dlls/crypt32/pfx.c

   1 /*
   2  * Copyright 2019 Hans Leidekker for CodeWeavers
   3  *
   4  * This library is free software; you can redistribute it and/or
   5  * modify it under the terms of the GNU Lesser General Public
   6  * License as published by the Free Software Foundation; either
   7  * version 2.1 of the License, or (at your option) any later version.
   8  *
   9  * This library is distributed in the hope that it will be useful,
  10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  12  * Lesser General Public License for more details.
  13  *
  14  * You should have received a copy of the GNU Lesser General Public
  15  * License along with this library; if not, write to the Free Software
  16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  17  */
  18
  19 #include <stdarg.h>
  20 #include <stdlib.h>
  21
  22 #include "ntstatus.h"
  23 #define WIN32_NO_STATUS
  24 #include "windef.h"
  25 #include "winbase.h"
  26 #include "wincrypt.h"
  27 #include "snmp.h"
  28 #include "crypt32_private.h"
  29
  30 #include "wine/debug.h"
  31 #include "wine/heap.h"
  32
  33 WINE_DEFAULT_DEBUG_CHANNEL(crypt);
  34
  35 static HCRYPTPROV import_key( struct cert_store_data *data, DWORD flags )
  36 {
  37     HCRYPTPROV prov = 0;
  38     HCRYPTKEY cryptkey;
  39     DWORD size, acquire_flags;
  40     void *key;
  41     struct import_store_key_params params = { data, NULL, &size };
  42
  43     if (CRYPT32_CALL( import_store_key, &params ) != STATUS_BUFFER_TOO_SMALL) return 0;
  44
  45     acquire_flags = (flags & CRYPT_MACHINE_KEYSET) | CRYPT_NEWKEYSET;
  46     if (!CryptAcquireContextW( &prov, NULL, MS_ENHANCED_PROV_W, PROV_RSA_FULL, acquire_flags ))
  47     {
  48         if (GetLastError() != NTE_EXISTS) return 0;
  49
  50         acquire_flags &= ~CRYPT_NEWKEYSET;
  51         if (!CryptAcquireContextW( &prov, NULL, MS_ENHANCED_PROV_W, PROV_RSA_FULL, acquire_flags ))
  52         {
  53             WARN( "CryptAcquireContextW failed %08x\n", GetLastError() );
  54             return 0;
  55         }
  56     }
  57
  58     params.buf = key = malloc( size );
  59     if (CRYPT32_CALL( import_store_key, &params ) ||
  60         !CryptImportKey( prov, key, size, 0, flags & CRYPT_EXPORTABLE, &cryptkey ))
  61     {
  62         WARN( "CryptImportKey failed %08x\n", GetLastError() );
  63         CryptReleaseContext( prov, 0 );
  64         free( key );
  65         return 0;
  66     }
  67     CryptDestroyKey( cryptkey );
  68     free( key );
  69     return prov;
  70 }
  71
  72 static BOOL set_key_context( const void *ctx, HCRYPTPROV prov )
  73 {
  74     CERT_KEY_CONTEXT key_ctx;
  75     key_ctx.cbSize     = sizeof(key_ctx);
  76     key_ctx.hCryptProv = prov;
  77     key_ctx.dwKeySpec  = AT_KEYEXCHANGE;
  78     return CertSetCertificateContextProperty( ctx, CERT_KEY_CONTEXT_PROP_ID, 0, &key_ctx );
  79 }
  80
  81 static WCHAR *get_provider_property( HCRYPTPROV prov, DWORD prop_id, DWORD *len )
  82 {
  83     DWORD size = 0;
  84     WCHAR *ret;
  85     char *str;
  86
  87     CryptGetProvParam( prov, prop_id, NULL, &size, 0 );
  88     if (!size) return NULL;
  89     if (!(str = CryptMemAlloc( size ))) return NULL;
  90     CryptGetProvParam( prov, prop_id, (BYTE *)str, &size, 0 );
  91
  92     *len = MultiByteToWideChar( CP_ACP, 0, str, -1, NULL, 0 );
  93     if ((ret = CryptMemAlloc( *len * sizeof(WCHAR) ))) MultiByteToWideChar( CP_ACP, 0, str, -1, ret, *len );
  94     CryptMemFree( str );
  95     return ret;
  96 }
  97
  98 static BOOL set_key_prov_info( const void *ctx, HCRYPTPROV prov )
  99 {
 100     CRYPT_KEY_PROV_INFO *prov_info;
 101     DWORD size, len_container, len_name;
 102     WCHAR *ptr, *container, *name;
 103     BOOL ret;
 104
 105     if (!(container = get_provider_property( prov, PP_CONTAINER, &len_container ))) return FALSE;
 106     if (!(name = get_provider_property( prov, PP_NAME, &len_name )))
 107     {
 108         CryptMemFree( container );
 109         return FALSE;
 110     }
 111     if (!(prov_info = CryptMemAlloc( sizeof(*prov_info) + (len_container + len_name) * sizeof(WCHAR) )))
 112     {
 113         CryptMemFree( container );
 114         CryptMemFree( name );
 115         return FALSE;
 116     }
 117
 118     ptr = (WCHAR *)(prov_info + 1);
 119     prov_info->pwszContainerName = ptr;
 120     lstrcpyW( prov_info->pwszContainerName, container );
 121
 122     ptr += len_container;
 123     prov_info->pwszProvName = ptr;
 124     lstrcpyW( prov_info->pwszProvName, name );
 125
 126     size = sizeof(prov_info->dwProvType);
 127     CryptGetProvParam( prov, PP_PROVTYPE, (BYTE *)&prov_info->dwProvType, &size, 0 );
 128
 129     prov_info->dwFlags     = 0;
 130     prov_info->cProvParam  = 0;
 131     prov_info->rgProvParam = NULL;
 132     size = sizeof(prov_info->dwKeySpec);
 133     CryptGetProvParam( prov, PP_KEYSPEC, (BYTE *)&prov_info->dwKeySpec, &size, 0 );
 134
 135     ret = CertSetCertificateContextProperty( ctx, CERT_KEY_PROV_INFO_PROP_ID, 0, prov_info );
 136
 137     CryptMemFree( prov_info );
 138     CryptMemFree( name );
 139     CryptMemFree( container );
 140     return ret;
 141 }
 142
 143 HCERTSTORE WINAPI PFXImportCertStore( CRYPT_DATA_BLOB *pfx, const WCHAR *password, DWORD flags )
 144 {
 145     DWORD i = 0, size;
 146     HCERTSTORE store = NULL;
 147     HCRYPTPROV prov = 0;
 148     struct cert_store_data *data = NULL;
 149     struct open_cert_store_params open_params = { pfx, password, &data };
 150     struct close_cert_store_params close_params;
 151
 152     if (!pfx)
 153     {
 154         SetLastError( ERROR_INVALID_PARAMETER );
 155         return NULL;
 156     }
 157     if (flags & ~(CRYPT_EXPORTABLE|CRYPT_USER_KEYSET|CRYPT_MACHINE_KEYSET|PKCS12_NO_PERSIST_KEY))
 158     {
 159         FIXME( "flags %08x not supported\n", flags );
 160         return NULL;
 161     }
 162     if (CRYPT32_CALL( open_cert_store, &open_params )) return NULL;
 163
 164     prov = import_key( data, flags );
 165     if (!prov) goto error;
 166
 167     if (!(store = CertOpenStore( CERT_STORE_PROV_MEMORY, 0, 0, 0, NULL )))
 168     {
 169         WARN( "CertOpenStore failed %08x\n", GetLastError() );
 170         goto error;
 171     }
 172
 173     for (;;)
 174     {
 175         const void *ctx = NULL;
 176         void *cert;
 177         struct import_store_cert_params import_params = { data, i, NULL, &size };
 178
 179         if (CRYPT32_CALL( import_store_cert, &import_params ) != STATUS_BUFFER_TOO_SMALL) break;
 180         import_params.buf = cert = malloc( size );
 181         if (!CRYPT32_CALL( import_store_cert, &import_params ))
 182             ctx = CertCreateContext( CERT_STORE_CERTIFICATE_CONTEXT, X509_ASN_ENCODING, cert, size, 0, NULL );
 183         free( cert );
 184         if (!ctx)
 185         {
 186             WARN( "CertCreateContext failed %08x\n", GetLastError() );
 187             goto error;
 188         }
 189         if (flags & PKCS12_NO_PERSIST_KEY)
 190         {
 191             if (!set_key_context( ctx, prov ))
 192             {
 193                 WARN( "failed to set context property %08x\n", GetLastError() );
 194                 CertFreeCertificateContext( ctx );
 195                 goto error;
 196             }
 197         }
 198         else if (!set_key_prov_info( ctx, prov ))
 199         {
 200             WARN( "failed to set provider info property %08x\n", GetLastError() );
 201             CertFreeCertificateContext( ctx );
 202             goto error;
 203         }
 204         if (!CertAddCertificateContextToStore( store, ctx, CERT_STORE_ADD_ALWAYS, NULL ))
 205         {
 206             WARN( "CertAddCertificateContextToStore failed %08x\n", GetLastError() );
 207             CertFreeCertificateContext( ctx );
 208             goto error;
 209         }
 210         CertFreeCertificateContext( ctx );
 211         i++;
 212     }
 213     close_params.data = data;
 214     CRYPT32_CALL( close_cert_store, &close_params );
 215     return store;
 216
 217 error:
 218     CryptReleaseContext( prov, 0 );
 219     CertCloseStore( store, 0 );
 220     close_params.data = data;
 221     CRYPT32_CALL( close_cert_store, &close_params );
 222     return NULL;
 223 }
 224
 225 BOOL WINAPI PFXVerifyPassword( CRYPT_DATA_BLOB *pfx, const WCHAR *password, DWORD flags )
 226 {
 227     FIXME( "(%p, %p, %08x): stub\n", pfx, password, flags );
 228     return FALSE;
 229 }
 230
 231 BOOL WINAPI PFXExportCertStore( HCERTSTORE store, CRYPT_DATA_BLOB *pfx, const WCHAR *password, DWORD flags )
 232 {
 233     return PFXExportCertStoreEx( store, pfx, password, NULL, flags );
 234 }
 235
 236 BOOL WINAPI PFXExportCertStoreEx( HCERTSTORE store, CRYPT_DATA_BLOB *pfx, const WCHAR *password, void *reserved,
 237                                   DWORD flags )
 238 {
 239     FIXME( "(%p, %p, %p, %p, %08x): stub\n", store, pfx, password, reserved, flags );
 240     return FALSE;
 241 }