/[winpt]/trunk/Src/wptPassphraseCB.cpp
ViewVC logotype

Diff of /trunk/Src/wptPassphraseCB.cpp

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 28 by twoaday, Thu Oct 20 12:35:59 2005 UTC revision 333 by twoaday, Tue Oct 13 10:51:21 2009 UTC
# Line 1  Line 1 
1  /* wptPassphraseCB.cpp - GPGME Passphrase Callback  /* wptPassphraseCB.cpp - GPGME Passphrase Callback
2   *      Copyright (C) 2001, 2002, 2003, 2005 Timo Schulz   *      Copyright (C) 2001, 2002-2006, 2009 Timo Schulz
3   *      Copyright (C) 2005 g10 Code GmbH   *      Copyright (C) 2005 g10 Code GmbH
4   *   *
5   * This file is part of WinPT.   * This file is part of WinPT.
6   *   *
7   * WinPT is free software; you can redistribute it and/or   * WinPT is free software; you can redistribute it and/or
8   * modify it under the terms of the GNU General Public License   * modify it under the terms of the GNU General Public License
9   * as published by the Free Software Foundation; either version 2   * as published by the Free Software Foundation; either version 2
10   * of the License, or (at your option) any later version.   * of the License, or (at your option) any later version.
11   *     *  
12   * WinPT is distributed in the hope that it will be useful,   * WinPT is distributed in the hope that it will be useful,
13   * but WITHOUT ANY WARRANTY; without even the implied warranty of   * but WITHOUT ANY WARRANTY; without even the implied warranty of
14   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15   * General Public License for more details.   * General Public License for more details.
16   *   */
17   * You should have received a copy of the GNU General Public License  #ifdef HAVE_CONFIG_H
18   * along with WinPT; if not, write to the Free Software Foundation,  #include <config.h>
19   * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA  #endif
20   */  
21    #include <windows.h>
22  #include <windows.h>  #include <ctype.h>
23  #include <ctype.h>  
24    #include "resource.h"
25  #include "../resource.h"  #include "wptNLS.h"
26  #include "wptNLS.h"  #include "wptW32API.h"
27  #include "wptW32API.h"  #include "wptVersion.h"
28  #include "wptVersion.h"  #include "wptGPG.h"
29  #include "wptGPG.h"  #include "wptCommonCtl.h"
30  #include "wptCommonCtl.h"  #include "wptContext.h"
31  #include "wptContext.h"  #include "wptDlgs.h"
32  #include "wptDlgs.h"  #include "wptErrors.h"
33  #include "wptUTF8.h"  #include "wptTypes.h"
34  #include "wptErrors.h"  #include "wptKeylist.h"
35  #include "wptTypes.h"  #include "wptAgent.h"
36  #include "wptKeyList.h"  #include "wptRegistry.h"
37  #include "wptAgent.h"  #include "wptUTF8.h"
38  #include "wptRegistry.h"  #include "StringBuffer.h"
39    
40  const char* get_symkey_algo (int algo);  
41    /* Return the control ID dependent on the mode (sign or decrypt). */
42  #define item_ctrl_id( cmd ) \  #define item_ctrl_id(cmd) \
43      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)
44    
45  #define item_ctrl_id2(cmd) \  #define item_ctrl_id2(cmd) \
46      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)
47    
48    const char* get_symkey_algo (int algo);
49  /* Overwrite passphrase and free memory. */  
50  static void  
51  burn_passphrase (char **pwd)  /* Overwrites the passphrase and free the memory.
52  {     Pointer is also reset to NULL. */
53      char *pass = *pwd;    static void
54      memset (pass, 0, strlen (pass));  burn_passphrase (char **pwd)
55      delete []pass;  {
56      *pwd = NULL;      char *pass = *pwd;
57  }  
58        wipememory (pass, strlen (pass));
59        delete []pass;
60  /* Dialog procedure for the passphrase callback. */      *pwd = NULL;
61  static BOOL CALLBACK  }
62  passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)  
63  {      
64      static passphrase_cb_s * c;  /* Dialog procedure for the passphrase callback. */
65      gpgme_decrypt_result_t res;  static BOOL CALLBACK
66      gpgme_sign_result_t res_sig;  passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)
67      gpgme_key_t key;  {    
68      void *ctx = NULL, *item;      static passphrase_cb_s *c;
69      const char *id;      gpgme_decrypt_result_t res=NULL;
70      char *info;      gpgme_sign_result_t res_sig=NULL;
71      int n;      gpgme_recipient_t recip=NULL, r;
72        winpt_key_s key;
73      /* XXX: we need a timer to update the 'enc_to' entries. */      void *item;
74      switch (msg) {      int n;
75      case WM_INITDIALOG:  
76          c = (passphrase_cb_s *)lparam;      switch (msg) {
77          if (!c)      case WM_ACTIVATE:
78              BUG (0);          /* Some people complained that it is no longer possible to
79          SetWindowText (dlg, c->title);             paste in the passphrase in this dialog. When this option
80          if (c->gpg_cmd == GPG_CMD_DECRYPT) {             is enabled, the ordinary passphrase control will be used. */
81              SetDlgItemText( dlg, IDC_DECRYPT_LISTINF,          if (!reg_prefs.no_safe_pwd_ctrl)
82                  _("Encrypted with the following public key(s)") );              safe_edit_control_init (dlg, item_ctrl_id (c->gpg_cmd));
83              CheckDlgButton( dlg, IDC_DECRYPT_HIDE, BST_CHECKED );          break;
84          }  
85          else if (c->gpg_cmd == GPG_CMD_SIGN)      case WM_DESTROY:
86              CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);          if (!reg_prefs.no_safe_pwd_ctrl)
87          res = gpgme_op_decrypt_result (c->gpg);              safe_edit_control_free (dlg, item_ctrl_id (c->gpg_cmd));
88          if (res != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {          break;
89              gpgme_recipient_t r;  
90        case WM_INITDIALOG:
91              /* XXX: not all ENCRYPT_TO entries are listed here. */          c = (passphrase_cb_s *)lparam;
92              for (r = res->recipients; r; r = r->next) {          if (!c)
93                  get_pubkey (r->keyid, &key);              BUG (0);
94                  if (key) {          SetDlgItemText (dlg, IDCANCEL, _("&Cancel"));
95                      char *uid;          SetWindowText (dlg, c->title);
96                      id = key->uids->name;          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
97                      if (!id)              SetDlgItemText (dlg, IDC_DECRYPT_HIDE, _("&Hide Typing"));
98                          id = _("Invalid User ID");              SetDlgItemText (dlg, IDC_DECRYPT_LISTINF,
99                      uid = utf8_to_wincp (id, strlen (id));                              _("Encrypted with the following public key(s):"));
100                      info = new char [32+strlen (uid)+1 + 4 + strlen (r->keyid)+1              CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED);
101                                       + strlen (key->uids->email)+1];          }
102                      if (!info)          else if (c->gpg_cmd == GPG_CMD_SIGN) {
103                          BUG (NULL);              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_HIDE, _("&Hide Typing"));
104                      sprintf (info, "%s <%s> (%s, 0x%s)", uid, key->uids->email,              CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);
105                               get_key_pubalgo (r->pubkey_algo), r->keyid+8);          }
106                      free (uid);          /* Because it depends on the order the keys are stored in the
107                                   keyring, whether res->recipients is complete or not, we also
108                  }             support that the recipients were externally extracted and then
109                  else {             we use this list. */
110                      info = new char [32 + strlen (r->keyid)+1 + 4];          if (c->recipients) /* recipients were already extracted. */
111                      if (!info)              recip = c->recipients;
112                          BUG (NULL);          else if (c->gpg) {
113                      sprintf (info, _("Unknown key ID (%s, 0x%s)"),              res = gpgme_op_decrypt_result (c->gpg);
114                               get_key_pubalgo (r->pubkey_algo), r->keyid+8);              if (res && res->recipients)
115                  }                  recip = res->recipients;
116                  listbox_add_string (GetDlgItem (dlg, IDC_DECRYPT_LIST), info);          }
117                  free_if_alloc (info);          if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {
118              }              StringBuffer inf;
119          }  
120          else if (c->gpg_cmd == GPG_CMD_DECRYPT)              for (r = recip; r; r = r->next) {
121              EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);                  memset (&key, 0, sizeof (key));
122          SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?                  if (!winpt_get_pubkey (r->keyid, &key)) {
123                          IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,                      gpgme_user_id_t u = key.ctx->uids;
124                          c->bad_pwd? _("Bad passphrase; Enter passphrase again") :                      inf = (u->name? u->name : _("Invalid User ID"));
125                          _("Please enter your passphrase"));                      if (u->email != NULL && strlen (u->email) > 1)
126          if (c->gpg_cmd == GPG_CMD_DECRYPT) {                          inf = inf + " <" + u->email + ">";
127              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));                      inf = inf + " (" + get_key_pubalgo (r->pubkey_algo);
128              if (res && !res->recipients) {                      inf = inf + ", 0x" + (r->keyid+8) + ")";
129                  const char *s = _("Symmetric encryption.\n"                  }
130                                    "%s encrypted data.");                  else {
131                  const char *alg = get_symkey_algo (c->sym.sym_algo);                      inf = _("Unknown key ID");
132                  info = new char[strlen (s) + strlen (alg) + 2];                      inf = inf + " (" + get_key_pubalgo (r->pubkey_algo);
133                  if (!info)                      inf = inf + ", 0x" + (r->keyid+8) + ")";
134                      BUG (NULL);                  }
135                  sprintf (info, s, alg);                  ListBox_AddString_utf8 (GetDlgItem (dlg, IDC_DECRYPT_LIST),
136                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, info);                                          inf.getBuffer ());
137                  free_if_alloc (info);                  winpt_release_pubkey (&key);
138              }              }
139              else          }
140                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);          else if (c->gpg_cmd == GPG_CMD_DECRYPT)
141          }              EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);
142          else {          SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?
143              SetFocus( GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));                          IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,
144              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);                          c->bad_pwd? _("Invalid passphrase; Please enter your passphrase again") :
145          }                          _("Please enter your passphrase"));
146          center_window (dlg, NULL);          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
147          SetForegroundWindow (dlg);              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));
148          set_active_window (dlg);              /* no recipients means symmetric encryption */
149          return FALSE;              if (res && !res->recipients) {
150                    StringBuffer sinf;
151          case WM_SYSCOMMAND:  
152              if (LOWORD (wparam) == SC_CLOSE) {                  sinf = _("Symmetric encryption.");
153                  SetDlgItemText (dlg, item_ctrl_id( c->gpg_cmd ), "");                  sinf = sinf + "\n" + get_symkey_algo (c->sym.sym_algo);
154                  c->cancel = 1;                  sinf = sinf + " " + _("encrypted data") + ".";
155                  EndDialog (dlg, TRUE);                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, sinf.getBuffer ());
156              }              }
157              break;              else
158                    SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);
159          case WM_COMMAND:          }
160              switch( HIWORD( wparam ) ) {          else {
161              case BN_CLICKED:              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));
162                  if ( LOWORD( wparam ) == IDC_DECRYPT_HIDE              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);
163                      || LOWORD( wparam ) == IDC_DECRYPT_SIGN_HIDE ) {          }
164                      HWND hwnd;          center_window (dlg, NULL);
165                      int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));          SetForegroundWindow (dlg);
166                      hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));          return FALSE;
167                      SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);  
168                      SetFocus (hwnd);          case WM_COMMAND:
169                  }              switch (HIWORD (wparam)) {
170              }              case BN_CLICKED:
171                    if  (LOWORD (wparam) == IDC_DECRYPT_HIDE ||
172              switch (LOWORD (wparam)) {                       LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) {
173              case IDOK:                        HWND hwnd;
174                  /* fixme: the item is even cached when the passphrase is not                      int hide;
175                            correct, which means that the user needs to delete all                      hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));
176                            cached entries to continue. */                      hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));
177                  if (c->pwd)                      SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);
178                      burn_passphrase (&c->pwd);                      SetFocus (hwnd);
179                  n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));                  }
180                  if (!n) {              }
181                      c->pwd = new char[2];  
182                      if (!c->pwd)              switch (LOWORD (wparam)) {
183                          BUG (NULL);              case IDOK:
184                      strcpy (c->pwd, "");                  /* XXX: the item is even cached when the passphrase is not
185                  }                          correct, which means that the user needs to delete all
186                  else {                          cached entries to continue. */
187                      c->pwd = new char[n+2];                  if (c->pwd)
188                      if (!c->pwd)                      burn_passphrase (&c->pwd);
189                          BUG (NULL);                  n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));
190                      GetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), c->pwd, n+1);                  if (!n) {
191                  }                      c->pwd = new char[2];
192                  res = gpgme_op_decrypt_result (c->gpg);                      strcpy (c->pwd, "");
193                  if (!res)                  }
194                      res_sig = gpgme_op_sign_result (c->gpg);                  else {
195                  if (reg_prefs.cache_time > 0 && !c->is_card &&                      char *p = new char[n+2];
196                      ((res && res->recipients) || (res_sig && res_sig->signatures))) {                      SafeGetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), p, n+1);
197                      if (agent_get_cache (c->keyid, &item))                      if (emulate_utf8_bug)
198                          agent_unlock_cache_entry (&item);                          c->pwd = native_to_utf8 (p);
199                      else                      else
200                          agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time);                          c->pwd = m_strdup (p);
201                  }                      sfree_if_alloc (p);
202                  EndDialog (dlg, TRUE);                  }
203                  return TRUE;                  if (c->gpg != NULL) {
204                                        res = gpgme_op_decrypt_result (c->gpg);
205              case IDCANCEL:                      if (!res)
206                  SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "" );                          res_sig = gpgme_op_sign_result (c->gpg);
207                  c->cancel = 1;                      if (!c->is_card && reg_prefs.cache_time > 0 &&
208                  EndDialog (dlg, FALSE);                          (res || res_sig)) {
209                  return FALSE;                          if (agent_get_cache (c->keyid, &item))
210              }                              agent_unlock_cache_entry (&item);
211              break;                          else
212      }                              agent_put_cache (c->keyid, c->pwd,
213                                                     reg_prefs.cache_time);
214      return FALSE;                      }
215  }                  }
216                    c->cancel = 0;
217                    EndDialog (dlg, TRUE);
218  /* Extract the main keyid from @pass_info.                  return TRUE;
219     Return value: long main keyid or NULL for an error. */                  
220  static const char*              case IDCANCEL:
221  parse_gpg_keyid (const char *pass_info)                  SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
222  {                  c->cancel = 1;
223      static char keyid[16+1];                  EndDialog (dlg, FALSE);
224                        return TRUE;
225      /* XXX: check for leading alpha-chars? */              }
226      if (strlen (pass_info) < 16)              break;
227          return NULL;      }
228      /* the format of the desc buffer looks like this:      
229         request_keyid[16] main_keyid[16] keytype[1] keylength[4]      return FALSE;
230         we use the main keyid to use only one cache entry. */  }
231      strncpy (keyid, pass_info+17, 16);  
232      keyid[16] = 0;  
233      return keyid;  /* Extract the main keyid from @pass_info.
234  }     Return value: long main keyid or NULL for an error. */
235    static const char*
236    parse_gpg_keyid (const char *pass_info)
237  /* Parse the information in @uid_hint and @pass_info to generate  {
238     a input message for the user in @desc. */      static char keyid[16+1];
239  static int      
240  parse_gpg_description (const char *uid_hint, const char *pass_info,      /* XXX: check for leading alpha-chars? */
241                         char *desc, int size)      if (strlen (pass_info) < 16) {
242  {          log_debug ("parse_gpg_keyid: error '%s'\r\n", pass_info);
243      gpgme_pubkey_algo_t algo;          return NULL;
244      char usedkey[16+1], mainkey[16+1];      }
245      char *uid, *p;      /* the format of the desc buffer looks like this:
246      int n=0;         request_keyid[16] main_keyid[16] keytype[1] keylength[4]
247           we use the main keyid to use only one cache entry. */
248      if (strlen (uid_hint) < 17) {      strncpy (keyid, pass_info+17, 16);
249          *desc = 0;      keyid[16] = 0;
250          return -1;      return keyid;
251      }  }
252    
253      while (p = strsep ((char**)&pass_info, " ")) {  
254          switch (n++) {  /* Parse the information in @uid_hint and @pass_info to generate
255          case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break;     a input message for the user in @desc. */
256          case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break;  static int
257          case 2: algo = (gpgme_pubkey_algo_t)atol (p); break;  parse_gpg_description (const char *uid_hint, const char *pass_info,
258          }                         char *desc, size_t desc_size)
259      }  {
260      uid_hint += 16; /* skip keyid */      gpgme_pubkey_algo_t algo;
261      uid_hint += 1;  /* space */      char usedkey[16+1];
262        char mainkey[16+1];
263      uid = utf8_to_wincp (uid_hint, strlen (uid_hint));      char *p, *uid;
264        int n=0;
265      if (strcmp (usedkey, mainkey))  
266          _snprintf (desc, size-1,      algo = (gpgme_pubkey_algo_t)0;
267                     _("You need a passphrase to unlock the secret key for\n"      /* Each uid_hint contains a long key-ID so it is at least 16 bytes. */
268                       "user: \"%s\"\n"      if (strlen (uid_hint) < 17) {
269                       "%s key, ID %s (main key ID %s)\n"),          *desc = 0;
270                     uid, get_key_pubalgo (algo), usedkey+8, mainkey+8);          log_debug ("parse_gpg_description: error '%s'\r\n", uid_hint);
271      else if (!strcmp (usedkey, mainkey))          return -1;
272          _snprintf (desc, size-1,      }
273                     _("You need a passphrase to unlock the secret key for\n"  
274                       "user: \"%s\"\n"      while ((p = strsep ((char**)&pass_info, " "))) {
275                       "%s key, ID %s\n"),          switch (n++) {
276                       uid, get_key_pubalgo (algo), usedkey+8);          case 0:
277      free (uid);              strncpy (mainkey, p, 16);
278      return 0;              mainkey[16] = 0;
279  }              break;
280    
281            case 1:
282  /*              strncpy (usedkey, p, 16);
283  static int inline              usedkey[16] = 0;
284  is_hexstring (const char * p)              break;
285  {  
286      size_t i;          case 2:
287                algo = (gpgme_pubkey_algo_t)atol (p);
288      for (i=0; i < strlen (p); i++) {              break;
289          if (!isxdigit (p[i]))          }
290              return -1;      }
291      }      uid_hint += 16; /* skip keyid */
292      return 0;      uid_hint += 1;  /* space */
293  }  
294  */      struct winpt_key_s skey;
295        gpgme_subkey_t sk;
296        if (winpt_get_seckey (mainkey, &skey))
297  /* Extract the serial number from the card ID @id and return it. */          BUG (0);
298  const char*      for (sk = skey.ctx->subkeys; sk; sk = sk->next) {
299  extract_serial_no (const char *id)          if (memcmp (sk->keyid, usedkey, 8) == 0)
300  {              break;
301      static char buf[8];      }
302      char *p;      uid = utf8_to_native (uid_hint);
303        if (strcmp (usedkey, mainkey))
304      p = strchr (id, '/');          _snprintf (desc, desc_size-1,
305      if (!p)                     _("You need a passphrase to unlock the secret key for user:\n"
306          return NULL;                       "\"%s\"\n"
307      strncpy (buf, id+(p-id)-6, 6);                       "%d-bit %s key, ID 0x%s, created %s (main key ID 0x%s)\n"),
308      return buf;                     uid, sk->length, get_key_pubalgo (algo),
309  }                     usedkey+8, get_key_created (sk->timestamp), mainkey+8);
310        else if (!strcmp (usedkey, mainkey))
311            _snprintf (desc, desc_size-1,
312  /* Passphrase callback with the ability to support caching. */                     _("You need a passphrase to unlock the secret key for user:\n"
313  gpgme_error_t                       "\"%s\"\n"
314  passphrase_cb (void *hook, const char *uid_hint,                       "%d-bit %s key, created %s, ID 0x%s\n"),
315                 const char *passphrase_info,                       uid, sk->length, get_key_pubalgo (algo),
316                 int prev_was_bad, int fd)                       get_key_created (sk->timestamp), usedkey+8);
317  {      safe_free (uid);
318      passphrase_cb_s *c = (passphrase_cb_s*)hook;      return 0;
319      HANDLE hd = (HANDLE)fd;  }
320      void *item;  
321      const char *keyid, *pass;  
322      DWORD n;  /* Extract the serial number from the card ID @id and return it. */
323      int rc;  const char*
324    extract_serial_no (const char *id)
325      if (!c)  {
326          return gpg_error (GPG_ERR_INV_ARG);      static char buf[8];
327      c->bad_pwd = prev_was_bad? 1 : 0;      char *p;
328      if (prev_was_bad && !c->cancel) {  
329          if (c->pwd)      p = strchr (id, '/');
330              burn_passphrase (&c->pwd);      if (!p) {
331          agent_del_cache (c->keyid);          log_debug ("extract_serial_no: error '%s'\r\n", id);
332          c->pwd_init = 1;          return "";
333      }      }
334        memset (buf, 0, sizeof (buf));
335      if (passphrase_info) {      strncpy (buf, id+(p-id)-6, 6);
336          if (strlen (passphrase_info) < 16 &&      return buf;
337              !strstr (passphrase_info, "OPENPGP")) {/* assume symetric encryption. */  }
338              int n=2;  
339              c->sym.sym_algo = atoi (passphrase_info);  
340              if (c->sym.sym_algo > 9)  /* Passphrase callback with the ability to support caching. */
341                  n++;  gpgme_error_t
342              /* XXX: be more strict. */  passphrase_cb (void *hook, const char *uid_hint,
343              c->sym.s2k_mode = atoi (passphrase_info+n);                 const char *passphrase_info,
344              c->sym.s2k_hash = atoi (passphrase_info+n+2);                 int prev_was_bad, int fd)
345          }  {
346        passphrase_cb_s *c = (passphrase_cb_s*)hook;
347          keyid = parse_gpg_keyid (passphrase_info);      HANDLE hd = (HANDLE)fd;
348          pass = agent_get_cache (keyid+8, &item);      void *item;
349          if (pass) {      const char *keyid=NULL, *pass;
350              agent_unlock_cache_entry (&item);      DWORD n;
351              c->pwd_init = 0;  
352              if (!WriteFile (hd, pass, strlen (pass), &n, NULL))      if (!c) {
353                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);          log_debug ("passphrase_cb: error no valid callback\r\n");
354              if (!WriteFile (hd, "\n", 1, &n, NULL))          return gpg_error (GPG_ERR_INV_ARG);
355                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);      }
356              return 0;  
357          }      /* If the last entered passphrase was wrong, we delete a
358      }         possible cached entry, we reset the passphrase buffer
359           and switch to the initial state. */
360      if (c->pwd_init) {      c->bad_pwd = prev_was_bad? 1 : 0;
361          if (keyid && strlen (keyid) == 16)      if (prev_was_bad && !c->cancel) {
362              strcpy (c->keyid, keyid+8);          if (c->pwd)
363                burn_passphrase (&c->pwd);
364          /* if @passphrase_info contains 'OPENPGP' we assume a smart card          agent_del_cache (c->keyid);
365              has been used. */          c->pwd_init = 1;
366          if (strstr (passphrase_info, "OPENPGP")) {      }
367              const char *s=passphrase_info;  
368              while (s && *s && *s != 'D')      if (passphrase_info) {
369                  s++;          if (strlen (passphrase_info) < 16 &&
370              _snprintf (c->info, sizeof c->info-1,              !strstr (passphrase_info, "OPENPGP")) {
371                         _("Please enter the PIN to unlock your secret card key\n"              /* assume symetric encryption. */
372                           "Card: %s"), extract_serial_no (s));              int pos=2;
373              c->is_card = 1;              c->sym.sym_algo = atoi (passphrase_info);
374          }              if (c->sym.sym_algo > 9)
375          else if (uid_hint)                  pos++;
376              parse_gpg_description (uid_hint, passphrase_info,              c->sym.s2k_mode = atoi (passphrase_info+pos);
377                                     c->info, sizeof c->info - 1);              c->sym.s2k_hash = atoi (passphrase_info+pos+2);
378          if (c->gpg_cmd == GPG_CMD_DECRYPT) {          }
379              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,  
380                                   (HWND)c->hwnd, passphrase_callback_proc,          keyid = parse_gpg_keyid (passphrase_info);
381                                   (LPARAM)c);          pass = agent_get_cache (keyid+8, &item);        
382          }          if (pass) {
383          else if (c->gpg_cmd == GPG_CMD_SIGN) {              agent_unlock_cache_entry (&item);
384              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,              c->pwd_init = 0;
385                                   (HWND)c->hwnd, passphrase_callback_proc,              if (!WriteFile (hd, pass, strlen (pass), &n, NULL))
386                                   (LPARAM)c);                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
387          }              if (!WriteFile (hd, "\n", 1, &n, NULL))
388          if (rc == -1) {                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
389              WriteFile (hd, "\n", 1, &n, NULL);              return 0;
390              return 0;          }
391          }      }
392          c->pwd_init = 0;  
393      }      if (c->pwd_init) {
394      if (c->cancel) {          if (keyid && strlen (keyid) == 16)
395          WriteFile (hd, "\n", 1, &n, NULL);              strcpy (c->keyid, keyid+8);
396          return 0;  
397      }          /* if @passphrase_info contains 'OPENPGP' we assume a smart card
398                has been used. */
399      WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL);          if (strstr (passphrase_info, "OPENPGP")) {
400      WriteFile (hd, "\n", 1, &n, NULL);              const char *s=passphrase_info;
401      return 0;              while (s && *s && *s != 'D')
402  }                  s++;
403                _snprintf (c->info, DIM (c->info)-1,
404                           _("Please enter the PIN to unlock your secret card key\n"
405  /* Initialize the given passphrase callback @cb with the                           "Card: %s"), extract_serial_no (s));
406     used gpgme context @ctx, the command @cmd and a title              c->is_card = 1;
407     @title for the dialog. */          }
408  void          else if (uid_hint)
409  set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,              parse_gpg_description (uid_hint, passphrase_info,
410                         int cmd, HWND hwnd, const char *title)                                     c->info, DIM (c->info) - 1);
411  {          int rc = 0;
412      memset (cb, 0, sizeof *cb);          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
413      cb->gpg_cmd = cmd;              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,
414      cb->bad_pwd = 0;                                   (HWND)c->hwnd, passphrase_callback_proc,
415      cb->is_card = 0;                                   (LPARAM)c);
416      cb->cancel = 0;          }
417      cb->hwnd = hwnd;          else if (c->gpg_cmd == GPG_CMD_SIGN) {
418      cb->pwd_init = 1;              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,
419      free_if_alloc (cb->title);                                   (HWND)c->hwnd, passphrase_callback_proc,
420      cb->title = m_strdup (title);                                   (LPARAM)c);
421      if (!cb->title)          }
422          BUG (NULL);          if (rc == -1) {
423      gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);              if (!WriteFile (hd, "\n", 1, &n, NULL))
424      cb->gpg = ctx;                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
425  }              log_debug ("passphrase_cb: could not create dialog box\n");
426                return 0;
427            }
428  /* Release a passphrase callback @ctx. */          c->pwd_init = 0;
429  void      }
430  release_gpg_passphrase_cb (passphrase_cb_s *ctx)      if (c->cancel || !c->pwd) {
431  {          if (!WriteFile (hd, "\n", 1, &n, NULL))
432      if (!ctx)              log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
433          return;          return 0;
434      sfree_if_alloc (ctx->pwd);      }
435      free_if_alloc (ctx->title);  
436  }      if (!WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL))
437            log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
438        if (!WriteFile (hd, "\n", 1, &n, NULL))
439  /* Simple check to measure passphrase (@pass) quality.          log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
440     Return value: 0 on success. */      return 0;
441  int  }
442  check_passwd_quality (const char *pass, int strict)  
443  {  
444      int i, nd=0, nc=0, n;  /* Initialize the given passphrase callback @cb with the
445       used gpgme context @ctx, the command @cmd and a title
446      n = strlen (pass);     @title for the dialog. */
447      if (n < 8)  void
448          return -1;  set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,
449                           int cmd, HWND hwnd, const char *title)
450      for (i=0; i < n; i++) {  {    
451          if (isdigit (pass[i])) nd++;      memset (cb, 0, sizeof *cb);
452          if (isalpha (pass[i])) nc++;      cb->gpg_cmd = cmd;
453      }      cb->bad_pwd = 0;
454        cb->is_card = 0;
455      if (nd == n || nc == n)      cb->cancel = 0;
456          return -1;      cb->hwnd = hwnd;
457        cb->pwd_init = 1;
458      return 0;      cb->title = m_strdup (title);
459  }      gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);
460        cb->gpg = ctx;
461    }
462    
463    void
464    set_gpg_auto_passphrase_cb (passphrase_cb_s *cb, const char *title)
465    {
466        memset (cb, 0, sizeof *cb);
467        cb->gpg_cmd = GPG_CMD_SIGN;
468        cb->bad_pwd = 0;
469        cb->is_card = 0;
470        cb->cancel = 0;
471        cb->hwnd = GetActiveWindow ();
472        cb->pwd_init = 1;
473        cb->title = m_strdup (title);
474    }
475    
476    
477    /* Release a passphrase callback @ctx. */
478    void
479    release_gpg_passphrase_cb (passphrase_cb_s *ctx)
480    {
481        if (!ctx)
482            return;
483        sfree_if_alloc (ctx->pwd);
484        free_if_alloc (ctx->title);
485        release_gpg_recipients (&ctx->recipients);
486    }
487    
488    
489    /* Release the gpg recipient list. */
490    void
491    release_gpg_recipients (gpgme_recipient_t *recipients)
492    {
493        gpgme_recipient_t r, n;
494    
495        r = *recipients;
496        while (r != NULL) {
497            n = r->next;
498            safe_free (r->keyid);
499            safe_free (r);
500            r = n;
501        }
502        *recipients = NULL;
503    }
504    
505    
506    /* _Simple_ check to measure passphrase (@pass) quality.
507       Return value: 0 on success. */
508    int
509    check_passwd_quality (const char *pass, int strict)
510    {
511        int i, nd=0, nc=0, n;
512    
513        /* A good passphrase should be at least 8 characters. */
514        n = strlen (pass);
515        if (n < 8)
516            return -1;
517    
518        for (i=0; i < n; i++) {
519            if (isdigit (pass[i]))
520                nd++;
521            if (isalpha (pass[i]))
522                nc++;
523        }
524    
525        /* Check that the passphrase contains letters and numbers. */
526        if (nd == n || nc == n)
527            return -1;
528    
529        return 0;
530    }

Legend:
Removed from v.28  
changed lines
  Added in v.333

[email protected]
ViewVC Help
Powered by ViewVC 1.1.26