mirror of
https://github.com/chatmail/core.git
synced 2026-04-17 21:46:35 +03:00
1187 lines
48 KiB
Rust
1187 lines
48 KiB
Rust
//! End-to-end encryption support.
|
|
|
|
use std::collections::HashSet;
|
|
use std::ffi::CStr;
|
|
use std::ptr;
|
|
use std::str::FromStr;
|
|
|
|
use mmime::clist::*;
|
|
use mmime::mailimf::*;
|
|
use mmime::mailimf_types::*;
|
|
use mmime::mailimf_types_helper::*;
|
|
use mmime::mailmime::*;
|
|
use mmime::mailmime_content::*;
|
|
use mmime::mailmime_types::*;
|
|
use mmime::mailmime_types_helper::*;
|
|
use mmime::mailmime_write_mem::*;
|
|
use mmime::mailprivacy_prepare_mime;
|
|
use mmime::mmapstring::*;
|
|
use mmime::{mailmime_substitute, MAILIMF_NO_ERROR, MAIL_NO_ERROR};
|
|
|
|
use crate::aheader::*;
|
|
use crate::config::Config;
|
|
use crate::context::Context;
|
|
use crate::dc_mimeparser::*;
|
|
use crate::dc_securejoin::*;
|
|
use crate::dc_tools::*;
|
|
use crate::error::*;
|
|
use crate::key::*;
|
|
use crate::keyring::*;
|
|
use crate::peerstate::*;
|
|
use crate::pgp::*;
|
|
use crate::types::*;
|
|
use crate::x::*;
|
|
|
|
// backups
|
|
// attachments of 25 mb brutto should work on the majority of providers
|
|
// (brutto examples: web.de=50, 1&1=40, t-online.de=32, gmail=25, posteo=50, yahoo=25, all-inkl=100).
|
|
// as an upper limit, we double the size; the core won't send messages larger than this
|
|
// to get the netto sizes, we subtract 1 mb header-overhead and the base64-overhead.
|
|
// some defaults
|
|
#[derive(Clone)]
|
|
#[allow(non_camel_case_types)]
|
|
pub struct dc_e2ee_helper_t {
|
|
pub encryption_successfull: libc::c_int,
|
|
pub cdata_to_free: *mut libc::c_void,
|
|
pub encrypted: libc::c_int,
|
|
pub signatures: HashSet<String>,
|
|
pub gossipped_addr: HashSet<String>,
|
|
}
|
|
|
|
impl Default for dc_e2ee_helper_t {
|
|
fn default() -> Self {
|
|
dc_e2ee_helper_t {
|
|
encryption_successfull: 0,
|
|
cdata_to_free: std::ptr::null_mut(),
|
|
encrypted: 0,
|
|
signatures: Default::default(),
|
|
gossipped_addr: Default::default(),
|
|
}
|
|
}
|
|
}
|
|
|
|
#[allow(non_snake_case)]
|
|
pub unsafe fn dc_e2ee_encrypt(
|
|
context: &Context,
|
|
recipients_addr: *const clist,
|
|
force_unencrypted: libc::c_int,
|
|
e2ee_guaranteed: libc::c_int,
|
|
min_verified: libc::c_int,
|
|
do_gossip: libc::c_int,
|
|
mut in_out_message: *mut mailmime,
|
|
helper: &mut dc_e2ee_helper_t,
|
|
) {
|
|
let mut ok_to_continue = true;
|
|
let mut col: libc::c_int = 0i32;
|
|
let mut do_encrypt: libc::c_int = 0i32;
|
|
/*just a pointer into mailmime structure, must not be freed*/
|
|
let imffields_unprotected: *mut mailimf_fields;
|
|
let mut keyring = Keyring::default();
|
|
let plain: *mut MMAPString = mmap_string_new(b"\x00" as *const u8 as *const libc::c_char);
|
|
let mut peerstates: Vec<Peerstate> = Vec::new();
|
|
*helper = Default::default();
|
|
|
|
if !(recipients_addr.is_null()
|
|
|| in_out_message.is_null()
|
|
|| !(*in_out_message).mm_parent.is_null()
|
|
|| plain.is_null())
|
|
{
|
|
/* libEtPan's pgp_encrypt_mime() takes the parent as the new root. We just expect the root as being given to this function. */
|
|
let prefer_encrypt = if 0
|
|
!= context
|
|
.sql
|
|
.get_config_int(context, "e2ee_enabled")
|
|
.unwrap_or_default()
|
|
{
|
|
EncryptPreference::Mutual
|
|
} else {
|
|
EncryptPreference::NoPreference
|
|
};
|
|
|
|
let addr = context.sql.get_config(context, "configured_addr");
|
|
|
|
if let Some(addr) = addr {
|
|
let pubkey_ret = load_or_generate_self_public_key(context, &addr).map_err(|err| {
|
|
error!(context, 0, "Failed to load public key: {}", err);
|
|
err
|
|
});
|
|
if let Ok(public_key) = pubkey_ret {
|
|
/*only for random-seed*/
|
|
if prefer_encrypt == EncryptPreference::Mutual || 0 != e2ee_guaranteed {
|
|
do_encrypt = 1i32;
|
|
let mut iter1: *mut clistiter;
|
|
iter1 = (*recipients_addr).first;
|
|
while !iter1.is_null() {
|
|
let recipient_addr = to_string((*iter1).data as *const libc::c_char);
|
|
if recipient_addr != addr {
|
|
let peerstate =
|
|
Peerstate::from_addr(context, &context.sql, &recipient_addr);
|
|
if peerstate.is_some()
|
|
&& (peerstate.as_ref().unwrap().prefer_encrypt
|
|
== EncryptPreference::Mutual
|
|
|| 0 != e2ee_guaranteed)
|
|
{
|
|
let peerstate = peerstate.unwrap();
|
|
info!(
|
|
context,
|
|
0, "dc_e2ee_encrypt {} has peerstate", recipient_addr
|
|
);
|
|
if let Some(key) = peerstate.peek_key(min_verified as usize) {
|
|
keyring.add_owned(key.clone());
|
|
peerstates.push(peerstate);
|
|
}
|
|
} else {
|
|
info!(
|
|
context,
|
|
0,
|
|
"dc_e2ee_encrypt {} HAS NO peerstate {}",
|
|
recipient_addr,
|
|
peerstate.is_some()
|
|
);
|
|
do_encrypt = 0i32;
|
|
/* if we cannot encrypt to a single recipient, we cannot encrypt the message at all */
|
|
break;
|
|
}
|
|
}
|
|
iter1 = if !iter1.is_null() {
|
|
(*iter1).next
|
|
} else {
|
|
ptr::null_mut()
|
|
}
|
|
}
|
|
}
|
|
let sign_key = if 0 != do_encrypt {
|
|
keyring.add_ref(&public_key);
|
|
let key = Key::from_self_private(context, addr.clone(), &context.sql);
|
|
|
|
if key.is_none() {
|
|
do_encrypt = 0i32;
|
|
}
|
|
key
|
|
} else {
|
|
None
|
|
};
|
|
if 0 != force_unencrypted {
|
|
do_encrypt = 0i32
|
|
}
|
|
imffields_unprotected = mailmime_find_mailimf_fields(in_out_message);
|
|
if !imffields_unprotected.is_null() {
|
|
/* encrypt message, if possible */
|
|
if 0 != do_encrypt {
|
|
mailprivacy_prepare_mime(in_out_message);
|
|
let mut part_to_encrypt: *mut mailmime =
|
|
(*in_out_message).mm_data.mm_message.mm_msg_mime;
|
|
(*part_to_encrypt).mm_parent = ptr::null_mut();
|
|
let imffields_encrypted: *mut mailimf_fields = mailimf_fields_new_empty();
|
|
/* mailmime_new_message_data() calls mailmime_fields_new_with_version() which would add the unwanted MIME-Version:-header */
|
|
let message_to_encrypt: *mut mailmime = mailmime_new(
|
|
MAILMIME_MESSAGE as libc::c_int,
|
|
ptr::null(),
|
|
0i32 as size_t,
|
|
mailmime_fields_new_empty(),
|
|
mailmime_get_content_message(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
imffields_encrypted,
|
|
part_to_encrypt,
|
|
);
|
|
if 0 != do_gossip {
|
|
let iCnt: libc::c_int = peerstates.len() as libc::c_int;
|
|
if iCnt > 1i32 {
|
|
let mut i: libc::c_int = 0i32;
|
|
while i < iCnt {
|
|
let p = peerstates[i as usize]
|
|
.render_gossip_header(min_verified as usize);
|
|
|
|
if let Some(header) = p {
|
|
mailimf_fields_add(
|
|
imffields_encrypted,
|
|
mailimf_field_new_custom(
|
|
"Autocrypt-Gossip".strdup(),
|
|
header.strdup(),
|
|
),
|
|
);
|
|
}
|
|
i += 1
|
|
}
|
|
}
|
|
}
|
|
/* memoryhole headers */
|
|
let mut cur: *mut clistiter = (*(*imffields_unprotected).fld_list).first;
|
|
while !cur.is_null() {
|
|
let mut move_to_encrypted: libc::c_int = 0i32;
|
|
let field: *mut mailimf_field = (if !cur.is_null() {
|
|
(*cur).data
|
|
} else {
|
|
ptr::null_mut()
|
|
})
|
|
as *mut mailimf_field;
|
|
if !field.is_null() {
|
|
if (*field).fld_type == MAILIMF_FIELD_SUBJECT as libc::c_int {
|
|
move_to_encrypted = 1i32
|
|
} else if (*field).fld_type
|
|
== MAILIMF_FIELD_OPTIONAL_FIELD as libc::c_int
|
|
{
|
|
let opt_field: *mut mailimf_optional_field =
|
|
(*field).fld_data.fld_optional_field;
|
|
if !opt_field.is_null() && !(*opt_field).fld_name.is_null() {
|
|
if strncmp(
|
|
(*opt_field).fld_name,
|
|
b"Secure-Join\x00" as *const u8 as *const libc::c_char,
|
|
11,
|
|
) == 0
|
|
|| strncmp(
|
|
(*opt_field).fld_name,
|
|
b"Chat-\x00" as *const u8 as *const libc::c_char,
|
|
5,
|
|
) == 0
|
|
&& strcmp(
|
|
(*opt_field).fld_name,
|
|
b"Chat-Version\x00" as *const u8
|
|
as *const libc::c_char,
|
|
) != 0
|
|
{
|
|
move_to_encrypted = 1
|
|
}
|
|
}
|
|
}
|
|
}
|
|
if 0 != move_to_encrypted {
|
|
mailimf_fields_add(imffields_encrypted, field);
|
|
cur = clist_delete((*imffields_unprotected).fld_list, cur)
|
|
} else {
|
|
cur = if !cur.is_null() {
|
|
(*cur).next
|
|
} else {
|
|
0 as *mut clistcell
|
|
}
|
|
}
|
|
}
|
|
let subject: *mut mailimf_subject = mailimf_subject_new(dc_strdup(
|
|
b"...\x00" as *const u8 as *const libc::c_char,
|
|
));
|
|
mailimf_fields_add(
|
|
imffields_unprotected,
|
|
mailimf_field_new(
|
|
MAILIMF_FIELD_SUBJECT as libc::c_int,
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
subject,
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
),
|
|
);
|
|
clist_insert_after(
|
|
(*(*part_to_encrypt).mm_content_type).ct_parameters,
|
|
(*(*(*part_to_encrypt).mm_content_type).ct_parameters).last,
|
|
mailmime_param_new_with_data(
|
|
b"protected-headers\x00" as *const u8 as *const libc::c_char
|
|
as *mut libc::c_char,
|
|
b"v1\x00" as *const u8 as *const libc::c_char as *mut libc::c_char,
|
|
) as *mut libc::c_void,
|
|
);
|
|
mailmime_write_mem(plain, &mut col, message_to_encrypt);
|
|
if (*plain).str_0.is_null() || (*plain).len <= 0 {
|
|
ok_to_continue = false;
|
|
} else {
|
|
if let Some(ctext_v) = dc_pgp_pk_encrypt(
|
|
(*plain).str_0 as *const libc::c_void,
|
|
(*plain).len,
|
|
&keyring,
|
|
sign_key.as_ref(),
|
|
) {
|
|
let ctext_bytes = ctext_v.len();
|
|
let ctext = ctext_v.strdup();
|
|
helper.cdata_to_free = ctext as *mut _;
|
|
|
|
/* create MIME-structure that will contain the encrypted text */
|
|
let mut encrypted_part: *mut mailmime = new_data_part(
|
|
ptr::null_mut(),
|
|
0i32 as size_t,
|
|
b"multipart/encrypted\x00" as *const u8 as *const libc::c_char
|
|
as *mut libc::c_char,
|
|
-1i32,
|
|
);
|
|
let content: *mut mailmime_content =
|
|
(*encrypted_part).mm_content_type;
|
|
clist_insert_after(
|
|
(*content).ct_parameters,
|
|
(*(*content).ct_parameters).last,
|
|
mailmime_param_new_with_data(
|
|
b"protocol\x00" as *const u8 as *const libc::c_char
|
|
as *mut libc::c_char,
|
|
b"application/pgp-encrypted\x00" as *const u8
|
|
as *const libc::c_char
|
|
as *mut libc::c_char,
|
|
) as *mut libc::c_void,
|
|
);
|
|
static mut VERSION_CONTENT: [libc::c_char; 13] =
|
|
[86, 101, 114, 115, 105, 111, 110, 58, 32, 49, 13, 10, 0];
|
|
let version_mime: *mut mailmime = new_data_part(
|
|
VERSION_CONTENT.as_mut_ptr() as *mut libc::c_void,
|
|
strlen(VERSION_CONTENT.as_mut_ptr()),
|
|
b"application/pgp-encrypted\x00" as *const u8
|
|
as *const libc::c_char
|
|
as *mut libc::c_char,
|
|
MAILMIME_MECHANISM_7BIT as libc::c_int,
|
|
);
|
|
mailmime_smart_add_part(encrypted_part, version_mime);
|
|
let ctext_part: *mut mailmime = new_data_part(
|
|
ctext as *mut libc::c_void,
|
|
ctext_bytes,
|
|
b"application/octet-stream\x00" as *const u8
|
|
as *const libc::c_char
|
|
as *mut libc::c_char,
|
|
MAILMIME_MECHANISM_7BIT as libc::c_int,
|
|
);
|
|
mailmime_smart_add_part(encrypted_part, ctext_part);
|
|
(*in_out_message).mm_data.mm_message.mm_msg_mime = encrypted_part;
|
|
(*encrypted_part).mm_parent = in_out_message;
|
|
mailmime_free(message_to_encrypt);
|
|
helper.encryption_successfull = 1i32;
|
|
}
|
|
}
|
|
}
|
|
if ok_to_continue {
|
|
let aheader = Aheader::new(addr, public_key, prefer_encrypt);
|
|
mailimf_fields_add(
|
|
imffields_unprotected,
|
|
mailimf_field_new_custom(
|
|
"Autocrypt".strdup(),
|
|
aheader.to_string().strdup(),
|
|
),
|
|
);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if !plain.is_null() {
|
|
mmap_string_free(plain);
|
|
}
|
|
}
|
|
|
|
/*******************************************************************************
|
|
* Tools
|
|
******************************************************************************/
|
|
unsafe fn new_data_part(
|
|
data: *mut libc::c_void,
|
|
data_bytes: size_t,
|
|
default_content_type: *mut libc::c_char,
|
|
default_encoding: libc::c_int,
|
|
) -> *mut mailmime {
|
|
let mut ok_to_continue = true;
|
|
//char basename_buf[PATH_MAX];
|
|
let mut encoding: *mut mailmime_mechanism;
|
|
let content: *mut mailmime_content;
|
|
let mime: *mut mailmime;
|
|
//int r;
|
|
//char * dup_filename;
|
|
let mime_fields: *mut mailmime_fields;
|
|
let encoding_type: libc::c_int;
|
|
let content_type_str: *mut libc::c_char;
|
|
let mut do_encoding: libc::c_int;
|
|
encoding = ptr::null_mut();
|
|
if default_content_type.is_null() {
|
|
content_type_str =
|
|
b"application/octet-stream\x00" as *const u8 as *const libc::c_char as *mut libc::c_char
|
|
} else {
|
|
content_type_str = default_content_type
|
|
}
|
|
content = mailmime_content_new_with_str(content_type_str);
|
|
if content.is_null() {
|
|
ok_to_continue = false;
|
|
} else {
|
|
do_encoding = 1i32;
|
|
if (*(*content).ct_type).tp_type == MAILMIME_TYPE_COMPOSITE_TYPE as libc::c_int {
|
|
let composite: *mut mailmime_composite_type;
|
|
composite = (*(*content).ct_type).tp_data.tp_composite_type;
|
|
match (*composite).ct_type {
|
|
1 => {
|
|
if strcasecmp(
|
|
(*content).ct_subtype,
|
|
b"rfc822\x00" as *const u8 as *const libc::c_char,
|
|
) == 0i32
|
|
{
|
|
do_encoding = 0i32
|
|
}
|
|
}
|
|
2 => do_encoding = 0i32,
|
|
_ => {}
|
|
}
|
|
}
|
|
if 0 != do_encoding {
|
|
if default_encoding == -1i32 {
|
|
encoding_type = MAILMIME_MECHANISM_BASE64 as libc::c_int
|
|
} else {
|
|
encoding_type = default_encoding
|
|
}
|
|
encoding = mailmime_mechanism_new(encoding_type, ptr::null_mut());
|
|
if encoding.is_null() {
|
|
ok_to_continue = false;
|
|
}
|
|
}
|
|
if ok_to_continue {
|
|
mime_fields = mailmime_fields_new_with_data(
|
|
encoding,
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
ptr::null_mut(),
|
|
);
|
|
if mime_fields.is_null() {
|
|
ok_to_continue = false;
|
|
} else {
|
|
mime = mailmime_new_empty(content, mime_fields);
|
|
if mime.is_null() {
|
|
mailmime_fields_free(mime_fields);
|
|
mailmime_content_free(content);
|
|
} else {
|
|
if !data.is_null()
|
|
&& data_bytes > 0
|
|
&& (*mime).mm_type == MAILMIME_SINGLE as libc::c_int
|
|
{
|
|
mailmime_set_body_text(mime, data as *mut libc::c_char, data_bytes);
|
|
}
|
|
return mime;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if ok_to_continue == false {
|
|
if !encoding.is_null() {
|
|
mailmime_mechanism_free(encoding);
|
|
}
|
|
if !content.is_null() {
|
|
mailmime_content_free(content);
|
|
}
|
|
}
|
|
ptr::null_mut()
|
|
}
|
|
|
|
/// Load public key from database or generate a new one.
|
|
///
|
|
/// This will load a public key from the database, generating and
|
|
/// storing a new one when one doesn't exist yet. Care is taken to
|
|
/// only generate one key per context even when multiple threads call
|
|
/// this function concurrently.
|
|
fn load_or_generate_self_public_key(context: &Context, self_addr: impl AsRef<str>) -> Result<Key> {
|
|
if let Some(key) = Key::from_self_public(context, &self_addr, &context.sql) {
|
|
return Ok(key);
|
|
}
|
|
let _guard = context.generating_key_mutex.lock().unwrap();
|
|
|
|
// Check again in case the key was generated while we were waiting for the lock.
|
|
if let Some(key) = Key::from_self_public(context, &self_addr, &context.sql) {
|
|
return Ok(key);
|
|
}
|
|
|
|
let start = std::time::Instant::now();
|
|
info!(
|
|
context,
|
|
0, "Generating keypair with {} bits, e={} ...", 2048, 65537,
|
|
);
|
|
match dc_pgp_create_keypair(&self_addr) {
|
|
Some((public_key, private_key)) => {
|
|
match dc_key_save_self_keypair(
|
|
context,
|
|
&public_key,
|
|
&private_key,
|
|
&self_addr,
|
|
1,
|
|
&context.sql,
|
|
) {
|
|
true => {
|
|
info!(
|
|
context,
|
|
0,
|
|
"Keypair generated in {:.3}s.",
|
|
start.elapsed().as_secs()
|
|
);
|
|
Ok(public_key)
|
|
}
|
|
false => Err(format_err!("Failed to save keypair")),
|
|
}
|
|
}
|
|
None => Err(format_err!("Failed to generate keypair")),
|
|
}
|
|
}
|
|
|
|
/* returns 1 if sth. was decrypted, 0 in other cases */
|
|
pub unsafe fn dc_e2ee_decrypt(
|
|
context: &Context,
|
|
in_out_message: *mut mailmime,
|
|
helper: &mut dc_e2ee_helper_t,
|
|
) {
|
|
let mut iterations: libc::c_int;
|
|
/* return values: 0=nothing to decrypt/cannot decrypt, 1=sth. decrypted
|
|
(to detect parts that could not be decrypted, simply look for left "multipart/encrypted" MIME types */
|
|
/*just a pointer into mailmime structure, must not be freed*/
|
|
let imffields: *mut mailimf_fields = mailmime_find_mailimf_fields(in_out_message);
|
|
let mut message_time = 0;
|
|
let mut from: *mut libc::c_char = ptr::null_mut();
|
|
let mut private_keyring = Keyring::default();
|
|
let mut public_keyring_for_validate = Keyring::default();
|
|
let mut gossip_headers: *mut mailimf_fields = ptr::null_mut();
|
|
if !(in_out_message.is_null() || imffields.is_null()) {
|
|
let mut field: *mut mailimf_field =
|
|
mailimf_find_field(imffields, MAILIMF_FIELD_FROM as libc::c_int);
|
|
if !field.is_null() && !(*field).fld_data.fld_from.is_null() {
|
|
from = mailimf_find_first_addr((*(*field).fld_data.fld_from).frm_mb_list)
|
|
}
|
|
field = mailimf_find_field(imffields, MAILIMF_FIELD_ORIG_DATE as libc::c_int);
|
|
if !field.is_null() && !(*field).fld_data.fld_orig_date.is_null() {
|
|
let orig_date: *mut mailimf_orig_date = (*field).fld_data.fld_orig_date;
|
|
if !orig_date.is_null() {
|
|
message_time = dc_timestamp_from_date((*orig_date).dt_date_time);
|
|
if message_time != 0 && message_time > time() {
|
|
message_time = time()
|
|
}
|
|
}
|
|
}
|
|
let mut peerstate = None;
|
|
let autocryptheader = Aheader::from_imffields(from, imffields);
|
|
if message_time > 0 && !from.is_null() {
|
|
peerstate = Peerstate::from_addr(context, &context.sql, as_str(from));
|
|
|
|
if let Some(ref mut peerstate) = peerstate {
|
|
if let Some(ref header) = autocryptheader {
|
|
peerstate.apply_header(&header, message_time);
|
|
peerstate.save_to_db(&context.sql, false);
|
|
} else if message_time > peerstate.last_seen_autocrypt
|
|
&& 0 == contains_report(in_out_message)
|
|
{
|
|
peerstate.degrade_encryption(message_time);
|
|
peerstate.save_to_db(&context.sql, false);
|
|
}
|
|
} else if let Some(ref header) = autocryptheader {
|
|
let p = Peerstate::from_header(context, header, message_time);
|
|
assert!(p.save_to_db(&context.sql, true));
|
|
peerstate = Some(p);
|
|
}
|
|
}
|
|
/* load private key for decryption */
|
|
let self_addr = context.sql.get_config(context, "configured_addr");
|
|
if let Some(self_addr) = self_addr {
|
|
if private_keyring.load_self_private_for_decrypting(context, self_addr, &context.sql) {
|
|
if peerstate.as_ref().map(|p| p.last_seen).unwrap_or_else(|| 0) == 0 {
|
|
peerstate = Peerstate::from_addr(&context, &context.sql, as_str(from));
|
|
}
|
|
if let Some(ref peerstate) = peerstate {
|
|
if peerstate.degrade_event.is_some() {
|
|
dc_handle_degrade_event(context, &peerstate);
|
|
}
|
|
if let Some(ref key) = peerstate.gossip_key {
|
|
public_keyring_for_validate.add_ref(key);
|
|
}
|
|
if let Some(ref key) = peerstate.public_key {
|
|
public_keyring_for_validate.add_ref(key);
|
|
}
|
|
}
|
|
iterations = 0i32;
|
|
while iterations < 10i32 {
|
|
let mut has_unencrypted_parts: libc::c_int = 0i32;
|
|
if 0 == decrypt_recursive(
|
|
context,
|
|
in_out_message,
|
|
&private_keyring,
|
|
&public_keyring_for_validate,
|
|
&mut helper.signatures,
|
|
&mut gossip_headers,
|
|
&mut has_unencrypted_parts,
|
|
) {
|
|
break;
|
|
}
|
|
if iterations == 0i32 && 0 == has_unencrypted_parts {
|
|
helper.encrypted = 1i32
|
|
}
|
|
iterations += 1
|
|
}
|
|
if !gossip_headers.is_null() {
|
|
helper.gossipped_addr =
|
|
update_gossip_peerstates(context, message_time, imffields, gossip_headers)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
//mailmime_print(in_out_message);
|
|
if !gossip_headers.is_null() {
|
|
mailimf_fields_free(gossip_headers);
|
|
}
|
|
|
|
free(from as *mut libc::c_void);
|
|
}
|
|
|
|
unsafe fn update_gossip_peerstates(
|
|
context: &Context,
|
|
message_time: i64,
|
|
imffields: *mut mailimf_fields,
|
|
gossip_headers: *const mailimf_fields,
|
|
) -> HashSet<String> {
|
|
let mut cur1: *mut clistiter;
|
|
let mut recipients: Option<HashSet<String>> = None;
|
|
let mut gossipped_addr: HashSet<String> = Default::default();
|
|
cur1 = (*(*gossip_headers).fld_list).first;
|
|
while !cur1.is_null() {
|
|
let field: *mut mailimf_field = (if !cur1.is_null() {
|
|
(*cur1).data
|
|
} else {
|
|
ptr::null_mut()
|
|
}) as *mut mailimf_field;
|
|
if (*field).fld_type == MAILIMF_FIELD_OPTIONAL_FIELD as libc::c_int {
|
|
let optional_field: *const mailimf_optional_field =
|
|
(*field).fld_data.fld_optional_field;
|
|
if !optional_field.is_null()
|
|
&& !(*optional_field).fld_name.is_null()
|
|
&& strcasecmp(
|
|
(*optional_field).fld_name,
|
|
b"Autocrypt-Gossip\x00" as *const u8 as *const libc::c_char,
|
|
) == 0i32
|
|
{
|
|
let value = CStr::from_ptr((*optional_field).fld_value)
|
|
.to_str()
|
|
.unwrap();
|
|
let gossip_header = Aheader::from_str(value);
|
|
if let Ok(ref header) = gossip_header {
|
|
if recipients.is_none() {
|
|
recipients = Some(mailimf_get_recipients(imffields));
|
|
}
|
|
if recipients.as_ref().unwrap().contains(&header.addr) {
|
|
let mut peerstate =
|
|
Peerstate::from_addr(context, &context.sql, &header.addr);
|
|
if let Some(ref mut peerstate) = peerstate {
|
|
peerstate.apply_gossip(header, message_time);
|
|
peerstate.save_to_db(&context.sql, false);
|
|
} else {
|
|
let p = Peerstate::from_gossip(context, header, message_time);
|
|
p.save_to_db(&context.sql, true);
|
|
peerstate = Some(p);
|
|
}
|
|
if let Some(peerstate) = peerstate {
|
|
if peerstate.degrade_event.is_some() {
|
|
dc_handle_degrade_event(context, &peerstate);
|
|
}
|
|
}
|
|
|
|
gossipped_addr.insert(header.addr.clone());
|
|
} else {
|
|
info!(
|
|
context,
|
|
0,
|
|
"Ignoring gossipped \"{}\" as the address is not in To/Cc list.",
|
|
&header.addr,
|
|
);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
cur1 = if !cur1.is_null() {
|
|
(*cur1).next
|
|
} else {
|
|
ptr::null_mut()
|
|
}
|
|
}
|
|
|
|
gossipped_addr
|
|
}
|
|
|
|
// TODO should return bool /rtn
|
|
unsafe fn decrypt_recursive(
|
|
context: &Context,
|
|
mime: *mut mailmime,
|
|
private_keyring: &Keyring,
|
|
public_keyring_for_validate: &Keyring,
|
|
ret_valid_signatures: &mut HashSet<String>,
|
|
ret_gossip_headers: *mut *mut mailimf_fields,
|
|
ret_has_unencrypted_parts: *mut libc::c_int,
|
|
) -> libc::c_int {
|
|
let ct: *mut mailmime_content;
|
|
let mut cur: *mut clistiter;
|
|
if mime.is_null() {
|
|
return 0i32;
|
|
}
|
|
if (*mime).mm_type == MAILMIME_MULTIPLE as libc::c_int {
|
|
ct = (*mime).mm_content_type;
|
|
if !ct.is_null()
|
|
&& !(*ct).ct_subtype.is_null()
|
|
&& strcmp(
|
|
(*ct).ct_subtype,
|
|
b"encrypted\x00" as *const u8 as *const libc::c_char,
|
|
) == 0i32
|
|
{
|
|
cur = (*(*mime).mm_data.mm_multipart.mm_mp_list).first;
|
|
while !cur.is_null() {
|
|
let mut decrypted_mime: *mut mailmime = ptr::null_mut();
|
|
if 0 != decrypt_part(
|
|
context,
|
|
(if !cur.is_null() {
|
|
(*cur).data
|
|
} else {
|
|
0 as *mut libc::c_void
|
|
}) as *mut mailmime,
|
|
private_keyring,
|
|
public_keyring_for_validate,
|
|
ret_valid_signatures,
|
|
&mut decrypted_mime,
|
|
) {
|
|
if (*ret_gossip_headers).is_null() && ret_valid_signatures.len() > 0 {
|
|
let mut dummy: size_t = 0i32 as size_t;
|
|
let mut test: *mut mailimf_fields = ptr::null_mut();
|
|
if mailimf_envelope_and_optional_fields_parse(
|
|
(*decrypted_mime).mm_mime_start,
|
|
(*decrypted_mime).mm_length,
|
|
&mut dummy,
|
|
&mut test,
|
|
) == MAILIMF_NO_ERROR as libc::c_int
|
|
&& !test.is_null()
|
|
{
|
|
*ret_gossip_headers = test
|
|
}
|
|
}
|
|
mailmime_substitute(mime, decrypted_mime);
|
|
mailmime_free(mime);
|
|
return 1i32;
|
|
}
|
|
cur = if !cur.is_null() {
|
|
(*cur).next
|
|
} else {
|
|
0 as *mut clistcell
|
|
}
|
|
}
|
|
*ret_has_unencrypted_parts = 1i32
|
|
} else {
|
|
cur = (*(*mime).mm_data.mm_multipart.mm_mp_list).first;
|
|
while !cur.is_null() {
|
|
if 0 != decrypt_recursive(
|
|
context,
|
|
(if !cur.is_null() {
|
|
(*cur).data
|
|
} else {
|
|
ptr::null_mut()
|
|
}) as *mut mailmime,
|
|
private_keyring,
|
|
public_keyring_for_validate,
|
|
ret_valid_signatures,
|
|
ret_gossip_headers,
|
|
ret_has_unencrypted_parts,
|
|
) {
|
|
return 1i32;
|
|
}
|
|
cur = if !cur.is_null() {
|
|
(*cur).next
|
|
} else {
|
|
ptr::null_mut()
|
|
}
|
|
}
|
|
}
|
|
} else if (*mime).mm_type == MAILMIME_MESSAGE as libc::c_int {
|
|
if 0 != decrypt_recursive(
|
|
context,
|
|
(*mime).mm_data.mm_message.mm_msg_mime,
|
|
private_keyring,
|
|
public_keyring_for_validate,
|
|
ret_valid_signatures,
|
|
ret_gossip_headers,
|
|
ret_has_unencrypted_parts,
|
|
) {
|
|
return 1i32;
|
|
}
|
|
} else {
|
|
*ret_has_unencrypted_parts = 1i32
|
|
}
|
|
|
|
0
|
|
}
|
|
|
|
unsafe fn decrypt_part(
|
|
_context: &Context,
|
|
mime: *mut mailmime,
|
|
private_keyring: &Keyring,
|
|
public_keyring_for_validate: &Keyring,
|
|
ret_valid_signatures: &mut HashSet<String>,
|
|
ret_decrypted_mime: *mut *mut mailmime,
|
|
) -> libc::c_int {
|
|
let mut ok_to_continue = true;
|
|
let mime_data: *mut mailmime_data;
|
|
let mut mime_transfer_encoding: libc::c_int = MAILMIME_MECHANISM_BINARY as libc::c_int;
|
|
/* mmap_string_unref()'d if set */
|
|
let mut transfer_decoding_buffer: *mut libc::c_char = ptr::null_mut();
|
|
/* must not be free()'d */
|
|
let mut decoded_data: *const libc::c_char = ptr::null_mut();
|
|
let mut decoded_data_bytes: size_t = 0i32 as size_t;
|
|
let mut sth_decrypted: libc::c_int = 0i32;
|
|
*ret_decrypted_mime = ptr::null_mut();
|
|
mime_data = (*mime).mm_data.mm_single;
|
|
/* MAILMIME_DATA_FILE indicates, the data is in a file; AFAIK this is not used on parsing */
|
|
if !((*mime_data).dt_type != MAILMIME_DATA_TEXT as libc::c_int
|
|
|| (*mime_data).dt_data.dt_text.dt_data.is_null()
|
|
|| (*mime_data).dt_data.dt_text.dt_length <= 0)
|
|
{
|
|
if !(*mime).mm_mime_fields.is_null() {
|
|
let mut cur: *mut clistiter;
|
|
cur = (*(*(*mime).mm_mime_fields).fld_list).first;
|
|
while !cur.is_null() {
|
|
let field: *mut mailmime_field = (if !cur.is_null() {
|
|
(*cur).data
|
|
} else {
|
|
ptr::null_mut()
|
|
}) as *mut mailmime_field;
|
|
if !field.is_null() {
|
|
if (*field).fld_type == MAILMIME_FIELD_TRANSFER_ENCODING as libc::c_int
|
|
&& !(*field).fld_data.fld_encoding.is_null()
|
|
{
|
|
mime_transfer_encoding = (*(*field).fld_data.fld_encoding).enc_type
|
|
}
|
|
}
|
|
cur = if !cur.is_null() {
|
|
(*cur).next
|
|
} else {
|
|
ptr::null_mut()
|
|
}
|
|
}
|
|
}
|
|
/* regard `Content-Transfer-Encoding:` */
|
|
if mime_transfer_encoding == MAILMIME_MECHANISM_7BIT as libc::c_int
|
|
|| mime_transfer_encoding == MAILMIME_MECHANISM_8BIT as libc::c_int
|
|
|| mime_transfer_encoding == MAILMIME_MECHANISM_BINARY as libc::c_int
|
|
{
|
|
decoded_data = (*mime_data).dt_data.dt_text.dt_data;
|
|
decoded_data_bytes = (*mime_data).dt_data.dt_text.dt_length;
|
|
if decoded_data.is_null() || decoded_data_bytes <= 0 {
|
|
/* no error - but no data */
|
|
ok_to_continue = false;
|
|
}
|
|
} else {
|
|
let r: libc::c_int;
|
|
let mut current_index: size_t = 0i32 as size_t;
|
|
r = mailmime_part_parse(
|
|
(*mime_data).dt_data.dt_text.dt_data,
|
|
(*mime_data).dt_data.dt_text.dt_length,
|
|
&mut current_index,
|
|
mime_transfer_encoding,
|
|
&mut transfer_decoding_buffer,
|
|
&mut decoded_data_bytes,
|
|
);
|
|
if r != MAILIMF_NO_ERROR as libc::c_int
|
|
|| transfer_decoding_buffer.is_null()
|
|
|| decoded_data_bytes <= 0
|
|
{
|
|
ok_to_continue = false;
|
|
} else {
|
|
decoded_data = transfer_decoding_buffer;
|
|
}
|
|
}
|
|
if ok_to_continue {
|
|
/* encrypted, decoded data in decoded_data now ... */
|
|
if !(0 == has_decrypted_pgp_armor(decoded_data, decoded_data_bytes as libc::c_int)) {
|
|
let add_signatures = if ret_valid_signatures.is_empty() {
|
|
Some(ret_valid_signatures)
|
|
} else {
|
|
None
|
|
};
|
|
|
|
/*if we already have fingerprints, do not add more; this ensures, only the fingerprints from the outer-most part are collected */
|
|
if let Some(plain) = dc_pgp_pk_decrypt(
|
|
decoded_data as *const libc::c_void,
|
|
decoded_data_bytes,
|
|
&private_keyring,
|
|
&public_keyring_for_validate,
|
|
add_signatures,
|
|
) {
|
|
let plain_bytes = plain.len();
|
|
let plain_buf = plain.as_ptr() as *const libc::c_char;
|
|
|
|
let mut index: size_t = 0i32 as size_t;
|
|
let mut decrypted_mime: *mut mailmime = ptr::null_mut();
|
|
if mailmime_parse(
|
|
plain_buf as *const _,
|
|
plain_bytes,
|
|
&mut index,
|
|
&mut decrypted_mime,
|
|
) != MAIL_NO_ERROR as libc::c_int
|
|
|| decrypted_mime.is_null()
|
|
{
|
|
if !decrypted_mime.is_null() {
|
|
mailmime_free(decrypted_mime);
|
|
}
|
|
} else {
|
|
*ret_decrypted_mime = decrypted_mime;
|
|
sth_decrypted = 1i32
|
|
}
|
|
std::mem::forget(plain);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
//mailmime_substitute(mime, new_mime);
|
|
//s. mailprivacy_gnupg.c::pgp_decrypt()
|
|
if !transfer_decoding_buffer.is_null() {
|
|
mmap_string_unref(transfer_decoding_buffer);
|
|
}
|
|
|
|
sth_decrypted
|
|
}
|
|
|
|
/*******************************************************************************
|
|
* Decrypt
|
|
******************************************************************************/
|
|
// TODO should return bool /rtn
|
|
unsafe fn has_decrypted_pgp_armor(
|
|
str__: *const libc::c_char,
|
|
mut str_bytes: libc::c_int,
|
|
) -> libc::c_int {
|
|
let str_end: *const libc::c_uchar = (str__ as *const libc::c_uchar).offset(str_bytes as isize);
|
|
let mut p: *const libc::c_uchar = str__ as *const libc::c_uchar;
|
|
while p < str_end {
|
|
if *p as libc::c_int > ' ' as i32 {
|
|
break;
|
|
}
|
|
p = p.offset(1isize);
|
|
str_bytes -= 1
|
|
}
|
|
if str_bytes > 27i32
|
|
&& strncmp(
|
|
p as *const libc::c_char,
|
|
b"-----BEGIN PGP MESSAGE-----\x00" as *const u8 as *const libc::c_char,
|
|
27,
|
|
) == 0
|
|
{
|
|
return 1;
|
|
}
|
|
|
|
0
|
|
}
|
|
|
|
/**
|
|
* Check if a MIME structure contains a multipart/report part.
|
|
*
|
|
* As reports are often unencrypted, we do not reset the Autocrypt header in
|
|
* this case.
|
|
*
|
|
* However, Delta Chat itself has no problem with encrypted multipart/report
|
|
* parts and MUAs should be encouraged to encrpyt multipart/reports as well so
|
|
* that we could use the normal Autocrypt processing.
|
|
*
|
|
* @private
|
|
* @param mime The mime structure to check
|
|
* @return 1=multipart/report found in MIME, 0=no multipart/report found
|
|
*/
|
|
// TODO should return bool /rtn
|
|
unsafe fn contains_report(mime: *mut mailmime) -> libc::c_int {
|
|
if (*mime).mm_type == MAILMIME_MULTIPLE as libc::c_int {
|
|
if (*(*(*mime).mm_content_type).ct_type).tp_type
|
|
== MAILMIME_TYPE_COMPOSITE_TYPE as libc::c_int
|
|
&& (*(*(*(*mime).mm_content_type).ct_type)
|
|
.tp_data
|
|
.tp_composite_type)
|
|
.ct_type
|
|
== MAILMIME_COMPOSITE_TYPE_MULTIPART as libc::c_int
|
|
&& strcmp(
|
|
(*(*mime).mm_content_type).ct_subtype,
|
|
b"report\x00" as *const u8 as *const libc::c_char,
|
|
) == 0i32
|
|
{
|
|
return 1i32;
|
|
}
|
|
let mut cur: *mut clistiter;
|
|
cur = (*(*mime).mm_data.mm_multipart.mm_mp_list).first;
|
|
while !cur.is_null() {
|
|
if 0 != contains_report(
|
|
(if !cur.is_null() {
|
|
(*cur).data
|
|
} else {
|
|
ptr::null_mut()
|
|
}) as *mut mailmime,
|
|
) {
|
|
return 1i32;
|
|
}
|
|
cur = if !cur.is_null() {
|
|
(*cur).next
|
|
} else {
|
|
0 as *mut clistcell
|
|
}
|
|
}
|
|
} else if (*mime).mm_type == MAILMIME_MESSAGE as libc::c_int {
|
|
if 0 != contains_report((*mime).mm_data.mm_message.mm_msg_mime) {
|
|
return 1i32;
|
|
}
|
|
}
|
|
|
|
0
|
|
}
|
|
|
|
/* frees data referenced by "mailmime" but not freed by mailmime_free(). After calling this function, in_out_message cannot be used any longer! */
|
|
pub unsafe fn dc_e2ee_thanks(helper: &mut dc_e2ee_helper_t) {
|
|
free(helper.cdata_to_free);
|
|
helper.cdata_to_free = ptr::null_mut();
|
|
}
|
|
|
|
/// Ensures a private key exists for the configured user.
|
|
///
|
|
/// Normally the private key is generated when the first message is
|
|
/// sent but in a few locations there are no such guarantees,
|
|
/// e.g. when exporting keys, and calling this function ensures a
|
|
/// private key will be present.
|
|
///
|
|
/// If this succeeds you are also guaranteed that the
|
|
/// [Config::ConfiguredAddr] is configured, this address is returned.
|
|
pub fn dc_ensure_secret_key_exists(context: &Context) -> Result<String> {
|
|
let self_addr = context
|
|
.get_config(Config::ConfiguredAddr)
|
|
.ok_or(format_err!(concat!(
|
|
"Failed to get self address, ",
|
|
"cannot ensure secret key if not configured."
|
|
)))?;
|
|
load_or_generate_self_public_key(context, &self_addr)?;
|
|
Ok(self_addr)
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests {
|
|
use super::*;
|
|
|
|
use crate::test_utils::*;
|
|
|
|
mod ensure_secret_key_exists {
|
|
use super::*;
|
|
|
|
#[test]
|
|
fn test_prexisting() {
|
|
let t = dummy_context();
|
|
let test_addr = configure_alice_keypair(&t.ctx);
|
|
assert_eq!(dc_ensure_secret_key_exists(&t.ctx).unwrap(), test_addr);
|
|
}
|
|
|
|
#[test]
|
|
fn test_not_configured() {
|
|
let t = dummy_context();
|
|
assert!(dc_ensure_secret_key_exists(&t.ctx).is_err());
|
|
}
|
|
}
|
|
|
|
#[test]
|
|
fn test_mailmime_parse() {
|
|
let plain = b"Chat-Disposition-Notification-To: holger@deltachat.de
|
|
Chat-Group-ID: CovhGgau8M-
|
|
Chat-Group-Name: Delta Chat Dev
|
|
Subject: =?utf-8?Q?Chat=3A?= Delta Chat =?utf-8?Q?Dev=3A?= sidenote for
|
|
=?utf-8?Q?all=3A?= rust core master ...
|
|
Content-Type: text/plain; charset=\"utf-8\"; protected-headers=\"v1\"
|
|
Content-Transfer-Encoding: quoted-printable
|
|
|
|
sidenote for all: rust core master is broken currently ... so dont recomm=
|
|
end to try to run with desktop or ios unless you are ready to hunt bugs
|
|
|
|
-- =20
|
|
Sent with my Delta Chat Messenger: https://delta.chat";
|
|
let plain_bytes = plain.len();
|
|
let plain_buf = plain.as_ptr() as *const libc::c_char;
|
|
|
|
let mut index = 0;
|
|
let mut decrypted_mime = std::ptr::null_mut();
|
|
|
|
let res = unsafe {
|
|
mailmime_parse(
|
|
plain_buf as *const _,
|
|
plain_bytes,
|
|
&mut index,
|
|
&mut decrypted_mime,
|
|
)
|
|
};
|
|
unsafe {
|
|
let msg1 = (*decrypted_mime).mm_data.mm_message.mm_msg_mime;
|
|
let mut decoded_data = 0 as *const libc::c_char;
|
|
let mut decoded_data_bytes = 0;
|
|
let mut transfer_decoding_buffer: *mut libc::c_char = 0 as *mut libc::c_char;
|
|
|
|
assert_eq!(
|
|
mailmime_transfer_decode(
|
|
msg1,
|
|
&mut decoded_data,
|
|
&mut decoded_data_bytes,
|
|
&mut transfer_decoding_buffer,
|
|
),
|
|
1
|
|
);
|
|
println!(
|
|
"{:?}",
|
|
String::from_utf8_lossy(std::slice::from_raw_parts(
|
|
decoded_data as *const u8,
|
|
decoded_data_bytes as usize,
|
|
))
|
|
);
|
|
|
|
free(decoded_data as *mut _);
|
|
}
|
|
|
|
assert_eq!(res, 0);
|
|
assert!(!decrypted_mime.is_null());
|
|
|
|
unsafe { free(decrypted_mime as *mut _) };
|
|
}
|
|
|
|
mod load_or_generate_self_public_key {
|
|
use super::*;
|
|
|
|
#[test]
|
|
fn test_existing() {
|
|
let t = dummy_context();
|
|
let addr = configure_alice_keypair(&t.ctx);
|
|
let key = load_or_generate_self_public_key(&t.ctx, addr);
|
|
assert!(key.is_ok());
|
|
}
|
|
|
|
#[test]
|
|
#[ignore] // generating keys is expensive
|
|
fn test_generate() {
|
|
let t = dummy_context();
|
|
let addr = "alice@example.org";
|
|
let key0 = load_or_generate_self_public_key(&t.ctx, addr);
|
|
assert!(key0.is_ok());
|
|
let key1 = load_or_generate_self_public_key(&t.ctx, addr);
|
|
assert!(key1.is_ok());
|
|
assert_eq!(key0.unwrap(), key1.unwrap());
|
|
}
|
|
|
|
#[test]
|
|
#[ignore]
|
|
fn test_generate_concurrent() {
|
|
use std::sync::Arc;
|
|
use std::thread;
|
|
|
|
let t = dummy_context();
|
|
let ctx = Arc::new(t.ctx);
|
|
let ctx0 = Arc::clone(&ctx);
|
|
let thr0 =
|
|
thread::spawn(move || load_or_generate_self_public_key(&ctx0, "alice@example.org"));
|
|
let ctx1 = Arc::clone(&ctx);
|
|
let thr1 =
|
|
thread::spawn(move || load_or_generate_self_public_key(&ctx1, "alice@example.org"));
|
|
let res0 = thr0.join().unwrap();
|
|
let res1 = thr1.join().unwrap();
|
|
assert_eq!(res0.unwrap(), res1.unwrap());
|
|
}
|
|
}
|
|
}
|