gpgme/gpgme/verify.c

/* verify.c - Signature verification.
   Copyright (C) 2000 Werner Koch (dd9jn)
   Copyright (C) 2001, 2002, 2003 g10 Code GmbH

   This file is part of GPGME.
 
   GPGME is free software; you can redistribute it and/or modify it
   under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2 of the License, or
   (at your option) any later version.
 
   GPGME is distributed in the hope that it will be useful, but
   WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
   General Public License for more details.
 
   You should have received a copy of the GNU General Public License
   along with GPGME; if not, write to the Free Software Foundation,
   Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.  */

#if HAVE_CONFIG_H
#include <config.h>
#endif
#include <stdlib.h>
#include <string.h>
#include <errno.h>

#include "gpgme.h"
#include "util.h"
#include "context.h"
#include "ops.h"


typedef struct
{
  struct _gpgme_op_verify_result result;

  GpgmeSignature current_sig;
} *op_data_t;


static void
release_op_data (void *hook)
{
  op_data_t opd = (op_data_t) hook;
  GpgmeSignature sig = opd->result.signatures;

  while (sig)
    {
      GpgmeSignature next = sig->next;
      GpgmeSigNotation notation = sig->notations;

      while (notation)
	{
	  GpgmeSigNotation next_nota = notation->next;

	  if (notation->name)
	    free (notation->name);
	  if (notation->value)
	    free (notation->value);
	  notation = next_nota;
	}

      if (sig->fpr)
	free (sig->fpr);
      free (sig);
      sig = next;
    }
}


GpgmeVerifyResult
gpgme_op_verify_result (GpgmeCtx ctx)
{
  op_data_t opd;
  GpgmeError err;

  err = _gpgme_op_data_lookup (ctx, OPDATA_VERIFY, (void **) &opd, -1, NULL);
  if (err || !opd)
    return NULL;

  return &opd->result;
}


/* Build a summary vector from RESULT. */
static void
calc_sig_summary (GpgmeSignature sig)
{
  unsigned long sum = 0;

  if (sig->validity == GPGME_VALIDITY_FULL
      || sig->validity == GPGME_VALIDITY_ULTIMATE)
    {
      if (sig->status == GPGME_No_Error
	  || sig->status == GPGME_Sig_Expired
	  || sig->status == GPGME_Key_Expired)
	sum |= GPGME_SIGSUM_GREEN;
    }
  else if (sig->validity == GPGME_VALIDITY_NEVER)
    {
      if (sig->status == GPGME_No_Error
	  || sig->status == GPGME_Sig_Expired
	  || sig->status == GPGME_Key_Expired)
	sum |= GPGME_SIGSUM_RED;
    }
  else if (sig->status == GPGME_Bad_Signature)
    sum |= GPGME_SIGSUM_RED;
  
  /* FIXME: handle the case when key and message are expired. */
  switch (sig->status)
    {
    case GPGME_Sig_Expired:
      sum |= GPGME_SIGSUM_SIG_EXPIRED;
      break;

    case GPGME_Key_Expired:
      sum |= GPGME_SIGSUM_KEY_EXPIRED;
      break;

    case GPGME_No_Public_Key:
      sum |= GPGME_SIGSUM_KEY_MISSING;
      break;

    case GPGME_Bad_Signature:
    case GPGME_No_Error:
      break;

    default:
      sum |= GPGME_SIGSUM_SYS_ERROR;
      break;
    }
  
  if (sig->wrong_key_usage)
    sum |= GPGME_SIGSUM_BAD_POLICY;
  
  /* Set the valid flag when the signature is unquestionable
     valid. */
  if ((sum & GPGME_SIGSUM_GREEN) && !(sum & ~GPGME_SIGSUM_GREEN))
    sum |= GPGME_SIGSUM_VALID;
  
  sig->summary = sum;
}
  

static GpgmeError
parse_new_sig (op_data_t opd, GpgmeStatusCode code, char *args)
{
  GpgmeSignature sig;
  char *end = strchr (args, ' ');

  if (end)
    {
      *end = '\0';
      end++;
    }

  sig = calloc (1, sizeof (*sig));
  if (!sig)
    return GPGME_Out_Of_Core;
  if (!opd->result.signatures)
    opd->result.signatures = sig;
  if (opd->current_sig)
    opd->current_sig->next = sig;
  opd->current_sig = sig;

  switch (code)
    {
    case GPGME_STATUS_GOODSIG:
      sig->status = GPGME_No_Error;
      break;

    case GPGME_STATUS_EXPSIG:
      sig->status = GPGME_Sig_Expired;
      break;

    case GPGME_STATUS_EXPKEYSIG:
      sig->status = GPGME_Key_Expired;
      break;

    case GPGME_STATUS_BADSIG:
      sig->status = GPGME_Bad_Signature;
      break;

    case GPGME_STATUS_ERRSIG:
      if (end)
	{
	  int i = 0;
	  /* The return code is the 6th argument, if it is 9, the
	     problem is a missing key.  */
	  while (end && i < 4)
	    end = strchr (end, ' ');
	  if (end && end[0] && (!end[1] || !end[1] == ' '))
	    {
	      switch (end[0])
		{
		case '4':
		  sig->status = GPGME_Unsupported_Algorithm;
		  break;

		case 9:
		  sig->status = GPGME_No_Public_Key;
		  break;

		default:
		  sig->status = GPGME_General_Error;
		}
	    }
	}
      else
	sig->status = GPGME_General_Error;
      break;

    default:
      return GPGME_General_Error;
    }

  if (*args)
    {
      sig->fpr = strdup (args);
      if (!sig->fpr)
	return GPGME_Out_Of_Core;
    }
  return 0;
}


static GpgmeError
parse_valid_sig (GpgmeSignature sig, char *args)
{
  char *end = strchr (args, ' ');

  if (end)
    {
      *end = '\0';
      end++;
    }

  if (!*args)
    /* We require at least the fingerprint.  */
    return GPGME_General_Error;

  if (sig->fpr)
    free (sig->fpr);
  sig->fpr = strdup (args);
  if (!sig->fpr)
    return GPGME_Out_Of_Core;

  end = strchr (end, ' ');
  if (end)
    {
      char *tail;
      errno = 0;
      sig->timestamp = strtol (end, &tail, 0);
      if (errno || end == tail || (*tail && *tail != ' '))
	return GPGME_General_Error;
      end = tail;
     
      sig->exp_timestamp = strtol (end, &tail, 0);
      if (errno || end == tail || (*tail && *tail != ' '))
	return GPGME_General_Error;
    }
  return 0;
}


static GpgmeError
parse_notation (GpgmeSignature sig, GpgmeStatusCode code, char *args)
{
  GpgmeError err;
  GpgmeSigNotation *lastp = &sig->notations;
  GpgmeSigNotation notation = sig->notations;
  char *end = strchr (args, ' ');

  if (end)
    *end = '\0';

  if (code == GPGME_STATUS_NOTATION_NAME || code == GPGME_STATUS_POLICY_URL)
    {
      /* FIXME: We could keep a pointer to the last notation in the list.  */
      while (notation && notation->value)
	{
	  lastp = &notation->next;
	  notation = notation->next;
	}

      if (notation)
	/* There is another notation name without data for the
	   previous one.  The crypto backend misbehaves.  */
	return GPGME_General_Error;

      notation = malloc (sizeof (*sig));
      if (!notation)
	return GPGME_Out_Of_Core;
      notation->next = NULL;

      if (code == GPGME_STATUS_NOTATION_NAME)
	{
	  int len = strlen (args) + 1;

	  notation->name = malloc (len);
	  if (!notation->name)
	    {
	      free (notation);
	      return GPGME_Out_Of_Core;
	    }
	  err = _gpgme_decode_percent_string (args, &notation->name, len);
	  if (err)
	    return err;

	  notation->value = NULL;
	}
      else
	{
	  int len = strlen (args) + 1;

	  notation->name = NULL;
	  notation->value = malloc (len);
	  if (!notation->value)
	    {
	      free (notation);
	      return GPGME_Out_Of_Core;
	    }
	  err = _gpgme_decode_percent_string (args, &notation->value, len);
	  if (err)
	    return err;
	}
      *lastp = notation;
    }
  else if (code == GPGME_STATUS_NOTATION_DATA)
    {
      int len = strlen (args) + 1;
      char *dest;

      /* FIXME: We could keep a pointer to the last notation in the list.  */
      while (notation && notation->next)
	{
	  lastp = &notation->next;
	  notation = notation->next;
	}

      if (!notation || !notation->name)
	/* There is notation data without a previous notation
	   name.  The crypto backend misbehaves.  */
	return GPGME_General_Error;
      
      if (!notation->value)
	{
	  dest = notation->value = malloc (len);
	  if (!dest)
	    return GPGME_Out_Of_Core;
	}
      else
	{
	  int cur_len = strlen (notation->value);
	  dest = realloc (notation->value, len + strlen (notation->value));
	  if (!dest)
	    return GPGME_Out_Of_Core;
	  notation->value = dest;
	  dest += cur_len;
	}
      
      err = _gpgme_decode_percent_string (args, &dest, len);
      if (err)
	return err;
    }
  else
    return GPGME_General_Error;
  return 0;
}


static GpgmeError
parse_trust (GpgmeSignature sig, GpgmeStatusCode code, char *args)
{
  char *end = strchr (args, ' ');

  if (end)
    *end = '\0';

  switch (code)
    {
    case GPGME_STATUS_TRUST_UNDEFINED:
    default:
      sig->validity = GPGME_VALIDITY_UNKNOWN;
      break;

    case GPGME_STATUS_TRUST_NEVER:
      sig->validity = GPGME_VALIDITY_NEVER;
      break;

    case GPGME_STATUS_TRUST_MARGINAL:
      sig->validity = GPGME_VALIDITY_MARGINAL;
      break;

    case GPGME_STATUS_TRUST_FULLY:
    case GPGME_STATUS_TRUST_ULTIMATE:
      sig->validity = GPGME_VALIDITY_FULL;
      break;
    }

  if (*args)
    sig->validity_reason = _gpgme_map_gnupg_error (args);

  return 0;
}


static GpgmeError
parse_error (GpgmeSignature sig, char *args)
{
  GpgmeError err;
  char *where = strchr (args, ' ');
  char *which;

  if (where)
    {
      *where = '\0';
      which = where + 1;

      where = strchr (which, ' ');
      if (where)
	*where = '\0';

      where = args;      
    }
  else
    return GPGME_General_Error;

  err = _gpgme_map_gnupg_error (which);

  if (!strcmp (where, "verify.findkey"))
    sig->status = err;
  else if (!strcmp (where, "verify.keyusage") && err == GPGME_Wrong_Key_Usage)
    sig->wrong_key_usage = 1;

  return 0;
}


GpgmeError
_gpgme_verify_status_handler (void *priv, GpgmeStatusCode code, char *args)
{
  GpgmeCtx ctx = (GpgmeCtx) priv;
  GpgmeError err;
  op_data_t opd;
  GpgmeSignature sig;

  err = _gpgme_op_data_lookup (ctx, OPDATA_VERIFY, (void **) &opd, -1, NULL);
  if (err)
    return err;

  sig = opd->current_sig;

  switch (code)
    {
    case GPGME_STATUS_GOODSIG:
    case GPGME_STATUS_EXPSIG:
    case GPGME_STATUS_EXPKEYSIG:
    case GPGME_STATUS_BADSIG:
    case GPGME_STATUS_ERRSIG:
      if (sig)
	calc_sig_summary (sig);
      return parse_new_sig (opd, code, args);

    case GPGME_STATUS_VALIDSIG:
      return sig ? parse_valid_sig (sig, args) : GPGME_General_Error;

    case GPGME_STATUS_NODATA:
      if (!sig)
	return GPGME_No_Data;
      sig->status = GPGME_No_Data;
      break;

    case GPGME_STATUS_UNEXPECTED:
      if (!sig)
	return GPGME_General_Error;
      sig->status = GPGME_No_Data;
      break;

    case GPGME_STATUS_NOTATION_NAME:
    case GPGME_STATUS_NOTATION_DATA:
    case GPGME_STATUS_POLICY_URL:
      return sig ? parse_notation (sig, code, args) : GPGME_General_Error;

    case GPGME_STATUS_TRUST_UNDEFINED:
    case GPGME_STATUS_TRUST_NEVER:
    case GPGME_STATUS_TRUST_MARGINAL:
    case GPGME_STATUS_TRUST_FULLY:
    case GPGME_STATUS_TRUST_ULTIMATE:
      return sig ? parse_trust (sig, code, args) : GPGME_General_Error;

    case GPGME_STATUS_ERROR:
      return sig ? parse_error (sig, args) : GPGME_General_Error;

    case GPGME_STATUS_EOF:
      if (sig)
	calc_sig_summary (sig);
      break;

    default:
      break;
    }
  return 0;
}


GpgmeError
_gpgme_op_verify_init_result (GpgmeCtx ctx)
{  
  op_data_t opd;

  return _gpgme_op_data_lookup (ctx, OPDATA_VERIFY, (void **) &opd,
				sizeof (*opd), release_op_data);
}


static GpgmeError
_gpgme_op_verify_start (GpgmeCtx ctx, int synchronous, GpgmeData sig,
			GpgmeData signed_text, GpgmeData plaintext)
{
  GpgmeError err;

  err = _gpgme_op_reset (ctx, synchronous);
  if (err)
    return err;

  err = _gpgme_op_verify_init_result (ctx);
  if (err)
    return err;

  _gpgme_engine_set_status_handler (ctx->engine, _gpgme_verify_status_handler,
				    ctx);

  if (!sig)
    return GPGME_No_Data;
  if (!signed_text && !plaintext)
    return GPGME_Invalid_Value;

  return _gpgme_engine_op_verify (ctx->engine, sig, signed_text, plaintext);
}


/* Decrypt ciphertext CIPHER and make a signature verification within
   CTX and store the resulting plaintext in PLAIN.  */
GpgmeError
gpgme_op_verify_start (GpgmeCtx ctx, GpgmeData sig, GpgmeData signed_text,
		       GpgmeData plaintext)
{
  return _gpgme_op_verify_start (ctx, 0, sig, signed_text, plaintext);
}


/* Decrypt ciphertext CIPHER and make a signature verification within
   CTX and store the resulting plaintext in PLAIN.  */
GpgmeError
gpgme_op_verify (GpgmeCtx ctx, GpgmeData sig, GpgmeData signed_text,
		 GpgmeData plaintext)
{
  GpgmeError err;

  err = _gpgme_op_verify_start (ctx, 1, sig, signed_text, plaintext);
  if (!err)
    err = _gpgme_wait_one (ctx);
  return err;
}


/* Compatibility interfaces.  */

/* Get the key used to create signature IDX in CTX and return it in
   R_KEY.  */
GpgmeError
gpgme_get_sig_key (GpgmeCtx ctx, int idx, GpgmeKey *r_key)
{
  GpgmeVerifyResult result;
  GpgmeSignature sig;

  result = gpgme_op_verify_result (ctx);
  sig = result->signatures;

  while (sig && idx)
    {
      sig = sig->next;
      idx--;
    }
  if (!sig || idx)
    return GPGME_EOF;

  return gpgme_get_key (ctx, sig->fpr, r_key, 0);
}


/* Retrieve the signature status of signature IDX in CTX after a
   successful verify operation in R_STAT (if non-null).  The creation
   time stamp of the signature is returned in R_CREATED (if non-null).
   The function returns a string containing the fingerprint.  */
const char *gpgme_get_sig_status (GpgmeCtx ctx, int idx,
                                  GpgmeSigStat *r_stat, time_t *r_created)
{
  GpgmeVerifyResult result;
  GpgmeSignature sig;

  result = gpgme_op_verify_result (ctx);
  sig = result->signatures;

  while (sig && idx)
    {
      sig = sig->next;
      idx--;
    }
  if (!sig || idx)
    return NULL;

  if (r_stat)
    {
      switch (sig->status)
	{
	case GPGME_No_Error:
	  *r_stat = GPGME_SIG_STAT_GOOD;
	  break;
	  
	case GPGME_Bad_Signature:
	  *r_stat = GPGME_SIG_STAT_BAD;
	  break;
	  
	case GPGME_No_Public_Key:
	  *r_stat = GPGME_SIG_STAT_NOKEY;
	  break;
	  
	case GPGME_No_Data:
	  *r_stat = GPGME_SIG_STAT_NOSIG;
	  break;
	  
	case GPGME_Sig_Expired:
	  *r_stat = GPGME_SIG_STAT_GOOD_EXP;
	  break;
	  
	case GPGME_Key_Expired:
	  *r_stat = GPGME_SIG_STAT_GOOD_EXPKEY;
	  break;
	  
	default:
	  *r_stat = GPGME_SIG_STAT_ERROR;
	  break;
	}
    }
  if (r_created)
    *r_created = sig->timestamp;
  return sig->fpr;
}


/* Retrieve certain attributes of a signature.  IDX is the index
   number of the signature after a successful verify operation.  WHAT
   is an attribute where GPGME_ATTR_EXPIRE is probably the most useful
   one.  WHATIDX is to be passed as 0 for most attributes . */
unsigned long gpgme_get_sig_ulong_attr (GpgmeCtx ctx, int idx,
                                        GpgmeAttr what, int whatidx)
{
  GpgmeVerifyResult result;
  GpgmeSignature sig;

  result = gpgme_op_verify_result (ctx);
  sig = result->signatures;

  while (sig && idx)
    {
      sig = sig->next;
      idx--;
    }
  if (!sig || idx)
    return 0;

  switch (what)
    {
    case GPGME_ATTR_CREATED:
      return sig->timestamp;

    case GPGME_ATTR_EXPIRE:
      return sig->exp_timestamp;

    case GPGME_ATTR_VALIDITY:
      return (unsigned long) sig->validity;

    case GPGME_ATTR_SIG_STATUS:
      switch (sig->status)
	{
	case GPGME_No_Error:
	  return GPGME_SIG_STAT_GOOD;
	  
	case GPGME_Bad_Signature:
	  return GPGME_SIG_STAT_BAD;
	  
	case GPGME_No_Public_Key:
	  return GPGME_SIG_STAT_NOKEY;
	  
	case GPGME_No_Data:
	  return GPGME_SIG_STAT_NOSIG;
	  
	case GPGME_Sig_Expired:
	  return GPGME_SIG_STAT_GOOD_EXP;
	  
	case GPGME_Key_Expired:
	  return GPGME_SIG_STAT_GOOD_EXPKEY;
	  
	default:
	  return GPGME_SIG_STAT_ERROR;
	}

    case GPGME_ATTR_SIG_SUMMARY:
      return sig->summary;

    default:
      break;
    }
  return 0;
}


const char *gpgme_get_sig_string_attr (GpgmeCtx ctx, int idx,
                                      GpgmeAttr what, int whatidx)
{
  GpgmeVerifyResult result;
  GpgmeSignature sig;

  result = gpgme_op_verify_result (ctx);
  sig = result->signatures;

  while (sig && idx)
    {
      sig = sig->next;
      idx--;
    }
  if (!sig || idx)
    return NULL;

  switch (what)
    {
    case GPGME_ATTR_FPR:
      return sig->fpr;

    case GPGME_ATTR_ERRTOK:
      if (whatidx == 1)
        return sig->wrong_key_usage ? "Wrong_Key_Usage" : "";
      else
	return "";
    default:
      break;
    }

  return NULL;
}