/[winpt]/trunk/Src/wptPassphraseCB.cpp
ViewVC logotype

Diff of /trunk/Src/wptPassphraseCB.cpp

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 25 by twoaday, Wed Oct 12 10:04:26 2005 UTC revision 344 by twoaday, Sun Nov 27 14:56:52 2011 UTC
# Line 1  Line 1 
1  /* wptPassphraseCB.cpp - GPGME Passphrase Callback  /* wptPassphraseCB.cpp - GPGME Passphrase Callback
2   *      Copyright (C) 2001, 2002, 2003, 2005 Timo Schulz   *      Copyright (C) 2001, 2002-2006, 2009, 2011 Timo Schulz
3   *      Copyright (C) 2005 g10 Code GmbH   *      Copyright (C) 2005 g10 Code GmbH
4   *   *
5   * This file is part of WinPT.   * This file is part of WinPT.
6   *   *
7   * WinPT is free software; you can redistribute it and/or   * WinPT is free software; you can redistribute it and/or
8   * modify it under the terms of the GNU General Public License   * modify it under the terms of the GNU General Public License
9   * as published by the Free Software Foundation; either version 2   * as published by the Free Software Foundation; either version 2
10   * of the License, or (at your option) any later version.   * of the License, or (at your option) any later version.
11   *     *  
12   * WinPT is distributed in the hope that it will be useful,   * WinPT is distributed in the hope that it will be useful,
13   * but WITHOUT ANY WARRANTY; without even the implied warranty of   * but WITHOUT ANY WARRANTY; without even the implied warranty of
14   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15   * General Public License for more details.   * General Public License for more details.
16   *   */
17   * You should have received a copy of the GNU General Public License  #ifdef HAVE_CONFIG_H
18   * along with WinPT; if not, write to the Free Software Foundation,  #include <config.h>
19   * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA  #endif
20   */  
21    #include <windows.h>
22  #include <windows.h>  #include <ctype.h>
23  #include <ctype.h>  
24    #include "resource.h"
25  #include "../resource.h"  #include "wptNLS.h"
26  #include "wptNLS.h"  #include "wptW32API.h"
27  #include "wptW32API.h"  #include "wptVersion.h"
28  #include "wptVersion.h"  #include "wptGPG.h"
29  #include "wptGPG.h"  #include "wptCommonCtl.h"
30  #include "wptCommonCtl.h"  #include "wptContext.h"
31  #include "wptContext.h"  #include "wptDlgs.h"
32  #include "wptDlgs.h"  #include "wptErrors.h"
33  #include "wptUTF8.h"  #include "wptTypes.h"
34  #include "wptErrors.h"  #include "wptKeylist.h"
35  #include "wptTypes.h"  #include "wptAgent.h"
36  #include "wptKeyList.h"  #include "wptRegistry.h"
37  #include "wptAgent.h"  #include "wptUTF8.h"
38  #include "wptRegistry.h"  #include "StringBuffer.h"
39    
40  const char* get_symkey_algo (int algo);  
41    /* Return the control ID dependent on the mode (sign or decrypt). */
42  #define item_ctrl_id( cmd ) \  #define item_ctrl_id(cmd) \
43      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)
44    
45  #define item_ctrl_id2(cmd) \  #define item_ctrl_id2(cmd) \
46      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)
47    
48    const char* get_symkey_algo (int algo);
49  /* Dialog procedure for the passphrase callback. */  
50  static BOOL CALLBACK  
51  passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)  /* Overwrites the passphrase and free the memory.
52  {         Pointer is also reset to NULL. */
53      static passphrase_cb_s * c;  static void
54      gpgme_decrypt_result_t res;  burn_passphrase (char **pwd)
55      gpgme_sign_result_t res_sig;  {
56      gpgme_key_t key;      char *pass = *pwd;
57      void *ctx = NULL, *item;  
58      const char *id;      wipememory (pass, strlen (pass));
59      char *info;      delete []pass;
60      int n;      *pwd = NULL;
61    }
62      switch (msg) {  
63      case WM_INITDIALOG:  
64          c = (passphrase_cb_s *)lparam;  /* Dialog procedure for the passphrase callback. */
65          if (!c)  static BOOL CALLBACK
66              BUG (0);  passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)
67          SetWindowText (dlg, c->title);  {    
68          if (c->gpg_cmd == GPG_CMD_DECRYPT) {      static passphrase_cb_s *c;
69              SetDlgItemText( dlg, IDC_DECRYPT_LISTINF,      gpgme_decrypt_result_t res=NULL;
70                  _("Encrypted with the following public key(s)") );      gpgme_sign_result_t res_sig=NULL;
71              CheckDlgButton( dlg, IDC_DECRYPT_HIDE, BST_CHECKED );      gpgme_recipient_t recip=NULL, r;
72          }      winpt_key_s key;
73          else if (c->gpg_cmd == GPG_CMD_SIGN)      void *item;
74              CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);      int n;
75          res = gpgme_op_decrypt_result (c->gpg);  
76          if (res != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {      switch (msg) {
77              gpgme_recipient_t r;      case WM_ACTIVATE:
78            /* Some people complained that it is no longer possible to
79              /* XXX: not all ENCRYPT_TO entries are listed here. */             paste in the passphrase in this dialog. When this option
80              for (r = res->recipients; r; r = r->next) {             is enabled, the ordinary passphrase control will be used. */
81                  get_pubkey (r->keyid, &key);          if (!reg_prefs.no_safe_pwd_ctrl)
82                  if (key) {              safe_edit_control_init (dlg, item_ctrl_id (c->gpg_cmd));
83                      char *uid;          break;
84                      id = key->uids->name;  
85                      if (!id)      case WM_DESTROY:
86                          id = _("Invalid User ID");          if (!reg_prefs.no_safe_pwd_ctrl)
87                      uid = utf8_to_wincp (id, strlen (id));              safe_edit_control_free (dlg, item_ctrl_id (c->gpg_cmd));
88                      info = new char [32+strlen (uid)+1 + 4 + strlen (r->keyid)+1          break;
89                                       + strlen (key->uids->email)+1];  
90                      if (!info)      case WM_INITDIALOG:
91                          BUG (NULL);          c = (passphrase_cb_s *)lparam;
92                      sprintf (info, "%s <%s> (%s, 0x%s)", uid, key->uids->email,          if (!c)
93                               get_key_pubalgo (r->pubkey_algo), r->keyid+8);              BUG (0);
94                      free (uid);          SetDlgItemText (dlg, IDCANCEL, _("&Cancel"));
95                                SetWindowText (dlg, c->title);
96                  }          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
97                  else {              SetDlgItemText (dlg, IDC_DECRYPT_HIDE, _("&Hide Typing"));
98                      info = new char [32 + strlen (r->keyid)+1 + 4];              SetDlgItemText (dlg, IDC_DECRYPT_LISTINF,
99                      if (!info)                              _("Encrypted with the following public key(s):"));
100                          BUG (NULL);              CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED);
101                      sprintf (info, _("Unknown key ID (%s, 0x%s)"),          }
102                               get_key_pubalgo (r->pubkey_algo), r->keyid+8);          else if (c->gpg_cmd == GPG_CMD_SIGN) {
103                  }              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_HIDE, _("&Hide Typing"));
104                  listbox_add_string (GetDlgItem (dlg, IDC_DECRYPT_LIST), info);              CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);
105                  free_if_alloc (info);          }
106              }          /* Because it depends on the order the keys are stored in the
107          }             keyring, whether res->recipients is complete or not, we also
108          else if (c->gpg_cmd == GPG_CMD_DECRYPT)             support that the recipients were externally extracted and then
109              EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);             we use this list. */
110          SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?          if (c->recipients) /* recipients were already extracted. */
111                          IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,              recip = c->recipients;
112                          _("Please enter your passphrase"));          else if (c->gpg) {
113          if (c->gpg_cmd == GPG_CMD_DECRYPT) {              res = gpgme_op_decrypt_result (c->gpg);
114              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));              if (res && res->recipients)
115              if (res && !res->recipients) {                  recip = res->recipients;
116                  const char *s = _("Symmetric encryption.\n"          }
117                                    "%s encrypted data.");          if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {
118                  const char *alg = get_symkey_algo (c->sym.sym_algo);              StringBuffer inf;
119                  info = new char[strlen (s) + strlen (alg) + 2];  
120                  if (!info)              for (r = recip; r; r = r->next) {
121                      BUG (NULL);                  memset (&key, 0, sizeof (key));
122                  sprintf (info, s, alg);                  if (!winpt_get_pubkey (r->keyid, &key)) {
123                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, info);                      gpgme_user_id_t u = key.ctx->uids;
124                  free_if_alloc (info);                      inf = (u->name? u->name : _("Invalid User ID"));
125              }                      if (u->email != NULL && strlen (u->email) > 1)
126              else                          inf = inf + " <" + u->email + ">";
127                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);                      inf = inf + " (" + get_key_pubalgo (r->pubkey_algo);
128          }                      inf = inf + ", 0x" + (r->keyid+8) + ")";
129          else {                  }
130              SetFocus( GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));                  else {
131              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);                      inf = _("Unknown key ID");
132          }                      inf = inf + " (" + get_key_pubalgo (r->pubkey_algo);
133          center_window (dlg, NULL);                      inf = inf + ", 0x" + (r->keyid+8) + ")";
134          SetForegroundWindow (dlg);                  }
135          set_active_window (dlg);                  ListBox_AddString_utf8 (GetDlgItem (dlg, IDC_DECRYPT_LIST),
136          return FALSE;                                          inf.getBuffer ());
137                    winpt_release_pubkey (&key);
138          case WM_SYSCOMMAND:              }
139              if( LOWORD( wparam ) == SC_CLOSE ) {          }
140                  SetDlgItemText( dlg, item_ctrl_id( c->gpg_cmd ), "" );          else if (c->gpg_cmd == GPG_CMD_DECRYPT)
141                  c->cancel = 1;              EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);
142                  EndDialog( dlg, TRUE );          SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?
143              }                          IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,
144              break;                          c->bad_pwd? _("Invalid passphrase; Please enter your passphrase again") :
145                            _("Please enter your passphrase"));
146          case WM_COMMAND:          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
147              switch( HIWORD( wparam ) ) {              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));
148              case BN_CLICKED:              /* no recipients means symmetric encryption */
149                  if ( LOWORD( wparam ) == IDC_DECRYPT_HIDE              if (res && !res->recipients) {
150                      || LOWORD( wparam ) == IDC_DECRYPT_SIGN_HIDE ) {                  StringBuffer sinf;
151                      HWND hwnd;  
152                      int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));                  sinf = _("Symmetric encryption.");
153                      hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));                  sinf = sinf + "\n" + get_symkey_algo (c->sym.sym_algo);
154                      SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);                  sinf = sinf + " " + _("encrypted data") + ".";
155                      SetFocus (hwnd);                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, sinf.getBuffer ());
156                  }              }
157              }              else
158                    SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);
159              switch (LOWORD (wparam)) {          }
160              case IDOK:            else {
161                  /* fixme: the item is even cached when the passphrase is not              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));
162                            correct, which means that the user needs to delete all              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);
163                            cached entries to continue. */          }
164                  if (c->pwd) {          center_window (dlg, NULL);
165                      delete []c->pwd;          SetForegroundWindow (dlg);
166                      c->pwd = NULL;          return FALSE;
167                  }  
168                  n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));          case WM_COMMAND:
169                  if (!n) {              switch (HIWORD (wparam)) {
170                      c->pwd = new char[2];              case BN_CLICKED:
171                      strcpy (c->pwd, "");                  if  (LOWORD (wparam) == IDC_DECRYPT_HIDE ||
172                  }                       LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) {
173                  else {                      HWND hwnd;
174                      c->pwd = new char[n+2];                      int hide;
175                      if (!c->pwd)                      hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));
176                          BUG (NULL);                      hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));
177                      GetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), c->pwd, n+1);                      SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);
178                  }                      SetFocus (hwnd);
179                  res = gpgme_op_decrypt_result (c->gpg);                  }
180                  if (!res)              }
181                      res_sig = gpgme_op_sign_result (c->gpg);  
182                  if (reg_prefs.cache_time > 0 && !c->is_card &&              switch (LOWORD (wparam)) {
183                      ((res && res->recipients) || (res_sig && res_sig->signatures))) {              case IDOK:
184                      if (agent_get_cache (c->keyid, &item))                  /* XXX: the item is even cached when the passphrase is not
185                          agent_unlock_cache_entry (&item);                          correct, which means that the user needs to delete all
186                      else                          cached entries to continue. */
187                          agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time);                  if (c->pwd)
188                  }                      burn_passphrase (&c->pwd);
189                  EndDialog (dlg, TRUE);                  n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));
190                  return TRUE;                  if (!n) {
191                                        c->pwd = new char[2];
192              case IDCANCEL:                      strcpy (c->pwd, "");
193                  SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "" );                  }
194                  c->cancel = 1;                  else {
195                  EndDialog (dlg, FALSE);                      char *p = new char[n+2];
196                  return FALSE;                      SafeGetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), p, n+1);
197              }                      c->pwd = m_strdup (p);
198              break;                      sfree_if_alloc (p);
199      }                  }
200                        if (c->gpg != NULL) {
201      return FALSE;                      res = gpgme_op_decrypt_result (c->gpg);
202  }                      if (!res)
203                            res_sig = gpgme_op_sign_result (c->gpg);
204                        if (!c->is_card && reg_prefs.cache_time > 0 && (res || res_sig)) {
205  /* Extract the main keyid from @pass_info.                          if (agent_get_cache (c->keyid, &item))
206     Return value: long main keyid or NULL for an error. */                              agent_unlock_cache_entry (&item);
207  static const char*                          else
208  parse_gpg_keyid (const char *pass_info)                              agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time);
209  {                      }
210      static char keyid[16+1];                  }
211                        c->cancel = 0;
212      if (strlen (pass_info) < 16)                  EndDialog (dlg, TRUE);
213          return NULL;                  return TRUE;
214      /* the format of the desc buffer looks like this:                  
215         request_keyid[16] main_keyid[16] keytype[1] keylength[4]              case IDCANCEL:
216         we use the main keyid to use only one cache entry. */                  SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
217      strncpy (keyid, pass_info+17, 16);                  c->cancel = 1;
218      keyid[16] = 0;                  EndDialog (dlg, FALSE);
219      return keyid;                  return TRUE;
220  }              }
221                break;
222        }
223  /* Parse the information in @uid_hint and @pass_info to generate      
224     a input message for the user in @desc. */      return FALSE;
225  static void  }
226  parse_gpg_description (const char *uid_hint, const char *pass_info,  
227                         char *desc, int size)  
228  {  /* Extract the main keyid from @pass_info.
229      gpgme_pubkey_algo_t algo;     Return value: long main keyid or NULL for an error. */
230      char usedkey[16+1], mainkey[16+1];  static const char*
231      char *uid, *p;  parse_gpg_keyid (const char *pass_info)
232      int n=0;  {
233        static char keyid[16+1];
234      while (p = strsep ((char**)&pass_info, " ")) {      
235          switch (n++) {      /* XXX: check for leading alpha-chars? */
236          case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break;      if (strlen (pass_info) < 16) {
237          case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break;          log_debug ("parse_gpg_keyid: error '%s'\r\n", pass_info);
238          case 2: algo = (gpgme_pubkey_algo_t)atol (p); break;          return NULL;
239          }      }
240      }      /* the format of the desc buffer looks like this:
241      uid_hint += 16; /* skip keyid */         request_keyid[16] main_keyid[16] keytype[1] keylength[4]
242      uid_hint += 1;  /* space */         we use the main keyid to use only one cache entry. */
243        strncpy (keyid, pass_info+17, 16);
244      uid = utf8_to_wincp (uid_hint, strlen (uid_hint));      keyid[16] = 0;
245        return keyid;
246      if (strcmp (usedkey, mainkey))  }
247          _snprintf (desc, size-1,  
248                     _("You need a passphrase to unlock the secret key for\n"  
249                       "user: \"%s\"\n"  /* Parse the information in @uid_hint and @pass_info to generate
250                       "%s key, ID %s (main key ID %s)\n"),     a input message for the user in @desc. */
251                     uid, get_key_pubalgo (algo), usedkey+8, mainkey+8);  static int
252      else if (!strcmp (usedkey, mainkey))  parse_gpg_description (const char *uid_hint, const char *pass_info,
253          _snprintf (desc, size-1,                         char *desc, size_t desc_size)
254                     _("You need a passphrase to unlock the secret key for\n"  {
255                       "user: \"%s\"\n"      gpgme_pubkey_algo_t algo;
256                       "%s key, ID %s\n"),      char usedkey[16 + 1];
257                       uid, get_key_pubalgo (algo), usedkey+8);      char mainkey[16 + 1];
258      free (uid);      char *p;
259  }  
260        algo = (gpgme_pubkey_algo_t)0;
261        /* Each uid_hint contains a long key-ID so it is at least 16 bytes. */
262  static int inline      if (strlen (uid_hint) < 17) {
263  is_hexstring (const char * p)          *desc = 0;
264  {          log_debug ("parse_gpg_description: error '%s'\r\n", uid_hint);
265      size_t i;          return -1;
266        }
267      for (i=0; i < strlen (p); i++) {  
268          if (!isxdigit (p[i]))      int n = 0;
269              return -1;      while ((p = strsep ((char**)&pass_info, " "))) {
270      }          switch (n++) {
271      return 0;          case 0:
272  }              strncpy (mainkey, p, 16);
273                mainkey[16] = 0;
274                break;
275  /* Passphrase callback with the ability to support caching. */  
276  gpgme_error_t          case 1:
277  passphrase_cb (void *hook, const char *uid_hint,              strncpy (usedkey, p, 16);
278                 const char *passphrase_info,              usedkey[16] = 0;
279                 int prev_was_bad, int fd)              break;
280  {  
281      passphrase_cb_s *c = (passphrase_cb_s*)hook;          case 2:
282      HANDLE hd = (HANDLE)fd;              algo = (gpgme_pubkey_algo_t)atol (p);
283      void *item;              break;
284      const char *keyid, *pass;          }
285      DWORD n;      }
286      int rc;      uid_hint += 16; /* skip keyid */
287        uid_hint += 1;  /* space */
288      /* XXX: pubkey_enc cancel does not quit gpg.exe */  
289      /* XXX: handle prev_was_bad case. */      struct winpt_key_s skey;
290      if (!c)      gpgme_subkey_t sk;
291          return gpg_error (GPG_ERR_INV_ARG);      if (winpt_get_seckey (mainkey, &skey))
292            BUG (0);
293      if (passphrase_info) {      for (sk = skey.ctx->subkeys; sk; sk = sk->next) {
294          if (strlen (passphrase_info) < 16) {/* assume symetric encryption. */          if (memcmp (sk->keyid, usedkey, 8) == 0)
295              int n=2;              break;
296              c->sym.sym_algo = atoi (passphrase_info);      }
297              if (c->sym.sym_algo > 9)      char *uid = utf8_to_native (uid_hint);
298                  n++;      if (strcmp (usedkey, mainkey))
299              /* XXX: be more strict. */          _snprintf (desc, desc_size-1,
300              c->sym.s2k_mode = atoi (passphrase_info+n);                     _("You need a passphrase to unlock the secret key for user:\n"
301              c->sym.s2k_hash = atoi (passphrase_info+n+2);                       "\"%s\"\n"
302          }                       "%d-bit %s key, ID 0x%s, created %s (main key ID 0x%s)\n"),
303                       uid, sk->length, get_key_pubalgo (algo),
304          keyid = parse_gpg_keyid (passphrase_info);                     usedkey+8, get_key_created (sk->timestamp), mainkey+8);
305          pass = agent_get_cache (keyid+8, &item);      else if (!strcmp (usedkey, mainkey))
306          if (pass) {          _snprintf (desc, desc_size-1,
307              agent_unlock_cache_entry (&item);                     _("You need a passphrase to unlock the secret key for user:\n"
308              c->pwd_init = 0;                       "\"%s\"\n"
309              if (!WriteFile (hd, pass, strlen (pass), &n, NULL))                       "%d-bit %s key, created %s, ID 0x%s\n"),
310                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);                       uid, sk->length, get_key_pubalgo (algo),
311              if (!WriteFile (hd, "\n", 1, &n, NULL))                       get_key_created (sk->timestamp), usedkey+8);
312                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);      safe_free (uid);
313              return 0;      return 0;
314          }  }
315      }  
316    
317      if (c->pwd_init) {  /* Extract the serial number from the card ID @id and return it. */
318          if (keyid && strlen (keyid) == 16)  const char*
319              strcpy (c->keyid, keyid+8);  extract_serial_no (const char *id)
320    {
321          /* if the desc has a length of 32 and only hex digits, we assume a      static char buf[8];
322             smart card has been used. */      char *p;
323          if (uid_hint && strlen (uid_hint) == 32 && !is_hexstring (uid_hint)) {  
324              char buf[16];      p = strchr (id, '/');
325              memset (buf, 0, sizeof buf);      if (!p) {
326              strncpy (buf, uid_hint+20, 8);          log_debug ("extract_serial_no: error '%s'\r\n", id);
327              _snprintf (c->info, sizeof c->info-1,          return "";
328                         _("Please enter the PIN to unlock your secret card key\n"      }
329                           "Card: %s"), buf);      memset (buf, 0, sizeof (buf));
330              c->is_card = 1;      strncpy (buf, id+(p-id)-6, 6);
331          }      return buf;
332          else if (uid_hint)  }
333              parse_gpg_description (uid_hint, passphrase_info,  
334                                     c->info, sizeof c->info - 1);  
335          if (c->gpg_cmd == GPG_CMD_DECRYPT) {  /* Passphrase callback with the ability to support caching. */
336              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,  gpgme_error_t
337                                   (HWND)c->hwnd, passphrase_callback_proc,  passphrase_cb (void *hook, const char *uid_hint,
338                                   (LPARAM)c);                 const char *passphrase_info,
339          }                 int prev_was_bad, int fd)
340          else if (c->gpg_cmd == GPG_CMD_SIGN) {  {
341              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,      passphrase_cb_s *c = (passphrase_cb_s*)hook;
342                                   (HWND)c->hwnd, passphrase_callback_proc,      HANDLE hd = (HANDLE)fd;
343                                   (LPARAM)c);      void *item;
344          }      const char *keyid=NULL, *pass;
345          if (rc == -1) {      DWORD n;
346              WriteFile (hd, "\n", 1, &n, NULL);  
347              return gpg_error (GPG_ERR_EOF);      if (!c) {
348          }          log_debug ("passphrase_cb: error no valid callback\r\n");
349          c->pwd_init = 0;          return gpg_error (GPG_ERR_INV_ARG);
350      }      }
351      if (c->cancel) {  
352          WriteFile (hd, "\n", 1, &n, NULL);      /* If the last entered passphrase was wrong, we delete a
353          return gpg_error (GPG_ERR_EOF);         possible cached entry, we reset the passphrase buffer
354      }         and switch to the initial state. */
355        c->bad_pwd = prev_was_bad? 1 : 0;
356      WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL);      if (prev_was_bad && !c->cancel) {
357      WriteFile (hd, "\n", 1, &n, NULL);          if (c->pwd)
358      return 0;              burn_passphrase (&c->pwd);
359  }          agent_del_cache (c->keyid);
360            c->pwd_init = 1;
361        }
362  /* Initialize the given passphrase callback @cb with the  
363     used gpgme context @ctx, the command @cmd and a title      if (passphrase_info) {
364     @title for the dialog. */          if (strlen (passphrase_info) < 16 &&
365  void              !strstr (passphrase_info, "OPENPGP")) {
366  set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,              /* assume symetric encryption. */
367                         int cmd, HWND hwnd, const char *title)              int pos = 2;
368  {              c->sym.sym_algo = atoi (passphrase_info);
369      memset (cb, 0, sizeof *cb);              if (c->sym.sym_algo > 9)
370      cb->gpg_cmd = cmd;                  pos++;
371      cb->is_card = 0;              c->sym.s2k_mode = atoi (passphrase_info+pos);
372      cb->cancel = 0;              c->sym.s2k_hash = atoi (passphrase_info+pos+2);
373      cb->hwnd = hwnd;          }
374      cb->pwd_init = 1;  
375      free_if_alloc (cb->title);          keyid = parse_gpg_keyid (passphrase_info);
376      cb->title = m_strdup (title);          pass = agent_get_cache (keyid+8, &item);        
377      if (!cb->title)          if (pass) {
378          BUG (NULL);              agent_unlock_cache_entry (&item);
379      gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);              c->pwd_init = 0;
380      cb->gpg = ctx;              if (!WriteFile (hd, pass, strlen (pass), &n, NULL))
381  }                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
382                if (!WriteFile (hd, "\n", 1, &n, NULL))
383                    log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
384  /* Release a passphrase callback @ctx. */              return 0;
385  void          }
386  release_gpg_passphrase_cb (passphrase_cb_s *ctx)      }
387  {  
388      if (!ctx)      if (c->pwd_init) {
389          return;          if (keyid && strlen (keyid) == 16)
390      sfree_if_alloc (ctx->pwd);              strcpy (c->keyid, keyid+8);
391      free_if_alloc (ctx->title);  
392  }          /* if @passphrase_info contains 'OPENPGP' we assume a smart card
393                has been used. */
394  /* Simple check to measure passphrase (@pass) quality.          if (strstr (passphrase_info, "OPENPGP")) {
395     Return value: 0 on success. */              const char *s=passphrase_info;
396  int              while (s && *s && *s != 'D')
397  check_passwd_quality (const char *pass, int strict)                  s++;
398  {              _snprintf (c->info, DIM (c->info)-1,
399      int i, nd=0, nc=0, n;                         _("Please enter the PIN to unlock your secret card key\n"
400                             "Card: %s"), extract_serial_no (s));
401      n = strlen (pass);              c->is_card = 1;
402      if (n < 8)          }
403          return -1;          else if (uid_hint)
404                parse_gpg_description (uid_hint, passphrase_info,
405      for (i=0; i < n; i++) {                                     c->info, DIM (c->info) - 1);
406          if (isdigit (pass[i])) nd++;          int rc = 0;
407          if (isalpha (pass[i])) nc++;          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
408      }              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,
409                                     (HWND)c->hwnd, passphrase_callback_proc,
410      if (nd == n || nc == n)                                   (LPARAM)c);
411          return -1;          }
412            else if (c->gpg_cmd == GPG_CMD_SIGN) {
413      return 0;              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,
414  }                                   (HWND)c->hwnd, passphrase_callback_proc,
415                                     (LPARAM)c);
416            }
417            if (rc == -1) {
418                if (!WriteFile (hd, "\n", 1, &n, NULL))
419                    log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
420                log_debug ("passphrase_cb: could not create dialog box\n");
421                return 0;
422            }
423            c->pwd_init = 0;
424        }
425        if (c->cancel || !c->pwd) {
426            if (!WriteFile (hd, "\n", 1, &n, NULL))
427                log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
428            return 0;
429        }
430    
431        if (!WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL))
432            log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
433        if (!WriteFile (hd, "\n", 1, &n, NULL))
434            log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
435        return 0;
436    }
437    
438    
439    /* Initialize the given passphrase callback @cb with the
440       used gpgme context @ctx, the command @cmd and a title
441       @title for the dialog. */
442    void
443    set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,
444                           int cmd, HWND hwnd, const char *title)
445    {    
446        memset (cb, 0, sizeof *cb);
447        cb->gpg_cmd = cmd;
448        cb->bad_pwd = 0;
449        cb->is_card = 0;
450        cb->cancel = 0;
451        cb->hwnd = hwnd;
452        cb->pwd_init = 1;
453        cb->title = m_strdup (title);
454        gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);
455        cb->gpg = ctx;
456    }
457    
458    void
459    set_gpg_auto_passphrase_cb (passphrase_cb_s *cb, const char *title)
460    {
461        memset (cb, 0, sizeof *cb);
462        cb->gpg_cmd = GPG_CMD_SIGN;
463        cb->bad_pwd = 0;
464        cb->is_card = 0;
465        cb->cancel = 0;
466        cb->hwnd = GetActiveWindow ();
467        cb->pwd_init = 1;
468        cb->title = m_strdup (title);
469    }
470    
471    
472    /* Release a passphrase callback @ctx. */
473    void
474    release_gpg_passphrase_cb (passphrase_cb_s *ctx)
475    {
476        if (!ctx)
477            return;
478        sfree_if_alloc (ctx->pwd);
479        free_if_alloc (ctx->title);
480        release_gpg_recipients (&ctx->recipients);
481    }
482    
483    
484    /* Release the gpg recipient list. */
485    void
486    release_gpg_recipients (gpgme_recipient_t *recipients)
487    {
488        gpgme_recipient_t r, n;
489    
490        r = *recipients;
491        while (r != NULL) {
492            n = r->next;
493            safe_free (r->keyid);
494            safe_free (r);
495            r = n;
496        }
497        *recipients = NULL;
498    }
499    
500    
501    /* _Simple_ check to measure passphrase (@pass) quality.
502       Return value: 0 on success. */
503    int
504    check_passwd_quality (const char *pass, int strict)
505    {
506        size_t i, nd = 0, nc = 0, na = 0, n;
507    
508        /* A good passphrase should be at least 8 characters. */
509        n = strlen (pass);
510        if (n < 8)
511            return -1;
512    
513        for (i = 0; i < n; i++) {
514            if (isdigit (pass[i]))
515                nd++;
516            if (isalpha (pass[i]))
517                nc++;
518            else
519                na++;
520        }
521    
522        /* Check that the passphrase contains letters and numbers. */
523        if (nd == n || nc == n || na == n)
524            return -1;
525    
526        return 0;
527    }
Legend:
Removed from v.25  
changed lines
  Added in v.344
[email protected]
 ViewVC Help
Powered by ViewVC 1.1.26