1 |
/* wptPassphraseCB.cpp - GPGME Passphrase Callback |
/* wptPassphraseCB.cpp - GPGME Passphrase Callback |
2 |
* Copyright (C) 2001, 2002, 2003, 2005 Timo Schulz |
* Copyright (C) 2001, 2002-2006 Timo Schulz |
3 |
* Copyright (C) 2005 g10 Code GmbH |
* Copyright (C) 2005 g10 Code GmbH |
4 |
* |
* |
5 |
* This file is part of WinPT. |
* This file is part of WinPT. |
6 |
* |
* |
7 |
* WinPT is free software; you can redistribute it and/or |
* WinPT is free software; you can redistribute it and/or |
8 |
* modify it under the terms of the GNU General Public License |
* modify it under the terms of the GNU General Public License |
9 |
* as published by the Free Software Foundation; either version 2 |
* as published by the Free Software Foundation; either version 2 |
10 |
* of the License, or (at your option) any later version. |
* of the License, or (at your option) any later version. |
11 |
* |
* |
12 |
* WinPT is distributed in the hope that it will be useful, |
* WinPT is distributed in the hope that it will be useful, |
13 |
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
14 |
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
15 |
* General Public License for more details. |
* General Public License for more details. |
16 |
* |
*/ |
17 |
* You should have received a copy of the GNU General Public License |
#ifdef HAVE_CONFIG_H |
18 |
* along with WinPT; if not, write to the Free Software Foundation, |
#include <config.h> |
19 |
* Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
#endif |
20 |
*/ |
|
21 |
|
#include <windows.h> |
22 |
#include <windows.h> |
#include <ctype.h> |
23 |
#include <ctype.h> |
|
24 |
|
#include "resource.h" |
25 |
#include "../resource.h" |
#include "wptNLS.h" |
26 |
#include "wptNLS.h" |
#include "wptW32API.h" |
27 |
#include "wptW32API.h" |
#include "wptVersion.h" |
28 |
#include "wptVersion.h" |
#include "wptGPG.h" |
29 |
#include "wptGPG.h" |
#include "wptCommonCtl.h" |
30 |
#include "wptCommonCtl.h" |
#include "wptContext.h" |
31 |
#include "wptContext.h" |
#include "wptDlgs.h" |
32 |
#include "wptDlgs.h" |
#include "wptErrors.h" |
33 |
#include "wptUTF8.h" |
#include "wptTypes.h" |
34 |
#include "wptErrors.h" |
#include "wptKeylist.h" |
35 |
#include "wptTypes.h" |
#include "wptAgent.h" |
36 |
#include "wptKeyList.h" |
#include "wptRegistry.h" |
37 |
#include "wptAgent.h" |
#include "wptUTF8.h" |
38 |
#include "wptRegistry.h" |
#include "StringBuffer.h" |
39 |
|
|
40 |
const char* get_symkey_algo (int algo); |
|
41 |
|
/* Return the control ID dependent on the mode (sign or decrypt). */ |
42 |
#define item_ctrl_id( cmd ) \ |
#define item_ctrl_id(cmd) \ |
43 |
((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD) |
((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD) |
44 |
|
|
45 |
#define item_ctrl_id2(cmd) \ |
#define item_ctrl_id2(cmd) \ |
46 |
((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE) |
((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE) |
47 |
|
|
48 |
|
const char* get_symkey_algo (int algo); |
49 |
/* Dialog procedure for the passphrase callback. */ |
void ListBox_AddString_utf8 (HWND lb, const char *txt); |
50 |
static BOOL CALLBACK |
|
51 |
passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam) |
|
52 |
{ |
/* Overwrite passphrase and free memory. */ |
53 |
static passphrase_cb_s * c; |
static void |
54 |
gpgme_decrypt_result_t res; |
burn_passphrase (char **pwd) |
55 |
gpgme_sign_result_t res_sig; |
{ |
56 |
gpgme_key_t key; |
char *pass = *pwd; |
57 |
void *ctx = NULL, *item; |
|
58 |
const char *id; |
wipememory (pass, strlen (pass)); |
59 |
char *info; |
delete []pass; |
60 |
int n; |
*pwd = NULL; |
61 |
|
} |
62 |
switch (msg) { |
|
63 |
case WM_INITDIALOG: |
|
64 |
c = (passphrase_cb_s *)lparam; |
/* Dialog procedure for the passphrase callback. */ |
65 |
if (!c) |
static BOOL CALLBACK |
66 |
BUG (0); |
passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam) |
67 |
SetWindowText (dlg, c->title); |
{ |
68 |
if (c->gpg_cmd == GPG_CMD_DECRYPT) { |
static passphrase_cb_s *c; |
69 |
SetDlgItemText( dlg, IDC_DECRYPT_LISTINF, |
gpgme_decrypt_result_t res=NULL; |
70 |
_("Encrypted with the following public key(s)") ); |
gpgme_sign_result_t res_sig=NULL; |
71 |
CheckDlgButton( dlg, IDC_DECRYPT_HIDE, BST_CHECKED ); |
gpgme_recipient_t recip=NULL, r; |
72 |
} |
winpt_key_s key; |
73 |
else if (c->gpg_cmd == GPG_CMD_SIGN) |
void *item; |
74 |
CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED); |
int n; |
75 |
res = gpgme_op_decrypt_result (c->gpg); |
|
76 |
if (res != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) { |
switch (msg) { |
77 |
gpgme_recipient_t r; |
case WM_ACTIVATE: |
78 |
|
/* Some people complained that it is no longer possible to |
79 |
/* XXX: not all ENCRYPT_TO entries are listed here. */ |
paste in the passphrase in this dialog. When this option |
80 |
for (r = res->recipients; r; r = r->next) { |
is enabled, the ordinary passphrase control will be used. */ |
81 |
get_pubkey (r->keyid, &key); |
if (!reg_prefs.no_safe_pwd_ctrl) |
82 |
if (key) { |
safe_edit_control_init (dlg, item_ctrl_id (c->gpg_cmd)); |
83 |
char *uid; |
break; |
84 |
id = key->uids->name; |
|
85 |
if (!id) |
case WM_DESTROY: |
86 |
id = _("Invalid User ID"); |
if (!reg_prefs.no_safe_pwd_ctrl) |
87 |
uid = utf8_to_wincp (id, strlen (id)); |
safe_edit_control_free (dlg, item_ctrl_id (c->gpg_cmd)); |
88 |
info = new char [32+strlen (uid)+1 + 4 + strlen (r->keyid)+1 |
break; |
89 |
+ strlen (key->uids->email)+1]; |
|
90 |
if (!info) |
case WM_INITDIALOG: |
91 |
BUG (NULL); |
c = (passphrase_cb_s *)lparam; |
92 |
sprintf (info, "%s <%s> (%s, 0x%s)", uid, key->uids->email, |
if (!c) |
93 |
get_key_pubalgo (r->pubkey_algo), r->keyid+8); |
BUG (0); |
94 |
free (uid); |
SetDlgItemText (dlg, IDCANCEL, _("&Cancel")); |
95 |
|
SetWindowText (dlg, c->title); |
96 |
} |
if (c->gpg_cmd == GPG_CMD_DECRYPT) { |
97 |
else { |
SetDlgItemText (dlg, IDC_DECRYPT_HIDE, _("&Hide Typing")); |
98 |
info = new char [32 + strlen (r->keyid)+1 + 4]; |
SetDlgItemText (dlg, IDC_DECRYPT_LISTINF, |
99 |
if (!info) |
_("Encrypted with the following public key(s)")); |
100 |
BUG (NULL); |
CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED); |
101 |
sprintf (info, _("Unknown key ID (%s, 0x%s)"), |
} |
102 |
get_key_pubalgo (r->pubkey_algo), r->keyid+8); |
else if (c->gpg_cmd == GPG_CMD_SIGN) { |
103 |
} |
SetDlgItemText (dlg, IDC_DECRYPT_SIGN_HIDE, _("&Hide Typing")); |
104 |
listbox_add_string (GetDlgItem (dlg, IDC_DECRYPT_LIST), info); |
CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED); |
105 |
free_if_alloc (info); |
} |
106 |
} |
/* Because it depends on the order the keys are stored in the |
107 |
} |
keyring whether res->recipients is complete or not, we also |
108 |
else if (c->gpg_cmd == GPG_CMD_DECRYPT) |
support that the recipients were externally extracted and then |
109 |
EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE); |
we use this list. */ |
110 |
SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT? |
if (c->recipients) |
111 |
IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO, |
recip = c->recipients; /* recipients were already extracted. */ |
112 |
_("Please enter your passphrase")); |
else { |
113 |
if (c->gpg_cmd == GPG_CMD_DECRYPT) { |
res = gpgme_op_decrypt_result (c->gpg); |
114 |
SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD)); |
if (res && res->recipients) |
115 |
if (res && !res->recipients) { |
recip = res->recipients; |
116 |
const char *s = _("Symmetric encryption.\n" |
} |
117 |
"%s encrypted data."); |
if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) { |
118 |
const char *alg = get_symkey_algo (c->sym.sym_algo); |
StringBuffer inf; |
119 |
info = new char[strlen (s) + strlen (alg) + 2]; |
|
120 |
if (!info) |
for (r = recip; r; r = r->next) { |
121 |
BUG (NULL); |
memset (&key, 0, sizeof (key)); |
122 |
sprintf (info, s, alg); |
if (!winpt_get_pubkey (r->keyid, &key)) { |
123 |
SetDlgItemText (dlg, IDC_DECRYPT_MSG, info); |
gpgme_user_id_t u = key.ctx->uids; |
124 |
free_if_alloc (info); |
|
125 |
} |
inf = (u->name? u->name : _("Invalid User ID")); |
126 |
else |
if (u->email != NULL && strlen (u->email) > 1) |
127 |
SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info); |
inf = inf + " <" + u->email + ">"; |
128 |
} |
inf = inf + " (" + get_key_pubalgo (r->pubkey_algo); |
129 |
else { |
inf = inf + ", 0x" + (r->keyid+8) + ")"; |
130 |
SetFocus( GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD)); |
} |
131 |
SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info); |
else { |
132 |
} |
inf = _("Unknown key ID"); |
133 |
center_window (dlg, NULL); |
inf = inf + " (" + get_key_pubalgo (r->pubkey_algo); |
134 |
SetForegroundWindow (dlg); |
inf = inf + ", 0x" + (r->keyid+8) + ")"; |
135 |
set_active_window (dlg); |
} |
136 |
return FALSE; |
ListBox_AddString_utf8 (GetDlgItem (dlg, IDC_DECRYPT_LIST), |
137 |
|
inf.getBuffer ()); |
138 |
case WM_SYSCOMMAND: |
winpt_release_pubkey (&key); |
139 |
if( LOWORD( wparam ) == SC_CLOSE ) { |
} |
140 |
SetDlgItemText( dlg, item_ctrl_id( c->gpg_cmd ), "" ); |
} |
141 |
c->cancel = 1; |
else if (c->gpg_cmd == GPG_CMD_DECRYPT) |
142 |
EndDialog( dlg, TRUE ); |
EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE); |
143 |
} |
SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT? |
144 |
break; |
IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO, |
145 |
|
c->bad_pwd? _("Bad passphrase; Enter passphrase again") : |
146 |
case WM_COMMAND: |
_("Please enter your passphrase")); |
147 |
switch( HIWORD( wparam ) ) { |
if (c->gpg_cmd == GPG_CMD_DECRYPT) { |
148 |
case BN_CLICKED: |
SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD)); |
149 |
if ( LOWORD( wparam ) == IDC_DECRYPT_HIDE |
if (res && !res->recipients) { |
150 |
|| LOWORD( wparam ) == IDC_DECRYPT_SIGN_HIDE ) { |
StringBuffer sinf; |
151 |
HWND hwnd; |
|
152 |
int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd)); |
sinf = _("Symmetric encryption."); |
153 |
hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd)); |
sinf = sinf + "\n" + get_symkey_algo (c->sym.sym_algo); |
154 |
SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0); |
sinf = sinf + " " + _("encrypted data."); |
155 |
SetFocus (hwnd); |
SetDlgItemText (dlg, IDC_DECRYPT_MSG, sinf.getBuffer ()); |
156 |
} |
} |
157 |
} |
else |
158 |
|
SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info); |
159 |
switch (LOWORD (wparam)) { |
} |
160 |
case IDOK: |
else { |
161 |
/* fixme: the item is even cached when the passphrase is not |
SetFocus (GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD)); |
162 |
correct, which means that the user needs to delete all |
SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info); |
163 |
cached entries to continue. */ |
} |
164 |
if (c->pwd) { |
center_window (dlg, NULL); |
165 |
delete []c->pwd; |
SetForegroundWindow (dlg); |
166 |
c->pwd = NULL; |
return FALSE; |
167 |
} |
|
168 |
n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd)); |
case WM_COMMAND: |
169 |
if (!n) { |
switch (HIWORD (wparam)) { |
170 |
c->pwd = new char[2]; |
case BN_CLICKED: |
171 |
strcpy (c->pwd, ""); |
if (LOWORD (wparam) == IDC_DECRYPT_HIDE |
172 |
} |
|| LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) { |
173 |
else { |
HWND hwnd; |
174 |
c->pwd = new char[n+2]; |
int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd)); |
175 |
if (!c->pwd) |
hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd)); |
176 |
BUG (NULL); |
SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0); |
177 |
GetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), c->pwd, n+1); |
SetFocus (hwnd); |
178 |
} |
} |
179 |
res = gpgme_op_decrypt_result (c->gpg); |
} |
180 |
if (!res) |
|
181 |
res_sig = gpgme_op_sign_result (c->gpg); |
switch (LOWORD (wparam)) { |
182 |
if (reg_prefs.cache_time > 0 && !c->is_card && |
case IDOK: |
183 |
((res && res->recipients) || (res_sig && res_sig->signatures))) { |
/* XXX: the item is even cached when the passphrase is not |
184 |
if (agent_get_cache (c->keyid, &item)) |
correct, which means that the user needs to delete all |
185 |
agent_unlock_cache_entry (&item); |
cached entries to continue. */ |
186 |
else |
if (c->pwd) |
187 |
agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time); |
burn_passphrase (&c->pwd); |
188 |
} |
n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd)); |
189 |
EndDialog (dlg, TRUE); |
if (!n) { |
190 |
return TRUE; |
c->pwd = new char[2]; |
191 |
|
if (!c->pwd) |
192 |
case IDCANCEL: |
BUG (NULL); |
193 |
SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "" ); |
strcpy (c->pwd, ""); |
194 |
c->cancel = 1; |
} |
195 |
EndDialog (dlg, FALSE); |
else { |
196 |
return FALSE; |
char *p = new char[n+2]; |
197 |
} |
if (!p) |
198 |
break; |
BUG (NULL); |
199 |
} |
/* Get the passphrase and convert it utf8. |
200 |
|
This does not just the us-ascii charset. */ |
201 |
return FALSE; |
SafeGetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), p, n+1); |
202 |
} |
c->pwd = native_to_utf8 (p); |
203 |
|
sfree_if_alloc (p); |
204 |
|
} |
205 |
/* Extract the main keyid from @pass_info. |
res = gpgme_op_decrypt_result (c->gpg); |
206 |
Return value: long main keyid or NULL for an error. */ |
if (!res) |
207 |
static const char* |
res_sig = gpgme_op_sign_result (c->gpg); |
208 |
parse_gpg_keyid (const char *pass_info) |
if (!c->is_card && reg_prefs.cache_time > 0 && |
209 |
{ |
(res || res_sig)) { |
210 |
static char keyid[16+1]; |
if (agent_get_cache (c->keyid, &item)) |
211 |
|
agent_unlock_cache_entry (&item); |
212 |
if (strlen (pass_info) < 16) |
else |
213 |
return NULL; |
agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time); |
214 |
/* the format of the desc buffer looks like this: |
} |
215 |
request_keyid[16] main_keyid[16] keytype[1] keylength[4] |
c->cancel = 0; |
216 |
we use the main keyid to use only one cache entry. */ |
EndDialog (dlg, TRUE); |
217 |
strncpy (keyid, pass_info+17, 16); |
return TRUE; |
218 |
keyid[16] = 0; |
|
219 |
return keyid; |
case IDCANCEL: |
220 |
} |
SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), ""); |
221 |
|
c->cancel = 1; |
222 |
|
EndDialog (dlg, FALSE); |
223 |
/* Parse the information in @uid_hint and @pass_info to generate |
return TRUE; |
224 |
a input message for the user in @desc. */ |
} |
225 |
static void |
break; |
226 |
parse_gpg_description (const char *uid_hint, const char *pass_info, |
} |
227 |
char *desc, int size) |
|
228 |
{ |
return FALSE; |
229 |
gpgme_pubkey_algo_t algo; |
} |
230 |
char usedkey[16+1], mainkey[16+1]; |
|
231 |
char *uid, *p; |
|
232 |
int n=0; |
/* Extract the main keyid from @pass_info. |
233 |
|
Return value: long main keyid or NULL for an error. */ |
234 |
while (p = strsep ((char**)&pass_info, " ")) { |
static const char* |
235 |
switch (n++) { |
parse_gpg_keyid (const char *pass_info) |
236 |
case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break; |
{ |
237 |
case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break; |
static char keyid[16+1]; |
238 |
case 2: algo = (gpgme_pubkey_algo_t)atol (p); break; |
|
239 |
} |
/* XXX: check for leading alpha-chars? */ |
240 |
} |
if (strlen (pass_info) < 16) { |
241 |
uid_hint += 16; /* skip keyid */ |
log_debug ("parse_gpg_keyid: error '%s'\r\n", pass_info); |
242 |
uid_hint += 1; /* space */ |
return NULL; |
243 |
|
} |
244 |
uid = utf8_to_wincp (uid_hint, strlen (uid_hint)); |
/* the format of the desc buffer looks like this: |
245 |
|
request_keyid[16] main_keyid[16] keytype[1] keylength[4] |
246 |
if (strcmp (usedkey, mainkey)) |
we use the main keyid to use only one cache entry. */ |
247 |
_snprintf (desc, size-1, |
strncpy (keyid, pass_info+17, 16); |
248 |
_("You need a passphrase to unlock the secret key for\n" |
keyid[16] = 0; |
249 |
"user: \"%s\"\n" |
return keyid; |
250 |
"%s key, ID %s (main key ID %s)\n"), |
} |
251 |
uid, get_key_pubalgo (algo), usedkey+8, mainkey+8); |
|
252 |
else if (!strcmp (usedkey, mainkey)) |
|
253 |
_snprintf (desc, size-1, |
/* Parse the information in @uid_hint and @pass_info to generate |
254 |
_("You need a passphrase to unlock the secret key for\n" |
a input message for the user in @desc. */ |
255 |
"user: \"%s\"\n" |
static int |
256 |
"%s key, ID %s\n"), |
parse_gpg_description (const char *uid_hint, const char *pass_info, |
257 |
uid, get_key_pubalgo (algo), usedkey+8); |
char *desc, int size) |
258 |
free (uid); |
{ |
259 |
} |
gpgme_pubkey_algo_t algo; |
260 |
|
char usedkey[16+1]; |
261 |
|
char mainkey[16+1]; |
262 |
static int inline |
char *p, *uid; |
263 |
is_hexstring (const char * p) |
int n=0; |
264 |
{ |
|
265 |
size_t i; |
algo = (gpgme_pubkey_algo_t)0; |
266 |
|
/* Each uid_hint contains a long key-ID so it is at least 16 bytes. */ |
267 |
for (i=0; i < strlen (p); i++) { |
if (strlen (uid_hint) < 17) { |
268 |
if (!isxdigit (p[i])) |
*desc = 0; |
269 |
return -1; |
log_debug ("parse_gpg_description: error '%s'\r\n", uid_hint); |
270 |
} |
return -1; |
271 |
return 0; |
} |
272 |
} |
|
273 |
|
while (p = strsep ((char**)&pass_info, " ")) { |
274 |
|
switch (n++) { |
275 |
/* Passphrase callback with the ability to support caching. */ |
case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break; |
276 |
gpgme_error_t |
case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break; |
277 |
passphrase_cb (void *hook, const char *uid_hint, |
case 2: algo = (gpgme_pubkey_algo_t)atol (p); break; |
278 |
const char *passphrase_info, |
} |
279 |
int prev_was_bad, int fd) |
} |
280 |
{ |
uid_hint += 16; /* skip keyid */ |
281 |
passphrase_cb_s *c = (passphrase_cb_s*)hook; |
uid_hint += 1; /* space */ |
282 |
HANDLE hd = (HANDLE)fd; |
|
283 |
void *item; |
uid = utf8_to_native (uid_hint); |
284 |
const char *keyid, *pass; |
if (strcmp (usedkey, mainkey)) |
285 |
DWORD n; |
_snprintf (desc, size-1, |
286 |
int rc; |
_("You need a passphrase to unlock the secret key for user:\n" |
287 |
|
"\"%s\"\n" |
288 |
/* XXX: pubkey_enc cancel does not quit gpg.exe */ |
"%s key, ID 0x%s (main key ID 0x%s)\n"), |
289 |
/* XXX: handle prev_was_bad case. */ |
uid, get_key_pubalgo (algo), usedkey+8, mainkey+8); |
290 |
if (!c) |
else if (!strcmp (usedkey, mainkey)) |
291 |
return gpg_error (GPG_ERR_INV_ARG); |
_snprintf (desc, size-1, |
292 |
|
_("You need a passphrase to unlock the secret key for user:\n" |
293 |
if (passphrase_info) { |
"\"%s\"\n" |
294 |
if (strlen (passphrase_info) < 16) {/* assume symetric encryption. */ |
"%s key, ID 0x%s\n"), |
295 |
int n=2; |
uid, get_key_pubalgo (algo), usedkey+8); |
296 |
c->sym.sym_algo = atoi (passphrase_info); |
safe_free (uid); |
297 |
if (c->sym.sym_algo > 9) |
return 0; |
298 |
n++; |
} |
299 |
/* XXX: be more strict. */ |
|
300 |
c->sym.s2k_mode = atoi (passphrase_info+n); |
|
301 |
c->sym.s2k_hash = atoi (passphrase_info+n+2); |
/* Extract the serial number from the card ID @id and return it. */ |
302 |
} |
const char* |
303 |
|
extract_serial_no (const char *id) |
304 |
keyid = parse_gpg_keyid (passphrase_info); |
{ |
305 |
pass = agent_get_cache (keyid+8, &item); |
static char buf[8]; |
306 |
if (pass) { |
char *p; |
307 |
agent_unlock_cache_entry (&item); |
|
308 |
c->pwd_init = 0; |
p = strchr (id, '/'); |
309 |
if (!WriteFile (hd, pass, strlen (pass), &n, NULL)) |
if (!p) { |
310 |
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
log_debug ("extract_serial_no: error '%s'\r\n", id); |
311 |
if (!WriteFile (hd, "\n", 1, &n, NULL)) |
return ""; |
312 |
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
} |
313 |
return 0; |
memset (buf, 0, sizeof (buf)); |
314 |
} |
strncpy (buf, id+(p-id)-6, 6); |
315 |
} |
return buf; |
316 |
|
} |
317 |
if (c->pwd_init) { |
|
318 |
if (keyid && strlen (keyid) == 16) |
|
319 |
strcpy (c->keyid, keyid+8); |
/* Passphrase callback with the ability to support caching. */ |
320 |
|
gpgme_error_t |
321 |
/* if the desc has a length of 32 and only hex digits, we assume a |
passphrase_cb (void *hook, const char *uid_hint, |
322 |
smart card has been used. */ |
const char *passphrase_info, |
323 |
if (uid_hint && strlen (uid_hint) == 32 && !is_hexstring (uid_hint)) { |
int prev_was_bad, int fd) |
324 |
char buf[16]; |
{ |
325 |
memset (buf, 0, sizeof buf); |
passphrase_cb_s *c = (passphrase_cb_s*)hook; |
326 |
strncpy (buf, uid_hint+20, 8); |
HANDLE hd = (HANDLE)fd; |
327 |
_snprintf (c->info, sizeof c->info-1, |
void *item; |
328 |
_("Please enter the PIN to unlock your secret card key\n" |
const char *keyid=NULL, *pass; |
329 |
"Card: %s"), buf); |
DWORD n; |
330 |
c->is_card = 1; |
int rc = 0; |
331 |
} |
|
332 |
else if (uid_hint) |
if (!c) { |
333 |
parse_gpg_description (uid_hint, passphrase_info, |
log_debug ("passphrase_cb: error no valid callback\r\n"); |
334 |
c->info, sizeof c->info - 1); |
return gpg_error (GPG_ERR_INV_ARG); |
335 |
if (c->gpg_cmd == GPG_CMD_DECRYPT) { |
} |
336 |
rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT, |
c->bad_pwd = prev_was_bad? 1 : 0; |
337 |
(HWND)c->hwnd, passphrase_callback_proc, |
if (prev_was_bad && !c->cancel) { |
338 |
(LPARAM)c); |
if (c->pwd) |
339 |
} |
burn_passphrase (&c->pwd); |
340 |
else if (c->gpg_cmd == GPG_CMD_SIGN) { |
agent_del_cache (c->keyid); |
341 |
rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN, |
c->pwd_init = 1; |
342 |
(HWND)c->hwnd, passphrase_callback_proc, |
} |
343 |
(LPARAM)c); |
|
344 |
} |
if (passphrase_info) { |
345 |
if (rc == -1) { |
if (strlen (passphrase_info) < 16 && |
346 |
WriteFile (hd, "\n", 1, &n, NULL); |
!strstr (passphrase_info, "OPENPGP")) { |
347 |
return gpg_error (GPG_ERR_EOF); |
/* assume symetric encryption. */ |
348 |
} |
int pos=2; |
349 |
c->pwd_init = 0; |
c->sym.sym_algo = atoi (passphrase_info); |
350 |
} |
if (c->sym.sym_algo > 9) |
351 |
if (c->cancel) { |
pos++; |
352 |
WriteFile (hd, "\n", 1, &n, NULL); |
/* XXX: be more strict. */ |
353 |
return gpg_error (GPG_ERR_EOF); |
c->sym.s2k_mode = atoi (passphrase_info+pos); |
354 |
} |
c->sym.s2k_hash = atoi (passphrase_info+pos+2); |
355 |
|
} |
356 |
WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL); |
|
357 |
WriteFile (hd, "\n", 1, &n, NULL); |
keyid = parse_gpg_keyid (passphrase_info); |
358 |
return 0; |
pass = agent_get_cache (keyid+8, &item); |
359 |
} |
if (pass) { |
360 |
|
agent_unlock_cache_entry (&item); |
361 |
|
c->pwd_init = 0; |
362 |
/* Initialize the given passphrase callback @cb with the |
if (!WriteFile (hd, pass, strlen (pass), &n, NULL)) |
363 |
used gpgme context @ctx, the command @cmd and a title |
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
364 |
@title for the dialog. */ |
if (!WriteFile (hd, "\n", 1, &n, NULL)) |
365 |
void |
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
366 |
set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx, |
return 0; |
367 |
int cmd, HWND hwnd, const char *title) |
} |
368 |
{ |
} |
369 |
memset (cb, 0, sizeof *cb); |
|
370 |
cb->gpg_cmd = cmd; |
if (c->pwd_init) { |
371 |
cb->is_card = 0; |
if (keyid && strlen (keyid) == 16) |
372 |
cb->cancel = 0; |
strcpy (c->keyid, keyid+8); |
373 |
cb->hwnd = hwnd; |
|
374 |
cb->pwd_init = 1; |
/* if @passphrase_info contains 'OPENPGP' we assume a smart card |
375 |
free_if_alloc (cb->title); |
has been used. */ |
376 |
cb->title = m_strdup (title); |
if (strstr (passphrase_info, "OPENPGP")) { |
377 |
if (!cb->title) |
const char *s=passphrase_info; |
378 |
BUG (NULL); |
while (s && *s && *s != 'D') |
379 |
gpgme_set_passphrase_cb (ctx, passphrase_cb, cb); |
s++; |
380 |
cb->gpg = ctx; |
_snprintf (c->info, DIM (c->info)-1, |
381 |
} |
_("Please enter the PIN to unlock your secret card key\n" |
382 |
|
"Card: %s"), extract_serial_no (s)); |
383 |
|
c->is_card = 1; |
384 |
/* Release a passphrase callback @ctx. */ |
} |
385 |
void |
else if (uid_hint) |
386 |
release_gpg_passphrase_cb (passphrase_cb_s *ctx) |
parse_gpg_description (uid_hint, passphrase_info, |
387 |
{ |
c->info, sizeof (c->info) - 1); |
388 |
if (!ctx) |
if (c->gpg_cmd == GPG_CMD_DECRYPT) { |
389 |
return; |
rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT, |
390 |
sfree_if_alloc (ctx->pwd); |
(HWND)c->hwnd, passphrase_callback_proc, |
391 |
free_if_alloc (ctx->title); |
(LPARAM)c); |
392 |
} |
} |
393 |
|
else if (c->gpg_cmd == GPG_CMD_SIGN) { |
394 |
/* Simple check to measure passphrase (@pass) quality. |
rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN, |
395 |
Return value: 0 on success. */ |
(HWND)c->hwnd, passphrase_callback_proc, |
396 |
int |
(LPARAM)c); |
397 |
check_passwd_quality (const char *pass, int strict) |
} |
398 |
{ |
if (rc == -1) { |
399 |
int i, nd=0, nc=0, n; |
if (!WriteFile (hd, "\n", 1, &n, NULL)) |
400 |
|
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
401 |
n = strlen (pass); |
log_debug ("passphrase_cb: could not create dialog box\n"); |
402 |
if (n < 8) |
return 0; |
403 |
return -1; |
} |
404 |
|
c->pwd_init = 0; |
405 |
for (i=0; i < n; i++) { |
} |
406 |
if (isdigit (pass[i])) nd++; |
if (c->cancel || !c->pwd) { |
407 |
if (isalpha (pass[i])) nc++; |
if (!WriteFile (hd, "\n", 1, &n, NULL)) |
408 |
} |
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
409 |
|
return 0; |
410 |
if (nd == n || nc == n) |
} |
411 |
return -1; |
|
412 |
|
if (!WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL)) |
413 |
return 0; |
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
414 |
} |
if (!WriteFile (hd, "\n", 1, &n, NULL)) |
415 |
|
log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno); |
416 |
|
return 0; |
417 |
|
} |
418 |
|
|
419 |
|
|
420 |
|
/* Initialize the given passphrase callback @cb with the |
421 |
|
used gpgme context @ctx, the command @cmd and a title |
422 |
|
@title for the dialog. */ |
423 |
|
void |
424 |
|
set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx, |
425 |
|
int cmd, HWND hwnd, const char *title) |
426 |
|
{ |
427 |
|
memset (cb, 0, sizeof *cb); |
428 |
|
cb->gpg_cmd = cmd; |
429 |
|
cb->bad_pwd = 0; |
430 |
|
cb->is_card = 0; |
431 |
|
cb->cancel = 0; |
432 |
|
cb->hwnd = hwnd; |
433 |
|
cb->pwd_init = 1; |
434 |
|
free_if_alloc (cb->title); |
435 |
|
cb->title = m_strdup (title); |
436 |
|
gpgme_set_passphrase_cb (ctx, passphrase_cb, cb); |
437 |
|
cb->gpg = ctx; |
438 |
|
} |
439 |
|
|
440 |
|
|
441 |
|
/* Release the gpg recipient list. */ |
442 |
|
void |
443 |
|
release_gpg_recipients (gpgme_recipient_t *recipients) |
444 |
|
{ |
445 |
|
gpgme_recipient_t r, n; |
446 |
|
|
447 |
|
r = *recipients; |
448 |
|
while (r != NULL) { |
449 |
|
n = r->next; |
450 |
|
safe_free (r->keyid); |
451 |
|
safe_free (r); |
452 |
|
r = n; |
453 |
|
} |
454 |
|
*recipients = NULL; |
455 |
|
} |
456 |
|
|
457 |
|
|
458 |
|
|
459 |
|
/* Release a passphrase callback @ctx. */ |
460 |
|
void |
461 |
|
release_gpg_passphrase_cb (passphrase_cb_s *ctx) |
462 |
|
{ |
463 |
|
if (!ctx) |
464 |
|
return; |
465 |
|
sfree_if_alloc (ctx->pwd); |
466 |
|
free_if_alloc (ctx->title); |
467 |
|
release_gpg_recipients (&ctx->recipients); |
468 |
|
} |
469 |
|
|
470 |
|
|
471 |
|
/* _Simple_ check to measure passphrase (@pass) quality. |
472 |
|
Return value: 0 on success. */ |
473 |
|
int |
474 |
|
check_passwd_quality (const char *pass, int strict) |
475 |
|
{ |
476 |
|
int i, nd=0, nc=0, n; |
477 |
|
|
478 |
|
/* A good passphrase should be at least 8 characters. */ |
479 |
|
n = strlen (pass); |
480 |
|
if (n < 8) |
481 |
|
return -1; |
482 |
|
|
483 |
|
for (i=0; i < n; i++) { |
484 |
|
if (isdigit (pass[i])) |
485 |
|
nd++; |
486 |
|
if (isalpha (pass[i])) |
487 |
|
nc++; |
488 |
|
} |
489 |
|
|
490 |
|
/* Check that the passphrase contains letters and numbers. */ |
491 |
|
if (nd == n || nc == n) |
492 |
|
return -1; |
493 |
|
|
494 |
|
return 0; |
495 |
|
} |