mirror of
git://git.gnupg.org/gnupg.git
synced 2024-12-22 10:19:57 +01:00
892 lines
21 KiB
C
892 lines
21 KiB
C
/* ringedit.c - Function for key ring editing
|
|
* Copyright (C) 1998 Free Software Foundation, Inc.
|
|
*
|
|
* This file is part of GNUPG.
|
|
*
|
|
* GNUPG is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GNUPG is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
|
|
*/
|
|
|
|
|
|
/****************
|
|
* This module supplies function for:
|
|
*
|
|
* - Search for a key block (pubkey and all other stuff) and return a
|
|
* handle for it.
|
|
*
|
|
* - Lock/Unlock a key block
|
|
*
|
|
* - Read a key block into a tree
|
|
*
|
|
* - Update a key block
|
|
*
|
|
* - Insert a new key block
|
|
*
|
|
* - Delete a key block
|
|
*
|
|
* FIXME: Keep track of all nodes, so that a change is propagated
|
|
* to all nodes. (or use shallow copies and ref-counting?)
|
|
*/
|
|
|
|
|
|
|
|
#include <config.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <errno.h>
|
|
#include <sys/types.h>
|
|
#include <sys/stat.h>
|
|
#include <assert.h>
|
|
#include "util.h"
|
|
#include "packet.h"
|
|
#include "memory.h"
|
|
#include "mpi.h"
|
|
#include "iobuf.h"
|
|
#include "keydb.h"
|
|
#include <unistd.h> /* for truncate */
|
|
|
|
|
|
struct resource_table_struct {
|
|
int used;
|
|
int secret; /* this is a secret keyring */
|
|
char *fname;
|
|
IOBUF iobuf;
|
|
};
|
|
typedef struct resource_table_struct RESTBL;
|
|
|
|
#define MAX_RESOURCES 10
|
|
static RESTBL resource_table[MAX_RESOURCES];
|
|
|
|
|
|
static int search( PACKET *pkt, KBPOS *kbpos, int secret );
|
|
|
|
|
|
static int keyring_search( PACKET *pkt, KBPOS *kbpos, IOBUF iobuf,
|
|
const char *fname );
|
|
static int keyring_read( KBPOS *kbpos, KBNODE *ret_root );
|
|
static int keyring_enum( KBPOS *kbpos, KBNODE *ret_root, int skipsigs );
|
|
static int keyring_copy( KBPOS *kbpos, int mode, KBNODE root );
|
|
|
|
|
|
|
|
static RESTBL *
|
|
check_pos( KBPOS *kbpos )
|
|
{
|
|
if( kbpos->resno < 0 || kbpos->resno >= MAX_RESOURCES )
|
|
return NULL;
|
|
if( !resource_table[kbpos->resno].used )
|
|
return NULL;
|
|
return resource_table + kbpos->resno;
|
|
}
|
|
|
|
|
|
|
|
/****************************************************************
|
|
****************** public functions ****************************
|
|
****************************************************************/
|
|
|
|
/****************
|
|
* Register a resource (which currently may only be a keyring file).
|
|
*/
|
|
int
|
|
add_keyblock_resource( const char *filename, int force, int secret )
|
|
{
|
|
IOBUF iobuf;
|
|
int i;
|
|
|
|
for(i=0; i < MAX_RESOURCES; i++ )
|
|
if( !resource_table[i].used )
|
|
break;
|
|
if( i == MAX_RESOURCES )
|
|
return G10ERR_RESOURCE_LIMIT;
|
|
|
|
#if __MINGW32__
|
|
iobuf = NULL;
|
|
#else
|
|
iobuf = iobuf_open( filename );
|
|
if( !iobuf && !force )
|
|
return G10ERR_OPEN_FILE;
|
|
#endif
|
|
resource_table[i].used = 1;
|
|
resource_table[i].secret = !!secret;
|
|
resource_table[i].fname = m_strdup(filename);
|
|
resource_table[i].iobuf = iobuf;
|
|
return 0;
|
|
}
|
|
|
|
/****************
|
|
* Return the resource name of the keyblock associated with KBPOS.
|
|
*/
|
|
const char *
|
|
keyblock_resource_name( KBPOS *kbpos )
|
|
{
|
|
RESTBL *rentry;
|
|
|
|
if( !(rentry = check_pos( kbpos )) || !rentry->fname )
|
|
log_bug("no name for keyblock resource %d\n", kbpos->resno );
|
|
return rentry->fname;
|
|
}
|
|
|
|
|
|
/****************
|
|
* Get a keyblock handle KBPOS from a filename. This can be used
|
|
* to get a handle for insert_keyblock for a new keyblock.
|
|
* Using a filename of NULL returns the default resource
|
|
*/
|
|
int
|
|
get_keyblock_handle( const char *filename, int secret, KBPOS *kbpos )
|
|
{
|
|
int i;
|
|
|
|
for(i=0; i < MAX_RESOURCES; i++ )
|
|
if( resource_table[i].used && !resource_table[i].secret == !secret ) {
|
|
/* fixme: dos needs case insensitive file compare */
|
|
if( !filename || !strcmp( resource_table[i].fname, filename ) ) {
|
|
memset( kbpos, 0, sizeof *kbpos );
|
|
kbpos->resno = i;
|
|
return 0;
|
|
}
|
|
}
|
|
return -1; /* not found */
|
|
}
|
|
|
|
|
|
|
|
/****************
|
|
* Search a keyblock which starts with the given packet and puts all
|
|
* information into KBPOS, which can be used later to access this key block.
|
|
* This function looks into all registered keyblock sources.
|
|
* PACKET must be a packet with either a secret_cert or a public_cert
|
|
*
|
|
* This function is intended to check whether a given certificate
|
|
* is already in a keyring or to prepare it for editing.
|
|
*
|
|
* Returns: 0 if found, -1 if not found or an errorcode.
|
|
*/
|
|
static int
|
|
search( PACKET *pkt, KBPOS *kbpos, int secret )
|
|
{
|
|
int i, rc, last_rc=-1;
|
|
|
|
for(i=0; i < MAX_RESOURCES; i++ ) {
|
|
if( resource_table[i].used && !resource_table[i].secret == !secret ) {
|
|
/* note: here we have to add different search functions,
|
|
* depending on the type of the resource */
|
|
rc = keyring_search( pkt, kbpos, resource_table[i].iobuf,
|
|
resource_table[i].fname );
|
|
if( !rc ) {
|
|
kbpos->resno = i;
|
|
kbpos->fp = NULL;
|
|
return 0;
|
|
}
|
|
if( rc != -1 ) {
|
|
log_error("error searching resource %d: %s\n",
|
|
i, g10_errstr(rc));
|
|
last_rc = rc;
|
|
}
|
|
}
|
|
}
|
|
return last_rc;
|
|
}
|
|
|
|
|
|
/****************
|
|
* Combined function to search for a username and get the position
|
|
* of the keyblock.
|
|
*/
|
|
int
|
|
find_keyblock_byname( KBPOS *kbpos, const char *username )
|
|
{
|
|
PACKET pkt;
|
|
PKT_public_cert *pkc = m_alloc_clear( sizeof *pkc );
|
|
int rc;
|
|
|
|
rc = get_pubkey_byname( pkc, username );
|
|
if( rc ) {
|
|
free_public_cert(pkc);
|
|
return rc;
|
|
}
|
|
|
|
init_packet( &pkt );
|
|
pkt.pkttype = PKT_PUBLIC_CERT;
|
|
pkt.pkt.public_cert = pkc;
|
|
rc = search( &pkt, kbpos, 0 );
|
|
free_public_cert(pkc);
|
|
return rc;
|
|
}
|
|
|
|
|
|
/****************
|
|
* Combined function to search for a key and get the position
|
|
* of the keyblock.
|
|
*/
|
|
int
|
|
find_keyblock_bypkc( KBPOS *kbpos, PKT_public_cert *pkc )
|
|
{
|
|
PACKET pkt;
|
|
int rc;
|
|
|
|
init_packet( &pkt );
|
|
pkt.pkttype = PKT_PUBLIC_CERT;
|
|
pkt.pkt.public_cert = pkc;
|
|
rc = search( &pkt, kbpos, 0 );
|
|
return rc;
|
|
}
|
|
|
|
|
|
/****************
|
|
* Combined function to search for a username and get the position
|
|
* of the keyblock. This function does not unprotect the secret key.
|
|
*/
|
|
int
|
|
find_secret_keyblock_byname( KBPOS *kbpos, const char *username )
|
|
{
|
|
PACKET pkt;
|
|
PKT_secret_cert *skc = m_alloc_clear( sizeof *skc );
|
|
int rc;
|
|
|
|
rc = get_seckey_byname( skc, username, 0 );
|
|
if( rc ) {
|
|
free_secret_cert(skc);
|
|
return rc;
|
|
}
|
|
|
|
init_packet( &pkt );
|
|
pkt.pkttype = PKT_SECRET_CERT;
|
|
pkt.pkt.secret_cert = skc;
|
|
rc = search( &pkt, kbpos, 1 );
|
|
free_secret_cert(skc);
|
|
return rc;
|
|
}
|
|
|
|
|
|
|
|
/****************
|
|
* Lock the keyblock; wait until it's available
|
|
* This function may change the internal data in kbpos, in cases
|
|
* when the keyblock to be locked has been modified.
|
|
* fixme: remove this function and add an option to search()?
|
|
*/
|
|
int
|
|
lock_keyblock( KBPOS *kbpos )
|
|
{
|
|
if( !check_pos(kbpos) )
|
|
return G10ERR_GENERAL;
|
|
return 0;
|
|
}
|
|
|
|
/****************
|
|
* Release a lock on a keyblock
|
|
*/
|
|
void
|
|
unlock_keyblock( KBPOS *kbpos )
|
|
{
|
|
if( !check_pos(kbpos) )
|
|
BUG();
|
|
}
|
|
|
|
/****************
|
|
* Read a complete keyblock and return the root in ret_root.
|
|
*/
|
|
int
|
|
read_keyblock( KBPOS *kbpos, KBNODE *ret_root )
|
|
{
|
|
if( !check_pos(kbpos) )
|
|
return G10ERR_GENERAL;
|
|
return keyring_read( kbpos, ret_root );
|
|
}
|
|
|
|
|
|
/****************
|
|
* This functions can be used to read through a complete keyring.
|
|
* Mode is: 0 = open
|
|
* 1 = read
|
|
* 2 = close
|
|
* 5 = open secret keyrings
|
|
* 11 = read but skip signature and comment packets.
|
|
* all others are reserved!
|
|
* Note that you do not need a search prior to this function,
|
|
* only a handle is needed.
|
|
* NOTE: It is not allowed to do an insert/update/delte with this
|
|
* keyblock, if you want to do this, use search/read!
|
|
*/
|
|
int
|
|
enum_keyblocks( int mode, KBPOS *kbpos, KBNODE *ret_root )
|
|
{
|
|
int rc = 0;
|
|
RESTBL *rentry;
|
|
|
|
if( !mode || mode == 5 || mode == 100 ) {
|
|
int i;
|
|
kbpos->fp = NULL;
|
|
if( !mode ) {
|
|
kbpos->secret = 0;
|
|
i = 0;
|
|
}
|
|
else if( mode == 5 ) {
|
|
kbpos->secret = 1;
|
|
mode = 0;
|
|
i = 0;
|
|
}
|
|
else
|
|
i = kbpos->resno+1;
|
|
for(; i < MAX_RESOURCES; i++ )
|
|
if( resource_table[i].used
|
|
&& !resource_table[i].secret == !kbpos->secret )
|
|
break;
|
|
if( i == MAX_RESOURCES )
|
|
return -1; /* no resources */
|
|
kbpos->resno = i;
|
|
rentry = check_pos( kbpos );
|
|
kbpos->fp = iobuf_open( rentry->fname );
|
|
if( !kbpos->fp ) {
|
|
log_error("can't open '%s'\n", rentry->fname );
|
|
return G10ERR_OPEN_FILE;
|
|
}
|
|
kbpos->pkt = NULL;
|
|
}
|
|
else if( mode == 1 || mode == 11 ) {
|
|
int cont;
|
|
do {
|
|
cont = 0;
|
|
if( !kbpos->fp )
|
|
return G10ERR_GENERAL;
|
|
rc = keyring_enum( kbpos, ret_root, mode == 11 );
|
|
if( rc == -1 ) {
|
|
assert( !kbpos->pkt );
|
|
rentry = check_pos( kbpos );
|
|
assert(rentry);
|
|
/* close */
|
|
enum_keyblocks(2, kbpos, ret_root );
|
|
/* and open the next one */
|
|
rc = enum_keyblocks(100, kbpos, ret_root );
|
|
if( !rc )
|
|
cont = 1;
|
|
}
|
|
} while(cont);
|
|
}
|
|
else if( kbpos->fp ) {
|
|
iobuf_close( kbpos->fp );
|
|
kbpos->fp = NULL;
|
|
/* release pending packet */
|
|
free_packet( kbpos->pkt );
|
|
m_free( kbpos->pkt );
|
|
}
|
|
return rc;
|
|
}
|
|
|
|
|
|
|
|
|
|
/****************
|
|
* Insert the keyblock described by ROOT into the keyring described
|
|
* by KBPOS. This actually appends the data to the keyfile.
|
|
*/
|
|
int
|
|
insert_keyblock( KBPOS *kbpos, KBNODE root )
|
|
{
|
|
int rc;
|
|
|
|
if( !check_pos(kbpos) )
|
|
return G10ERR_GENERAL;
|
|
|
|
rc = keyring_copy( kbpos, 1, root );
|
|
|
|
return rc;
|
|
}
|
|
|
|
/****************
|
|
* Delete the keyblock described by KBPOS.
|
|
* The current code simply changes the keyblock in the keyring
|
|
* to packet of type 0 with the correct length. To help detect errors,
|
|
* zero bytes are written.
|
|
*/
|
|
int
|
|
delete_keyblock( KBPOS *kbpos )
|
|
{
|
|
int rc;
|
|
|
|
if( !check_pos(kbpos) )
|
|
return G10ERR_GENERAL;
|
|
|
|
rc = keyring_copy( kbpos, 2, NULL );
|
|
|
|
return rc;
|
|
}
|
|
|
|
|
|
/****************
|
|
* Update the keyblock at KBPOS with the one in ROOT.
|
|
*/
|
|
int
|
|
update_keyblock( KBPOS *kbpos, KBNODE root )
|
|
{
|
|
int rc;
|
|
|
|
if( !check_pos(kbpos) )
|
|
return G10ERR_GENERAL;
|
|
|
|
rc = keyring_copy( kbpos, 3, root );
|
|
|
|
return rc;
|
|
}
|
|
|
|
|
|
/****************************************************************
|
|
********** Functions which operates on regular keyrings ********
|
|
****************************************************************/
|
|
|
|
|
|
/****************
|
|
* search one keyring, return 0 if found, -1 if not found or an errorcode.
|
|
*/
|
|
static int
|
|
keyring_search( PACKET *req, KBPOS *kbpos, IOBUF iobuf, const char *fname )
|
|
{
|
|
int rc;
|
|
PACKET pkt;
|
|
int save_mode;
|
|
ulong offset;
|
|
int pkttype = req->pkttype;
|
|
PKT_public_cert *req_pkc = req->pkt.public_cert;
|
|
PKT_secret_cert *req_skc = req->pkt.secret_cert;
|
|
|
|
init_packet(&pkt);
|
|
save_mode = set_packet_list_mode(0);
|
|
|
|
#if __MINGW32__
|
|
assert(!iobuf);
|
|
iobuf = iobuf_open( fname );
|
|
if( !iobuf ) {
|
|
log_error("%s: can't open keyring file\n", fname);
|
|
rc = G10ERR_KEYRING_OPEN;
|
|
goto leave;
|
|
}
|
|
#else
|
|
if( iobuf_seek( iobuf, 0 ) ) {
|
|
log_error("can't rewind keyring file\n");
|
|
rc = G10ERR_KEYRING_OPEN;
|
|
goto leave;
|
|
}
|
|
#endif
|
|
|
|
while( !(rc=search_packet(iobuf, &pkt, pkttype, &offset)) ) {
|
|
if( pkt.pkttype == PKT_SECRET_CERT ) {
|
|
PKT_secret_cert *skc = pkt.pkt.secret_cert;
|
|
|
|
if( req_skc->timestamp == skc->timestamp
|
|
&& req_skc->valid_days == skc->valid_days
|
|
&& req_skc->pubkey_algo == skc->pubkey_algo
|
|
&& ( ( skc->pubkey_algo == PUBKEY_ALGO_ELGAMAL
|
|
&& !mpi_cmp( req_skc->d.elg.p, skc->d.elg.p )
|
|
&& !mpi_cmp( req_skc->d.elg.g, skc->d.elg.g )
|
|
&& !mpi_cmp( req_skc->d.elg.y, skc->d.elg.y )
|
|
&& !mpi_cmp( req_skc->d.elg.x, skc->d.elg.x )
|
|
)
|
|
|| ( skc->pubkey_algo == PUBKEY_ALGO_DSA
|
|
&& !mpi_cmp( req_skc->d.dsa.p, skc->d.dsa.p )
|
|
&& !mpi_cmp( req_skc->d.dsa.q, skc->d.dsa.q )
|
|
&& !mpi_cmp( req_skc->d.dsa.g, skc->d.dsa.g )
|
|
&& !mpi_cmp( req_skc->d.dsa.y, skc->d.dsa.y )
|
|
&& !mpi_cmp( req_skc->d.dsa.x, skc->d.dsa.x )
|
|
)
|
|
|| ( skc->pubkey_algo == PUBKEY_ALGO_RSA
|
|
&& !mpi_cmp( req_skc->d.rsa.n, skc->d.rsa.n )
|
|
&& !mpi_cmp( req_skc->d.rsa.e, skc->d.rsa.e )
|
|
&& !mpi_cmp( req_skc->d.rsa.d, skc->d.rsa.d )
|
|
)
|
|
)
|
|
)
|
|
break; /* found */
|
|
}
|
|
else if( pkt.pkttype == PKT_PUBLIC_CERT ) {
|
|
PKT_public_cert *pkc = pkt.pkt.public_cert;
|
|
|
|
if( req_pkc->timestamp == pkc->timestamp
|
|
&& req_pkc->valid_days == pkc->valid_days
|
|
&& req_pkc->pubkey_algo == pkc->pubkey_algo
|
|
&& ( ( pkc->pubkey_algo == PUBKEY_ALGO_ELGAMAL
|
|
&& !mpi_cmp( req_pkc->d.elg.p, pkc->d.elg.p )
|
|
&& !mpi_cmp( req_pkc->d.elg.g, pkc->d.elg.g )
|
|
&& !mpi_cmp( req_pkc->d.elg.y, pkc->d.elg.y )
|
|
)
|
|
|| ( pkc->pubkey_algo == PUBKEY_ALGO_DSA
|
|
&& !mpi_cmp( req_pkc->d.dsa.p, pkc->d.dsa.p )
|
|
&& !mpi_cmp( req_pkc->d.dsa.q, pkc->d.dsa.q )
|
|
&& !mpi_cmp( req_pkc->d.dsa.g, pkc->d.dsa.g )
|
|
&& !mpi_cmp( req_pkc->d.dsa.y, pkc->d.dsa.y )
|
|
)
|
|
|| ( pkc->pubkey_algo == PUBKEY_ALGO_RSA
|
|
&& !mpi_cmp( req_pkc->d.rsa.n, pkc->d.rsa.n )
|
|
&& !mpi_cmp( req_pkc->d.rsa.e, pkc->d.rsa.e )
|
|
)
|
|
)
|
|
)
|
|
break; /* found */
|
|
}
|
|
else
|
|
BUG();
|
|
free_packet(&pkt);
|
|
}
|
|
if( !rc )
|
|
kbpos->offset = offset;
|
|
|
|
leave:
|
|
free_packet(&pkt);
|
|
set_packet_list_mode(save_mode);
|
|
#if __MINGW32__
|
|
iobuf_close(iobuf);
|
|
#endif
|
|
return rc;
|
|
}
|
|
|
|
|
|
static int
|
|
keyring_read( KBPOS *kbpos, KBNODE *ret_root )
|
|
{
|
|
PACKET *pkt;
|
|
int rc;
|
|
RESTBL *rentry;
|
|
KBNODE root = NULL;
|
|
IOBUF a;
|
|
int in_cert = 0;
|
|
|
|
if( !(rentry=check_pos(kbpos)) )
|
|
return G10ERR_GENERAL;
|
|
|
|
a = iobuf_open( rentry->fname );
|
|
if( !a ) {
|
|
log_error("can't open '%s'\n", rentry->fname );
|
|
return G10ERR_OPEN_FILE;
|
|
}
|
|
|
|
if( iobuf_seek( a, kbpos->offset ) ) {
|
|
log_error("can't seek to %lu\n", kbpos->offset);
|
|
iobuf_close(a);
|
|
return G10ERR_KEYRING_OPEN;
|
|
}
|
|
|
|
pkt = m_alloc( sizeof *pkt );
|
|
init_packet(pkt);
|
|
kbpos->count=0;
|
|
while( (rc=parse_packet(a, pkt)) != -1 ) {
|
|
if( rc ) { /* ignore errors */
|
|
if( rc != G10ERR_UNKNOWN_PACKET ) {
|
|
log_error("read_keyblock: read error: %s\n", g10_errstr(rc) );
|
|
rc = G10ERR_INV_KEYRING;
|
|
goto ready;
|
|
}
|
|
log_info("read_keyblock: read error: %s\n", g10_errstr(rc) );
|
|
kbpos->count++;
|
|
free_packet( pkt );
|
|
init_packet( pkt );
|
|
continue;
|
|
}
|
|
/* make a linked list of all packets */
|
|
switch( pkt->pkttype ) {
|
|
case PKT_PUBLIC_CERT:
|
|
case PKT_SECRET_CERT:
|
|
if( in_cert )
|
|
goto ready;
|
|
in_cert = 1;
|
|
default:
|
|
kbpos->count++;
|
|
if( !root )
|
|
root = new_kbnode( pkt );
|
|
else
|
|
add_kbnode( root, new_kbnode( pkt ) );
|
|
pkt = m_alloc( sizeof *pkt );
|
|
init_packet(pkt);
|
|
break;
|
|
}
|
|
}
|
|
ready:
|
|
if( rc == -1 && root )
|
|
rc = 0;
|
|
|
|
if( rc )
|
|
release_kbnode( root );
|
|
else
|
|
*ret_root = root;
|
|
free_packet( pkt );
|
|
m_free( pkt );
|
|
iobuf_close(a);
|
|
return rc;
|
|
}
|
|
|
|
|
|
static int
|
|
keyring_enum( KBPOS *kbpos, KBNODE *ret_root, int skipsigs )
|
|
{
|
|
PACKET *pkt;
|
|
int rc;
|
|
RESTBL *rentry;
|
|
KBNODE root = NULL;
|
|
|
|
if( !(rentry=check_pos(kbpos)) )
|
|
return G10ERR_GENERAL;
|
|
|
|
if( kbpos->pkt ) {
|
|
root = new_kbnode( kbpos->pkt );
|
|
kbpos->pkt = NULL;
|
|
}
|
|
|
|
pkt = m_alloc( sizeof *pkt );
|
|
init_packet(pkt);
|
|
while( (rc=parse_packet(kbpos->fp, pkt)) != -1 ) {
|
|
if( rc ) { /* ignore errors */
|
|
if( rc != G10ERR_UNKNOWN_PACKET ) {
|
|
log_error("read_keyblock: read error: %s\n", g10_errstr(rc) );
|
|
rc = G10ERR_INV_KEYRING;
|
|
goto ready;
|
|
}
|
|
free_packet( pkt );
|
|
init_packet( pkt );
|
|
continue;
|
|
}
|
|
/* make a linked list of all packets */
|
|
switch( pkt->pkttype ) {
|
|
case PKT_PUBLIC_CERT:
|
|
case PKT_SECRET_CERT:
|
|
if( root ) { /* store this packet */
|
|
kbpos->pkt = pkt;
|
|
pkt = NULL;
|
|
goto ready;
|
|
}
|
|
root = new_kbnode( pkt );
|
|
pkt = m_alloc( sizeof *pkt );
|
|
init_packet(pkt);
|
|
break;
|
|
|
|
default:
|
|
/* skip pakets at the beginning of a keyring, until we find
|
|
* a start packet; issue a warning if it is not a comment */
|
|
if( !root && pkt->pkttype != PKT_COMMENT )
|
|
log_info("keyring_enum: skipped packet of type %d\n",
|
|
pkt->pkttype );
|
|
if( !root || (skipsigs && ( pkt->pkttype == PKT_SIGNATURE
|
|
||pkt->pkttype == PKT_COMMENT )) ) {
|
|
init_packet(pkt);
|
|
break;
|
|
}
|
|
add_kbnode( root, new_kbnode( pkt ) );
|
|
pkt = m_alloc( sizeof *pkt );
|
|
init_packet(pkt);
|
|
break;
|
|
}
|
|
}
|
|
ready:
|
|
if( rc == -1 && root )
|
|
rc = 0;
|
|
|
|
if( rc )
|
|
release_kbnode( root );
|
|
else
|
|
*ret_root = root;
|
|
free_packet( pkt );
|
|
m_free( pkt );
|
|
return rc;
|
|
}
|
|
|
|
|
|
|
|
/****************
|
|
* Perform insert/delete/update operation.
|
|
* mode 1 = insert
|
|
* 2 = delete
|
|
* 3 = update
|
|
*/
|
|
static int
|
|
keyring_copy( KBPOS *kbpos, int mode, KBNODE root )
|
|
{
|
|
RESTBL *rentry;
|
|
IOBUF fp, newfp;
|
|
int rc=0;
|
|
char *bakfname = NULL;
|
|
char *tmpfname = NULL;
|
|
|
|
if( !(rentry = check_pos( kbpos )) )
|
|
return G10ERR_GENERAL;
|
|
if( kbpos->fp )
|
|
BUG(); /* not allowed with such a handle */
|
|
|
|
/* open the source file */
|
|
fp = iobuf_open( rentry->fname );
|
|
if( mode == 1 && !fp && errno == ENOENT ) { /* no file yet */
|
|
KBNODE kbctx, node;
|
|
|
|
/* insert: create a new file */
|
|
newfp = iobuf_create( rentry->fname );
|
|
if( !newfp ) {
|
|
log_error("%s: can't create: %s\n", rentry->fname, strerror(errno));
|
|
return G10ERR_OPEN_FILE;
|
|
}
|
|
|
|
kbctx=NULL;
|
|
while( (node = walk_kbnode( root, &kbctx, 0 )) ) {
|
|
if( (rc = build_packet( newfp, node->pkt )) ) {
|
|
log_error("build_packet(%d) failed: %s\n",
|
|
node->pkt->pkttype, g10_errstr(rc) );
|
|
iobuf_cancel(newfp);
|
|
return G10ERR_WRITE_FILE;
|
|
}
|
|
}
|
|
if( iobuf_close(newfp) ) {
|
|
log_error("%s: close failed: %s\n", rentry->fname, strerror(errno));
|
|
return G10ERR_CLOSE_FILE;
|
|
}
|
|
if( chmod( rentry->fname, S_IRUSR | S_IWUSR ) ) {
|
|
log_error("%s: chmod failed: %s\n",
|
|
rentry->fname, strerror(errno) );
|
|
return G10ERR_WRITE_FILE;
|
|
}
|
|
return 0;
|
|
}
|
|
if( !fp ) {
|
|
log_error("%s: can't open: %s\n", rentry->fname, strerror(errno) );
|
|
rc = G10ERR_OPEN_FILE;
|
|
goto leave;
|
|
}
|
|
|
|
/* create the new file */
|
|
bakfname = m_alloc( strlen( rentry->fname ) + 2 );
|
|
strcpy(stpcpy(bakfname,rentry->fname),"~");
|
|
tmpfname = m_alloc( strlen( rentry->fname ) + 5 );
|
|
strcpy(stpcpy(tmpfname,rentry->fname),".tmp");
|
|
newfp = iobuf_create( tmpfname );
|
|
if( !newfp ) {
|
|
log_error("%s: can't create: %s\n", tmpfname, strerror(errno) );
|
|
iobuf_close(fp);
|
|
rc = G10ERR_OPEN_FILE;
|
|
goto leave;
|
|
}
|
|
|
|
if( mode == 1 ) { /* insert */
|
|
/* copy everything to the new file */
|
|
rc = copy_all_packets( fp, newfp );
|
|
if( rc != -1 ) {
|
|
log_error("%s: copy to %s failed: %s\n",
|
|
rentry->fname, tmpfname, g10_errstr(rc) );
|
|
iobuf_close(fp);
|
|
iobuf_cancel(newfp);
|
|
goto leave;
|
|
}
|
|
rc = 0;
|
|
}
|
|
|
|
if( mode == 2 || mode == 3 ) { /* delete or update */
|
|
/* copy first part to the new file */
|
|
rc = copy_some_packets( fp, newfp, kbpos->offset );
|
|
if( rc ) { /* should never get EOF here */
|
|
log_error("%s: copy to %s failed: %s\n",
|
|
rentry->fname, tmpfname, g10_errstr(rc) );
|
|
iobuf_close(fp);
|
|
iobuf_cancel(newfp);
|
|
goto leave;
|
|
}
|
|
/* skip this keyblock */
|
|
assert( kbpos->count );
|
|
rc = skip_some_packets( fp, kbpos->count );
|
|
if( rc ) {
|
|
log_error("%s: skipping %u packets failed: %s\n",
|
|
rentry->fname, kbpos->count, g10_errstr(rc));
|
|
iobuf_close(fp);
|
|
iobuf_cancel(newfp);
|
|
goto leave;
|
|
}
|
|
}
|
|
|
|
if( mode == 1 || mode == 3 ) { /* insert or update */
|
|
KBNODE kbctx, node;
|
|
|
|
/* append the new data */
|
|
kbctx=NULL;
|
|
while( (node = walk_kbnode( root, &kbctx, 0 )) ) {
|
|
if( (rc = build_packet( newfp, node->pkt )) ) {
|
|
log_error("build_packet(%d) failed: %s\n",
|
|
node->pkt->pkttype, g10_errstr(rc) );
|
|
iobuf_close(fp);
|
|
iobuf_cancel(newfp);
|
|
rc = G10ERR_WRITE_FILE;
|
|
goto leave;
|
|
}
|
|
}
|
|
}
|
|
|
|
if( mode == 2 || mode == 3 ) { /* delete or update */
|
|
/* copy the rest */
|
|
rc = copy_all_packets( fp, newfp );
|
|
if( rc != -1 ) {
|
|
log_error("%s: copy to %s failed: %s\n",
|
|
rentry->fname, tmpfname, g10_errstr(rc) );
|
|
iobuf_close(fp);
|
|
iobuf_cancel(newfp);
|
|
goto leave;
|
|
}
|
|
rc = 0;
|
|
}
|
|
|
|
/* close both files */
|
|
if( iobuf_close(fp) ) {
|
|
log_error("%s: close failed: %s\n", rentry->fname, strerror(errno) );
|
|
rc = G10ERR_CLOSE_FILE;
|
|
goto leave;
|
|
}
|
|
if( iobuf_close(newfp) ) {
|
|
log_error("%s: close failed: %s\n", tmpfname, strerror(errno) );
|
|
rc = G10ERR_CLOSE_FILE;
|
|
goto leave;
|
|
}
|
|
/* if the new file is a secring, restrict the permissions */
|
|
if( rentry->secret ) {
|
|
if( chmod( tmpfname, S_IRUSR | S_IWUSR ) ) {
|
|
log_error("%s: chmod failed: %s\n",
|
|
tmpfname, strerror(errno) );
|
|
rc = G10ERR_WRITE_FILE;
|
|
goto leave;
|
|
}
|
|
}
|
|
/* rename and make backup file */
|
|
#if __MINGW32__
|
|
remove( bakfname );
|
|
#endif
|
|
if( rename( rentry->fname, bakfname ) ) {
|
|
log_error("%s: rename to %s failed: %s\n",
|
|
rentry->fname, bakfname, strerror(errno) );
|
|
rc = G10ERR_RENAME_FILE;
|
|
goto leave;
|
|
}
|
|
#if __MINGW32__
|
|
remove( rentry->fname );
|
|
#endif
|
|
if( rename( tmpfname, rentry->fname ) ) {
|
|
log_error("%s: rename to %s failed: %s\n",
|
|
tmpfname, rentry->fname,strerror(errno) );
|
|
rc = G10ERR_RENAME_FILE;
|
|
goto leave;
|
|
}
|
|
|
|
leave:
|
|
m_free(bakfname);
|
|
m_free(tmpfname);
|
|
return rc;
|
|
}
|
|
|
|
|
|
/****************************************************************
|
|
********** Functions which operates on databases ***************
|
|
****************************************************************/
|
|
|