mirror of https://github.com/OpenVPN/openvpn-gui
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1230 lines
29 KiB
1230 lines
29 KiB
/* |
|
* OpenVPN-GUI -- A Windows GUI for OpenVPN. |
|
* |
|
* Copyright (C) 2013 Heiko Hund <heikoh@users.sf.net> |
|
* |
|
* This program is free software; you can redistribute it and/or modify |
|
* it under the terms of the GNU General Public License as published by |
|
* the Free Software Foundation; either version 2 of the License, or |
|
* (at your option) any later version. |
|
* |
|
* This program is distributed in the hope that it will be useful, |
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
* GNU General Public License for more details. |
|
* |
|
* You should have received a copy of the GNU General Public License |
|
* along with this program (see the file COPYING included with this |
|
* distribution); if not, write to the Free Software Foundation, Inc., |
|
* 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
|
*/ |
|
|
|
#ifdef HAVE_CONFIG_H |
|
#include <config.h> |
|
#endif |
|
|
|
#include <windows.h> |
|
#include <wincrypt.h> |
|
#include <tchar.h> |
|
#include <string.h> |
|
#include <stdlib.h> |
|
#include <malloc.h> |
|
#include <shellapi.h> |
|
#include <ws2tcpip.h> |
|
#include <shlwapi.h> |
|
|
|
#include "localization.h" |
|
#include "options.h" |
|
#include "manage.h" |
|
#include "main.h" |
|
#include "misc.h" |
|
#include "main.h" |
|
#include "openvpn_config.h" |
|
#include "openvpn-gui-res.h" |
|
#include "tray.h" |
|
#include "config_parser.h" |
|
|
|
/* |
|
* Helper function to do base64 conversion through CryptoAPI |
|
* Returns TRUE on success, FALSE on error. Caller must free *output. |
|
*/ |
|
BOOL |
|
Base64Encode(const char *input, int input_len, char **output) |
|
{ |
|
DWORD output_len; |
|
DWORD flags = CRYPT_STRING_BASE64|CRYPT_STRING_NOCRLF; |
|
|
|
if (input_len == 0) |
|
{ |
|
/* set output to empty string -- matches the behavior in openvpn */ |
|
*output = calloc(1, sizeof(char)); |
|
return TRUE; |
|
} |
|
if (!CryptBinaryToStringA((const BYTE *) input, (DWORD) input_len, |
|
flags, NULL, &output_len) || output_len == 0) |
|
{ |
|
#ifdef DEBUG |
|
PrintDebug(L"Error in CryptBinaryToStringA: input = '%.*hs'", input_len, input); |
|
#endif |
|
*output = NULL; |
|
return FALSE; |
|
} |
|
*output = (char *)malloc(output_len); |
|
if (*output == NULL) |
|
{ |
|
return FALSE; |
|
} |
|
|
|
if (!CryptBinaryToStringA((const BYTE *) input, (DWORD) input_len, |
|
flags, *output, &output_len)) |
|
{ |
|
#ifdef DEBUG |
|
PrintDebug(L"Error in CryptBinaryToStringA: input = '%.*hs'", input_len, input); |
|
#endif |
|
free(*output); |
|
*output = NULL; |
|
return FALSE; |
|
} |
|
|
|
return TRUE; |
|
} |
|
/* |
|
* Decode a nul-terminated base64 encoded input and save the result in |
|
* an allocated buffer *output. The caller must free *output after use. |
|
* The decoded output is nul-terminated so that the caller may treat |
|
* it as a string when appropriate. |
|
* |
|
* Return the length of the decoded result (excluding nul) or -1 on |
|
* error. |
|
*/ |
|
int |
|
Base64Decode(const char *input, char **output) |
|
{ |
|
DWORD len; |
|
|
|
PrintDebug(L"decoding %hs", input); |
|
if (!CryptStringToBinaryA(input, 0, CRYPT_STRING_BASE64_ANY, |
|
NULL, &len, NULL, NULL) || len == 0) |
|
{ |
|
*output = NULL; |
|
return -1; |
|
} |
|
|
|
*output = malloc(len + 1); |
|
if (*output == NULL) |
|
{ |
|
return -1; |
|
} |
|
|
|
if (!CryptStringToBinaryA(input, 0, |
|
CRYPT_STRING_BASE64, (BYTE *) *output, &len, NULL, NULL)) |
|
{ |
|
free(*output); |
|
*output = NULL; |
|
return -1; |
|
} |
|
|
|
/* NUL terminate output */ |
|
(*output)[len] = '\0'; |
|
PrintDebug(L"Decoded output %hs", *output); |
|
|
|
return len; |
|
} |
|
|
|
BOOL |
|
GetDlgItemTextUtf8(HWND hDlg, int id, LPSTR *str, int *len) |
|
{ |
|
int ucs2_len, utf8_len; |
|
BOOL retval = FALSE; |
|
LPTSTR ucs2_str = NULL; |
|
LPSTR utf8_str = NULL; |
|
|
|
*str = ""; |
|
*len = 0; |
|
|
|
ucs2_len = GetWindowTextLength(GetDlgItem(hDlg, id)) + 1; |
|
if (ucs2_len == 1) |
|
{ |
|
goto out; |
|
} |
|
|
|
ucs2_str = malloc(ucs2_len * sizeof(*ucs2_str)); |
|
if (ucs2_str == NULL) |
|
{ |
|
goto out; |
|
} |
|
|
|
if (GetDlgItemText(hDlg, id, ucs2_str, ucs2_len) == 0) |
|
{ |
|
goto out; |
|
} |
|
|
|
utf8_len = WideCharToMultiByte(CP_UTF8, 0, ucs2_str, -1, NULL, 0, NULL, NULL); |
|
utf8_str = malloc(utf8_len); |
|
if (utf8_str == NULL) |
|
{ |
|
goto out; |
|
} |
|
|
|
WideCharToMultiByte(CP_UTF8, 0, ucs2_str, -1, utf8_str, utf8_len, NULL, NULL); |
|
|
|
*str = utf8_str; |
|
*len = utf8_len - 1; |
|
retval = TRUE; |
|
out: |
|
free(ucs2_str); |
|
return retval; |
|
} |
|
|
|
/** |
|
* Escape backslash, space and double-quote in a string |
|
* @param input Pointer to the string to escape |
|
* @returns A newly allocated string containing the result or NULL |
|
* on error. Caller must free it after use. |
|
*/ |
|
char * |
|
escape_string(const char *input) |
|
{ |
|
char *out = strdup(input); |
|
const char *esc = "\"\\ "; |
|
|
|
if (!out) |
|
{ |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"Error in escape_string: out of memory"); |
|
return NULL; |
|
} |
|
|
|
int len = strlen(out); |
|
|
|
for (int pos = 0; pos < len; ++pos) |
|
{ |
|
if (strchr(esc, out[pos])) |
|
{ |
|
char *buf = realloc(out, ++len + 1); |
|
if (buf == NULL) |
|
{ |
|
free(out); |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"Error in escape_string: out of memory"); |
|
return NULL; |
|
} |
|
out = buf; |
|
memmove(out + pos + 1, out + pos, len - pos); |
|
out[pos] = '\\'; |
|
pos += 1; |
|
} |
|
} |
|
|
|
PrintDebug(L"escape_string: in: '%hs' out: '%hs' len = %d", input, out, len); |
|
return out; |
|
} |
|
|
|
/* |
|
* Generate a management command from user input and send it |
|
*/ |
|
BOOL |
|
ManagementCommandFromInput(connection_t *c, LPCSTR fmt, HWND hDlg, int id) |
|
{ |
|
BOOL retval = FALSE; |
|
LPSTR input, cmd; |
|
int input_len, cmd_len; |
|
|
|
GetDlgItemTextUtf8(hDlg, id, &input, &input_len); |
|
|
|
/* Escape input if needed */ |
|
char *input_e = escape_string(input); |
|
if (!input_e) |
|
{ |
|
goto out; |
|
} |
|
free(input); |
|
input = input_e; |
|
input_len = strlen(input); |
|
|
|
cmd_len = input_len + strlen(fmt); |
|
cmd = malloc(cmd_len); |
|
if (cmd) |
|
{ |
|
snprintf(cmd, cmd_len, fmt, input); |
|
retval = ManagementCommand(c, cmd, NULL, regular); |
|
free(cmd); |
|
} |
|
|
|
out: |
|
/* Clear buffers with potentially secret content */ |
|
if (input_len) |
|
{ |
|
memset(input, 'x', input_len); |
|
SetDlgItemTextA(hDlg, id, input); |
|
free(input); |
|
} |
|
|
|
return retval; |
|
} |
|
|
|
|
|
|
|
/* |
|
* Generate a management command from double user inputs and send it |
|
*/ |
|
BOOL |
|
ManagementCommandFromTwoInputsBase64(connection_t *c, LPCSTR fmt, HWND hDlg, int id, int id2) |
|
{ |
|
BOOL retval = FALSE; |
|
LPSTR input, input2, input_b64, input2_b64, cmd; |
|
int input_len, input2_len, cmd_len; |
|
|
|
input_b64 = NULL; |
|
input2_b64 = NULL; |
|
|
|
GetDlgItemTextUtf8(hDlg, id, &input, &input_len); |
|
GetDlgItemTextUtf8(hDlg, id2, &input2, &input2_len); |
|
|
|
if (!Base64Encode(input, input_len, &input_b64)) |
|
{ |
|
goto out; |
|
} |
|
if (!Base64Encode(input2, input2_len, &input2_b64)) |
|
{ |
|
goto out; |
|
} |
|
|
|
cmd_len = strlen(input_b64) + strlen(input2_b64) + strlen(fmt); |
|
cmd = malloc(cmd_len); |
|
if (cmd) |
|
{ |
|
snprintf(cmd, cmd_len, fmt, input_b64, input2_b64); |
|
retval = ManagementCommand(c, cmd, NULL, regular); |
|
free(cmd); |
|
} |
|
|
|
out: |
|
/* Clear buffers with potentially secret content */ |
|
if (input_b64) |
|
{ |
|
memset(input_b64, 0, strlen(input_b64)); |
|
} |
|
if (input2_b64) |
|
{ |
|
memset(input2_b64, 0, strlen(input2_b64)); |
|
} |
|
free(input_b64); |
|
free(input2_b64); |
|
|
|
if (input_len) |
|
{ |
|
memset(input, 'x', input_len); |
|
SetDlgItemTextA(hDlg, id, input); |
|
free(input); |
|
} |
|
if (input2_len) |
|
{ |
|
memset(input2, 'x', input2_len); |
|
SetDlgItemTextA(hDlg, id2, input2); |
|
free(input2); |
|
} |
|
|
|
return retval; |
|
} |
|
|
|
/* |
|
* Generate a management command from base64-encoded user inputs and send it |
|
*/ |
|
BOOL |
|
ManagementCommandFromInputBase64(connection_t *c, LPCSTR fmt, HWND hDlg, int id) |
|
{ |
|
BOOL retval = FALSE; |
|
LPSTR input, input_b64, cmd; |
|
int input_len, cmd_len; |
|
|
|
input_b64 = NULL; |
|
|
|
GetDlgItemTextUtf8(hDlg, id, &input, &input_len); |
|
|
|
if (!Base64Encode(input, input_len, &input_b64)) |
|
{ |
|
goto out; |
|
} |
|
|
|
cmd_len = strlen(input_b64) + strlen(fmt); |
|
cmd = malloc(cmd_len); |
|
if (cmd) |
|
{ |
|
snprintf(cmd, cmd_len, fmt, input_b64); |
|
retval = ManagementCommand(c, cmd, NULL, regular); |
|
free(cmd); |
|
} |
|
|
|
out: |
|
/* Clear buffers with potentially secret content */ |
|
if (input_b64) |
|
{ |
|
memset(input_b64, 0, strlen(input_b64)); |
|
} |
|
free(input_b64); |
|
|
|
if (input_len) |
|
{ |
|
memset(input, 'x', input_len); |
|
SetDlgItemTextA(hDlg, id, input); |
|
free(input); |
|
} |
|
|
|
return retval; |
|
} |
|
|
|
|
|
/* |
|
* Ensures the given directory exists, by checking for and |
|
* creating missing parts of the path. |
|
* If the path does not exist and cannot be created return FALSE. |
|
*/ |
|
BOOL |
|
EnsureDirExists(LPTSTR dir) |
|
{ |
|
DWORD attr = GetFileAttributes(dir); |
|
if (attr == INVALID_FILE_ATTRIBUTES) |
|
{ |
|
DWORD error = GetLastError(); |
|
if (error == ERROR_PATH_NOT_FOUND) |
|
{ |
|
LPTSTR pos = _tcsrchr(dir, '\\'); |
|
if (pos == NULL) |
|
{ |
|
return FALSE; |
|
} |
|
|
|
*pos = '\0'; |
|
BOOL ret = EnsureDirExists(dir); |
|
*pos = '\\'; |
|
if (ret == FALSE) |
|
{ |
|
return FALSE; |
|
} |
|
} |
|
else if (error != ERROR_FILE_NOT_FOUND) |
|
{ |
|
return FALSE; |
|
} |
|
|
|
/* No error if directory already exists */ |
|
return (CreateDirectory(dir, NULL) == TRUE |
|
|| GetLastError() == ERROR_ALREADY_EXISTS); |
|
} |
|
|
|
return (attr & FILE_ATTRIBUTE_DIRECTORY ? TRUE : FALSE); |
|
} |
|
|
|
|
|
/* |
|
* Various string helper functions |
|
*/ |
|
BOOL |
|
streq(LPCSTR str1, LPCSTR str2) |
|
{ |
|
return (strcmp(str1, str2) == 0); |
|
} |
|
|
|
BOOL |
|
strbegins(const char *str, const char *begin) |
|
{ |
|
return (strncmp(str, begin, strlen(begin)) == 0); |
|
} |
|
|
|
BOOL |
|
wcsbegins(LPCWSTR str, LPCWSTR begin) |
|
{ |
|
return (wcsncmp(str, begin, wcslen(begin)) == 0); |
|
} |
|
|
|
/* |
|
* Force setting window as foreground window by simulating an ALT keypress |
|
*/ |
|
BOOL |
|
ForceForegroundWindow(HWND hWnd) |
|
{ |
|
BOOL ret = FALSE; |
|
|
|
keybd_event(VK_MENU, 0, 0, 0); |
|
ret = SetForegroundWindow(hWnd); |
|
keybd_event(VK_MENU, 0, KEYEVENTF_KEYUP, 0); |
|
|
|
return ret; |
|
} |
|
|
|
/* |
|
* Set scale factor of windows in pixels. Scale = 100% for dpi = 96 |
|
*/ |
|
void |
|
DpiSetScale(options_t *options, UINT dpix) |
|
{ |
|
/* scale factor in percentage compared to the reference dpi of 96 */ |
|
if (dpix != 0) |
|
{ |
|
options->dpi_scale = MulDiv(dpix, 100, 96); |
|
} |
|
else |
|
{ |
|
options->dpi_scale = 100; |
|
} |
|
PrintDebug(L"DPI scale set to %u", options->dpi_scale); |
|
} |
|
|
|
/* |
|
* Check user has admin rights |
|
* Taken from https://msdn.microsoft.com/en-us/library/windows/desktop/aa376389(v=vs.85).aspx |
|
* Returns true if the calling process token has the local Administrators group enabled |
|
* in its SID. Assumes the caller is not impersonating and has access to open its own |
|
* process token. |
|
*/ |
|
BOOL |
|
IsUserAdmin(VOID) |
|
{ |
|
BOOL b; |
|
SID_IDENTIFIER_AUTHORITY NtAuthority = {SECURITY_NT_AUTHORITY}; |
|
PSID AdministratorsGroup; |
|
|
|
b = AllocateAndInitializeSid(&NtAuthority, 2, SECURITY_BUILTIN_DOMAIN_RID, |
|
DOMAIN_ALIAS_RID_ADMINS, 0, 0, 0, 0, 0, 0, |
|
&AdministratorsGroup); |
|
if (b) |
|
{ |
|
if (!CheckTokenMembership(NULL, AdministratorsGroup, &b)) |
|
{ |
|
b = FALSE; |
|
} |
|
FreeSid(AdministratorsGroup); |
|
} |
|
|
|
return(b); |
|
} |
|
|
|
HANDLE |
|
InitSemaphore(WCHAR *name) |
|
{ |
|
HANDLE semaphore = NULL; |
|
semaphore = CreateSemaphore(NULL, 1, 1, name); |
|
if (!semaphore) |
|
{ |
|
MessageBoxW(NULL, L"Error creating semaphore", TEXT(PACKAGE_NAME), MB_OK); |
|
#ifdef DEBUG |
|
PrintDebug(L"InitSemaphore: CreateSemaphore failed [error = %lu]", GetLastError()); |
|
#endif |
|
} |
|
return semaphore; |
|
} |
|
|
|
void |
|
CloseSemaphore(HANDLE sem) |
|
{ |
|
if (sem) |
|
{ |
|
ReleaseSemaphore(sem, 1, NULL); |
|
} |
|
CloseHandle(sem); |
|
} |
|
|
|
/* Check access rights on an existing file */ |
|
BOOL |
|
CheckFileAccess(const TCHAR *path, int access) |
|
{ |
|
HANDLE h; |
|
bool ret = FALSE; |
|
|
|
h = CreateFile(path, access, FILE_SHARE_READ, NULL, OPEN_EXISTING, |
|
FILE_ATTRIBUTE_NORMAL, NULL); |
|
if (h != INVALID_HANDLE_VALUE) |
|
{ |
|
ret = TRUE; |
|
CloseHandle(h); |
|
} |
|
|
|
return ret; |
|
} |
|
|
|
/** |
|
* Convert a NUL terminated narrow string to wide string using |
|
* specified codepage. The caller must free |
|
* the returned pointer. Return NULL on error. |
|
*/ |
|
WCHAR * |
|
WidenEx(UINT codepage, const char *str) |
|
{ |
|
WCHAR *wstr = NULL; |
|
if (!str) |
|
{ |
|
return wstr; |
|
} |
|
|
|
int nch = MultiByteToWideChar(codepage, 0, str, -1, NULL, 0); |
|
if (nch > 0) |
|
{ |
|
wstr = malloc(sizeof(WCHAR) * nch); |
|
} |
|
if (wstr) |
|
{ |
|
nch = MultiByteToWideChar(codepage, 0, str, -1, wstr, nch); |
|
} |
|
|
|
if (nch == 0 && wstr) |
|
{ |
|
free(wstr); |
|
wstr = NULL; |
|
} |
|
|
|
return wstr; |
|
} |
|
|
|
/* |
|
* Same as WidenEx with codepage = UTF8 |
|
*/ |
|
WCHAR * |
|
Widen(const char *utf8) |
|
{ |
|
return WidenEx(CP_UTF8, utf8); |
|
} |
|
|
|
/* Return false if input contains any characters in exclude */ |
|
BOOL |
|
validate_input(const WCHAR *input, const WCHAR *exclude) |
|
{ |
|
if (!exclude) |
|
{ |
|
exclude = L"\n"; |
|
} |
|
return (wcspbrk(input, exclude) == NULL); |
|
} |
|
|
|
/* Concatenate two wide strings with a separator -- if either string is empty separator not added */ |
|
void |
|
wcs_concat2(WCHAR *dest, int len, const WCHAR *src1, const WCHAR *src2, const WCHAR *sep) |
|
{ |
|
int n = 0; |
|
|
|
if (!dest || len == 0) |
|
{ |
|
return; |
|
} |
|
|
|
if (src1 && src2 && src1[0] && src2[0]) |
|
{ |
|
n = swprintf(dest, len, L"%ls%ls%ls", src1, sep, src2); |
|
} |
|
else if (src1 && src1[0]) |
|
{ |
|
n = swprintf(dest, len, L"%ls", src1); |
|
} |
|
else if (src2 && src2[0]) |
|
{ |
|
n = swprintf(dest, len, L"%ls", src2); |
|
} |
|
|
|
if (n < 0 || n >= len) /*swprintf failed */ |
|
{ |
|
n = 0; |
|
} |
|
dest[n] = L'\0'; |
|
} |
|
|
|
void |
|
CloseHandleEx(LPHANDLE handle) |
|
{ |
|
if (handle && *handle && *handle != INVALID_HANDLE_VALUE) |
|
{ |
|
CloseHandle(*handle); |
|
*handle = INVALID_HANDLE_VALUE; |
|
} |
|
} |
|
|
|
/* |
|
* Decode url encoded characters in buffer src and |
|
* return the result in a newly allocated buffer. The |
|
* caller should free the returned pointer. Returns |
|
* NULL on memory allocation error. |
|
*/ |
|
char * |
|
url_decode(const char *src) |
|
{ |
|
const char *s = src; |
|
char *out = malloc(strlen(src) + 1); /* output is guaranteed to be not longer than src */ |
|
char *o; |
|
|
|
if (!out) |
|
{ |
|
return NULL; |
|
} |
|
|
|
for (o = out; *s; o++) |
|
{ |
|
unsigned int c = *s++; |
|
if (c == '%' && isxdigit(s[0]) && isxdigit(s[1])) |
|
{ |
|
sscanf(s, "%2x", &c); |
|
s += 2; |
|
} |
|
/* We passthough all other chars including % not followed by 2 hex digits */ |
|
*o = (char)c; |
|
} |
|
*o = '\0'; |
|
|
|
return out; |
|
} |
|
|
|
DWORD |
|
md_init(md_ctx *ctx, ALG_ID hash_type) |
|
{ |
|
DWORD status = 0; |
|
|
|
if (!CryptAcquireContext(&ctx->prov, NULL, NULL, PROV_RSA_FULL, CRYPT_VERIFYCONTEXT)) |
|
{ |
|
goto err; |
|
} |
|
if (!CryptCreateHash(ctx->prov, hash_type, 0, 0, &ctx->hash)) |
|
{ |
|
CryptReleaseContext(ctx->prov, 0); |
|
goto err; |
|
} |
|
|
|
return status; |
|
|
|
err: |
|
status = GetLastError(); |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"Error in md_ctx_init: status = %lu", status); |
|
return status; |
|
} |
|
|
|
DWORD |
|
md_update(md_ctx *ctx, const BYTE *data, size_t size) |
|
{ |
|
DWORD status = 0; |
|
|
|
if (!CryptHashData(ctx->hash, data, (DWORD)size, 0)) |
|
{ |
|
status = GetLastError(); |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"Error in md_update: status = %lu", status); |
|
} |
|
return status; |
|
} |
|
|
|
DWORD |
|
md_final(md_ctx *ctx, BYTE *md) |
|
{ |
|
DWORD status = 0; |
|
|
|
DWORD digest_len = HASHLEN; |
|
if (!CryptGetHashParam(ctx->hash, HP_HASHVAL, md, &digest_len, 0)) |
|
{ |
|
status = GetLastError(); |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"Error in md_final: status = %lu", status); |
|
} |
|
CryptDestroyHash(ctx->hash); |
|
CryptReleaseContext(ctx->prov, 0); |
|
return status; |
|
} |
|
|
|
/* Open specified http/https URL using ShellExecute. */ |
|
BOOL |
|
open_url(const wchar_t *url) |
|
{ |
|
if (!url || !wcsbegins(url, L"http")) |
|
{ |
|
return false; |
|
} |
|
|
|
HINSTANCE ret = ShellExecuteW(NULL, L"open", url, NULL, NULL, SW_SHOWNORMAL); |
|
|
|
if (ret <= (HINSTANCE) 32) |
|
{ |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"launch_url: ShellExecute <%ls> returned error: %d", url, ret); |
|
return false; |
|
} |
|
return true; |
|
} |
|
|
|
extern options_t o; |
|
|
|
void |
|
ImportConfigFile(const TCHAR *source, bool prompt_user) |
|
{ |
|
TCHAR fileName[MAX_PATH] = _T(""); |
|
TCHAR ext[MAX_PATH] = _T(""); |
|
_wsplitpath(source, NULL, NULL, fileName, ext); |
|
|
|
/* check if the source points to the config_dir */ |
|
if (wcsnicmp(source, o.global_config_dir, wcslen(o.global_config_dir)) == 0 |
|
|| wcsnicmp(source, o.config_dir, wcslen(o.config_dir)) == 0) |
|
{ |
|
ShowLocalizedMsg(IDS_ERR_IMPORT_SOURCE, source); |
|
return; |
|
} |
|
/* Ensure the source exists and is readable */ |
|
if (!CheckFileAccess(source, GENERIC_READ)) |
|
{ |
|
ShowLocalizedMsg(IDS_ERR_IMPORT_ACCESS, source); |
|
return; |
|
} |
|
|
|
WCHAR destination[MAX_PATH+1]; |
|
bool no_overwrite = TRUE; |
|
|
|
/* profile name must be unique: check whether a config by same name exists */ |
|
connection_t *c = GetConnByName(fileName); |
|
if (c && wcsnicmp(c->config_dir, o.config_dir, wcslen(o.config_dir)) == 0) |
|
{ |
|
/* Ask the user whether to replace the profile or not. */ |
|
if (ShowLocalizedMsgEx(MB_YESNO|MB_TOPMOST, o.hWnd, _T(PACKAGE_NAME), IDS_NFO_IMPORT_OVERWRITE, fileName) == IDNO) |
|
{ |
|
return; |
|
} |
|
no_overwrite = FALSE; |
|
swprintf(destination, MAX_PATH, L"%ls\\%ls", c->config_dir, c->config_file); |
|
} |
|
else |
|
{ |
|
if (prompt_user |
|
&& ShowLocalizedMsgEx(MB_YESNO|MB_TOPMOST, o.hWnd, TEXT(PACKAGE_NAME), |
|
IDS_NFO_IMPORT_SOURCE, fileName) == IDNO) |
|
{ |
|
return; |
|
} |
|
WCHAR dest_dir[MAX_PATH+1]; |
|
swprintf(dest_dir, MAX_PATH, L"%ls\\%ls", o.config_dir, fileName); |
|
dest_dir[MAX_PATH] = L'\0'; |
|
if (!EnsureDirExists(dest_dir)) |
|
{ |
|
ShowLocalizedMsg(IDS_ERR_IMPORT_FAILED, dest_dir); |
|
return; |
|
} |
|
swprintf(destination, MAX_PATH, L"%ls\\%ls.%ls", dest_dir, fileName, o.ext_string); |
|
} |
|
destination[MAX_PATH] = L'\0'; |
|
|
|
if (!CopyFile(source, destination, no_overwrite)) |
|
{ |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"Copy file <%ls> to <%ls> failed (error = %lu)", |
|
source, destination, GetLastError()); |
|
ShowLocalizedMsg(IDS_ERR_IMPORT_FAILED, destination); |
|
return; |
|
} |
|
|
|
ShowTrayBalloon(LoadLocalizedString(IDS_NFO_IMPORT_SUCCESS), fileName); |
|
/* destroy popup menus, based on existing num_configs, rescan file list and recreate menus */ |
|
RecreatePopupMenus(); |
|
} |
|
|
|
/* |
|
* Find a free port to bind and return it in addr.sin_port |
|
*/ |
|
BOOL |
|
find_free_tcp_port(SOCKADDR_IN *addr) |
|
{ |
|
BOOL ret = false; |
|
SOCKADDR_IN addr_bound; |
|
WSADATA wsaData; |
|
int len = sizeof(*addr); |
|
|
|
if (WSAStartup(MAKEWORD(2, 2), &wsaData) != 0) |
|
{ |
|
return ret; |
|
} |
|
|
|
u_short old_port = addr->sin_port; |
|
|
|
SOCKET sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); |
|
if (sk == INVALID_SOCKET) |
|
{ |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"%hs: socket open failed", __func__); |
|
goto out; |
|
} |
|
while (bind(sk, (SOCKADDR *) addr, len)) |
|
{ |
|
if (addr->sin_port == 0) |
|
{ |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"%hs: bind to dynamic port failed", __func__); |
|
goto out; |
|
} |
|
addr->sin_port = 0; |
|
} |
|
if (getsockname(sk, (SOCKADDR *) &addr_bound, &len)) |
|
{ |
|
MsgToEventLog(EVENTLOG_ERROR_TYPE, L"%hs: getsockname failed", __func__); |
|
goto out; |
|
} |
|
|
|
ret = true; |
|
|
|
out: |
|
if (sk != INVALID_SOCKET) |
|
{ |
|
closesocket(sk); |
|
} |
|
addr->sin_port = ret ? addr_bound.sin_port : old_port; |
|
WSACleanup(); |
|
return ret; |
|
} |
|
|
|
/* Parse the management address and password |
|
* from a config file. Results are returned |
|
* in c->manage.skaddr and c->magage.password. |
|
* Returns false on parse error, or if address |
|
* not found. Password not found is not an error. |
|
*/ |
|
BOOL |
|
ParseManagementAddress(connection_t *c) |
|
{ |
|
BOOL ret = true; |
|
wchar_t *pw_file = NULL; |
|
wchar_t *workdir = c->config_dir; |
|
wchar_t config_path[MAX_PATH]; |
|
wchar_t pw_path[MAX_PATH] = L""; |
|
|
|
_sntprintf_0(config_path, L"%ls\\%ls", c->config_dir, c->config_file); |
|
|
|
config_entry_t *head = config_parse(config_path); |
|
config_entry_t *l = head; |
|
|
|
if (!head) |
|
{ |
|
return false; |
|
} |
|
|
|
SOCKADDR_IN *addr = &c->manage.skaddr; |
|
addr->sin_port = 0; |
|
|
|
while (l) |
|
{ |
|
if (l->ntokens >= 3 && !wcscmp(l->tokens[0], L"management")) |
|
{ |
|
/* we require the address to be a numerical ipv4 address -- e.g., 127.0.0.1*/ |
|
if (InetPtonW(AF_INET, l->tokens[1], &addr->sin_addr) != 1) |
|
{ |
|
config_list_free(head); |
|
return false; |
|
} |
|
|
|
addr->sin_port = htons(_wtoi(l->tokens[2])); |
|
pw_file = l->tokens[3]; /* may be null */ |
|
} |
|
else if (l->ntokens >= 2 && !wcscmp(l->tokens[0], L"cd")) |
|
{ |
|
workdir = l->tokens[1]; |
|
} |
|
l = l->next; |
|
} |
|
|
|
ret = (addr->sin_port != 0); |
|
|
|
if (ret && pw_file) |
|
{ |
|
if (PathIsRelativeW(pw_file)) |
|
{ |
|
_sntprintf_0(pw_path, L"%ls\\%ls", workdir, pw_file); |
|
} |
|
else |
|
{ |
|
wcsncpy_s(pw_path, MAX_PATH, pw_file, _TRUNCATE); |
|
} |
|
|
|
FILE *fp = _wfopen(pw_path, L"r"); |
|
if (!fp |
|
|| !fgets(c->manage.password, sizeof(c->manage.password), fp)) |
|
{ |
|
/* This may be normal as not all users may be given access to this secret */ |
|
ret = false; |
|
} |
|
|
|
StrTrimA(c->manage.password, "\n\r"); |
|
|
|
if (fp) |
|
{ |
|
fclose(fp); |
|
} |
|
} |
|
config_list_free(head); |
|
|
|
PrintDebug(L"ParseManagementAddress: host = %hs port = %d passwd_file = %s", |
|
inet_ntoa(addr->sin_addr), ntohs(addr->sin_port), pw_path); |
|
|
|
return ret; |
|
} |
|
|
|
/* Write a message to the event log */ |
|
void |
|
MsgToEventLog(WORD type, wchar_t *format, ...) |
|
{ |
|
const wchar_t *msg[2]; |
|
wchar_t buf[256]; |
|
int size = _countof(buf); |
|
|
|
if (!o.event_log) |
|
{ |
|
o.event_log = RegisterEventSource(NULL, TEXT(PACKAGE_NAME)); |
|
if (!o.event_log) |
|
{ |
|
return; |
|
} |
|
} |
|
|
|
va_list args; |
|
va_start(args, format); |
|
int nchar = vswprintf(buf, size-1, format, args); |
|
va_end(args); |
|
|
|
if (nchar == -1) |
|
{ |
|
return; |
|
} |
|
|
|
buf[size - 1] = '\0'; |
|
|
|
msg[0] = TEXT(PACKAGE_NAME); |
|
msg[1] = buf; |
|
ReportEventW(o.event_log, type, 0, 0, NULL, 2, 0, msg, NULL); |
|
} |
|
|
|
/* |
|
* Get dpi of the system and set the scale factor. |
|
* The system dpi may be different from the per monitor dpi on |
|
* Win 8.1 later. We set dpi awareness to system-dpi level in the |
|
* manifest, and let Windows automatically re-scale windows |
|
* if/when dpi changes dynamically. |
|
*/ |
|
void |
|
dpi_initialize(options_t *options) |
|
{ |
|
UINT dpix = 0; |
|
HDC hdc = GetDC(NULL); |
|
|
|
if (hdc) |
|
{ |
|
dpix = GetDeviceCaps(hdc, LOGPIXELSX); |
|
ReleaseDC(NULL, hdc); |
|
PrintDebug(L"System DPI: dpix = %u", dpix); |
|
} |
|
else |
|
{ |
|
PrintDebug(L"GetDC failed, using default dpi = 96 (error = %lu)", GetLastError()); |
|
dpix = 96; |
|
} |
|
|
|
DpiSetScale(options, dpix); |
|
} |
|
|
|
#define PLAP_CLASSID "{4fbb8b67-cf02-4982-a7a8-3dd06a2c2ebd}" |
|
int |
|
GetPLAPRegistrationStatus(void) |
|
{ |
|
int res = 0; |
|
HKEY regkey; |
|
wchar_t dllPath[MAX_PATH]; |
|
|
|
_sntprintf_0(dllPath, L"%ls%ls", o.install_path, L"bin\\libopenvpn_plap.dll"); |
|
if (!CheckFileAccess(dllPath, GENERIC_READ)) |
|
{ |
|
res = -1; |
|
} |
|
else if (RegOpenKeyExW(HKEY_CLASSES_ROOT, L"CLSID\\"PLAP_CLASSID, 0, KEY_READ, ®key) |
|
== ERROR_SUCCESS) |
|
{ |
|
res = 1; |
|
RegCloseKey(regkey); |
|
} |
|
|
|
return res; |
|
} |
|
|
|
DWORD |
|
SetPLAPRegistration(BOOL value) |
|
{ |
|
DWORD res = -1; |
|
const wchar_t *cmd = L"C:\\windows\\system32\\reg.exe"; |
|
wchar_t params[MAX_PATH]; |
|
|
|
/* Run only if the state has changed */ |
|
int plap_status = GetPLAPRegistrationStatus(); |
|
if (plap_status > 0 && (BOOL) plap_status == value) |
|
{ |
|
return 0; |
|
} |
|
|
|
if (value) |
|
{ |
|
_sntprintf_0( params, L"import \"%ls%ls\"", o.install_path, L"bin\\openvpn-plap-install.reg"); |
|
} |
|
else |
|
{ |
|
_sntprintf_0( params, L"import \"%ls%ls\"", o.install_path, L"bin\\openvpn-plap-uninstall.reg"); |
|
} |
|
|
|
res = RunAsAdmin(cmd, params); |
|
if (res != 0) |
|
{ |
|
ShowLocalizedMsg(value ? IDS_ERR_PLAP_REG : IDS_ERR_PLAP_UNREG, res); |
|
} |
|
return res; |
|
} |
|
|
|
/* |
|
* Run a command as admin using shell execute and return the exit code. |
|
* Returns 0 on success or a non-zero exit code status of the command. |
|
* If the command fails to execute, the return value is (DWORD) -1. |
|
*/ |
|
DWORD |
|
RunAsAdmin(const WCHAR *cmd, const WCHAR *params) |
|
{ |
|
SHELLEXECUTEINFO shinfo; |
|
DWORD status = -1; |
|
|
|
CLEAR(shinfo); |
|
shinfo.cbSize = sizeof(shinfo); |
|
shinfo.fMask = SEE_MASK_NOCLOSEPROCESS; |
|
shinfo.hwnd = NULL; |
|
shinfo.lpVerb = L"runas"; |
|
shinfo.lpFile = cmd; |
|
shinfo.lpDirectory = NULL; |
|
shinfo.nShow = SW_HIDE; |
|
shinfo.lpParameters = params; |
|
|
|
if (ShellExecuteEx(&shinfo) && shinfo.hProcess) |
|
{ |
|
WaitForSingleObject(shinfo.hProcess, INFINITE); |
|
GetExitCodeProcess(shinfo.hProcess, &status); |
|
CloseHandle(shinfo.hProcess); |
|
} |
|
return status; |
|
} |
|
|
|
/* Like sleep but service messages. If hdlg is not NULL |
|
* dialog messages for it are checked. Also services |
|
* MSG_FILTER hooks if caller wants further special processing. |
|
* Returns false on if WM_QUIT received else returns true (on timeout). |
|
*/ |
|
bool |
|
OVPNMsgWait(DWORD timeout, HWND hdlg) |
|
{ |
|
ULONGLONG now = GetTickCount64(); |
|
ULONGLONG end = now + timeout; |
|
|
|
while (end > now) |
|
{ |
|
if (MsgWaitForMultipleObjectsEx(0, NULL, end - now, QS_ALLINPUT, MWMO_INPUTAVAILABLE) == WAIT_OBJECT_0) |
|
{ |
|
MSG msg; |
|
while (PeekMessage(&msg, NULL, 0, 0, PM_REMOVE)) |
|
{ |
|
if (msg.message == WM_QUIT) |
|
{ |
|
PostQuitMessage((int) msg.wParam); |
|
return false; |
|
} |
|
else if (!CallMsgFilter(&msg, MSGF_OVPN_WAIT) |
|
&& (!hdlg || !IsDialogMessage(hdlg, &msg))) |
|
{ |
|
TranslateMessage(&msg); |
|
DispatchMessage(&msg); |
|
} |
|
} |
|
} |
|
now = GetTickCount64(); |
|
} |
|
return true; |
|
} |
|
|
|
/* |
|
* Create a random password from the printable ASCII range |
|
*/ |
|
bool |
|
GetRandomPassword(char *buf, size_t len) |
|
{ |
|
HCRYPTPROV cp; |
|
BOOL retval = FALSE; |
|
unsigned i; |
|
|
|
if (!CryptAcquireContext(&cp, NULL, NULL, PROV_DSS, CRYPT_VERIFYCONTEXT)) |
|
{ |
|
return FALSE; |
|
} |
|
|
|
if (!CryptGenRandom(cp, len, (PBYTE) buf)) |
|
{ |
|
goto out; |
|
} |
|
|
|
/* Make sure all values are between 0x21 '!' and 0x7e '~' */ |
|
for (i = 0; i < len; ++i) |
|
{ |
|
buf[i] = (buf[i] & 0x5d) + 0x21; |
|
} |
|
|
|
retval = TRUE; |
|
out: |
|
CryptReleaseContext(cp, 0); |
|
return retval; |
|
} |
|
|
|
/* Setup Password reveal |
|
* Inputs: edit handle to password edit control |
|
* btn handle to the control that toggles the reveal |
|
* wParam action being handled, or 0 for init |
|
*/ |
|
void |
|
ResetPasswordReveal(HWND edit, HWND btn, WPARAM wParam) |
|
{ |
|
if (!edit || !btn) |
|
{ |
|
return; |
|
} |
|
|
|
if (o.disable_password_reveal) |
|
{ |
|
ShowWindow(btn, SW_HIDE); |
|
return; |
|
} |
|
|
|
/* set the password field to be masked as a sane default */ |
|
SendMessage(edit, EM_SETPASSWORDCHAR, (WPARAM)'*', 0); |
|
SendMessage(btn, STM_SETIMAGE, (WPARAM) IMAGE_ICON, (LPARAM)LoadLocalizedSmallIcon(ID_ICO_EYE)); |
|
|
|
/* if password is not masked on init, disable reveal "button" */ |
|
if (wParam == 0 && SendMessage(edit, EM_GETPASSWORDCHAR, 0, 0) == 0) |
|
{ |
|
ShowWindow(btn, SW_HIDE); |
|
} |
|
/* on losing focus disable password reveal button */ |
|
else if (HIWORD(wParam) == EN_KILLFOCUS) |
|
{ |
|
ShowWindow(btn, SW_HIDE); |
|
} |
|
/* if/when password is cleared enable/re-enable reveal button */ |
|
else if (GetWindowTextLength(edit) == 0) |
|
{ |
|
ShowWindow(btn, SW_SHOW); |
|
} |
|
} |
|
|
|
/* Toggle masking of text in password field |
|
* Inputs: edit handle to password edit control |
|
* btn handle to the control that toggles the reveal |
|
* wParam action being handled |
|
*/ |
|
void |
|
ChangePasswordVisibility(HWND edit, HWND btn, WPARAM wParam) |
|
{ |
|
if (!edit || !btn) |
|
{ |
|
return; |
|
} |
|
if (HIWORD(wParam) == STN_CLICKED) |
|
{ |
|
if (SendMessage(edit, EM_GETPASSWORDCHAR, 0, 0) == 0) /* currently visible */ |
|
{ |
|
SendMessage(edit, EM_SETPASSWORDCHAR, (WPARAM)'*', 0); |
|
SendMessage(btn, STM_SETIMAGE, (WPARAM) IMAGE_ICON, (LPARAM)LoadLocalizedSmallIcon(ID_ICO_EYE)); |
|
} |
|
else |
|
{ |
|
SendMessage(edit, EM_SETPASSWORDCHAR, 0, 0); |
|
SendMessage(btn, STM_SETIMAGE, (WPARAM) IMAGE_ICON, (LPARAM)LoadLocalizedSmallIcon(ID_ICO_EYESTROKE)); |
|
} |
|
InvalidateRect(edit, NULL, TRUE); /* without this the control doesn't seem to get redrawn promptly */ |
|
} |
|
}
|
|
|