2 * Pageant: the PuTTY Authentication Agent.
17 #define IDI_MAINICON 200
18 #define IDI_TRAYICON 201
20 #define WM_XUSER (WM_USER + 0x2000)
21 #define WM_SYSTRAY (WM_XUSER + 6)
22 #define WM_SYSTRAY2 (WM_XUSER + 7)
24 #define AGENT_COPYDATA_ID 0x804e50ba /* random goop */
27 * FIXME: maybe some day we can sort this out ...
29 #define AGENT_MAX_MSGLEN 8192
31 #define IDM_CLOSE 0x0010
32 #define IDM_VIEWKEYS 0x0020
33 #define IDM_ADDKEY 0x0030
34 #define IDM_ABOUT 0x0040
36 #define APPNAME "Pageant"
40 static HINSTANCE instance;
44 static HMENU systray_menu;
45 static int already_running;
47 static tree234 *rsakeys, *ssh2keys;
49 static int has_security;
51 typedef DWORD(WINAPI * gsi_fn_t)
52 (HANDLE, SE_OBJECT_TYPE, SECURITY_INFORMATION,
53 PSID *, PSID *, PACL *, PACL *, PSECURITY_DESCRIPTOR *);
54 static gsi_fn_t getsecurityinfo;
58 * Exports from pageantc.c
60 void agent_query(void *in, int inlen, void **out, int *outlen);
61 int agent_exists(void);
64 * We need this to link with the RSA code, because rsaencrypt()
65 * pads its data with random bytes. Since we only use rsadecrypt()
66 * and the signing functions, which are deterministic, this should
69 * If it _is_ called, there is a _serious_ problem, because it
70 * won't generate true random numbers. So we must scream, panic,
71 * and exit immediately if that should happen.
75 MessageBox(hwnd, "Internal Error", APPNAME, MB_OK | MB_ICONERROR);
77 /* this line can't be reached but it placates MSVC's warnings :-) */
82 * Blob structure for passing to the asymmetric SSH2 key compare
83 * function, prototyped here.
89 static int cmpkeys_ssh2_asymm(void *av, void *bv);
92 * This function is needed to link with the DES code. We need not
93 * have it do anything at all.
95 void logevent(char *msg)
99 #define GET_32BIT(cp) \
100 (((unsigned long)(unsigned char)(cp)[0] << 24) | \
101 ((unsigned long)(unsigned char)(cp)[1] << 16) | \
102 ((unsigned long)(unsigned char)(cp)[2] << 8) | \
103 ((unsigned long)(unsigned char)(cp)[3]))
105 #define PUT_32BIT(cp, value) { \
106 (cp)[0] = (unsigned char)((value) >> 24); \
107 (cp)[1] = (unsigned char)((value) >> 16); \
108 (cp)[2] = (unsigned char)((value) >> 8); \
109 (cp)[3] = (unsigned char)(value); }
111 #define PASSPHRASE_MAXLEN 512
113 struct PassphraseProcStruct {
119 * Dialog-box function for the Licence box.
121 static int CALLBACK LicenceProc(HWND hwnd, UINT msg,
122 WPARAM wParam, LPARAM lParam)
128 switch (LOWORD(wParam)) {
142 * Dialog-box function for the About box.
144 static int CALLBACK AboutProc(HWND hwnd, UINT msg,
145 WPARAM wParam, LPARAM lParam)
149 SetDlgItemText(hwnd, 100, ver);
152 switch (LOWORD(wParam)) {
158 EnableWindow(hwnd, 0);
159 DialogBox(instance, MAKEINTRESOURCE(214), NULL, LicenceProc);
160 EnableWindow(hwnd, 1);
161 SetActiveWindow(hwnd);
173 static HWND passphrase_box;
176 * Dialog-box function for the passphrase box.
178 static int CALLBACK PassphraseProc(HWND hwnd, UINT msg,
179 WPARAM wParam, LPARAM lParam)
181 static char *passphrase = NULL;
182 struct PassphraseProcStruct *p;
186 passphrase_box = hwnd;
190 { /* centre the window */
194 hw = GetDesktopWindow();
195 if (GetWindowRect(hw, &rs) && GetWindowRect(hwnd, &rd))
197 (rs.right + rs.left + rd.left - rd.right) / 2,
198 (rs.bottom + rs.top + rd.top - rd.bottom) / 2,
199 rd.right - rd.left, rd.bottom - rd.top, TRUE);
202 SetForegroundWindow(hwnd);
203 SetWindowPos(hwnd, HWND_TOP, 0, 0, 0, 0,
204 SWP_NOMOVE | SWP_NOSIZE | SWP_SHOWWINDOW);
205 p = (struct PassphraseProcStruct *) lParam;
206 passphrase = p->passphrase;
208 SetDlgItemText(hwnd, 101, p->comment);
210 SetDlgItemText(hwnd, 102, passphrase);
213 switch (LOWORD(wParam)) {
223 case 102: /* edit box */
224 if ((HIWORD(wParam) == EN_CHANGE) && passphrase) {
225 GetDlgItemText(hwnd, 102, passphrase,
226 PASSPHRASE_MAXLEN - 1);
227 passphrase[PASSPHRASE_MAXLEN - 1] = '\0';
240 * Update the visible key list.
242 static void keylist_update(void)
245 struct ssh2_userkey *skey;
249 SendDlgItemMessage(keylist, 100, LB_RESETCONTENT, 0, 0);
250 for (i = 0; NULL != (rkey = index234(rsakeys, i)); i++) {
251 char listentry[512], *p;
253 * Replace two spaces in the fingerprint with tabs, for
254 * nice alignment in the box.
256 strcpy(listentry, "ssh1\t");
257 p = listentry + strlen(listentry);
258 rsa_fingerprint(p, sizeof(listentry) - (p - listentry), rkey);
259 p = strchr(listentry, ' ');
262 p = strchr(listentry, ' ');
265 SendDlgItemMessage(keylist, 100, LB_ADDSTRING,
266 0, (LPARAM) listentry);
268 for (i = 0; NULL != (skey = index234(ssh2keys, i)); i++) {
269 char listentry[512], *p;
272 * Replace two spaces in the fingerprint with tabs, for
273 * nice alignment in the box.
275 p = skey->alg->fingerprint(skey->data);
276 strncpy(listentry, p, sizeof(listentry));
277 p = strchr(listentry, ' ');
280 p = strchr(listentry, ' ');
283 len = strlen(listentry);
284 if (len < sizeof(listentry) - 2) {
285 listentry[len] = '\t';
286 strncpy(listentry + len + 1, skey->comment,
287 sizeof(listentry) - len - 1);
289 SendDlgItemMessage(keylist, 100, LB_ADDSTRING, 0,
292 SendDlgItemMessage(keylist, 100, LB_SETCURSEL, (WPARAM) - 1, 0);
297 * This function loads a key from a file and adds it.
299 static void add_keyfile(char *filename)
301 char passphrase[PASSPHRASE_MAXLEN];
302 struct RSAKey *rkey = NULL;
303 struct ssh2_userkey *skey = NULL;
308 struct PassphraseProcStruct pps;
311 ver = keyfile_version(filename);
313 MessageBox(NULL, "Couldn't load private key.", APPNAME,
314 MB_OK | MB_ICONERROR);
319 needs_pass = rsakey_encrypted(filename, &comment);
321 needs_pass = ssh2_userkey_encrypted(filename, &comment);
324 rkey = smalloc(sizeof(*rkey));
325 pps.passphrase = passphrase;
326 pps.comment = comment;
330 dlgret = DialogBoxParam(instance, MAKEINTRESOURCE(210),
331 NULL, PassphraseProc, (LPARAM) & pps);
332 passphrase_box = NULL;
338 return; /* operation cancelled */
343 ret = loadrsakey(filename, rkey, passphrase);
345 skey = ssh2_load_userkey(filename, passphrase);
346 if (skey == SSH2_WRONG_PASSPHRASE)
358 MessageBox(NULL, "Couldn't load private key.", APPNAME,
359 MB_OK | MB_ICONERROR);
365 if (already_running) {
366 unsigned char *request, *response;
368 int reqlen, clen, resplen;
370 clen = strlen(rkey->comment);
372 reqlen = 4 + 1 + /* length, message type */
374 ssh1_bignum_length(rkey->modulus) +
375 ssh1_bignum_length(rkey->exponent) +
376 ssh1_bignum_length(rkey->private_exponent) +
377 ssh1_bignum_length(rkey->iqmp) +
378 ssh1_bignum_length(rkey->p) +
379 ssh1_bignum_length(rkey->q) + 4 + clen /* comment */
382 request = smalloc(reqlen);
384 request[4] = SSH1_AGENTC_ADD_RSA_IDENTITY;
386 PUT_32BIT(request + reqlen, bignum_bitcount(rkey->modulus));
388 reqlen += ssh1_write_bignum(request + reqlen, rkey->modulus);
389 reqlen += ssh1_write_bignum(request + reqlen, rkey->exponent);
391 ssh1_write_bignum(request + reqlen,
392 rkey->private_exponent);
393 reqlen += ssh1_write_bignum(request + reqlen, rkey->iqmp);
394 reqlen += ssh1_write_bignum(request + reqlen, rkey->p);
395 reqlen += ssh1_write_bignum(request + reqlen, rkey->q);
396 PUT_32BIT(request + reqlen, clen);
397 memcpy(request + reqlen + 4, rkey->comment, clen);
399 PUT_32BIT(request, reqlen - 4);
401 agent_query(request, reqlen, &vresponse, &resplen);
402 response = vresponse;
403 if (resplen < 5 || response[4] != SSH_AGENT_SUCCESS)
404 MessageBox(NULL, "The already running Pageant "
405 "refused to add the key.", APPNAME,
406 MB_OK | MB_ICONERROR);
408 if (add234(rsakeys, rkey) != rkey)
409 sfree(rkey); /* already present, don't waste RAM */
412 if (already_running) {
413 unsigned char *request, *response;
415 int reqlen, alglen, clen, keybloblen, resplen;
416 alglen = strlen(skey->alg->name);
417 clen = strlen(skey->comment);
419 keybloblen = skey->alg->openssh_fmtkey(skey->data, NULL, 0);
421 reqlen = 4 + 1 + /* length, message type */
422 4 + alglen + /* algorithm name */
423 keybloblen + /* key data */
424 4 + clen /* comment */
427 request = smalloc(reqlen);
429 request[4] = SSH2_AGENTC_ADD_IDENTITY;
431 PUT_32BIT(request + reqlen, alglen);
433 memcpy(request + reqlen, skey->alg->name, alglen);
435 reqlen += skey->alg->openssh_fmtkey(skey->data,
438 PUT_32BIT(request + reqlen, clen);
439 memcpy(request + reqlen + 4, skey->comment, clen);
440 PUT_32BIT(request, reqlen - 4);
443 agent_query(request, reqlen, &vresponse, &resplen);
444 response = vresponse;
445 if (resplen < 5 || response[4] != SSH_AGENT_SUCCESS)
446 MessageBox(NULL, "The already running Pageant"
447 "refused to add the key.", APPNAME,
448 MB_OK | MB_ICONERROR);
450 if (add234(ssh2keys, skey) != skey) {
451 skey->alg->freekey(skey->data);
452 sfree(skey); /* already present, don't waste RAM */
459 * This is the main agent function that answers messages.
461 static void answer_msg(void *msg)
463 unsigned char *p = msg;
464 unsigned char *ret = msg;
468 * Get the message type.
474 case SSH1_AGENTC_REQUEST_RSA_IDENTITIES:
476 * Reply with SSH1_AGENT_RSA_IDENTITIES_ANSWER.
484 * Count up the number and length of keys we hold.
487 for (i = 0; NULL != (key = index234(rsakeys, i)); i++) {
489 len += 4; /* length field */
490 len += ssh1_bignum_length(key->exponent);
491 len += ssh1_bignum_length(key->modulus);
492 len += 4 + strlen(key->comment);
496 * Packet header is the obvious five bytes, plus four
497 * bytes for the key count.
500 if (len > AGENT_MAX_MSGLEN)
501 goto failure; /* aaargh! too much stuff! */
502 PUT_32BIT(ret, len - 4);
503 ret[4] = SSH1_AGENT_RSA_IDENTITIES_ANSWER;
504 PUT_32BIT(ret + 5, nkeys);
506 for (i = 0; NULL != (key = index234(rsakeys, i)); i++) {
507 PUT_32BIT(p, bignum_bitcount(key->modulus));
509 p += ssh1_write_bignum(p, key->exponent);
510 p += ssh1_write_bignum(p, key->modulus);
511 PUT_32BIT(p, strlen(key->comment));
512 memcpy(p + 4, key->comment, strlen(key->comment));
513 p += 4 + strlen(key->comment);
517 case SSH2_AGENTC_REQUEST_IDENTITIES:
519 * Reply with SSH2_AGENT_IDENTITIES_ANSWER.
522 struct ssh2_userkey *key;
529 * Count up the number and length of keys we hold.
532 for (i = 0; NULL != (key = index234(ssh2keys, i)); i++) {
534 len += 4; /* length field */
535 blob = key->alg->public_blob(key->data, &bloblen);
538 len += 4 + strlen(key->comment);
542 * Packet header is the obvious five bytes, plus four
543 * bytes for the key count.
546 if (len > AGENT_MAX_MSGLEN)
547 goto failure; /* aaargh! too much stuff! */
548 PUT_32BIT(ret, len - 4);
549 ret[4] = SSH2_AGENT_IDENTITIES_ANSWER;
550 PUT_32BIT(ret + 5, nkeys);
552 for (i = 0; NULL != (key = index234(ssh2keys, i)); i++) {
553 blob = key->alg->public_blob(key->data, &bloblen);
554 PUT_32BIT(p, bloblen);
556 memcpy(p, blob, bloblen);
559 PUT_32BIT(p, strlen(key->comment));
560 memcpy(p + 4, key->comment, strlen(key->comment));
561 p += 4 + strlen(key->comment);
565 case SSH1_AGENTC_RSA_CHALLENGE:
567 * Reply with either SSH1_AGENT_RSA_RESPONSE or
568 * SSH_AGENT_FAILURE, depending on whether we have that key
572 struct RSAKey reqkey, *key;
573 Bignum challenge, response;
574 unsigned char response_source[48], response_md5[16];
575 struct MD5Context md5c;
579 p += ssh1_read_bignum(p, &reqkey.exponent);
580 p += ssh1_read_bignum(p, &reqkey.modulus);
581 p += ssh1_read_bignum(p, &challenge);
582 memcpy(response_source + 32, p, 16);
584 if (GET_32BIT(p) != 1 ||
585 (key = find234(rsakeys, &reqkey, NULL)) == NULL) {
586 freebn(reqkey.exponent);
587 freebn(reqkey.modulus);
591 response = rsadecrypt(challenge, key);
592 for (i = 0; i < 32; i++)
593 response_source[i] = bignum_byte(response, 31 - i);
596 MD5Update(&md5c, response_source, 48);
597 MD5Final(response_md5, &md5c);
598 memset(response_source, 0, 48); /* burn the evidence */
599 freebn(response); /* and that evidence */
600 freebn(challenge); /* yes, and that evidence */
601 freebn(reqkey.exponent); /* and free some memory ... */
602 freebn(reqkey.modulus); /* ... while we're at it. */
605 * Packet is the obvious five byte header, plus sixteen
609 PUT_32BIT(ret, len - 4);
610 ret[4] = SSH1_AGENT_RSA_RESPONSE;
611 memcpy(ret + 5, response_md5, 16);
614 case SSH2_AGENTC_SIGN_REQUEST:
616 * Reply with either SSH2_AGENT_SIGN_RESPONSE or
617 * SSH_AGENT_FAILURE, depending on whether we have that key
621 struct ssh2_userkey *key;
623 unsigned char *data, *signature;
624 int datalen, siglen, len;
626 b.len = GET_32BIT(p);
630 datalen = GET_32BIT(p);
633 key = find234(ssh2keys, &b, cmpkeys_ssh2_asymm);
636 signature = key->alg->sign(key->data, data, datalen, &siglen);
637 len = 5 + 4 + siglen;
638 PUT_32BIT(ret, len - 4);
639 ret[4] = SSH2_AGENT_SIGN_RESPONSE;
640 PUT_32BIT(ret + 5, siglen);
641 memcpy(ret + 5 + 4, signature, siglen);
645 case SSH1_AGENTC_ADD_RSA_IDENTITY:
647 * Add to the list and return SSH_AGENT_SUCCESS, or
648 * SSH_AGENT_FAILURE if the key was malformed.
654 key = smalloc(sizeof(struct RSAKey));
655 memset(key, 0, sizeof(struct RSAKey));
656 p += makekey(p, key, NULL, 1);
657 p += makeprivate(p, key);
658 p += ssh1_read_bignum(p, &key->iqmp); /* p^-1 mod q */
659 p += ssh1_read_bignum(p, &key->p); /* p */
660 p += ssh1_read_bignum(p, &key->q); /* q */
661 commentlen = GET_32BIT(p);
662 comment = smalloc(commentlen+1);
664 memcpy(comment, p + 4, commentlen);
665 comment[commentlen] = '\0';
666 key->comment = comment;
669 ret[4] = SSH_AGENT_FAILURE;
670 if (add234(rsakeys, key) == key) {
672 ret[4] = SSH_AGENT_SUCCESS;
679 case SSH2_AGENTC_ADD_IDENTITY:
681 * Add to the list and return SSH_AGENT_SUCCESS, or
682 * SSH_AGENT_FAILURE if the key was malformed.
685 struct ssh2_userkey *key;
690 key = smalloc(sizeof(struct ssh2_userkey));
692 alglen = GET_32BIT(p);
696 /* Add further algorithm names here. */
697 if (alglen == 7 && !memcmp(alg, "ssh-rsa", 7))
699 else if (alglen == 7 && !memcmp(alg, "ssh-dss", 7))
707 GET_32BIT((unsigned char *) msg) - (p -
708 (unsigned char *) msg -
710 key->data = key->alg->openssh_createkey(&p, &bloblen);
715 commlen = GET_32BIT(p);
718 comment = smalloc(commlen + 1);
720 memcpy(comment, p, commlen);
721 comment[commlen] = '\0';
723 key->comment = comment;
726 ret[4] = SSH_AGENT_FAILURE;
727 if (add234(ssh2keys, key) == key) {
729 ret[4] = SSH_AGENT_SUCCESS;
731 key->alg->freekey(key->data);
737 case SSH1_AGENTC_REMOVE_RSA_IDENTITY:
739 * Remove from the list and return SSH_AGENT_SUCCESS, or
740 * perhaps SSH_AGENT_FAILURE if it wasn't in the list to
744 struct RSAKey reqkey, *key;
746 p += makekey(p, &reqkey, NULL, 0);
747 key = find234(rsakeys, &reqkey, NULL);
748 freebn(reqkey.exponent);
749 freebn(reqkey.modulus);
751 ret[4] = SSH_AGENT_FAILURE;
753 del234(rsakeys, key);
757 ret[4] = SSH_AGENT_SUCCESS;
761 case SSH2_AGENTC_REMOVE_IDENTITY:
763 * Remove from the list and return SSH_AGENT_SUCCESS, or
764 * perhaps SSH_AGENT_FAILURE if it wasn't in the list to
768 struct ssh2_userkey *key;
771 b.len = GET_32BIT(p);
775 key = find234(ssh2keys, &b, cmpkeys_ssh2_asymm);
780 ret[4] = SSH_AGENT_FAILURE;
782 del234(ssh2keys, key);
784 key->alg->freekey(key->data);
786 ret[4] = SSH_AGENT_SUCCESS;
790 case SSH1_AGENTC_REMOVE_ALL_RSA_IDENTITIES:
792 * Remove all SSH1 keys. Always returns success.
797 while ((rkey = index234(rsakeys, 0)) != NULL) {
798 del234(rsakeys, rkey);
805 ret[4] = SSH_AGENT_SUCCESS;
808 case SSH2_AGENTC_REMOVE_ALL_IDENTITIES:
810 * Remove all SSH2 keys. Always returns success.
813 struct ssh2_userkey *skey;
815 while ((skey = index234(ssh2keys, 0)) != NULL) {
816 del234(ssh2keys, skey);
817 skey->alg->freekey(skey->data);
823 ret[4] = SSH_AGENT_SUCCESS;
829 * Unrecognised message. Return SSH_AGENT_FAILURE.
832 ret[4] = SSH_AGENT_FAILURE;
838 * Key comparison function for the 2-3-4 tree of RSA keys.
840 static int cmpkeys_rsa(void *av, void *bv)
842 struct RSAKey *a = (struct RSAKey *) av;
843 struct RSAKey *b = (struct RSAKey *) bv;
850 * Compare by length of moduli.
852 alen = bignum_bitcount(am);
853 blen = bignum_bitcount(bm);
856 else if (alen < blen)
859 * Now compare by moduli themselves.
861 alen = (alen + 7) / 8; /* byte count */
864 abyte = bignum_byte(am, alen);
865 bbyte = bignum_byte(bm, alen);
868 else if (abyte < bbyte)
878 * Key comparison function for the 2-3-4 tree of SSH2 keys.
880 static int cmpkeys_ssh2(void *av, void *bv)
882 struct ssh2_userkey *a = (struct ssh2_userkey *) av;
883 struct ssh2_userkey *b = (struct ssh2_userkey *) bv;
886 unsigned char *ablob, *bblob;
890 * Compare purely by public blob.
892 ablob = a->alg->public_blob(a->data, &alen);
893 bblob = b->alg->public_blob(b->data, &blen);
896 for (i = 0; i < alen && i < blen; i++) {
897 if (ablob[i] < bblob[i]) {
900 } else if (ablob[i] > bblob[i]) {
905 if (c == 0 && i < alen)
906 c = +1; /* a is longer */
907 if (c == 0 && i < blen)
908 c = -1; /* a is longer */
917 * Key comparison function for looking up a blob in the 2-3-4 tree
920 static int cmpkeys_ssh2_asymm(void *av, void *bv)
922 struct blob *a = (struct blob *) av;
923 struct ssh2_userkey *b = (struct ssh2_userkey *) bv;
926 unsigned char *ablob, *bblob;
930 * Compare purely by public blob.
934 bblob = b->alg->public_blob(b->data, &blen);
937 for (i = 0; i < alen && i < blen; i++) {
938 if (ablob[i] < bblob[i]) {
941 } else if (ablob[i] > bblob[i]) {
946 if (c == 0 && i < alen)
947 c = +1; /* a is longer */
948 if (c == 0 && i < blen)
949 c = -1; /* a is longer */
957 * Prompt for a key file to add, and add it.
959 static void prompt_add_keyfile(void)
962 char filename[FILENAME_MAX];
963 memset(&of, 0, sizeof(of));
964 #ifdef OPENFILENAME_SIZE_VERSION_400
965 of.lStructSize = OPENFILENAME_SIZE_VERSION_400;
967 of.lStructSize = sizeof(of);
970 of.lpstrFilter = "All Files\0*\0\0\0";
971 of.lpstrCustomFilter = NULL;
973 of.lpstrFile = filename;
975 of.nMaxFile = sizeof(filename);
976 of.lpstrFileTitle = NULL;
977 of.lpstrInitialDir = NULL;
978 of.lpstrTitle = "Select Private Key File";
980 if (GetOpenFileName(&of)) {
981 add_keyfile(filename);
987 * Dialog-box function for the key list box.
989 static int CALLBACK KeyListProc(HWND hwnd, UINT msg,
990 WPARAM wParam, LPARAM lParam)
993 struct ssh2_userkey *skey;
1000 { /* centre the window */
1004 hw = GetDesktopWindow();
1005 if (GetWindowRect(hw, &rs) && GetWindowRect(hwnd, &rd))
1007 (rs.right + rs.left + rd.left - rd.right) / 2,
1008 (rs.bottom + rs.top + rd.top - rd.bottom) / 2,
1009 rd.right - rd.left, rd.bottom - rd.top, TRUE);
1014 static int tabs[] = { 35, 60, 210 };
1015 SendDlgItemMessage(hwnd, 100, LB_SETTABSTOPS,
1016 sizeof(tabs) / sizeof(*tabs),
1022 switch (LOWORD(wParam)) {
1026 DestroyWindow(hwnd);
1028 case 101: /* add key */
1029 if (HIWORD(wParam) == BN_CLICKED ||
1030 HIWORD(wParam) == BN_DOUBLECLICKED) {
1031 if (passphrase_box) {
1032 MessageBeep(MB_ICONERROR);
1033 SetForegroundWindow(passphrase_box);
1036 prompt_add_keyfile();
1039 case 102: /* remove key */
1040 if (HIWORD(wParam) == BN_CLICKED ||
1041 HIWORD(wParam) == BN_DOUBLECLICKED) {
1042 int n = SendDlgItemMessage(hwnd, 100, LB_GETCURSEL, 0, 0);
1048 for (i = 0; NULL != (rkey = index234(rsakeys, i)); i++)
1052 del234(rsakeys, rkey);
1056 for (i = 0; NULL != (skey = index234(ssh2keys, i));
1060 del234(ssh2keys, skey);
1061 skey->alg->freekey(skey->data);
1072 DestroyWindow(hwnd);
1078 /* Set up a system tray icon */
1079 static BOOL AddTrayIcon(HWND hwnd)
1082 NOTIFYICONDATA tnid;
1085 #ifdef NIM_SETVERSION
1087 res = Shell_NotifyIcon(NIM_SETVERSION, &tnid);
1090 tnid.cbSize = sizeof(NOTIFYICONDATA);
1092 tnid.uID = 1; /* unique within this systray use */
1093 tnid.uFlags = NIF_MESSAGE | NIF_ICON | NIF_TIP;
1094 tnid.uCallbackMessage = WM_SYSTRAY;
1095 tnid.hIcon = hicon = LoadIcon(instance, MAKEINTRESOURCE(201));
1096 strcpy(tnid.szTip, "Pageant (PuTTY authentication agent)");
1098 res = Shell_NotifyIcon(NIM_ADD, &tnid);
1100 if (hicon) DestroyIcon(hicon);
1105 static LRESULT CALLBACK WndProc(HWND hwnd, UINT message,
1106 WPARAM wParam, LPARAM lParam)
1109 static int menuinprogress;
1110 static UINT msgTaskbarCreated = 0;
1114 msgTaskbarCreated = RegisterWindowMessage(_T("TaskbarCreated"));
1117 if (message==msgTaskbarCreated) {
1119 * Explorer has been restarted, so the tray icon will
1127 if (lParam == WM_RBUTTONUP) {
1129 GetCursorPos(&cursorpos);
1130 PostMessage(hwnd, WM_SYSTRAY2, cursorpos.x, cursorpos.y);
1131 } else if (lParam == WM_LBUTTONDBLCLK) {
1132 /* Equivalent to IDM_VIEWKEYS. */
1133 PostMessage(hwnd, WM_COMMAND, IDM_VIEWKEYS, 0);
1137 if (!menuinprogress) {
1139 SetForegroundWindow(hwnd);
1140 ret = TrackPopupMenu(systray_menu,
1141 TPM_RIGHTALIGN | TPM_BOTTOMALIGN |
1143 wParam, lParam, 0, hwnd, NULL);
1149 switch (wParam & ~0xF) { /* low 4 bits reserved to Windows */
1152 SendMessage(passphrase_box, WM_CLOSE, 0, 0);
1153 SendMessage(hwnd, WM_CLOSE, 0, 0);
1157 keylist = CreateDialog(instance, MAKEINTRESOURCE(211),
1159 ShowWindow(keylist, SW_SHOWNORMAL);
1161 * Sometimes the window comes up minimised / hidden
1162 * for no obvious reason. Prevent this.
1164 SetForegroundWindow(keylist);
1165 SetWindowPos(keylist, HWND_TOP, 0, 0, 0, 0,
1166 SWP_NOMOVE | SWP_NOSIZE | SWP_SHOWWINDOW);
1170 if (passphrase_box) {
1171 MessageBeep(MB_ICONERROR);
1172 SetForegroundWindow(passphrase_box);
1175 prompt_add_keyfile();
1179 aboutbox = CreateDialog(instance, MAKEINTRESOURCE(213),
1181 ShowWindow(aboutbox, SW_SHOWNORMAL);
1183 * Sometimes the window comes up minimised / hidden
1184 * for no obvious reason. Prevent this.
1186 SetForegroundWindow(aboutbox);
1187 SetWindowPos(aboutbox, HWND_TOP, 0, 0, 0, 0,
1188 SWP_NOMOVE | SWP_NOSIZE | SWP_SHOWWINDOW);
1198 COPYDATASTRUCT *cds;
1204 PSID mapowner, procowner;
1205 PSECURITY_DESCRIPTOR psd1 = NULL, psd2 = NULL;
1209 cds = (COPYDATASTRUCT *) lParam;
1210 if (cds->dwData != AGENT_COPYDATA_ID)
1211 return 0; /* not our message, mate */
1212 mapname = (char *) cds->lpData;
1213 if (mapname[cds->cbData - 1] != '\0')
1214 return 0; /* failure to be ASCIZ! */
1216 debug(("mapname is :%s:\n", mapname));
1218 filemap = OpenFileMapping(FILE_MAP_ALL_ACCESS, FALSE, mapname);
1220 debug(("filemap is %p\n", filemap));
1222 if (filemap != NULL && filemap != INVALID_HANDLE_VALUE) {
1226 if ((proc = OpenProcess(MAXIMUM_ALLOWED, FALSE,
1227 GetCurrentProcessId())) ==
1230 debug(("couldn't get handle for process\n"));
1234 if (getsecurityinfo(proc, SE_KERNEL_OBJECT,
1235 OWNER_SECURITY_INFORMATION,
1236 &procowner, NULL, NULL, NULL,
1237 &psd2) != ERROR_SUCCESS) {
1239 debug(("couldn't get owner info for process\n"));
1242 return 0; /* unable to get security info */
1245 if ((rc = getsecurityinfo(filemap, SE_KERNEL_OBJECT,
1246 OWNER_SECURITY_INFORMATION,
1247 &mapowner, NULL, NULL, NULL,
1248 &psd1) != ERROR_SUCCESS)) {
1251 ("couldn't get owner info for filemap: %d\n",
1257 debug(("got security stuff\n"));
1259 if (!EqualSid(mapowner, procowner))
1260 return 0; /* security ID mismatch! */
1262 debug(("security stuff matched\n"));
1268 debug(("security APIs not present\n"));
1272 p = MapViewOfFile(filemap, FILE_MAP_WRITE, 0, 0, 0);
1274 debug(("p is %p\n", p));
1277 for (i = 0; i < 5; i++)
1280 ((unsigned char *) p)[i]));}
1286 CloseHandle(filemap);
1291 return DefWindowProc(hwnd, message, wParam, lParam);
1295 * Fork and Exec the command in cmdline. [DBW]
1297 void spawn_cmd(char *cmdline, int show)
1299 if (ShellExecute(NULL, _T("open"), cmdline,
1300 NULL, NULL, show) <= (HINSTANCE) 32) {
1302 sprintf(sMsg, _T("Failed to run \"%.100s\", Error: %d"), cmdline,
1303 (int)GetLastError());
1304 MessageBox(NULL, sMsg, APPNAME, MB_OK | MB_ICONEXCLAMATION);
1308 int WINAPI WinMain(HINSTANCE inst, HINSTANCE prev, LPSTR cmdline, int show)
1314 char *command = NULL;
1318 * Determine whether we're an NT system (should have security
1319 * APIs) or a non-NT system (don't do security).
1321 memset(&osi, 0, sizeof(OSVERSIONINFO));
1322 osi.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);
1323 if (GetVersionEx(&osi) && osi.dwPlatformId == VER_PLATFORM_WIN32_NT) {
1324 has_security = TRUE;
1326 has_security = FALSE;
1331 * Attempt to get the security API we need.
1333 advapi = LoadLibrary("ADVAPI32.DLL");
1335 (gsi_fn_t) GetProcAddress(advapi, "GetSecurityInfo");
1336 if (!getsecurityinfo) {
1338 "Unable to access security APIs. Pageant will\n"
1339 "not run, in case it causes a security breach.",
1340 "Pageant Fatal Error", MB_ICONERROR | MB_OK);
1345 "This program has been compiled for Win9X and will\n"
1346 "not run on NT, in case it causes a security breach.",
1347 "Pageant Fatal Error", MB_ICONERROR | MB_OK);
1356 * Find out if Pageant is already running.
1358 already_running = FALSE;
1360 already_running = TRUE;
1365 wndclass.lpfnWndProc = WndProc;
1366 wndclass.cbClsExtra = 0;
1367 wndclass.cbWndExtra = 0;
1368 wndclass.hInstance = inst;
1369 wndclass.hIcon = LoadIcon(inst, MAKEINTRESOURCE(IDI_MAINICON));
1370 wndclass.hCursor = LoadCursor(NULL, IDC_IBEAM);
1371 wndclass.hbrBackground = GetStockObject(BLACK_BRUSH);
1372 wndclass.lpszMenuName = NULL;
1373 wndclass.lpszClassName = APPNAME;
1375 RegisterClass(&wndclass);
1378 hwnd = keylist = NULL;
1380 hwnd = CreateWindow(APPNAME, APPNAME,
1381 WS_OVERLAPPEDWINDOW | WS_VSCROLL,
1382 CW_USEDEFAULT, CW_USEDEFAULT,
1383 100, 100, NULL, NULL, inst, NULL);
1385 /* Set up a system tray icon */
1388 systray_menu = CreatePopupMenu();
1389 /* accelerators used: vkxa */
1390 AppendMenu(systray_menu, MF_ENABLED, IDM_VIEWKEYS,
1392 AppendMenu(systray_menu, MF_ENABLED, IDM_ADDKEY, "Add &Key");
1393 AppendMenu(systray_menu, MF_ENABLED, IDM_ABOUT, "&About");
1394 AppendMenu(systray_menu, MF_ENABLED, IDM_CLOSE, "E&xit");
1396 ShowWindow(hwnd, SW_HIDE);
1399 * Initialise storage for RSA keys.
1401 rsakeys = newtree234(cmpkeys_rsa);
1402 ssh2keys = newtree234(cmpkeys_ssh2);
1407 * Process the command line and add keys as listed on it.
1408 * If we already determined that we need to spawn a program from above we
1409 * need to ignore the first two arguments. [DBW]
1416 while (*p && isspace(*p))
1418 if (*p && !isspace(*p)) {
1419 char *q = p, *pp = p;
1420 while (*p && (inquotes || !isspace(*p))) {
1422 inquotes = !inquotes;
1433 if (!strcmp(q, "-c")) {
1435 * If we see `-c', then the rest of the
1436 * command line should be treated as a
1437 * command to be spawned.
1439 while (*p && isspace(*p))
1452 spawn_cmd(command, show);
1455 * If Pageant was already running, we leave now. If we haven't
1456 * even taken any auxiliary action (spawned a command or added
1459 if (already_running) {
1460 if (!command && !added_keys) {
1461 MessageBox(NULL, "Pageant is already running", "Pageant Error",
1462 MB_ICONERROR | MB_OK);
1465 FreeLibrary(advapi);
1470 * Main message loop.
1472 while (GetMessage(&msg, NULL, 0, 0) == 1) {
1473 TranslateMessage(&msg);
1474 DispatchMessage(&msg);
1477 /* Clean up the system tray icon */
1479 NOTIFYICONDATA tnid;
1481 tnid.cbSize = sizeof(NOTIFYICONDATA);
1485 Shell_NotifyIcon(NIM_DELETE, &tnid);
1487 DestroyMenu(systray_menu);
1491 FreeLibrary(advapi);