wine-commits January 2009

wine-commits@winehq.org

3 participants
1348 discussions

Juan Lang : rsaenh: Also write a key's permissions when it' s being stored to the registry.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: 674786527a24d590404a55916701830a6e8ba7ab URL: http://source.winehq.org/git/wine.git/?a=commit;h=674786527a24d590404a55916… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 22:03:09 2009 -0800 rsaenh: Also write a key's permissions when it's being stored to the registry. --- dlls/rsaenh/rsaenh.c | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index aad4adb..e382e43 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -2606,7 +2606,10 @@ static void release_and_install_key(HCRYPTPROV hProv, HCRYPTKEY src, if (lookup_handle(&handle_table, hProv, RSAENH_MAGIC_CONTAINER, (OBJECTHDR**)&pKeyContainer)) + { store_key_container_keys(pKeyContainer); + store_key_container_permissions(pKeyContainer); + } } }

1 0

Juan Lang : rsaenh: Load/store key permissions along with key pair value.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: 2edda7208fed36f8c46531dec1937208b18b0515 URL: http://source.winehq.org/git/wine.git/?a=commit;h=2edda7208fed36f8c46531dec… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 22:02:25 2009 -0800 rsaenh: Load/store key permissions along with key pair value. --- dlls/rsaenh/rsaenh.c | 105 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 105 insertions(+), 0 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index d1f6157..aad4adb 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -970,6 +970,62 @@ static void store_key_pair(HCRYPTKEY hCryptKey, HKEY hKey, DWORD dwKeySpec, DWOR } /****************************************************************************** + * map_key_spec_to_permissions_name [Internal] + * + * Returns the name of the registry value associated with the permissions for + * a key spec. + * + * PARAMS + * dwKeySpec [I] AT_KEYEXCHANGE or AT_SIGNATURE + * + * RETURNS + * Success: Name of registry value. + * Failure: NULL + */ +static LPCSTR map_key_spec_to_permissions_name(DWORD dwKeySpec) +{ + LPCSTR szValueName; + + switch (dwKeySpec) + { + case AT_KEYEXCHANGE: + szValueName = "KeyExchangePermissions"; + break; + case AT_SIGNATURE: + szValueName = "SignaturePermissions"; + break; + default: + WARN("invalid key spec %d\n", dwKeySpec); + szValueName = NULL; + } + return szValueName; +} + +/****************************************************************************** + * store_key_permissions [Internal] + * + * Stores a key's permissions to the registry + * + * PARAMS + * hCryptKey [I] Handle to the key whose permissions are to be stored + * hKey [I] Registry key where the key permissions are to be stored + * dwKeySpec [I] AT_KEYEXCHANGE or AT_SIGNATURE + */ +static void store_key_permissions(HCRYPTKEY hCryptKey, HKEY hKey, DWORD dwKeySpec) +{ + LPCSTR szValueName; + CRYPTKEY *pKey; + + if (!(szValueName = map_key_spec_to_permissions_name(dwKeySpec))) + return; + if (lookup_handle(&handle_table, hCryptKey, RSAENH_MAGIC_KEY, + (OBJECTHDR**)&pKey)) + RegSetValueExA(hKey, szValueName, 0, REG_DWORD, + (BYTE *)&pKey->dwPermissions, + sizeof(pKey->dwPermissions)); +} + +/****************************************************************************** * create_container_key [Internal] * * Creates the registry key for a key container's persistent storage. @@ -1093,6 +1149,39 @@ static void store_key_container_keys(KEYCONTAINER *pKeyContainer) } /****************************************************************************** + * store_key_container_permissions [Internal] + * + * Stores key container's key permissions in a persistent location. + * + * PARAMS + * pKeyContainer [I] Pointer to the key container whose key permissions are to + * be saved + */ +static void store_key_container_permissions(KEYCONTAINER *pKeyContainer) +{ + HKEY hKey; + DWORD dwFlags; + + /* On WinXP, persistent keys are stored in a file located at: + * $AppData$\\Microsoft\\Crypto\\RSA\\$SID$\\some_hex_string + */ + + if (pKeyContainer->dwFlags & CRYPT_MACHINE_KEYSET) + dwFlags = CRYPTPROTECT_LOCAL_MACHINE; + else + dwFlags = 0; + + if (create_container_key(pKeyContainer, KEY_WRITE, &hKey)) + { + store_key_permissions(pKeyContainer->hKeyExchangeKeyPair, hKey, + AT_KEYEXCHANGE); + store_key_permissions(pKeyContainer->hSignatureKeyPair, hKey, + AT_SIGNATURE); + RegCloseKey(hKey); + } +} + +/****************************************************************************** * release_key_container_keys [Internal] * * Releases key container's keys. @@ -1123,6 +1212,7 @@ static void destroy_key_container(OBJECTHDR *pObjectHdr) if (!(pKeyContainer->dwFlags & CRYPT_VERIFYCONTEXT)) { store_key_container_keys(pKeyContainer); + store_key_container_permissions(pKeyContainer); release_key_container_keys(pKeyContainer); } HeapFree( GetProcessHeap(), 0, pKeyContainer ); @@ -1229,6 +1319,21 @@ static BOOL read_key_value(HCRYPTPROV hKeyContainer, HKEY hKey, DWORD dwKeySpec, HeapFree(GetProcessHeap(), 0, pbKey); } } + if (ret) + { + CRYPTKEY *pKey; + + if (lookup_handle(&handle_table, *phCryptKey, RSAENH_MAGIC_KEY, + (OBJECTHDR**)&pKey)) + { + if ((szValueName = map_key_spec_to_permissions_name(dwKeySpec))) + { + dwLen = sizeof(pKey->dwPermissions); + RegQueryValueExA(hKey, szValueName, 0, NULL, + (BYTE *)&pKey->dwPermissions, &dwLen); + } + } + } return ret; }

1 0

Juan Lang : rsaenh: Use key spec rather than char * to identify a key pair.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: bd41f77d3d0e53aaa5e6c7db05b3b4eb292d0c99 URL: http://source.winehq.org/git/wine.git/?a=commit;h=bd41f77d3d0e53aaa5e6c7db0… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 22:01:11 2009 -0800 rsaenh: Use key spec rather than char * to identify a key pair. --- dlls/rsaenh/rsaenh.c | 53 ++++++++++++++++++++++++++++++++++++++++++------- 1 files changed, 45 insertions(+), 8 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index 843bb28..d1f6157 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -890,6 +890,37 @@ static HCRYPTKEY new_key(HCRYPTPROV hProv, ALG_ID aiAlgid, DWORD dwFlags, CRYPTK } /****************************************************************************** + * map_key_spec_to_key_pair_name [Internal] + * + * Returns the name of the registry value associated with a key spec. + * + * PARAMS + * dwKeySpec [I] AT_KEYEXCHANGE or AT_SIGNATURE + * + * RETURNS + * Success: Name of registry value. + * Failure: NULL + */ +static LPCSTR map_key_spec_to_key_pair_name(DWORD dwKeySpec) +{ + LPCSTR szValueName; + + switch (dwKeySpec) + { + case AT_KEYEXCHANGE: + szValueName = "KeyExchangeKeyPair"; + break; + case AT_SIGNATURE: + szValueName = "SignatureKeyPair"; + break; + default: + WARN("invalid key spec %d\n", dwKeySpec); + szValueName = NULL; + } + return szValueName; +} + +/****************************************************************************** * store_key_pair [Internal] * * Stores a key pair to the registry @@ -897,16 +928,19 @@ static HCRYPTKEY new_key(HCRYPTPROV hProv, ALG_ID aiAlgid, DWORD dwFlags, CRYPTK * PARAMS * hCryptKey [I] Handle to the key to be stored * hKey [I] Registry key where the key pair is to be stored - * szValueName [I] Registry value where key pair's value is to be stored + * dwKeySpec [I] AT_KEYEXCHANGE or AT_SIGNATURE * dwFlags [I] Flags for protecting the key */ -static void store_key_pair(HCRYPTKEY hCryptKey, HKEY hKey, LPCSTR szValueName, DWORD dwFlags) +static void store_key_pair(HCRYPTKEY hCryptKey, HKEY hKey, DWORD dwKeySpec, DWORD dwFlags) { + LPCSTR szValueName; DATA_BLOB blobIn, blobOut; CRYPTKEY *pKey; DWORD dwLen; BYTE *pbKey; + if (!(szValueName = map_key_spec_to_key_pair_name(dwKeySpec))) + return; if (lookup_handle(&handle_table, hCryptKey, RSAENH_MAGIC_KEY, (OBJECTHDR**)&pKey)) { @@ -1051,9 +1085,9 @@ static void store_key_container_keys(KEYCONTAINER *pKeyContainer) if (create_container_key(pKeyContainer, KEY_WRITE, &hKey)) { store_key_pair(pKeyContainer->hKeyExchangeKeyPair, hKey, - "KeyExchangeKeyPair", dwFlags); + AT_KEYEXCHANGE, dwFlags); store_key_pair(pKeyContainer->hSignatureKeyPair, hKey, - "SignatureKeyPair", dwFlags); + AT_SIGNATURE, dwFlags); RegCloseKey(hKey); } } @@ -1158,17 +1192,20 @@ static HCRYPTPROV new_key_container(PCCH pszContainerName, DWORD dwFlags, const * PARAMS * hKeyContainer [I] Crypt provider to use to import the key * hKey [I] Registry key from which to read the key pair - * szValueName [I] Registry value from which to read the key pair's value + * dwKeySpec [I] AT_KEYEXCHANGE or AT_SIGNATURE * dwFlags [I] Flags for unprotecting the key * phCryptKey [O] Returned key */ -static BOOL read_key_value(HCRYPTPROV hKeyContainer, HKEY hKey, LPCSTR szValueName, DWORD dwFlags, HCRYPTKEY *phCryptKey) +static BOOL read_key_value(HCRYPTPROV hKeyContainer, HKEY hKey, DWORD dwKeySpec, DWORD dwFlags, HCRYPTKEY *phCryptKey) { + LPCSTR szValueName; DWORD dwValueType, dwLen; BYTE *pbKey; DATA_BLOB blobIn, blobOut; BOOL ret = FALSE; + if (!(szValueName = map_key_spec_to_key_pair_name(dwKeySpec))) + return FALSE; if (RegQueryValueExA(hKey, szValueName, 0, &dwValueType, NULL, &dwLen) == ERROR_SUCCESS) { @@ -1232,10 +1269,10 @@ static HCRYPTPROV read_key_container(PCHAR pszContainerName, DWORD dwFlags, cons (OBJECTHDR**)&pKeyContainer)) return (HCRYPTPROV)INVALID_HANDLE_VALUE; - if (read_key_value(hKeyContainer, hKey, "KeyExchangeKeyPair", + if (read_key_value(hKeyContainer, hKey, AT_KEYEXCHANGE, dwProtectFlags, &hCryptKey)) pKeyContainer->hKeyExchangeKeyPair = hCryptKey; - if (read_key_value(hKeyContainer, hKey, "SignatureKeyPair", + if (read_key_value(hKeyContainer, hKey, AT_SIGNATURE, dwProtectFlags, &hCryptKey)) pKeyContainer->hSignatureKeyPair = hCryptKey; }

1 0

Juan Lang : rsaenh: Don't store a key to the registry when it' s being read from the registry.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: fbc26f3855ad3b9235b22d0a9b5a0a25cc150f80 URL: http://source.winehq.org/git/wine.git/?a=commit;h=fbc26f3855ad3b9235b22d0a9… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 21:49:31 2009 -0800 rsaenh: Don't store a key to the registry when it's being read from the registry. --- dlls/rsaenh/rsaenh.c | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index c94603a..843bb28 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -321,13 +321,13 @@ static BOOL crypt_export_key( DWORD *pdwDataLen ); -BOOL WINAPI -RSAENH_CPImportKey( +static BOOL import_key( HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDataLen, HCRYPTKEY hPubKey, DWORD dwFlags, + BOOL fStoreKey, HCRYPTKEY *phKey ); @@ -1184,8 +1184,8 @@ static BOOL read_key_value(HCRYPTPROV hKeyContainer, HKEY hKey, LPCSTR szValueNa if (CryptUnprotectData(&blobIn, NULL, NULL, NULL, NULL, dwFlags, &blobOut)) { - ret = RSAENH_CPImportKey(hKeyContainer, blobOut.pbData, blobOut.cbData, 0, 0, - phCryptKey); + ret = import_key(hKeyContainer, blobOut.pbData, blobOut.cbData, 0, 0, + FALSE, phCryptKey); LocalFree(blobOut.pbData); } }

1 0

Juan Lang : rsaenh: Store a key' s value to the registry when a key is imported.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: 4eb1ee42776de6f76454f16095ce97e24828ba1d URL: http://source.winehq.org/git/wine.git/?a=commit;h=4eb1ee42776de6f76454f1609… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 21:48:45 2009 -0800 rsaenh: Store a key's value to the registry when a key is imported. --- dlls/rsaenh/rsaenh.c | 77 +++++++++++++++++++++++++++++++++++-------- dlls/rsaenh/tests/rsaenh.c | 1 - 2 files changed, 62 insertions(+), 16 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index 5da95bd..c94603a 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -2451,12 +2451,21 @@ BOOL WINAPI RSAENH_CPExportKey(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTKEY hPubK * hProv [I] Key container into which the key is to be imported. * src [I] Key which will replace *dest * dest [I] Points to key to be released and replaced with src + * fStoreKey [I] If TRUE, the newly installed key is stored to the registry. */ static void release_and_install_key(HCRYPTPROV hProv, HCRYPTKEY src, - HCRYPTKEY *dest) + HCRYPTKEY *dest, DWORD fStoreKey) { RSAENH_CPDestroyKey(hProv, *dest); copy_handle(&handle_table, src, RSAENH_MAGIC_KEY, dest); + if (fStoreKey) + { + KEYCONTAINER *pKeyContainer; + + if (lookup_handle(&handle_table, hProv, RSAENH_MAGIC_CONTAINER, + (OBJECTHDR**)&pKeyContainer)) + store_key_container_keys(pKeyContainer); + } } /****************************************************************************** @@ -2470,6 +2479,7 @@ static void release_and_install_key(HCRYPTPROV hProv, HCRYPTKEY src, * dwDataLen [I] Length of data in buffer at pbData. * dwFlags [I] One of: * CRYPT_EXPORTABLE: the imported key is marked exportable + * fStoreKey [I] If TRUE, the imported key is stored to the registry. * phKey [O] Handle to the imported key. * * @@ -2482,7 +2492,7 @@ static void release_and_install_key(HCRYPTPROV hProv, HCRYPTKEY src, * Failure: FALSE. */ static BOOL import_private_key(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDataLen, - DWORD dwFlags, HCRYPTKEY *phKey) + DWORD dwFlags, BOOL fStoreKey, HCRYPTKEY *phKey) { KEYCONTAINER *pKeyContainer; CRYPTKEY *pCryptKey; @@ -2519,12 +2529,14 @@ static BOOL import_private_key(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDat case AT_SIGNATURE: case CALG_RSA_SIGN: TRACE("installing signing key\n"); - release_and_install_key(hProv, *phKey, &pKeyContainer->hSignatureKeyPair); + release_and_install_key(hProv, *phKey, &pKeyContainer->hSignatureKeyPair, + fStoreKey); break; case AT_KEYEXCHANGE: case CALG_RSA_KEYX: TRACE("installing key exchange key\n"); - release_and_install_key(hProv, *phKey, &pKeyContainer->hKeyExchangeKeyPair); + release_and_install_key(hProv, *phKey, &pKeyContainer->hKeyExchangeKeyPair, + fStoreKey); break; } } @@ -2542,6 +2554,7 @@ static BOOL import_private_key(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDat * dwDataLen [I] Length of data in buffer at pbData. * dwFlags [I] One of: * CRYPT_EXPORTABLE: the imported key is marked exportable + * fStoreKey [I] If TRUE, the imported key is stored to the registry. * phKey [O] Handle to the imported key. * * @@ -2554,7 +2567,7 @@ static BOOL import_private_key(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDat * Failure: FALSE. */ static BOOL import_public_key(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDataLen, - DWORD dwFlags, HCRYPTKEY *phKey) + DWORD dwFlags, BOOL fStoreKey, HCRYPTKEY *phKey) { KEYCONTAINER *pKeyContainer; CRYPTKEY *pCryptKey; @@ -2595,7 +2608,8 @@ static BOOL import_public_key(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwData case AT_KEYEXCHANGE: case CALG_RSA_KEYX: TRACE("installing public key\n"); - release_and_install_key(hProv, *phKey, &pKeyContainer->hKeyExchangeKeyPair); + release_and_install_key(hProv, *phKey, &pKeyContainer->hKeyExchangeKeyPair, + fStoreKey); break; } } @@ -2675,9 +2689,10 @@ static BOOL import_symmetric_key(HCRYPTPROV hProv, CONST BYTE *pbData, } /****************************************************************************** - * CPImportKey (RSAENH.@) + * import_key [Internal] * - * Import a BLOB'ed key into a key container. + * Import a BLOB'ed key into a key container, optionally storing the key's + * value to the registry. * * PARAMS * hProv [I] Key container into which the key is to be imported. @@ -2686,21 +2701,20 @@ static BOOL import_symmetric_key(HCRYPTPROV hProv, CONST BYTE *pbData, * hPubKey [I] Key used to decrypt sensitive BLOB data. * dwFlags [I] One of: * CRYPT_EXPORTABLE: the imported key is marked exportable + * fStoreKey [I] If TRUE, the imported key is stored to the registry. * phKey [O] Handle to the imported key. * * RETURNS * Success: TRUE. * Failure: FALSE. */ -BOOL WINAPI RSAENH_CPImportKey(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDataLen, - HCRYPTKEY hPubKey, DWORD dwFlags, HCRYPTKEY *phKey) +static BOOL import_key(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDataLen, + HCRYPTKEY hPubKey, DWORD dwFlags, BOOL fStoreKey, + HCRYPTKEY *phKey) { KEYCONTAINER *pKeyContainer; CONST BLOBHEADER *pBlobHeader = (CONST BLOBHEADER*)pbData; - TRACE("(hProv=%08lx, pbData=%p, dwDataLen=%d, hPubKey=%08lx, dwFlags=%08x, phKey=%p)\n", - hProv, pbData, dwDataLen, hPubKey, dwFlags, phKey); - if (!lookup_handle(&handle_table, hProv, RSAENH_MAGIC_CONTAINER, (OBJECTHDR**)&pKeyContainer)) { @@ -2716,13 +2730,19 @@ BOOL WINAPI RSAENH_CPImportKey(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDat return FALSE; } + /* If this is a verify-only context, the key is not persisted regardless of + * fStoreKey's original value. + */ + fStoreKey = fStoreKey && !(dwFlags & CRYPT_VERIFYCONTEXT); switch (pBlobHeader->bType) { case PRIVATEKEYBLOB: - return import_private_key(hProv, pbData, dwDataLen, dwFlags, phKey); + return import_private_key(hProv, pbData, dwDataLen, dwFlags, + fStoreKey, phKey); case PUBLICKEYBLOB: - return import_public_key(hProv, pbData, dwDataLen, dwFlags, phKey); + return import_public_key(hProv, pbData, dwDataLen, dwFlags, + fStoreKey, phKey); case SIMPLEBLOB: return import_symmetric_key(hProv, pbData, dwDataLen, hPubKey, @@ -2735,6 +2755,33 @@ BOOL WINAPI RSAENH_CPImportKey(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDat } /****************************************************************************** + * CPImportKey (RSAENH.@) + * + * Import a BLOB'ed key into a key container. + * + * PARAMS + * hProv [I] Key container into which the key is to be imported. + * pbData [I] Pointer to a buffer which holds the BLOB. + * dwDataLen [I] Length of data in buffer at pbData. + * hPubKey [I] Key used to decrypt sensitive BLOB data. + * dwFlags [I] One of: + * CRYPT_EXPORTABLE: the imported key is marked exportable + * phKey [O] Handle to the imported key. + * + * RETURNS + * Success: TRUE. + * Failure: FALSE. + */ +BOOL WINAPI RSAENH_CPImportKey(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDataLen, + HCRYPTKEY hPubKey, DWORD dwFlags, HCRYPTKEY *phKey) +{ + TRACE("(hProv=%08lx, pbData=%p, dwDataLen=%d, hPubKey=%08lx, dwFlags=%08x, phKey=%p)\n", + hProv, pbData, dwDataLen, hPubKey, dwFlags, phKey); + + return import_key(hProv, pbData, dwDataLen, hPubKey, dwFlags, TRUE, phKey); +} + +/****************************************************************************** * CPGenKey (RSAENH.@) * * Generate a key in the key container diff --git a/dlls/rsaenh/tests/rsaenh.c b/dlls/rsaenh/tests/rsaenh.c index 4f1899e..5d58222 100644 --- a/dlls/rsaenh/tests/rsaenh.c +++ b/dlls/rsaenh/tests/rsaenh.c @@ -2233,7 +2233,6 @@ static void test_key_initialization(void) result = CryptAcquireContext(&prov2, szContainer, szProvider, PROV_RSA_FULL, 0); ok(result, "%08x\n", GetLastError()); result = CryptGetUserKey(prov2, AT_KEYEXCHANGE, &hKey); - todo_wine ok(result, "%08x\n", GetLastError()); if (result) CryptDestroyKey(hKey); CryptReleaseContext(prov2, 0);

1 0

Juan Lang : rsaenh: Split CPImportKey into a helper function for each type of key supported.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: 17da3004ef5b4c859dc540db916e22aa8ed7b4e8 URL: http://source.winehq.org/git/wine.git/?a=commit;h=17da3004ef5b4c859dc540db9… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 21:47:53 2009 -0800 rsaenh: Split CPImportKey into a helper function for each type of key supported. --- dlls/rsaenh/rsaenh.c | 328 +++++++++++++++++++++++++++++++++----------------- 1 files changed, 219 insertions(+), 109 deletions(-) Diff: http://source.winehq.org/git/wine.git/?a=commitdiff;h=17da3004ef5b4c859dc54…

1 0

Juan Lang : rsaenh: Use helper function to install keys.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: 30764edd12716a425621862e39c4b061e0dd6bdc URL: http://source.winehq.org/git/wine.git/?a=commit;h=30764edd12716a425621862e3… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 21:45:12 2009 -0800 rsaenh: Use helper function to install keys. --- dlls/rsaenh/rsaenh.c | 32 +++++++++++++++++++++++--------- 1 files changed, 23 insertions(+), 9 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index 4dc8aa6..c775082 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -2443,6 +2443,23 @@ BOOL WINAPI RSAENH_CPExportKey(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTKEY hPubK } /****************************************************************************** + * release_and_install_key [Internal] + * + * Release an existing key, if present, and replaces it with a new one. + * + * PARAMS + * hProv [I] Key container into which the key is to be imported. + * src [I] Key which will replace *dest + * dest [I] Points to key to be released and replaced with src + */ +static void release_and_install_key(HCRYPTPROV hProv, HCRYPTKEY src, + HCRYPTKEY *dest) +{ + RSAENH_CPDestroyKey(hProv, *dest); + copy_handle(&handle_table, src, RSAENH_MAGIC_KEY, dest); +} + +/****************************************************************************** * CPImportKey (RSAENH.@) * * Import a BLOB'ed key into a key container. @@ -2517,16 +2534,14 @@ BOOL WINAPI RSAENH_CPImportKey(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDat case AT_SIGNATURE: case CALG_RSA_SIGN: TRACE("installing signing key\n"); - RSAENH_CPDestroyKey(hProv, pKeyContainer->hSignatureKeyPair); - copy_handle(&handle_table, *phKey, RSAENH_MAGIC_KEY, - &pKeyContainer->hSignatureKeyPair); + release_and_install_key(hProv, *phKey, + &pKeyContainer->hSignatureKeyPair); break; case AT_KEYEXCHANGE: case CALG_RSA_KEYX: TRACE("installing key exchange key\n"); - RSAENH_CPDestroyKey(hProv, pKeyContainer->hKeyExchangeKeyPair); - copy_handle(&handle_table, *phKey, RSAENH_MAGIC_KEY, - &pKeyContainer->hKeyExchangeKeyPair); + release_and_install_key(hProv, *phKey, + &pKeyContainer->hKeyExchangeKeyPair); break; } } @@ -2558,9 +2573,8 @@ BOOL WINAPI RSAENH_CPImportKey(HCRYPTPROV hProv, CONST BYTE *pbData, DWORD dwDat case AT_KEYEXCHANGE: case CALG_RSA_KEYX: TRACE("installing public key\n"); - RSAENH_CPDestroyKey(hProv, pKeyContainer->hKeyExchangeKeyPair); - copy_handle(&handle_table, *phKey, RSAENH_MAGIC_KEY, - &pKeyContainer->hKeyExchangeKeyPair); + release_and_install_key(hProv, *phKey, + &pKeyContainer->hKeyExchangeKeyPair); break; } }

1 0

Juan Lang : rsaenh: Separate storing a key container' s keys from releasing them.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: 8f4a491489e0280d5bdab36bc4c14012bc4bfebc URL: http://source.winehq.org/git/wine.git/?a=commit;h=8f4a491489e0280d5bdab36bc… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 21:44:11 2009 -0800 rsaenh: Separate storing a key container's keys from releasing them. --- dlls/rsaenh/rsaenh.c | 20 +++++++++++++++++++- 1 files changed, 19 insertions(+), 1 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index 059dad2..4dc8aa6 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -932,7 +932,6 @@ static void store_key_pair(HCRYPTKEY hCryptKey, HKEY hKey, LPCSTR szValueName, D HeapFree(GetProcessHeap(), 0, pbKey); } } - release_handle(&handle_table, hCryptKey, RSAENH_MAGIC_KEY); } } @@ -1060,6 +1059,22 @@ static void store_key_container_keys(KEYCONTAINER *pKeyContainer) } /****************************************************************************** + * release_key_container_keys [Internal] + * + * Releases key container's keys. + * + * PARAMS + * pKeyContainer [I] Pointer to the key container whose keys are to be released. + */ +static void release_key_container_keys(KEYCONTAINER *pKeyContainer) +{ + release_handle(&handle_table, pKeyContainer->hKeyExchangeKeyPair, + RSAENH_MAGIC_KEY); + release_handle(&handle_table, pKeyContainer->hSignatureKeyPair, + RSAENH_MAGIC_KEY); +} + +/****************************************************************************** * destroy_key_container [Internal] * * Destructor for key containers. @@ -1072,7 +1087,10 @@ static void destroy_key_container(OBJECTHDR *pObjectHdr) KEYCONTAINER *pKeyContainer = (KEYCONTAINER*)pObjectHdr; if (!(pKeyContainer->dwFlags & CRYPT_VERIFYCONTEXT)) + { store_key_container_keys(pKeyContainer); + release_key_container_keys(pKeyContainer); + } HeapFree( GetProcessHeap(), 0, pKeyContainer ); }

1 0

Juan Lang : rsaenh: Add a test for importing a key into a container and acquiring a container with the same name before the original container is released .
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: 21a3ae0b7c94ae565a17e8aa4a884f47a247796e URL: http://source.winehq.org/git/wine.git/?a=commit;h=21a3ae0b7c94ae565a17e8aa4… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 21:41:53 2009 -0800 rsaenh: Add a test for importing a key into a container and acquiring a container with the same name before the original container is released. --- dlls/rsaenh/tests/rsaenh.c | 62 ++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 62 insertions(+), 0 deletions(-) diff --git a/dlls/rsaenh/tests/rsaenh.c b/dlls/rsaenh/tests/rsaenh.c index 57ca35f..4f1899e 100644 --- a/dlls/rsaenh/tests/rsaenh.c +++ b/dlls/rsaenh/tests/rsaenh.c @@ -2184,6 +2184,67 @@ static void test_key_permissions(void) clean_up_base_environment(); } +static void test_key_initialization(void) +{ + DWORD dwLen; + HCRYPTPROV prov1, prov2; + HCRYPTKEY hKeyExchangeKey, hSessionKey, hKey; + BOOL result; + static BYTE abSessionKey[148] = { + 0x01, 0x02, 0x00, 0x00, 0x01, 0x68, 0x00, 0x00, + 0x00, 0xa4, 0x00, 0x00, 0xb8, 0xa4, 0xdf, 0x5e, + 0x9e, 0xb1, 0xbf, 0x85, 0x3d, 0x24, 0x2d, 0x1e, + 0x69, 0xb7, 0x67, 0x13, 0x8e, 0x78, 0xf2, 0xdf, + 0xc6, 0x69, 0xce, 0x46, 0x7e, 0xf2, 0xf2, 0x33, + 0x20, 0x6f, 0xa1, 0xa5, 0x59, 0x83, 0x25, 0xcb, + 0x3a, 0xb1, 0x8a, 0x12, 0x63, 0x02, 0x3c, 0xfb, + 0x4a, 0xfa, 0xef, 0x8e, 0xf7, 0x29, 0x57, 0xb1, + 0x9e, 0xa7, 0xf3, 0x02, 0xfd, 0xca, 0xdf, 0x5a, + 0x1f, 0x71, 0xb6, 0x26, 0x09, 0x24, 0x39, 0xda, + 0xc0, 0xde, 0x2a, 0x0e, 0xcd, 0x1f, 0xe5, 0xb6, + 0x4f, 0x82, 0xa0, 0xa9, 0x90, 0xd3, 0xd9, 0x6a, + 0x43, 0x14, 0x2a, 0xf7, 0xac, 0xd5, 0xa0, 0x54, + 0x93, 0xc4, 0xb9, 0xe7, 0x24, 0x84, 0x4d, 0x69, + 0x5e, 0xcc, 0x2a, 0x32, 0xb5, 0xfb, 0xe4, 0xb4, + 0x08, 0xd5, 0x36, 0x58, 0x59, 0x40, 0xfb, 0x29, + 0x7f, 0xa7, 0x17, 0x25, 0xc4, 0x0d, 0x78, 0x37, + 0x04, 0x8c, 0x49, 0x92 + }; + + /* Like init_base_environment, but doesn't generate new keys, as they'll + * be imported instead. + */ + if (!CryptAcquireContext(&prov1, szContainer, szProvider, PROV_RSA_FULL, 0)) + { + result = CryptAcquireContext(&prov1, szContainer, szProvider, PROV_RSA_FULL, + CRYPT_NEWKEYSET); + ok(result, "%08x\n", GetLastError()); + } + dwLen = (DWORD)sizeof(abPlainPrivateKey); + result = CryptImportKey(prov1, abPlainPrivateKey, dwLen, 0, 0, &hKeyExchangeKey); + + dwLen = (DWORD)sizeof(abSessionKey); + result = CryptImportKey(prov1, abSessionKey, dwLen, hKeyExchangeKey, 0, &hSessionKey); + ok(result, "%08x\n", GetLastError()); + + /* Once the key has been imported, subsequently acquiring a context with + * the same name will allow retrieving the key. + */ + result = CryptAcquireContext(&prov2, szContainer, szProvider, PROV_RSA_FULL, 0); + ok(result, "%08x\n", GetLastError()); + result = CryptGetUserKey(prov2, AT_KEYEXCHANGE, &hKey); + todo_wine + ok(result, "%08x\n", GetLastError()); + if (result) CryptDestroyKey(hKey); + CryptReleaseContext(prov2, 0); + + CryptDestroyKey(hSessionKey); + CryptDestroyKey(hKeyExchangeKey); + CryptReleaseContext(prov1, 0); + CryptAcquireContext(&prov1, szContainer, NULL, PROV_RSA_FULL, + CRYPT_DELETEKEYSET); +} + START_TEST(rsaenh) { if (!init_base_environment(0)) @@ -2206,6 +2267,7 @@ START_TEST(rsaenh) test_enum_container(); clean_up_base_environment(); test_key_permissions(); + test_key_initialization(); test_schannel_provider(); test_null_provider(); if (!init_aes_environment())

1 0

Juan Lang : rsaenh: Honor a key's permissions when exporting a private key.
by Alexandre Julliard 29 Jan '09

29 Jan '09

Module: wine Branch: master Commit: e8ea6700ca4f33765d1dedf5f27777791264b59a URL: http://source.winehq.org/git/wine.git/?a=commit;h=e8ea6700ca4f33765d1dedf5f… Author: Juan Lang <juan.lang(a)gmail.com> Date: Wed Jan 28 21:18:32 2009 -0800 rsaenh: Honor a key's permissions when exporting a private key. --- dlls/rsaenh/rsaenh.c | 103 +++++++++++++++++++++++++++++-------------- dlls/rsaenh/tests/rsaenh.c | 2 - 2 files changed, 69 insertions(+), 36 deletions(-) diff --git a/dlls/rsaenh/rsaenh.c b/dlls/rsaenh/rsaenh.c index cccbcf3..059dad2 100644 --- a/dlls/rsaenh/rsaenh.c +++ b/dlls/rsaenh/rsaenh.c @@ -311,13 +311,12 @@ RSAENH_CPDestroyHash( HCRYPTHASH hHash ); -BOOL WINAPI -RSAENH_CPExportKey( - HCRYPTPROV hProv, - HCRYPTKEY hKey, +static BOOL crypt_export_key( + CRYPTKEY *pCryptKey, HCRYPTKEY hPubKey, DWORD dwBlobType, DWORD dwFlags, + BOOL force, BYTE *pbData, DWORD *pdwDataLen ); @@ -911,14 +910,13 @@ static void store_key_pair(HCRYPTKEY hCryptKey, HKEY hKey, LPCSTR szValueName, D if (lookup_handle(&handle_table, hCryptKey, RSAENH_MAGIC_KEY, (OBJECTHDR**)&pKey)) { - if (RSAENH_CPExportKey(pKey->hProv, hCryptKey, 0, PRIVATEKEYBLOB, 0, 0, - &dwLen)) + if (crypt_export_key(pKey, 0, PRIVATEKEYBLOB, 0, TRUE, 0, &dwLen)) { pbKey = HeapAlloc(GetProcessHeap(), 0, dwLen); if (pbKey) { - if (RSAENH_CPExportKey(pKey->hProv, hCryptKey, 0, - PRIVATEKEYBLOB, 0, pbKey, &dwLen)) + if (crypt_export_key(pKey, 0, PRIVATEKEYBLOB, 0, TRUE, pbKey, + &dwLen)) { blobIn.pbData = pbKey; blobIn.cbData = dwLen; @@ -2282,8 +2280,8 @@ static BOOL crypt_export_public_key(CRYPTKEY *pCryptKey, BYTE *pbData, return TRUE; } -static BOOL crypt_export_private_key(CRYPTKEY *pCryptKey, BYTE *pbData, - DWORD *pdwDataLen) +static BOOL crypt_export_private_key(CRYPTKEY *pCryptKey, BOOL force, + BYTE *pbData, DWORD *pdwDataLen) { BLOBHEADER *pBlobHeader = (BLOBHEADER*)pbData; RSAPUBKEY *pRSAPubKey = (RSAPUBKEY*)(pBlobHeader+1); @@ -2293,6 +2291,11 @@ static BOOL crypt_export_private_key(CRYPTKEY *pCryptKey, BYTE *pbData, SetLastError(NTE_BAD_KEY); return FALSE; } + if (!force && !(pCryptKey->dwPermissions & CRYPT_EXPORT)) + { + SetLastError(NTE_BAD_KEY_STATE); + return FALSE; + } dwDataLen = sizeof(BLOBHEADER) + sizeof(RSAPUBKEY) + 2 * pCryptKey->dwKeyLen + 5 * ((pCryptKey->dwKeyLen + 1) >> 1); @@ -2319,16 +2322,19 @@ static BOOL crypt_export_private_key(CRYPTKEY *pCryptKey, BYTE *pbData, } /****************************************************************************** - * CPExportKey (RSAENH.@) + * crypt_export_key [Internal] * - * Export a key into a binary large object (BLOB). + * Export a key into a binary large object (BLOB). Called by CPExportKey and + * by store_key_pair. * * PARAMS - * hProv [I] Key container from which a key is to be exported. - * hKey [I] Key to be exported. + * pCryptKey [I] Key to be exported. * hPubKey [I] Key used to encrypt sensitive BLOB data. * dwBlobType [I] SIMPLEBLOB, PUBLICKEYBLOB or PRIVATEKEYBLOB. * dwFlags [I] Currently none defined. + * force [I] If TRUE, the key is written no matter what the key's + * permissions are. Otherwise the key's permissions are + * checked before exporting. * pbData [O] Pointer to a buffer where the BLOB will be written to. * pdwDataLen [I/O] I: Size of buffer at pbData, O: Size of BLOB * @@ -2336,26 +2342,12 @@ static BOOL crypt_export_private_key(CRYPTKEY *pCryptKey, BYTE *pbData, * Success: TRUE. * Failure: FALSE. */ -BOOL WINAPI RSAENH_CPExportKey(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTKEY hPubKey, - DWORD dwBlobType, DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen) +static BOOL crypt_export_key(CRYPTKEY *pCryptKey, HCRYPTKEY hPubKey, + DWORD dwBlobType, DWORD dwFlags, BOOL force, + BYTE *pbData, DWORD *pdwDataLen) { - CRYPTKEY *pCryptKey, *pPubKey; + CRYPTKEY *pPubKey; - TRACE("(hProv=%08lx, hKey=%08lx, hPubKey=%08lx, dwBlobType=%08x, dwFlags=%08x, pbData=%p," - "pdwDataLen=%p)\n", hProv, hKey, hPubKey, dwBlobType, dwFlags, pbData, pdwDataLen); - - if (!is_valid_handle(&handle_table, hProv, RSAENH_MAGIC_CONTAINER)) - { - SetLastError(NTE_BAD_UID); - return FALSE; - } - - if (!lookup_handle(&handle_table, hKey, RSAENH_MAGIC_KEY, (OBJECTHDR**)&pCryptKey)) - { - SetLastError(NTE_BAD_KEY); - return FALSE; - } - if (dwFlags & CRYPT_SSL2_FALLBACK) { if (pCryptKey->aiAlgid != CALG_SSL2_MASTER) { SetLastError(NTE_BAD_KEY); @@ -2370,7 +2362,8 @@ BOOL WINAPI RSAENH_CPExportKey(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTKEY hPubK SetLastError(NTE_BAD_PUBLIC_KEY); /* FIXME: error_code? */ return FALSE; } - return crypt_export_simple(pCryptKey, pPubKey, dwFlags, pbData, pdwDataLen); + return crypt_export_simple(pCryptKey, pPubKey, dwFlags, pbData, + pdwDataLen); case PUBLICKEYBLOB: if (is_valid_handle(&handle_table, hPubKey, RSAENH_MAGIC_KEY)) { @@ -2381,7 +2374,7 @@ BOOL WINAPI RSAENH_CPExportKey(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTKEY hPubK return crypt_export_public_key(pCryptKey, pbData, pdwDataLen); case PRIVATEKEYBLOB: - return crypt_export_private_key(pCryptKey, pbData, pdwDataLen); + return crypt_export_private_key(pCryptKey, force, pbData, pdwDataLen); default: SetLastError(NTE_BAD_TYPE); /* FIXME: error code? */ @@ -2390,6 +2383,48 @@ BOOL WINAPI RSAENH_CPExportKey(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTKEY hPubK } /****************************************************************************** + * CPExportKey (RSAENH.@) + * + * Export a key into a binary large object (BLOB). + * + * PARAMS + * hProv [I] Key container from which a key is to be exported. + * hKey [I] Key to be exported. + * hPubKey [I] Key used to encrypt sensitive BLOB data. + * dwBlobType [I] SIMPLEBLOB, PUBLICKEYBLOB or PRIVATEKEYBLOB. + * dwFlags [I] Currently none defined. + * pbData [O] Pointer to a buffer where the BLOB will be written to. + * pdwDataLen [I/O] I: Size of buffer at pbData, O: Size of BLOB + * + * RETURNS + * Success: TRUE. + * Failure: FALSE. + */ +BOOL WINAPI RSAENH_CPExportKey(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTKEY hPubKey, + DWORD dwBlobType, DWORD dwFlags, BYTE *pbData, DWORD *pdwDataLen) +{ + CRYPTKEY *pCryptKey; + + TRACE("(hProv=%08lx, hKey=%08lx, hPubKey=%08lx, dwBlobType=%08x, dwFlags=%08x, pbData=%p," + "pdwDataLen=%p)\n", hProv, hKey, hPubKey, dwBlobType, dwFlags, pbData, pdwDataLen); + + if (!is_valid_handle(&handle_table, hProv, RSAENH_MAGIC_CONTAINER)) + { + SetLastError(NTE_BAD_UID); + return FALSE; + } + + if (!lookup_handle(&handle_table, hKey, RSAENH_MAGIC_KEY, (OBJECTHDR**)&pCryptKey)) + { + SetLastError(NTE_BAD_KEY); + return FALSE; + } + + return crypt_export_key(pCryptKey, hPubKey, dwBlobType, dwFlags, FALSE, + pbData, pdwDataLen); +} + +/****************************************************************************** * CPImportKey (RSAENH.@) * * Import a BLOB'ed key into a key container. diff --git a/dlls/rsaenh/tests/rsaenh.c b/dlls/rsaenh/tests/rsaenh.c index e13bc1c..57ca35f 100644 --- a/dlls/rsaenh/tests/rsaenh.c +++ b/dlls/rsaenh/tests/rsaenh.c @@ -1574,7 +1574,6 @@ static void test_rsa_encrypt(void) /* but its private key may not be. */ SetLastError(0xdeadbeef); result = CryptExportKey(hRSAKey, 0, PRIVATEKEYBLOB, 0, NULL, &dwLen); - todo_wine ok(!result && GetLastError() == NTE_BAD_KEY_STATE, "expected NTE_BAD_KEY_STATE, got %08x\n", GetLastError()); /* Setting the permissions of the key exchange key isn't allowed, either. */ @@ -1606,7 +1605,6 @@ static void test_rsa_encrypt(void) /* but its private key may not be. */ SetLastError(0xdeadbeef); result = CryptExportKey(hRSAKey, 0, PRIVATEKEYBLOB, 0, NULL, &dwLen); - todo_wine ok(!result && GetLastError() == NTE_BAD_KEY_STATE, "expected NTE_BAD_KEY_STATE, got %08x\n", GetLastError()); /* Setting the permissions of the signature key isn't allowed, either. */

1 0

← Newer
1
...
7
8
9
10
11
12
13
...
135
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-commits January 2009