1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
|
/**
* Copyright (C) 2021-2024 Saturneric <eric@bktus.com>
*
* This file is part of GpgFrontend.
*
* GpgFrontend is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* GpgFrontend is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with GpgFrontend. If not, see <https://www.gnu.org/licenses/>.
*
* The initial version of the source code is inherited from
* the gpg4usb project, which is under GPL-3.0-or-later.
*
* All the source code of GpgFrontend was modified and released by
* Saturneric <eric@bktus.com> starting on May 12, 2021.
*
* SPDX-License-Identifier: GPL-3.0-or-later
*
*/
#include "EMailAccountModel.h"
#include <QHostAddress>
#include <QJsonArray>
namespace {
constexpr auto kTlsImplicit = "implicit";
constexpr auto kTlsStartTls = "starttls";
constexpr auto kTlsNone = "none";
} // namespace
auto MailTlsModeToString(MailTlsMode mode) -> QString {
switch (mode) {
case MailTlsMode::kIMPLICIT:
return kTlsImplicit;
case MailTlsMode::kSTARTTLS:
return kTlsStartTls;
case MailTlsMode::kNONE:
return kTlsNone;
}
return kTlsImplicit;
}
auto MailTlsModeFromString(const QString& s) -> MailTlsMode {
const auto v = s.trimmed().toLower();
if (v == kTlsStartTls) return MailTlsMode::kSTARTTLS;
if (v == kTlsNone) return MailTlsMode::kNONE;
// Anything unrecognised reads as the safest mode rather than the nearest
// one. A typo, a truncated file or a value from a newer build must not be
// able to quietly downgrade a connection.
return MailTlsMode::kIMPLICIT;
}
auto MailHostAllowsCleartext(const QString& host) -> bool {
const auto h = host.trimmed().toLower();
if (h.isEmpty()) return false;
if (h == "localhost" || h == "localhost.localdomain") return true;
// Judged as an address rather than by string prefix: "127.0.0.1.example.com"
// is a remote host that merely looks local, and matching on text would hand
// it a cleartext session.
QHostAddress address(h);
if (address.isNull()) return false;
return address.isLoopback();
}
auto MailDefaultPort(bool imap, MailTlsMode mode) -> quint16 {
switch (mode) {
case MailTlsMode::kIMPLICIT:
return imap ? 993 : 465;
case MailTlsMode::kSTARTTLS:
return imap ? 143 : 587;
case MailTlsMode::kNONE:
return imap ? 143 : 25;
}
return 0;
}
auto MailAllowedPageSizes() -> QList<int> { return {25, 50, 100, 200}; }
auto MailClampPageSize(int requested) -> int {
const auto allowed = MailAllowedPageSizes();
if (allowed.contains(requested)) return requested;
// Snap down rather than to the nearest: a value between two steps is more
// likely a guess than a demand, and the cheaper page is the safer answer.
int best = allowed.first();
for (const auto size : allowed) {
if (size <= requested) best = size;
}
return best;
}
auto MailTransportConfig::ToJson() const -> QJsonObject {
return QJsonObject{
{"enabled", enabled},
{"host", host},
{"tls", MailTlsModeToString(tls)},
{"username", username},
{"pinned_cert_sha256", pinned_cert_sha256},
};
}
auto MailTransportConfig::FromJson(const QJsonObject& json)
-> MailTransportConfig {
MailTransportConfig config;
config.enabled = json.value("enabled").toBool();
config.host = json.value("host").toString().trimmed();
config.tls = MailTlsModeFromString(json.value("tls").toString());
config.username = json.value("username").toString();
config.pinned_cert_sha256 =
json.value("pinned_cert_sha256").toString().toLower();
// A port is deliberately neither written nor read back: it is policy, not
// configuration. An account stored by an earlier build may still carry one,
// and ignoring it here is what retires the override.
// A stored cleartext mode is re-checked against the host rather than
// trusted. The file may predate the policy, or have been edited by hand;
// either way a remote host must not come back cleartext.
if (config.tls == MailTlsMode::kNONE &&
!MailHostAllowsCleartext(config.host)) {
config.tls = MailTlsMode::kIMPLICIT;
}
return config;
}
auto MailAccountConfig::Label() const -> QString {
if (!display_name.trimmed().isEmpty() && !address.trimmed().isEmpty()) {
return QString("%1 <%2>").arg(display_name.trimmed(), address.trimmed());
}
if (!address.trimmed().isEmpty()) return address.trimmed();
if (!display_name.trimmed().isEmpty()) return display_name.trimmed();
return {};
}
auto MailAccountConfig::IsUsable() const -> bool {
if (address.trimmed().isEmpty()) return false;
if (!imap.enabled && !smtp.enabled) return false;
if (imap.enabled && imap.host.isEmpty()) return false;
if (smtp.enabled && smtp.host.isEmpty()) return false;
return true;
}
auto MailAccountConfig::ToJson() const -> QJsonObject {
// No password and no secret of any kind: the credential lives in the
// credential store under `id`, and this object is what gets written to
// ordinary settings, logged, and exported.
return QJsonObject{
{"id", id},
{"display_name", display_name},
{"address", address},
{"reply_to", reply_to},
{"default_key_fpr", default_key_fpr},
{"imap", imap.ToJson()},
{"smtp", smtp.ToJson()},
{"sent_folder_override", sent_folder_override},
};
}
auto MailAccountConfig::FromJson(const QJsonObject& json) -> MailAccountConfig {
MailAccountConfig config;
config.id = json.value("id").toString();
config.display_name = json.value("display_name").toString();
config.address = json.value("address").toString().trimmed();
config.reply_to = json.value("reply_to").toString().trimmed();
config.default_key_fpr = json.value("default_key_fpr").toString();
config.imap = MailTransportConfig::FromJson(json.value("imap").toObject());
config.smtp = MailTransportConfig::FromJson(json.value("smtp").toObject());
config.sent_folder_override =
json.value("sent_folder_override").toString().trimmed();
return config;
}
|
