1 | /* |
2 | * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved. |
3 | * |
4 | * Licensed under the OpenSSL license (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at |
7 | * https://www.openssl.org/source/license.html |
8 | */ |
9 | |
10 | #ifndef HEADER_UI_H |
11 | # define |
12 | |
13 | # include <openssl/opensslconf.h> |
14 | |
15 | # if OPENSSL_API_COMPAT < 0x10100000L |
16 | # include <openssl/crypto.h> |
17 | # endif |
18 | # include <openssl/safestack.h> |
19 | # include <openssl/pem.h> |
20 | # include <openssl/ossl_typ.h> |
21 | # include <openssl/uierr.h> |
22 | |
23 | /* For compatibility reasons, the macro OPENSSL_NO_UI is currently retained */ |
24 | # if OPENSSL_API_COMPAT < 0x10200000L |
25 | # ifdef OPENSSL_NO_UI_CONSOLE |
26 | # define OPENSSL_NO_UI |
27 | # endif |
28 | # endif |
29 | |
30 | # ifdef __cplusplus |
31 | extern "C" { |
32 | # endif |
33 | |
34 | /* |
35 | * All the following functions return -1 or NULL on error and in some cases |
36 | * (UI_process()) -2 if interrupted or in some other way cancelled. When |
37 | * everything is fine, they return 0, a positive value or a non-NULL pointer, |
38 | * all depending on their purpose. |
39 | */ |
40 | |
41 | /* Creators and destructor. */ |
42 | UI *UI_new(void); |
43 | UI *UI_new_method(const UI_METHOD *method); |
44 | void UI_free(UI *ui); |
45 | |
46 | /*- |
47 | The following functions are used to add strings to be printed and prompt |
48 | strings to prompt for data. The names are UI_{add,dup}_<function>_string |
49 | and UI_{add,dup}_input_boolean. |
50 | |
51 | UI_{add,dup}_<function>_string have the following meanings: |
52 | add add a text or prompt string. The pointers given to these |
53 | functions are used verbatim, no copying is done. |
54 | dup make a copy of the text or prompt string, then add the copy |
55 | to the collection of strings in the user interface. |
56 | <function> |
57 | The function is a name for the functionality that the given |
58 | string shall be used for. It can be one of: |
59 | input use the string as data prompt. |
60 | verify use the string as verification prompt. This |
61 | is used to verify a previous input. |
62 | info use the string for informational output. |
63 | error use the string for error output. |
64 | Honestly, there's currently no difference between info and error for the |
65 | moment. |
66 | |
67 | UI_{add,dup}_input_boolean have the same semantics for "add" and "dup", |
68 | and are typically used when one wants to prompt for a yes/no response. |
69 | |
70 | All of the functions in this group take a UI and a prompt string. |
71 | The string input and verify addition functions also take a flag argument, |
72 | a buffer for the result to end up with, a minimum input size and a maximum |
73 | input size (the result buffer MUST be large enough to be able to contain |
74 | the maximum number of characters). Additionally, the verify addition |
75 | functions takes another buffer to compare the result against. |
76 | The boolean input functions take an action description string (which should |
77 | be safe to ignore if the expected user action is obvious, for example with |
78 | a dialog box with an OK button and a Cancel button), a string of acceptable |
79 | characters to mean OK and to mean Cancel. The two last strings are checked |
80 | to make sure they don't have common characters. Additionally, the same |
81 | flag argument as for the string input is taken, as well as a result buffer. |
82 | The result buffer is required to be at least one byte long. Depending on |
83 | the answer, the first character from the OK or the Cancel character strings |
84 | will be stored in the first byte of the result buffer. No NUL will be |
85 | added, so the result is *not* a string. |
86 | |
87 | On success, the all return an index of the added information. That index |
88 | is useful when retrieving results with UI_get0_result(). */ |
89 | int UI_add_input_string(UI *ui, const char *prompt, int flags, |
90 | char *result_buf, int minsize, int maxsize); |
91 | int UI_dup_input_string(UI *ui, const char *prompt, int flags, |
92 | char *result_buf, int minsize, int maxsize); |
93 | int UI_add_verify_string(UI *ui, const char *prompt, int flags, |
94 | char *result_buf, int minsize, int maxsize, |
95 | const char *test_buf); |
96 | int UI_dup_verify_string(UI *ui, const char *prompt, int flags, |
97 | char *result_buf, int minsize, int maxsize, |
98 | const char *test_buf); |
99 | int UI_add_input_boolean(UI *ui, const char *prompt, const char *action_desc, |
100 | const char *ok_chars, const char *cancel_chars, |
101 | int flags, char *result_buf); |
102 | int UI_dup_input_boolean(UI *ui, const char *prompt, const char *action_desc, |
103 | const char *ok_chars, const char *cancel_chars, |
104 | int flags, char *result_buf); |
105 | int UI_add_info_string(UI *ui, const char *text); |
106 | int UI_dup_info_string(UI *ui, const char *text); |
107 | int UI_add_error_string(UI *ui, const char *text); |
108 | int UI_dup_error_string(UI *ui, const char *text); |
109 | |
110 | /* These are the possible flags. They can be or'ed together. */ |
111 | /* Use to have echoing of input */ |
112 | # define UI_INPUT_FLAG_ECHO 0x01 |
113 | /* |
114 | * Use a default password. Where that password is found is completely up to |
115 | * the application, it might for example be in the user data set with |
116 | * UI_add_user_data(). It is not recommended to have more than one input in |
117 | * each UI being marked with this flag, or the application might get |
118 | * confused. |
119 | */ |
120 | # define UI_INPUT_FLAG_DEFAULT_PWD 0x02 |
121 | |
122 | /*- |
123 | * The user of these routines may want to define flags of their own. The core |
124 | * UI won't look at those, but will pass them on to the method routines. They |
125 | * must use higher bits so they don't get confused with the UI bits above. |
126 | * UI_INPUT_FLAG_USER_BASE tells which is the lowest bit to use. A good |
127 | * example of use is this: |
128 | * |
129 | * #define MY_UI_FLAG1 (0x01 << UI_INPUT_FLAG_USER_BASE) |
130 | * |
131 | */ |
132 | # define UI_INPUT_FLAG_USER_BASE 16 |
133 | |
134 | /*- |
135 | * The following function helps construct a prompt. object_desc is a |
136 | * textual short description of the object, for example "pass phrase", |
137 | * and object_name is the name of the object (might be a card name or |
138 | * a file name. |
139 | * The returned string shall always be allocated on the heap with |
140 | * OPENSSL_malloc(), and need to be free'd with OPENSSL_free(). |
141 | * |
142 | * If the ui_method doesn't contain a pointer to a user-defined prompt |
143 | * constructor, a default string is built, looking like this: |
144 | * |
145 | * "Enter {object_desc} for {object_name}:" |
146 | * |
147 | * So, if object_desc has the value "pass phrase" and object_name has |
148 | * the value "foo.key", the resulting string is: |
149 | * |
150 | * "Enter pass phrase for foo.key:" |
151 | */ |
152 | char *UI_construct_prompt(UI *ui_method, |
153 | const char *object_desc, const char *object_name); |
154 | |
155 | /* |
156 | * The following function is used to store a pointer to user-specific data. |
157 | * Any previous such pointer will be returned and replaced. |
158 | * |
159 | * For callback purposes, this function makes a lot more sense than using |
160 | * ex_data, since the latter requires that different parts of OpenSSL or |
161 | * applications share the same ex_data index. |
162 | * |
163 | * Note that the UI_OpenSSL() method completely ignores the user data. Other |
164 | * methods may not, however. |
165 | */ |
166 | void *UI_add_user_data(UI *ui, void *user_data); |
167 | /* |
168 | * Alternatively, this function is used to duplicate the user data. |
169 | * This uses the duplicator method function. The destroy function will |
170 | * be used to free the user data in this case. |
171 | */ |
172 | int UI_dup_user_data(UI *ui, void *user_data); |
173 | /* We need a user data retrieving function as well. */ |
174 | void *UI_get0_user_data(UI *ui); |
175 | |
176 | /* Return the result associated with a prompt given with the index i. */ |
177 | const char *UI_get0_result(UI *ui, int i); |
178 | int UI_get_result_length(UI *ui, int i); |
179 | |
180 | /* When all strings have been added, process the whole thing. */ |
181 | int UI_process(UI *ui); |
182 | |
183 | /* |
184 | * Give a user interface parameterised control commands. This can be used to |
185 | * send down an integer, a data pointer or a function pointer, as well as be |
186 | * used to get information from a UI. |
187 | */ |
188 | int UI_ctrl(UI *ui, int cmd, long i, void *p, void (*f) (void)); |
189 | |
190 | /* The commands */ |
191 | /* |
192 | * Use UI_CONTROL_PRINT_ERRORS with the value 1 to have UI_process print the |
193 | * OpenSSL error stack before printing any info or added error messages and |
194 | * before any prompting. |
195 | */ |
196 | # define UI_CTRL_PRINT_ERRORS 1 |
197 | /* |
198 | * Check if a UI_process() is possible to do again with the same instance of |
199 | * a user interface. This makes UI_ctrl() return 1 if it is redoable, and 0 |
200 | * if not. |
201 | */ |
202 | # define UI_CTRL_IS_REDOABLE 2 |
203 | |
204 | /* Some methods may use extra data */ |
205 | # define UI_set_app_data(s,arg) UI_set_ex_data(s,0,arg) |
206 | # define UI_get_app_data(s) UI_get_ex_data(s,0) |
207 | |
208 | # define UI_get_ex_new_index(l, p, newf, dupf, freef) \ |
209 | CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_UI, l, p, newf, dupf, freef) |
210 | int UI_set_ex_data(UI *r, int idx, void *arg); |
211 | void *UI_get_ex_data(UI *r, int idx); |
212 | |
213 | /* Use specific methods instead of the built-in one */ |
214 | void UI_set_default_method(const UI_METHOD *meth); |
215 | const UI_METHOD *UI_get_default_method(void); |
216 | const UI_METHOD *UI_get_method(UI *ui); |
217 | const UI_METHOD *UI_set_method(UI *ui, const UI_METHOD *meth); |
218 | |
219 | # ifndef OPENSSL_NO_UI_CONSOLE |
220 | |
221 | /* The method with all the built-in thingies */ |
222 | UI_METHOD *UI_OpenSSL(void); |
223 | |
224 | # endif |
225 | |
226 | /* |
227 | * NULL method. Literally does nothing, but may serve as a placeholder |
228 | * to avoid internal default. |
229 | */ |
230 | const UI_METHOD *UI_null(void); |
231 | |
232 | /* ---------- For method writers ---------- */ |
233 | /*- |
234 | A method contains a number of functions that implement the low level |
235 | of the User Interface. The functions are: |
236 | |
237 | an opener This function starts a session, maybe by opening |
238 | a channel to a tty, or by opening a window. |
239 | a writer This function is called to write a given string, |
240 | maybe to the tty, maybe as a field label in a |
241 | window. |
242 | a flusher This function is called to flush everything that |
243 | has been output so far. It can be used to actually |
244 | display a dialog box after it has been built. |
245 | a reader This function is called to read a given prompt, |
246 | maybe from the tty, maybe from a field in a |
247 | window. Note that it's called with all string |
248 | structures, not only the prompt ones, so it must |
249 | check such things itself. |
250 | a closer This function closes the session, maybe by closing |
251 | the channel to the tty, or closing the window. |
252 | |
253 | All these functions are expected to return: |
254 | |
255 | 0 on error. |
256 | 1 on success. |
257 | -1 on out-of-band events, for example if some prompting has |
258 | been canceled (by pressing Ctrl-C, for example). This is |
259 | only checked when returned by the flusher or the reader. |
260 | |
261 | The way this is used, the opener is first called, then the writer for all |
262 | strings, then the flusher, then the reader for all strings and finally the |
263 | closer. Note that if you want to prompt from a terminal or other command |
264 | line interface, the best is to have the reader also write the prompts |
265 | instead of having the writer do it. If you want to prompt from a dialog |
266 | box, the writer can be used to build up the contents of the box, and the |
267 | flusher to actually display the box and run the event loop until all data |
268 | has been given, after which the reader only grabs the given data and puts |
269 | them back into the UI strings. |
270 | |
271 | All method functions take a UI as argument. Additionally, the writer and |
272 | the reader take a UI_STRING. |
273 | */ |
274 | |
275 | /* |
276 | * The UI_STRING type is the data structure that contains all the needed info |
277 | * about a string or a prompt, including test data for a verification prompt. |
278 | */ |
279 | typedef struct ui_string_st UI_STRING; |
280 | DEFINE_STACK_OF(UI_STRING) |
281 | |
282 | /* |
283 | * The different types of strings that are currently supported. This is only |
284 | * needed by method authors. |
285 | */ |
286 | enum UI_string_types { |
287 | UIT_NONE = 0, |
288 | UIT_PROMPT, /* Prompt for a string */ |
289 | UIT_VERIFY, /* Prompt for a string and verify */ |
290 | UIT_BOOLEAN, /* Prompt for a yes/no response */ |
291 | UIT_INFO, /* Send info to the user */ |
292 | UIT_ERROR /* Send an error message to the user */ |
293 | }; |
294 | |
295 | /* Create and manipulate methods */ |
296 | UI_METHOD *UI_create_method(const char *name); |
297 | void UI_destroy_method(UI_METHOD *ui_method); |
298 | int UI_method_set_opener(UI_METHOD *method, int (*opener) (UI *ui)); |
299 | int UI_method_set_writer(UI_METHOD *method, |
300 | int (*writer) (UI *ui, UI_STRING *uis)); |
301 | int UI_method_set_flusher(UI_METHOD *method, int (*flusher) (UI *ui)); |
302 | int UI_method_set_reader(UI_METHOD *method, |
303 | int (*reader) (UI *ui, UI_STRING *uis)); |
304 | int UI_method_set_closer(UI_METHOD *method, int (*closer) (UI *ui)); |
305 | int UI_method_set_data_duplicator(UI_METHOD *method, |
306 | void *(*duplicator) (UI *ui, void *ui_data), |
307 | void (*destructor)(UI *ui, void *ui_data)); |
308 | int UI_method_set_prompt_constructor(UI_METHOD *method, |
309 | char *(*prompt_constructor) (UI *ui, |
310 | const char |
311 | *object_desc, |
312 | const char |
313 | *object_name)); |
314 | int UI_method_set_ex_data(UI_METHOD *method, int idx, void *data); |
315 | int (*UI_method_get_opener(const UI_METHOD *method)) (UI *); |
316 | int (*UI_method_get_writer(const UI_METHOD *method)) (UI *, UI_STRING *); |
317 | int (*UI_method_get_flusher(const UI_METHOD *method)) (UI *); |
318 | int (*UI_method_get_reader(const UI_METHOD *method)) (UI *, UI_STRING *); |
319 | int (*UI_method_get_closer(const UI_METHOD *method)) (UI *); |
320 | char *(*UI_method_get_prompt_constructor(const UI_METHOD *method)) |
321 | (UI *, const char *, const char *); |
322 | void *(*UI_method_get_data_duplicator(const UI_METHOD *method)) (UI *, void *); |
323 | void (*UI_method_get_data_destructor(const UI_METHOD *method)) (UI *, void *); |
324 | const void *UI_method_get_ex_data(const UI_METHOD *method, int idx); |
325 | |
326 | /* |
327 | * The following functions are helpers for method writers to access relevant |
328 | * data from a UI_STRING. |
329 | */ |
330 | |
331 | /* Return type of the UI_STRING */ |
332 | enum UI_string_types UI_get_string_type(UI_STRING *uis); |
333 | /* Return input flags of the UI_STRING */ |
334 | int UI_get_input_flags(UI_STRING *uis); |
335 | /* Return the actual string to output (the prompt, info or error) */ |
336 | const char *UI_get0_output_string(UI_STRING *uis); |
337 | /* |
338 | * Return the optional action string to output (the boolean prompt |
339 | * instruction) |
340 | */ |
341 | const char *UI_get0_action_string(UI_STRING *uis); |
342 | /* Return the result of a prompt */ |
343 | const char *UI_get0_result_string(UI_STRING *uis); |
344 | int UI_get_result_string_length(UI_STRING *uis); |
345 | /* |
346 | * Return the string to test the result against. Only useful with verifies. |
347 | */ |
348 | const char *UI_get0_test_string(UI_STRING *uis); |
349 | /* Return the required minimum size of the result */ |
350 | int UI_get_result_minsize(UI_STRING *uis); |
351 | /* Return the required maximum size of the result */ |
352 | int UI_get_result_maxsize(UI_STRING *uis); |
353 | /* Set the result of a UI_STRING. */ |
354 | int UI_set_result(UI *ui, UI_STRING *uis, const char *result); |
355 | int UI_set_result_ex(UI *ui, UI_STRING *uis, const char *result, int len); |
356 | |
357 | /* A couple of popular utility functions */ |
358 | int UI_UTIL_read_pw_string(char *buf, int length, const char *prompt, |
359 | int verify); |
360 | int UI_UTIL_read_pw(char *buf, char *buff, int size, const char *prompt, |
361 | int verify); |
362 | UI_METHOD *UI_UTIL_wrap_read_pem_callback(pem_password_cb *cb, int rwflag); |
363 | |
364 | |
365 | # ifdef __cplusplus |
366 | } |
367 | # endif |
368 | #endif |
369 | |