2016-09-14 18:21:19 +00:00
|
|
|
|
/* tofupolicy.c - Tofu policy helpers.
|
|
|
|
|
* Copyright (C) 2016 g10 Code GmbH
|
|
|
|
|
*
|
|
|
|
|
* This file is part of GPGME.
|
|
|
|
|
*
|
|
|
|
|
* GPGME is free software; you can redistribute it and/or modify it
|
|
|
|
|
* under the terms of the GNU Lesser General Public License as
|
|
|
|
|
* published by the Free Software Foundation; either version 2.1 of
|
|
|
|
|
* the License, or (at your option) any later version.
|
|
|
|
|
*
|
|
|
|
|
* GPGME is distributed in the hope that it will be useful, but
|
|
|
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
|
*
|
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
2018-11-16 12:27:33 +00:00
|
|
|
|
* License along with this program; if not, see <https://gnu.org/licenses/>.
|
|
|
|
|
* SPDX-License-Identifier: LGPL-2.1-or-later
|
2016-09-14 18:21:19 +00:00
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
#if HAVE_CONFIG_H
|
|
|
|
|
#include <config.h>
|
|
|
|
|
#endif
|
|
|
|
|
#include <stdlib.h>
|
|
|
|
|
|
|
|
|
|
#include "gpgme.h"
|
|
|
|
|
#include "debug.h"
|
|
|
|
|
#include "context.h"
|
|
|
|
|
#include "ops.h"
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
typedef struct
|
|
|
|
|
{
|
|
|
|
|
/* The error code from a FAILURE status line or 0. */
|
|
|
|
|
gpg_error_t failure_code;
|
|
|
|
|
|
|
|
|
|
/* The error code from an ERROR status line or 0. */
|
|
|
|
|
gpg_error_t error_code;
|
|
|
|
|
|
|
|
|
|
} *op_data_t;
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* Parse an error status line. Return the error location and the
|
|
|
|
|
error code. The function may modify ARGS. */
|
|
|
|
|
static char *
|
|
|
|
|
parse_error (char *args, gpg_error_t *r_err)
|
|
|
|
|
{
|
|
|
|
|
char *where = strchr (args, ' ');
|
|
|
|
|
char *which;
|
|
|
|
|
|
|
|
|
|
if (where)
|
|
|
|
|
{
|
|
|
|
|
*where = '\0';
|
|
|
|
|
which = where + 1;
|
|
|
|
|
|
|
|
|
|
where = strchr (which, ' ');
|
|
|
|
|
if (where)
|
|
|
|
|
*where = '\0';
|
|
|
|
|
|
|
|
|
|
where = args;
|
|
|
|
|
}
|
|
|
|
|
else
|
|
|
|
|
{
|
|
|
|
|
*r_err = trace_gpg_error (GPG_ERR_INV_ENGINE);
|
|
|
|
|
return NULL;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
*r_err = atoi (which);
|
|
|
|
|
|
|
|
|
|
return where;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
static gpgme_error_t
|
|
|
|
|
tofu_policy_status_handler (void *priv, gpgme_status_code_t code, char *args)
|
|
|
|
|
{
|
|
|
|
|
gpgme_ctx_t ctx = (gpgme_ctx_t) priv;
|
|
|
|
|
gpgme_error_t err;
|
|
|
|
|
void *hook;
|
|
|
|
|
op_data_t opd;
|
|
|
|
|
char *loc;
|
|
|
|
|
|
|
|
|
|
err = _gpgme_op_data_lookup (ctx, OPDATA_TOFU_POLICY, &hook, -1, NULL);
|
|
|
|
|
opd = hook;
|
|
|
|
|
if (err)
|
|
|
|
|
return err;
|
|
|
|
|
|
|
|
|
|
switch (code)
|
|
|
|
|
{
|
|
|
|
|
case GPGME_STATUS_ERROR:
|
|
|
|
|
loc = parse_error (args, &err);
|
|
|
|
|
if (!loc)
|
|
|
|
|
return err;
|
|
|
|
|
if (!opd->error_code)
|
|
|
|
|
opd->error_code = err;
|
|
|
|
|
break;
|
|
|
|
|
|
|
|
|
|
case GPGME_STATUS_FAILURE:
|
|
|
|
|
opd->failure_code = _gpgme_parse_failure (args);
|
|
|
|
|
break;
|
|
|
|
|
|
|
|
|
|
case GPGME_STATUS_EOF:
|
|
|
|
|
if (opd->error_code)
|
|
|
|
|
err = opd->error_code;
|
|
|
|
|
else if (opd->failure_code)
|
|
|
|
|
err = opd->failure_code;
|
|
|
|
|
break;
|
|
|
|
|
|
|
|
|
|
default:
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
return err;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* Set the TOFU policy for KEY to POLICY. */
|
|
|
|
|
static gpgme_error_t
|
|
|
|
|
tofu_policy_start (gpgme_ctx_t ctx, int synchronous,
|
|
|
|
|
gpgme_key_t key, gpgme_tofu_policy_t policy)
|
|
|
|
|
{
|
|
|
|
|
gpgme_error_t err;
|
|
|
|
|
void *hook;
|
|
|
|
|
op_data_t opd;
|
|
|
|
|
|
|
|
|
|
if (ctx->protocol != GPGME_PROTOCOL_OPENPGP)
|
|
|
|
|
return gpgme_error (GPG_ERR_UNSUPPORTED_PROTOCOL);
|
|
|
|
|
|
|
|
|
|
if (!key)
|
|
|
|
|
return gpg_error (GPG_ERR_INV_VALUE);
|
|
|
|
|
|
|
|
|
|
err = _gpgme_op_reset (ctx, synchronous);
|
|
|
|
|
if (err)
|
|
|
|
|
return err;
|
|
|
|
|
|
|
|
|
|
err = _gpgme_op_data_lookup (ctx, OPDATA_TOFU_POLICY, &hook,
|
|
|
|
|
sizeof (*opd), NULL);
|
|
|
|
|
opd = hook;
|
|
|
|
|
if (err)
|
|
|
|
|
return err;
|
|
|
|
|
|
|
|
|
|
_gpgme_engine_set_status_handler (ctx->engine, tofu_policy_status_handler,
|
|
|
|
|
ctx);
|
|
|
|
|
|
|
|
|
|
return _gpgme_engine_op_tofu_policy (ctx->engine, key, policy);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* Set the TOFU policy of KEY to POLCIY. This is the asynchronous
|
|
|
|
|
* variant. */
|
|
|
|
|
gpgme_error_t
|
|
|
|
|
gpgme_op_tofu_policy_start (gpgme_ctx_t ctx,
|
|
|
|
|
gpgme_key_t key, gpgme_tofu_policy_t policy)
|
|
|
|
|
{
|
|
|
|
|
gpg_error_t err;
|
2018-11-16 15:25:49 +00:00
|
|
|
|
TRACE_BEG (DEBUG_CTX, "gpgme_op_tofu_policy_start", ctx,
|
2016-09-14 18:21:19 +00:00
|
|
|
|
"key=%p, policy=%u", key, (unsigned int)policy);
|
|
|
|
|
|
|
|
|
|
if (!ctx)
|
|
|
|
|
return TRACE_ERR (gpg_error (GPG_ERR_INV_VALUE));
|
|
|
|
|
|
|
|
|
|
err = tofu_policy_start (ctx, 0, key, policy);
|
|
|
|
|
return TRACE_ERR (err);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* This is the synchronous variant of gpgme_op_tofu_policy_start. */
|
|
|
|
|
gpgme_error_t
|
|
|
|
|
gpgme_op_tofu_policy (gpgme_ctx_t ctx,
|
|
|
|
|
gpgme_key_t key, gpgme_tofu_policy_t policy)
|
|
|
|
|
{
|
|
|
|
|
gpgme_error_t err;
|
2018-11-16 15:25:49 +00:00
|
|
|
|
TRACE_BEG (DEBUG_CTX, "gpgme_op_tofu_policy", ctx,
|
2016-09-14 18:21:19 +00:00
|
|
|
|
"key=%p, policy=%u", key, (unsigned int)policy);
|
|
|
|
|
|
|
|
|
|
if (!ctx)
|
|
|
|
|
return TRACE_ERR (gpg_error (GPG_ERR_INV_VALUE));
|
|
|
|
|
|
|
|
|
|
err = tofu_policy_start (ctx, 1, key, policy);
|
|
|
|
|
if (!err)
|
|
|
|
|
err = _gpgme_wait_one (ctx);
|
|
|
|
|
return TRACE_ERR (err);
|
|
|
|
|
}
|