push 915ca0aa9d2991375796d4b573b1be50b5f1fb2c
[wine/hacks.git] / dlls / crypt32 / ctl.c
blobffac6674dfd713b90beb5f1a5a098aa0325489e3
1 /*
2 * Copyright 2008 Juan Lang
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
20 #include <assert.h>
21 #include <stdarg.h>
23 #define NONAMELESSUNION
24 #include "windef.h"
25 #include "winbase.h"
26 #include "wincrypt.h"
27 #include "wine/debug.h"
28 #include "crypt32_private.h"
30 WINE_DEFAULT_DEBUG_CHANNEL(crypt);
32 #define CtlContext_CopyProperties(to, from) \
33 Context_CopyProperties((to), (from), sizeof(CTL_CONTEXT))
35 BOOL WINAPI CertAddCTLContextToStore(HCERTSTORE hCertStore,
36 PCCTL_CONTEXT pCtlContext, DWORD dwAddDisposition,
37 PCCTL_CONTEXT* ppStoreContext)
39 PWINECRYPT_CERTSTORE store = (PWINECRYPT_CERTSTORE)hCertStore;
40 BOOL ret = TRUE;
41 PCCTL_CONTEXT toAdd = NULL, existing = NULL;
43 TRACE("(%p, %p, %08x, %p)\n", hCertStore, pCtlContext, dwAddDisposition,
44 ppStoreContext);
46 if (dwAddDisposition != CERT_STORE_ADD_ALWAYS)
48 existing = CertFindCTLInStore(hCertStore, 0, 0, CTL_FIND_EXISTING,
49 pCtlContext, NULL);
52 switch (dwAddDisposition)
54 case CERT_STORE_ADD_ALWAYS:
55 toAdd = CertDuplicateCTLContext(pCtlContext);
56 break;
57 case CERT_STORE_ADD_NEW:
58 if (existing)
60 TRACE("found matching CTL, not adding\n");
61 SetLastError(CRYPT_E_EXISTS);
62 ret = FALSE;
64 else
65 toAdd = CertDuplicateCTLContext(pCtlContext);
66 break;
67 case CERT_STORE_ADD_NEWER:
68 if (existing)
70 LONG newer = CompareFileTime(&existing->pCtlInfo->ThisUpdate,
71 &pCtlContext->pCtlInfo->ThisUpdate);
73 if (newer < 0)
74 toAdd = CertDuplicateCTLContext(pCtlContext);
75 else
77 TRACE("existing CTL is newer, not adding\n");
78 SetLastError(CRYPT_E_EXISTS);
79 ret = FALSE;
82 else
83 toAdd = CertDuplicateCTLContext(pCtlContext);
84 break;
85 case CERT_STORE_ADD_REPLACE_EXISTING:
86 toAdd = CertDuplicateCTLContext(pCtlContext);
87 break;
88 case CERT_STORE_ADD_REPLACE_EXISTING_INHERIT_PROPERTIES:
89 toAdd = CertDuplicateCTLContext(pCtlContext);
90 if (existing)
91 CtlContext_CopyProperties(toAdd, existing);
92 break;
93 case CERT_STORE_ADD_USE_EXISTING:
94 if (existing)
95 CtlContext_CopyProperties(existing, pCtlContext);
96 break;
97 default:
98 FIXME("Unimplemented add disposition %d\n", dwAddDisposition);
99 ret = FALSE;
102 if (toAdd)
104 if (store)
105 ret = store->ctls.addContext(store, (void *)toAdd,
106 (void *)existing, (const void **)ppStoreContext);
107 else if (ppStoreContext)
108 *ppStoreContext = CertDuplicateCTLContext(toAdd);
109 CertFreeCTLContext(toAdd);
111 CertFreeCTLContext(existing);
113 TRACE("returning %d\n", ret);
114 return ret;
117 BOOL WINAPI CertAddEncodedCTLToStore(HCERTSTORE hCertStore,
118 DWORD dwMsgAndCertEncodingType, const BYTE *pbCtlEncoded, DWORD cbCtlEncoded,
119 DWORD dwAddDisposition, PCCTL_CONTEXT *ppCtlContext)
121 PCCTL_CONTEXT ctl = CertCreateCTLContext(dwMsgAndCertEncodingType,
122 pbCtlEncoded, cbCtlEncoded);
123 BOOL ret;
125 TRACE("(%p, %08x, %p, %d, %08x, %p)\n", hCertStore,
126 dwMsgAndCertEncodingType, pbCtlEncoded, cbCtlEncoded, dwAddDisposition,
127 ppCtlContext);
129 if (ctl)
131 ret = CertAddCTLContextToStore(hCertStore, ctl, dwAddDisposition,
132 ppCtlContext);
133 CertFreeCTLContext(ctl);
135 else
136 ret = FALSE;
137 return ret;
140 PCCTL_CONTEXT WINAPI CertEnumCTLsInStore(HCERTSTORE hCertStore,
141 PCCTL_CONTEXT pPrev)
143 WINECRYPT_CERTSTORE *hcs = (WINECRYPT_CERTSTORE *)hCertStore;
144 PCCTL_CONTEXT ret;
146 TRACE("(%p, %p)\n", hCertStore, pPrev);
147 if (!hCertStore)
148 ret = NULL;
149 else if (hcs->dwMagic != WINE_CRYPTCERTSTORE_MAGIC)
150 ret = NULL;
151 else
152 ret = (PCCTL_CONTEXT)hcs->ctls.enumContext(hcs, (void *)pPrev);
153 return ret;
156 typedef BOOL (*CtlCompareFunc)(PCCTL_CONTEXT pCtlContext, DWORD dwType,
157 DWORD dwFlags, const void *pvPara);
159 static BOOL compare_ctl_any(PCCTL_CONTEXT pCtlContext, DWORD dwType,
160 DWORD dwFlags, const void *pvPara)
162 return TRUE;
165 static BOOL compare_ctl_by_md5_hash(PCCTL_CONTEXT pCtlContext, DWORD dwType,
166 DWORD dwFlags, const void *pvPara)
168 BOOL ret;
169 BYTE hash[16];
170 DWORD size = sizeof(hash);
172 ret = CertGetCTLContextProperty(pCtlContext, CERT_MD5_HASH_PROP_ID, hash,
173 &size);
174 if (ret)
176 const CRYPT_HASH_BLOB *pHash = (const CRYPT_HASH_BLOB *)pvPara;
178 if (size == pHash->cbData)
179 ret = !memcmp(pHash->pbData, hash, size);
180 else
181 ret = FALSE;
183 return ret;
186 static BOOL compare_ctl_by_sha1_hash(PCCTL_CONTEXT pCtlContext, DWORD dwType,
187 DWORD dwFlags, const void *pvPara)
189 BOOL ret;
190 BYTE hash[20];
191 DWORD size = sizeof(hash);
193 ret = CertGetCTLContextProperty(pCtlContext, CERT_SHA1_HASH_PROP_ID, hash,
194 &size);
195 if (ret)
197 const CRYPT_HASH_BLOB *pHash = (const CRYPT_HASH_BLOB *)pvPara;
199 if (size == pHash->cbData)
200 ret = !memcmp(pHash->pbData, hash, size);
201 else
202 ret = FALSE;
204 return ret;
207 static BOOL compare_ctl_existing(PCCTL_CONTEXT pCtlContext, DWORD dwType,
208 DWORD dwFlags, const void *pvPara)
210 BOOL ret;
212 if (pvPara)
214 PCCTL_CONTEXT ctl = (PCCTL_CONTEXT)pvPara;
216 if (pCtlContext->cbCtlContext == ctl->cbCtlContext)
218 if (ctl->cbCtlContext)
219 ret = !memcmp(pCtlContext->pbCtlContext, ctl->pbCtlContext,
220 ctl->cbCtlContext);
221 else
222 ret = TRUE;
224 else
225 ret = FALSE;
227 else
228 ret = FALSE;
229 return ret;
232 PCCTL_CONTEXT WINAPI CertFindCTLInStore(HCERTSTORE hCertStore,
233 DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
234 const void *pvFindPara, PCCTL_CONTEXT pPrevCtlContext)
236 PCCTL_CONTEXT ret;
237 CtlCompareFunc compare;
239 TRACE("(%p, %d, %d, %d, %p, %p)\n", hCertStore, dwCertEncodingType,
240 dwFindFlags, dwFindType, pvFindPara, pPrevCtlContext);
242 switch (dwFindType)
244 case CTL_FIND_ANY:
245 compare = compare_ctl_any;
246 break;
247 case CTL_FIND_SHA1_HASH:
248 compare = compare_ctl_by_sha1_hash;
249 break;
250 case CTL_FIND_MD5_HASH:
251 compare = compare_ctl_by_md5_hash;
252 break;
253 case CTL_FIND_EXISTING:
254 compare = compare_ctl_existing;
255 break;
256 default:
257 FIXME("find type %08x unimplemented\n", dwFindType);
258 compare = NULL;
261 if (compare)
263 BOOL matches = FALSE;
265 ret = pPrevCtlContext;
266 do {
267 ret = CertEnumCTLsInStore(hCertStore, ret);
268 if (ret)
269 matches = compare(ret, dwFindType, dwFindFlags, pvFindPara);
270 } while (ret != NULL && !matches);
271 if (!ret)
272 SetLastError(CRYPT_E_NOT_FOUND);
274 else
276 SetLastError(CRYPT_E_NOT_FOUND);
277 ret = NULL;
279 return ret;
282 BOOL WINAPI CertDeleteCTLFromStore(PCCTL_CONTEXT pCtlContext)
284 BOOL ret;
286 TRACE("(%p)\n", pCtlContext);
288 if (!pCtlContext)
289 ret = TRUE;
290 else if (!pCtlContext->hCertStore)
292 ret = TRUE;
293 CertFreeCTLContext(pCtlContext);
295 else
297 PWINECRYPT_CERTSTORE hcs =
298 (PWINECRYPT_CERTSTORE)pCtlContext->hCertStore;
300 if (hcs->dwMagic != WINE_CRYPTCERTSTORE_MAGIC)
301 ret = FALSE;
302 else
303 ret = hcs->ctls.deleteContext(hcs, (void *)pCtlContext);
304 CertFreeCTLContext(pCtlContext);
306 return ret;
309 PCCTL_CONTEXT WINAPI CertCreateCTLContext(DWORD dwMsgAndCertEncodingType,
310 const BYTE *pbCtlEncoded, DWORD cbCtlEncoded)
312 PCTL_CONTEXT ctl = NULL;
313 HCRYPTMSG msg;
314 BOOL ret;
315 BYTE *content = NULL;
316 DWORD contentSize = 0, size;
317 PCTL_INFO ctlInfo = NULL;
319 TRACE("(%08x, %p, %d)\n", dwMsgAndCertEncodingType, pbCtlEncoded,
320 cbCtlEncoded);
322 if (GET_CERT_ENCODING_TYPE(dwMsgAndCertEncodingType) != X509_ASN_ENCODING)
324 SetLastError(E_INVALIDARG);
325 return NULL;
327 if (!pbCtlEncoded || !cbCtlEncoded)
329 SetLastError(ERROR_INVALID_DATA);
330 return NULL;
332 msg = CryptMsgOpenToDecode(PKCS_7_ASN_ENCODING | X509_ASN_ENCODING, 0, 0,
333 0, NULL, NULL);
334 if (!msg)
335 return NULL;
336 ret = CryptMsgUpdate(msg, pbCtlEncoded, cbCtlEncoded, TRUE);
337 if (!ret)
339 SetLastError(ERROR_INVALID_DATA);
340 goto end;
342 /* Check that it's really a CTL */
343 ret = CryptMsgGetParam(msg, CMSG_INNER_CONTENT_TYPE_PARAM, 0, NULL, &size);
344 if (ret)
346 char *innerContent = CryptMemAlloc(size);
348 if (innerContent)
350 ret = CryptMsgGetParam(msg, CMSG_INNER_CONTENT_TYPE_PARAM, 0,
351 innerContent, &size);
352 if (ret)
354 if (strcmp(innerContent, szOID_CTL))
356 SetLastError(ERROR_INVALID_DATA);
357 ret = FALSE;
360 CryptMemFree(innerContent);
362 else
364 SetLastError(ERROR_OUTOFMEMORY);
365 ret = FALSE;
368 if (!ret)
369 goto end;
370 ret = CryptMsgGetParam(msg, CMSG_CONTENT_PARAM, 0, NULL, &contentSize);
371 if (!ret)
372 goto end;
373 content = CryptMemAlloc(contentSize);
374 if (content)
376 ret = CryptMsgGetParam(msg, CMSG_CONTENT_PARAM, 0, content,
377 &contentSize);
378 if (ret)
380 ret = CryptDecodeObjectEx(dwMsgAndCertEncodingType, PKCS_CTL,
381 content, contentSize, CRYPT_DECODE_ALLOC_FLAG, NULL,
382 (BYTE *)&ctlInfo, &size);
383 if (ret)
385 ctl = Context_CreateDataContext(sizeof(CTL_CONTEXT));
386 if (ctl)
388 BYTE *data = CryptMemAlloc(cbCtlEncoded);
390 if (data)
392 memcpy(data, pbCtlEncoded, cbCtlEncoded);
393 ctl->dwMsgAndCertEncodingType =
394 X509_ASN_ENCODING | PKCS_7_ASN_ENCODING;
395 ctl->pbCtlEncoded = data;
396 ctl->cbCtlEncoded = cbCtlEncoded;
397 ctl->pCtlInfo = ctlInfo;
398 ctl->hCertStore = NULL;
399 ctl->hCryptMsg = msg;
400 ctl->pbCtlContext = content;
401 ctl->cbCtlContext = contentSize;
403 else
405 SetLastError(ERROR_OUTOFMEMORY);
406 ret = FALSE;
409 else
411 SetLastError(ERROR_OUTOFMEMORY);
412 ret = FALSE;
417 else
419 SetLastError(ERROR_OUTOFMEMORY);
420 ret = FALSE;
423 end:
424 if (!ret)
426 CryptMemFree(ctl);
427 ctl = NULL;
428 LocalFree(ctlInfo);
429 CryptMemFree(content);
430 CryptMsgClose(msg);
432 return (PCCTL_CONTEXT)ctl;
435 PCCTL_CONTEXT WINAPI CertDuplicateCTLContext(PCCTL_CONTEXT pCtlContext)
437 TRACE("(%p)\n", pCtlContext);
438 Context_AddRef((void *)pCtlContext, sizeof(CTL_CONTEXT));
439 return pCtlContext;
442 static void CTLDataContext_Free(void *context)
444 PCTL_CONTEXT ctlContext = (PCTL_CONTEXT)context;
446 CryptMsgClose(ctlContext->hCryptMsg);
447 CryptMemFree(ctlContext->pbCtlEncoded);
448 CryptMemFree(ctlContext->pbCtlContext);
449 LocalFree(ctlContext->pCtlInfo);
452 BOOL WINAPI CertFreeCTLContext(PCCTL_CONTEXT pCTLContext)
454 TRACE("(%p)\n", pCTLContext);
456 if (pCTLContext)
457 Context_Release((void *)pCTLContext, sizeof(CTL_CONTEXT),
458 CTLDataContext_Free);
459 return TRUE;
462 DWORD WINAPI CertEnumCTLContextProperties(PCCTL_CONTEXT pCTLContext,
463 DWORD dwPropId)
465 PCONTEXT_PROPERTY_LIST properties = Context_GetProperties(
466 (void *)pCTLContext, sizeof(CTL_CONTEXT));
467 DWORD ret;
469 TRACE("(%p, %d)\n", pCTLContext, dwPropId);
471 if (properties)
472 ret = ContextPropertyList_EnumPropIDs(properties, dwPropId);
473 else
474 ret = 0;
475 return ret;
478 static BOOL CTLContext_SetProperty(PCCTL_CONTEXT context, DWORD dwPropId,
479 DWORD dwFlags, const void *pvData);
481 static BOOL CTLContext_GetHashProp(PCCTL_CONTEXT context, DWORD dwPropId,
482 ALG_ID algID, const BYTE *toHash, DWORD toHashLen, void *pvData,
483 DWORD *pcbData)
485 BOOL ret = CryptHashCertificate(0, algID, 0, toHash, toHashLen, pvData,
486 pcbData);
487 if (ret)
489 CRYPT_DATA_BLOB blob = { *pcbData, pvData };
491 ret = CTLContext_SetProperty(context, dwPropId, 0, &blob);
493 return ret;
496 static BOOL CTLContext_GetProperty(PCCTL_CONTEXT context, DWORD dwPropId,
497 void *pvData, DWORD *pcbData)
499 PCONTEXT_PROPERTY_LIST properties =
500 Context_GetProperties(context, sizeof(CTL_CONTEXT));
501 BOOL ret;
502 CRYPT_DATA_BLOB blob;
504 TRACE("(%p, %d, %p, %p)\n", context, dwPropId, pvData, pcbData);
506 if (properties)
507 ret = ContextPropertyList_FindProperty(properties, dwPropId, &blob);
508 else
509 ret = FALSE;
510 if (ret)
512 if (!pvData)
513 *pcbData = blob.cbData;
514 else if (*pcbData < blob.cbData)
516 SetLastError(ERROR_MORE_DATA);
517 *pcbData = blob.cbData;
518 ret = FALSE;
520 else
522 memcpy(pvData, blob.pbData, blob.cbData);
523 *pcbData = blob.cbData;
526 else
528 /* Implicit properties */
529 switch (dwPropId)
531 case CERT_SHA1_HASH_PROP_ID:
532 ret = CTLContext_GetHashProp(context, dwPropId, CALG_SHA1,
533 context->pbCtlEncoded, context->cbCtlEncoded, pvData, pcbData);
534 break;
535 case CERT_MD5_HASH_PROP_ID:
536 ret = CTLContext_GetHashProp(context, dwPropId, CALG_MD5,
537 context->pbCtlEncoded, context->cbCtlEncoded, pvData, pcbData);
538 break;
539 default:
540 SetLastError(CRYPT_E_NOT_FOUND);
543 TRACE("returning %d\n", ret);
544 return ret;
547 BOOL WINAPI CertGetCTLContextProperty(PCCTL_CONTEXT pCTLContext,
548 DWORD dwPropId, void *pvData, DWORD *pcbData)
550 BOOL ret;
552 TRACE("(%p, %d, %p, %p)\n", pCTLContext, dwPropId, pvData, pcbData);
554 switch (dwPropId)
556 case 0:
557 case CERT_CERT_PROP_ID:
558 case CERT_CRL_PROP_ID:
559 case CERT_CTL_PROP_ID:
560 SetLastError(E_INVALIDARG);
561 ret = FALSE;
562 break;
563 case CERT_ACCESS_STATE_PROP_ID:
564 if (!pvData)
566 *pcbData = sizeof(DWORD);
567 ret = TRUE;
569 else if (*pcbData < sizeof(DWORD))
571 SetLastError(ERROR_MORE_DATA);
572 *pcbData = sizeof(DWORD);
573 ret = FALSE;
575 else
577 if (pCTLContext->hCertStore)
578 ret = CertGetStoreProperty(pCTLContext->hCertStore, dwPropId,
579 pvData, pcbData);
580 else
581 *(DWORD *)pvData = 0;
582 ret = TRUE;
584 break;
585 default:
586 ret = CTLContext_GetProperty(pCTLContext, dwPropId, pvData,
587 pcbData);
589 return ret;
592 static BOOL CTLContext_SetProperty(PCCTL_CONTEXT context, DWORD dwPropId,
593 DWORD dwFlags, const void *pvData)
595 PCONTEXT_PROPERTY_LIST properties =
596 Context_GetProperties(context, sizeof(CTL_CONTEXT));
597 BOOL ret;
599 TRACE("(%p, %d, %08x, %p)\n", context, dwPropId, dwFlags, pvData);
601 if (!properties)
602 ret = FALSE;
603 else if (!pvData)
605 ContextPropertyList_RemoveProperty(properties, dwPropId);
606 ret = TRUE;
608 else
610 switch (dwPropId)
612 case CERT_AUTO_ENROLL_PROP_ID:
613 case CERT_CTL_USAGE_PROP_ID: /* same as CERT_ENHKEY_USAGE_PROP_ID */
614 case CERT_DESCRIPTION_PROP_ID:
615 case CERT_FRIENDLY_NAME_PROP_ID:
616 case CERT_HASH_PROP_ID:
617 case CERT_KEY_IDENTIFIER_PROP_ID:
618 case CERT_MD5_HASH_PROP_ID:
619 case CERT_NEXT_UPDATE_LOCATION_PROP_ID:
620 case CERT_PUBKEY_ALG_PARA_PROP_ID:
621 case CERT_PVK_FILE_PROP_ID:
622 case CERT_SIGNATURE_HASH_PROP_ID:
623 case CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID:
624 case CERT_SUBJECT_NAME_MD5_HASH_PROP_ID:
625 case CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID:
626 case CERT_ENROLLMENT_PROP_ID:
627 case CERT_CROSS_CERT_DIST_POINTS_PROP_ID:
628 case CERT_RENEWAL_PROP_ID:
630 PCRYPT_DATA_BLOB blob = (PCRYPT_DATA_BLOB)pvData;
632 ret = ContextPropertyList_SetProperty(properties, dwPropId,
633 blob->pbData, blob->cbData);
634 break;
636 case CERT_DATE_STAMP_PROP_ID:
637 ret = ContextPropertyList_SetProperty(properties, dwPropId,
638 (const BYTE *)pvData, sizeof(FILETIME));
639 break;
640 default:
641 FIXME("%d: stub\n", dwPropId);
642 ret = FALSE;
645 TRACE("returning %d\n", ret);
646 return ret;
649 BOOL WINAPI CertSetCTLContextProperty(PCCTL_CONTEXT pCTLContext,
650 DWORD dwPropId, DWORD dwFlags, const void *pvData)
652 BOOL ret;
654 TRACE("(%p, %d, %08x, %p)\n", pCTLContext, dwPropId, dwFlags, pvData);
656 /* Handle special cases for "read-only"/invalid prop IDs. Windows just
657 * crashes on most of these, I'll be safer.
659 switch (dwPropId)
661 case 0:
662 case CERT_ACCESS_STATE_PROP_ID:
663 case CERT_CERT_PROP_ID:
664 case CERT_CRL_PROP_ID:
665 case CERT_CTL_PROP_ID:
666 SetLastError(E_INVALIDARG);
667 return FALSE;
669 ret = CTLContext_SetProperty(pCTLContext, dwPropId, dwFlags, pvData);
670 TRACE("returning %d\n", ret);
671 return ret;