push 9ed7f32abbb93ea3a813fd6b1650e5bcfc506606
[wine/hacks.git] / dlls / crypt32 / crl.c
blobada06fc4d8da2cd6b85fe2f2903338e9dfd5d957
1 /*
2 * Copyright 2006 Juan Lang
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
20 #include <assert.h>
21 #include <stdarg.h>
22 #include "windef.h"
23 #include "winbase.h"
24 #include "wincrypt.h"
25 #include "wine/debug.h"
26 #include "crypt32_private.h"
28 WINE_DEFAULT_DEBUG_CHANNEL(crypt);
30 PCCRL_CONTEXT WINAPI CertCreateCRLContext(DWORD dwCertEncodingType,
31 const BYTE* pbCrlEncoded, DWORD cbCrlEncoded)
33 PCRL_CONTEXT crl = NULL;
34 BOOL ret;
35 PCRL_INFO crlInfo = NULL;
36 DWORD size = 0;
38 TRACE("(%08x, %p, %d)\n", dwCertEncodingType, pbCrlEncoded,
39 cbCrlEncoded);
41 if ((dwCertEncodingType & CERT_ENCODING_TYPE_MASK) != X509_ASN_ENCODING)
43 SetLastError(E_INVALIDARG);
44 return NULL;
46 ret = CryptDecodeObjectEx(dwCertEncodingType, X509_CERT_CRL_TO_BE_SIGNED,
47 pbCrlEncoded, cbCrlEncoded, CRYPT_DECODE_ALLOC_FLAG, NULL,
48 (BYTE *)&crlInfo, &size);
49 if (ret)
51 BYTE *data = NULL;
53 crl = (PCRL_CONTEXT)Context_CreateDataContext(sizeof(CRL_CONTEXT));
54 if (!crl)
55 goto end;
56 data = CryptMemAlloc(cbCrlEncoded);
57 if (!data)
59 CryptMemFree(crl);
60 crl = NULL;
61 goto end;
63 memcpy(data, pbCrlEncoded, cbCrlEncoded);
64 crl->dwCertEncodingType = dwCertEncodingType;
65 crl->pbCrlEncoded = data;
66 crl->cbCrlEncoded = cbCrlEncoded;
67 crl->pCrlInfo = crlInfo;
68 crl->hCertStore = 0;
71 end:
72 return (PCCRL_CONTEXT)crl;
75 BOOL WINAPI CertAddEncodedCRLToStore(HCERTSTORE hCertStore,
76 DWORD dwCertEncodingType, const BYTE *pbCrlEncoded, DWORD cbCrlEncoded,
77 DWORD dwAddDisposition, PCCRL_CONTEXT *ppCrlContext)
79 PCCRL_CONTEXT crl = CertCreateCRLContext(dwCertEncodingType,
80 pbCrlEncoded, cbCrlEncoded);
81 BOOL ret;
83 TRACE("(%p, %08x, %p, %d, %08x, %p)\n", hCertStore, dwCertEncodingType,
84 pbCrlEncoded, cbCrlEncoded, dwAddDisposition, ppCrlContext);
86 if (crl)
88 ret = CertAddCRLContextToStore(hCertStore, crl, dwAddDisposition,
89 ppCrlContext);
90 CertFreeCRLContext(crl);
92 else
93 ret = FALSE;
94 return ret;
97 typedef BOOL (*CrlCompareFunc)(PCCRL_CONTEXT pCrlContext, DWORD dwType,
98 DWORD dwFlags, const void *pvPara);
100 static BOOL compare_crl_any(PCCRL_CONTEXT pCrlContext, DWORD dwType,
101 DWORD dwFlags, const void *pvPara)
103 return TRUE;
106 static BOOL compare_crl_issued_by(PCCRL_CONTEXT pCrlContext, DWORD dwType,
107 DWORD dwFlags, const void *pvPara)
109 BOOL ret;
111 if (pvPara)
113 PCCERT_CONTEXT issuer = (PCCERT_CONTEXT)pvPara;
115 ret = CertCompareCertificateName(issuer->dwCertEncodingType,
116 &issuer->pCertInfo->Issuer, &pCrlContext->pCrlInfo->Issuer);
118 else
119 ret = TRUE;
120 return ret;
123 static BOOL compare_crl_existing(PCCRL_CONTEXT pCrlContext, DWORD dwType,
124 DWORD dwFlags, const void *pvPara)
126 BOOL ret;
128 if (pvPara)
130 PCCRL_CONTEXT crl = (PCCRL_CONTEXT)pvPara;
132 ret = CertCompareCertificateName(pCrlContext->dwCertEncodingType,
133 &pCrlContext->pCrlInfo->Issuer, &crl->pCrlInfo->Issuer);
135 else
136 ret = TRUE;
137 return ret;
140 PCCRL_CONTEXT WINAPI CertFindCRLInStore(HCERTSTORE hCertStore,
141 DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
142 const void *pvFindPara, PCCRL_CONTEXT pPrevCrlContext)
144 PCCRL_CONTEXT ret;
145 CrlCompareFunc compare;
147 TRACE("(%p, %d, %d, %d, %p, %p)\n", hCertStore, dwCertEncodingType,
148 dwFindFlags, dwFindType, pvFindPara, pPrevCrlContext);
150 switch (dwFindType)
152 case CRL_FIND_ANY:
153 compare = compare_crl_any;
154 break;
155 case CRL_FIND_ISSUED_BY:
156 compare = compare_crl_issued_by;
157 break;
158 case CRL_FIND_EXISTING:
159 compare = compare_crl_existing;
160 break;
161 default:
162 FIXME("find type %08x unimplemented\n", dwFindType);
163 compare = NULL;
166 if (compare)
168 BOOL matches = FALSE;
170 ret = pPrevCrlContext;
171 do {
172 ret = CertEnumCRLsInStore(hCertStore, ret);
173 if (ret)
174 matches = compare(ret, dwFindType, dwFindFlags, pvFindPara);
175 } while (ret != NULL && !matches);
176 if (!ret)
177 SetLastError(CRYPT_E_NOT_FOUND);
179 else
181 SetLastError(CRYPT_E_NOT_FOUND);
182 ret = NULL;
184 return ret;
187 PCCRL_CONTEXT WINAPI CertGetCRLFromStore(HCERTSTORE hCertStore,
188 PCCERT_CONTEXT pIssuerContext, PCCRL_CONTEXT pPrevCrlContext, DWORD *pdwFlags)
190 static const DWORD supportedFlags = CERT_STORE_SIGNATURE_FLAG |
191 CERT_STORE_TIME_VALIDITY_FLAG | CERT_STORE_BASE_CRL_FLAG |
192 CERT_STORE_DELTA_CRL_FLAG;
193 PCCRL_CONTEXT ret;
195 TRACE("(%p, %p, %p, %08x)\n", hCertStore, pIssuerContext, pPrevCrlContext,
196 *pdwFlags);
198 if (*pdwFlags & ~supportedFlags)
200 SetLastError(E_INVALIDARG);
201 return NULL;
203 if (pIssuerContext)
204 ret = CertFindCRLInStore(hCertStore, pIssuerContext->dwCertEncodingType,
205 0, CRL_FIND_ISSUED_BY, pIssuerContext, pPrevCrlContext);
206 else
207 ret = CertFindCRLInStore(hCertStore, 0, 0, CRL_FIND_ANY, NULL,
208 pPrevCrlContext);
209 if (ret)
211 if (*pdwFlags & CERT_STORE_TIME_VALIDITY_FLAG)
213 if (0 == CertVerifyCRLTimeValidity(NULL, ret->pCrlInfo))
214 *pdwFlags &= ~CERT_STORE_TIME_VALIDITY_FLAG;
216 if (*pdwFlags & CERT_STORE_SIGNATURE_FLAG)
218 if (CryptVerifyCertificateSignatureEx(0, ret->dwCertEncodingType,
219 CRYPT_VERIFY_CERT_SIGN_SUBJECT_CRL, (void *)ret,
220 CRYPT_VERIFY_CERT_SIGN_ISSUER_CERT, (void *)pIssuerContext, 0,
221 NULL))
222 *pdwFlags &= ~CERT_STORE_SIGNATURE_FLAG;
225 return ret;
228 PCCRL_CONTEXT WINAPI CertDuplicateCRLContext(PCCRL_CONTEXT pCrlContext)
230 TRACE("(%p)\n", pCrlContext);
231 Context_AddRef((void *)pCrlContext, sizeof(CRL_CONTEXT));
232 return pCrlContext;
235 static void CrlDataContext_Free(void *context)
237 PCRL_CONTEXT crlContext = (PCRL_CONTEXT)context;
239 CryptMemFree(crlContext->pbCrlEncoded);
240 LocalFree(crlContext->pCrlInfo);
243 BOOL WINAPI CertFreeCRLContext( PCCRL_CONTEXT pCrlContext)
245 TRACE("(%p)\n", pCrlContext);
247 if (pCrlContext)
248 Context_Release((void *)pCrlContext, sizeof(CRL_CONTEXT),
249 CrlDataContext_Free);
250 return TRUE;
253 DWORD WINAPI CertEnumCRLContextProperties(PCCRL_CONTEXT pCRLContext,
254 DWORD dwPropId)
256 PCONTEXT_PROPERTY_LIST properties = Context_GetProperties(
257 (void *)pCRLContext, sizeof(CRL_CONTEXT));
258 DWORD ret;
260 TRACE("(%p, %d)\n", pCRLContext, dwPropId);
262 if (properties)
263 ret = ContextPropertyList_EnumPropIDs(properties, dwPropId);
264 else
265 ret = 0;
266 return ret;
269 static BOOL WINAPI CRLContext_SetProperty(void *context, DWORD dwPropId,
270 DWORD dwFlags, const void *pvData);
272 static BOOL CRLContext_GetHashProp(void *context, DWORD dwPropId,
273 ALG_ID algID, const BYTE *toHash, DWORD toHashLen, void *pvData,
274 DWORD *pcbData)
276 BOOL ret = CryptHashCertificate(0, algID, 0, toHash, toHashLen, pvData,
277 pcbData);
278 if (ret)
280 CRYPT_DATA_BLOB blob = { *pcbData, pvData };
282 ret = CRLContext_SetProperty(context, dwPropId, 0, &blob);
284 return ret;
287 static BOOL WINAPI CRLContext_GetProperty(void *context, DWORD dwPropId,
288 void *pvData, DWORD *pcbData)
290 PCCRL_CONTEXT pCRLContext = (PCCRL_CONTEXT)context;
291 PCONTEXT_PROPERTY_LIST properties =
292 Context_GetProperties(context, sizeof(CRL_CONTEXT));
293 BOOL ret;
294 CRYPT_DATA_BLOB blob;
296 TRACE("(%p, %d, %p, %p)\n", context, dwPropId, pvData, pcbData);
298 if (properties)
299 ret = ContextPropertyList_FindProperty(properties, dwPropId, &blob);
300 else
301 ret = FALSE;
302 if (ret)
304 if (!pvData)
305 *pcbData = blob.cbData;
306 else if (*pcbData < blob.cbData)
308 SetLastError(ERROR_MORE_DATA);
309 *pcbData = blob.cbData;
310 ret = FALSE;
312 else
314 memcpy(pvData, blob.pbData, blob.cbData);
315 *pcbData = blob.cbData;
318 else
320 /* Implicit properties */
321 switch (dwPropId)
323 case CERT_SHA1_HASH_PROP_ID:
324 ret = CRLContext_GetHashProp(context, dwPropId, CALG_SHA1,
325 pCRLContext->pbCrlEncoded, pCRLContext->cbCrlEncoded, pvData,
326 pcbData);
327 break;
328 case CERT_MD5_HASH_PROP_ID:
329 ret = CRLContext_GetHashProp(context, dwPropId, CALG_MD5,
330 pCRLContext->pbCrlEncoded, pCRLContext->cbCrlEncoded, pvData,
331 pcbData);
332 break;
333 default:
334 SetLastError(CRYPT_E_NOT_FOUND);
337 TRACE("returning %d\n", ret);
338 return ret;
341 BOOL WINAPI CertGetCRLContextProperty(PCCRL_CONTEXT pCRLContext,
342 DWORD dwPropId, void *pvData, DWORD *pcbData)
344 BOOL ret;
346 TRACE("(%p, %d, %p, %p)\n", pCRLContext, dwPropId, pvData, pcbData);
348 switch (dwPropId)
350 case 0:
351 case CERT_CERT_PROP_ID:
352 case CERT_CRL_PROP_ID:
353 case CERT_CTL_PROP_ID:
354 SetLastError(E_INVALIDARG);
355 ret = FALSE;
356 break;
357 case CERT_ACCESS_STATE_PROP_ID:
358 if (!pvData)
360 *pcbData = sizeof(DWORD);
361 ret = TRUE;
363 else if (*pcbData < sizeof(DWORD))
365 SetLastError(ERROR_MORE_DATA);
366 *pcbData = sizeof(DWORD);
367 ret = FALSE;
369 else
371 if (pCRLContext->hCertStore)
372 ret = CertGetStoreProperty(pCRLContext->hCertStore, dwPropId,
373 pvData, pcbData);
374 else
375 *(DWORD *)pvData = 0;
376 ret = TRUE;
378 break;
379 default:
380 ret = CRLContext_GetProperty((void *)pCRLContext, dwPropId, pvData,
381 pcbData);
383 return ret;
386 static BOOL WINAPI CRLContext_SetProperty(void *context, DWORD dwPropId,
387 DWORD dwFlags, const void *pvData)
389 PCONTEXT_PROPERTY_LIST properties =
390 Context_GetProperties(context, sizeof(CERT_CONTEXT));
391 BOOL ret;
393 TRACE("(%p, %d, %08x, %p)\n", context, dwPropId, dwFlags, pvData);
395 if (!properties)
396 ret = FALSE;
397 else if (!pvData)
399 ContextPropertyList_RemoveProperty(properties, dwPropId);
400 ret = TRUE;
402 else
404 switch (dwPropId)
406 case CERT_AUTO_ENROLL_PROP_ID:
407 case CERT_CTL_USAGE_PROP_ID: /* same as CERT_ENHKEY_USAGE_PROP_ID */
408 case CERT_DESCRIPTION_PROP_ID:
409 case CERT_FRIENDLY_NAME_PROP_ID:
410 case CERT_HASH_PROP_ID:
411 case CERT_KEY_IDENTIFIER_PROP_ID:
412 case CERT_MD5_HASH_PROP_ID:
413 case CERT_NEXT_UPDATE_LOCATION_PROP_ID:
414 case CERT_PUBKEY_ALG_PARA_PROP_ID:
415 case CERT_PVK_FILE_PROP_ID:
416 case CERT_SIGNATURE_HASH_PROP_ID:
417 case CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID:
418 case CERT_SUBJECT_NAME_MD5_HASH_PROP_ID:
419 case CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID:
420 case CERT_ENROLLMENT_PROP_ID:
421 case CERT_CROSS_CERT_DIST_POINTS_PROP_ID:
422 case CERT_RENEWAL_PROP_ID:
424 PCRYPT_DATA_BLOB blob = (PCRYPT_DATA_BLOB)pvData;
426 ret = ContextPropertyList_SetProperty(properties, dwPropId,
427 blob->pbData, blob->cbData);
428 break;
430 case CERT_DATE_STAMP_PROP_ID:
431 ret = ContextPropertyList_SetProperty(properties, dwPropId,
432 (const BYTE *)pvData, sizeof(FILETIME));
433 break;
434 default:
435 FIXME("%d: stub\n", dwPropId);
436 ret = FALSE;
439 TRACE("returning %d\n", ret);
440 return ret;
443 BOOL WINAPI CertSetCRLContextProperty(PCCRL_CONTEXT pCRLContext,
444 DWORD dwPropId, DWORD dwFlags, const void *pvData)
446 BOOL ret;
448 TRACE("(%p, %d, %08x, %p)\n", pCRLContext, dwPropId, dwFlags, pvData);
450 /* Handle special cases for "read-only"/invalid prop IDs. Windows just
451 * crashes on most of these, I'll be safer.
453 switch (dwPropId)
455 case 0:
456 case CERT_ACCESS_STATE_PROP_ID:
457 case CERT_CERT_PROP_ID:
458 case CERT_CRL_PROP_ID:
459 case CERT_CTL_PROP_ID:
460 SetLastError(E_INVALIDARG);
461 return FALSE;
463 ret = CRLContext_SetProperty((void *)pCRLContext, dwPropId, dwFlags,
464 pvData);
465 TRACE("returning %d\n", ret);
466 return ret;
469 BOOL WINAPI CertIsValidCRLForCertificate(PCCERT_CONTEXT pCert,
470 PCCRL_CONTEXT pCrl, DWORD dwFlags, void *pvReserved)
472 TRACE("(%p, %p, %08x, %p)\n", pCert, pCrl, dwFlags, pvReserved);
473 return TRUE;
476 static PCRL_ENTRY CRYPT_FindCertificateInCRL(PCERT_INFO cert, const CRL_INFO *crl)
478 DWORD i;
479 PCRL_ENTRY entry = NULL;
481 for (i = 0; !entry && i < crl->cCRLEntry; i++)
482 if (CertCompareIntegerBlob(&crl->rgCRLEntry[i].SerialNumber,
483 &cert->SerialNumber))
484 entry = &crl->rgCRLEntry[i];
485 return entry;
488 BOOL WINAPI CertFindCertificateInCRL(PCCERT_CONTEXT pCert,
489 PCCRL_CONTEXT pCrlContext, DWORD dwFlags, void *pvReserved,
490 PCRL_ENTRY *ppCrlEntry)
492 TRACE("(%p, %p, %08x, %p, %p)\n", pCert, pCrlContext, dwFlags, pvReserved,
493 ppCrlEntry);
495 *ppCrlEntry = CRYPT_FindCertificateInCRL(pCert->pCertInfo,
496 pCrlContext->pCrlInfo);
497 return TRUE;
500 BOOL WINAPI CertVerifyCRLRevocation(DWORD dwCertEncodingType,
501 PCERT_INFO pCertId, DWORD cCrlInfo, PCRL_INFO rgpCrlInfo[])
503 DWORD i;
504 PCRL_ENTRY entry = NULL;
506 TRACE("(%08x, %p, %d, %p)\n", dwCertEncodingType, pCertId, cCrlInfo,
507 rgpCrlInfo);
509 for (i = 0; !entry && i < cCrlInfo; i++)
510 entry = CRYPT_FindCertificateInCRL(pCertId, rgpCrlInfo[i]);
511 return entry == NULL;
514 LONG WINAPI CertVerifyCRLTimeValidity(LPFILETIME pTimeToVerify,
515 PCRL_INFO pCrlInfo)
517 FILETIME fileTime;
518 LONG ret;
520 if (!pTimeToVerify)
522 GetSystemTimeAsFileTime(&fileTime);
523 pTimeToVerify = &fileTime;
525 if ((ret = CompareFileTime(pTimeToVerify, &pCrlInfo->ThisUpdate)) >= 0)
527 ret = CompareFileTime(pTimeToVerify, &pCrlInfo->NextUpdate);
528 if (ret < 0)
529 ret = 0;
531 return ret;