2008-08-29 14:29:00 +00:00
|
|
|
/*
|
|
|
|
* Copyright 2008 Juan Lang
|
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
* License along with this library; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include <assert.h>
|
|
|
|
#include <stdarg.h>
|
|
|
|
|
|
|
|
#define NONAMELESSUNION
|
|
|
|
#include "windef.h"
|
|
|
|
#include "winbase.h"
|
|
|
|
#include "wincrypt.h"
|
|
|
|
#include "wine/debug.h"
|
|
|
|
#include "crypt32_private.h"
|
|
|
|
|
|
|
|
WINE_DEFAULT_DEBUG_CHANNEL(crypt);
|
|
|
|
|
|
|
|
PCCTL_CONTEXT WINAPI CertCreateCTLContext(DWORD dwMsgAndCertEncodingType,
|
|
|
|
const BYTE *pbCtlEncoded, DWORD cbCtlEncoded)
|
|
|
|
{
|
|
|
|
PCTL_CONTEXT ctl = NULL;
|
|
|
|
HCRYPTMSG msg;
|
|
|
|
BOOL ret;
|
|
|
|
BYTE *content = NULL;
|
|
|
|
DWORD contentSize = 0, size;
|
|
|
|
PCTL_INFO ctlInfo = NULL;
|
|
|
|
|
|
|
|
TRACE("(%08x, %p, %d)\n", dwMsgAndCertEncodingType, pbCtlEncoded,
|
|
|
|
cbCtlEncoded);
|
|
|
|
|
|
|
|
if (GET_CERT_ENCODING_TYPE(dwMsgAndCertEncodingType) != X509_ASN_ENCODING)
|
|
|
|
{
|
|
|
|
SetLastError(E_INVALIDARG);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
if (!pbCtlEncoded || !cbCtlEncoded)
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INVALID_DATA);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
msg = CryptMsgOpenToDecode(PKCS_7_ASN_ENCODING | X509_ASN_ENCODING, 0, 0,
|
|
|
|
0, NULL, NULL);
|
|
|
|
if (!msg)
|
|
|
|
return NULL;
|
|
|
|
ret = CryptMsgUpdate(msg, pbCtlEncoded, cbCtlEncoded, TRUE);
|
|
|
|
if (!ret)
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INVALID_DATA);
|
|
|
|
goto end;
|
|
|
|
}
|
|
|
|
/* Check that it's really a CTL */
|
|
|
|
ret = CryptMsgGetParam(msg, CMSG_INNER_CONTENT_TYPE_PARAM, 0, NULL, &size);
|
|
|
|
if (ret)
|
|
|
|
{
|
|
|
|
char *innerContent = CryptMemAlloc(size);
|
|
|
|
|
|
|
|
if (innerContent)
|
|
|
|
{
|
|
|
|
ret = CryptMsgGetParam(msg, CMSG_INNER_CONTENT_TYPE_PARAM, 0,
|
|
|
|
innerContent, &size);
|
|
|
|
if (ret)
|
|
|
|
{
|
|
|
|
if (strcmp(innerContent, szOID_CTL))
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_INVALID_DATA);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
CryptMemFree(innerContent);
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_OUTOFMEMORY);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if (!ret)
|
|
|
|
goto end;
|
|
|
|
ret = CryptMsgGetParam(msg, CMSG_CONTENT_PARAM, 0, NULL, &contentSize);
|
|
|
|
if (!ret)
|
|
|
|
goto end;
|
|
|
|
content = CryptMemAlloc(contentSize);
|
|
|
|
if (content)
|
|
|
|
{
|
|
|
|
ret = CryptMsgGetParam(msg, CMSG_CONTENT_PARAM, 0, content,
|
|
|
|
&contentSize);
|
|
|
|
if (ret)
|
|
|
|
{
|
|
|
|
ret = CryptDecodeObjectEx(dwMsgAndCertEncodingType, PKCS_CTL,
|
|
|
|
content, contentSize, CRYPT_DECODE_ALLOC_FLAG, NULL,
|
|
|
|
(BYTE *)&ctlInfo, &size);
|
|
|
|
if (ret)
|
|
|
|
{
|
|
|
|
ctl = (PCTL_CONTEXT)Context_CreateDataContext(
|
|
|
|
sizeof(CTL_CONTEXT));
|
|
|
|
if (ctl)
|
|
|
|
{
|
|
|
|
BYTE *data = CryptMemAlloc(cbCtlEncoded);
|
|
|
|
|
|
|
|
if (data)
|
|
|
|
{
|
|
|
|
memcpy(data, pbCtlEncoded, cbCtlEncoded);
|
|
|
|
ctl->dwMsgAndCertEncodingType =
|
|
|
|
X509_ASN_ENCODING | PKCS_7_ASN_ENCODING;
|
|
|
|
ctl->pbCtlEncoded = data;
|
|
|
|
ctl->cbCtlEncoded = cbCtlEncoded;
|
|
|
|
ctl->pCtlInfo = ctlInfo;
|
|
|
|
ctl->hCertStore = NULL;
|
|
|
|
ctl->hCryptMsg = msg;
|
|
|
|
ctl->pbCtlContext = content;
|
|
|
|
ctl->cbCtlContext = contentSize;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_OUTOFMEMORY);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_OUTOFMEMORY);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_OUTOFMEMORY);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
|
|
|
|
end:
|
|
|
|
if (!ret)
|
|
|
|
{
|
|
|
|
CryptMemFree(ctl);
|
|
|
|
ctl = NULL;
|
|
|
|
LocalFree(ctlInfo);
|
|
|
|
CryptMemFree(content);
|
|
|
|
CryptMsgClose(msg);
|
|
|
|
}
|
|
|
|
return (PCCTL_CONTEXT)ctl;
|
|
|
|
}
|
|
|
|
|
2008-08-29 14:30:45 +00:00
|
|
|
PCCTL_CONTEXT WINAPI CertDuplicateCTLContext(PCCTL_CONTEXT pCtlContext)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pCtlContext);
|
|
|
|
Context_AddRef((void *)pCtlContext, sizeof(CTL_CONTEXT));
|
|
|
|
return pCtlContext;
|
|
|
|
}
|
|
|
|
|
2008-08-29 14:29:00 +00:00
|
|
|
static void CTLDataContext_Free(void *context)
|
|
|
|
{
|
|
|
|
PCTL_CONTEXT ctlContext = (PCTL_CONTEXT)context;
|
|
|
|
|
|
|
|
CryptMsgClose(ctlContext->hCryptMsg);
|
|
|
|
CryptMemFree(ctlContext->pbCtlEncoded);
|
|
|
|
CryptMemFree(ctlContext->pbCtlContext);
|
|
|
|
LocalFree(ctlContext->pCtlInfo);
|
|
|
|
}
|
|
|
|
|
|
|
|
BOOL WINAPI CertFreeCTLContext(PCCTL_CONTEXT pCTLContext)
|
|
|
|
{
|
|
|
|
TRACE("(%p)\n", pCTLContext);
|
|
|
|
|
|
|
|
if (pCTLContext)
|
|
|
|
Context_Release((void *)pCTLContext, sizeof(CTL_CONTEXT),
|
|
|
|
CTLDataContext_Free);
|
|
|
|
return TRUE;
|
|
|
|
}
|
2008-08-29 14:30:19 +00:00
|
|
|
|
|
|
|
DWORD WINAPI CertEnumCTLContextProperties(PCCTL_CONTEXT pCTLContext,
|
|
|
|
DWORD dwPropId)
|
|
|
|
{
|
|
|
|
PCONTEXT_PROPERTY_LIST properties = Context_GetProperties(
|
|
|
|
(void *)pCTLContext, sizeof(CTL_CONTEXT));
|
|
|
|
DWORD ret;
|
|
|
|
|
|
|
|
TRACE("(%p, %d)\n", pCTLContext, dwPropId);
|
|
|
|
|
|
|
|
if (properties)
|
|
|
|
ret = ContextPropertyList_EnumPropIDs(properties, dwPropId);
|
|
|
|
else
|
|
|
|
ret = 0;
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static BOOL CTLContext_SetProperty(PCCTL_CONTEXT context, DWORD dwPropId,
|
|
|
|
DWORD dwFlags, const void *pvData);
|
|
|
|
|
|
|
|
static BOOL CTLContext_GetHashProp(PCCTL_CONTEXT context, DWORD dwPropId,
|
|
|
|
ALG_ID algID, const BYTE *toHash, DWORD toHashLen, void *pvData,
|
|
|
|
DWORD *pcbData)
|
|
|
|
{
|
|
|
|
BOOL ret = CryptHashCertificate(0, algID, 0, toHash, toHashLen, pvData,
|
|
|
|
pcbData);
|
|
|
|
if (ret)
|
|
|
|
{
|
|
|
|
CRYPT_DATA_BLOB blob = { *pcbData, pvData };
|
|
|
|
|
|
|
|
ret = CTLContext_SetProperty(context, dwPropId, 0, &blob);
|
|
|
|
}
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static BOOL CTLContext_GetProperty(PCCTL_CONTEXT context, DWORD dwPropId,
|
|
|
|
void *pvData, DWORD *pcbData)
|
|
|
|
{
|
|
|
|
PCONTEXT_PROPERTY_LIST properties =
|
|
|
|
Context_GetProperties(context, sizeof(CTL_CONTEXT));
|
|
|
|
BOOL ret;
|
|
|
|
CRYPT_DATA_BLOB blob;
|
|
|
|
|
|
|
|
TRACE("(%p, %d, %p, %p)\n", context, dwPropId, pvData, pcbData);
|
|
|
|
|
|
|
|
if (properties)
|
|
|
|
ret = ContextPropertyList_FindProperty(properties, dwPropId, &blob);
|
|
|
|
else
|
|
|
|
ret = FALSE;
|
|
|
|
if (ret)
|
|
|
|
{
|
|
|
|
if (!pvData)
|
|
|
|
*pcbData = blob.cbData;
|
|
|
|
else if (*pcbData < blob.cbData)
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_MORE_DATA);
|
|
|
|
*pcbData = blob.cbData;
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
memcpy(pvData, blob.pbData, blob.cbData);
|
|
|
|
*pcbData = blob.cbData;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
/* Implicit properties */
|
|
|
|
switch (dwPropId)
|
|
|
|
{
|
|
|
|
case CERT_SHA1_HASH_PROP_ID:
|
|
|
|
ret = CTLContext_GetHashProp(context, dwPropId, CALG_SHA1,
|
|
|
|
context->pbCtlEncoded, context->cbCtlEncoded, pvData, pcbData);
|
|
|
|
break;
|
|
|
|
case CERT_MD5_HASH_PROP_ID:
|
|
|
|
ret = CTLContext_GetHashProp(context, dwPropId, CALG_MD5,
|
|
|
|
context->pbCtlEncoded, context->cbCtlEncoded, pvData, pcbData);
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
SetLastError(CRYPT_E_NOT_FOUND);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
TRACE("returning %d\n", ret);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
BOOL WINAPI CertGetCTLContextProperty(PCCTL_CONTEXT pCTLContext,
|
|
|
|
DWORD dwPropId, void *pvData, DWORD *pcbData)
|
|
|
|
{
|
|
|
|
BOOL ret;
|
|
|
|
|
|
|
|
TRACE("(%p, %d, %p, %p)\n", pCTLContext, dwPropId, pvData, pcbData);
|
|
|
|
|
|
|
|
switch (dwPropId)
|
|
|
|
{
|
|
|
|
case 0:
|
|
|
|
case CERT_CERT_PROP_ID:
|
|
|
|
case CERT_CRL_PROP_ID:
|
|
|
|
case CERT_CTL_PROP_ID:
|
|
|
|
SetLastError(E_INVALIDARG);
|
|
|
|
ret = FALSE;
|
|
|
|
break;
|
|
|
|
case CERT_ACCESS_STATE_PROP_ID:
|
|
|
|
if (!pvData)
|
|
|
|
{
|
|
|
|
*pcbData = sizeof(DWORD);
|
|
|
|
ret = TRUE;
|
|
|
|
}
|
|
|
|
else if (*pcbData < sizeof(DWORD))
|
|
|
|
{
|
|
|
|
SetLastError(ERROR_MORE_DATA);
|
|
|
|
*pcbData = sizeof(DWORD);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
if (pCTLContext->hCertStore)
|
|
|
|
ret = CertGetStoreProperty(pCTLContext->hCertStore, dwPropId,
|
|
|
|
pvData, pcbData);
|
|
|
|
else
|
|
|
|
*(DWORD *)pvData = 0;
|
|
|
|
ret = TRUE;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
ret = CTLContext_GetProperty(pCTLContext, dwPropId, pvData,
|
|
|
|
pcbData);
|
|
|
|
}
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static BOOL CTLContext_SetProperty(PCCTL_CONTEXT context, DWORD dwPropId,
|
|
|
|
DWORD dwFlags, const void *pvData)
|
|
|
|
{
|
|
|
|
PCONTEXT_PROPERTY_LIST properties =
|
|
|
|
Context_GetProperties(context, sizeof(CTL_CONTEXT));
|
|
|
|
BOOL ret;
|
|
|
|
|
|
|
|
TRACE("(%p, %d, %08x, %p)\n", context, dwPropId, dwFlags, pvData);
|
|
|
|
|
|
|
|
if (!properties)
|
|
|
|
ret = FALSE;
|
|
|
|
else if (!pvData)
|
|
|
|
{
|
|
|
|
ContextPropertyList_RemoveProperty(properties, dwPropId);
|
|
|
|
ret = TRUE;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
switch (dwPropId)
|
|
|
|
{
|
|
|
|
case CERT_AUTO_ENROLL_PROP_ID:
|
|
|
|
case CERT_CTL_USAGE_PROP_ID: /* same as CERT_ENHKEY_USAGE_PROP_ID */
|
|
|
|
case CERT_DESCRIPTION_PROP_ID:
|
|
|
|
case CERT_FRIENDLY_NAME_PROP_ID:
|
|
|
|
case CERT_HASH_PROP_ID:
|
|
|
|
case CERT_KEY_IDENTIFIER_PROP_ID:
|
|
|
|
case CERT_MD5_HASH_PROP_ID:
|
|
|
|
case CERT_NEXT_UPDATE_LOCATION_PROP_ID:
|
|
|
|
case CERT_PUBKEY_ALG_PARA_PROP_ID:
|
|
|
|
case CERT_PVK_FILE_PROP_ID:
|
|
|
|
case CERT_SIGNATURE_HASH_PROP_ID:
|
|
|
|
case CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID:
|
|
|
|
case CERT_SUBJECT_NAME_MD5_HASH_PROP_ID:
|
|
|
|
case CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID:
|
|
|
|
case CERT_ENROLLMENT_PROP_ID:
|
|
|
|
case CERT_CROSS_CERT_DIST_POINTS_PROP_ID:
|
|
|
|
case CERT_RENEWAL_PROP_ID:
|
|
|
|
{
|
|
|
|
PCRYPT_DATA_BLOB blob = (PCRYPT_DATA_BLOB)pvData;
|
|
|
|
|
|
|
|
ret = ContextPropertyList_SetProperty(properties, dwPropId,
|
|
|
|
blob->pbData, blob->cbData);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
case CERT_DATE_STAMP_PROP_ID:
|
|
|
|
ret = ContextPropertyList_SetProperty(properties, dwPropId,
|
|
|
|
(const BYTE *)pvData, sizeof(FILETIME));
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
FIXME("%d: stub\n", dwPropId);
|
|
|
|
ret = FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
TRACE("returning %d\n", ret);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
BOOL WINAPI CertSetCTLContextProperty(PCCTL_CONTEXT pCTLContext,
|
|
|
|
DWORD dwPropId, DWORD dwFlags, const void *pvData)
|
|
|
|
{
|
|
|
|
BOOL ret;
|
|
|
|
|
|
|
|
TRACE("(%p, %d, %08x, %p)\n", pCTLContext, dwPropId, dwFlags, pvData);
|
|
|
|
|
|
|
|
/* Handle special cases for "read-only"/invalid prop IDs. Windows just
|
|
|
|
* crashes on most of these, I'll be safer.
|
|
|
|
*/
|
|
|
|
switch (dwPropId)
|
|
|
|
{
|
|
|
|
case 0:
|
|
|
|
case CERT_ACCESS_STATE_PROP_ID:
|
|
|
|
case CERT_CERT_PROP_ID:
|
|
|
|
case CERT_CRL_PROP_ID:
|
|
|
|
case CERT_CTL_PROP_ID:
|
|
|
|
SetLastError(E_INVALIDARG);
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
ret = CTLContext_SetProperty(pCTLContext, dwPropId, dwFlags, pvData);
|
|
|
|
TRACE("returning %d\n", ret);
|
|
|
|
return ret;
|
|
|
|
}
|