mirror of
git://git.gnupg.org/gnupg.git
synced 2024-10-29 19:48:43 +01:00
227c78ce0e
* tools/call-dirmngr.c (wkd_get_status_cb): Deetect and output warning and note stati from dirmngr. -- This is in particular helpful to check for non-proper TLS certificates.
426 lines
9.9 KiB
C
426 lines
9.9 KiB
C
/* call-dirmngr.c - Interact with the Dirmngr.
|
||
* Copyright (C) 2016, 2022 g10 Code GmbH
|
||
* Copyright (C) 2016 Bundesamt für Sicherheit in der Informationstechnik
|
||
*
|
||
* This file is part of GnuPG.
|
||
*
|
||
* This file is free software; you can redistribute it and/or modify
|
||
* it under the terms of the GNU Lesser General Public License as
|
||
* published by the Free Software Foundation; either version 2.1 of
|
||
* the License, or (at your option) any later version.
|
||
*
|
||
* This file is distributed in the hope that it will be useful,
|
||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
* GNU Lesser General Public License for more details.
|
||
*
|
||
* You should have received a copy of the GNU Lesser General Public License
|
||
* along with this program; if not, see <https://www.gnu.org/licenses/>.
|
||
*/
|
||
|
||
#include <config.h>
|
||
#include <stdio.h>
|
||
#include <stdlib.h>
|
||
#include <string.h>
|
||
#include <errno.h>
|
||
#include <unistd.h>
|
||
#include <time.h>
|
||
#ifdef HAVE_LOCALE_H
|
||
# include <locale.h>
|
||
#endif
|
||
|
||
#include <assuan.h>
|
||
#include "../common/util.h"
|
||
#include "../common/i18n.h"
|
||
#include "../common/asshelp.h"
|
||
#include "../common/mbox-util.h"
|
||
#include "./call-dirmngr.h"
|
||
|
||
static struct
|
||
{
|
||
int verbose;
|
||
int debug_ipc;
|
||
int autostart;
|
||
} opt;
|
||
|
||
|
||
|
||
void
|
||
set_dirmngr_options (int verbose, int debug_ipc, int autostart)
|
||
{
|
||
opt.verbose = verbose;
|
||
opt.debug_ipc = debug_ipc;
|
||
opt.autostart = autostart;
|
||
}
|
||
|
||
|
||
/* Connect to the Dirmngr and return an assuan context. */
|
||
static gpg_error_t
|
||
connect_dirmngr (assuan_context_t *r_ctx)
|
||
{
|
||
gpg_error_t err;
|
||
assuan_context_t ctx;
|
||
|
||
*r_ctx = NULL;
|
||
err = start_new_dirmngr (&ctx,
|
||
GPG_ERR_SOURCE_DEFAULT,
|
||
NULL,
|
||
opt.autostart, opt.verbose, opt.debug_ipc,
|
||
NULL, NULL);
|
||
if (!opt.autostart && gpg_err_code (err) == GPG_ERR_NO_DIRMNGR)
|
||
{
|
||
static int shown;
|
||
|
||
if (!shown)
|
||
{
|
||
shown = 1;
|
||
log_info (_("no dirmngr running in this session\n"));
|
||
}
|
||
}
|
||
|
||
if (err)
|
||
assuan_release (ctx);
|
||
else
|
||
{
|
||
*r_ctx = ctx;
|
||
}
|
||
|
||
return err;
|
||
}
|
||
|
||
|
||
|
||
|
||
/* Parameter structure used with the WKD_GET command. */
|
||
struct wkd_get_parm_s
|
||
{
|
||
estream_t memfp;
|
||
};
|
||
|
||
|
||
/* Data callback for the WKD_GET command. */
|
||
static gpg_error_t
|
||
wkd_get_data_cb (void *opaque, const void *data, size_t datalen)
|
||
{
|
||
struct wkd_get_parm_s *parm = opaque;
|
||
gpg_error_t err = 0;
|
||
size_t nwritten;
|
||
|
||
if (!data)
|
||
return 0; /* Ignore END commands. */
|
||
if (!parm->memfp)
|
||
return 0; /* Data is not required. */
|
||
|
||
if (es_write (parm->memfp, data, datalen, &nwritten))
|
||
err = gpg_error_from_syserror ();
|
||
|
||
return err;
|
||
}
|
||
|
||
|
||
/* Status callback for the WKD_GET command. */
|
||
static gpg_error_t
|
||
wkd_get_status_cb (void *opaque, const char *line)
|
||
{
|
||
struct wkd_get_parm_s *parm = opaque;
|
||
gpg_error_t err = 0;
|
||
const char *s, *s2;
|
||
const char *warn = NULL;
|
||
int is_note = 0;
|
||
|
||
(void)parm;
|
||
|
||
/* Note: The code below is mostly duplicated from g10/call-dirmngr.c */
|
||
if ((s = has_leading_keyword (line, "WARNING"))
|
||
|| (is_note = !!(s = has_leading_keyword (line, "NOTE"))))
|
||
{
|
||
if ((s2 = has_leading_keyword (s, "wkd_cached_result")))
|
||
{
|
||
if (opt.verbose)
|
||
warn = _("WKD uses a cached result");
|
||
}
|
||
else if ((s2 = has_leading_keyword (s, "tor_not_running")))
|
||
warn = _("Tor is not running");
|
||
else if ((s2 = has_leading_keyword (s, "tor_config_problem")))
|
||
warn = _("Tor is not properly configured");
|
||
else if ((s2 = has_leading_keyword (s, "dns_config_problem")))
|
||
warn = _("DNS is not properly configured");
|
||
else if ((s2 = has_leading_keyword (s, "http_redirect")))
|
||
warn = _("unacceptable HTTP redirect from server");
|
||
else if ((s2 = has_leading_keyword (s, "http_redirect_cleanup")))
|
||
warn = _("unacceptable HTTP redirect from server was cleaned up");
|
||
else if ((s2 = has_leading_keyword (s, "tls_cert_error")))
|
||
warn = _("server uses an invalid certificate");
|
||
else
|
||
warn = NULL;
|
||
|
||
if (warn)
|
||
{
|
||
if (is_note)
|
||
log_info (_("Note: %s\n"), warn);
|
||
else
|
||
log_info (_("WARNING: %s\n"), warn);
|
||
if (s2 && opt.verbose)
|
||
{
|
||
while (*s2 && !spacep (s2))
|
||
s2++;
|
||
while (*s2 && spacep (s2))
|
||
s2++;
|
||
if (*s2)
|
||
log_info ("(%s)\n", s2);
|
||
}
|
||
}
|
||
}
|
||
|
||
return err;
|
||
}
|
||
|
||
|
||
/* Ask the dirmngr for the submission address of a WKD server for the
|
||
* mail address ADDRSPEC. On success the submission address is stored
|
||
* at R_ADDRSPEC. */
|
||
gpg_error_t
|
||
wkd_get_submission_address (const char *addrspec, char **r_addrspec)
|
||
{
|
||
gpg_error_t err;
|
||
assuan_context_t ctx;
|
||
struct wkd_get_parm_s parm;
|
||
char *line = NULL;
|
||
void *vp;
|
||
char *buffer = NULL;
|
||
char *p;
|
||
|
||
memset (&parm, 0, sizeof parm);
|
||
*r_addrspec = NULL;
|
||
|
||
err = connect_dirmngr (&ctx);
|
||
if (err)
|
||
return err;
|
||
|
||
line = es_bsprintf ("WKD_GET --submission-address -- %s", addrspec);
|
||
if (!line)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
if (strlen (line) + 2 >= ASSUAN_LINELENGTH)
|
||
{
|
||
err = gpg_error (GPG_ERR_TOO_LARGE);
|
||
goto leave;
|
||
}
|
||
|
||
parm.memfp = es_fopenmem (0, "rwb");
|
||
if (!parm.memfp)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
err = assuan_transact (ctx, line, wkd_get_data_cb, &parm,
|
||
NULL, NULL, wkd_get_status_cb, &parm);
|
||
if (err)
|
||
goto leave;
|
||
|
||
es_fputc (0, parm.memfp);
|
||
if (es_fclose_snatch (parm.memfp, &vp, NULL))
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
buffer = vp;
|
||
parm.memfp = NULL;
|
||
p = strchr (buffer, '\n');
|
||
if (p)
|
||
*p = 0;
|
||
trim_spaces (buffer);
|
||
if (!is_valid_mailbox (buffer))
|
||
{
|
||
err = gpg_error (GPG_ERR_INV_USER_ID);
|
||
goto leave;
|
||
}
|
||
*r_addrspec = xtrystrdup (buffer);
|
||
if (!*r_addrspec)
|
||
err = gpg_error_from_syserror ();
|
||
|
||
leave:
|
||
es_free (buffer);
|
||
es_fclose (parm.memfp);
|
||
xfree (line);
|
||
assuan_release (ctx);
|
||
return err;
|
||
}
|
||
|
||
|
||
/* Ask the dirmngr for the policy flags and return them as an estream
|
||
* memory stream. If no policy flags are set, NULL is stored at
|
||
* R_BUFFER. */
|
||
gpg_error_t
|
||
wkd_get_policy_flags (const char *addrspec, estream_t *r_buffer)
|
||
{
|
||
gpg_error_t err;
|
||
assuan_context_t ctx;
|
||
struct wkd_get_parm_s parm;
|
||
char *line = NULL;
|
||
char *buffer = NULL;
|
||
|
||
memset (&parm, 0, sizeof parm);
|
||
*r_buffer = NULL;
|
||
|
||
err = connect_dirmngr (&ctx);
|
||
if (err)
|
||
return err;
|
||
|
||
line = es_bsprintf ("WKD_GET --policy-flags -- %s", addrspec);
|
||
if (!line)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
if (strlen (line) + 2 >= ASSUAN_LINELENGTH)
|
||
{
|
||
err = gpg_error (GPG_ERR_TOO_LARGE);
|
||
goto leave;
|
||
}
|
||
|
||
parm.memfp = es_fopenmem (0, "rwb");
|
||
if (!parm.memfp)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
err = assuan_transact (ctx, line, wkd_get_data_cb, &parm,
|
||
NULL, NULL, wkd_get_status_cb, &parm);
|
||
if (err)
|
||
goto leave;
|
||
|
||
es_rewind (parm.memfp);
|
||
*r_buffer = parm.memfp;
|
||
parm.memfp = 0;
|
||
|
||
leave:
|
||
es_free (buffer);
|
||
es_fclose (parm.memfp);
|
||
xfree (line);
|
||
assuan_release (ctx);
|
||
return err;
|
||
}
|
||
|
||
|
||
/* Ask the dirmngr for the key for ADDRSPEC. On success a stream with
|
||
* the key is stored at R_KEY. */
|
||
gpg_error_t
|
||
wkd_get_key (const char *addrspec, estream_t *r_key)
|
||
{
|
||
gpg_error_t err;
|
||
assuan_context_t ctx;
|
||
struct wkd_get_parm_s parm;
|
||
char *line = NULL;
|
||
|
||
memset (&parm, 0, sizeof parm);
|
||
*r_key = NULL;
|
||
|
||
err = connect_dirmngr (&ctx);
|
||
if (err)
|
||
return err;
|
||
|
||
line = es_bsprintf ("WKD_GET -- %s", addrspec);
|
||
if (!line)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
if (strlen (line) + 2 >= ASSUAN_LINELENGTH)
|
||
{
|
||
err = gpg_error (GPG_ERR_TOO_LARGE);
|
||
goto leave;
|
||
}
|
||
|
||
parm.memfp = es_fopenmem (0, "rwb");
|
||
if (!parm.memfp)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
err = assuan_transact (ctx, line, wkd_get_data_cb, &parm,
|
||
NULL, NULL, wkd_get_status_cb, &parm);
|
||
if (err)
|
||
goto leave;
|
||
|
||
es_rewind (parm.memfp);
|
||
*r_key = parm.memfp;
|
||
parm.memfp = NULL;
|
||
|
||
leave:
|
||
es_fclose (parm.memfp);
|
||
xfree (line);
|
||
assuan_release (ctx);
|
||
return err;
|
||
}
|
||
|
||
|
||
/* Send the KS_GET command to the dirmngr. The caller provides CB
|
||
* which is called for each key. The callback is called wit a stream
|
||
* conveying a single key and several other informational parameters.
|
||
* DOMAIN restricts the returned keys to this domain. */
|
||
gpg_error_t
|
||
wkd_dirmngr_ks_get (const char *domain, gpg_error_t cb (estream_t key))
|
||
{
|
||
gpg_error_t err;
|
||
assuan_context_t ctx;
|
||
struct wkd_get_parm_s parm;
|
||
char *line = NULL;
|
||
int any = 0;
|
||
|
||
memset (&parm, 0, sizeof parm);
|
||
|
||
err = connect_dirmngr (&ctx);
|
||
if (err)
|
||
return err;
|
||
|
||
line = es_bsprintf ("KS_GET --ldap --first %s", domain? domain:"");
|
||
if (!line)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
if (strlen (line) + 2 >= ASSUAN_LINELENGTH)
|
||
{
|
||
err = gpg_error (GPG_ERR_TOO_LARGE);
|
||
goto leave;
|
||
}
|
||
|
||
parm.memfp = es_fopenmem (0, "rwb");
|
||
if (!parm.memfp)
|
||
{
|
||
err = gpg_error_from_syserror ();
|
||
goto leave;
|
||
}
|
||
|
||
for (;;)
|
||
{
|
||
err = assuan_transact (ctx, any? "KS_GET --next" : line,
|
||
wkd_get_data_cb, &parm,
|
||
NULL, NULL, wkd_get_status_cb, &parm);
|
||
if (err)
|
||
{
|
||
if (gpg_err_code (err) == GPG_ERR_NO_DATA
|
||
&& gpg_err_source (err) == GPG_ERR_SOURCE_DIRMNGR)
|
||
err = any? 0 : gpg_error (GPG_ERR_NOT_FOUND);
|
||
goto leave;
|
||
}
|
||
any = 1;
|
||
|
||
es_rewind (parm.memfp);
|
||
err = cb (parm.memfp);
|
||
if (err)
|
||
break;
|
||
es_ftruncate (parm.memfp, 0);
|
||
}
|
||
|
||
|
||
leave:
|
||
es_fclose (parm.memfp);
|
||
xfree (line);
|
||
assuan_release (ctx);
|
||
return err;
|
||
}
|