1997-11-18 15:06:00 +01:00
|
|
|
/* keygen.c - generate a key pair
|
2000-07-14 19:34:53 +02:00
|
|
|
* Copyright (C) 1998, 1999, 2000 Free Software Foundation, Inc.
|
1997-11-18 15:06:00 +01:00
|
|
|
*
|
1998-12-23 13:41:40 +01:00
|
|
|
* This file is part of GnuPG.
|
1997-11-18 15:06:00 +01:00
|
|
|
*
|
1998-12-23 13:41:40 +01:00
|
|
|
* GnuPG is free software; you can redistribute it and/or modify
|
1997-11-18 15:06:00 +01:00
|
|
|
* it under the terms of the GNU General Public License as published by
|
|
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
|
|
* (at your option) any later version.
|
|
|
|
*
|
1998-12-23 13:41:40 +01:00
|
|
|
* GnuPG is distributed in the hope that it will be useful,
|
1997-11-18 15:06:00 +01:00
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <config.h>
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <stdlib.h>
|
|
|
|
#include <string.h>
|
1998-01-12 11:18:17 +01:00
|
|
|
#include <ctype.h>
|
1997-11-18 15:06:00 +01:00
|
|
|
#include <errno.h>
|
|
|
|
#include <assert.h>
|
|
|
|
#include "util.h"
|
2000-01-24 12:55:49 +01:00
|
|
|
#include <gcrypt.h>
|
1997-11-18 15:06:00 +01:00
|
|
|
#include "main.h"
|
|
|
|
#include "packet.h"
|
|
|
|
#include "ttyio.h"
|
|
|
|
#include "options.h"
|
1997-12-16 20:15:09 +01:00
|
|
|
#include "keydb.h"
|
1998-08-05 18:51:59 +02:00
|
|
|
#include "status.h"
|
1998-01-28 17:09:43 +01:00
|
|
|
#include "i18n.h"
|
1997-11-18 15:06:00 +01:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
enum para_name {
|
|
|
|
pKEYTYPE,
|
|
|
|
pKEYLENGTH,
|
|
|
|
pSUBKEYTYPE,
|
|
|
|
pSUBKEYLENGTH,
|
|
|
|
pNAMEREAL,
|
|
|
|
pNAMEEMAIL,
|
|
|
|
pNAMECOMMENT,
|
|
|
|
pUSERID,
|
|
|
|
pEXPIREDATE,
|
|
|
|
pKEYEXPIRE, /* in n seconds */
|
|
|
|
pSUBKEYEXPIRE, /* in n seconds */
|
|
|
|
pPASSPHRASE,
|
|
|
|
pPASSPHRASE_DEK,
|
|
|
|
pPASSPHRASE_S2K
|
|
|
|
};
|
|
|
|
|
|
|
|
struct para_data_s {
|
|
|
|
struct para_data_s *next;
|
|
|
|
int lnr;
|
|
|
|
enum para_name key;
|
|
|
|
union {
|
|
|
|
DEK *dek;
|
|
|
|
STRING2KEY *s2k;
|
|
|
|
u32 expire;
|
|
|
|
char value[1];
|
|
|
|
} u;
|
|
|
|
};
|
|
|
|
|
|
|
|
struct output_control_s {
|
|
|
|
int lnr;
|
|
|
|
int dryrun;
|
|
|
|
int use_files;
|
|
|
|
struct {
|
|
|
|
char *fname;
|
|
|
|
char *newfname;
|
|
|
|
IOBUF stream;
|
|
|
|
armor_filter_context_t afx;
|
|
|
|
} pub;
|
|
|
|
struct {
|
|
|
|
char *fname;
|
|
|
|
char *newfname;
|
|
|
|
IOBUF stream;
|
|
|
|
armor_filter_context_t afx;
|
|
|
|
} sec;
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
static void do_generate_keypair( struct para_data_s *para,
|
|
|
|
struct output_control_s *outctrl );
|
|
|
|
static int write_keyblock( IOBUF out, KBNODE node );
|
|
|
|
|
1997-11-24 23:24:04 +01:00
|
|
|
|
1997-11-18 15:06:00 +01:00
|
|
|
static void
|
1997-12-16 20:15:09 +01:00
|
|
|
write_uid( KBNODE root, const char *s )
|
1997-11-18 15:06:00 +01:00
|
|
|
{
|
2000-01-24 12:55:49 +01:00
|
|
|
PACKET *pkt = gcry_xcalloc( 1,sizeof *pkt );
|
1997-11-18 15:06:00 +01:00
|
|
|
size_t n = strlen(s);
|
|
|
|
|
1997-12-16 20:15:09 +01:00
|
|
|
pkt->pkttype = PKT_USER_ID;
|
2000-07-14 19:34:53 +02:00
|
|
|
pkt->pkt.user_id = gcry_xcalloc( 1, sizeof *pkt->pkt.user_id + n - 1 );
|
1997-12-16 20:15:09 +01:00
|
|
|
pkt->pkt.user_id->len = n;
|
|
|
|
strcpy(pkt->pkt.user_id->name, s);
|
|
|
|
add_kbnode( root, new_kbnode( pkt ) );
|
1997-11-18 15:06:00 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-06-25 12:19:08 +02:00
|
|
|
|
1998-10-18 17:21:22 +02:00
|
|
|
int
|
|
|
|
keygen_add_key_expire( PKT_signature *sig, void *opaque )
|
1998-06-25 12:19:08 +02:00
|
|
|
{
|
1998-11-20 18:42:18 +01:00
|
|
|
PKT_public_key *pk = opaque;
|
1998-06-25 12:19:08 +02:00
|
|
|
byte buf[8];
|
|
|
|
u32 u;
|
|
|
|
|
1998-11-20 18:42:18 +01:00
|
|
|
if( pk->expiredate ) {
|
|
|
|
u = pk->expiredate > pk->timestamp? pk->expiredate - pk->timestamp
|
|
|
|
: pk->timestamp;
|
1998-06-25 12:19:08 +02:00
|
|
|
buf[0] = (u >> 24) & 0xff;
|
|
|
|
buf[1] = (u >> 16) & 0xff;
|
|
|
|
buf[2] = (u >> 8) & 0xff;
|
|
|
|
buf[3] = u & 0xff;
|
|
|
|
build_sig_subpkt( sig, SIGSUBPKT_KEY_EXPIRE, buf, 4 );
|
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/****************
|
|
|
|
* Add preference to the self signature packet.
|
|
|
|
* This is only called for packets with version > 3.
|
|
|
|
*/
|
1998-07-29 21:35:05 +02:00
|
|
|
int
|
|
|
|
keygen_add_std_prefs( PKT_signature *sig, void *opaque )
|
1998-06-25 12:19:08 +02:00
|
|
|
{
|
|
|
|
byte buf[8];
|
|
|
|
|
1998-10-18 17:21:22 +02:00
|
|
|
keygen_add_key_expire( sig, opaque );
|
1998-06-25 12:19:08 +02:00
|
|
|
|
2000-11-14 17:04:16 +01:00
|
|
|
buf[0] = GCRY_CIPHER_RIJNDAEL;
|
|
|
|
buf[1] = GCRY_CIPHER_TWOFISH;
|
|
|
|
buf[2] = GCRY_CIPHER_CAST5;
|
|
|
|
buf[3] = GCRY_CIPHER_BLOWFISH;
|
|
|
|
build_sig_subpkt( sig, SIGSUBPKT_PREF_SYM, buf, 4 );
|
1998-06-25 12:19:08 +02:00
|
|
|
|
1999-12-31 12:44:29 +01:00
|
|
|
buf[0] = GCRY_MD_RMD160;
|
|
|
|
buf[1] = GCRY_MD_SHA1;
|
1999-02-10 17:22:40 +01:00
|
|
|
build_sig_subpkt( sig, SIGSUBPKT_PREF_HASH, buf, 2 );
|
1998-06-25 12:19:08 +02:00
|
|
|
|
|
|
|
buf[0] = 2;
|
|
|
|
buf[1] = 1;
|
|
|
|
build_sig_subpkt( sig, SIGSUBPKT_PREF_COMPR, buf, 2 );
|
|
|
|
|
2000-10-11 19:26:49 +02:00
|
|
|
buf[0] = 1; /* supports MDC packets (15 + 16) */
|
|
|
|
build_sig_subpkt( sig, SIGSUBPKT_FEATURES, buf, 1 );
|
|
|
|
|
1998-06-25 12:19:08 +02:00
|
|
|
buf[0] = 0x80; /* no modify - It is reasonable that a key holder
|
|
|
|
* has the possibility to reject signatures from users
|
|
|
|
* who are known to sign everything without any
|
|
|
|
* validation - so a signed key should be send
|
|
|
|
* to the holder who in turn can put it on a keyserver
|
|
|
|
*/
|
|
|
|
build_sig_subpkt( sig, SIGSUBPKT_KS_FLAGS, buf, 1 );
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
1997-12-09 13:46:23 +01:00
|
|
|
static int
|
1998-06-29 14:30:57 +02:00
|
|
|
write_selfsig( KBNODE root, KBNODE pub_root, PKT_secret_key *sk )
|
1997-12-09 13:46:23 +01:00
|
|
|
{
|
1997-12-16 20:15:09 +01:00
|
|
|
PACKET *pkt;
|
1997-12-09 13:46:23 +01:00
|
|
|
PKT_signature *sig;
|
1997-12-16 20:15:09 +01:00
|
|
|
PKT_user_id *uid;
|
1997-12-09 13:46:23 +01:00
|
|
|
int rc=0;
|
1998-02-11 04:25:44 +01:00
|
|
|
KBNODE node;
|
1998-06-29 14:30:57 +02:00
|
|
|
PKT_public_key *pk;
|
1997-12-09 13:46:23 +01:00
|
|
|
|
|
|
|
if( opt.verbose )
|
1998-01-28 17:09:43 +01:00
|
|
|
log_info(_("writing self signature\n"));
|
1997-12-09 13:46:23 +01:00
|
|
|
|
1998-02-11 04:25:44 +01:00
|
|
|
/* get the uid packet from the list */
|
|
|
|
node = find_kbnode( root, PKT_USER_ID );
|
1997-12-16 20:15:09 +01:00
|
|
|
if( !node )
|
1998-01-16 22:15:24 +01:00
|
|
|
BUG(); /* no user id packet in tree */
|
1997-12-16 20:15:09 +01:00
|
|
|
uid = node->pkt->pkt.user_id;
|
1998-06-29 14:30:57 +02:00
|
|
|
/* get the pk packet from the pub_tree */
|
|
|
|
node = find_kbnode( pub_root, PKT_PUBLIC_KEY );
|
1997-12-16 20:15:09 +01:00
|
|
|
if( !node )
|
1998-01-16 22:15:24 +01:00
|
|
|
BUG();
|
1998-06-29 14:30:57 +02:00
|
|
|
pk = node->pkt->pkt.public_key;
|
1997-12-16 20:15:09 +01:00
|
|
|
|
|
|
|
/* and make the signature */
|
1998-06-29 14:30:57 +02:00
|
|
|
rc = make_keysig_packet( &sig, pk, uid, NULL, sk, 0x13, 0,
|
1998-11-20 18:42:18 +01:00
|
|
|
keygen_add_std_prefs, pk );
|
1998-05-26 15:38:00 +02:00
|
|
|
if( rc ) {
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error("make_keysig_packet failed: %s\n", gpg_errstr(rc) );
|
1998-05-26 15:38:00 +02:00
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
pkt = gcry_xcalloc( 1, sizeof *pkt );
|
1998-05-26 15:38:00 +02:00
|
|
|
pkt->pkttype = PKT_SIGNATURE;
|
|
|
|
pkt->pkt.signature = sig;
|
|
|
|
add_kbnode( root, new_kbnode( pkt ) );
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
1998-06-29 14:30:57 +02:00
|
|
|
write_keybinding( KBNODE root, KBNODE pub_root, PKT_secret_key *sk )
|
1998-05-26 15:38:00 +02:00
|
|
|
{
|
|
|
|
PACKET *pkt;
|
|
|
|
PKT_signature *sig;
|
|
|
|
int rc=0;
|
|
|
|
KBNODE node;
|
1998-06-29 14:30:57 +02:00
|
|
|
PKT_public_key *pk, *subpk;
|
1998-05-26 15:38:00 +02:00
|
|
|
|
|
|
|
if( opt.verbose )
|
|
|
|
log_info(_("writing key binding signature\n"));
|
|
|
|
|
1998-06-29 14:30:57 +02:00
|
|
|
/* get the pk packet from the pub_tree */
|
|
|
|
node = find_kbnode( pub_root, PKT_PUBLIC_KEY );
|
1998-05-26 15:38:00 +02:00
|
|
|
if( !node )
|
|
|
|
BUG();
|
1998-06-29 14:30:57 +02:00
|
|
|
pk = node->pkt->pkt.public_key;
|
1998-05-26 15:38:00 +02:00
|
|
|
/* find the last subkey */
|
1998-06-29 14:30:57 +02:00
|
|
|
subpk = NULL;
|
1998-05-26 15:38:00 +02:00
|
|
|
for(node=pub_root; node; node = node->next ) {
|
1998-06-29 14:30:57 +02:00
|
|
|
if( node->pkt->pkttype == PKT_PUBLIC_SUBKEY )
|
|
|
|
subpk = node->pkt->pkt.public_key;
|
1998-05-26 15:38:00 +02:00
|
|
|
}
|
1998-06-29 14:30:57 +02:00
|
|
|
if( !subpk )
|
1998-05-26 15:38:00 +02:00
|
|
|
BUG();
|
|
|
|
|
|
|
|
/* and make the signature */
|
1998-06-29 14:30:57 +02:00
|
|
|
rc = make_keysig_packet( &sig, pk, NULL, subpk, sk, 0x18, 0,
|
1998-11-20 18:42:18 +01:00
|
|
|
keygen_add_key_expire, subpk );
|
1997-12-09 13:46:23 +01:00
|
|
|
if( rc ) {
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error("make_keysig_packet failed: %s\n", gpg_errstr(rc) );
|
1997-12-09 13:46:23 +01:00
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
pkt = gcry_xcalloc( 1, sizeof *pkt );
|
1997-12-16 20:15:09 +01:00
|
|
|
pkt->pkttype = PKT_SIGNATURE;
|
|
|
|
pkt->pkt.signature = sig;
|
|
|
|
add_kbnode( root, new_kbnode( pkt ) );
|
1997-12-09 13:46:23 +01:00
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
|
2000-01-27 17:50:45 +01:00
|
|
|
static int
|
|
|
|
key_from_sexp( GCRY_MPI *array,
|
|
|
|
GCRY_SEXP sexp, const char *topname, const char *elems )
|
|
|
|
{
|
|
|
|
GCRY_SEXP list, l2;
|
|
|
|
const char *s;
|
|
|
|
int i, idx;
|
|
|
|
|
|
|
|
list = gcry_sexp_find_token( sexp, topname, 0 );
|
|
|
|
if( !list )
|
|
|
|
return GCRYERR_INV_OBJ;
|
2000-07-28 18:19:07 +02:00
|
|
|
l2 = gcry_sexp_cadr( list );
|
2000-07-25 17:38:12 +02:00
|
|
|
gcry_sexp_release ( list );
|
|
|
|
list = l2;
|
2000-01-27 17:50:45 +01:00
|
|
|
if( !list )
|
|
|
|
return GCRYERR_NO_OBJ;
|
|
|
|
|
|
|
|
idx = 0;
|
|
|
|
for(s=elems; *s; s++, idx++ ) {
|
|
|
|
l2 = gcry_sexp_find_token( list, s, 1 );
|
|
|
|
if( !l2 ) {
|
|
|
|
for(i=0; i<idx; i++) {
|
|
|
|
gcry_free( array[i] );
|
|
|
|
array[i] = NULL;
|
|
|
|
}
|
2000-07-25 17:38:12 +02:00
|
|
|
gcry_sexp_release ( list );
|
2000-01-27 17:50:45 +01:00
|
|
|
return GCRYERR_NO_OBJ; /* required parameter not found */
|
|
|
|
}
|
2000-07-31 10:04:16 +02:00
|
|
|
array[idx] = gcry_sexp_nth_mpi( l2, 1, GCRYMPI_FMT_USG );
|
2000-07-25 17:38:12 +02:00
|
|
|
gcry_sexp_release ( l2 );
|
2000-01-27 17:50:45 +01:00
|
|
|
if( !array[idx] ) {
|
|
|
|
for(i=0; i<idx; i++) {
|
|
|
|
gcry_free( array[i] );
|
|
|
|
array[i] = NULL;
|
|
|
|
}
|
2000-07-25 17:38:12 +02:00
|
|
|
gcry_sexp_release ( list );
|
2000-01-27 17:50:45 +01:00
|
|
|
return GCRYERR_INV_OBJ; /* required parameter is invalid */
|
|
|
|
}
|
|
|
|
}
|
2000-07-25 17:38:12 +02:00
|
|
|
gcry_sexp_release ( list );
|
2000-01-27 17:50:45 +01:00
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
|
1997-12-16 20:15:09 +01:00
|
|
|
static int
|
1998-06-25 12:19:08 +02:00
|
|
|
gen_elg(int algo, unsigned nbits, KBNODE pub_root, KBNODE sec_root, DEK *dek,
|
2000-07-14 19:34:53 +02:00
|
|
|
STRING2KEY *s2k, PKT_secret_key **ret_sk, u32 expireval )
|
1997-12-16 20:15:09 +01:00
|
|
|
{
|
|
|
|
int rc;
|
|
|
|
PACKET *pkt;
|
1998-06-29 14:30:57 +02:00
|
|
|
PKT_secret_key *sk;
|
|
|
|
PKT_public_key *pk;
|
2000-07-31 10:04:16 +02:00
|
|
|
GCRY_SEXP misc_key_info;
|
2000-01-27 17:50:45 +01:00
|
|
|
GCRY_SEXP s_parms, s_key;
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
assert( is_ELGAMAL(algo) );
|
|
|
|
|
|
|
|
if( nbits < 512 ) {
|
|
|
|
nbits = 1024;
|
|
|
|
log_info(_("keysize invalid; using %u bits\n"), nbits );
|
|
|
|
}
|
|
|
|
|
|
|
|
if( (nbits % 32) ) {
|
|
|
|
nbits = ((nbits + 31) / 32) * 32;
|
|
|
|
log_info(_("keysize rounded up to %u bits\n"), nbits );
|
|
|
|
}
|
|
|
|
|
2000-07-25 17:38:12 +02:00
|
|
|
if ( gcry_sexp_build ( &s_parms, NULL,
|
|
|
|
"(genkey(%s(nbits %d)))",
|
|
|
|
algo == GCRY_PK_ELG_E ? "openpgp-elg" :
|
|
|
|
algo == GCRY_PK_ELG ? "elg" : "x-oops" ,
|
|
|
|
(int)nbits ) )
|
|
|
|
BUG ();
|
2000-01-27 17:50:45 +01:00
|
|
|
rc = gcry_pk_genkey( &s_key, s_parms );
|
|
|
|
gcry_sexp_release( s_parms );
|
1998-06-13 19:00:02 +02:00
|
|
|
if( rc ) {
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error("pk_genkey failed: %s\n", gpg_errstr(rc) );
|
1998-06-13 19:00:02 +02:00
|
|
|
return rc;
|
|
|
|
}
|
1997-12-16 20:15:09 +01:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
sk = gcry_xcalloc( 1, sizeof *sk );
|
|
|
|
pk = gcry_xcalloc( 1, sizeof *pk );
|
1998-06-29 14:30:57 +02:00
|
|
|
sk->timestamp = pk->timestamp = make_timestamp();
|
2000-07-14 19:34:53 +02:00
|
|
|
sk->version = pk->version = 4;
|
1998-11-20 18:42:18 +01:00
|
|
|
if( expireval ) {
|
|
|
|
sk->expiredate = pk->expiredate = sk->timestamp + expireval;
|
|
|
|
}
|
1998-06-29 14:30:57 +02:00
|
|
|
sk->pubkey_algo = pk->pubkey_algo = algo;
|
2000-01-27 17:50:45 +01:00
|
|
|
|
|
|
|
rc = key_from_sexp( pk->pkey, s_key, "public-key", "pgy" );
|
|
|
|
if( rc ) {
|
|
|
|
log_error("key_from_sexp failed: rc=%d\n", rc );
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
rc = key_from_sexp( sk->skey, s_key, "private-key", "pgyx" );
|
|
|
|
if( rc ) {
|
|
|
|
log_error("key_from_sexp failed: rc=%d\n", rc );
|
|
|
|
return rc;
|
|
|
|
}
|
2000-07-31 10:04:16 +02:00
|
|
|
misc_key_info = gcry_sexp_find_token( s_key, "misc-key-info", 0 );
|
|
|
|
gcry_sexp_release ( s_key );
|
2000-01-27 17:50:45 +01:00
|
|
|
|
1998-06-29 14:30:57 +02:00
|
|
|
sk->is_protected = 0;
|
|
|
|
sk->protect.algo = 0;
|
|
|
|
|
1999-12-08 22:03:03 +01:00
|
|
|
sk->csum = checksum_mpi( sk->skey[3] );
|
1998-06-29 14:30:57 +02:00
|
|
|
if( ret_sk ) /* not a subkey: return an unprotected version of the sk */
|
|
|
|
*ret_sk = copy_secret_key( NULL, sk );
|
1997-12-16 20:15:09 +01:00
|
|
|
|
1997-12-19 12:41:47 +01:00
|
|
|
if( dek ) {
|
1998-06-29 14:30:57 +02:00
|
|
|
sk->protect.algo = dek->algo;
|
|
|
|
sk->protect.s2k = *s2k;
|
|
|
|
rc = protect_secret_key( sk, dek );
|
1997-12-16 20:15:09 +01:00
|
|
|
if( rc ) {
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error("protect_secret_key failed: %s\n", gpg_errstr(rc) );
|
1998-06-29 14:30:57 +02:00
|
|
|
free_public_key(pk);
|
|
|
|
free_secret_key(sk);
|
1997-12-16 20:15:09 +01:00
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
pkt = gcry_xcalloc( 1,sizeof *pkt);
|
1998-06-29 14:30:57 +02:00
|
|
|
pkt->pkttype = ret_sk ? PKT_PUBLIC_KEY : PKT_PUBLIC_SUBKEY;
|
|
|
|
pkt->pkt.public_key = pk;
|
1997-12-16 20:15:09 +01:00
|
|
|
add_kbnode(pub_root, new_kbnode( pkt ));
|
|
|
|
|
1998-04-14 19:51:16 +02:00
|
|
|
/* don't know whether it makes sense to have the factors, so for now
|
1998-05-03 17:42:08 +02:00
|
|
|
* we store them in the secret keyring (but they are not secret) */
|
2000-01-24 12:55:49 +01:00
|
|
|
pkt = gcry_xcalloc( 1,sizeof *pkt);
|
1998-06-29 14:30:57 +02:00
|
|
|
pkt->pkttype = ret_sk ? PKT_SECRET_KEY : PKT_SECRET_SUBKEY;
|
|
|
|
pkt->pkt.secret_key = sk;
|
1997-12-16 20:15:09 +01:00
|
|
|
add_kbnode(sec_root, new_kbnode( pkt ));
|
2000-07-31 10:04:16 +02:00
|
|
|
if ( misc_key_info ) {
|
|
|
|
size_t n;
|
|
|
|
char *buf;
|
|
|
|
|
|
|
|
n = gcry_sexp_sprint ( misc_key_info, 0, NULL, 0 );
|
|
|
|
buf = gcry_xmalloc ( n+4 );
|
|
|
|
strcpy ( buf, "#::" );
|
|
|
|
n = gcry_sexp_sprint ( misc_key_info, 0, buf+3, n );
|
|
|
|
if ( n ) {
|
|
|
|
n += 3;
|
|
|
|
add_kbnode( sec_root, make_comment_node_from_buffer( buf, n ));
|
|
|
|
}
|
|
|
|
gcry_free ( buf );
|
|
|
|
gcry_sexp_release (misc_key_info);
|
2000-01-27 17:50:45 +01:00
|
|
|
}
|
1997-12-16 20:15:09 +01:00
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-05-05 22:34:20 +02:00
|
|
|
/****************
|
|
|
|
* Generate a DSA key
|
|
|
|
*/
|
1997-11-24 23:24:04 +01:00
|
|
|
static int
|
2000-07-14 19:34:53 +02:00
|
|
|
gen_dsa(unsigned int nbits, KBNODE pub_root, KBNODE sec_root, DEK *dek,
|
1998-11-20 18:42:18 +01:00
|
|
|
STRING2KEY *s2k, PKT_secret_key **ret_sk, u32 expireval )
|
1997-11-24 23:24:04 +01:00
|
|
|
{
|
1998-05-05 22:34:20 +02:00
|
|
|
int rc;
|
|
|
|
PACKET *pkt;
|
1998-06-29 14:30:57 +02:00
|
|
|
PKT_secret_key *sk;
|
|
|
|
PKT_public_key *pk;
|
2000-07-31 10:04:16 +02:00
|
|
|
GCRY_SEXP misc_key_info;
|
2000-01-31 16:27:03 +01:00
|
|
|
GCRY_SEXP s_parms, s_key;
|
1998-05-05 22:34:20 +02:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
if( nbits > 1024 || nbits < 512 ) {
|
1998-05-05 22:34:20 +02:00
|
|
|
nbits = 1024;
|
2000-07-14 19:34:53 +02:00
|
|
|
log_info(_("keysize invalid; using %u bits\n"), nbits );
|
|
|
|
}
|
|
|
|
|
|
|
|
if( (nbits % 64) ) {
|
|
|
|
nbits = ((nbits + 63) / 64) * 64;
|
|
|
|
log_info(_("keysize rounded up to %u bits\n"), nbits );
|
|
|
|
}
|
1998-05-05 22:34:20 +02:00
|
|
|
|
2000-07-25 17:38:12 +02:00
|
|
|
if ( gcry_sexp_build ( &s_parms, NULL,
|
|
|
|
"(genkey(dsa(nbits %d)))", (int)nbits ) )
|
|
|
|
BUG ();
|
2000-01-31 16:27:03 +01:00
|
|
|
|
|
|
|
rc = gcry_pk_genkey( &s_key, s_parms );
|
|
|
|
gcry_sexp_release( s_parms );
|
1998-06-13 19:00:02 +02:00
|
|
|
if( rc ) {
|
2000-01-31 16:27:03 +01:00
|
|
|
log_error("pk_genkey failed: %s\n", gpg_errstr(rc) );
|
1998-06-13 19:00:02 +02:00
|
|
|
return rc;
|
|
|
|
}
|
1998-05-05 22:34:20 +02:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
sk = gcry_xcalloc( 1, sizeof *sk );
|
|
|
|
pk = gcry_xcalloc( 1, sizeof *pk );
|
1998-06-29 14:30:57 +02:00
|
|
|
sk->timestamp = pk->timestamp = make_timestamp();
|
|
|
|
sk->version = pk->version = 4;
|
1998-11-20 18:42:18 +01:00
|
|
|
if( expireval ) {
|
|
|
|
sk->expiredate = pk->expiredate = sk->timestamp + expireval;
|
|
|
|
}
|
1999-11-13 17:43:23 +01:00
|
|
|
sk->pubkey_algo = pk->pubkey_algo = GCRY_PK_DSA;
|
2000-01-31 16:27:03 +01:00
|
|
|
|
|
|
|
rc = key_from_sexp( pk->pkey, s_key, "public-key", "pqgy" );
|
|
|
|
if( rc ) {
|
|
|
|
log_error("key_from_sexp failed: rc=%d\n", rc );
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
rc = key_from_sexp( sk->skey, s_key, "private-key", "pqgyx" );
|
|
|
|
if( rc ) {
|
|
|
|
log_error("key_from_sexp failed: rc=%d\n", rc );
|
|
|
|
return rc;
|
|
|
|
}
|
2000-07-31 10:04:16 +02:00
|
|
|
misc_key_info = gcry_sexp_find_token( s_key, "misc-key-info", 0 );
|
|
|
|
gcry_sexp_release ( s_key );
|
2000-01-31 16:27:03 +01:00
|
|
|
|
1998-06-29 14:30:57 +02:00
|
|
|
sk->is_protected = 0;
|
|
|
|
sk->protect.algo = 0;
|
|
|
|
|
1999-12-08 22:03:03 +01:00
|
|
|
sk->csum = checksum_mpi( sk->skey[4] );
|
1998-06-29 14:30:57 +02:00
|
|
|
if( ret_sk ) /* not a subkey: return an unprotected version of the sk */
|
|
|
|
*ret_sk = copy_secret_key( NULL, sk );
|
1998-05-05 22:34:20 +02:00
|
|
|
|
|
|
|
if( dek ) {
|
1998-06-29 14:30:57 +02:00
|
|
|
sk->protect.algo = dek->algo;
|
|
|
|
sk->protect.s2k = *s2k;
|
|
|
|
rc = protect_secret_key( sk, dek );
|
1998-05-05 22:34:20 +02:00
|
|
|
if( rc ) {
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error("protect_secret_key failed: %s\n", gpg_errstr(rc) );
|
1998-06-29 14:30:57 +02:00
|
|
|
free_public_key(pk);
|
|
|
|
free_secret_key(sk);
|
2000-07-31 10:04:16 +02:00
|
|
|
gcry_sexp_release (misc_key_info);
|
1998-05-05 22:34:20 +02:00
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
pkt = gcry_xcalloc( 1,sizeof *pkt);
|
1998-06-29 14:30:57 +02:00
|
|
|
pkt->pkttype = ret_sk ? PKT_PUBLIC_KEY : PKT_PUBLIC_SUBKEY;
|
|
|
|
pkt->pkt.public_key = pk;
|
1998-05-05 22:34:20 +02:00
|
|
|
add_kbnode(pub_root, new_kbnode( pkt ));
|
|
|
|
|
|
|
|
/* don't know whether it makes sense to have the factors, so for now
|
|
|
|
* we store them in the secret keyring (but they are not secret)
|
|
|
|
*/
|
2000-01-24 12:55:49 +01:00
|
|
|
pkt = gcry_xcalloc( 1,sizeof *pkt);
|
1998-06-29 14:30:57 +02:00
|
|
|
pkt->pkttype = ret_sk ? PKT_SECRET_KEY : PKT_SECRET_SUBKEY;
|
|
|
|
pkt->pkt.secret_key = sk;
|
1998-05-05 22:34:20 +02:00
|
|
|
add_kbnode(sec_root, new_kbnode( pkt ));
|
2000-07-31 10:04:16 +02:00
|
|
|
if ( misc_key_info ) {
|
|
|
|
size_t n;
|
|
|
|
char *buf;
|
|
|
|
|
|
|
|
n = gcry_sexp_sprint ( misc_key_info, 0, NULL, 0 );
|
|
|
|
buf = gcry_xmalloc ( n+4 );
|
|
|
|
strcpy ( buf, "#::" );
|
|
|
|
n = gcry_sexp_sprint ( misc_key_info, 0, buf+3, n );
|
|
|
|
if ( n ) {
|
|
|
|
n += 3;
|
|
|
|
add_kbnode( sec_root, make_comment_node_from_buffer( buf, n ));
|
|
|
|
}
|
|
|
|
gcry_free ( buf );
|
|
|
|
gcry_sexp_release (misc_key_info);
|
|
|
|
}
|
2000-01-31 16:27:03 +01:00
|
|
|
/* fixme: Merge this with the elg-generate function and release
|
2000-07-14 19:34:53 +02:00
|
|
|
* some more stuff (memory-leak) */
|
1998-05-05 22:34:20 +02:00
|
|
|
return 0;
|
1997-11-24 23:24:04 +01:00
|
|
|
}
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
#if 0
|
|
|
|
static int
|
|
|
|
gen_rsa(int algo, unsigned nbits, KBNODE pub_root, KBNODE sec_root, DEK *dek,
|
|
|
|
STRING2KEY *s2k, PKT_secret_key **ret_sk, u32 expireval )
|
|
|
|
{
|
|
|
|
int rc;
|
|
|
|
PACKET *pkt;
|
|
|
|
PKT_secret_key *sk;
|
|
|
|
PKT_public_key *pk;
|
|
|
|
MPI skey[4];
|
|
|
|
MPI *factors;
|
|
|
|
|
|
|
|
assert( is_RSA(algo) );
|
|
|
|
|
|
|
|
if( nbits < 1024 ) {
|
|
|
|
nbits = 1024;
|
|
|
|
log_info(_("keysize invalid; using %u bits\n"), nbits );
|
|
|
|
}
|
|
|
|
|
|
|
|
if( (nbits % 32) ) {
|
|
|
|
nbits = ((nbits + 31) / 32) * 32;
|
|
|
|
log_info(_("keysize rounded up to %u bits\n"), nbits );
|
|
|
|
}
|
|
|
|
|
|
|
|
rc = pubkey_generate( algo, nbits, skey, &factors );
|
|
|
|
if( rc ) {
|
|
|
|
log_error("pubkey_generate failed: %s\n", gpg_errstr(rc) );
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
sk = gcry_xcalloc( 1, sizeof *sk );
|
|
|
|
pk = gcry_xcalloc( 1, sizeof *pk );
|
|
|
|
sk->timestamp = pk->timestamp = make_timestamp();
|
|
|
|
sk->version = pk->version = 4;
|
|
|
|
if( expireval ) {
|
|
|
|
sk->expiredate = pk->expiredate = sk->timestamp + expireval;
|
|
|
|
}
|
|
|
|
sk->pubkey_algo = pk->pubkey_algo = algo;
|
|
|
|
pk->pkey[0] = mpi_copy( skey[0] );
|
|
|
|
pk->pkey[1] = mpi_copy( skey[1] );
|
|
|
|
sk->skey[0] = skey[0];
|
|
|
|
sk->skey[1] = skey[1];
|
|
|
|
sk->skey[2] = skey[2];
|
|
|
|
sk->skey[3] = skey[3];
|
|
|
|
sk->skey[4] = skey[4];
|
|
|
|
sk->skey[5] = skey[5];
|
|
|
|
sk->is_protected = 0;
|
|
|
|
sk->protect.algo = 0;
|
|
|
|
|
|
|
|
sk->csum = checksum_mpi_counted_nbits( sk->skey[2] );
|
|
|
|
sk->csum += checksum_mpi_counted_nbits( sk->skey[3] );
|
|
|
|
sk->csum += checksum_mpi_counted_nbits( sk->skey[4] );
|
|
|
|
sk->csum += checksum_mpi_counted_nbits( sk->skey[5] );
|
|
|
|
if( ret_sk ) /* not a subkey: return an unprotected version of the sk */
|
|
|
|
*ret_sk = copy_secret_key( NULL, sk );
|
|
|
|
|
|
|
|
if( dek ) {
|
|
|
|
sk->protect.algo = dek->algo;
|
|
|
|
sk->protect.s2k = *s2k;
|
|
|
|
rc = protect_secret_key( sk, dek );
|
|
|
|
if( rc ) {
|
|
|
|
log_error("protect_secret_key failed: %s\n", gpg_errstr(rc) );
|
|
|
|
free_public_key(pk);
|
|
|
|
free_secret_key(sk);
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
pkt = gcry_xcalloc( 1,sizeof *pkt);
|
|
|
|
pkt->pkttype = ret_sk ? PKT_PUBLIC_KEY : PKT_PUBLIC_SUBKEY;
|
|
|
|
pkt->pkt.public_key = pk;
|
|
|
|
add_kbnode(pub_root, new_kbnode( pkt ));
|
|
|
|
|
|
|
|
pkt = gcry_xcalloc( 1,sizeof *pkt);
|
|
|
|
pkt->pkttype = ret_sk ? PKT_SECRET_KEY : PKT_SECRET_SUBKEY;
|
|
|
|
pkt->pkt.secret_key = sk;
|
|
|
|
add_kbnode(sec_root, new_kbnode( pkt ));
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
#endif
|
1997-11-18 15:06:00 +01:00
|
|
|
|
|
|
|
|
1998-04-02 12:30:03 +02:00
|
|
|
/****************
|
|
|
|
* check valid days:
|
|
|
|
* return 0 on error or the multiplier
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
check_valid_days( const char *s )
|
|
|
|
{
|
|
|
|
if( !isdigit(*s) )
|
|
|
|
return 0;
|
|
|
|
for( s++; *s; s++)
|
|
|
|
if( !isdigit(*s) )
|
|
|
|
break;
|
|
|
|
if( !*s )
|
|
|
|
return 1;
|
|
|
|
if( s[1] )
|
|
|
|
return 0; /* e.g. "2323wc" */
|
|
|
|
if( *s == 'd' || *s == 'D' )
|
|
|
|
return 1;
|
|
|
|
if( *s == 'w' || *s == 'W' )
|
|
|
|
return 7;
|
|
|
|
if( *s == 'm' || *s == 'M' )
|
|
|
|
return 30;
|
|
|
|
if( *s == 'y' || *s == 'Y' )
|
|
|
|
return 365;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-06-25 12:19:08 +02:00
|
|
|
/****************
|
1998-07-21 14:53:38 +02:00
|
|
|
* Returns: 0 to create both a DSA and a ElGamal key.
|
1998-06-25 12:19:08 +02:00
|
|
|
*/
|
1998-05-26 15:38:00 +02:00
|
|
|
static int
|
2000-07-14 19:34:53 +02:00
|
|
|
ask_algo( int addmode )
|
1997-11-18 15:06:00 +01:00
|
|
|
{
|
|
|
|
char *answer;
|
1997-11-24 23:24:04 +01:00
|
|
|
int algo;
|
1998-01-28 17:09:43 +01:00
|
|
|
|
1998-06-25 12:19:08 +02:00
|
|
|
tty_printf(_("Please select what kind of key you want:\n"));
|
|
|
|
if( !addmode )
|
|
|
|
tty_printf(_(" (%d) DSA and ElGamal (default)\n"), 1 );
|
1998-12-10 20:20:47 +01:00
|
|
|
tty_printf( _(" (%d) DSA (sign only)\n"), 2 );
|
1998-10-06 14:10:02 +02:00
|
|
|
if( addmode )
|
|
|
|
tty_printf( _(" (%d) ElGamal (encrypt only)\n"), 3 );
|
1998-12-10 20:20:47 +01:00
|
|
|
tty_printf( _(" (%d) ElGamal (sign and encrypt)\n"), 4 );
|
|
|
|
#if 0
|
2000-07-14 19:34:53 +02:00
|
|
|
tty_printf( _(" (%d) RSA (sign and encrypt)\n"), 5 );
|
1998-12-10 20:20:47 +01:00
|
|
|
#endif
|
1997-11-24 23:24:04 +01:00
|
|
|
|
|
|
|
for(;;) {
|
1998-11-27 12:42:49 +01:00
|
|
|
answer = cpr_get("keygen.algo",_("Your selection? "));
|
1998-08-08 21:27:00 +02:00
|
|
|
cpr_kill_prompt();
|
1997-11-24 23:24:04 +01:00
|
|
|
algo = *answer? atoi(answer): 1;
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(answer);
|
1998-06-25 12:19:08 +02:00
|
|
|
if( algo == 1 && !addmode ) {
|
|
|
|
algo = 0; /* create both keys */
|
|
|
|
break;
|
|
|
|
}
|
2000-07-14 19:34:53 +02:00
|
|
|
#if 0
|
|
|
|
else if( algo == 5 ) {
|
|
|
|
if( cpr_get_answer_is_yes("keygen.algo.rsa_se",_(
|
|
|
|
"Do you really want to create a sign and encrypt key? "))) {
|
|
|
|
algo = GCRY_PK_RSA;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
#endif
|
1998-12-10 20:20:47 +01:00
|
|
|
else if( algo == 4 ) {
|
|
|
|
if( cpr_get_answer_is_yes("keygen.algo.elg_se",_(
|
|
|
|
"Do you really want to create a sign and encrypt key? "))) {
|
1999-11-13 17:43:23 +01:00
|
|
|
algo = GCRY_PK_ELG;
|
1998-12-10 20:20:47 +01:00
|
|
|
break;
|
|
|
|
}
|
1997-11-24 23:24:04 +01:00
|
|
|
}
|
1998-10-06 14:10:02 +02:00
|
|
|
else if( algo == 3 && addmode ) {
|
1999-11-13 17:43:23 +01:00
|
|
|
algo = GCRY_PK_ELG_E;
|
1998-05-05 22:34:20 +02:00
|
|
|
break;
|
1997-12-23 18:30:18 +01:00
|
|
|
}
|
1998-12-10 20:20:47 +01:00
|
|
|
else if( algo == 2 ) {
|
1999-11-13 17:43:23 +01:00
|
|
|
algo = GCRY_PK_DSA;
|
1998-06-25 12:19:08 +02:00
|
|
|
break;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
tty_printf(_("Invalid selection.\n"));
|
1997-11-24 23:24:04 +01:00
|
|
|
}
|
1998-05-26 15:38:00 +02:00
|
|
|
return algo;
|
|
|
|
}
|
1997-11-24 23:24:04 +01:00
|
|
|
|
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
static unsigned
|
|
|
|
ask_keysize( int algo )
|
|
|
|
{
|
|
|
|
char *answer;
|
|
|
|
unsigned nbits;
|
1997-11-24 23:24:04 +01:00
|
|
|
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("About to generate a new %s keypair.\n"
|
|
|
|
" minimum keysize is 768 bits\n"
|
|
|
|
" default keysize is 1024 bits\n"
|
1998-05-26 15:38:00 +02:00
|
|
|
" highest suggested keysize is 2048 bits\n"),
|
1999-10-26 14:14:37 +02:00
|
|
|
gcry_pk_algo_name(algo) );
|
1997-11-18 15:06:00 +01:00
|
|
|
for(;;) {
|
1998-11-27 12:42:49 +01:00
|
|
|
answer = cpr_get("keygen.size",
|
1998-08-08 21:27:00 +02:00
|
|
|
_("What keysize do you want? (1024) "));
|
|
|
|
cpr_kill_prompt();
|
1997-11-24 23:24:04 +01:00
|
|
|
nbits = *answer? atoi(answer): 1024;
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(answer);
|
1999-11-13 17:43:23 +01:00
|
|
|
if( algo == GCRY_PK_DSA && (nbits < 512 || nbits > 1024) )
|
1998-04-14 19:51:16 +02:00
|
|
|
tty_printf(_("DSA only allows keysizes from 512 to 1024\n"));
|
1997-12-20 18:23:29 +01:00
|
|
|
else if( nbits < 768 )
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("keysize too small; 768 is smallest value allowed.\n"));
|
2000-07-14 19:34:53 +02:00
|
|
|
else if( algo == GCRY_PK_RSA && nbits < 1024 )
|
|
|
|
tty_printf(_("keysize too small;"
|
|
|
|
" 1024 is smallest value allowed for RSA.\n"));
|
1999-04-07 20:58:34 +02:00
|
|
|
else if( nbits > 4096 ) {
|
|
|
|
/* It is ridiculous and an annoyance to use larger key sizes!
|
|
|
|
* GnuPG can handle much larger sizes; but it takes an eternity
|
|
|
|
* to create such a key (but less than the time the Sirius
|
|
|
|
* Computer Corporation needs to process one of the usual
|
|
|
|
* complaints) and {de,en}cryption although needs some time.
|
|
|
|
* So, before you complain about this limitation, I suggest that
|
|
|
|
* you start a discussion with Marvin about this theme and then
|
|
|
|
* do whatever you want. */
|
|
|
|
tty_printf(_("keysize too large; %d is largest value allowed.\n"),
|
|
|
|
4096);
|
|
|
|
}
|
1998-08-05 18:51:59 +02:00
|
|
|
else if( nbits > 2048 && !cpr_enabled() ) {
|
1998-08-11 19:29:34 +02:00
|
|
|
tty_printf(
|
|
|
|
_("Keysizes larger than 2048 are not suggested because\n"
|
|
|
|
"computations take REALLY long!\n"));
|
1998-11-27 12:42:49 +01:00
|
|
|
if( cpr_get_answer_is_yes("keygen.size.huge.okay",_(
|
1998-07-29 21:35:05 +02:00
|
|
|
"Are you sure that you want this keysize? ")) ) {
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("Okay, but keep in mind that your monitor "
|
|
|
|
"and keyboard radiation is also very vulnerable "
|
|
|
|
"to attacks!\n"));
|
1997-11-18 15:06:00 +01:00
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
2000-07-14 19:34:53 +02:00
|
|
|
else if( nbits > 1536 && !cpr_enabled() && algo != GCRY_PK_RSA ) {
|
1998-11-27 12:42:49 +01:00
|
|
|
if( cpr_get_answer_is_yes("keygen.size.large.okay",_(
|
1998-07-29 21:35:05 +02:00
|
|
|
"Do you really need such a large keysize? ")) )
|
1998-04-02 12:30:03 +02:00
|
|
|
break;
|
|
|
|
}
|
1997-11-18 15:06:00 +01:00
|
|
|
else
|
|
|
|
break;
|
|
|
|
}
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("Requested keysize is %u bits\n"), nbits );
|
1999-11-13 17:43:23 +01:00
|
|
|
if( algo == GCRY_PK_DSA && (nbits % 64) ) {
|
1997-12-16 20:15:09 +01:00
|
|
|
nbits = ((nbits + 63) / 64) * 64;
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("rounded up to %u bits\n"), nbits );
|
1997-12-16 20:15:09 +01:00
|
|
|
}
|
|
|
|
else if( (nbits % 32) ) {
|
1997-11-18 15:06:00 +01:00
|
|
|
nbits = ((nbits + 31) / 32) * 32;
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("rounded up to %u bits\n"), nbits );
|
1997-11-18 15:06:00 +01:00
|
|
|
}
|
1998-05-26 15:38:00 +02:00
|
|
|
return nbits;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
/****************
|
|
|
|
* Parse an expire string and return it's value in days.
|
|
|
|
* Returns -1 on error.
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
parse_expire_string( const char *string )
|
|
|
|
{
|
|
|
|
int mult;
|
|
|
|
u32 abs_date=0;
|
|
|
|
u32 curtime = make_timestamp();
|
|
|
|
int valid_days;
|
|
|
|
|
|
|
|
if( !*string )
|
|
|
|
valid_days = 0;
|
|
|
|
else if( (abs_date = scan_isodatestr(string)) && abs_date > curtime ) {
|
|
|
|
/* This calculation is not perfectly okay because we
|
|
|
|
* are later going to simply multiply by 86400 and don't
|
|
|
|
* correct for leapseconds. A solution would be to change
|
|
|
|
* the whole implemenation to work with dates and not intervals
|
|
|
|
* which are required for v3 keys.
|
|
|
|
*/
|
|
|
|
valid_days = abs_date/86400-curtime/86400+1;
|
|
|
|
}
|
|
|
|
else if( (mult=check_valid_days(string)) ) {
|
|
|
|
valid_days = atoi(string) * mult;
|
|
|
|
if( valid_days < 0 || valid_days > 39447 )
|
|
|
|
valid_days = 0;
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
valid_days = -1;
|
|
|
|
}
|
|
|
|
return valid_days;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-11-20 18:42:18 +01:00
|
|
|
static u32
|
1999-02-16 14:16:33 +01:00
|
|
|
ask_expire_interval(void)
|
1998-05-26 15:38:00 +02:00
|
|
|
{
|
|
|
|
char *answer;
|
|
|
|
int valid_days=0;
|
1998-11-20 18:42:18 +01:00
|
|
|
u32 interval = 0;
|
1997-11-24 23:24:04 +01:00
|
|
|
|
1998-04-02 12:30:03 +02:00
|
|
|
tty_printf(_("Please specify how long the key should be valid.\n"
|
|
|
|
" 0 = key does not expire\n"
|
|
|
|
" <n> = key expires in n days\n"
|
|
|
|
" <n>w = key expires in n weeks\n"
|
|
|
|
" <n>m = key expires in n months\n"
|
|
|
|
" <n>y = key expires in n years\n"));
|
1998-11-20 18:42:18 +01:00
|
|
|
/* Note: The elgamal subkey for DSA has no expiration date because
|
1998-10-18 17:21:22 +02:00
|
|
|
* it must be signed with the DSA key and this one has the expiration
|
1998-05-05 22:34:20 +02:00
|
|
|
* date */
|
|
|
|
|
1998-04-02 12:30:03 +02:00
|
|
|
answer = NULL;
|
|
|
|
for(;;) {
|
2000-07-14 19:34:53 +02:00
|
|
|
u32 curtime=make_timestamp();
|
1998-04-02 12:30:03 +02:00
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(answer);
|
1998-11-27 12:42:49 +01:00
|
|
|
answer = cpr_get("keygen.valid",_("Key is valid for? (0) "));
|
1998-08-08 21:27:00 +02:00
|
|
|
cpr_kill_prompt();
|
1998-04-02 12:30:03 +02:00
|
|
|
trim_spaces(answer);
|
2000-07-14 19:34:53 +02:00
|
|
|
valid_days = parse_expire_string( answer );
|
|
|
|
if( valid_days < 0 ) {
|
1998-04-02 12:30:03 +02:00
|
|
|
tty_printf(_("invalid value\n"));
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
1998-10-16 18:00:17 +02:00
|
|
|
if( !valid_days ) {
|
1998-04-02 12:30:03 +02:00
|
|
|
tty_printf(_("Key does not expire at all\n"));
|
1998-11-20 18:42:18 +01:00
|
|
|
interval = 0;
|
1998-10-16 18:00:17 +02:00
|
|
|
}
|
1998-04-02 12:30:03 +02:00
|
|
|
else {
|
1998-11-20 18:42:18 +01:00
|
|
|
interval = valid_days * 86400L;
|
1998-06-26 11:45:36 +02:00
|
|
|
/* print the date when the key expires */
|
1998-11-20 18:42:18 +01:00
|
|
|
tty_printf(_("Key expires at %s\n"),
|
2000-07-14 19:34:53 +02:00
|
|
|
asctimestamp((ulong)(curtime + interval) ) );
|
|
|
|
if( (time_t)((ulong)(curtime+interval)) < 0 )
|
|
|
|
tty_printf(_("Your system can't display dates beyond 2038.\n"
|
|
|
|
"However, it will be correctly handled up to 2106.\n"));
|
1998-04-02 12:30:03 +02:00
|
|
|
}
|
|
|
|
|
1999-09-01 15:40:07 +02:00
|
|
|
if( cpr_enabled() || cpr_get_answer_is_yes("keygen.valid.okay",
|
|
|
|
_("Is this correct (y/n)? ")) )
|
1998-04-02 12:30:03 +02:00
|
|
|
break;
|
|
|
|
}
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(answer);
|
1998-11-20 18:42:18 +01:00
|
|
|
return interval;
|
1998-05-26 15:38:00 +02:00
|
|
|
}
|
1998-04-02 12:30:03 +02:00
|
|
|
|
1998-11-20 18:42:18 +01:00
|
|
|
u32
|
|
|
|
ask_expiredate()
|
|
|
|
{
|
|
|
|
u32 x = ask_expire_interval();
|
|
|
|
return x? make_timestamp() + x : 0;
|
|
|
|
}
|
1998-04-02 12:30:03 +02:00
|
|
|
|
1998-06-26 11:45:36 +02:00
|
|
|
static int
|
|
|
|
has_invalid_email_chars( const char *s )
|
|
|
|
{
|
1998-10-21 19:34:36 +02:00
|
|
|
int at_seen=0;
|
1999-02-28 19:14:18 +01:00
|
|
|
static char valid_chars[] = "01234567890_-."
|
|
|
|
"abcdefghijklmnopqrstuvwxyz"
|
|
|
|
"ABCDEFGHIJKLMNOPQRSTUVWXYZ";
|
1998-10-21 19:34:36 +02:00
|
|
|
|
1998-06-26 11:45:36 +02:00
|
|
|
for( ; *s; s++ ) {
|
|
|
|
if( *s & 0x80 )
|
|
|
|
return 1;
|
1998-10-21 19:34:36 +02:00
|
|
|
if( *s == '@' )
|
|
|
|
at_seen=1;
|
1999-02-28 19:14:18 +01:00
|
|
|
else if( !at_seen && !( !!strchr( valid_chars, *s ) || *s == '+' ) )
|
1998-10-21 19:34:36 +02:00
|
|
|
return 1;
|
1999-02-28 19:14:18 +01:00
|
|
|
else if( at_seen && !strchr( valid_chars, *s ) )
|
1998-06-26 11:45:36 +02:00
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
static char *
|
1998-07-29 21:35:05 +02:00
|
|
|
ask_user_id( int mode )
|
1998-05-26 15:38:00 +02:00
|
|
|
{
|
|
|
|
char *answer;
|
|
|
|
char *aname, *acomment, *amail, *uid;
|
1998-04-02 12:30:03 +02:00
|
|
|
|
1998-07-29 21:35:05 +02:00
|
|
|
if( !mode )
|
|
|
|
tty_printf( _("\n"
|
1998-01-07 21:47:46 +01:00
|
|
|
"You need a User-ID to identify your key; the software constructs the user id\n"
|
|
|
|
"from Real Name, Comment and Email Address in this form:\n"
|
1998-04-02 12:30:03 +02:00
|
|
|
" \"Heinrich Heine (Der Dichter) <heinrichh@duesseldorf.de>\"\n\n") );
|
1998-05-26 15:38:00 +02:00
|
|
|
uid = aname = acomment = amail = NULL;
|
1997-11-18 15:06:00 +01:00
|
|
|
for(;;) {
|
1998-01-07 21:47:46 +01:00
|
|
|
char *p;
|
2000-07-14 19:34:53 +02:00
|
|
|
int fail=0;
|
1998-01-07 21:47:46 +01:00
|
|
|
|
|
|
|
if( !aname ) {
|
|
|
|
for(;;) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(aname);
|
1998-11-27 12:42:49 +01:00
|
|
|
aname = cpr_get("keygen.name",_("Real name: "));
|
1998-01-07 21:47:46 +01:00
|
|
|
trim_spaces(aname);
|
1998-08-08 21:27:00 +02:00
|
|
|
cpr_kill_prompt();
|
2000-09-18 16:35:34 +02:00
|
|
|
|
|
|
|
if( opt.allow_freeform_uid )
|
|
|
|
break;
|
|
|
|
|
|
|
|
if( strpbrk( aname, "<>" ) )
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("Invalid character in name\n"));
|
1998-01-12 11:18:17 +01:00
|
|
|
else if( isdigit(*aname) )
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("Name may not start with a digit\n"));
|
1998-01-07 21:47:46 +01:00
|
|
|
else if( strlen(aname) < 5 )
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("Name must be at least 5 characters long\n"));
|
1998-01-07 21:47:46 +01:00
|
|
|
else
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if( !amail ) {
|
|
|
|
for(;;) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(amail);
|
1998-11-27 12:42:49 +01:00
|
|
|
amail = cpr_get("keygen.email",_("Email address: "));
|
1998-01-07 21:47:46 +01:00
|
|
|
trim_spaces(amail);
|
1998-08-08 21:27:00 +02:00
|
|
|
cpr_kill_prompt();
|
1998-01-07 21:47:46 +01:00
|
|
|
if( !*amail )
|
|
|
|
break; /* no email address is okay */
|
1998-06-26 11:45:36 +02:00
|
|
|
else if( has_invalid_email_chars(amail)
|
1998-01-07 21:47:46 +01:00
|
|
|
|| string_count_chr(amail,'@') != 1
|
|
|
|
|| *amail == '@'
|
|
|
|
|| amail[strlen(amail)-1] == '@'
|
|
|
|
|| amail[strlen(amail)-1] == '.'
|
|
|
|
|| strstr(amail, "..") )
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("Not a valid email address\n"));
|
1998-01-07 21:47:46 +01:00
|
|
|
else
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if( !acomment ) {
|
|
|
|
for(;;) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(acomment);
|
1998-11-27 12:42:49 +01:00
|
|
|
acomment = cpr_get("keygen.comment",_("Comment: "));
|
1998-01-07 21:47:46 +01:00
|
|
|
trim_spaces(acomment);
|
1998-08-08 21:27:00 +02:00
|
|
|
cpr_kill_prompt();
|
1998-01-07 21:47:46 +01:00
|
|
|
if( !*acomment )
|
|
|
|
break; /* no comment is okay */
|
|
|
|
else if( strpbrk( acomment, "()" ) )
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("Invalid character in comment\n"));
|
1998-01-07 21:47:46 +01:00
|
|
|
else
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(uid);
|
|
|
|
uid = p = gcry_xmalloc(strlen(aname)+strlen(amail)+strlen(acomment)+12+10);
|
1998-01-07 21:47:46 +01:00
|
|
|
p = stpcpy(p, aname );
|
|
|
|
if( *acomment )
|
|
|
|
p = stpcpy(stpcpy(stpcpy(p," ("), acomment),")");
|
|
|
|
if( *amail )
|
|
|
|
p = stpcpy(stpcpy(stpcpy(p," <"), amail),">");
|
1998-01-16 22:15:24 +01:00
|
|
|
|
|
|
|
/* append a warning if we do not have dev/random
|
|
|
|
* or it is switched into quick testmode */
|
2000-01-24 12:55:49 +01:00
|
|
|
#if 0
|
1998-01-16 22:15:24 +01:00
|
|
|
if( quick_random_gen(-1) )
|
|
|
|
strcpy(p, " (INSECURE!)" );
|
2000-01-24 12:55:49 +01:00
|
|
|
#endif
|
1998-01-16 22:15:24 +01:00
|
|
|
|
1999-03-02 16:48:37 +01:00
|
|
|
/* print a note in case that UTF8 mapping has to be done */
|
|
|
|
for(p=uid; *p; p++ ) {
|
|
|
|
if( *p & 0x80 ) {
|
|
|
|
tty_printf(_("You are using the `%s' character set.\n"),
|
|
|
|
get_native_charset() );
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
1998-01-07 21:47:46 +01:00
|
|
|
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("You selected this USER-ID:\n \"%s\"\n\n"), uid);
|
1998-04-14 19:51:16 +02:00
|
|
|
/* fixme: add a warning if this user-id already exists */
|
2000-07-14 19:34:53 +02:00
|
|
|
if( !*amail && (strchr( aname, '@' ) || strchr( acomment, '@'))) {
|
|
|
|
fail = 1;
|
|
|
|
tty_printf(_("Please don't put the email address "
|
|
|
|
"into the real name or the comment\n") );
|
|
|
|
}
|
|
|
|
|
1998-01-07 21:47:46 +01:00
|
|
|
for(;;) {
|
2000-07-14 19:34:53 +02:00
|
|
|
char *ansstr = _("NnCcEeOoQq");
|
1998-08-05 18:51:59 +02:00
|
|
|
|
1998-08-11 19:29:34 +02:00
|
|
|
if( strlen(ansstr) != 10 )
|
|
|
|
BUG();
|
1998-08-05 18:51:59 +02:00
|
|
|
if( cpr_enabled() ) {
|
2000-01-24 12:55:49 +01:00
|
|
|
answer = gcry_xstrdup(ansstr+6);
|
1998-08-05 18:51:59 +02:00
|
|
|
answer[1] = 0;
|
|
|
|
}
|
|
|
|
else {
|
2000-07-14 19:34:53 +02:00
|
|
|
answer = cpr_get("keygen.userid.cmd", fail?
|
|
|
|
_("Change (N)ame, (C)omment, (E)mail or (Q)uit? ") :
|
|
|
|
_("Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? "));
|
1998-08-08 21:27:00 +02:00
|
|
|
cpr_kill_prompt();
|
1998-08-05 18:51:59 +02:00
|
|
|
}
|
1998-01-07 21:47:46 +01:00
|
|
|
if( strlen(answer) > 1 )
|
|
|
|
;
|
1998-07-29 21:35:05 +02:00
|
|
|
else if( *answer == ansstr[0] || *answer == ansstr[1] ) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(aname); aname = NULL;
|
1998-01-07 21:47:46 +01:00
|
|
|
break;
|
|
|
|
}
|
1998-07-29 21:35:05 +02:00
|
|
|
else if( *answer == ansstr[2] || *answer == ansstr[3] ) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(acomment); acomment = NULL;
|
1998-01-07 21:47:46 +01:00
|
|
|
break;
|
|
|
|
}
|
1998-07-29 21:35:05 +02:00
|
|
|
else if( *answer == ansstr[4] || *answer == ansstr[5] ) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(amail); amail = NULL;
|
1998-01-07 21:47:46 +01:00
|
|
|
break;
|
|
|
|
}
|
1998-07-29 21:35:05 +02:00
|
|
|
else if( *answer == ansstr[6] || *answer == ansstr[7] ) {
|
2000-07-14 19:34:53 +02:00
|
|
|
if( fail ) {
|
|
|
|
tty_printf(_("Please correct the error first\n"));
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
gcry_free(aname); aname = NULL;
|
|
|
|
gcry_free(acomment); acomment = NULL;
|
|
|
|
gcry_free(amail); amail = NULL;
|
|
|
|
break;
|
|
|
|
}
|
1997-11-18 15:06:00 +01:00
|
|
|
}
|
1998-07-29 21:35:05 +02:00
|
|
|
else if( *answer == ansstr[8] || *answer == ansstr[9] ) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(aname); aname = NULL;
|
|
|
|
gcry_free(acomment); acomment = NULL;
|
|
|
|
gcry_free(amail); amail = NULL;
|
|
|
|
gcry_free(uid); uid = NULL;
|
1998-07-29 21:35:05 +02:00
|
|
|
break;
|
|
|
|
}
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(answer);
|
1997-11-18 15:06:00 +01:00
|
|
|
}
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(answer);
|
1998-01-07 21:47:46 +01:00
|
|
|
if( !amail && !acomment && !amail )
|
|
|
|
break;
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(uid); uid = NULL;
|
1997-11-18 15:06:00 +01:00
|
|
|
}
|
1998-11-03 20:38:58 +01:00
|
|
|
if( uid ) {
|
|
|
|
char *p = native_to_utf8( uid );
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free( uid );
|
1998-11-03 20:38:58 +01:00
|
|
|
uid = p;
|
|
|
|
}
|
1998-05-26 15:38:00 +02:00
|
|
|
return uid;
|
|
|
|
}
|
|
|
|
|
1997-12-09 13:46:23 +01:00
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
static DEK *
|
|
|
|
ask_passphrase( STRING2KEY **ret_s2k )
|
|
|
|
{
|
|
|
|
DEK *dek = NULL;
|
|
|
|
STRING2KEY *s2k;
|
1997-12-09 13:46:23 +01:00
|
|
|
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_("You need a Passphrase to protect your secret key.\n\n") );
|
1997-12-09 13:46:23 +01:00
|
|
|
|
2000-01-24 12:55:49 +01:00
|
|
|
s2k = gcry_xmalloc_secure( sizeof *s2k );
|
1997-12-20 18:23:29 +01:00
|
|
|
for(;;) {
|
1998-09-28 21:25:31 +02:00
|
|
|
s2k->mode = opt.s2k_mode;
|
|
|
|
s2k->hash_algo = opt.s2k_digest_algo;
|
1999-07-01 12:53:35 +02:00
|
|
|
dek = passphrase_to_dek( NULL, 0, opt.s2k_cipher_algo, s2k, 2 );
|
1998-05-04 20:49:26 +02:00
|
|
|
if( !dek ) {
|
|
|
|
tty_printf(_("passphrase not correctly repeated; try again.\n"));
|
|
|
|
}
|
|
|
|
else if( !dek->keylen ) {
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free(dek); dek = NULL;
|
|
|
|
gcry_free(s2k); s2k = NULL;
|
1998-01-28 17:09:43 +01:00
|
|
|
tty_printf(_(
|
1998-04-14 19:51:16 +02:00
|
|
|
"You don't want a passphrase - this is probably a *bad* idea!\n"
|
|
|
|
"I will do it anyway. You can change your passphrase at any time,\n"
|
1998-07-29 21:35:05 +02:00
|
|
|
"using this program with the option \"--edit-key\".\n\n"));
|
1997-12-20 18:23:29 +01:00
|
|
|
break;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
break; /* okay */
|
1997-12-09 13:46:23 +01:00
|
|
|
}
|
1998-05-26 15:38:00 +02:00
|
|
|
*ret_s2k = s2k;
|
|
|
|
return dek;
|
|
|
|
}
|
1997-12-09 13:46:23 +01:00
|
|
|
|
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
static int
|
|
|
|
do_create( int algo, unsigned nbits, KBNODE pub_root, KBNODE sec_root,
|
2000-07-14 19:34:53 +02:00
|
|
|
DEK *dek, STRING2KEY *s2k, PKT_secret_key **sk, u32 expiredate )
|
1998-05-26 15:38:00 +02:00
|
|
|
{
|
|
|
|
int rc=0;
|
1997-11-18 15:06:00 +01:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
if( !opt.batch )
|
|
|
|
tty_printf(_(
|
1997-12-20 18:23:29 +01:00
|
|
|
"We need to generate a lot of random bytes. It is a good idea to perform\n"
|
1999-03-14 19:35:18 +01:00
|
|
|
"some other action (type on the keyboard, move the mouse, utilize the\n"
|
1999-04-07 20:58:34 +02:00
|
|
|
"disks) during the prime generation; this gives the random number\n"
|
|
|
|
"generator a better chance to gain enough entropy.\n") );
|
1997-12-20 18:23:29 +01:00
|
|
|
|
1999-11-13 17:43:23 +01:00
|
|
|
if( algo == GCRY_PK_ELG || algo == GCRY_PK_ELG_E )
|
2000-07-14 19:34:53 +02:00
|
|
|
rc = gen_elg(algo, nbits, pub_root, sec_root, dek, s2k, sk, expiredate);
|
1999-11-13 17:43:23 +01:00
|
|
|
else if( algo == GCRY_PK_DSA )
|
1998-10-16 18:00:17 +02:00
|
|
|
rc = gen_dsa(nbits, pub_root, sec_root, dek, s2k, sk, expiredate);
|
2000-07-14 19:34:53 +02:00
|
|
|
#if 0
|
|
|
|
else if( algo == GCRY_PK_RSA )
|
|
|
|
rc = gen_rsa(algo, nbits, pub_root, sec_root, dek, s2k, sk, expiredate);
|
|
|
|
#endif
|
1997-11-24 23:24:04 +01:00
|
|
|
else
|
1998-01-16 22:15:24 +01:00
|
|
|
BUG();
|
1998-10-16 18:00:17 +02:00
|
|
|
|
|
|
|
#ifdef ENABLE_COMMENT_PACKETS
|
1998-02-13 21:58:50 +01:00
|
|
|
if( !rc ) {
|
|
|
|
add_kbnode( pub_root,
|
1998-02-24 19:50:46 +01:00
|
|
|
make_comment_node("#created by GNUPG v" VERSION " ("
|
1998-02-16 21:05:02 +01:00
|
|
|
PRINTABLE_OS_NAME ")"));
|
1998-02-13 21:58:50 +01:00
|
|
|
add_kbnode( sec_root,
|
1998-02-24 19:50:46 +01:00
|
|
|
make_comment_node("#created by GNUPG v" VERSION " ("
|
1998-02-16 21:05:02 +01:00
|
|
|
PRINTABLE_OS_NAME ")"));
|
1998-02-13 21:58:50 +01:00
|
|
|
}
|
1998-10-16 18:00:17 +02:00
|
|
|
#endif
|
1998-05-26 15:38:00 +02:00
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-07-29 21:35:05 +02:00
|
|
|
/****************
|
1999-06-16 20:25:37 +02:00
|
|
|
* Generate a new user id packet, or return NULL if canceled
|
1998-07-29 21:35:05 +02:00
|
|
|
*/
|
|
|
|
PKT_user_id *
|
|
|
|
generate_user_id()
|
|
|
|
{
|
|
|
|
PKT_user_id *uid;
|
|
|
|
char *p;
|
|
|
|
size_t n;
|
|
|
|
|
|
|
|
p = ask_user_id( 1 );
|
|
|
|
if( !p )
|
|
|
|
return NULL;
|
|
|
|
n = strlen(p);
|
2000-07-14 19:34:53 +02:00
|
|
|
uid = gcry_xcalloc( 1, sizeof *uid + n - 1 );
|
1998-07-29 21:35:05 +02:00
|
|
|
uid->len = n;
|
|
|
|
strcpy(uid->name, p);
|
|
|
|
return uid;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
static void
|
|
|
|
release_parameter_list( struct para_data_s *r )
|
|
|
|
{
|
|
|
|
struct para_data_s *r2;
|
|
|
|
|
|
|
|
for( ; r ; r = r2 ) {
|
|
|
|
r2 = r->next;
|
|
|
|
if( r->key == pPASSPHRASE_DEK )
|
|
|
|
gcry_free( r->u.dek );
|
|
|
|
else if( r->key == pPASSPHRASE_S2K )
|
|
|
|
gcry_free( r->u.s2k );
|
|
|
|
|
|
|
|
gcry_free(r);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static struct para_data_s *
|
|
|
|
get_parameter( struct para_data_s *para, enum para_name key )
|
|
|
|
{
|
|
|
|
struct para_data_s *r;
|
|
|
|
|
|
|
|
for( r = para; r && r->key != key; r = r->next )
|
|
|
|
;
|
|
|
|
return r;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const char *
|
|
|
|
get_parameter_value( struct para_data_s *para, enum para_name key )
|
|
|
|
{
|
|
|
|
struct para_data_s *r = get_parameter( para, key );
|
|
|
|
return (r && *r->u.value)? r->u.value : NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
get_parameter_algo( struct para_data_s *para, enum para_name key )
|
|
|
|
{
|
|
|
|
struct para_data_s *r = get_parameter( para, key );
|
|
|
|
if( !r )
|
|
|
|
return -1;
|
|
|
|
if( isdigit( *r->u.value ) )
|
|
|
|
return atoi( r->u.value );
|
|
|
|
return gcry_pk_map_name( r->u.value );
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static u32
|
|
|
|
get_parameter_u32( struct para_data_s *para, enum para_name key )
|
|
|
|
{
|
|
|
|
struct para_data_s *r = get_parameter( para, key );
|
|
|
|
|
|
|
|
if( !r )
|
|
|
|
return 0;
|
|
|
|
if( r->key == pKEYEXPIRE || r->key == pSUBKEYEXPIRE )
|
|
|
|
return r->u.expire;
|
|
|
|
|
|
|
|
return (unsigned int)strtoul( r->u.value, NULL, 10 );
|
|
|
|
}
|
|
|
|
|
|
|
|
static unsigned int
|
|
|
|
get_parameter_uint( struct para_data_s *para, enum para_name key )
|
|
|
|
{
|
|
|
|
return get_parameter_u32( para, key );
|
|
|
|
}
|
|
|
|
|
|
|
|
static DEK *
|
|
|
|
get_parameter_dek( struct para_data_s *para, enum para_name key )
|
|
|
|
{
|
|
|
|
struct para_data_s *r = get_parameter( para, key );
|
|
|
|
return r? r->u.dek : NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static STRING2KEY *
|
|
|
|
get_parameter_s2k( struct para_data_s *para, enum para_name key )
|
|
|
|
{
|
|
|
|
struct para_data_s *r = get_parameter( para, key );
|
|
|
|
return r? r->u.s2k : NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static int
|
|
|
|
proc_parameter_file( struct para_data_s *para, const char *fname,
|
|
|
|
struct output_control_s *outctrl )
|
|
|
|
{
|
|
|
|
struct para_data_s *r;
|
|
|
|
const char *s1, *s2, *s3;
|
|
|
|
size_t n;
|
|
|
|
char *p;
|
|
|
|
int i;
|
|
|
|
|
|
|
|
/* check that we have all required parameters */
|
|
|
|
assert( get_parameter( para, pKEYTYPE ) );
|
|
|
|
i = get_parameter_algo( para, pKEYTYPE );
|
|
|
|
if( i < 1 || openpgp_pk_test_algo( i, GCRY_PK_USAGE_SIGN ) ) {
|
|
|
|
r = get_parameter( para, pKEYTYPE );
|
|
|
|
log_error("%s:%d: invalid algorithm\n", fname, r->lnr );
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
i = get_parameter_algo( para, pSUBKEYTYPE );
|
|
|
|
if( i > 1 && openpgp_pk_test_algo( i, 0 ) ) {
|
|
|
|
r = get_parameter( para, pSUBKEYTYPE );
|
|
|
|
log_error("%s:%d: invalid algorithm\n", fname, r->lnr );
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
if( !get_parameter_value( para, pUSERID ) ) {
|
|
|
|
/* create the formatted user ID */
|
|
|
|
s1 = get_parameter_value( para, pNAMEREAL );
|
|
|
|
s2 = get_parameter_value( para, pNAMECOMMENT );
|
|
|
|
s3 = get_parameter_value( para, pNAMEEMAIL );
|
|
|
|
if( s1 || s2 || s3 ) {
|
|
|
|
n = (s1?strlen(s1):0) + (s2?strlen(s2):0) + (s3?strlen(s3):0);
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r + n + 20 );
|
|
|
|
r->key = pUSERID;
|
|
|
|
p = r->u.value;
|
|
|
|
if( s1 )
|
|
|
|
p = stpcpy(p, s1 );
|
|
|
|
if( s2 )
|
|
|
|
p = stpcpy(stpcpy(stpcpy(p," ("), s2 ),")");
|
|
|
|
if( s3 )
|
|
|
|
p = stpcpy(stpcpy(stpcpy(p," <"), s3 ),">");
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/* make DEK and S2K from the Passphrase */
|
|
|
|
r = get_parameter( para, pPASSPHRASE );
|
|
|
|
if( r && *r->u.value ) {
|
|
|
|
/* we have a plain text passphrase - create a DEK from it.
|
|
|
|
* It is a little bit ridiculous to keep it ih secure memory
|
|
|
|
* but becuase we do this alwasy, why not here */
|
|
|
|
STRING2KEY *s2k;
|
|
|
|
DEK *dek;
|
|
|
|
|
|
|
|
s2k = gcry_xmalloc_secure( sizeof *s2k );
|
|
|
|
s2k->mode = opt.s2k_mode;
|
|
|
|
s2k->hash_algo = opt.s2k_digest_algo;
|
|
|
|
set_next_passphrase( r->u.value );
|
|
|
|
dek = passphrase_to_dek( NULL, 0, opt.s2k_cipher_algo, s2k, 2 );
|
|
|
|
set_next_passphrase( NULL );
|
|
|
|
assert( dek );
|
|
|
|
memset( r->u.value, 0, strlen(r->u.value) );
|
|
|
|
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r );
|
|
|
|
r->key = pPASSPHRASE_S2K;
|
|
|
|
r->u.s2k = s2k;
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r );
|
|
|
|
r->key = pPASSPHRASE_DEK;
|
|
|
|
r->u.dek = dek;
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* make KEYEXPIRE from Expire-Date */
|
|
|
|
r = get_parameter( para, pEXPIREDATE );
|
|
|
|
if( r && *r->u.value ) {
|
|
|
|
i = parse_expire_string( r->u.value );
|
|
|
|
if( i < 0 ) {
|
|
|
|
log_error("%s:%d: invalid expire date\n", fname, r->lnr );
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
r->u.expire = i * 86400L;
|
|
|
|
r->key = pKEYEXPIRE; /* change hat entry */
|
|
|
|
/* also set it for the subkey */
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = pSUBKEYEXPIRE;
|
|
|
|
r->u.expire = i * 86400L;
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
}
|
|
|
|
|
|
|
|
if( !!outctrl->pub.newfname ^ !!outctrl->sec.newfname ) {
|
|
|
|
log_error("%s:%d: only one ring name is set\n", fname, outctrl->lnr );
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
do_generate_keypair( para, outctrl );
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/****************
|
|
|
|
* Kludge to allow non interactive key generation controlled
|
|
|
|
* by a parameter file (which currently is only stdin)
|
|
|
|
* Note, that string parameters are expected to be in UTF-8
|
|
|
|
*/
|
|
|
|
static void
|
|
|
|
read_parameter_file( const char *fname )
|
|
|
|
{
|
|
|
|
static struct { const char *name;
|
|
|
|
enum para_name key;
|
|
|
|
} keywords[] = {
|
|
|
|
{ "Key-Type", pKEYTYPE},
|
|
|
|
{ "Key-Length", pKEYLENGTH },
|
|
|
|
{ "Subkey-Type", pSUBKEYTYPE },
|
|
|
|
{ "Subkey-Length", pSUBKEYLENGTH },
|
|
|
|
{ "Name-Real", pNAMEREAL },
|
|
|
|
{ "Name-Email", pNAMEEMAIL },
|
|
|
|
{ "Name-Comment", pNAMECOMMENT },
|
|
|
|
{ "Expire-Date", pEXPIREDATE },
|
|
|
|
{ "Passphrase", pPASSPHRASE },
|
|
|
|
{ NULL, 0 }
|
|
|
|
};
|
|
|
|
FILE *fp;
|
|
|
|
char line[1024], *p;
|
|
|
|
int lnr;
|
|
|
|
const char *err = NULL;
|
|
|
|
struct para_data_s *para, *r;
|
|
|
|
int i;
|
|
|
|
struct output_control_s outctrl;
|
|
|
|
|
|
|
|
memset( &outctrl, 0, sizeof( outctrl ) );
|
|
|
|
|
|
|
|
if( !fname || !*fname || !strcmp(fname,"-") ) {
|
|
|
|
fp = stdin;
|
|
|
|
fname = "-";
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
fp = fopen( fname, "r" );
|
|
|
|
if( !fp ) {
|
|
|
|
log_error(_("can't open `%s': %s\n"), fname, strerror(errno) );
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
lnr = 0;
|
|
|
|
err = NULL;
|
|
|
|
para = NULL;
|
|
|
|
while( fgets( line, DIM(line)-1, fp ) ) {
|
|
|
|
char *keyword, *value;
|
|
|
|
|
|
|
|
lnr++;
|
|
|
|
if( *line && line[strlen(line)-1] != '\n' ) {
|
|
|
|
err = "line too long";
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
for( p = line; isspace(*p); p++ )
|
|
|
|
;
|
|
|
|
if( !*p || *p == '#' )
|
|
|
|
continue;
|
|
|
|
keyword = p;
|
|
|
|
if( *keyword == '%' ) {
|
|
|
|
for( ; !isspace(*p); p++ )
|
|
|
|
;
|
|
|
|
if( *p )
|
|
|
|
*p++ = 0;
|
|
|
|
for( ; isspace(*p); p++ )
|
|
|
|
;
|
|
|
|
value = p;
|
|
|
|
trim_trailing_ws( value, strlen(value) );
|
|
|
|
if( !stricmp( keyword, "%echo" ) )
|
|
|
|
log_info("%s\n", value );
|
|
|
|
else if( !stricmp( keyword, "%dry-run" ) )
|
|
|
|
outctrl.dryrun = 1;
|
|
|
|
else if( !stricmp( keyword, "%commit" ) ) {
|
|
|
|
outctrl.lnr = lnr;
|
|
|
|
proc_parameter_file( para, fname, &outctrl );
|
|
|
|
release_parameter_list( para );
|
|
|
|
para = NULL;
|
|
|
|
}
|
|
|
|
else if( !stricmp( keyword, "%pubring" ) ) {
|
|
|
|
if( outctrl.pub.fname && !strcmp( outctrl.pub.fname, value ) )
|
|
|
|
; /* still the same file - ignore it */
|
|
|
|
else {
|
|
|
|
gcry_free( outctrl.pub.newfname );
|
|
|
|
outctrl.pub.newfname = gcry_xstrdup( value );
|
|
|
|
outctrl.use_files = 1;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else if( !stricmp( keyword, "%secring" ) ) {
|
|
|
|
if( outctrl.sec.fname && !strcmp( outctrl.sec.fname, value ) )
|
|
|
|
; /* still the same file - ignore it */
|
|
|
|
else {
|
|
|
|
gcry_free( outctrl.sec.newfname );
|
|
|
|
outctrl.sec.newfname = gcry_xstrdup( value );
|
|
|
|
outctrl.use_files = 1;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else
|
|
|
|
log_info("skipping control `%s' (%s)\n", keyword, value );
|
|
|
|
|
|
|
|
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if( !(p = strchr( p, ':' )) || p == keyword ) {
|
|
|
|
err = "missing colon";
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if( *p )
|
|
|
|
*p++ = 0;
|
|
|
|
for( ; isspace(*p); p++ )
|
|
|
|
;
|
|
|
|
if( !*p ) {
|
|
|
|
err = "missing argument";
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
value = p;
|
|
|
|
trim_trailing_ws( value, strlen(value) );
|
|
|
|
|
|
|
|
for(i=0; keywords[i].name; i++ ) {
|
|
|
|
if( !stricmp( keywords[i].name, keyword ) )
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if( !keywords[i].name ) {
|
|
|
|
err = "unknown keyword";
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if( keywords[i].key != pKEYTYPE && !para ) {
|
|
|
|
err = "parameter block does not start with \"Key-Type\"";
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
if( keywords[i].key == pKEYTYPE && para ) {
|
|
|
|
outctrl.lnr = lnr;
|
|
|
|
proc_parameter_file( para, fname, &outctrl );
|
|
|
|
release_parameter_list( para );
|
|
|
|
para = NULL;
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
for( r = para; r; r = r->next ) {
|
|
|
|
if( r->key == keywords[i].key )
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if( r ) {
|
|
|
|
err = "duplicate keyword";
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r + strlen( value ) );
|
|
|
|
r->lnr = lnr;
|
|
|
|
r->key = keywords[i].key;
|
|
|
|
strcpy( r->u.value, value );
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
}
|
|
|
|
if( err )
|
|
|
|
log_error("%s:%d: %s\n", fname, lnr, err );
|
|
|
|
else if( ferror(fp) ) {
|
|
|
|
log_error("%s:%d: read error: %s\n", fname, lnr, strerror(errno) );
|
|
|
|
}
|
|
|
|
else if( para ) {
|
|
|
|
outctrl.lnr = lnr;
|
|
|
|
proc_parameter_file( para, fname, &outctrl );
|
|
|
|
}
|
|
|
|
|
|
|
|
if( outctrl.use_files ) { /* close open streams */
|
|
|
|
iobuf_close( outctrl.pub.stream );
|
|
|
|
iobuf_close( outctrl.sec.stream );
|
|
|
|
gcry_free( outctrl.pub.fname );
|
|
|
|
gcry_free( outctrl.pub.newfname );
|
|
|
|
gcry_free( outctrl.sec.fname );
|
|
|
|
gcry_free( outctrl.sec.newfname );
|
|
|
|
}
|
|
|
|
|
|
|
|
release_parameter_list( para );
|
|
|
|
if( strcmp( fname, "-" ) )
|
|
|
|
fclose(fp);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
/****************
|
|
|
|
* Generate a keypair
|
2000-07-14 19:34:53 +02:00
|
|
|
* (fname is only used in batch mode)
|
1998-05-26 15:38:00 +02:00
|
|
|
*/
|
|
|
|
void
|
2000-07-14 19:34:53 +02:00
|
|
|
generate_keypair( const char *fname )
|
1998-05-26 15:38:00 +02:00
|
|
|
{
|
2000-07-14 19:34:53 +02:00
|
|
|
unsigned int nbits;
|
1998-05-26 15:38:00 +02:00
|
|
|
char *uid = NULL;
|
|
|
|
DEK *dek;
|
|
|
|
STRING2KEY *s2k;
|
|
|
|
int algo;
|
1998-06-25 12:19:08 +02:00
|
|
|
int both = 0;
|
2000-07-14 19:34:53 +02:00
|
|
|
u32 expire;
|
|
|
|
struct para_data_s *para = NULL;
|
|
|
|
struct para_data_s *r;
|
|
|
|
struct output_control_s outctrl;
|
|
|
|
|
|
|
|
memset( &outctrl, 0, sizeof( outctrl ) );
|
1998-05-26 15:38:00 +02:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
if( opt.batch ) {
|
|
|
|
read_parameter_file( fname );
|
1998-05-26 15:38:00 +02:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
algo = ask_algo( 0 );
|
|
|
|
if( !algo ) { /* default: DSA with ElG subkey of the specified size */
|
1998-06-25 12:19:08 +02:00
|
|
|
both = 1;
|
2000-07-14 19:34:53 +02:00
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = pKEYTYPE;
|
|
|
|
sprintf( r->u.value, "%d", GCRY_PK_DSA );
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
1998-06-25 12:19:08 +02:00
|
|
|
tty_printf(_("DSA keypair will have 1024 bits.\n"));
|
2000-07-14 19:34:53 +02:00
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = pKEYLENGTH;
|
|
|
|
strcpy( r->u.value, "1024" );
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
|
|
|
|
algo = GCRY_PK_ELG_E;
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = pSUBKEYTYPE;
|
|
|
|
sprintf( r->u.value, "%d", algo );
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = pKEYTYPE;
|
|
|
|
sprintf( r->u.value, "%d", algo );
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
1998-06-25 12:19:08 +02:00
|
|
|
}
|
2000-07-14 19:34:53 +02:00
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
nbits = ask_keysize( algo );
|
2000-07-14 19:34:53 +02:00
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = both? pSUBKEYLENGTH : pKEYLENGTH;
|
|
|
|
sprintf( r->u.value, "%u", nbits);
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
|
1998-11-20 18:42:18 +01:00
|
|
|
expire = ask_expire_interval();
|
2000-07-14 19:34:53 +02:00
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = pKEYEXPIRE;
|
|
|
|
r->u.expire = expire;
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r + 20 );
|
|
|
|
r->key = pSUBKEYEXPIRE;
|
|
|
|
r->u.expire = expire;
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
|
1998-07-29 21:35:05 +02:00
|
|
|
uid = ask_user_id(0);
|
|
|
|
if( !uid ) {
|
1999-06-16 20:25:37 +02:00
|
|
|
log_error(_("Key generation canceled.\n"));
|
2000-07-14 19:34:53 +02:00
|
|
|
release_parameter_list( para );
|
1998-07-29 21:35:05 +02:00
|
|
|
return;
|
|
|
|
}
|
2000-07-14 19:34:53 +02:00
|
|
|
r = gcry_xcalloc( 1, sizeof *r + strlen(uid) );
|
|
|
|
r->key = pUSERID;
|
|
|
|
strcpy( r->u.value, uid );
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
dek = ask_passphrase( &s2k );
|
2000-07-14 19:34:53 +02:00
|
|
|
if( dek ) {
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r );
|
|
|
|
r->key = pPASSPHRASE_DEK;
|
|
|
|
r->u.dek = dek;
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
r = gcry_xcalloc( 1, sizeof *r );
|
|
|
|
r->key = pPASSPHRASE_S2K;
|
|
|
|
r->u.s2k = s2k;
|
|
|
|
r->next = para;
|
|
|
|
para = r;
|
|
|
|
}
|
|
|
|
|
|
|
|
proc_parameter_file( para, "[internal]", &outctrl );
|
|
|
|
release_parameter_list( para );
|
|
|
|
}
|
1998-05-26 15:38:00 +02:00
|
|
|
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
static void
|
|
|
|
do_generate_keypair( struct para_data_s *para,
|
|
|
|
struct output_control_s *outctrl )
|
|
|
|
{
|
|
|
|
char *pub_fname = NULL;
|
|
|
|
char *sec_fname = NULL;
|
|
|
|
KBNODE pub_root = NULL;
|
|
|
|
KBNODE sec_root = NULL;
|
|
|
|
PKT_secret_key *sk = NULL;
|
|
|
|
const char *s;
|
|
|
|
int rc;
|
|
|
|
|
|
|
|
if( outctrl->dryrun ) {
|
|
|
|
log_info("dry-run mode - key generation skipped\n");
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
if( outctrl->use_files ) {
|
|
|
|
if( outctrl->pub.newfname ) {
|
|
|
|
iobuf_close(outctrl->pub.stream);
|
|
|
|
outctrl->pub.stream = NULL;
|
|
|
|
gcry_free( outctrl->pub.fname );
|
|
|
|
outctrl->pub.fname = outctrl->pub.newfname;
|
|
|
|
outctrl->pub.newfname = NULL;
|
|
|
|
|
|
|
|
outctrl->pub.stream = iobuf_create( outctrl->pub.fname );
|
|
|
|
if( !outctrl->pub.stream ) {
|
|
|
|
log_error("can't create `%s': %s\n", outctrl->pub.newfname,
|
|
|
|
strerror(errno) );
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if( opt.armor ) {
|
|
|
|
outctrl->pub.afx.what = 1;
|
|
|
|
iobuf_push_filter( outctrl->pub.stream, armor_filter,
|
|
|
|
&outctrl->pub.afx );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if( outctrl->sec.newfname ) {
|
|
|
|
iobuf_close(outctrl->sec.stream);
|
|
|
|
outctrl->sec.stream = NULL;
|
|
|
|
gcry_free( outctrl->sec.fname );
|
|
|
|
outctrl->sec.fname = outctrl->sec.newfname;
|
|
|
|
outctrl->sec.newfname = NULL;
|
|
|
|
|
|
|
|
outctrl->sec.stream = iobuf_create( outctrl->sec.fname );
|
|
|
|
if( !outctrl->sec.stream ) {
|
|
|
|
log_error("can't create `%s': %s\n", outctrl->sec.newfname,
|
|
|
|
strerror(errno) );
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
if( opt.armor ) {
|
|
|
|
outctrl->sec.afx.what = 5;
|
|
|
|
iobuf_push_filter( outctrl->sec.stream, armor_filter,
|
|
|
|
&outctrl->sec.afx );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
pub_fname = outctrl->pub.fname; /* only for info output */
|
|
|
|
sec_fname = outctrl->sec.fname; /* only for info output */
|
|
|
|
assert( outctrl->pub.stream );
|
|
|
|
assert( outctrl->sec.stream );
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
pub_fname = get_writable_keyblock_file( 0 );
|
|
|
|
sec_fname = get_writable_keyblock_file( 1 );
|
|
|
|
}
|
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
if( opt.verbose ) {
|
2000-07-14 19:34:53 +02:00
|
|
|
log_info(_("writing public key to `%s'\n"), pub_fname );
|
|
|
|
log_info(_("writing secret key to `%s'\n"), sec_fname );
|
1998-05-26 15:38:00 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
/* we create the packets as a tree of kbnodes. Because the structure
|
|
|
|
* we create is known in advance we simply generate a linked list
|
|
|
|
* The first packet is a dummy comment packet which we flag
|
1998-06-29 14:30:57 +02:00
|
|
|
* as deleted. The very first packet must always be a KEY packet.
|
1998-05-26 15:38:00 +02:00
|
|
|
*/
|
|
|
|
pub_root = make_comment_node("#"); delete_kbnode(pub_root);
|
|
|
|
sec_root = make_comment_node("#"); delete_kbnode(sec_root);
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
rc = do_create( get_parameter_algo( para, pKEYTYPE ),
|
|
|
|
get_parameter_uint( para, pKEYLENGTH ),
|
|
|
|
pub_root, sec_root,
|
|
|
|
get_parameter_dek( para, pPASSPHRASE_DEK ),
|
|
|
|
get_parameter_s2k( para, pPASSPHRASE_S2K ),
|
|
|
|
&sk,
|
|
|
|
get_parameter_u32( para, pKEYEXPIRE ) );
|
|
|
|
if( !rc && (s=get_parameter_value(para, pUSERID)) ) {
|
|
|
|
write_uid(pub_root, s );
|
|
|
|
if( !rc )
|
|
|
|
write_uid(sec_root, s );
|
|
|
|
if( !rc )
|
|
|
|
rc = write_selfsig(pub_root, pub_root, sk);
|
|
|
|
if( !rc )
|
|
|
|
rc = write_selfsig(sec_root, pub_root, sk);
|
|
|
|
}
|
1997-12-09 13:46:23 +01:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
if( get_parameter( para, pSUBKEYTYPE ) ) {
|
|
|
|
rc = do_create( get_parameter_algo( para, pSUBKEYTYPE ),
|
|
|
|
get_parameter_uint( para, pSUBKEYLENGTH ),
|
|
|
|
pub_root, sec_root,
|
|
|
|
get_parameter_dek( para, pPASSPHRASE_DEK ),
|
|
|
|
get_parameter_s2k( para, pPASSPHRASE_S2K ),
|
|
|
|
NULL,
|
|
|
|
get_parameter_u32( para, pSUBKEYEXPIRE ) );
|
1998-06-25 12:19:08 +02:00
|
|
|
if( !rc )
|
1998-06-29 14:30:57 +02:00
|
|
|
rc = write_keybinding(pub_root, pub_root, sk);
|
1998-06-25 12:19:08 +02:00
|
|
|
if( !rc )
|
1998-06-29 14:30:57 +02:00
|
|
|
rc = write_keybinding(sec_root, pub_root, sk);
|
1998-06-25 12:19:08 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
if( !rc && outctrl->use_files ) { /* direct write to specified files */
|
|
|
|
rc = write_keyblock( outctrl->pub.stream, pub_root );
|
|
|
|
if( rc )
|
|
|
|
log_error("can't write public key: %s\n", gpg_errstr(rc) );
|
|
|
|
if( !rc ) {
|
|
|
|
rc = write_keyblock( outctrl->sec.stream, sec_root );
|
|
|
|
if( rc )
|
|
|
|
log_error("can't write secret key: %s\n", gpg_errstr(rc) );
|
|
|
|
}
|
|
|
|
|
|
|
|
}
|
|
|
|
else if( !rc ) { /* write to the standard keyrings */
|
1997-12-16 20:15:09 +01:00
|
|
|
KBPOS pub_kbpos;
|
|
|
|
KBPOS sec_kbpos;
|
|
|
|
int rc1 = -1;
|
|
|
|
int rc2 = -1;
|
|
|
|
|
|
|
|
/* we can now write the certificates */
|
1998-01-06 22:01:36 +01:00
|
|
|
if( get_keyblock_handle( pub_fname, 0, &pub_kbpos ) ) {
|
|
|
|
if( add_keyblock_resource( pub_fname, 1, 0 ) ) {
|
1998-12-29 14:47:31 +01:00
|
|
|
log_error("can add keyblock file `%s'\n", pub_fname );
|
2000-01-27 17:50:45 +01:00
|
|
|
rc = GPGERR_CREATE_FILE;
|
1997-12-16 20:15:09 +01:00
|
|
|
}
|
1998-01-06 22:01:36 +01:00
|
|
|
else if( get_keyblock_handle( pub_fname, 0, &pub_kbpos ) ) {
|
1998-12-29 14:47:31 +01:00
|
|
|
log_error("can get keyblock handle for `%s'\n", pub_fname );
|
2000-01-27 17:50:45 +01:00
|
|
|
rc = GPGERR_CREATE_FILE;
|
1997-12-16 20:15:09 +01:00
|
|
|
}
|
|
|
|
}
|
|
|
|
if( rc )
|
|
|
|
;
|
1998-01-06 22:01:36 +01:00
|
|
|
else if( get_keyblock_handle( sec_fname, 1, &sec_kbpos ) ) {
|
|
|
|
if( add_keyblock_resource( sec_fname, 1, 1 ) ) {
|
1998-12-29 14:47:31 +01:00
|
|
|
log_error("can add keyblock file `%s'\n", sec_fname );
|
2000-01-27 17:50:45 +01:00
|
|
|
rc = GPGERR_CREATE_FILE;
|
1997-12-16 20:15:09 +01:00
|
|
|
}
|
1998-01-06 22:01:36 +01:00
|
|
|
else if( get_keyblock_handle( sec_fname, 1, &sec_kbpos ) ) {
|
1998-12-29 14:47:31 +01:00
|
|
|
log_error("can get keyblock handle for `%s'\n", sec_fname );
|
2000-01-27 17:50:45 +01:00
|
|
|
rc = GPGERR_CREATE_FILE;
|
1997-12-16 20:15:09 +01:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if( rc )
|
|
|
|
;
|
2000-10-06 14:28:44 +02:00
|
|
|
else if( (rc=insert_keyblock( pub_root )) )
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error("can't write public key: %s\n", gpg_errstr(rc) );
|
2000-10-06 14:28:44 +02:00
|
|
|
else if( (rc=insert_keyblock( sec_root )) )
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error("can't write secret key: %s\n", gpg_errstr(rc) );
|
1997-12-16 20:15:09 +01:00
|
|
|
else {
|
2000-07-14 19:34:53 +02:00
|
|
|
if( !opt.batch )
|
|
|
|
tty_printf(_("public and secret key created and signed.\n") );
|
|
|
|
if( !opt.batch
|
|
|
|
&& get_parameter_algo( para, pKEYTYPE ) == GCRY_PK_DSA
|
|
|
|
&& !get_parameter( para, pSUBKEYTYPE ) )
|
|
|
|
{
|
1998-05-26 15:38:00 +02:00
|
|
|
tty_printf(_("Note that this key cannot be used for "
|
|
|
|
"encryption. You may want to use\n"
|
1999-01-19 19:37:41 +01:00
|
|
|
"the command \"--edit-key\" to generate a "
|
1998-05-26 15:38:00 +02:00
|
|
|
"secondary key for this purpose.\n") );
|
2000-07-14 19:34:53 +02:00
|
|
|
}
|
1997-12-16 20:15:09 +01:00
|
|
|
}
|
|
|
|
|
1997-12-09 13:46:23 +01:00
|
|
|
}
|
1997-12-16 20:15:09 +01:00
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
if( rc ) {
|
|
|
|
if( opt.batch )
|
|
|
|
log_error("key generation failed: %s\n", gpg_errstr(rc) );
|
|
|
|
else
|
|
|
|
tty_printf(_("Key generation failed: %s\n"), gpg_errstr(rc) );
|
|
|
|
}
|
1997-12-16 20:15:09 +01:00
|
|
|
release_kbnode( pub_root );
|
|
|
|
release_kbnode( sec_root );
|
1998-06-29 14:30:57 +02:00
|
|
|
if( sk ) /* the unprotected secret key */
|
|
|
|
free_secret_key(sk);
|
2000-07-14 19:34:53 +02:00
|
|
|
if( !outctrl->use_files ) {
|
|
|
|
gcry_free(pub_fname);
|
|
|
|
gcry_free(sec_fname);
|
|
|
|
}
|
1997-11-18 15:06:00 +01:00
|
|
|
}
|
|
|
|
|
1998-05-05 22:34:20 +02:00
|
|
|
|
|
|
|
/****************
|
|
|
|
* add a new subkey to an existing key.
|
1998-07-29 21:35:05 +02:00
|
|
|
* Returns true if a new key has been generated and put into the keyblocks.
|
1998-05-05 22:34:20 +02:00
|
|
|
*/
|
1998-07-29 21:35:05 +02:00
|
|
|
int
|
|
|
|
generate_subkeypair( KBNODE pub_keyblock, KBNODE sec_keyblock )
|
1998-05-05 22:34:20 +02:00
|
|
|
{
|
1998-07-29 21:35:05 +02:00
|
|
|
int okay=0, rc=0;
|
1998-05-26 15:38:00 +02:00
|
|
|
KBNODE node;
|
1998-06-29 14:30:57 +02:00
|
|
|
PKT_secret_key *sk = NULL; /* this is the primary sk */
|
2000-07-14 19:34:53 +02:00
|
|
|
int algo;
|
1998-11-20 18:42:18 +01:00
|
|
|
u32 expire;
|
1998-05-26 15:38:00 +02:00
|
|
|
unsigned nbits;
|
|
|
|
char *passphrase = NULL;
|
|
|
|
DEK *dek = NULL;
|
|
|
|
STRING2KEY *s2k = NULL;
|
1999-01-12 11:20:24 +01:00
|
|
|
u32 cur_time;
|
1998-05-26 15:38:00 +02:00
|
|
|
|
1998-07-29 21:35:05 +02:00
|
|
|
/* break out the primary secret key */
|
1998-06-29 14:30:57 +02:00
|
|
|
node = find_kbnode( sec_keyblock, PKT_SECRET_KEY );
|
1998-05-26 15:38:00 +02:00
|
|
|
if( !node ) {
|
|
|
|
log_error("Oops; secret key not found anymore!\n");
|
|
|
|
goto leave;
|
|
|
|
}
|
|
|
|
|
1998-06-29 14:30:57 +02:00
|
|
|
/* make a copy of the sk to keep the protected one in the keyblock */
|
|
|
|
sk = copy_secret_key( NULL, node->pkt->pkt.secret_key );
|
1999-01-12 11:20:24 +01:00
|
|
|
|
|
|
|
cur_time = make_timestamp();
|
|
|
|
if( sk->timestamp > cur_time ) {
|
|
|
|
ulong d = sk->timestamp - cur_time;
|
|
|
|
log_info( d==1 ? _("key has been created %lu second "
|
|
|
|
"in future (time warp or clock problem)\n")
|
|
|
|
: _("key has been created %lu seconds "
|
|
|
|
"in future (time warp or clock problem)\n"), d );
|
2000-07-14 19:34:53 +02:00
|
|
|
if( !opt.ignore_time_conflict ) {
|
|
|
|
rc = GPGERR_TIME_CONFLICT;
|
|
|
|
goto leave;
|
|
|
|
}
|
1999-01-12 11:20:24 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
|
1998-05-26 15:38:00 +02:00
|
|
|
/* unprotect to get the passphrase */
|
1998-06-29 14:30:57 +02:00
|
|
|
switch( is_secret_key_protected( sk ) ) {
|
1998-05-26 15:38:00 +02:00
|
|
|
case -1:
|
2000-01-27 17:50:45 +01:00
|
|
|
rc = GPGERR_PUBKEY_ALGO;
|
1998-05-26 15:38:00 +02:00
|
|
|
break;
|
|
|
|
case 0:
|
|
|
|
tty_printf("This key is not protected.\n");
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
tty_printf("Key is protected.\n");
|
1998-09-11 07:47:32 +02:00
|
|
|
rc = check_secret_key( sk, 0 );
|
1998-05-26 15:38:00 +02:00
|
|
|
if( !rc )
|
|
|
|
passphrase = get_last_passphrase();
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if( rc )
|
|
|
|
goto leave;
|
|
|
|
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
algo = ask_algo( 1 );
|
1998-06-25 12:19:08 +02:00
|
|
|
assert(algo);
|
1998-05-26 15:38:00 +02:00
|
|
|
nbits = ask_keysize( algo );
|
1998-11-20 18:42:18 +01:00
|
|
|
expire = ask_expire_interval();
|
1998-11-27 12:42:49 +01:00
|
|
|
if( !cpr_enabled() && !cpr_get_answer_is_yes("keygen.sub.okay",
|
1998-08-08 21:27:00 +02:00
|
|
|
_("Really create? ") ) )
|
1998-07-29 21:35:05 +02:00
|
|
|
goto leave;
|
1998-05-26 15:38:00 +02:00
|
|
|
|
|
|
|
if( passphrase ) {
|
2000-01-24 12:55:49 +01:00
|
|
|
s2k = gcry_xmalloc_secure( sizeof *s2k );
|
1998-09-28 21:25:31 +02:00
|
|
|
s2k->mode = opt.s2k_mode;
|
|
|
|
s2k->hash_algo = opt.s2k_digest_algo;
|
1998-05-26 15:38:00 +02:00
|
|
|
set_next_passphrase( passphrase );
|
1999-07-01 12:53:35 +02:00
|
|
|
dek = passphrase_to_dek( NULL, 0, opt.s2k_cipher_algo, s2k, 2 );
|
1998-05-26 15:38:00 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
rc = do_create( algo, nbits, pub_keyblock, sec_keyblock,
|
2000-07-14 19:34:53 +02:00
|
|
|
dek, s2k, NULL, expire );
|
1998-05-26 15:38:00 +02:00
|
|
|
if( !rc )
|
1998-06-29 14:30:57 +02:00
|
|
|
rc = write_keybinding(pub_keyblock, pub_keyblock, sk);
|
1998-05-26 15:38:00 +02:00
|
|
|
if( !rc )
|
1998-06-29 14:30:57 +02:00
|
|
|
rc = write_keybinding(sec_keyblock, pub_keyblock, sk);
|
1998-05-26 15:38:00 +02:00
|
|
|
if( !rc )
|
1998-07-29 21:35:05 +02:00
|
|
|
okay = 1;
|
1998-05-26 15:38:00 +02:00
|
|
|
|
|
|
|
leave:
|
|
|
|
if( rc )
|
2000-01-27 17:50:45 +01:00
|
|
|
log_error(_("Key generation failed: %s\n"), gpg_errstr(rc) );
|
2000-01-24 12:55:49 +01:00
|
|
|
gcry_free( passphrase );
|
|
|
|
gcry_free( dek );
|
|
|
|
gcry_free( s2k );
|
1998-06-29 14:30:57 +02:00
|
|
|
if( sk ) /* release the copy of the (now unprotected) secret key */
|
|
|
|
free_secret_key(sk);
|
1998-05-26 15:38:00 +02:00
|
|
|
set_next_passphrase( NULL );
|
1998-07-29 21:35:05 +02:00
|
|
|
return okay;
|
1998-05-05 22:34:20 +02:00
|
|
|
}
|
|
|
|
|
2000-07-14 19:34:53 +02:00
|
|
|
/****************
|
|
|
|
* Write a keyblock to an output stream
|
|
|
|
*/
|
|
|
|
static int
|
|
|
|
write_keyblock( IOBUF out, KBNODE node )
|
|
|
|
{
|
|
|
|
for( ; node ; node = node->next ) {
|
|
|
|
int rc = build_packet( out, node->pkt );
|
|
|
|
if( rc ) {
|
|
|
|
log_error("build_packet(%d) failed: %s\n",
|
|
|
|
node->pkt->pkttype, gpg_errstr(rc) );
|
|
|
|
return GPGERR_WRITE_FILE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|