repos/pEpEngine: src/message_api.c@293e7f009a3d

     1 #include "pEp_internal.h"

     2 #include "message_api.h"

     4 #include "platform.h"

     5 #include "mime.h"

     7 #include <assert.h>

     8 #include <string.h>

     9 #include <stdlib.h>

    11 #ifndef MIN

    12 #define MIN(A, B) ((B) > (A) ? (A) : (B))

    13 #endif

    14 #ifndef MAX

    15 #define MAX(A, B) ((B) > (A) ? (B) : (A))

    16 #endif

    19 static bool string_equality(const char *s1, const char *s2)

    20 {

    21     if (s1 == NULL || s2 == NULL)

    22         return false;

    24     assert(s1 && s2);

    26     return strcmp(s1, s2) == 0;

    27 }

    29 static bool is_mime_type(const bloblist_t *bl, const char *mt)

    30 {

    31     assert(mt);

    33     return bl && string_equality(bl->mime_type, mt);

    34 }

    36 static bool is_fileending(const bloblist_t *bl, const char *fe)

    37 {

    38     assert(fe);

    40     if (bl == NULL || bl->filename == NULL)

    41         return false;

    43     assert(bl && bl->filename);

    45     size_t fe_len = strlen(fe);

    46     size_t fn_len = strlen(bl->filename);

    48     if (fn_len <= fe_len)

    49         return false;

    51     assert(fn_len > fe_len);

    53     return strcmp(bl->filename + (fn_len - fe_len), fe) == 0;

    54 }

    56 static void add_opt_field(message *msg, const char *name, const char *value)

    57 {

    58     assert(msg);

    60     if (msg && name && value) {

    61         stringpair_t *pair = new_stringpair(name, value);

    62         if (pair == NULL)

    63             return;

    65         stringpair_list_t *field = stringpair_list_add(msg->opt_fields, pair);

    66         if (field == NULL)

    67             return;

    69         if (msg->opt_fields == NULL)

    70             msg->opt_fields = field;

    71     }

    72 }

    74 static char * combine_short_and_long(const char *shortmsg, const char *longmsg)

    75 {

    76     char * ptext;

    78     assert(shortmsg);

    79     assert(strcmp(shortmsg, "pEp") != 0);

    81     if (longmsg == NULL)

    82         longmsg = "";

    84     ptext = calloc(1, strlen(shortmsg) + strlen(longmsg) + 12);

    85     assert(ptext);

    86     if (ptext == NULL)

    87         return NULL;

    89     strcpy(ptext, "Subject: ");

    90     strcat(ptext, shortmsg);

    91     strcat(ptext, "\n\n");

    92     strcat(ptext, longmsg);

    94     return ptext;

    95 }

    97 static int seperate_short_and_long(const char *src, char **shortmsg, char **longmsg)

    98 {

    99     char *_shortmsg = NULL;

   100     char *_longmsg = NULL;

   102     assert(src);

   103     assert(shortmsg);

   104     assert(longmsg);

   106     *shortmsg = NULL;

   107     *longmsg = NULL;

   109     if (strncasecmp(src, "subject: ", 9) == 0) {

   110         char *line_end = strchr(src, '\n');

   112         if (line_end == NULL) {

   113             _shortmsg = strdup(src + 9);

   114             assert(_shortmsg);

   115             if (_shortmsg == NULL)

   116                 goto enomem;

   117             // _longmsg = NULL;

   118         }

   119         else {

   120             size_t n = line_end - src;

   122             if (*(line_end - 1) == '\r')

   123                 _shortmsg = strndup(src + 9, n - 10);

   124             else

   125                 _shortmsg = strndup(src + 9, n - 9);

   126             assert(_shortmsg);

   127             if (_shortmsg == NULL)

   128                 goto enomem;

   130             while (*(src + n) && (*(src + n) == '\n' || *(src + n) == '\r'))

   131                 ++n;

   133             if (*(src + n)) {

   134                 _longmsg = strdup(src + n);

   135                 assert(_longmsg);

   136                 if (_longmsg == NULL)

   137                     goto enomem;

   138             }

   139         }

   140     }

   141     else {

   142         _shortmsg = strdup("");

   143         assert(_shortmsg);

   144         if (_shortmsg == NULL)

   145             goto enomem;

   146         _longmsg = strdup(src);

   147         assert(_longmsg);

   148         if (_longmsg == NULL)

   149             goto enomem;

   150     }

   152     *shortmsg = _shortmsg;

   153     *longmsg = _longmsg;

   155     return 0;

   157 enomem:

   158     free(_shortmsg);

   159     free(_longmsg);

   161     return -1;

   162 }

   164 static PEP_STATUS copy_fields(message *dst, const message *src)

   165 {

   166     assert(dst);

   167     assert(src);

   169     free_timestamp(dst->sent);

   170     dst->sent = NULL;

   171     if (src->sent) {

   172         dst->sent = timestamp_dup(src->sent);

   173         if (dst->sent == NULL)

   174             return PEP_OUT_OF_MEMORY;

   175     }

   177     free_timestamp(dst->recv);

   178     dst->recv = NULL;

   179     if (src->recv) {

   180         dst->recv = timestamp_dup(src->recv);

   181         if (dst->recv == NULL)

   182             return PEP_OUT_OF_MEMORY;

   183     }

   185     free_identity(dst->from);

   186     dst->from = NULL;

   187     if (src->from) {

   188         dst->from = identity_dup(src->from);

   189         if (dst->from == NULL)

   190             return PEP_OUT_OF_MEMORY;

   191     }

   193     free_identity_list(dst->to);

   194     dst->to = NULL;

   195     if (src->to && src->to->ident) {

   196         dst->to = identity_list_dup(src->to);

   197         if (dst->to == NULL)

   198             return PEP_OUT_OF_MEMORY;

   199     }

   201     free_identity(dst->recv_by);

   202     dst->recv_by = NULL;

   203     if (src->recv_by) {

   204         dst->recv_by = identity_dup(src->recv_by);

   205         if (dst->recv_by == NULL)

   206             return PEP_OUT_OF_MEMORY;

   207     }

   209     free_identity_list(dst->cc);

   210     dst->cc = NULL;

   211     if (src->cc && src->cc->ident) {

   212         dst->cc = identity_list_dup(src->cc);

   213         if (dst->cc == NULL)

   214             return PEP_OUT_OF_MEMORY;

   215     }

   217     free_identity_list(dst->bcc);

   218     dst->bcc = NULL;

   219     if (src->bcc && src->bcc->ident) {

   220         dst->bcc = identity_list_dup(src->bcc);

   221         if (dst->bcc == NULL)

   222             return PEP_OUT_OF_MEMORY;

   223     }

   225     free_identity_list(dst->reply_to);

   226     dst->reply_to = NULL;

   227     if (src->reply_to && src->reply_to->ident) {

   228         dst->reply_to = identity_list_dup(src->reply_to);

   229         if (dst->reply_to == NULL)

   230             return PEP_OUT_OF_MEMORY;

   231     }

   233     free_stringlist(dst->in_reply_to);

   234     dst->in_reply_to = NULL;

   235     if (src->in_reply_to && src->in_reply_to->value) {

   236         dst->in_reply_to = stringlist_dup(src->in_reply_to);

   237         if (dst->in_reply_to == NULL)

   238             return PEP_OUT_OF_MEMORY;

   239     }

   241     free_stringlist(dst->references);

   242     dst->references = NULL;

   243     if (src->references) {

   244         dst->references = stringlist_dup(src->references);

   245         if (dst->references == NULL)

   246             return PEP_OUT_OF_MEMORY;

   247     }

   249     free_stringlist(dst->keywords);

   250     dst->keywords = NULL;

   251     if (src->keywords && src->keywords->value) {

   252         dst->keywords = stringlist_dup(src->keywords);

   253         if (dst->keywords == NULL)

   254             return PEP_OUT_OF_MEMORY;

   255     }

   257     free(dst->comments);

   258     dst->comments = NULL;

   259     if (src->comments) {

   260         dst->comments = strdup(src->comments);

   261         assert(dst->comments);

   262         if (dst->comments == NULL)

   263             return PEP_OUT_OF_MEMORY;

   264     }

   266     return PEP_STATUS_OK;

   267 }

   269 static message * clone_to_empty_message(const message * src)

   270 {

   271     PEP_STATUS status;

   272     message * msg = NULL;

   274     assert(src);

   276     msg = calloc(1, sizeof(message));

   277     assert(msg);

   278     if (msg == NULL)

   279         goto enomem;

   281     msg->dir = src->dir;

   283     status = copy_fields(msg, src);

   284     if (status != PEP_STATUS_OK)

   285         goto enomem;

   287     return msg;

   289 enomem:

   290     free_message(msg);

   291     return NULL;

   292 }

   294 static PEP_STATUS encrypt_PGP_MIME(

   295     PEP_SESSION session,

   296     const message *src,

   297     stringlist_t *keys,

   298     message *dst

   299     )

   300 {

   301     PEP_STATUS status = PEP_STATUS_OK;

   302     bool free_ptext = false;

   303     char *ptext = NULL;

   304     char *ctext;

   305     char *_ctext = NULL;

   306     char *mimetext = NULL;

   307     size_t csize;

   308     assert(dst->longmsg == NULL);

   309     dst->enc_format = PEP_enc_PGP_MIME;

   311     if (src->shortmsg && strcmp(src->shortmsg, "pEp") != 0) {

   312         if (session->unencrypted_subject) {

   313             dst->shortmsg = strdup(src->shortmsg);

   314             assert(dst->shortmsg);

   315             if (dst->shortmsg == NULL)

   316                 goto enomem;

   317             ptext = src->longmsg;

   318         }

   319         else {

   320             ptext = combine_short_and_long(src->shortmsg, src->longmsg);

   321             if (ptext == NULL)

   322                 goto enomem;

   323             free_ptext = true;

   324         }

   325     }

   326     else if (src->longmsg) {

   327         ptext = src->longmsg;

   328     }

   329     else {

   330         ptext = "pEp";

   331     }

   333     message *_src = calloc(1, sizeof(message));

   334     assert(_src);

   335     if (_src == NULL)

   336         goto enomem;

   337     _src->longmsg = ptext;

   338     _src->longmsg_formatted = src->longmsg_formatted;

   339     _src->attachments = src->attachments;

   340     _src->enc_format = PEP_enc_none;

   341     status = mime_encode_message(_src, true, &mimetext);

   342     assert(status == PEP_STATUS_OK);

   343     if (free_ptext){

   344         free(ptext);

   345         free_ptext=0;

   346     }

   347     free(_src);

   348     assert(mimetext);

   349     if (mimetext == NULL)

   350         goto pep_error;

   352     status = encrypt_and_sign(session, keys, mimetext, strlen(mimetext),

   353         &ctext, &csize);

   354     free(mimetext);

   355     if (ctext == NULL)

   356         goto pep_error;

   358     dst->longmsg = strdup("this message was encrypted with p≡p "

   359         "https://pEp-project.org");

   360     assert(dst->longmsg);

   361     if (dst->longmsg == NULL)

   362         goto enomem;

   364     char *v = strdup("Version: 1");

   365     assert(v);

   366     if (v == NULL)

   367         goto enomem;

   369     bloblist_t *_a = new_bloblist(v, 11, "application/pgp-encrypted", NULL);

   370     if (_a == NULL)

   371         goto enomem;

   372     dst->attachments = _a;

   374     _ctext = malloc(csize);

   375     assert(_ctext);

   376     if (_ctext == NULL)

   377         goto enomem;

   378     memcpy(_ctext, ctext, csize);

   380     _a = bloblist_add(_a, _ctext, csize, "application/octet-stream",

   381         "msg.asc");

   382     if (_a == NULL)

   383         goto enomem;

   385     return PEP_STATUS_OK;

   387 enomem:

   388     status = PEP_OUT_OF_MEMORY;

   390 pep_error:

   391     if (free_ptext)

   392         free(ptext);

   393     free(_ctext);

   394     return status;

   395 }

   397 static PEP_STATUS encrypt_PGP_in_pieces(

   398     PEP_SESSION session,

   399     const message *src,

   400     stringlist_t *keys,

   401     message *dst

   402     )

   403 {

   404     PEP_STATUS status = PEP_STATUS_OK;

   405     char *ctext;

   406     size_t csize;

   407     char *ptext = NULL;

   408     bool free_ptext = false;

   410     assert(dst->longmsg == NULL);

   411     assert(dst->attachments == NULL);

   413     dst->enc_format = PEP_enc_pieces;

   415     if (src->shortmsg && src->shortmsg[0] && strcmp(src->shortmsg, "pEp") != 0) {

   416         if (session->unencrypted_subject) {

   417             dst->shortmsg = strdup(src->shortmsg);

   418             assert(dst->shortmsg);

   419             if (dst->shortmsg == NULL)

   420                 goto enomem;

   421             ptext = src->longmsg;

   422         }

   423         else {

   424             ptext = combine_short_and_long(src->shortmsg, src->longmsg);

   425             if (ptext == NULL)

   426                 goto enomem;

   427             free_ptext = true;

   428         }

   430         status = encrypt_and_sign(session, keys, ptext, strlen(ptext), &ctext,

   431             &csize);

   432         if (free_ptext)

   433             free(ptext);

   434         free_ptext = false;

   435         if (ctext) {

   436             dst->longmsg = strndup(ctext, csize);

   437             assert(dst->longmsg);

   438             if (dst->longmsg == NULL)

   439                 goto enomem;

   440         }

   441         else {

   442             goto pep_error;

   443         }

   444     }

   445     else if (src->longmsg && src->longmsg[0]) {

   446         ptext = src->longmsg;

   447         status = encrypt_and_sign(session, keys, ptext, strlen(ptext), &ctext,

   448             &csize);

   449         if (ctext) {

   450             dst->longmsg = strndup(ctext, csize);

   451             assert(dst->longmsg);

   452             if (dst->longmsg == NULL)

   453                 goto enomem;

   454         }

   455         else {

   456             goto pep_error;

   457         }

   458     }

   459     else {

   460         dst->longmsg = strdup("");

   461         assert(dst->longmsg);

   462         if (dst->longmsg == NULL)

   463             goto enomem;

   464     }

   466     if (src->longmsg_formatted && src->longmsg_formatted[0]) {

   467         ptext = src->longmsg_formatted;

   468         status = encrypt_and_sign(session, keys, ptext, strlen(ptext), &ctext,

   469             &csize);

   470         if (ctext) {

   471             char *_ctext = malloc(csize);

   472             assert(_ctext);

   473             if (_ctext == NULL)

   474                 goto enomem;

   475             memcpy(_ctext, ctext, csize);

   477             bloblist_t *_a = bloblist_add(dst->attachments, _ctext, csize,

   478                 "application/octet-stream", "PGPexch.htm.pgp");

   479             if (_a == NULL)

   480                 goto enomem;

   481             if (dst->attachments == NULL)

   482                 dst->attachments = _a;

   483         }

   484         else {

   485             goto pep_error;

   486         }

   487     }

   489     if (src->attachments) {

   490         if (dst->attachments == NULL) {

   491             dst->attachments = new_bloblist(NULL, 0, NULL, NULL);

   492             if (dst->attachments == NULL)

   493                 goto enomem;

   494         }

   496         bloblist_t *_s = src->attachments;

   497         bloblist_t *_d = dst->attachments;

   499         for (int n = 0; _s && _s->value; _s = _s->next) {

   500             size_t psize = _s->size;

   501             ptext = _s->value;

   502             status = encrypt_and_sign(session, keys, ptext, psize, &ctext,

   503                 &csize);

   504             if (ctext) {

   505                 char *filename = NULL;

   507                 if (_s->filename) {

   508                     size_t len = strlen(_s->filename);

   509                     filename = calloc(1, len + 5);

   510                     if (filename == NULL)

   511                         goto enomem;

   513                     strcpy(filename, _s->filename);

   514                     strcpy(filename + len, ".pgp");

   515                 }

   516                 else {

   517                     filename = calloc(1, 20);

   518                     if (filename == NULL)

   519                         goto enomem;

   521                     ++n;

   522                     n &= 0xffff;

   523                     snprintf(filename, 20, "Attachment%d.pgp", n);

   524                 }

   526                 char *_ctext = malloc(csize);

   527                 assert(_ctext);

   528                 if (_ctext == NULL)

   529                     goto enomem;

   530                 memcpy(_ctext, ctext, csize);

   532                 _d = bloblist_add(_d, _ctext, csize, "application/octet-stream",

   533                     filename);

   534                 if (_d == NULL)

   535                     goto enomem;

   536             }

   537             else {

   538                 goto pep_error;

   539             }

   540         }

   541     }

   543     return PEP_STATUS_OK;

   545 enomem:

   546     status = PEP_OUT_OF_MEMORY;

   548 pep_error:

   549     if (free_ptext)

   550         free(ptext);

   551     return status;

   552 }

   554 static char * keylist_to_string(const stringlist_t *keylist)

   555 {

   556     if (keylist) {

   557         size_t size = stringlist_length(keylist);

   559         const stringlist_t *_kl;

   560         for (_kl = keylist; _kl && _kl->value; _kl = _kl->next) {

   561             size += strlen(_kl->value);

   562         }

   564         char *result = calloc(1, size);

   565         if (result == NULL)

   566             return NULL;

   568         char *_r = result;

   569         for (_kl = keylist; _kl && _kl->value; _kl = _kl->next) {

   570             _r = stpcpy(_r, _kl->value);

   571             if (_kl->next && _kl->next->value)

   572                 _r = stpcpy(_r, ",");

   573         }

   575         return result;

   576     }

   577     else {

   578         return NULL;

   579     }

   580 }

   582 static const char * color_to_string(PEP_color color)

   583 {

   584     switch (color) {

   585     case PEP_rating_cannot_decrypt:

   586         return "cannot_decrypt";

   587     case PEP_rating_have_no_key:

   588         return "have_no_key";

   589     case PEP_rating_unencrypted:

   590         return "unencrypted";

   591     case PEP_rating_unencrypted_for_some:

   592         return "unencrypted_for_some";

   593     case PEP_rating_unreliable:

   594         return "unreliable";

   595     case PEP_rating_reliable:

   596         return "reliable";

   597     case PEP_rating_trusted:

   598         return "trusted";

   599     case PEP_rating_trusted_and_anonymized:

   600         return "trusted_and_anonymized";

   601     case PEP_rating_fully_anonymous:

   602         return "fully_anonymous";

   603     case PEP_rating_mistrust:

   604         return "mistrust";

   605     case PEP_rating_b0rken:

   606         return "b0rken";

   607     case PEP_rating_under_attack:

   608         return "unter_attack";

   609     default:

   610         return "undefined";

   611     }

   612 }

   614 static void decorate_message(

   615     message *msg,

   616     PEP_color color,

   617     stringlist_t *keylist

   618     )

   619 {

   620     assert(msg);

   622     add_opt_field(msg, "X-pEp-Version", "1.0");

   624     if (color != PEP_rating_undefined)

   625         add_opt_field(msg, "X-EncStatus", color_to_string(color));

   627     if (keylist) {

   628         char *_keylist = keylist_to_string(keylist);

   629         add_opt_field(msg, "X-KeyList", _keylist);

   630         free(_keylist);

   631     }

   632 }

   634 static PEP_color _rating(PEP_comm_type ct, PEP_color color)

   635 {

   636     if (ct == PEP_ct_unknown)

   637         return PEP_rating_undefined;

   639     else if (ct == PEP_ct_compromized)

   640         return PEP_rating_under_attack;

   642     else if (ct == PEP_ct_mistrusted)

   643         return PEP_rating_mistrust;

   645     if (color == PEP_rating_unencrypted_for_some)

   646         return PEP_rating_unencrypted_for_some;

   648     if (ct == PEP_ct_no_encryption || ct == PEP_ct_no_encrypted_channel ||

   649             ct == PEP_ct_my_key_not_included) {

   650         if (color > PEP_rating_unencrypted_for_some)

   651             return PEP_rating_unencrypted_for_some;

   652         else

   653             return PEP_rating_unencrypted;

   654     }

   656     if (color == PEP_rating_unencrypted)

   657         return PEP_rating_unencrypted_for_some;

   659     if (ct >= PEP_ct_confirmed_enc_anon)

   660         return PEP_rating_trusted_and_anonymized;

   662     else if (ct >= PEP_ct_strong_encryption)

   663         return PEP_rating_trusted;

   665     else if (ct >= PEP_ct_strong_but_unconfirmed && ct < PEP_ct_confirmed)

   666         return PEP_rating_reliable;

   668     else

   669         return PEP_rating_unreliable;

   670 }

   672 static bool is_encrypted_attachment(const bloblist_t *blob)

   673 {

   674     char *ext;

   676     assert(blob);

   678     if (blob->filename == NULL)

   679         return false;

   681     ext = strrchr(blob->filename, '.');

   682     if (ext == NULL)

   683         return false;

   685     if (strcmp(blob->mime_type, "application/octet-stream") == 0) {

   686         if (strcmp(ext, ".pgp") == 0 || strcmp(ext, ".gpg") == 0 ||

   687             strcmp(ext, ".asc") == 0)

   688             return true;

   689     }

   690     else if (strcmp(blob->mime_type, "text/plain") == 0) {

   691         if (strcmp(ext, ".asc") == 0)

   692             return true;

   693     }

   695     return false;

   696 }

   698 static bool is_encrypted_html_attachment(const bloblist_t *blob)

   699 {

   700     assert(blob);

   701     assert(blob->filename);

   703     if (strncmp(blob->filename, "PGPexch.htm.", 12) == 0) {

   704         if (strcmp(blob->filename + 11, ".pgp") == 0 ||

   705             strcmp(blob->filename + 11, ".asc") == 0)

   706             return true;

   707     }

   709     return false;

   710 }

   712 static char * without_double_ending(const char *filename)

   713 {

   714     char *ext;

   716     assert(filename);

   718     ext = strrchr(filename, '.');

   719     if (ext == NULL)

   720         return NULL;

   722     char *result = strndup(filename, ext - filename);

   723     assert(result);

   724     return result;

   725 }

   727 static PEP_color decrypt_color(PEP_STATUS status)

   728 {

   729     switch (status) {

   730     case PEP_UNENCRYPTED:

   731     case PEP_VERIFIED:

   732     case PEP_VERIFY_NO_KEY:

   733     case PEP_VERIFIED_AND_TRUSTED:

   734         return PEP_rating_unencrypted;

   736     case PEP_DECRYPTED:

   737         return PEP_rating_unreliable;

   739     case PEP_DECRYPTED_AND_VERIFIED:

   740         return PEP_rating_reliable;

   742     case PEP_DECRYPT_NO_KEY:

   743         return PEP_rating_have_no_key;

   745     case PEP_DECRYPT_WRONG_FORMAT:

   746     case PEP_CANNOT_DECRYPT_UNKNOWN:

   747         return PEP_rating_cannot_decrypt;

   749     default:

   750         return PEP_rating_undefined;

   751     }

   752 }

   754 static PEP_color key_color(PEP_SESSION session, const char *fpr)

   755 {

   756     PEP_comm_type comm_type = PEP_ct_unknown;

   758     assert(session);

   759     assert(fpr);

   761     PEP_STATUS status = get_key_rating(session, fpr, &comm_type);

   762     if (status != PEP_STATUS_OK)

   763         return PEP_rating_undefined;

   765     return _rating(comm_type, PEP_rating_undefined);

   766 }

   768 static PEP_color keylist_color(PEP_SESSION session, stringlist_t *keylist)

   769 {

   770     PEP_color color = PEP_rating_reliable;

   772     assert(keylist && keylist->value);

   773     if (keylist == NULL || keylist->value == NULL)

   774         return PEP_rating_undefined;

   776     stringlist_t *_kl;

   777     for (_kl = keylist; _kl && _kl->value; _kl = _kl->next) {

   778         PEP_comm_type ct;

   779         PEP_STATUS status;

   781         PEP_color _color = key_color(session, _kl->value);

   782         if (_color <= PEP_rating_mistrust)

   783             return _color;

   785         if (color == PEP_rating_undefined)

   786             color = _color;

   788         if (_color >= PEP_rating_reliable) {

   789             status = least_trust(session, _kl->value, &ct);

   790             if (status != PEP_STATUS_OK)

   791                 return PEP_rating_undefined;

   792             if (ct == PEP_ct_unknown)

   793                 color = PEP_rating_unencrypted_for_some;

   794             else

   795                 color = _rating(ct, color);

   796         }

   797         else if (_color == PEP_rating_unencrypted) {

   798             if (color > PEP_rating_unencrypted_for_some)

   799                 color = PEP_rating_unencrypted_for_some;

   800         }

   801     }

   803     return color;

   804 }

   806 static PEP_comm_type _get_comm_type(

   807     PEP_SESSION session,

   808     PEP_comm_type max_comm_type,

   809     pEp_identity *ident

   810     )

   811 {

   812     PEP_STATUS status = update_identity(session, ident);

   814     if (max_comm_type == PEP_ct_compromized)

   815         return PEP_ct_compromized;

   817     if (max_comm_type == PEP_ct_mistrusted)

   818         return PEP_ct_mistrusted;

   820     if (status == PEP_STATUS_OK) {

   821         if (ident->comm_type == PEP_ct_compromized)

   822             return PEP_ct_compromized;

   823         else if (ident->comm_type == PEP_ct_mistrusted)

   824             return PEP_ct_mistrusted;

   825         else

   826             return MIN(max_comm_type, ident->comm_type);

   827     }

   828     else {

   829         return PEP_ct_unknown;

   830     }

   831 }

   833 void import_attached_keys(PEP_SESSION session, const message *msg)

   834 {

   835     assert(session);

   836     assert(msg);

   838     bloblist_t *bl;

   839     for (bl = msg->attachments; bl && bl->value; bl = bl->next) {

   840         assert(bl && bl->value && bl->size);

   842         // workaround for Apple Mail bugs

   843         if (is_mime_type(bl, "application/x-apple-msg-attachment")) {

   844             if (is_fileending(bl, ".asc"))

   845                 import_key(session, bl->value, bl->size);

   846         }

   847         else if (bl->mime_type == NULL ||

   848                     is_mime_type(bl, "application/octet-stream")) {

   849             if (is_fileending(bl, ".pgp") || is_fileending(bl, ".gpg") ||

   850                     is_fileending(bl, ".key") || is_fileending(bl, ".asc"))

   851                 import_key(session, bl->value, bl->size);

   852         }

   853         else if (is_mime_type(bl, "application/pgp-keys")) {

   854             import_key(session, bl->value, bl->size);

   855         }

   856         else if (is_mime_type(bl, "text/plain")) {

   857             if (is_fileending(bl, ".pgp") || is_fileending(bl, ".gpg") ||

   858                     is_fileending(bl, ".key") || is_fileending(bl, ".asc"))

   859                 import_key(session, bl->value, bl->size);

   860         }

   861     }

   862     if(msg->from && msg->from->user_id && msg->from->address)

   863         update_identity(session, msg->from);

   864 }

   866 void attach_own_key(PEP_SESSION session, message *msg)

   867 {

   868     char *keydata;

   869     size_t size;

   870     bloblist_t *bl;

   872     assert(session);

   873     assert(msg);

   875     if (msg->dir == PEP_dir_incoming)

   876         return;

   878     assert(msg->from && msg->from->fpr);

   879     if (msg->from == NULL || msg->from->fpr == NULL)

   880         return;

   882     PEP_STATUS status = export_key(session, msg->from->fpr, &keydata, &size);

   883     assert(status == PEP_STATUS_OK);

   884     if (status != PEP_STATUS_OK)

   885         return;

   886     assert(size);

   888     bl = bloblist_add(msg->attachments, keydata, size, "application/pgp-keys",

   889             "pEpkey.asc");

   890     if (msg->attachments == NULL && bl)

   891         msg->attachments = bl;

   892 }

   894 PEP_cryptotech determine_encryption_format(message *msg)

   895 {

   896     assert(msg);

   898     if (is_PGP_message_text(msg->longmsg)) {

   899         msg->enc_format = PEP_enc_pieces;

   900         return PEP_crypt_OpenPGP;

   901     }

   902     else if (msg->attachments && msg->attachments->next &&

   903             is_mime_type(msg->attachments, "application/pgp-encrypted") &&

   904             is_PGP_message_text(msg->attachments->next->value)

   905         ) {

   906         msg->enc_format = PEP_enc_PGP_MIME;

   907         return PEP_crypt_OpenPGP;

   908     }

   909     else {

   910         msg->enc_format = PEP_enc_none;

   911         return PEP_crypt_none;

   912     }

   913 }

   915 DYNAMIC_API PEP_STATUS encrypt_message(

   916         PEP_SESSION session,

   917         message *src,

   918         stringlist_t * extra,

   919         message **dst,

   920         PEP_enc_format enc_format

   921     )

   922 {

   923     PEP_STATUS status = PEP_STATUS_OK;

   924     message * msg = NULL;

   925     stringlist_t * keys = NULL;

   927     assert(session);

   928     assert(src);

   929     assert(dst);

   930     assert(enc_format != PEP_enc_none);

   932     if (!(session && src && dst && enc_format != PEP_enc_none))

   933         return PEP_ILLEGAL_VALUE;

   935     if (src->dir == PEP_dir_incoming)

   936         return PEP_ILLEGAL_VALUE;

   938     determine_encryption_format(src);

   939     if (src->enc_format != PEP_enc_none)

   940         return PEP_ILLEGAL_VALUE;

   942     *dst = NULL;

   944     status = myself(session, src->from);

   945     if (status != PEP_STATUS_OK)

   946         goto pep_error;

   948     keys = new_stringlist(src->from->fpr);

   949     if (keys == NULL)

   950         goto enomem;

   952     stringlist_t *_k = keys;

   954     if (extra) {

   955         _k = stringlist_append(_k, extra);

   956         if (_k == NULL)

   957             goto enomem;

   958     }

   960     bool dest_keys_found = true;

   961     PEP_comm_type max_comm_type = PEP_ct_pEp;

   963     identity_list * _il;

   965     if ((_il = src->bcc) && _il->ident)

   966     {

   967         // BCC limited support:

   968         //     - App splits mails with BCC in multiple mails.

   969         //     - Each email is encrypted separately

   971         if(_il->next || src->to || src->cc)

   972         {

   973             // Only one Bcc with no other recipient allowed for now

   974             return PEP_ILLEGAL_VALUE;

   975         }

   977         PEP_STATUS _status = update_identity(session, _il->ident);

   978         if (_status != PEP_STATUS_OK) {

   979             status = _status;

   980             goto pep_error;

   981         }

   983         if (_il->ident->fpr && _il->ident->fpr[0]) {

   984             _k = stringlist_add(_k, _il->ident->fpr);

   985             if (_k == NULL)

   986                 goto enomem;

   987             max_comm_type = _get_comm_type(session, max_comm_type,

   988                                            _il->ident);

   989         }

   990         else {

   991             dest_keys_found = false;

   992             status = PEP_KEY_NOT_FOUND;

   993         }

   994     }

   995     else

   996     {

   997         for (_il = src->to; _il && _il->ident; _il = _il->next) {

   998             PEP_STATUS _status = update_identity(session, _il->ident);

   999             if (_status != PEP_STATUS_OK) {

  1000                 status = _status;

  1001                 goto pep_error;

  1002             }

  1004             if (_il->ident->fpr && _il->ident->fpr[0]) {

  1005                 _k = stringlist_add(_k, _il->ident->fpr);

  1006                 if (_k == NULL)

  1007                     goto enomem;

  1008                 max_comm_type = _get_comm_type(session, max_comm_type,

  1009                                                _il->ident);

  1010             }

  1011             else {

  1012                 dest_keys_found = false;

  1013                 status = PEP_KEY_NOT_FOUND;

  1014             }

  1015         }

  1017         for (_il = src->cc; _il && _il->ident; _il = _il->next) {

  1018             PEP_STATUS _status = update_identity(session, _il->ident);

  1019             if (_status != PEP_STATUS_OK)

  1020             {

  1021                 status = _status;

  1022                 goto pep_error;

  1023             }

  1025             if (_il->ident->fpr && _il->ident->fpr[0]) {

  1026                 _k = stringlist_add(_k, _il->ident->fpr);

  1027                 if (_k == NULL)

  1028                     goto enomem;

  1029                 max_comm_type = _get_comm_type(session, max_comm_type,

  1030                                                _il->ident);

  1031             }

  1032             else {

  1033                 dest_keys_found = false;

  1034                 status = PEP_KEY_NOT_FOUND;

  1035             }

  1036         }

  1037     }

  1039     if (!dest_keys_found ||

  1040         stringlist_length(keys) == 0 ||

  1041         _rating(max_comm_type,

  1042                 PEP_rating_undefined) < PEP_rating_reliable)

  1043     {

  1044         free_stringlist(keys);

  1045         if (!session->passive_mode)

  1046             attach_own_key(session, src);

  1047         return PEP_UNENCRYPTED;

  1048     }

  1049     else {

  1050         msg = clone_to_empty_message(src);

  1051         if (msg == NULL)

  1052             goto enomem;

  1054         attach_own_key(session, src);

  1056         switch (enc_format) {

  1057         case PEP_enc_PGP_MIME:

  1058         case PEP_enc_PEP: // BUG: should be implemented extra

  1059             status = encrypt_PGP_MIME(session, src, keys, msg);

  1060             break;

  1062         case PEP_enc_pieces:

  1063             status = encrypt_PGP_in_pieces(session, src, keys, msg);

  1064             break;

  1066         /* case PEP_enc_PEP:

  1067             // TODO: implement

  1068             NOT_IMPLEMENTED */

  1070         default:

  1071             assert(0);

  1072             status = PEP_ILLEGAL_VALUE;

  1073             goto pep_error;

  1074         }

  1076         if (status == PEP_OUT_OF_MEMORY)

  1077             goto enomem;

  1079         if (status != PEP_STATUS_OK)

  1080             goto pep_error;

  1081     }

  1083     free_stringlist(keys);

  1085     if (msg && msg->shortmsg == NULL) {

  1086         msg->shortmsg = strdup("pEp");

  1087         assert(msg->shortmsg);

  1088     }

  1090     if (msg)

  1091         decorate_message(msg, PEP_rating_undefined, NULL);

  1093     *dst = msg;

  1094     return status;

  1096 enomem:

  1097     status = PEP_OUT_OF_MEMORY;

  1099 pep_error:

  1100     free_stringlist(keys);

  1101     free_message(msg);

  1103     return status;

  1104 }

  1106 DYNAMIC_API PEP_STATUS decrypt_message(

  1107         PEP_SESSION session,

  1108         message *src,

  1109         message **dst,

  1110         stringlist_t **keylist,

  1111         PEP_color *color

  1112     )

  1113 {

  1114     PEP_STATUS status = PEP_STATUS_OK;

  1115     PEP_STATUS decrypt_status = PEP_CANNOT_DECRYPT_UNKNOWN;

  1116     message *msg = NULL;

  1117     char *ctext;

  1118     size_t csize;

  1119     char *ptext = NULL;

  1120     size_t psize;

  1121     stringlist_t *_keylist = NULL;

  1123     assert(session);

  1124     assert(src);

  1125     assert(dst);

  1126     assert(keylist);

  1127     assert(color);

  1129     if (!(session && src && dst && keylist && color))

  1130         return PEP_ILLEGAL_VALUE;

  1132     import_attached_keys(session, src);

  1133     PEP_cryptotech crypto = determine_encryption_format(src);

  1135     *dst = NULL;

  1136     *keylist = NULL;

  1137     *color = PEP_rating_undefined;

  1139     switch (src->enc_format) {

  1140         case PEP_enc_none:

  1141             *color = PEP_rating_unencrypted;

  1142             return PEP_UNENCRYPTED;

  1144         case PEP_enc_PGP_MIME:

  1145             ctext = src->attachments->next->value;

  1146             csize = src->attachments->next->size;

  1147             break;

  1149         case PEP_enc_pieces:

  1150             ctext = src->longmsg;

  1151             csize = strlen(ctext);

  1152             break;

  1154         default:

  1155             NOT_IMPLEMENTED

  1156     }

  1157     status = cryptotech[crypto].decrypt_and_verify(session, ctext,

  1158                                                    csize, &ptext, &psize, &_keylist);

  1159     if (status > PEP_CANNOT_DECRYPT_UNKNOWN)

  1160         goto pep_error;

  1162     decrypt_status = status;

  1164     if (ptext) {

  1165         switch (src->enc_format) {

  1166             case PEP_enc_PGP_MIME:

  1167                 status = mime_decode_message(ptext, psize, &msg);

  1168                 if (status != PEP_STATUS_OK)

  1169                     goto pep_error;

  1170                 break;

  1172             case PEP_enc_pieces:

  1173                 msg = clone_to_empty_message(src);

  1174                 if (msg == NULL)

  1175                     goto enomem;

  1177                 msg->longmsg = strdup(ptext);

  1178                 assert(msg->longmsg);

  1179                 if (msg->longmsg == NULL)

  1180                     goto enomem;

  1182                 bloblist_t *_m = msg->attachments;

  1183                 if (_m == NULL && src->attachments && src->attachments->value) {

  1184                     msg->attachments = new_bloblist(NULL, 0, NULL, NULL);

  1185                     _m = msg->attachments;

  1186                 }

  1188                 bloblist_t *_s;

  1189                 for (_s = src->attachments; _s && _s->value; _s = _s->next) {

  1190                     if (is_encrypted_attachment(_s)) {

  1191                         stringlist_t *_keylist = NULL;

  1192                         char *attctext;

  1193                         size_t attcsize;

  1195                         attctext = _s->value;

  1196                         attcsize = _s->size;

  1198                         status = decrypt_and_verify(session, attctext, attcsize,

  1199                                 &ptext, &psize, &_keylist);

  1200                         free_stringlist(_keylist);

  1202                         if (ptext) {

  1203                             if (is_encrypted_html_attachment(_s)) {

  1204                                 msg->longmsg_formatted = strdup(ptext);

  1205                                 assert(msg->longmsg_formatted);

  1206                                 if (msg->longmsg_formatted == NULL)

  1207                                     goto pep_error;

  1208                             }

  1209                             else {

  1210                                 char * mime_type = "application/octet-stream";

  1211                                 char * filename =

  1212                                     without_double_ending(_s->filename);

  1213                                 if (filename == NULL)

  1214                                     goto enomem;

  1216                                 char *_ptext = malloc(psize);

  1217                                 assert(_ptext);

  1218                                 if (_ptext == NULL)

  1219                                     goto enomem;

  1220                                 memcpy(_ptext, ptext, psize);

  1222                                 _m = bloblist_add(_m, _ptext, psize, mime_type,

  1223                                     filename);

  1224                                 if (_m == NULL)

  1225                                     goto enomem;

  1227                                 if (msg->attachments == NULL)

  1228                                     msg->attachments = _m;

  1229                             }

  1230                         }

  1231                         else {

  1232                             char *copy = malloc(_s->size);

  1233                             assert(copy);

  1234                             if (copy == NULL)

  1235                                 goto enomem;

  1236                             memcpy(copy, _s->value, _s->size);

  1237                             _m = bloblist_add(_m, copy, _s->size, _s->mime_type, _s->filename);

  1238                             if (_m == NULL)

  1239                                 goto enomem;

  1240                         }

  1241                     }

  1242                     else {

  1243                         char *copy = malloc(_s->size);

  1244                         assert(copy);

  1245                         if (copy == NULL)

  1246                             goto enomem;

  1247                         memcpy(copy, _s->value, _s->size);

  1248                         _m = bloblist_add(_m, copy, _s->size, _s->mime_type, _s->filename);

  1249                         if (_m == NULL)

  1250                             goto enomem;

  1251                     }

  1252                 }

  1254                 break;

  1256             default:

  1257                 // BUG: must implement more

  1258                 NOT_IMPLEMENTED

  1259         }

  1261         switch (src->enc_format) {

  1262             case PEP_enc_PGP_MIME:

  1263             case PEP_enc_pieces:

  1264                 status = copy_fields(msg, src);

  1265                 if (status != PEP_STATUS_OK)

  1266                     goto pep_error;

  1268                 if (src->shortmsg == NULL || strcmp(src->shortmsg, "pEp") == 0)

  1269                 {

  1270                     char * shortmsg;

  1271                     char * longmsg;

  1273                     int r = seperate_short_and_long(msg->longmsg, &shortmsg,

  1274                             &longmsg);

  1275                     if (r == -1)

  1276                         goto enomem;

  1278                     free(msg->shortmsg);

  1279                     free(msg->longmsg);

  1281                     msg->shortmsg = shortmsg;

  1282                     msg->longmsg = longmsg;

  1283                 }

  1284                 else {

  1285                     msg->shortmsg = strdup(src->shortmsg);

  1286                     assert(msg->shortmsg);

  1287                     if (msg->shortmsg == NULL)

  1288                         goto enomem;

  1289                 }

  1290                 break;

  1292             default:

  1293                 // BUG: must implement more

  1294                 NOT_IMPLEMENTED

  1295         }

  1297         import_attached_keys(session, msg);

  1299         if(decrypt_status == PEP_DECRYPTED){

  1301             // In case message did decrypt, but no valid signature could be found

  1302             // then retry decrypt+verify after importing key.

  1303             // TODO optimize if import_attached_keys didn't import any key

  1305             char *re_ptext = NULL;

  1306             size_t re_psize;

  1308             free_stringlist(_keylist);

  1309             _keylist = NULL;

  1311             status = cryptotech[crypto].decrypt_and_verify(session, ctext,

  1312                 csize, &re_ptext, &re_psize, &_keylist);

  1314             if(re_ptext)

  1315                 free(re_ptext);

  1317             if (status > PEP_CANNOT_DECRYPT_UNKNOWN)

  1318                 goto pep_error;

  1320             decrypt_status = status;

  1321         }

  1323         *color = decrypt_color(decrypt_status);

  1325         if (*color > PEP_rating_mistrust) {

  1326             PEP_color kl_color = PEP_rating_undefined;

  1328             if (_keylist)

  1329                 kl_color = keylist_color(session, _keylist);

  1331             if (kl_color <= PEP_rating_mistrust) {

  1332                 *color = kl_color;

  1333             }

  1334             else if (*color >= PEP_rating_reliable &&

  1335                      kl_color < PEP_rating_reliable) {

  1336                 *color = PEP_rating_unreliable;

  1337             }

  1338             else if (*color >= PEP_rating_reliable &&

  1339                      kl_color >= PEP_rating_reliable) {

  1340                 if (!(src->from && src->from->user_id && src->from->user_id[0])) {

  1341                     *color = PEP_rating_unreliable;

  1342                 }

  1343                 else {

  1344                     char *fpr = _keylist->value;

  1345                     pEp_identity *_from = new_identity(src->from->address, fpr,

  1346                                                        src->from->user_id, src->from->username);

  1347                     if (_from == NULL)

  1348                         goto enomem;

  1349                     status = update_identity(session, _from);

  1350                     if (_from->comm_type != PEP_ct_unknown)

  1351                         *color = _rating(_from->comm_type, PEP_rating_undefined);

  1352                     free_identity(_from);

  1353                     if (status != PEP_STATUS_OK)

  1354                         goto pep_error;

  1355                 }

  1356             }

  1357         }

  1358     }

  1360     if (msg)

  1361         decorate_message(msg, *color, _keylist);

  1363     *dst = msg;

  1364     *keylist = _keylist;

  1366     return PEP_STATUS_OK;

  1368 enomem:

  1369     status = PEP_OUT_OF_MEMORY;

  1371 pep_error:

  1372     free_message(msg);

  1373     free_stringlist(_keylist);

  1375     return status;

  1376 }

  1378 DYNAMIC_API PEP_STATUS outgoing_message_color(

  1379         PEP_SESSION session,

  1380         message *msg,

  1381         PEP_color *color

  1382     )

  1383 {

  1384     PEP_STATUS status = PEP_STATUS_OK;

  1385     PEP_comm_type max_comm_type = PEP_ct_pEp;

  1386     bool comm_type_determined = false;

  1387     identity_list * il;

  1389     assert(session);

  1390     assert(msg);

  1391     assert(msg->from);

  1392     assert(msg->dir == PEP_dir_outgoing);

  1393     assert(color);

  1395     if (!(session && msg && color))

  1396         return PEP_ILLEGAL_VALUE;

  1398     if (msg->from == NULL || msg->dir != PEP_dir_outgoing)

  1399         return PEP_ILLEGAL_VALUE;

  1401     *color = PEP_rating_undefined;

  1403     status = myself(session, msg->from);

  1404     if (status != PEP_STATUS_OK)

  1405         return status;

  1407     for (il = msg->to; il != NULL; il = il->next)

  1408     {

  1409         if (il->ident)

  1410         {

  1411             update_identity(session, il->ident);

  1412             max_comm_type = _get_comm_type(session, max_comm_type,

  1413                     il->ident);

  1414             comm_type_determined = true;

  1415         }

  1416     }

  1418     for (il = msg->cc; il != NULL; il = il->next)

  1419     {

  1420         if (il->ident)

  1421         {

  1422             update_identity(session, il->ident);

  1423             max_comm_type = _get_comm_type(session, max_comm_type,

  1424                     il->ident);

  1425             comm_type_determined = true;

  1426         }

  1427     }

  1429     for (il = msg->bcc; il != NULL; il = il->next)

  1430     {

  1431         if (il->ident)

  1432         {

  1433             update_identity(session, il->ident);

  1434             max_comm_type = _get_comm_type(session, max_comm_type,

  1435                                            il->ident);

  1436             comm_type_determined = true;

  1437         }

  1438     }

  1440     if (comm_type_determined == false)

  1441         *color = PEP_rating_undefined;

  1442     else

  1443         *color = MAX(_rating(max_comm_type, PEP_rating_undefined),

  1444                 PEP_rating_unencrypted);

  1446     return PEP_STATUS_OK;

  1447 }

  1449 DYNAMIC_API PEP_STATUS identity_color(

  1450         PEP_SESSION session,

  1451         pEp_identity *ident,

  1452         PEP_color *color

  1453     )

  1454 {

  1455     PEP_STATUS status = PEP_STATUS_OK;

  1457     assert(session);

  1458     assert(ident);

  1459     assert(color);

  1461     if (!(session && ident && color))

  1462         return PEP_ILLEGAL_VALUE;

  1464     if (ident->me)

  1465         status = myself(session, ident);

  1466     else

  1467         status = update_identity(session, ident);

  1469     if (status == PEP_STATUS_OK)

  1470         *color = _rating(ident->comm_type, PEP_rating_undefined);

  1472     return status;

  1473 }

  1475 DYNAMIC_API PEP_STATUS get_binary_path(PEP_cryptotech tech, const char **path)

  1476 {

  1477     PEP_STATUS status = PEP_STATUS_OK;

  1479     assert(path);

  1480     if (path == NULL)

  1481         return PEP_ILLEGAL_VALUE;

  1483     if (cryptotech[tech].binary_path == NULL)

  1484         *path = NULL;

  1485     else

  1486         status = cryptotech[tech].binary_path(path);

  1488     return status;

  1489 }

author	Volker Birk <vb@pep-project.org>
	Thu, 19 May 2016 17:54:29 +0200
changeset 668	293e7f009a3d
parent 558	71a650d71006
child 694	7e236f95f1e4
permissions	-rw-r--r--