/[winpt]/trunk/Src/wptPassphraseCB.cpp
ViewVC logotype

Diff of /trunk/Src/wptPassphraseCB.cpp

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 34 by twoaday, Wed Oct 26 11:20:09 2005 UTC revision 340 by twoaday, Sun Nov 27 13:15:07 2011 UTC
# Line 1  Line 1 
1  /* wptPassphraseCB.cpp - GPGME Passphrase Callback  /* wptPassphraseCB.cpp - GPGME Passphrase Callback
2   *      Copyright (C) 2001, 2002, 2003, 2005 Timo Schulz   *      Copyright (C) 2001, 2002-2006, 2009 Timo Schulz
3   *      Copyright (C) 2005 g10 Code GmbH   *      Copyright (C) 2005 g10 Code GmbH
4   *   *
5   * This file is part of WinPT.   * This file is part of WinPT.
6   *   *
7   * WinPT is free software; you can redistribute it and/or   * WinPT is free software; you can redistribute it and/or
8   * modify it under the terms of the GNU General Public License   * modify it under the terms of the GNU General Public License
9   * as published by the Free Software Foundation; either version 2   * as published by the Free Software Foundation; either version 2
10   * of the License, or (at your option) any later version.   * of the License, or (at your option) any later version.
11   *     *  
12   * WinPT is distributed in the hope that it will be useful,   * WinPT is distributed in the hope that it will be useful,
13   * but WITHOUT ANY WARRANTY; without even the implied warranty of   * but WITHOUT ANY WARRANTY; without even the implied warranty of
14   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15   * General Public License for more details.   * General Public License for more details.
16   *   */
17   * You should have received a copy of the GNU General Public License  #ifdef HAVE_CONFIG_H
18   * along with WinPT; if not, write to the Free Software Foundation,  #include <config.h>
19   * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA  #endif
20   */  
21    #include <windows.h>
22  #include <windows.h>  #include <ctype.h>
23  #include <ctype.h>  
24    #include "resource.h"
25  #include "../resource.h"  #include "wptNLS.h"
26  #include "wptNLS.h"  #include "wptW32API.h"
27  #include "wptW32API.h"  #include "wptVersion.h"
28  #include "wptVersion.h"  #include "wptGPG.h"
29  #include "wptGPG.h"  #include "wptCommonCtl.h"
30  #include "wptCommonCtl.h"  #include "wptContext.h"
31  #include "wptContext.h"  #include "wptDlgs.h"
32  #include "wptDlgs.h"  #include "wptErrors.h"
33  #include "wptUTF8.h"  #include "wptTypes.h"
34  #include "wptErrors.h"  #include "wptKeylist.h"
35  #include "wptTypes.h"  #include "wptAgent.h"
36  #include "wptKeyList.h"  #include "wptRegistry.h"
37  #include "wptAgent.h"  #include "wptUTF8.h"
38  #include "wptRegistry.h"  #include "StringBuffer.h"
39    
40  const char* get_symkey_algo (int algo);  
41    /* Return the control ID dependent on the mode (sign or decrypt). */
42  #define item_ctrl_id( cmd ) \  #define item_ctrl_id(cmd) \
43      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_PWD : IDC_DECRYPT_SIGN_PWD)
44    
45  #define item_ctrl_id2(cmd) \  #define item_ctrl_id2(cmd) \
46      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)      ((cmd) == GPG_CMD_DECRYPT? IDC_DECRYPT_HIDE : IDC_DECRYPT_SIGN_HIDE)
47    
48    const char* get_symkey_algo (int algo);
49  /* Overwrite passphrase and free memory. */  
50  static void  
51  burn_passphrase (char **pwd)  /* Overwrites the passphrase and free the memory.
52  {     Pointer is also reset to NULL. */
53      char *pass = *pwd;  static void
54      wipememory (pass, strlen (pass));  burn_passphrase (char **pwd)
55      delete []pass;  {
56      *pwd = NULL;      char *pass = *pwd;
57  }  
58        wipememory (pass, strlen (pass));
59        delete []pass;
60  /* Dialog procedure for the passphrase callback. */      *pwd = NULL;
61  static BOOL CALLBACK  }
62  passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)  
63  {      
64      static passphrase_cb_s * c;  /* Dialog procedure for the passphrase callback. */
65      gpgme_decrypt_result_t res;  static BOOL CALLBACK
66      gpgme_sign_result_t res_sig;  passphrase_callback_proc (HWND dlg, UINT msg, WPARAM wparam, LPARAM lparam)
67      gpgme_key_t key;  {    
68      gpgme_recipient_t recip, r;      static passphrase_cb_s *c;
69      void *ctx = NULL, *item;      gpgme_decrypt_result_t res=NULL;
70      const char *id;      gpgme_sign_result_t res_sig=NULL;
71      char *info;      gpgme_recipient_t recip=NULL, r;
72      int n;      winpt_key_s key;
73        void *item;
74      switch (msg) {      int n;
75      case WM_INITDIALOG:  
76          c = (passphrase_cb_s *)lparam;      switch (msg) {
77          if (!c)      case WM_ACTIVATE:
78              BUG (0);          /* Some people complained that it is no longer possible to
79          SetWindowText (dlg, c->title);             paste in the passphrase in this dialog. When this option
80          if (c->gpg_cmd == GPG_CMD_DECRYPT) {             is enabled, the ordinary passphrase control will be used. */
81              SetDlgItemText (dlg, IDC_DECRYPT_LISTINF,          if (!reg_prefs.no_safe_pwd_ctrl)
82                              _("Encrypted with the following public key(s)"));              safe_edit_control_init (dlg, item_ctrl_id (c->gpg_cmd));
83              CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED);          break;
84          }  
85          else if (c->gpg_cmd == GPG_CMD_SIGN)      case WM_DESTROY:
86              CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);          if (!reg_prefs.no_safe_pwd_ctrl)
87          if (c->recipients)              safe_edit_control_free (dlg, item_ctrl_id (c->gpg_cmd));
88              recip = c->recipients; /* recipients were already extracted. */          break;
89          else {  
90              /* XXX: not all ENCRYPT_TO entries are listed here. */      case WM_INITDIALOG:
91              res = gpgme_op_decrypt_result (c->gpg);          c = (passphrase_cb_s *)lparam;
92              if (res && res->recipients)          if (!c)
93                  recip = res->recipients;              BUG (0);
94          }          SetDlgItemText (dlg, IDCANCEL, _("&Cancel"));
95          if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {          SetWindowText (dlg, c->title);
96              for (r = res->recipients; r; r = r->next) {          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
97                  get_pubkey (r->keyid, &key);              SetDlgItemText (dlg, IDC_DECRYPT_HIDE, _("&Hide Typing"));
98                  if (key) {              SetDlgItemText (dlg, IDC_DECRYPT_LISTINF,
99                      char *uid;                              _("Encrypted with the following public key(s):"));
100                      id = key->uids->name;              CheckDlgButton (dlg, IDC_DECRYPT_HIDE, BST_CHECKED);
101                      if (!id)          }
102                          id = _("Invalid User ID");          else if (c->gpg_cmd == GPG_CMD_SIGN) {
103                      uid = utf8_to_wincp (id, strlen (id));              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_HIDE, _("&Hide Typing"));
104                      info = new char [32+strlen (uid)+1 + 4 + strlen (r->keyid)+1              CheckDlgButton (dlg, IDC_DECRYPT_SIGN_HIDE, BST_CHECKED);
105                                       + strlen (key->uids->email)+1];          }
106                      if (!info)          /* Because it depends on the order the keys are stored in the
107                          BUG (NULL);             keyring, whether res->recipients is complete or not, we also
108                      sprintf (info, "%s <%s> (%s, 0x%s)", uid, key->uids->email,             support that the recipients were externally extracted and then
109                               get_key_pubalgo (r->pubkey_algo), r->keyid+8);             we use this list. */
110                      free (uid);          if (c->recipients) /* recipients were already extracted. */
111                                    recip = c->recipients;
112                  }          else if (c->gpg) {
113                  else {              res = gpgme_op_decrypt_result (c->gpg);
114                      info = new char [32 + strlen (r->keyid)+1 + 4];              if (res && res->recipients)
115                      if (!info)                  recip = res->recipients;
116                          BUG (NULL);          }
117                      sprintf (info, _("Unknown key ID (%s, 0x%s)"),          if (recip != NULL && c->gpg_cmd == GPG_CMD_DECRYPT) {
118                               get_key_pubalgo (r->pubkey_algo), r->keyid+8);              StringBuffer inf;
119                  }  
120                  listbox_add_string (GetDlgItem (dlg, IDC_DECRYPT_LIST), info);              for (r = recip; r; r = r->next) {
121                  free_if_alloc (info);                  memset (&key, 0, sizeof (key));
122              }                  if (!winpt_get_pubkey (r->keyid, &key)) {
123          }                      gpgme_user_id_t u = key.ctx->uids;
124          else if (c->gpg_cmd == GPG_CMD_DECRYPT)                      inf = (u->name? u->name : _("Invalid User ID"));
125              EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);                      if (u->email != NULL && strlen (u->email) > 1)
126          SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?                          inf = inf + " <" + u->email + ">";
127                          IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,                      inf = inf + " (" + get_key_pubalgo (r->pubkey_algo);
128                          c->bad_pwd? _("Bad passphrase; Enter passphrase again") :                      inf = inf + ", 0x" + (r->keyid+8) + ")";
129                          _("Please enter your passphrase"));                  }
130          if (c->gpg_cmd == GPG_CMD_DECRYPT) {                  else {
131              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));                      inf = _("Unknown key ID");
132              if (res && !res->recipients) {                      inf = inf + " (" + get_key_pubalgo (r->pubkey_algo);
133                  const char *s = _("Symmetric encryption.\n"                      inf = inf + ", 0x" + (r->keyid+8) + ")";
134                                    "%s encrypted data.");                  }
135                  const char *alg = get_symkey_algo (c->sym.sym_algo);                  ListBox_AddString_utf8 (GetDlgItem (dlg, IDC_DECRYPT_LIST),
136                  info = new char[strlen (s) + strlen (alg) + 2];                                          inf.getBuffer ());
137                  if (!info)                  winpt_release_pubkey (&key);
138                      BUG (NULL);              }
139                  sprintf (info, s, alg);          }
140                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, info);          else if (c->gpg_cmd == GPG_CMD_DECRYPT)
141                  free_if_alloc (info);              EnableWindow (GetDlgItem (dlg, IDC_DECRYPT_LIST), FALSE);
142              }          SetDlgItemText (dlg, c->gpg_cmd == GPG_CMD_DECRYPT?
143              else                          IDC_DECRYPT_PWDINFO : IDC_DECRYPT_SIGN_PWDINFO,
144                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);                          c->bad_pwd? _("Invalid passphrase; Please enter your passphrase again") :
145          }                          _("Please enter your passphrase"));
146          else {          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
147              SetFocus( GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_PWD));
148              SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);              /* no recipients means symmetric encryption */
149          }              if (res && !res->recipients) {
150          center_window (dlg, NULL);                  StringBuffer sinf;
151          SetForegroundWindow (dlg);  
152          set_active_window (dlg);                  sinf = _("Symmetric encryption.");
153          return FALSE;                  sinf = sinf + "\n" + get_symkey_algo (c->sym.sym_algo);
154                    sinf = sinf + " " + _("encrypted data") + ".";
155          case WM_SYSCOMMAND:                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, sinf.getBuffer ());
156              if (LOWORD (wparam) == SC_CLOSE) {              }
157                  SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");              else
158                  c->cancel = 1;                  SetDlgItemText (dlg, IDC_DECRYPT_MSG, c->info);
159                  EndDialog (dlg, TRUE);          }
160              }          else {
161              break;              SetFocus (GetDlgItem (dlg, IDC_DECRYPT_SIGN_PWD));
162                SetDlgItemText (dlg, IDC_DECRYPT_SIGN_MSG, c->info);
163          case WM_COMMAND:          }
164              switch (HIWORD (wparam)) {          center_window (dlg, NULL);
165              case BN_CLICKED:          SetForegroundWindow (dlg);
166                  if  (LOWORD (wparam) == IDC_DECRYPT_HIDE          return FALSE;
167                      || LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) {  
168                      HWND hwnd;          case WM_COMMAND:
169                      int hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));              switch (HIWORD (wparam)) {
170                      hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));              case BN_CLICKED:
171                      SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);                  if  (LOWORD (wparam) == IDC_DECRYPT_HIDE ||
172                      SetFocus (hwnd);                       LOWORD (wparam) == IDC_DECRYPT_SIGN_HIDE) {
173                  }                      HWND hwnd;
174              }                      int hide;
175                        hide = IsDlgButtonChecked (dlg, item_ctrl_id2 (c->gpg_cmd));
176              switch (LOWORD (wparam)) {                      hwnd = GetDlgItem (dlg, item_ctrl_id (c->gpg_cmd));
177              case IDOK:                        SendMessage (hwnd, EM_SETPASSWORDCHAR, hide? '*' : 0, 0);
178                  /* XXX: the item is even cached when the passphrase is not                      SetFocus (hwnd);
179                          correct, which means that the user needs to delete all                  }
180                          cached entries to continue. */              }
181                  if (c->pwd)  
182                      burn_passphrase (&c->pwd);              switch (LOWORD (wparam)) {
183                  n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));              case IDOK:
184                  if (!n) {                  /* XXX: the item is even cached when the passphrase is not
185                      c->pwd = new char[2];                          correct, which means that the user needs to delete all
186                      if (!c->pwd)                          cached entries to continue. */
187                          BUG (NULL);                  if (c->pwd)
188                      strcpy (c->pwd, "");                      burn_passphrase (&c->pwd);
189                  }                  n = item_get_text_length (dlg, item_ctrl_id (c->gpg_cmd));
190                  else {                  if (!n) {
191                      c->pwd = new char[n+2];                      c->pwd = new char[2];
192                      if (!c->pwd)                      strcpy (c->pwd, "");
193                          BUG (NULL);                  }
194                      GetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), c->pwd, n+1);                  else {
195                  }                      char *p = new char[n+2];
196                  res = gpgme_op_decrypt_result (c->gpg);                      SafeGetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), p, n+1);
197                  if (!res)                      c->pwd = m_strdup (p);
198                      res_sig = gpgme_op_sign_result (c->gpg);                      sfree_if_alloc (p);
199                  if (reg_prefs.cache_time > 0 && !c->is_card &&                  }
200                      ((res && res->recipients) || (res_sig && res_sig->signatures))) {                  if (c->gpg != NULL) {
201                      if (agent_get_cache (c->keyid, &item))                      res = gpgme_op_decrypt_result (c->gpg);
202                          agent_unlock_cache_entry (&item);                      if (!res)
203                      else                          res_sig = gpgme_op_sign_result (c->gpg);
204                          agent_put_cache (c->keyid, c->pwd, reg_prefs.cache_time);                      if (!c->is_card && reg_prefs.cache_time > 0 &&
205                  }                          (res || res_sig)) {
206                  c->cancel = 0;                          if (agent_get_cache (c->keyid, &item))
207                  EndDialog (dlg, TRUE);                              agent_unlock_cache_entry (&item);
208                  return TRUE;                          else
209                                                agent_put_cache (c->keyid, c->pwd,
210              case IDCANCEL:                                               reg_prefs.cache_time);
211                  SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");                      }
212                  c->cancel = 1;                  }
213                  EndDialog (dlg, FALSE);                  c->cancel = 0;
214                  return FALSE;                  EndDialog (dlg, TRUE);
215              }                  return TRUE;
216              break;                  
217      }              case IDCANCEL:
218                        SetDlgItemText (dlg, item_ctrl_id (c->gpg_cmd), "");
219      return FALSE;                  c->cancel = 1;
220  }                  EndDialog (dlg, FALSE);
221                    return TRUE;
222                }
223  /* Extract the main keyid from @pass_info.              break;
224     Return value: long main keyid or NULL for an error. */      }
225  static const char*      
226  parse_gpg_keyid (const char *pass_info)      return FALSE;
227  {  }
228      static char keyid[16+1];  
229        
230      /* XXX: check for leading alpha-chars? */  /* Extract the main keyid from @pass_info.
231      if (strlen (pass_info) < 16)     Return value: long main keyid or NULL for an error. */
232          return NULL;  static const char*
233      /* the format of the desc buffer looks like this:  parse_gpg_keyid (const char *pass_info)
234         request_keyid[16] main_keyid[16] keytype[1] keylength[4]  {
235         we use the main keyid to use only one cache entry. */      static char keyid[16+1];
236      strncpy (keyid, pass_info+17, 16);      
237      keyid[16] = 0;      /* XXX: check for leading alpha-chars? */
238      return keyid;      if (strlen (pass_info) < 16) {
239  }          log_debug ("parse_gpg_keyid: error '%s'\r\n", pass_info);
240            return NULL;
241        }
242  /* Parse the information in @uid_hint and @pass_info to generate      /* the format of the desc buffer looks like this:
243     a input message for the user in @desc. */         request_keyid[16] main_keyid[16] keytype[1] keylength[4]
244  static int         we use the main keyid to use only one cache entry. */
245  parse_gpg_description (const char *uid_hint, const char *pass_info,      strncpy (keyid, pass_info+17, 16);
246                         char *desc, int size)      keyid[16] = 0;
247  {      return keyid;
248      gpgme_pubkey_algo_t algo;  }
249      char usedkey[16+1];  
250      char mainkey[16+1];  
251      char *uid, *p;  /* Parse the information in @uid_hint and @pass_info to generate
252      int n=0;     a input message for the user in @desc. */
253    static int
254      /* Each uid_hint contains a long key-ID so it is at least 16 bytes. */  parse_gpg_description (const char *uid_hint, const char *pass_info,
255      if (strlen (uid_hint) < 17) {                         char *desc, size_t desc_size)
256          *desc = 0;  {
257          return -1;      gpgme_pubkey_algo_t algo;
258      }      char usedkey[16+1];
259        char mainkey[16+1];
260      while (p = strsep ((char**)&pass_info, " ")) {      char *p, *uid;
261          switch (n++) {      int n=0;
262          case 0: strncpy (mainkey, p, 16); mainkey[16] = 0; break;  
263          case 1: strncpy (usedkey, p, 16); usedkey[16] = 0; break;      algo = (gpgme_pubkey_algo_t)0;
264          case 2: algo = (gpgme_pubkey_algo_t)atol (p); break;      /* Each uid_hint contains a long key-ID so it is at least 16 bytes. */
265          }      if (strlen (uid_hint) < 17) {
266      }          *desc = 0;
267      uid_hint += 16; /* skip keyid */          log_debug ("parse_gpg_description: error '%s'\r\n", uid_hint);
268      uid_hint += 1;  /* space */          return -1;
269        }
270      uid = utf8_to_wincp (uid_hint, strlen (uid_hint));  
271        while ((p = strsep ((char**)&pass_info, " "))) {
272      if (strcmp (usedkey, mainkey))          switch (n++) {
273          _snprintf (desc, size-1,          case 0:
274                     _("You need a passphrase to unlock the secret key for\n"              strncpy (mainkey, p, 16);
275                       "user: \"%s\"\n"              mainkey[16] = 0;
276                       "%s key, ID %s (main key ID %s)\n"),              break;
277                     uid, get_key_pubalgo (algo), usedkey+8, mainkey+8);  
278      else if (!strcmp (usedkey, mainkey))          case 1:
279          _snprintf (desc, size-1,              strncpy (usedkey, p, 16);
280                     _("You need a passphrase to unlock the secret key for\n"              usedkey[16] = 0;
281                       "user: \"%s\"\n"              break;
282                       "%s key, ID %s\n"),  
283                       uid, get_key_pubalgo (algo), usedkey+8);          case 2:
284      free (uid);              algo = (gpgme_pubkey_algo_t)atol (p);
285      return 0;              break;
286  }          }
287        }
288        uid_hint += 16; /* skip keyid */
289  /* Extract the serial number from the card ID @id and return it. */      uid_hint += 1;  /* space */
290  const char*  
291  extract_serial_no (const char *id)      struct winpt_key_s skey;
292  {      gpgme_subkey_t sk;
293      static char buf[8];      if (winpt_get_seckey (mainkey, &skey))
294      char *p;          BUG (0);
295        for (sk = skey.ctx->subkeys; sk; sk = sk->next) {
296      p = strchr (id, '/');          if (memcmp (sk->keyid, usedkey, 8) == 0)
297      if (!p)              break;
298          return NULL;      }
299      strncpy (buf, id+(p-id)-6, 6);      uid = utf8_to_native (uid_hint);
300      return buf;      if (strcmp (usedkey, mainkey))
301  }          _snprintf (desc, desc_size-1,
302                       _("You need a passphrase to unlock the secret key for user:\n"
303                         "\"%s\"\n"
304  /* Passphrase callback with the ability to support caching. */                       "%d-bit %s key, ID 0x%s, created %s (main key ID 0x%s)\n"),
305  gpgme_error_t                     uid, sk->length, get_key_pubalgo (algo),
306  passphrase_cb (void *hook, const char *uid_hint,                     usedkey+8, get_key_created (sk->timestamp), mainkey+8);
307                 const char *passphrase_info,      else if (!strcmp (usedkey, mainkey))
308                 int prev_was_bad, int fd)          _snprintf (desc, desc_size-1,
309  {                     _("You need a passphrase to unlock the secret key for user:\n"
310      passphrase_cb_s *c = (passphrase_cb_s*)hook;                       "\"%s\"\n"
311      HANDLE hd = (HANDLE)fd;                       "%d-bit %s key, created %s, ID 0x%s\n"),
312      void *item;                       uid, sk->length, get_key_pubalgo (algo),
313      const char *keyid, *pass;                       get_key_created (sk->timestamp), usedkey+8);
314      DWORD n;      safe_free (uid);
315      int rc;      return 0;
316    }
317      if (!c)  
318          return gpg_error (GPG_ERR_INV_ARG);  
319      c->bad_pwd = prev_was_bad? 1 : 0;  /* Extract the serial number from the card ID @id and return it. */
320      if (prev_was_bad && !c->cancel) {  const char*
321          if (c->pwd)  extract_serial_no (const char *id)
322              burn_passphrase (&c->pwd);  {
323          agent_del_cache (c->keyid);      static char buf[8];
324          c->pwd_init = 1;      char *p;
325      }  
326        p = strchr (id, '/');
327      if (passphrase_info) {      if (!p) {
328          if (strlen (passphrase_info) < 16 &&          log_debug ("extract_serial_no: error '%s'\r\n", id);
329              !strstr (passphrase_info, "OPENPGP")) {          return "";
330              /* assume symetric encryption. */      }
331              int n=2;      memset (buf, 0, sizeof (buf));
332              c->sym.sym_algo = atoi (passphrase_info);      strncpy (buf, id+(p-id)-6, 6);
333              if (c->sym.sym_algo > 9)      return buf;
334                  n++;  }
335              /* XXX: be more strict. */  
336              c->sym.s2k_mode = atoi (passphrase_info+n);  
337              c->sym.s2k_hash = atoi (passphrase_info+n+2);  /* Passphrase callback with the ability to support caching. */
338          }  gpgme_error_t
339    passphrase_cb (void *hook, const char *uid_hint,
340          keyid = parse_gpg_keyid (passphrase_info);                 const char *passphrase_info,
341          pass = agent_get_cache (keyid+8, &item);                 int prev_was_bad, int fd)
342          if (pass) {  {
343              agent_unlock_cache_entry (&item);      passphrase_cb_s *c = (passphrase_cb_s*)hook;
344              c->pwd_init = 0;      HANDLE hd = (HANDLE)fd;
345              if (!WriteFile (hd, pass, strlen (pass), &n, NULL))      void *item;
346                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);      const char *keyid=NULL, *pass;
347              if (!WriteFile (hd, "\n", 1, &n, NULL))      DWORD n;
348                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);  
349              return 0;      if (!c) {
350          }          log_debug ("passphrase_cb: error no valid callback\r\n");
351      }          return gpg_error (GPG_ERR_INV_ARG);
352        }
353      if (c->pwd_init) {  
354          if (keyid && strlen (keyid) == 16)      /* If the last entered passphrase was wrong, we delete a
355              strcpy (c->keyid, keyid+8);         possible cached entry, we reset the passphrase buffer
356           and switch to the initial state. */
357          /* if @passphrase_info contains 'OPENPGP' we assume a smart card      c->bad_pwd = prev_was_bad? 1 : 0;
358              has been used. */      if (prev_was_bad && !c->cancel) {
359          if (strstr (passphrase_info, "OPENPGP")) {          if (c->pwd)
360              const char *s=passphrase_info;              burn_passphrase (&c->pwd);
361              while (s && *s && *s != 'D')          agent_del_cache (c->keyid);
362                  s++;          c->pwd_init = 1;
363              _snprintf (c->info, sizeof c->info-1,      }
364                         _("Please enter the PIN to unlock your secret card key\n"  
365                           "Card: %s"), extract_serial_no (s));      if (passphrase_info) {
366              c->is_card = 1;          if (strlen (passphrase_info) < 16 &&
367          }              !strstr (passphrase_info, "OPENPGP")) {
368          else if (uid_hint)              /* assume symetric encryption. */
369              parse_gpg_description (uid_hint, passphrase_info,              int pos=2;
370                                     c->info, sizeof c->info - 1);              c->sym.sym_algo = atoi (passphrase_info);
371          if (c->gpg_cmd == GPG_CMD_DECRYPT) {              if (c->sym.sym_algo > 9)
372              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,                  pos++;
373                                   (HWND)c->hwnd, passphrase_callback_proc,              c->sym.s2k_mode = atoi (passphrase_info+pos);
374                                   (LPARAM)c);              c->sym.s2k_hash = atoi (passphrase_info+pos+2);
375          }          }
376          else if (c->gpg_cmd == GPG_CMD_SIGN) {  
377              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,          keyid = parse_gpg_keyid (passphrase_info);
378                                   (HWND)c->hwnd, passphrase_callback_proc,          pass = agent_get_cache (keyid+8, &item);        
379                                   (LPARAM)c);          if (pass) {
380          }              agent_unlock_cache_entry (&item);
381          if (rc == -1) {              c->pwd_init = 0;
382              if (!WriteFile (hd, "\n", 1, &n, NULL))              if (!WriteFile (hd, pass, strlen (pass), &n, NULL))
383                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
384              return 0;              if (!WriteFile (hd, "\n", 1, &n, NULL))
385          }                  log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
386          c->pwd_init = 0;              return 0;
387      }          }
388      if (c->cancel) {      }
389          if (!WriteFile (hd, "\n", 1, &n, NULL))  
390              log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);      if (c->pwd_init) {
391          return 0;          if (keyid && strlen (keyid) == 16)
392      }              strcpy (c->keyid, keyid+8);
393    
394      WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL);          /* if @passphrase_info contains 'OPENPGP' we assume a smart card
395      WriteFile (hd, "\n", 1, &n, NULL);              has been used. */
396      return 0;          if (strstr (passphrase_info, "OPENPGP")) {
397  }              const char *s=passphrase_info;
398                while (s && *s && *s != 'D')
399                    s++;
400  /* Initialize the given passphrase callback @cb with the              _snprintf (c->info, DIM (c->info)-1,
401     used gpgme context @ctx, the command @cmd and a title                         _("Please enter the PIN to unlock your secret card key\n"
402     @title for the dialog. */                           "Card: %s"), extract_serial_no (s));
403  void              c->is_card = 1;
404  set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,          }
405                         int cmd, HWND hwnd, const char *title)          else if (uid_hint)
406  {              parse_gpg_description (uid_hint, passphrase_info,
407      memset (cb, 0, sizeof *cb);                                     c->info, DIM (c->info) - 1);
408      cb->gpg_cmd = cmd;          int rc = 0;
409      cb->bad_pwd = 0;          if (c->gpg_cmd == GPG_CMD_DECRYPT) {
410      cb->is_card = 0;              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT,
411      cb->cancel = 0;                                   (HWND)c->hwnd, passphrase_callback_proc,
412      cb->hwnd = hwnd;                                   (LPARAM)c);
413      cb->pwd_init = 1;          }
414      free_if_alloc (cb->title);          else if (c->gpg_cmd == GPG_CMD_SIGN) {
415      cb->title = m_strdup (title);              rc = DialogBoxParam (glob_hinst, (LPCSTR)IDD_WINPT_DECRYPT_SIGN,
416      if (!cb->title)                                   (HWND)c->hwnd, passphrase_callback_proc,
417          BUG (NULL);                                   (LPARAM)c);
418      gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);          }
419      cb->gpg = ctx;          if (rc == -1) {
420  }              if (!WriteFile (hd, "\n", 1, &n, NULL))
421                    log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
422                log_debug ("passphrase_cb: could not create dialog box\n");
423  /* Release a passphrase callback @ctx. */              return 0;
424  void          }
425  release_gpg_passphrase_cb (passphrase_cb_s *ctx)          c->pwd_init = 0;
426  {      }
427      gpgme_recipient_t r, n;      if (c->cancel || !c->pwd) {
428            if (!WriteFile (hd, "\n", 1, &n, NULL))
429      if (!ctx)              log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
430          return;          return 0;
431      sfree_if_alloc (ctx->pwd);      }
432      free_if_alloc (ctx->title);  
433      r = ctx->recipients;      if (!WriteFile (hd, c->pwd, strlen (c->pwd), &n, NULL))
434      while (r) {          log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
435          n = r->next;      if (!WriteFile (hd, "\n", 1, &n, NULL))
436          safe_free (r->keyid);          log_debug ("passphrase_cb: WriteFile() failed ec=%d\n", w32_errno);
437          safe_free (r);      return 0;
438          r = n;  }
439      }  
440  }  
441    /* Initialize the given passphrase callback @cb with the
442       used gpgme context @ctx, the command @cmd and a title
443  /* Simple check to measure passphrase (@pass) quality.     @title for the dialog. */
444     Return value: 0 on success. */  void
445  int  set_gpg_passphrase_cb (passphrase_cb_s *cb, gpgme_ctx_t ctx,
446  check_passwd_quality (const char *pass, int strict)                         int cmd, HWND hwnd, const char *title)
447  {  {    
448      int i, nd=0, nc=0, n;      memset (cb, 0, sizeof *cb);
449        cb->gpg_cmd = cmd;
450      n = strlen (pass);      cb->bad_pwd = 0;
451      if (n < 8)      cb->is_card = 0;
452          return -1;      cb->cancel = 0;
453        cb->hwnd = hwnd;
454      for (i=0; i < n; i++) {      cb->pwd_init = 1;
455          if (isdigit (pass[i]))      cb->title = m_strdup (title);
456              nd++;      gpgme_set_passphrase_cb (ctx, passphrase_cb, cb);
457          if (isalpha (pass[i]))      cb->gpg = ctx;
458              nc++;  }
459      }  
460    void
461      /* check that the passphrase contains letters and numbers. */  set_gpg_auto_passphrase_cb (passphrase_cb_s *cb, const char *title)
462      if (nd == n || nc == n)  {
463          return -1;      memset (cb, 0, sizeof *cb);
464        cb->gpg_cmd = GPG_CMD_SIGN;
465      return 0;      cb->bad_pwd = 0;
466  }      cb->is_card = 0;
467        cb->cancel = 0;
468        cb->hwnd = GetActiveWindow ();
469        cb->pwd_init = 1;
470        cb->title = m_strdup (title);
471    }
472    
473    
474    /* Release a passphrase callback @ctx. */
475    void
476    release_gpg_passphrase_cb (passphrase_cb_s *ctx)
477    {
478        if (!ctx)
479            return;
480        sfree_if_alloc (ctx->pwd);
481        free_if_alloc (ctx->title);
482        release_gpg_recipients (&ctx->recipients);
483    }
484    
485    
486    /* Release the gpg recipient list. */
487    void
488    release_gpg_recipients (gpgme_recipient_t *recipients)
489    {
490        gpgme_recipient_t r, n;
491    
492        r = *recipients;
493        while (r != NULL) {
494            n = r->next;
495            safe_free (r->keyid);
496            safe_free (r);
497            r = n;
498        }
499        *recipients = NULL;
500    }
501    
502    
503    /* _Simple_ check to measure passphrase (@pass) quality.
504       Return value: 0 on success. */
505    int
506    check_passwd_quality (const char *pass, int strict)
507    {
508        int i, nd=0, nc=0, n;
509    
510        /* A good passphrase should be at least 8 characters. */
511        n = strlen (pass);
512        if (n < 8)
513            return -1;
514    
515        for (i=0; i < n; i++) {
516            if (isdigit (pass[i]))
517                nd++;
518            if (isalpha (pass[i]))
519                nc++;
520        }
521    
522        /* Check that the passphrase contains letters and numbers. */
523        if (nd == n || nc == n)
524            return -1;
525    
526        return 0;
527    }

Legend:
Removed from v.34  
changed lines
  Added in v.340

[email protected]
ViewVC Help
Powered by ViewVC 1.1.26