if (nbytes)
- {
+         *nbytes = 0;
-     char * p = get_reg_entry_keyserver ("Default");
+     *buf = 0;
-     free_if_alloc (default_keyserver);
+     while (recv (fd, &ch, 1, 0) > 0) {
-     default_keyserver = p && *p != ' ' ? p : m_strdup (DEF_HKP_KEYSERVER);
+         *buf++ = ch;
-     p = get_reg_entry_keyserver ("Default_Port");
+         nread++;
-     if (p && *p) {
+         if (ch == '\r')
-         default_keyserver_port = (u16)strtoul (p, NULL, 10);
+             continue; /* remove this char. */
-         free_if_alloc (p);
+         if (ch == '\n' || nread == (buflen - 1)) {
-     }
+             *buf = 0;
-     else
+             if (nbytes)
-         default_keyserver_port = HKP_PORT;
+                 *nbytes = nread;
- }
+             return 0;
+         }
+     }
- /* Initialize the Winsock2 interface.*/
- int
+     return -1;
- wsock_init (void)
+ }
- {
-     WSADATA wsa;
+ /* Perform a select() on the given fd to find out
-     if (WSAStartup (0x202, &wsa))
+    is there is data for reading. Wait at least @nsecs seconds. */
-         return WPTERR_WINSOCK_INIT;
+ static int
-     set_default_kserver ();
+ sock_select (int fd, int nsecs)
-     return 0;
+ {
- }
+     FD_SET rfd;
+     timeval tv = {nsecs, 0};
- /* Cleanup the Winsock2 interface. */
+     FD_ZERO (&rfd);
- void
+     FD_SET (fd, &rfd);
- wsock_end (void)
+     if (select (fd + 1, &rfd, NULL, NULL, &tv) == SOCKET_ERROR) {
- {
+         log_debug ("sock_select: select() failed ec=%d.\r\n", net_errno);
-     int i;
+         return SOCKET_ERROR;
+     }
-     free_if_alloc (default_keyserver);
+     if (FD_ISSET (fd, &rfd))
-     default_keyserver = NULL;
+         return 1;
-     for (i=0; i < MAX_KEYSERVERS; i++) {
+     return 0;
-         if (server[i].used)
+ }
-             free_if_alloc (server[i].name);
-     }
-     WSACleanup ();
+ /* Read from a socket @fd to buffer @buf with a fixed timeout
- }
+    of 10 seconds. The amount of bytes which were read are
+    returned in @nbytes.
+    Return value: 0 on success. */
- /* Return a string representation of a winsock error. */
+ static int
- const char*
+ sock_read (int fd, char *buf, size_t buflen, int *nbytes)
- wsock_strerror (void)
+ {
- {
+     int nread;
-     static char buf[384];
+     size_t nleft = buflen;
-     int ec = WSAGetLastError ();
+     size_t n = 0;
+     int rc;
-     switch (ec) {
-     case WSAENETDOWN:
+     if (nbytes)
-         return _("The network subsystem has failed");
+         *nbytes = 0;
-     case WSAHOST_NOT_FOUND:
+     while (nleft > 0) {
-         return _("Authoritative Answer Host not found");
+         if (n >= default_socket_timeout)
-     case WSAETIMEDOUT:
+             return WPTERR_WINSOCK_TIMEOUT;
-         return _("The connection has been dropped because of a network failure");
+         rc = sock_select (fd, 1);
-     default:
+         if (rc == SOCKET_ERROR)
-         _snprintf (buf, sizeof (buf) -1, _("Unknown Winsock error ec=%d"),ec);
+             return rc;
-         return buf;
+         else if (!rc)
-     }
+             n++;
-     return NULL;
+         else {
- }
+             nread = recv (fd, buf, nleft, 0);
+             if (nread == SOCKET_ERROR) {
+                 log_debug ("sock_read: recv() failed ec=%d.\r\n", net_errno);
- /* Return the last keyserver error as a string. */
+                 return SOCKET_ERROR;
- const char*
+             }
- kserver_strerror (void)
+             else if (!nread)
- {
+                 break;
-     if (hkp_err)
+             nleft -= nread;
-         return hkp_errmsg;
+             buf += nread;
-     return NULL;
+         }
- }
+     }
+     if (nbytes)
+         *nbytes = buflen - nleft;
- /* Read a keyserver from the list at index @idx.
-    Return value: keyserver name at the given position. */
+     return 0;
- const char*
+ }
- kserver_get_hostname (int idx, int type, u16 *port)
- {
-     if (type == -1) {
+ /* Helper to create a string from the gpgme data and
-         *port = default_keyserver_port;
+    then release the gpgme data object. */
-         return default_keyserver;
+ char*
-     }
+ data_release_and_get_mem (gpgme_data_t in, size_t *r_bufferlen)
-     else if (!type && idx < DIM (server_list)) {
+ {
-         *port = HKP_PORT;
+     size_t n;
-         return server_list[idx];
+     char *buffer, *p;
-     }
-     return NULL;
+     gpg_data_putc (in, '\0');
- }
+     p = gpgme_data_release_and_get_mem (in, &n);
+     buffer = m_strdup (p);
+     if (r_bufferlen)
- /* Check if the computer is connected to the internet.
+         *r_bufferlen = n;
-    Return 0 on success -1 otherwise. */
+     gpgme_free (p);
- int
+     return buffer;
- kserver_check_inet_connection (void)
+ }
- {
-     int fd;
+ /* Read much data as possible from the socket @fd and
-     if (!kserver_connect (default_keyserver, default_keyserver_port, &fd)) {
+    return the data in @buffer. Caller must free data.
-         closesocket (fd);
+    Return value: 0 on success. */
-         return 0;
+ int
-     }
+ sock_read_ext (int fd, char **buffer, size_t *r_bufferlen)
-     return -1;
+ {
- }
+     gpgme_data_t dh;
+     char buf[1024];
+     size_t timeout=0;
- /*
+     int nread, rc;
-  * If the request contains the keyid, it have to be
-  * always postfix with '0x'+keyid. This code checks
+     if (gpgme_data_new (&dh))
-  * if the keyid is a decimal value and if so if it contains
+         return SOCKET_ERROR;
-  * the '0x'. If not it is inserted.
+     while (timeout < default_socket_timeout) {
-  */
+         rc = sock_select (fd, 1);
- const char*
+         if (rc == SOCKET_ERROR) {
- kserver_check_keyid (const char *keyid)
+             gpgme_data_release (dh);
- {
+             return rc;
-     static char id[20];
+         }
+         else if (!rc)
-     if (strstr (keyid, "@"))
+             timeout++; /* socket not ready yet. */
-         return keyid; /* email address */
+         else {
-     if (strncmp (keyid, "0x", 2)) {
+             nread = recv (fd, buf, DIM (buf), 0);
-         memset (&id, 0, sizeof (id));
+             if (nread == SOCKET_ERROR)
-         _snprintf (id, sizeof (id)-1, "0x%s", keyid);
+                 return SOCKET_ERROR;
-         return id;
+             else if (!nread)
-     }
+                 break;
-     return keyid;
+             gpgme_data_write (dh, buf, nread);
- } /* kserver_check_keyid */
+         }
+     }
+     if (timeout >= default_socket_timeout)
- static void
+         return WPTERR_WINSOCK_TIMEOUT;
- kserver_update_proxyuser (const char *proxy_user, const char *proxy_pass)
+     *buffer = data_release_and_get_mem (dh, r_bufferlen);
- {
+     return 0;
-     char t[257]; /* user:pass = 127+1+127+1 = 257 */
+ }
-     int n = 0;
-     n = 4*strlen (proxy_user) / 3 + 32 + strlen (proxy_pass) + 2;
+ /* Write the buffer @buf with the length @buflen to a socket @fd. */
-     free_if_alloc (proxy.base64_user);
+ static int
-     proxy.base64_user = new char[n];
+ sock_write (int fd, const char *buf, size_t buflen)
-     if (!proxy.base64_user)
+ {
-         BUG (0);
+     int nwritten;
-     _snprintf (t, sizeof (t)-1, "%s:%s", proxy_user, proxy_pass);
+     int nleft = buflen;
-     base64_encode (t, proxy.base64_user, 257);
-     free_if_alloc (proxy.user);
+     while (nleft > 0) {
-     free_if_alloc (proxy.pass);
+         nwritten = send (fd, buf, nleft, 0);
-     proxy.user = m_strdup (proxy_user);
+         if (nwritten == SOCKET_ERROR) {
-     proxy.pass = m_strdup (proxy_pass);
+             log_debug ("sock_write: send() failed ec=%d\r\n", net_errno);
- } /* kserver_update_proxyuser */
+             return SOCKET_ERROR;
+         }
+         nleft -= nwritten;
- /* Check that the given buffer contains a valid keyserver URL. */
+         buf += nwritten;
- static int
+     }
- check_URL (const char * buf)
- {
+     return 0;
-     if (strlen (buf) < 7)
+ }
-         return -1;
-     if (!strstr (buf, "ldap://")
-         && !strstr (buf, "http://")
+ /* Initialize the Winsock2 interface.*/
-         && !strstr (buf, "finger://")
+ int
-         && !strstr (buf, "hkp://"))
+ wsock_init (void)
-         return -1;
+ {
-     return 0;
+     WSADATA wsa;
- }
+     if (WSAStartup (0x202, &wsa)) {
+         log_debug ("wsock_init: WSAStartup failed ec=%d\r\n", net_errno);
- /* Get the port number from the given protocol. */
+         return WPTERR_WINSOCK_INIT;
- static int
+     }
- port_from_proto (int proto)
+     return 0;
- {
+ }
-     switch (proto) {
-     case KSPROTO_LDAP: return 0;
-     case KSPROTO_FINGER: return FINGER_PORT;
+ /* Cleanup the Winsock2 interface. */
-     case KSPROTO_HTTP: return HKP_PORT;
+ void
-     }
+ wsock_end (void)
-     return 0;
+ {
- }
+     char *p;
+     int i;
- /* Get the port number from the given URL. */
+ #ifdef WINPT_MOBILE
- static int
+     p = m_strdup ("keyserver.conf");
- proto_from_URL (const char * buf)
+ #else
- {
+     p = make_special_filename (CSIDL_APPDATA, "winpt\\keyserver.conf", NULL);
-     if (strstr( buf, "ldap"))
+ #endif
-         return KSPROTO_LDAP;
+     kserver_save_conf (p);
-     else if (strstr( buf, "finger"))
+     free_if_alloc (p);
-         return KSPROTO_FINGER;
+     free_if_alloc (default_keyserver);
-     return KSPROTO_HKP;
+     for (i=0; i < MAX_KEYSERVERS; i++) {
- }
+         if (server[i].name != NULL)
+             free_if_alloc (server[i].name);
+     }
- void
+     kserver_proxy_release (&proxy);
- keyserver_set_default (const char * hostname, u16 port)
+     WSACleanup ();
- {
+     log_debug ("wsock_end: cleanup finished.\r\n");
-     if (hostname) {
+ }
-         free_if_alloc (default_keyserver);
-         default_keyserver = m_strdup (hostname);
-         if (!default_keyserver)
+ /* Return a string representation of a winsock error. */
-             BUG (0);
+ const char*
-         default_keyserver_port = port;
+ wsock_strerror (void)
-     }
+ {
-     server[0].name =  m_strdup (default_keyserver);
+     int ec = WSAGetLastError ();
-     server[0].used = 1;
-     server[0].port = port;
+     if (!ec)
-     server[0].proto = proto_from_URL (default_keyserver);
+         return "";
- } /* keyserver_set_default */
+     switch (ec) {
+     case WSAENETDOWN:
+         return _("Network unreachable");
- static const char *
- skip_whitespace (const char * str)
+     case WSAEHOSTUNREACH:
- {
+         return _("Host unreachable");
-     while (str && *str)
-     {
+     case WSAHOST_NOT_FOUND:
-         if (*str == ' ' ||
+         return _("Could not resolve host name");
-             *str == '\t' ||
-             *str == '\n' ||
+     case WSAECONNREFUSED:
-             *str == '\r')
+         return _("Connection refused");
-         {
-             str++;
+     case WSAETIMEDOUT:
-             continue;
+     case WSAECONNABORTED:
-         }
+         return _("Connection timeout");
-         break;
-     }
+     case WSAENETRESET:
-     return str;
+     case WSAECONNRESET:
- }
+         return _("Connection resetted by peer");
+     case WSAESHUTDOWN:
- int
+         return _("Socket has been shutdown");
- kserver_load_conf (const char * conf)
- {
+     default:
-     struct stat statbuf;
+         break;
-     FILE *fp;
+     }
-     char buf[1024], * s, * p;
-     char *user = NULL, *pass = NULL;
+     return "";
-     int pos, proxy_auth = 0;
+ }
-     int no_config=0, chk_pos=0;
-     for (pos = 0; pos < MAX_KEYSERVERS; pos++) {
+ /* Set default socket timeout for all reading operations. */
-         server[pos].used = 0;
+ void
-         server[pos].port = HKP_PORT;
+ kserver_set_socket_timeout (size_t nsec)
-     }
+ {
+     if (nsec < 0 || nsec > 3600)
-     fp = fopen (conf, "rb");
+         nsec = 0;
-     if (!fp) {
+     default_socket_timeout = nsec;
-         for (pos = 0; server_list[pos]; pos++) {
+ }
-             server[pos].used = 1;
-             server[pos].name = m_strdup (server_list[pos]);
-             server[pos].proto = proto_from_URL (server_list[pos]);
+ /* Return the last keyserver error as a string. */
-         }
+ const char*
-         no_config=1;
+ kserver_strerror (void)
-     }
+ {
-     get_reg_proxy_prefs (&proxy.host, &proxy.port, &user, &pass);
+     if (hkp_err)
-     if (user && pass)
+         return hkp_errmsg;
-         kserver_update_proxyuser (user, pass);
+     return NULL;
-     else if (user && !pass || !user && pass) {
+ }
-         msg_box( NULL, _("Invalid proxy configuration."
-                          "You need to set a user and a password"
-                          "to use proxy authentication!"), _("Proxy Error"), MB_ERR );
+ /* Read a keyserver from the list at index @idx.
-     }
+    Return value: keyserver name at the given position. */
-     /* check if the host has a http:// prefix and skip it */
+ const char*
-     if( proxy.host && !strncmp( proxy.host, "http://", 7 ) ) {
+ kserver_get_hostname (int idx, int type, WORD *port)
-         const char *s = proxy.host+7;
+ {
-         char * p = m_strdup (s);
+     if (type == -1) {
-         if (!p)
+         *port = default_keyserver_port;
-             BUG (0);
+         return default_keyserver;
-         free_if_alloc (proxy.host);
+     }
-         proxy.host = p;
+     else if (!type && (size_t)idx < DIM (server_list)) {
-     }
+         /* XXX: handle non HKP servers. */
-     free_if_alloc (user);
+         *port = HKP_PORT;
-     free_if_alloc (pass);
+         return server_list[idx];
+     }
-     pos = 0;
+     return NULL;
-     while( fp && !feof( fp ) ) {
+ }
-         s = fgets (buf, sizeof (buf)-1, fp);
-         if (!s)
-             break;
+ /* Check if the computer is connected to the internet.
-         if (strstr (buf, "\r\n"))
+    Return 0 on success -1 otherwise. */
-             buf[strlen (buf)-2] = '\0';
+ int
-         if (strstr (buf, "\n"))
+ kserver_check_inet_connection (void)
-             buf[strlen (buf)-1] = '\0';
+ {
-         s = (char *)skip_whitespace (buf);
+     int fd;
-         if (*s == '#' || strlen (s) < 7)
-             continue;
+     if (!kserver_connect (default_keyserver, default_keyserver_port, &fd)) {
-         if (check_URL (s)) {
+         closesocket (fd);
-             msg_box (NULL, _("All entries of this file must have a valid prefix.\n"
+         return 0;
-                              "Currently HKP/HTTP, LDAP and FINGER are supported.\n"),
+     }
-                              _("Keyserver Error"), MB_ERR);
+     log_debug ("kserver_check_inet_connection: no inet connection.\r\n");
-             continue;
+     return -1;
-         }
+ }
-         chk_pos=6;
-         if (strstr (s, "finger"))
-             chk_pos = 10;
+ /* If the request contains the keyid, it have to be
-         p = strchr (s+chk_pos, ':');
+    always postfix with '0x'+keyid. This code checks
-         server[pos].used = 1;
+    if the keyid is a decimal value and if so if it contains
-         server[pos].proto = proto_from_URL (s);
+    the '0x'. If not it is inserted. */
-         server[pos].port = port_from_proto (server[pos].proto);
+ const char*
-         if (!p)
+ kserver_check_keyid (const char *keyid)
-             server[pos].name = m_strdup (s);
+ {
-         else {
+     static char id[22];
-             server[pos].port = atol (p+1);
-             if (server[pos].port < 0 || server[pos].port > 65536)
+     if (strstr (keyid, "@"))
-                 server[pos].port = HKP_PORT;
+         return keyid; /* email address */
-             server[pos].name = new char [(p-s)+2];
+     if (strncmp (keyid, "0x", 2)) {
-             if (!server[pos].name)
+         memset (&id, 0, sizeof (id));
-                 BUG (0);
+         _snprintf (id, DIM (id)-1, "0x%s", keyid);
-             memset (server[pos].name, 0, (p-s)+2);
+         return id;
-             memcpy (server[pos].name, s, (p-s));
+     }
-         }
+     return keyid;
-         pos++;
+ }
-         if (pos > MAX_KEYSERVERS)
-         {
-             msg_box (NULL, _("The keyserver limit is exceeded"), _("Keyserver Warning"), MB_INFO);
+ /* Update the keyserver proxy user. */
-             break;
+ static void
-         }
+ update_proxy_user (const char *proxy_user, const char *proxy_pass)
-     }
+ {
-     if (fp)
+     char t[257]; /* user:pass = 127+1+127+1 = 257 */
-         fclose (fp);
+     int n = 0;
-     if (!pos)
-     {
+     n = 4*strlen (proxy_user) / 3 + 32 + strlen (proxy_pass) + 2;
-         /* only issue an error if the config file exist but it has no valid entries. */
+     free_if_alloc (proxy.base64_user);
-         keyserver_set_default (NULL, HKP_PORT);
+     proxy.base64_user = safe_alloc (n+1);
-         if (!no_config)
+     _snprintf (t, DIM (t)-1, "%s:%s", proxy_user, proxy_pass);
-             return WPTERR_CONFIG_FILE;
+     base64_encode (t, proxy.base64_user);
-     }
+     free_if_alloc (proxy.user);
+     free_if_alloc (proxy.pass);
-     if (!stat (conf, &statbuf))
+     proxy.user = m_strdup (proxy_user);
-         conf_timestamp = statbuf.st_mtime;
+     proxy.pass = m_strdup (proxy_pass);
-     return 0;
+ }
- } /* kserver_load_conf */
+ /* Get the port number from the given protocol. */
- const char *
+ static int
- kserver_get_proxy (int * r_port)
+ port_from_proto (int proto)
  {
-     if (proxy.host) {
+     switch (proto) {
-         if (r_port)
+     case KSPROTO_LDAP:   return LDAP_PORT;
-             *r_port = proxy.port;
+     case KSPROTO_FINGER: return FINGER_PORT;
-         return proxy.host;
+     case KSPROTO_HTTP:   return HKP_PORT;
      }
-     return NULL;
+     return 0;
- } /* kserver_get_proxy */
+ }
- const char *
+ /* Get the port number from the given URL. */
- kserver_get_proxy_info (int id)
+ static int
- {
+ proto_from_URL (const char *buf)
-     switch (id) {
+ {
-     case PROXY_USER: return proxy.user;
+     if (strstr (buf, "ldap"))
-     case PROXY_PASS: return proxy.pass;
+         return KSPROTO_LDAP;
-     }
+     else if (strstr (buf, "finger"))
-     return NULL;
+         return KSPROTO_FINGER;
- } /* kserver_get_proxy_info */
+     return KSPROTO_HKP;
+ }
- /* Connect to the keyserver @hostname. */
- int
+ /* Set the default keyserver.
- kserver_connect (const char *hostname, u16 port, int *conn_fd)
+    If @hostname is NULL, use the predefined keyserver. */
- {
+ void
-     int rc, fd;
+ keyserver_set_default (const char *hostname, WORD port)
-     u32 iaddr;
+ {
-     char host[128] = {0};
+     if (!port)
-     struct hostent *hp;
+         port = HKP_PORT;
-     struct sockaddr_in sock;
+     if (hostname != NULL) {
+         free_if_alloc (default_keyserver);
-     log_debug ("kserver_connect: %s:%d\r\n", hostname, port);
+         default_keyserver = m_strdup (hostname);
+         default_keyserver_port = port;
-     if (!port)
+     }
-         port = HKP_PORT;
+     if (!default_keyserver) {
-     if (conn_fd)
+         default_keyserver = m_strdup (DEF_HKP_KEYSERVER);
-         *conn_fd = 0;
+         default_keyserver_port = HKP_PORT;
-     hostname = skip_type_prefix (hostname);
+     }
+     server[0].name =  m_strdup (default_keyserver);
-     memset (&sock, 0, sizeof (sock));
+     server[0].used = 1;
-     sock.sin_family = AF_INET;
+     server[0].port = port;
-     sock.sin_port = proxy.host? htons (proxy.port) : htons (port);
+     server[0].proto = proto_from_URL (default_keyserver);
-     if (proxy.host)
+ }
-         strncpy (host, proxy.host, 127);
-     else
-         strncpy (host, hostname, 127);
+ /* Skip all kind of whitespace chars in @str. */
+ static const char*
-     if ((iaddr = inet_addr (host)) != INADDR_NONE)
+ skip_whitespace (const char *str)
-         memcpy (&sock.sin_addr, &iaddr, sizeof (iaddr));
+ {
-     else if ((hp = gethostbyname (host))) {
+     while (str && *str) {
-         if (hp->h_addrtype != AF_INET || hp->h_length != 4) {
+         if (*str == ' ' ||
-             log_debug ("gethostbyname: unknown address type.\r\n");
+             *str == '\t' ||
-             return WPTERR_WINSOCK_RESOLVE;
+             *str == '\n' ||
-         }
+             *str == '\r') {
-         memcpy (&sock.sin_addr, hp->h_addr, hp->h_length);
+             str++;
-     }
+             continue;
-     else {
+         }
-         log_debug ("gethostbyname: failed.\r\n");
+         break;
-         return WPTERR_WINSOCK_RESOLVE;
+     }
-     }
+     return str;
-     fd = socket (AF_INET, SOCK_STREAM, 0);
+ }
-     if (fd == INVALID_SOCKET)
-         return WPTERR_WINSOCK_SOCKET;
-     rc = connect (fd, (struct sockaddr *) &sock, sizeof (sock));
+ /* Save the keyserver config file in @conf. */
-     if (rc == SOCKET_ERROR) {
+ int
-         log_debug ("connect: failed.\r\n");
+ kserver_save_conf (const char *conf)
-         closesocket (fd);
+ {
-         return WPTERR_WINSOCK_CONNECT;
+     FILE *fp;
-     }
+     int pos;
-     if (conn_fd)
+     fp = fopen (conf, "wb");
-         *conn_fd = fd;
+     if (!fp) {
-     WSASetLastError (0);
+         msg_box (NULL, _("Could not save keyserver.conf file"),
-     return 0;
+                  _("Keyserver"), MB_ERR);
- } /* kserver_connect */
+         return -1;
+     }
- /* Perform URL-encoding on the given pubkey blob. */
+     fprintf (fp, "# do NOT manually modify this file, it will be "
- static char*
+                  "generated automatically!!\r\n");
- kserver_urlencode (const char *pubkey, size_t octets, size_t *newlen)
+     for (pos = 0; pos < MAX_KEYSERVERS; pos++) {
- {
+         if (!server[pos].used)
-     char *p, numbuf[5];
+             continue;
-     size_t j = 0;
+         fprintf (fp, "%s:%d\r\n", server[pos].name, server[pos].port);
-     size_t i, size;
+     }
+     fclose (fp);
-     p = new char [2*octets];
+     return 0;
-     if (!p)
+ }
-         BUG (0);
-     for (size=0, i=0; i < octets; i++) {
+ /* Return the specified keyserver config setting @key as an integer. */
-         if (isalnum (pubkey[i]) || pubkey[i] == '-') {
+ static int
-             p[size] = pubkey[i];
+ get_conf_kserver_int (const char *key)
-             size++;
+ {
-         }
+     char *p;
-         else if (pubkey[i] == ' ') {
+     int val = 0;
-             p[size] = '+';
-             size++;
+     p = get_reg_entry_keyserver (key);
-         }
+     if (p && *p)
-         else {
+         val = atoi (p);
-             sprintf(numbuf, "%%%02X", pubkey[i]);
+     free_if_alloc (p);
-             for (j = 0; j<strlen(numbuf); j++) {
+     return val;
-                 p[size] = numbuf[j];
+ }
-                 size++;
-             }
-         }
+ /* Read the proxy configuration and store it into @prox. */
-     }
+ static void
-     p[size] = '\0';
+ read_proxy_config (keyserver_proxy_t prox)
-     *newlen = size;
+ {
-     return p;
+     char *proto;
- }
+     if (!prox)
+         return;
- /* Format a request for the given keyid (send). */
- static char*
+     proto = get_reg_entry_keyserver("Proto");
- kserver_send_request (const char *hostname, u16 port, const char *pubkey, int octets)
+     if (proto != NULL && strlen (proto) > 0)
- {
+         prox->proto = atoi (proto);
-     char *request = NULL, *enc_pubkey = NULL;
+     else
-     int reqlen;
+         prox->proto = PROXY_PROTO_NONE;
-     size_t enc_octets;
+     free_if_alloc (proto);
+     free_if_alloc (prox->host);
-     log_debug ("kserver_send_request: %s:%d\n", hostname, port);
+     prox->host = get_reg_entry_keyserver ("Host");
+     free_if_alloc (prox->user);
-     if (!port)
+     prox->user = get_reg_entry_keyserver ("User");
-         port = HKP_PORT;
+     free_if_alloc (prox->pass);
-     reqlen = 512 + strlen (hostname) + 2*strlen (pubkey);
+     prox->pass = get_reg_entry_keyserver ("Pass");
-     request = new char[reqlen];
+     prox->port = get_conf_kserver_int ("Port");
-     if (!request)
+ }
-         BUG (0);
-     enc_pubkey = kserver_urlencode (pubkey, octets, &enc_octets);
-     if (!enc_pubkey || !enc_octets) {
+ /* Load the keyserver config file @conf. */
-         free_if_alloc (request);
+ int
-         return NULL;
+ kserver_load_conf (const char *conf)
-     }
+ {
+     FILE *fp;
-     if (proxy.user) {
+     char buf[1024], *s, *p;
-         _snprintf (request, reqlen-1,
+     char *user = NULL, *pass = NULL;
-                    "POST http://%s:%d/pks/add HTTP/1.0\r\n"
+     int no_config=0, chk_pos;
-                    "Referer: \r\n"
+     int pos;
-                    "User-Agent: WinPT/W32\r\n"
-                    "Host: %s:%d\r\n"
+     for (pos = 0; pos < MAX_KEYSERVERS; pos++) {
-                    "Proxy-Authorization: Basic %s\r\n"
+         server[pos].used = 0;
-                    "Content-type: application/x-www-form-urlencoded\r\n"
+         server[pos].port = HKP_PORT;
-                    "Content-length: %d\r\n"
+         server[pos].name = NULL;
-                    "\r\n"
+     }
-                    "keytext=%s"
-                    "\n",
+     fp = fopen (conf, "rb");
-                    skip_type_prefix (hostname), port, hostname, port,
+     if (!fp) {
-                    proxy.base64_user, enc_octets+9, enc_pubkey);
+         for (pos = 0; server_list[pos]; pos++) {
-     }
+             server[pos].used = 1;
-     else {
+             server[pos].name = m_strdup (server_list[pos]);
-         _snprintf (request, reqlen-1,
+             server[pos].proto = proto_from_URL (server_list[pos]);
-                    "POST /pks/add HTTP/1.0\r\n"
+         }
-                    "Referer: \r\n"
+         no_config = 1;
-                    "User-Agent: WinPT/W32\r\n"
+     }
-                    "Host: %s:%d\r\n"
+     read_proxy_config (&proxy);
-                    "Content-type: application/x-www-form-urlencoded\r\n"
+     if (user && pass)
-                    "Content-length: %d\r\n"
+         update_proxy_user (user, pass);
-                    "\r\n"
+     else if (user && !pass || !user && pass) {
-                    "keytext=%s"
+         msg_box (NULL, _("Invalid proxy configuration. "
-                    "\n",
+                          "You need to set a user and a password "
-                    skip_type_prefix (hostname), port, enc_octets+9, enc_pubkey);
+                          "to use proxy authentication!"),
-     }
+                          _("Proxy Error"), MB_ERR);
-     free_if_alloc (enc_pubkey);
+     }
+     /* check if the host has a http:// prefix and skip it */
-     log_debug ("%s\n", request);
+     if (proxy.host && !strncmp (proxy.host, "http://", 7)) {
-     return request;
+         char *host = m_strdup (proxy.host+7);
- } /* kserver_send_request */
+         free_if_alloc (proxy.host);
+         proxy.host = host;
+     }
- /* Interface receiving a public key. */
+     free_if_alloc (user);
- int
+     free_if_alloc (pass);
- kserver_recvkey (const char *hostname, u16 port, const char *keyid, char *key, int maxkeylen)
- {
+     pos = 0;
-     int rc, n;
+     while (fp && !feof (fp)) {
-     int conn_fd;
+         s = fgets (buf, DIM (buf)-1, fp);
-     char *request = NULL;
+         if (!s)
+             break;
-     if (!port)
+         if (strstr (buf, "\r\n"))
-         port = HKP_PORT;
+             buf[strlen (buf)-2] = '\0';
-     hkp_err = 0; /* reset */
+         if (strstr (buf, "\n"))
-     rc = kserver_connect (hostname, port, &conn_fd);
+             buf[strlen (buf)-1] = '\0';
-     if (rc)
+         s = (char *)skip_whitespace (buf);
-         goto leave;
+         if (*s == '#' || strlen (s) < 7)
+             continue;
-     request = new char[300+1];
+         chk_pos = check_URL (s);
-     if (!request)
+         if (!chk_pos) {
-         BUG (0);
+             msg_box (NULL, _("All entries of this file must have a valid prefix.\n"
+                              "Currently HKP/HTTP, LDAP and FINGER are supported.\n"),
-     if (proxy.host && proxy.user) {
+                              _("Keyserver Error"), MB_ERR);
-         _snprintf (request, 300,
+             continue;
-             "GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n"
+         }
-             "Proxy-Authorization: Basic %s\r\n\r\n",
+         p = strchr (s+chk_pos, ':');
-             skip_type_prefix (hostname), port, keyid, proxy.base64_user);
+         server[pos].used = 1;
-     }
+         server[pos].proto = proto_from_URL (s);
-     else if (proxy.host) {
+         server[pos].port = port_from_proto (server[pos].proto);
-         _snprintf (request, 300,
+         if (!p)
-             "GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n",
+             server[pos].name = m_strdup (s);
-             skip_type_prefix (hostname), port, keyid);
+         else {
-     }
+             server[pos].port = atol (p+1);
-     else {
+             if (server[pos].port < 0 || server[pos].port > 65536)
-         _snprintf (request, 300,
+                 server[pos].port = HKP_PORT;
-             "GET /pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n", keyid);
+             server[pos].name = safe_alloc ((p-s)+2);
-     }
+             memset (server[pos].name, 0, (p-s)+2);
+             memcpy (server[pos].name, s, (p-s));
-     log_debug ("%s\r\n", request);
+         }
+         pos++;
-     rc = sock_write (conn_fd, request, strlen (request));
+         if (pos > MAX_KEYSERVERS) {
-     if (rc == SOCKET_ERROR) {
+             msg_box (NULL, _("The keyserver limit is exceeded"),
-         rc = WPTERR_WINSOCK_RECVKEY;
+                      _("Keyserver Warning"), MB_INFO);
-         goto leave;
+             break;
-     }
+         }
+     }
-     rc = sock_read( conn_fd, key, maxkeylen, &n );
+     if (fp)
-     if( rc == SOCKET_ERROR ) {
+         fclose (fp);
-         rc = WPTERR_WINSOCK_RECVKEY;
+     if (!pos) {
-         goto leave;
+         /* Only issue an error if the config file exist but
-     }
+            it has no valid entries. */
+         keyserver_set_default (NULL, HKP_PORT);
-     log_debug("%s\r\n", key);
+         if (!no_config)
-     rc = check_hkp_response (key, 1);
+             return WPTERR_CONFIG_FILE;
-     if (rc)
+     }
-         goto leave;
+     return 0;
-     WSASetLastError (0);
+ }
- leave:
-     closesocket (conn_fd);
+ /* Connect to the keyserver @hostname (port @port).
-     free_if_alloc (request);
+    Return value: 0 on success */
-     return rc;
+ int
- } /* kserver_recvkey */
+ kserver_connect (const char *hostname, WORD port, int *conn_fd)
+ {
+     struct hostent *hp;
- /* Interface to send a public key. */
+     struct sockaddr_in sock;
- int
+     char host[128] = {0};
- kserver_sendkey (const char *hostname, u16 port, const char *pubkey, int len )
+     DWORD iaddr;
- {
+     bool use_proxy = proxy.host != NULL;
-     int n, rc;
+     int rc, fd;
-     int conn_fd;
-     char *request = NULL;
+     if (!port)
-     char log[2048];
+         port = HKP_PORT;
+     if (conn_fd)
-     hkp_err = 0; /* reset */
+         *conn_fd = 0;
-     rc = kserver_connect (hostname, port, &conn_fd);
+     hostname = skip_type_prefix (hostname);
-     if (rc)
+     log_debug ("kserver_connect: %s:%d\r\n", hostname, port);
-         goto leave;
+     if (use_proxy && proxy.proto == PROXY_PROTO_HTTP)
-     request = kserver_send_request (hostname, port, pubkey, len);
+         port = proxy.port;
-     if (request == NULL) {
+     memset (&sock, 0, sizeof (sock));
-         rc = WPTERR_GENERAL;
+     sock.sin_family = AF_INET;
-         goto leave;
+     sock.sin_port = htons (port);
-     }
+     strncpy (host, use_proxy? proxy.host : hostname, DIM (host)-1);
-     rc = sock_write( conn_fd, request, lstrlen(request) );
+     if ((iaddr = inet_addr (host)) != INADDR_NONE)
-     if( rc == SOCKET_ERROR ) {
+         memcpy (&sock.sin_addr, &iaddr, sizeof (iaddr));
-         rc = WPTERR_WINSOCK_SENDKEY;
+     else if ((hp = gethostbyname (host))) {
-         goto leave;
+         if (hp->h_addrtype != AF_INET || hp->h_length != 4) {
-     }
+             log_debug ("gethostbyname: unknown address type.\r\n");
+             return WPTERR_WINSOCK_RESOLVE;
-     rc = sock_read( conn_fd, log, sizeof (log)-1, &n );
+         }
-     if( rc == SOCKET_ERROR ) {
+         memcpy (&sock.sin_addr, hp->h_addr, hp->h_length);
-         rc = WPTERR_WINSOCK_SENDKEY;
+     }
-         goto leave;
+     else {
-     }
+         log_debug ("gethostbyname: failed ec=%d.\r\n", net_errno);
+         return use_proxy? WPTERR_WINSOCK_PROXY : WPTERR_WINSOCK_RESOLVE;
-     log_debug ("kserver_sendkey:\r\n%s\r\n", log);
+     }
+     fd = socket (AF_INET, SOCK_STREAM, 0);
-     rc = check_hkp_response (log, 0);
+     if (fd == INVALID_SOCKET)
-     if( rc )
+         return WPTERR_WINSOCK_SOCKET;
-         goto leave;
+     rc = connect (fd, (struct sockaddr *) &sock, sizeof (sock));
+     if (rc == SOCKET_ERROR) {
-     WSASetLastError (0);
+         log_debug ("connect: failed ec=%d.\r\n", net_errno);
+         closesocket (fd);
- leave:
+         return use_proxy? WPTERR_WINSOCK_PROXY : WPTERR_WINSOCK_CONNECT;
-     closesocket (conn_fd);
+     }
-     free_if_alloc (request);
-     return rc;
+     if (proxy.proto == PROXY_PROTO_SOCKS5) {
- } /* kserver_sendkey */
+         /* XXX: finish code and provide errors constants. */
+         rc = socks_handshake (&proxy, fd, hostname, port);
+         if (rc) {
- int
+             closesocket (fd);
- kserver_search_init (const char * hostname, u16 port, const char * keyid, int * conn_fd)
+             return WPTERR_GENERAL;
- {
+         }
-     int rc, sock_fd;
+     }
-     int n=0;
-     char * request = NULL;
+     if (conn_fd)
+         *conn_fd = fd;
-     rc = kserver_connect (hostname, port, &sock_fd);
+     WSASetLastError (0);
-     if (rc) {
+     return 0;
-         *conn_fd = 0;
+ }
-         goto leave;
-     }
+ /* Check if the URL needs to be encoded or not. */
-     n=300;
+ static bool
-     request = new char[n+1];
+ URL_must_encoded (const char *url)
-     if (!request)
+ {
-         BUG (0);
+     if (strchr (url, '.') || strchr (url, '@') || strchr (url, ' '))
+         return true;
-     if (proxy.host && proxy.user) {
+     return false;
-         _snprintf (request, n,
+ }
-             "GET http://%s:%d/pks/lookup?op=index&search=%s HTTP/1.0\r\n"
-             "Proxy-Authorization: Basic %s\r\n\r\n",
-             skip_type_prefix (hostname), port, keyid, proxy.base64_user);
+ /* Perform URL encoding of the given data. */
-     }
+ static char*
-     else if (proxy.host) {
+ URL_encode (const char *url, DWORD ulen, DWORD *ret_nlen)
-         _snprintf (request, n,
+ {
-             "GET http://%s:%d/pks/lookup?op=index&search=%s HTTP/1.0\r\n\r\n",
+     gpgme_data_t hd;
-             skip_type_prefix (hostname), port, keyid);
+     char numbuf[5], *p;
-     }
+     size_t i, nlen;
-     else {
-         _snprintf (request, n,
+     if (gpgme_data_new (&hd))
-                    "GET /pks/lookup?op=index&search=%s HTTP/1.0\r\n\r\n", keyid);
+         BUG (0);
-     }
+     for (i=0; i < ulen; i++) {
+         if (isalnum (url[i]) || url[i] == '-')
-     log_debug ("kserver_search_init:\r\n%s\r\n", request);
+             gpg_data_putc (hd, url[i]);
+         else if (url[i] == ' ')
-     if (sock_write (sock_fd, request, strlen (request)) == SOCKET_ERROR) {
+             gpg_data_putc (hd, '+');
-         rc = WPTERR_GENERAL;
+         else {
-         goto leave;
+             sprintf (numbuf, "%%%02X", url[i]);
-     }
+             gpgme_data_write (hd, numbuf, strlen (numbuf));
+         }
-     *conn_fd = sock_fd;
+     }
- leave:
+     p = data_release_and_get_mem (hd, &nlen);
-     free_if_alloc (request);
+     if (ret_nlen)
-     return rc;
+         *ret_nlen = nlen;
- } /* kserver_search_init */
+     return p;
+ }
- int
- kserver_search_chkresp (int fd)
+ /* Format a request for the given keyid (send). */
- {
+ static char*
-     char buf[128];
+ kserver_send_request (const char *hostname, WORD port,
-     int n=0;
+                       const char *pubkey, DWORD octets)
+ {
-     /* parse response 'HTTP/1.0 500 OK' */
+     const char *fmt;
-     if (sock_getline (fd, buf, 127, &n))
+     char *request;
-         return WPTERR_KEYSERVER_NOTFOUND;
+     char *enc_pubkey;
+     DWORD enc_octets;
-     log_debug ("kserver_search_chkpresp: %s\r\n", buf);
+     int reqlen;
-     if (strncmp (buf, "HTTP/1.", 7))
-         return WPTERR_KEYSERVER_NOTFOUND;
+     log_debug ("kserver_send_request: %s:%d\r\n", hostname, port);
-     if (strncmp (buf+(8+1), "200", 3))
-         return WPTERR_KEYSERVER_NOTFOUND;
+     if (!port)
-     return 0;
+         port = HKP_PORT;
- } /* kserver_search_chkresp */
+     enc_pubkey = URL_encode (pubkey, octets, &enc_octets);
+     reqlen = 2*strlen (hostname) + 2*32/*port*/ + enc_octets + 32 /*len*/ + 1;
- int
+     if (proxy.user && proxy.proto == PROXY_PROTO_HTTP) {
- kserver_search (int fd, keyserver_key * key)
+         fmt = "POST http://%s:%d/pks/add HTTP/1.0\r\n"
- {
+               "Referer: \r\n"
-     char buf[1024], *p;
+               "User-Agent: WinPT/W32\r\n"
-     int uidlen, nbytes, pos = 0;
+               "Host: %s:%d\r\n"
+               "Proxy-Authorization: Basic %s\r\n"
-     log_debug ("keyserver_search:\n");
+               "Content-type: application/x-www-form-urlencoded\r\n"
+               "Content-length: %d\r\n"
-     if (sock_getline (fd, buf, sizeof (buf) - 1, &nbytes))
+               "\r\n"
-         return WPTERR_GENERAL;
+               "keytext=%s"
+               "\r\n";
-     log_debug ("%s\n", buf);
+         reqlen += strlen (fmt) + strlen (proxy.base64_user) + 1;
+         request = safe_alloc (reqlen+1);
-     if (!strncmp (buf, "pub", 3)) {
+         _snprintf (request, reqlen, fmt,
-         int revoked = strstr (buf, "KEY REVOKED") != NULL? 1 : 0;
+                    skip_type_prefix (hostname), port, hostname, port,
-         key->bits = atol (buf+3);
+                    proxy.base64_user, enc_octets+9, enc_pubkey);
-         p = strchr (buf, '>');
+     }
-         if (!p)
+     else {
-             goto fail;
+         fmt = "POST /pks/add HTTP/1.0\r\n"
-         pos = p - buf + 1;
+               "Referer: \r\n"
-         memcpy (key->keyid, buf + pos, 8);
+               "User-Agent: WinPT/W32\r\n"
-         key->keyid[8] = '\0';
+               "Host: %s:%d\r\n"
-         p = strstr (buf, "</a>");
+               "Content-type: application/x-www-form-urlencoded\r\n"
-         if (!p)
+               "Content-length: %d\r\n"
-             goto fail;
+               "\r\n"
-         pos = p - buf + 5;
+               "keytext=%s"
-         memcpy (key->date, buf + pos, 10);
+               "\r\n";
-         key->date[10] = '\0';
+         reqlen += strlen (fmt)+1;
-         if (revoked) {
+         request = safe_alloc (reqlen+1);
-             strcpy (key->uid, "KEY REVOKED: not checked");
+         _snprintf (request, reqlen, fmt,
-             return 0;
+                    skip_type_prefix (hostname), port,
-         }
+                    enc_octets+9, enc_pubkey);
-         pos += 10;
+     }
-         p = buf + pos + 1;
-         while (p && *p != '>')
+     free_if_alloc (enc_pubkey);
-             p++;
+     log_debug ("request:\r\n%s\r\n", request);
-         p++;
+     return request;
-         uidlen = strlen (p) - 10;
+ }
-         memcpy (key->uid, p, uidlen);
-         key->uid[uidlen] = '\0';
-         strcat (key->uid, ">");
+ /* Interface for receiving a public key. */
-         p = strchr (key->uid, '&');
+ int
-         if (p) {
+ kserver_recvkey (const char *hostname, WORD port, const char *keyid,
-             key->uid[(p-key->uid)] = '<';
+                  char **r_key, size_t *r_keylen)
-             memmove (key->uid+(p-key->uid)+1, key->uid+(p-key->uid)+4, strlen (key->uid)-3);
+ {
-         }
+     const char *fmt;
-         return 0;
+     char *request = NULL;
-     }
+     int conn_fd;
+     int rc, reqlen;
- fail:
-     key->bits = 0;
+     if (!port)
-     memset (key, 0, sizeof *key);
+         port = HKP_PORT;
-     return 0;
+     hkp_err = 0; /* reset */
- } /* kserver_search */
+     rc = kserver_connect (hostname, port, &conn_fd);
+     if (rc)
+         goto leave;
- static int
- add_node( keyserver_cfgfile *cfg, const char *entry )
+     reqlen = strlen (hostname)+32+strlen (keyid)+1;
- {
+     if (proxy.host && proxy.user && proxy.proto == PROXY_PROTO_HTTP) {
-     keyserver_node *node;
+         fmt = "GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n"
-     char *p = NULL;
+               "Proxy-Authorization: Basic %s\r\n\r\n";
+         reqlen =+ strlen (fmt) + strlen (proxy.base64_user)+1;
-     p = strchr( entry, '=' );
+         request = safe_alloc (reqlen+1);
-     if( p == NULL )
+         _snprintf (request, reqlen, fmt, skip_type_prefix (hostname), port,
-         return WPTERR_GENERAL;
+                    keyid, proxy.base64_user);
-     node = new keyserver_node;
+     }
-     if( !node )
+     else if (proxy.host && proxy.proto == PROXY_PROTO_HTTP) {
-         BUG( NULL );
+         fmt = "GET http://%s:%d/pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n";
+         reqlen += strlen (fmt)+1;
-     memset( node, 0, sizeof *node );
+         request = safe_alloc (reqlen+1);
-     node->used = 1;
+         _snprintf (request, reqlen, fmt, skip_type_prefix (hostname),
+                                          port, keyid);
-     node->host.used = 1;
+     }
-     node->host.proto = proto_from_URL( entry );
+     else {
-     memcpy( node->host.name, entry+7, p-entry-7 );
+         fmt = "GET /pks/lookup?op=get&search=%s HTTP/1.0\r\n\r\n";
-     node->next = cfg->list;
+         reqlen += strlen (fmt)+1;
-     cfg->list = node;
+         request = safe_alloc (reqlen+1);
+         _snprintf (request, reqlen, fmt, keyid);
-     return 0;
+     }
- } /* add_node */
+     log_debug ("request:\r\n%s\r\n", request);
- void
+     rc = sock_write (conn_fd, request, strlen (request));
- kserver_change_proxy( keyserver_proxy_ctx *ctx )
+     if (rc == SOCKET_ERROR) {
- {
+         rc = WPTERR_WINSOCK_RECVKEY;
-     proxy.port = ctx->port;
+         goto leave;
-     free_if_alloc (proxy.host);
+     }
-     proxy.host = ctx->host? m_strdup( ctx->host ) : NULL;
-     free_if_alloc( proxy.pass );
+     rc = sock_read_ext (conn_fd, r_key, r_keylen);
-     proxy.pass = ctx->pass? m_strdup( ctx->pass ) : NULL;
+     if (rc == SOCKET_ERROR) {
-     free_if_alloc( proxy.user );
+         rc = WPTERR_WINSOCK_RECVKEY;
-     proxy.user = ctx->user? m_strdup( ctx->user ) : NULL;
+         goto leave;
-     set_reg_proxy_prefs( proxy.host, proxy.port, proxy.user, proxy.pass );
+     }
- } /* kserver_change_proxy */
+     log_debug ("response:\r\n%s\r\n", *r_key);
+     rc = check_hkp_response (*r_key, 1);
- int
+     if (rc)
- kserver_read_config( const char *fname, keyserver_cfgfile **ret_cfg )
+         goto leave;
- {
-     FILE *fp;
+     WSASetLastError (0);
-     keyserver_cfgfile *cfg;
-     char buf[256];
+ leave:
-     int rc = 0;
+     closesocket (conn_fd);
+     free_if_alloc (request);
-     *ret_cfg = NULL;
+     return rc;
-     fp = fopen( fname, "rb" );
+ }
-     if( fp == NULL )
-         return WPTERR_FILE_OPEN;
+ /* Interface to send a public key. */
-     cfg = new keyserver_cfgfile;
+ int
-     if ( !cfg )
+ kserver_sendkey (const char *hostname, WORD port,
-         BUG( NULL );
+                  const char *pubkey, size_t len)
-     memset( cfg, 0, sizeof *cfg );
+ {
+     char *request = NULL;
-     while ( !feof( fp ) ) {
+     char log[2048] = {0};
-         if ( fgets( buf, sizeof(buf)-1, fp ) == NULL )
+     int conn_fd, n;
-             break;
+     int rc;
-         if ( *buf == '\r' || *buf == '\n' || *buf == '#' )
-             continue;
+     hkp_err = 0; /* reset */
-         buf[strlen(buf) -2] = '\0';
+     rc = kserver_connect (hostname, port, &conn_fd);
-         if ( !strncmp( buf, "use_proxy=", 10 ) ) {
+     if (rc)
-             char *p = strchr(buf, ':');
+         goto leave;
-             if (!p)
-                 continue;
+     request = kserver_send_request (hostname, port, pubkey, len);
-             cfg->proxy.port = atol( buf+(p-buf+1) );
+     rc = sock_write (conn_fd, request, strlen (request));
-             buf[p-buf] = '\0';
+     if (rc == SOCKET_ERROR) {
-             cfg->proxy.host = m_strdup( buf+10 );
+         rc = WPTERR_WINSOCK_SENDKEY;
-         }
+         goto leave;
-         else if ( !strncmp( buf, "proxy_user=", 11 ) )
+     }
-             cfg->proxy.user = m_strdup( buf+11 );
-         else if ( !strncmp( buf, "proxy_pass=", 11 ) )
+     rc = sock_read (conn_fd, log, DIM (log)-1, &n);
-             cfg->proxy.pass = m_strdup( buf+11 );
+     if (rc == SOCKET_ERROR) {
-         if ( !strncmp( buf, "http://", 7 )
+         rc = WPTERR_WINSOCK_SENDKEY;
-             || !strncmp( buf, "hkp://", 6 )
+         goto leave;
-             || !strncmp( buf, "ldap://", 7 ) ) {
+     }
-             add_node( cfg, buf );
-             cfg->nlist++;
+     log_debug ("kserver_sendkey: read %d bytes\r\n%s\r\n", n, log);
-         }
+     rc = check_hkp_response (log, 0);
-     }
+     if (rc)
+         goto leave;
-     fclose( fp );
-     *ret_cfg = cfg;
+     WSASetLastError (0);
-     return rc;
+ leave:
- } /* kserver_read_config */
+     closesocket (conn_fd);
+     free_if_alloc (request);
+     return rc;
- int
+ }
- kserver_write_config( const char * fname, keyserver_cfgfile * cfg )
- {
+ /* Check keyserver response. */
-     return 0;
+ static int
- }
+ kserver_search_chkresp (int fd)
+ {
+     char buf[128];
- void
+     int n=0;
- kserver_cfgfile_release( keyserver_cfgfile *cfg )
- {
+     /* parse response 'HTTP/1.0 500 OK' */
-     keyserver_node *k, *k2;
+     if (sock_getline (fd, buf, DIM (buf)-1, &n))
+         return WPTERR_KEYSERVER_NOTFOUND;
-     proxy_release( &cfg->proxy );
-     for( k = cfg->list; cfg->nlist--; k = k2 ) {
+     log_debug ("kserver_search_chkpresp: %s\r\n", buf);
-         k2 = k->next;
+     if (strncmp (buf, "HTTP/1.", 7))
-         free_if_alloc( k );
+         return WPTERR_KEYSERVER_NOTFOUND;
-     }
+     if (strncmp (buf+(8+1), "200", 3))
-     free_if_alloc( cfg );
+         return WPTERR_KEYSERVER_NOTFOUND;
- } /* kserver_cfgfile_release */
+     return 0;
+ }
- void
- proxy_release( keyserver_proxy_ctx *ctx )
+ /* End the keyserver search procedure. */
- {
+ void
-     free_if_alloc( ctx->host );
+ kserver_search_end (int conn_fd)
-     free_if_alloc( ctx->pass );
+ {
-     free_if_alloc( ctx->user );
+     log_debug ("kserver_search_end: fd=%d\r\n", conn_fd);
- } /* proxy_release */
+     closesocket (conn_fd);
+ }
- int
- ldap_recvkey (const char * host, const char * keyid, char * key, int maxkeylen)
+ /* Extract the amount of keys from the info record. */
- {
+ static size_t
-     const char *s;
+ count_keys_in_response (char *buf)
-     char *ksprg = NULL, *p = NULL;
+ {
-     char temp[512], outf[512];
+     char *p;
-     FILE * inp;
+     int recno = 0;
-     int rc, start_key = 0;
+     size_t n = 0;
-     STARTUPINFO si;
-     PROCESS_INFORMATION pi;
+     /* info:1:4 */
+     if (strncmp (buf, "info", 4))
-     p = get_gnupg_path ();
+         return 0;
-     ksprg = new char[strlen (p) + 1 + 128];
+     p = strtok (buf, ":");
-     if (!ksprg)
+     while (p != NULL) {
-         BUG (0);
+         recno++;
-     strcpy (ksprg, p);
+         if (recno == 3)
-     strcat (ksprg, "\\");
+             n = atoi (p);
-     strcat (ksprg, "gpgkeys_ldap.exe");
+         p = strtok (NULL, ":");
-     free_if_alloc (p);
+     }
-     if (file_exist_check (ksprg)) {
+     return n;
-         log_box ( "LDAP Keyserver Plugin", MB_ERR, "Could not find LDAP keyserver module!");
+ }
-         rc = -1;
-         goto leave;
-     }
+ /* Start the keyserver search.
-     GetTempPath (sizeof (temp)-1, temp);
+    Connect to host @hostname and port @port.
-     strcpy (outf, temp);
+    The pattern are given in @pattern.
-     strcat (outf, keyid);
+    The socket is returned in @conn_fd and @nkeys contains
-     strcat (outf, ".out");
+    the amount of keys which were found. */
-     strcat (temp, keyid);
+ int
-     inp = fopen (temp, "w+b");
+ kserver_search_begin (const char *hostname, WORD port,
-     if( !inp ) {
+                       const char *pattern, int *conn_fd, size_t *nkeys)
-         log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", temp,
+ {
-                  winpt_strerror (WPTERR_FILE_OPEN));
+     const char *fmt;
-         rc = -1;
+     char *request = NULL;
-         goto leave;
+     char *enc_patt = NULL;
-     }
+     char status[128];
-     fprintf (inp,
+     int rc, sock_fd;
-         "VERSION 0\n"
+     int reqlen;
-         "HOST %s\n"
-         "OPTION verbose\n"
+     *conn_fd = 0;
-         "COMMAND GET\n"
-         "\n"
+     rc = kserver_connect (hostname, port, &sock_fd);
-         "%s\n", host? skip_type_prefix (host): "64.94.85.200", keyid);
+     if (rc)
-     fclose (inp);
+         goto leave;
-     memset (&si, 0, sizeof (si));
+     enc_patt = URL_encode (pattern, strlen (pattern), NULL);
-     si.cb = sizeof (si);
+     reqlen = strlen (enc_patt) + strlen (hostname) + 32 + 1;
-     si.dwFlags = STARTF_USESHOWWINDOW;
-     si.wShowWindow = SW_HIDE;
+     if (proxy.host && proxy.user && proxy.proto == PROXY_PROTO_HTTP) {
-     memset (&pi, 0, sizeof (pi));
+         fmt = "GET http://%s:%d/pks/lookup?options=mr&op=index&search=%s HTTP/1.0\r\n"
-     p = new char[strlen (ksprg) + strlen (temp) + strlen (outf) + 32];
+               "Proxy-Authorization: Basic %s\r\n\r\n";
-     sprintf (p, "%s -o %s %s", ksprg, outf, temp);
+         reqlen += strlen (proxy.base64_user) + strlen (fmt) + 1;
-     rc = CreateProcess (NULL, p, NULL, NULL, FALSE, 0, NULL, NULL, &si, &pi);
+         request = safe_alloc (reqlen+1);
-     if (!rc) {
+         _snprintf (request, reqlen, fmt, skip_type_prefix (hostname), port,
-         log_box ("LDAP Keyserver Plugin", MB_ERR, "Could not spawn process");
+                    enc_patt, proxy.base64_user);
-         rc = -1;
+     }
-         goto leave;
+     else if (proxy.host && proxy.proto == PROXY_PROTO_HTTP) {
-     }
+         fmt = "GET http://%s:%d/pks/lookup?options=mr&op=index&search=%s HTTP/1.0\r\n\r\n";
-     CloseHandle (pi.hThread);
+         reqlen += strlen (fmt)+1;
-     WaitForSingleObject (pi.hProcess, INFINITE);
+         request = safe_alloc (reqlen+1);
-     CloseHandle (pi.hProcess);
+         _snprintf (request, reqlen, skip_type_prefix (hostname), port,
+                             enc_patt);
-     inp = fopen (outf, "rb");
+     }
-     if (!inp) {
+     else {
-         log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", outf,
+         fmt = "GET /pks/lookup?options=mr&op=index&search=%s HTTP/1.0\r\n\r\n";
-                  winpt_strerror (WPTERR_FILE_OPEN));
+         reqlen += strlen (fmt)+1;
-         rc = -1;
+         request = safe_alloc (reqlen+1);
-         goto leave;
+         _snprintf (request, reqlen, fmt, enc_patt);
      }
-     memset (key, 0, maxkeylen);
-     while( !feof( inp ) ) {
+     log_debug ("kserver_search_begin:\r\n%s\r\n", request);
-         s = fgets( temp, sizeof (temp)-1, inp );
+     if (sock_write (sock_fd, request, strlen (request)) == SOCKET_ERROR) {
-         if( !s )
+         rc = WPTERR_GENERAL;
-             break;
+         goto leave;
-         if( !start_key && strstr( s, "KEY" ) && strstr( s, "BEGIN" ) ) {
+     }
-             start_key = 1;
-             continue;
+     rc = kserver_search_chkresp (sock_fd);
-         }
+     if (rc) {
-         if( !start_key )
+         closesocket (sock_fd);
-             continue;
+         sock_fd = 0;
-         strcat( key, temp );
+         goto leave;
-         maxkeylen -= strlen( temp );
+     }
-         if( maxkeylen < 0 || (strstr( s, "KEY" ) && strstr( s, "END" )) )
-             break;
+     /* Skip all lines until we reach the "info:" record. */
-     }
+     for (;;) {
-     fclose( inp );
+         if (sock_getline (sock_fd, status, DIM (status)-1, &reqlen)) {
+             log_debug ("kserver_search_begin: retrieving status line failed.\r\n");
- leave:
+             closesocket (sock_fd);
-     if( !strlen( key ) )
+             sock_fd = 0;
-         rc = WPTERR_WINSOCK_RECVKEY;
+             rc = WPTERR_GENERAL;
-     free_if_alloc( p );
+             break;
-     free_if_alloc( ksprg );
+         }
-     return rc;
+         if (!strncmp (status, "info:", 5))
- } /* ldap_recvkey */
+             break;
+     }
- static int
+     if (!rc)
- finger_readline (int fd, char * buf, int nbytes)
+         *nkeys = count_keys_in_response (status);
- {
+     *conn_fd = sock_fd;
-     char c = 0;
-     int n, pos = 0;
+ leave:
+     free_if_alloc (request);
-     while (nbytes > 0) {
+     free_if_alloc (enc_patt);
-         n = recv (fd, &c, 1, 0);
+     return rc;
-         if (n <= 0)
+ }
-             break;
-         if (c == '\n')
-             break;
+ /* Parse a single pub record returned by the keyserver. */
-         buf[pos++] = c;
+ static void
-         nbytes--;
+ parse_pub_record (keyserver_key_s *key, char *buf)
-     }
+ {
-     if (nbytes > 0)
+     enum pub_rec_t {ID=1, KEYID, ALGO, SIZE, CREATE, EXPIRE};
-         buf[pos++] = '\0';
+     char *p;
-     if (n <= 0)
+     int recno = 0;
-         pos = n;
+     int off = 0;
-     return pos;
- }
+     /* pub:BF3DF9B4:17:1024:925411133:: */
+     p = strtok (buf, ":");
+     while (p != NULL) {
- int
+         recno++;
- finger_recvkey (const char * host, const char * user, char * key, int maxkeylen)
+         switch (recno) {
- {
+         case ID:
-     struct hostent * hp;
+             break;
-     struct sockaddr_in saddr;
-     char buf[128];
+         case KEYID:
-     int fd, nread;
+             /* If for any reason the returned record actually contains
-     int start_key = 0;
+                a fingerprint instead of a key ID, we truncate the fpr. */
-     int rc=0;
+             off = strlen (p) == 40? 32 : 0;
+             free_if_alloc (key->keyid);
-     fd = socket (PF_INET, SOCK_STREAM, 0);
+             key->keyid = m_strdup (p+off);
-     if (fd == -1)
+             break;
-         return WPTERR_WINSOCK_SOCKET;
-     hp = gethostbyname (skip_type_prefix (host));
+         case ALGO:
-     if (!hp) {
+             key->algo = atoi (p);
-         closesocket (fd);
+             break;
-         return WPTERR_WINSOCK_RESOLVE;
-     }
+         case SIZE:
+             key->bits = atoi (p);
-     memset (&saddr, 0, sizeof (saddr));
+             break;
-     saddr.sin_family = AF_INET;
-     saddr.sin_port = htons (FINGER_PORT);
+         case CREATE:
-     saddr.sin_addr = *(struct in_addr *)hp->h_addr;
+             key->creation = strtoul (p, NULL, 10);
-     if (connect (fd, (struct sockaddr *)&saddr, sizeof (saddr))) {
+             break;
-         closesocket (fd);
-         return WPTERR_WINSOCK_CONNECT;
+         case EXPIRE:
-     }
+             key->expires = strtoul (p, NULL, 10);
-     send (fd, user, strlen (user), 0);
+             break;
-     send (fd, "\r\n", 2, 0);
+         }
+         p = strtok (NULL, ":");
-     memset (key, 0, maxkeylen);
+     }
-     while (maxkeylen > 0) {
+ }
-         nread = finger_readline (fd, buf, sizeof (buf)-1);
-         if (nread <= 0)
-             break;
+ /* Parse a single user id returned by the keyserver. */
-         strcat (buf, "\n");
+ static void
-         if (strstr (buf, "BEGIN PGP PUBLIC KEY BLOCK")) {
+ parse_uid_record (keyserver_key_s *key, char *buf)
-             strcat (key, buf);
+ {
-             start_key = 1;
+     enum uid_rec_t {ID=1, UID, CREATE, EXPIRE};
-             maxkeylen -= nread;
+     keyserver_uid_s *u, *n;
-         }
+     char *p, *raw;
-         else if (strstr (buf, "END PGP PUBLIC KEY BLOCK" ) && start_key) {
+     int recno = 0;
-             strcat (key, buf);
-             start_key--;
+     /* uid:Timo Schulz <[email protected]>:1138440360:: */
-             maxkeylen -= nread;
+     u = new keyserver_uid_s;
-             break;
+     memset (u, 0, sizeof *u);
-         }
-         else if (start_key) {
+     p = strtok (buf, ":");
-             strcat (key, buf);
+     while (p != NULL) {
-             maxkeylen -= nread;
+         recno++;
-         }
-     }
+         switch (recno) {
-     closesocket (fd);
+         case ID:
-     if (start_key != 0)
+             break;
-         rc = WPTERR_WINSOCK_RECVKEY;
-     return rc;
+         case UID:
- }
+             unhexify_buffer (p, &raw);
+             u->uid = utf8_to_native (raw);
+             free_if_alloc (raw);
- int
+             break;
- check_IP_or_hostname (const char *name)
- {
+         case CREATE:
-     const char *not_allowed = "=!�$%&@#*~\\/}][{<>|,;:'";
+             u->creation = strtoul (p, NULL, 10);
-     size_t i, j;
+             break;
-     for (i=0; i < strlen (name); i++) {
+         case EXPIRE:
-         for (j =0; j < strlen (not_allowed); j++) {
+             u->expires = strtoul (p, NULL, 10);
-             if (name[i] == not_allowed[j])
+             break;
-                 return -1;
+         }
-         }
-     }
+         p = strtok (NULL, ":");
-     return 0;
+     }
- }
+     if (!key->uids)
+         key->uids = u;
+     else {
+         for (n = key->uids; n->next; n=n->next)
+             ;
+         n->next = u;
+     }
+ }
+ /* Peek the next 3 bytes to check if the next line
+    would be a new "pub" record. In this case, return
+    -1 as an EOF indication, 0 otherwise. */
+ static int
+ is_key_eof (int fd)
+ {
+     char buf[64];
+     int n;
+     n = recv (fd, buf, 3, MSG_PEEK);
+     if (n < 3 || strncmp (buf, "pub", 3))
+         return 0;
+     return -1;
+ }
+ /* Return the next key from the search response. */
+ int
+ kserver_search_next (int fd, keyserver_key_s **r_key)
+ {
+     keyserver_uid_s *uid, *u = NULL;
+     keyserver_key_s *key;
+     char buf[512];
+     int n = 0;
+     long max = 0;
+     log_debug ("keyserver_search_next:\r\n");
+     *r_key = NULL;
+     key = new keyserver_key_s;
+     memset (key, 0, sizeof *key);
+     for (;;) {
+         if (sock_getline (fd, buf, DIM (buf)-1, &n))
+             break;
+         /*log_debug ("record: '%s'\r\n", buf); */
+         if (!strncmp (buf, "pub", 3))
+             parse_pub_record (key, buf);
+         else
+             parse_uid_record (key, buf);
+         if (is_key_eof (fd))
+             break;
+     }
+     /* the uid with the newest self sig is used as the
+        primary user id. */
+     for (uid = key->uids; uid; uid = uid->next) {
+         if (uid->creation > max) {
+             max = uid->creation;
+             u = uid;
+         }
+     }
+     key->main_uid = u? u : key->uids;
+     *r_key = key;
+     return 0;
+ }
+ /* Release the keyserver key @key and all its elements. */
+ void
+ kserver_release_key (keyserver_key_s *key)
+ {
+     keyserver_uid_s *u;
+     while (key->uids) {
+         u = key->uids->next;
+         free_if_alloc (key->uids->uid);
+         free_if_alloc (key->uids);
+         key->uids = u;
+     }
+     free_if_alloc (key->keyid);
+     free_if_alloc (key);
+ }
+ /* Release mbmers in the proxy context @ctx. */
+ void
+ kserver_proxy_release (keyserver_proxy_t ctx)
+ {
+     free_if_alloc (ctx->host);
+     free_if_alloc (ctx->pass);
+     free_if_alloc (ctx->user);
+     ctx->port = ctx->proto = 0;
+ }
+ /* Spawn a process given by @cmdl. */
+ static int
+ spawn_application (char *cmdl)
+ {
+     STARTUPINFO si;
+     PROCESS_INFORMATION pi;
+     int rc = 0;
+     memset (&si, 0, sizeof (si));
+     si.cb = sizeof (si);
+     si.dwFlags = STARTF_USESHOWWINDOW;
+     si.wShowWindow = SW_HIDE;
+     memset (&pi, 0, sizeof (pi));
+     if (!CreateProcess (NULL, cmdl, NULL, NULL, FALSE, 0,
+                         NULL, NULL, &si, &pi)) {
+         log_box ("Keyserver Plugin", MB_ERR, "Could not spawn helper process");
+         rc = -1;
+     }
+     CloseHandle (pi.hThread);
+     WaitForSingleObject (pi.hProcess, INFINITE);
+     CloseHandle (pi.hProcess);
+     return rc;
+ }
+ static FILE*
+ do_spawn_ldap_helper (const char *host, const char *keyid)
+ {
+     FILE *fp = NULL;
+     StringBuffer cmd;
+     char *sep, *p, *ksprg;
+     char outf[256], inf[256];
+     size_t n;
+     p = get_gnupg_prog ();
+     n = strlen (p) + 1 + 128;
+     ksprg = safe_alloc (n+1);
+     if (!ksprg)
+         BUG (0);
+     sep = strrchr (p, '\\');
+     if (sep != NULL)
+         p[(sep-p)] = 0;
+     _snprintf (ksprg, n, "%s\\gpgkeys_ldap.exe", p);
+     free_if_alloc (p);
+     if (file_exist_check (ksprg)) {
+         log_box ("LDAP Keyserver Plugin", MB_ERR,
+                  "%s: could not find LDAP keyserver module!", ksprg);
+         fp = NULL;
+         goto leave;
+     }
+     get_temp_name (outf, DIM (outf)-1, keyid);
+     get_temp_name (inf, DIM (inf)-1, NULL);
+     fp = fopen (inf, "w+b");
+     if (!fp) {
+         log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", inf,
+                  winpt_strerror (WPTERR_FILE_OPEN));
+         goto leave;
+     }
+     fprintf (fp,
+         "VERSION 1\n"
+         "PROGRAM %d.%d.%d\n"
+         "SCHEME ldap\n"
+         "HOST %s\n"
+         "COMMAND GET\n"
+         "\n"
+         "%s\n",
+         gpgver[0], gpgver[1], gpgver[2],
+         host? skip_type_prefix (host): "64.94.85.200", keyid);
+     fclose (fp);
+     cmd = ksprg;
+     cmd = cmd + " -o " + outf + " " + inf;
+     if (spawn_application ((char*)cmd.getBuffer ())) {
+         fp = NULL;
+         goto leave;
+     }
+     fp = fopen (outf, "rb");
+     if (!fp)
+         log_box ("LDAP Keyserver Plugin", MB_ERR, "%s: %s", outf,
+                  winpt_strerror (WPTERR_FILE_OPEN));
+ leave:
+     DeleteFile (inf);
+     DeleteFile (outf);
+     free_if_alloc (ksprg);
+     return fp;
+ }
+ /* Receive an key via LDAP from host @host with the keyid @keyid.
+    @key contains the key on success. */
+ int
+ ldap_recvkey (const char *host, const char *keyid,
+               char **r_key, size_t *r_keylen)
+ {
+     gpgme_data_t raw;
+     FILE *fp;
+     const char *s;
+     char buf[512];
+     int start_key = 0, failed = 0;
+     int rc = 0;
+     fp = do_spawn_ldap_helper (host, keyid);
+     if (!fp)
+         return WPTERR_GENERAL;
+     if (gpgme_data_new (&raw))
+         BUG (0);
+     while (!feof (fp)) {
+         s = fgets (buf, DIM (buf)-1, fp);
+         if (!s)
+             break;
+         if (strstr (s, "KEY") && strstr (s, "FAILED")) {
+             failed = 1;
+             break;
+         }
+         if (!start_key && strstr (s, "KEY") && strstr (s, "BEGIN")) {
+             start_key = 1;
+             continue;
+         }
+         if (!start_key)
+             continue;
+         gpgme_data_write (raw, buf, strlen (buf));
+         if (strstr (s, "KEY") && strstr (s, "END"))
+             break;
+     }
+     fclose (fp);
+     if (failed)
+         rc = WPTERR_WINSOCK_RECVKEY;
+     *r_key = data_release_and_get_mem (raw, r_keylen);
+     return rc;
+ }
+ /* Receive an key via FINGER from host @host with the user @user.
+    On success @key contains the key. */
+ int
+ finger_recvkey (const char *host, const char *user,
+                 char **r_key, size_t *r_keylen)
+ {
+     gpgme_data_t raw;
+     char buf[256+1];
+     int fd, nread;
+     int start_key = 0;
+     int rc=0;
+     rc = kserver_connect (host, FINGER_PORT, &fd);
+     if (rc)
+         return rc;
+     sock_write (fd, user, strlen (user));
+     sock_write (fd, "\r\n", 2);
+     if (gpgme_data_new (&raw))
+         return WPTERR_WINSOCK_RECVKEY;
+     for (;;) {
+         if (sock_getline (fd, buf, DIM (buf)-1, &nread))
+             break;
+         strcat (buf, "\n");
+         if (strstr (buf, "BEGIN PGP PUBLIC KEY BLOCK")) {
+             gpgme_data_write (raw, buf, nread);
+             start_key = 1;
+         }
+         else if (strstr (buf, "END PGP PUBLIC KEY BLOCK" ) && start_key) {
+             gpgme_data_write (raw, buf, nread);
+             start_key--;
+             break;
+         }
+         else if (start_key)
+             gpgme_data_write (raw, buf, nread);
+     }
+     closesocket (fd);
+     if (start_key != 0)
+         rc = WPTERR_WINSOCK_RECVKEY;
+     *r_key = data_release_and_get_mem (raw, r_keylen);
+     return rc;
+ }
+ /* Check if the given name @name is a valid inernet address
+    which means an dotted IP or a valid DNS name.
+    Return value: 0 on success. */
+ int
+ check_inet_address (const char *addr)
+ {
+     const char *not_allowed = "=!�$%&@#*~\\/}][{<>|,;:'";
+     size_t i;
+     for (i=0; i < strlen (addr); i++) {
+         if (strchr (not_allowed, addr[i]))
+             return -1;
+     }
+     return 0;
+ }
+ /* Split the URL @r_keyserver into the host and the port
+    part if possible. */
+ gpgme_error_t
+ parse_keyserver_url (char **r_keyserver, unsigned short *r_port)
+ {
+     char *p;
+     char *url = *r_keyserver;
+     int off = 0;
+     /* no port is given so use the default port. */
+     p = strrchr (url, ':');
+     if (p == strchr (url, ':')) {
+         int port = port_from_proto (proto_from_URL (url));
+         if (!port)
+             port = HKP_PORT;
+         *r_port = port;
+         return 0;
+     }
+     if (url[(p-url)-1] == '/') /* remove / in .de/:11371 */
+         off = 1;
+     *r_keyserver = substr (url, 0, (p-url)-off);
+     *r_port = atoi (url+(p-url)+1);
+     free_if_alloc (url);
+     return 0;
+ }

 Legend:



Removed from v.32
 


changed lines


 
Added in v.278
 Legend:



Removed from v.32
 


changed lines


 
Added in v.278
-Removed from v.32
+Added in v.278

[email protected]	ViewVC Help
Powered by ViewVC 1.1.26