[gssapi-openssh.git] / openssh / contrib / gnome-ssh-askpass2.c

/*
 * Copyright (c) 2000-2002 Damien Miller.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

/* GTK2 support by Nalin Dahyabhai <nalin@redhat.com> */

/*
 * This is a simple GNOME SSH passphrase grabber. To use it, set the
 * environment variable SSH_ASKPASS to point to the location of
 * gnome-ssh-askpass before calling "ssh-add < /dev/null".
 *
 * There is only two run-time options: if you set the environment variable
 * "GNOME_SSH_ASKPASS_GRAB_SERVER=true" then gnome-ssh-askpass will grab
 * the X server. If you set "GNOME_SSH_ASKPASS_GRAB_POINTER=true", then the
 * pointer will be grabbed too. These may have some benefit to security if
 * you don't trust your X server. We grab the keyboard always.
 */

#define GRAB_TRIES	16
#define GRAB_WAIT	250 /* milliseconds */

/*
 * Compile with:
 *
 * cc -Wall `pkg-config --cflags gtk+-2.0` \
 *    gnome-ssh-askpass2.c -o gnome-ssh-askpass \
 *    `pkg-config --libs gtk+-2.0`
 *
 */

#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <unistd.h>
#include <X11/Xlib.h>
#include <gtk/gtk.h>
#include <gdk/gdkx.h>

static void
report_failed_grab (const char *what)
{
	GtkWidget *err;

	err = gtk_message_dialog_new(NULL, 0,
				     GTK_MESSAGE_ERROR,
				     GTK_BUTTONS_CLOSE,
				     "Could not grab %s. "
				     "A malicious client may be eavesdropping "
				     "on your session.", what);
	gtk_window_set_position(GTK_WINDOW(err), GTK_WIN_POS_CENTER);
	gtk_label_set_line_wrap(GTK_LABEL((GTK_MESSAGE_DIALOG(err))->label),
				TRUE);

	gtk_dialog_run(GTK_DIALOG(err));

	gtk_widget_destroy(err);
}

static void
ok_dialog(GtkWidget *entry, gpointer dialog)
{
	g_return_if_fail(GTK_IS_DIALOG(dialog));
	gtk_dialog_response(GTK_DIALOG(dialog), GTK_RESPONSE_OK);
}

static int
passphrase_dialog(char *message)
{
	const char *failed;
	char *passphrase, *local;
	int result, grab_tries, grab_server, grab_pointer;
	GtkWidget *dialog, *entry;
	GdkGrabStatus status;

	grab_server = (getenv("GNOME_SSH_ASKPASS_GRAB_SERVER") != NULL);
	grab_pointer = (getenv("GNOME_SSH_ASKPASS_GRAB_POINTER") != NULL);
	grab_tries = 0;

	dialog = gtk_message_dialog_new(NULL, 0,
					GTK_MESSAGE_QUESTION,
					GTK_BUTTONS_OK_CANCEL,
					"%s",
					message);

	entry = gtk_entry_new();
	gtk_box_pack_start(GTK_BOX(GTK_DIALOG(dialog)->vbox), entry, FALSE,
	    FALSE, 0);
	gtk_entry_set_visibility(GTK_ENTRY(entry), FALSE);
	gtk_widget_grab_focus(entry);
	gtk_widget_show(entry);

	gtk_window_set_title(GTK_WINDOW(dialog), "OpenSSH");
	gtk_window_set_position (GTK_WINDOW(dialog), GTK_WIN_POS_CENTER);
	gtk_window_set_keep_above(GTK_WINDOW(dialog), TRUE);
	gtk_label_set_line_wrap(GTK_LABEL((GTK_MESSAGE_DIALOG(dialog))->label),
				TRUE);

	/* Make <enter> close dialog */
	gtk_dialog_set_default_response(GTK_DIALOG(dialog), GTK_RESPONSE_OK);
	g_signal_connect(G_OBJECT(entry), "activate",
			 G_CALLBACK(ok_dialog), dialog);

	/* Grab focus */
	gtk_widget_show_now(dialog);
	if (grab_pointer) {
		for(;;) {
			status = gdk_pointer_grab(
			   (GTK_WIDGET(dialog))->window, TRUE, 0, NULL,
			   NULL, GDK_CURRENT_TIME);
			if (status == GDK_GRAB_SUCCESS)
				break;
			usleep(GRAB_WAIT * 1000);
			if (++grab_tries > GRAB_TRIES) {
				failed = "mouse";
				goto nograb;
			}
		}
	}
	for(;;) {
		status = gdk_keyboard_grab((GTK_WIDGET(dialog))->window,
		   FALSE, GDK_CURRENT_TIME);
		if (status == GDK_GRAB_SUCCESS)
			break;
		usleep(GRAB_WAIT * 1000);
		if (++grab_tries > GRAB_TRIES) {
			failed = "keyboard";
			goto nograbkb;
		}
	}
	if (grab_server) {
		gdk_x11_grab_server();
	}

	result = gtk_dialog_run(GTK_DIALOG(dialog));

	/* Ungrab */
	if (grab_server)
		XUngrabServer(GDK_DISPLAY());
	if (grab_pointer)
		gdk_pointer_ungrab(GDK_CURRENT_TIME);
	gdk_keyboard_ungrab(GDK_CURRENT_TIME);
	gdk_flush();

	/* Report passphrase if user selected OK */
	passphrase = g_strdup(gtk_entry_get_text(GTK_ENTRY(entry)));
	if (result == GTK_RESPONSE_OK) {
		local = g_locale_from_utf8(passphrase, strlen(passphrase),
					   NULL, NULL, NULL);
		if (local != NULL) {
			puts(local);
			memset(local, '\0', strlen(local));
			g_free(local);
		} else {
			puts(passphrase);
		}
	}
		
	/* Zero passphrase in memory */
	memset(passphrase, '\b', strlen(passphrase));
	gtk_entry_set_text(GTK_ENTRY(entry), passphrase);
	memset(passphrase, '\0', strlen(passphrase));
	g_free(passphrase);
			
	gtk_widget_destroy(dialog);
	return (result == GTK_RESPONSE_OK ? 0 : -1);

	/* At least one grab failed - ungrab what we got, and report
	   the failure to the user.  Note that XGrabServer() cannot
	   fail.  */
 nograbkb:
	gdk_pointer_ungrab(GDK_CURRENT_TIME);
 nograb:
	if (grab_server)
		XUngrabServer(GDK_DISPLAY());
	gtk_widget_destroy(dialog);
	
	report_failed_grab(failed);

	return (-1);
}

int
main(int argc, char **argv)
{
	char *message;
	int result;

	gtk_init(&argc, &argv);

	if (argc > 1) {
		message = g_strjoinv(" ", argv + 1);
	} else {
		message = g_strdup("Enter your OpenSSH passphrase:");
	}

	setvbuf(stdout, 0, _IONBF, 0);
	result = passphrase_dialog(message);
	g_free(message);

	return (result);
}
Commit	Line	Data
41b2f314	1	/*
	2	* Copyright (c) 2000-2002 Damien Miller. All rights reserved.
	3	*
	4	* Redistribution and use in source and binary forms, with or without
	5	* modification, are permitted provided that the following conditions
	6	* are met:
	7	* 1. Redistributions of source code must retain the above copyright
	8	* notice, this list of conditions and the following disclaimer.
	9	* 2. Redistributions in binary form must reproduce the above copyright
	10	* notice, this list of conditions and the following disclaimer in the
	11	* documentation and/or other materials provided with the distribution.
	12	*
	13	* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
	14	* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
	15	* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
	16	* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
	17	* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	18	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	19	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
	20	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
	21	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
	22	* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	23	*/
	24
	25	/* GTK2 support by Nalin Dahyabhai <nalin@redhat.com> */
	26
	27	/*
cdd66111	28	* This is a simple GNOME SSH passphrase grabber. To use it, set the
	29	* environment variable SSH_ASKPASS to point to the location of
	30	* gnome-ssh-askpass before calling "ssh-add < /dev/null".
41b2f314	31	*
	32	* There is only two run-time options: if you set the environment variable
	33	* "GNOME_SSH_ASKPASS_GRAB_SERVER=true" then gnome-ssh-askpass will grab
cdd66111	34	* the X server. If you set "GNOME_SSH_ASKPASS_GRAB_POINTER=true", then the
cdd66111	35	* pointer will be grabbed too. These may have some benefit to security if
41b2f314	36	* you don't trust your X server. We grab the keyboard always.
	37	*/
	38
6a9b3198	39	#define GRAB_TRIES 16
	40	#define GRAB_WAIT 250 /* milliseconds */
	41
41b2f314	42	/*
	43	* Compile with:
	44	*
6a9b3198	45	* cc -Wall `pkg-config --cflags gtk+-2.0` \
41b2f314	46	* gnome-ssh-askpass2.c -o gnome-ssh-askpass \
	47	* `pkg-config --libs gtk+-2.0`
	48	*
	49	*/
	50
	51	#include <stdlib.h>
	52	#include <stdio.h>
	53	#include <string.h>
6a9b3198	54	#include <unistd.h>
41b2f314	55	#include <X11/Xlib.h>
	56	#include <gtk/gtk.h>
	57	#include <gdk/gdkx.h>
	58
	59	static void
	60	report_failed_grab (const char *what)
	61	{
	62	GtkWidget *err;
	63
	64	err = gtk_message_dialog_new(NULL, 0,
	65	GTK_MESSAGE_ERROR,
	66	GTK_BUTTONS_CLOSE,
	67	"Could not grab %s. "
	68	"A malicious client may be eavesdropping "
	69	"on your session.", what);
	70	gtk_window_set_position(GTK_WINDOW(err), GTK_WIN_POS_CENTER);
	71	gtk_label_set_line_wrap(GTK_LABEL((GTK_MESSAGE_DIALOG(err))->label),
	72	TRUE);
	73
	74	gtk_dialog_run(GTK_DIALOG(err));
	75
	76	gtk_widget_destroy(err);
	77	}
	78
	79	static void
	80	ok_dialog(GtkWidget *entry, gpointer dialog)
	81	{
	82	g_return_if_fail(GTK_IS_DIALOG(dialog));
	83	gtk_dialog_response(GTK_DIALOG(dialog), GTK_RESPONSE_OK);
	84	}
	85
	86	static int
	87	passphrase_dialog(char *message)
	88	{
	89	const char *failed;
	90	char passphrase, local;
6a9b3198	91	int result, grab_tries, grab_server, grab_pointer;
6a9b3198	92	GtkWidget dialog, entry;
41b2f314	93	GdkGrabStatus status;
	94
	95	grab_server = (getenv("GNOME_SSH_ASKPASS_GRAB_SERVER") != NULL);
	96	grab_pointer = (getenv("GNOME_SSH_ASKPASS_GRAB_POINTER") != NULL);
6a9b3198	97	grab_tries = 0;
41b2f314	98
	99	dialog = gtk_message_dialog_new(NULL, 0,
	100	GTK_MESSAGE_QUESTION,
	101	GTK_BUTTONS_OK_CANCEL,
	102	"%s",
	103	message);
	104
	105	entry = gtk_entry_new();
cdd66111	106	gtk_box_pack_start(GTK_BOX(GTK_DIALOG(dialog)->vbox), entry, FALSE,
41b2f314	107	FALSE, 0);
	108	gtk_entry_set_visibility(GTK_ENTRY(entry), FALSE);
	109	gtk_widget_grab_focus(entry);
	110	gtk_widget_show(entry);
	111
	112	gtk_window_set_title(GTK_WINDOW(dialog), "OpenSSH");
	113	gtk_window_set_position (GTK_WINDOW(dialog), GTK_WIN_POS_CENTER);
47686178	114	gtk_window_set_keep_above(GTK_WINDOW(dialog), TRUE);
41b2f314	115	gtk_label_set_line_wrap(GTK_LABEL((GTK_MESSAGE_DIALOG(dialog))->label),
	116	TRUE);
	117
	118	/* Make <enter> close dialog */
	119	gtk_dialog_set_default_response(GTK_DIALOG(dialog), GTK_RESPONSE_OK);
	120	g_signal_connect(G_OBJECT(entry), "activate",
	121	G_CALLBACK(ok_dialog), dialog);
	122
	123	/* Grab focus */
	124	gtk_widget_show_now(dialog);
41b2f314	125	if (grab_pointer) {
6a9b3198	126	for(;;) {
6a9b3198	127	status = gdk_pointer_grab(
cdd66111	128	(GTK_WIDGET(dialog))->window, TRUE, 0, NULL,
6a9b3198	129	NULL, GDK_CURRENT_TIME);
	130	if (status == GDK_GRAB_SUCCESS)
	131	break;
	132	usleep(GRAB_WAIT * 1000);
	133	if (++grab_tries > GRAB_TRIES) {
	134	failed = "mouse";
	135	goto nograb;
	136	}
41b2f314	137	}
41b2f314	138	}
6a9b3198	139	for(;;) {
	140	status = gdk_keyboard_grab((GTK_WIDGET(dialog))->window,
	141	FALSE, GDK_CURRENT_TIME);
	142	if (status == GDK_GRAB_SUCCESS)
	143	break;
	144	usleep(GRAB_WAIT * 1000);
	145	if (++grab_tries > GRAB_TRIES) {
	146	failed = "keyboard";
	147	goto nograbkb;
	148	}
41b2f314	149	}
6a9b3198	150	if (grab_server) {
	151	gdk_x11_grab_server();
	152	}
	153
41b2f314	154	result = gtk_dialog_run(GTK_DIALOG(dialog));
	155
	156	/* Ungrab */
	157	if (grab_server)
	158	XUngrabServer(GDK_DISPLAY());
	159	if (grab_pointer)
	160	gdk_pointer_ungrab(GDK_CURRENT_TIME);
	161	gdk_keyboard_ungrab(GDK_CURRENT_TIME);
	162	gdk_flush();
	163
	164	/* Report passphrase if user selected OK */
	165	passphrase = g_strdup(gtk_entry_get_text(GTK_ENTRY(entry)));
	166	if (result == GTK_RESPONSE_OK) {
	167	local = g_locale_from_utf8(passphrase, strlen(passphrase),
	168	NULL, NULL, NULL);
	169	if (local != NULL) {
	170	puts(local);
	171	memset(local, '\0', strlen(local));
	172	g_free(local);
	173	} else {
	174	puts(passphrase);
	175	}
	176	}
	177
	178	/* Zero passphrase in memory */
	179	memset(passphrase, '\b', strlen(passphrase));
	180	gtk_entry_set_text(GTK_ENTRY(entry), passphrase);
	181	memset(passphrase, '\0', strlen(passphrase));
	182	g_free(passphrase);
	183
	184	gtk_widget_destroy(dialog);
	185	return (result == GTK_RESPONSE_OK ? 0 : -1);
	186
	187	/* At least one grab failed - ungrab what we got, and report
	188	the failure to the user. Note that XGrabServer() cannot
	189	fail. */
	190	nograbkb:
	191	gdk_pointer_ungrab(GDK_CURRENT_TIME);
	192	nograb:
	193	if (grab_server)
	194	XUngrabServer(GDK_DISPLAY());
	195	gtk_widget_destroy(dialog);
	196
	197	report_failed_grab(failed);
	198
	199	return (-1);
	200	}
	201
	202	int
	203	main(int argc, char **argv)
	204	{
	205	char *message;
	206	int result;
	207
	208	gtk_init(&argc, &argv);
	209
	210	if (argc > 1) {
	211	message = g_strjoinv(" ", argv + 1);
	212	} else {
	213	message = g_strdup("Enter your OpenSSH passphrase:");
	214	}
	215
	216	setvbuf(stdout, 0, _IONBF, 0);
	217	result = passphrase_dialog(message);
218	g_free(message);
219
220	return (result);
221	}