crypt32: Add base message type and use it to implement CryptMsgDuplicate and CryptMsg...
[wine] / dlls / crypt32 / crl.c
1 /*
2  * Copyright 2006 Juan Lang
3  *
4  * This library is free software; you can redistribute it and/or
5  * modify it under the terms of the GNU Lesser General Public
6  * License as published by the Free Software Foundation; either
7  * version 2.1 of the License, or (at your option) any later version.
8  *
9  * This library is distributed in the hope that it will be useful,
10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
12  * Lesser General Public License for more details.
13  *
14  * You should have received a copy of the GNU Lesser General Public
15  * License along with this library; if not, write to the Free Software
16  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
17  *
18  */
19
20 #include <assert.h>
21 #include <stdarg.h>
22 #include "windef.h"
23 #include "winbase.h"
24 #include "wincrypt.h"
25 #include "wine/debug.h"
26 #include "crypt32_private.h"
27
28 WINE_DEFAULT_DEBUG_CHANNEL(crypt);
29
30 PCCRL_CONTEXT WINAPI CertCreateCRLContext(DWORD dwCertEncodingType,
31  const BYTE* pbCrlEncoded, DWORD cbCrlEncoded)
32 {
33     PCRL_CONTEXT crl = NULL;
34     BOOL ret;
35     PCRL_INFO crlInfo = NULL;
36     DWORD size = 0;
37
38     TRACE("(%08x, %p, %d)\n", dwCertEncodingType, pbCrlEncoded,
39      cbCrlEncoded);
40
41     if ((dwCertEncodingType & CERT_ENCODING_TYPE_MASK) != X509_ASN_ENCODING)
42     {
43         SetLastError(E_INVALIDARG);
44         return NULL;
45     }
46     ret = CryptDecodeObjectEx(dwCertEncodingType, X509_CERT_CRL_TO_BE_SIGNED,
47      pbCrlEncoded, cbCrlEncoded, CRYPT_DECODE_ALLOC_FLAG, NULL,
48      (BYTE *)&crlInfo, &size);
49     if (ret)
50     {
51         BYTE *data = NULL;
52
53         crl = (PCRL_CONTEXT)Context_CreateDataContext(sizeof(CRL_CONTEXT));
54         if (!crl)
55             goto end;
56         data = CryptMemAlloc(cbCrlEncoded);
57         if (!data)
58         {
59             CryptMemFree(crl);
60             crl = NULL;
61             goto end;
62         }
63         memcpy(data, pbCrlEncoded, cbCrlEncoded);
64         crl->dwCertEncodingType = dwCertEncodingType;
65         crl->pbCrlEncoded       = data;
66         crl->cbCrlEncoded       = cbCrlEncoded;
67         crl->pCrlInfo           = crlInfo;
68         crl->hCertStore         = 0;
69     }
70
71 end:
72     return (PCCRL_CONTEXT)crl;
73 }
74
75 BOOL WINAPI CertAddEncodedCRLToStore(HCERTSTORE hCertStore,
76  DWORD dwCertEncodingType, const BYTE *pbCrlEncoded, DWORD cbCrlEncoded,
77  DWORD dwAddDisposition, PCCRL_CONTEXT *ppCrlContext)
78 {
79     PCCRL_CONTEXT crl = CertCreateCRLContext(dwCertEncodingType,
80      pbCrlEncoded, cbCrlEncoded);
81     BOOL ret;
82
83     TRACE("(%p, %08x, %p, %d, %08x, %p)\n", hCertStore, dwCertEncodingType,
84      pbCrlEncoded, cbCrlEncoded, dwAddDisposition, ppCrlContext);
85
86     if (crl)
87     {
88         ret = CertAddCRLContextToStore(hCertStore, crl, dwAddDisposition,
89          ppCrlContext);
90         CertFreeCRLContext(crl);
91     }
92     else
93         ret = FALSE;
94     return ret;
95 }
96
97 typedef BOOL (*CrlCompareFunc)(PCCRL_CONTEXT pCrlContext, DWORD dwType,
98  DWORD dwFlags, const void *pvPara);
99
100 static BOOL compare_crl_any(PCCRL_CONTEXT pCrlContext, DWORD dwType,
101  DWORD dwFlags, const void *pvPara)
102 {
103     return TRUE;
104 }
105
106 static BOOL compare_crl_issued_by(PCCRL_CONTEXT pCrlContext, DWORD dwType,
107  DWORD dwFlags, const void *pvPara)
108 {
109     BOOL ret;
110
111     if (pvPara)
112     {
113         PCCERT_CONTEXT issuer = (PCCERT_CONTEXT)pvPara;
114
115         ret = CertCompareCertificateName(issuer->dwCertEncodingType,
116          &issuer->pCertInfo->Issuer, &pCrlContext->pCrlInfo->Issuer);
117     }
118     else
119         ret = TRUE;
120     return ret;
121 }
122
123 static BOOL compare_crl_existing(PCCRL_CONTEXT pCrlContext, DWORD dwType,
124  DWORD dwFlags, const void *pvPara)
125 {
126     BOOL ret;
127
128     if (pvPara)
129     {
130         PCCRL_CONTEXT crl = (PCCRL_CONTEXT)pvPara;
131
132         ret = CertCompareCertificateName(pCrlContext->dwCertEncodingType,
133          &pCrlContext->pCrlInfo->Issuer, &crl->pCrlInfo->Issuer);
134     }
135     else
136         ret = TRUE;
137     return ret;
138 }
139
140 PCCRL_CONTEXT WINAPI CertFindCRLInStore(HCERTSTORE hCertStore,
141  DWORD dwCertEncodingType, DWORD dwFindFlags, DWORD dwFindType,
142  const void *pvFindPara, PCCRL_CONTEXT pPrevCrlContext)
143 {
144     PCCRL_CONTEXT ret;
145     CrlCompareFunc compare;
146
147     TRACE("(%p, %d, %d, %d, %p, %p)\n", hCertStore, dwCertEncodingType,
148          dwFindFlags, dwFindType, pvFindPara, pPrevCrlContext);
149
150     switch (dwFindType)
151     {
152     case CRL_FIND_ANY:
153         compare = compare_crl_any;
154         break;
155     case CRL_FIND_ISSUED_BY:
156         compare = compare_crl_issued_by;
157         break;
158     case CRL_FIND_EXISTING:
159         compare = compare_crl_existing;
160         break;
161     default:
162         FIXME("find type %08x unimplemented\n", dwFindType);
163         compare = NULL;
164     }
165
166     if (compare)
167     {
168         BOOL matches = FALSE;
169
170         ret = pPrevCrlContext;
171         do {
172             ret = CertEnumCRLsInStore(hCertStore, ret);
173             if (ret)
174                 matches = compare(ret, dwFindType, dwFindFlags, pvFindPara);
175         } while (ret != NULL && !matches);
176         if (!ret)
177             SetLastError(CRYPT_E_NOT_FOUND);
178     }
179     else
180     {
181         SetLastError(CRYPT_E_NOT_FOUND);
182         ret = NULL;
183     }
184     return ret;
185 }
186
187 PCCRL_CONTEXT WINAPI CertGetCRLFromStore(HCERTSTORE hCertStore,
188  PCCERT_CONTEXT pIssuerContext, PCCRL_CONTEXT pPrevCrlContext, DWORD *pdwFlags)
189 {
190     static const DWORD supportedFlags = CERT_STORE_SIGNATURE_FLAG |
191      CERT_STORE_TIME_VALIDITY_FLAG | CERT_STORE_BASE_CRL_FLAG |
192      CERT_STORE_DELTA_CRL_FLAG;
193     PCCRL_CONTEXT ret;
194
195     TRACE("(%p, %p, %p, %08x)\n", hCertStore, pIssuerContext, pPrevCrlContext,
196      *pdwFlags);
197
198     if (*pdwFlags & ~supportedFlags)
199     {
200         SetLastError(E_INVALIDARG);
201         return NULL;
202     }
203     if (pIssuerContext)
204         ret = CertFindCRLInStore(hCertStore, pIssuerContext->dwCertEncodingType,
205          0, CRL_FIND_ISSUED_BY, pIssuerContext, pPrevCrlContext);
206     else
207         ret = CertFindCRLInStore(hCertStore, 0, 0, CRL_FIND_ANY, NULL,
208          pPrevCrlContext);
209     if (ret)
210     {
211         if (*pdwFlags & CERT_STORE_TIME_VALIDITY_FLAG)
212         {
213             if (0 == CertVerifyCRLTimeValidity(NULL, ret->pCrlInfo))
214                 *pdwFlags &= ~CERT_STORE_TIME_VALIDITY_FLAG;
215         }
216         if (*pdwFlags & CERT_STORE_SIGNATURE_FLAG)
217         {
218             if (CryptVerifyCertificateSignatureEx(0, ret->dwCertEncodingType,
219              CRYPT_VERIFY_CERT_SIGN_SUBJECT_CRL, (void *)ret,
220              CRYPT_VERIFY_CERT_SIGN_ISSUER_CERT, (void *)pIssuerContext, 0,
221              NULL))
222                 *pdwFlags &= ~CERT_STORE_SIGNATURE_FLAG;
223         }
224     }
225     return ret;
226 }
227
228 PCCRL_CONTEXT WINAPI CertDuplicateCRLContext(PCCRL_CONTEXT pCrlContext)
229 {
230     TRACE("(%p)\n", pCrlContext);
231     Context_AddRef((void *)pCrlContext, sizeof(CRL_CONTEXT));
232     return pCrlContext;
233 }
234
235 static void CrlDataContext_Free(void *context)
236 {
237     PCRL_CONTEXT crlContext = (PCRL_CONTEXT)context;
238
239     CryptMemFree(crlContext->pbCrlEncoded);
240     LocalFree(crlContext->pCrlInfo);
241 }
242
243 BOOL WINAPI CertFreeCRLContext( PCCRL_CONTEXT pCrlContext)
244 {
245     TRACE("(%p)\n", pCrlContext);
246
247     if (pCrlContext)
248         Context_Release((void *)pCrlContext, sizeof(CRL_CONTEXT),
249          CrlDataContext_Free);
250     return TRUE;
251 }
252
253 DWORD WINAPI CertEnumCRLContextProperties(PCCRL_CONTEXT pCRLContext,
254  DWORD dwPropId)
255 {
256     PCONTEXT_PROPERTY_LIST properties = Context_GetProperties(
257      (void *)pCRLContext, sizeof(CRL_CONTEXT));
258     DWORD ret;
259
260     TRACE("(%p, %d)\n", pCRLContext, dwPropId);
261
262     if (properties)
263         ret = ContextPropertyList_EnumPropIDs(properties, dwPropId);
264     else
265         ret = 0;
266     return ret;
267 }
268
269 static BOOL WINAPI CRLContext_SetProperty(void *context, DWORD dwPropId,
270  DWORD dwFlags, const void *pvData);
271
272 static BOOL CRLContext_GetHashProp(void *context, DWORD dwPropId,
273  ALG_ID algID, const BYTE *toHash, DWORD toHashLen, void *pvData,
274  DWORD *pcbData)
275 {
276     BOOL ret = CryptHashCertificate(0, algID, 0, toHash, toHashLen, pvData,
277      pcbData);
278     if (ret)
279     {
280         CRYPT_DATA_BLOB blob = { *pcbData, pvData };
281
282         ret = CRLContext_SetProperty(context, dwPropId, 0, &blob);
283     }
284     return ret;
285 }
286
287 static BOOL WINAPI CRLContext_GetProperty(void *context, DWORD dwPropId,
288  void *pvData, DWORD *pcbData)
289 {
290     PCCRL_CONTEXT pCRLContext = (PCCRL_CONTEXT)context;
291     PCONTEXT_PROPERTY_LIST properties =
292      Context_GetProperties(context, sizeof(CRL_CONTEXT));
293     BOOL ret;
294     CRYPT_DATA_BLOB blob;
295
296     TRACE("(%p, %d, %p, %p)\n", context, dwPropId, pvData, pcbData);
297
298     if (properties)
299         ret = ContextPropertyList_FindProperty(properties, dwPropId, &blob);
300     else
301         ret = FALSE;
302     if (ret)
303     {
304         if (!pvData)
305             *pcbData = blob.cbData;
306         else if (*pcbData < blob.cbData)
307         {
308             SetLastError(ERROR_MORE_DATA);
309             *pcbData = blob.cbData;
310             ret = FALSE;
311         }
312         else
313         {
314             memcpy(pvData, blob.pbData, blob.cbData);
315             *pcbData = blob.cbData;
316         }
317     }
318     else
319     {
320         /* Implicit properties */
321         switch (dwPropId)
322         {
323         case CERT_SHA1_HASH_PROP_ID:
324             ret = CRLContext_GetHashProp(context, dwPropId, CALG_SHA1,
325              pCRLContext->pbCrlEncoded, pCRLContext->cbCrlEncoded, pvData,
326              pcbData);
327             break;
328         case CERT_MD5_HASH_PROP_ID:
329             ret = CRLContext_GetHashProp(context, dwPropId, CALG_MD5,
330              pCRLContext->pbCrlEncoded, pCRLContext->cbCrlEncoded, pvData,
331              pcbData);
332             break;
333         default:
334             SetLastError(CRYPT_E_NOT_FOUND);
335         }
336     }
337     TRACE("returning %d\n", ret);
338     return ret;
339 }
340
341 BOOL WINAPI CertGetCRLContextProperty(PCCRL_CONTEXT pCRLContext,
342  DWORD dwPropId, void *pvData, DWORD *pcbData)
343 {
344     BOOL ret;
345
346     TRACE("(%p, %d, %p, %p)\n", pCRLContext, dwPropId, pvData, pcbData);
347
348     switch (dwPropId)
349     {
350     case 0:
351     case CERT_CERT_PROP_ID:
352     case CERT_CRL_PROP_ID:
353     case CERT_CTL_PROP_ID:
354         SetLastError(E_INVALIDARG);
355         ret = FALSE;
356         break;
357     case CERT_ACCESS_STATE_PROP_ID:
358         if (!pvData)
359         {
360             *pcbData = sizeof(DWORD);
361             ret = TRUE;
362         }
363         else if (*pcbData < sizeof(DWORD))
364         {
365             SetLastError(ERROR_MORE_DATA);
366             *pcbData = sizeof(DWORD);
367             ret = FALSE;
368         }
369         else
370         {
371             if (pCRLContext->hCertStore)
372                 ret = CertGetStoreProperty(pCRLContext->hCertStore, dwPropId,
373                  pvData, pcbData);
374             else
375                 *(DWORD *)pvData = 0;
376             ret = TRUE;
377         }
378         break;
379     default:
380         ret = CRLContext_GetProperty((void *)pCRLContext, dwPropId, pvData,
381          pcbData);
382     }
383     return ret;
384 }
385
386 static BOOL WINAPI CRLContext_SetProperty(void *context, DWORD dwPropId,
387  DWORD dwFlags, const void *pvData)
388 {
389     PCONTEXT_PROPERTY_LIST properties =
390      Context_GetProperties(context, sizeof(CERT_CONTEXT));
391     BOOL ret;
392
393     TRACE("(%p, %d, %08x, %p)\n", context, dwPropId, dwFlags, pvData);
394
395     if (!properties)
396         ret = FALSE;
397     else if (!pvData)
398     {
399         ContextPropertyList_RemoveProperty(properties, dwPropId);
400         ret = TRUE;
401     }
402     else
403     {
404         switch (dwPropId)
405         {
406         case CERT_AUTO_ENROLL_PROP_ID:
407         case CERT_CTL_USAGE_PROP_ID: /* same as CERT_ENHKEY_USAGE_PROP_ID */
408         case CERT_DESCRIPTION_PROP_ID:
409         case CERT_FRIENDLY_NAME_PROP_ID:
410         case CERT_HASH_PROP_ID:
411         case CERT_KEY_IDENTIFIER_PROP_ID:
412         case CERT_MD5_HASH_PROP_ID:
413         case CERT_NEXT_UPDATE_LOCATION_PROP_ID:
414         case CERT_PUBKEY_ALG_PARA_PROP_ID:
415         case CERT_PVK_FILE_PROP_ID:
416         case CERT_SIGNATURE_HASH_PROP_ID:
417         case CERT_ISSUER_PUBLIC_KEY_MD5_HASH_PROP_ID:
418         case CERT_SUBJECT_NAME_MD5_HASH_PROP_ID:
419         case CERT_SUBJECT_PUBLIC_KEY_MD5_HASH_PROP_ID:
420         case CERT_ENROLLMENT_PROP_ID:
421         case CERT_CROSS_CERT_DIST_POINTS_PROP_ID:
422         case CERT_RENEWAL_PROP_ID:
423         {
424             PCRYPT_DATA_BLOB blob = (PCRYPT_DATA_BLOB)pvData;
425
426             ret = ContextPropertyList_SetProperty(properties, dwPropId,
427              blob->pbData, blob->cbData);
428             break;
429         }
430         case CERT_DATE_STAMP_PROP_ID:
431             ret = ContextPropertyList_SetProperty(properties, dwPropId,
432              (const BYTE *)pvData, sizeof(FILETIME));
433             break;
434         default:
435             FIXME("%d: stub\n", dwPropId);
436             ret = FALSE;
437         }
438     }
439     TRACE("returning %d\n", ret);
440     return ret;
441 }
442
443 BOOL WINAPI CertSetCRLContextProperty(PCCRL_CONTEXT pCRLContext,
444  DWORD dwPropId, DWORD dwFlags, const void *pvData)
445 {
446     BOOL ret;
447
448     TRACE("(%p, %d, %08x, %p)\n", pCRLContext, dwPropId, dwFlags, pvData);
449
450     /* Handle special cases for "read-only"/invalid prop IDs.  Windows just
451      * crashes on most of these, I'll be safer.
452      */
453     switch (dwPropId)
454     {
455     case 0:
456     case CERT_ACCESS_STATE_PROP_ID:
457     case CERT_CERT_PROP_ID:
458     case CERT_CRL_PROP_ID:
459     case CERT_CTL_PROP_ID:
460         SetLastError(E_INVALIDARG);
461         return FALSE;
462     }
463     ret = CRLContext_SetProperty((void *)pCRLContext, dwPropId, dwFlags,
464      pvData);
465     TRACE("returning %d\n", ret);
466     return ret;
467 }
468
469 BOOL WINAPI CertIsValidCRLForCertificate(PCCERT_CONTEXT pCert,
470  PCCRL_CONTEXT pCrl, DWORD dwFlags, void *pvReserved)
471 {
472     TRACE("(%p, %p, %08x, %p)\n", pCert, pCrl, dwFlags, pvReserved);
473     return TRUE;
474 }
475
476 static PCRL_ENTRY CRYPT_FindCertificateInCRL(PCERT_INFO cert, const CRL_INFO *crl)
477 {
478     DWORD i;
479     PCRL_ENTRY entry = NULL;
480
481     for (i = 0; !entry && i < crl->cCRLEntry; i++)
482         if (CertCompareIntegerBlob(&crl->rgCRLEntry[i].SerialNumber,
483          &cert->SerialNumber))
484             entry = &crl->rgCRLEntry[i];
485     return entry;
486 }
487
488 BOOL WINAPI CertFindCertificateInCRL(PCCERT_CONTEXT pCert,
489  PCCRL_CONTEXT pCrlContext, DWORD dwFlags, void *pvReserved,
490  PCRL_ENTRY *ppCrlEntry)
491 {
492     TRACE("(%p, %p, %08x, %p, %p)\n", pCert, pCrlContext, dwFlags, pvReserved,
493      ppCrlEntry);
494
495     *ppCrlEntry = CRYPT_FindCertificateInCRL(pCert->pCertInfo,
496      pCrlContext->pCrlInfo);
497     return TRUE;
498 }
499
500 BOOL WINAPI CertVerifyCRLRevocation(DWORD dwCertEncodingType,
501  PCERT_INFO pCertId, DWORD cCrlInfo, PCRL_INFO rgpCrlInfo[])
502 {
503     DWORD i;
504     PCRL_ENTRY entry = NULL;
505
506     TRACE("(%08x, %p, %d, %p)\n", dwCertEncodingType, pCertId, cCrlInfo,
507      rgpCrlInfo);
508
509     for (i = 0; !entry && i < cCrlInfo; i++)
510         entry = CRYPT_FindCertificateInCRL(pCertId, rgpCrlInfo[i]);
511     return entry == NULL;
512 }
513
514 LONG WINAPI CertVerifyCRLTimeValidity(LPFILETIME pTimeToVerify,
515  PCRL_INFO pCrlInfo)
516 {
517     FILETIME fileTime;
518     LONG ret;
519
520     if (!pTimeToVerify)
521     {
522         SYSTEMTIME sysTime;
523
524         GetSystemTime(&sysTime);
525         SystemTimeToFileTime(&sysTime, &fileTime);
526         pTimeToVerify = &fileTime;
527     }
528     if ((ret = CompareFileTime(pTimeToVerify, &pCrlInfo->ThisUpdate)) >= 0)
529     {
530         ret = CompareFileTime(pTimeToVerify, &pCrlInfo->NextUpdate);
531         if (ret < 0)
532             ret = 0;
533     }
534     return ret;
535 }