Commit ca2f1d62c20b7ed86755d945d57522a8d97b1547
1 parent
36a2078d
Exists in
master
and in
3 other branches
Refactoring popup engine.
Showing
9 changed files
with
270 additions
and
157 deletions
Show diff stats
src/core/connect.c
| ... | ... | @@ -126,7 +126,7 @@ |
| 126 | 126 | set_ssl_state(hSession,LIB3270_SSL_NEGOTIATING); |
| 127 | 127 | int rc = lib3270_run_task(hSession, background_ssl_init, &ssl_error); |
| 128 | 128 | |
| 129 | - if(rc && notify_ssl_error(hSession, rc, &ssl_error)) | |
| 129 | + if(rc && popup_ssl_error(hSession, rc, &ssl_error)) | |
| 130 | 130 | return errno = rc; |
| 131 | 131 | |
| 132 | 132 | set_ssl_state(hSession,LIB3270_SSL_UNDEFINED); | ... | ... |
src/include/internals.h
| ... | ... | @@ -780,25 +780,25 @@ LIB3270_INTERNAL int non_blocking(H3270 *session, Boolean on); |
| 780 | 780 | |
| 781 | 781 | #if defined(HAVE_LIBSSL) |
| 782 | 782 | |
| 783 | + typedef struct ssl_status_msg | |
| 784 | + { | |
| 785 | + LIB3270_POPUP_HEAD | |
| 786 | + | |
| 787 | + long id; | |
| 788 | + const char * iconName; ///< @brief Icon name from https://specifications.freedesktop.org/icon-naming-spec/icon-naming-spec-latest.html | |
| 789 | + } SSL_STATUS_MSG; | |
| 790 | + | |
| 783 | 791 | typedef struct _ssl_error_message |
| 784 | 792 | { |
| 785 | - int error; | |
| 786 | - const char * id; ///< @brief Message identifier. | |
| 787 | - const char * title; ///< @brief Title for popup window. | |
| 788 | - const char * text; ///< @brief Message text. | |
| 789 | - const char * description; ///< @brief Message description. | |
| 793 | + int code; | |
| 790 | 794 | #ifdef _WIN32 |
| 791 | - DWORD lasterror; | |
| 795 | + DWORD lasterror; | |
| 792 | 796 | #endif // _WIN32 |
| 793 | - } SSL_ERROR_MESSAGE; | |
| 794 | 797 | |
| 795 | - struct ssl_status_msg | |
| 796 | - { | |
| 797 | - LIB3270_POPUP_HEAD | |
| 798 | + const LIB3270_POPUP_DESCRIPTOR *popup; /// @brief Pointer to popup message. | |
| 799 | + | |
| 800 | + } SSL_ERROR_MESSAGE; | |
| 798 | 801 | |
| 799 | - long id; | |
| 800 | - const char * iconName; ///< @brief Icon name from https://specifications.freedesktop.org/icon-naming-spec/icon-naming-spec-latest.html | |
| 801 | - }; | |
| 802 | 802 | |
| 803 | 803 | LIB3270_INTERNAL int ssl_ctx_init(H3270 *hSession, SSL_ERROR_MESSAGE *message); |
| 804 | 804 | LIB3270_INTERNAL int ssl_init(H3270 *session); |
| ... | ... | @@ -831,13 +831,15 @@ LIB3270_INTERNAL int non_blocking(H3270 *session, Boolean on); |
| 831 | 831 | * @brief Emit popup on ssl error. |
| 832 | 832 | * |
| 833 | 833 | */ |
| 834 | - LIB3270_INTERNAL int popup_ssl_error(H3270 *session, int rc, const char *title, const char *summary, const char *body); | |
| 834 | + LIB3270_INTERNAL int popup_ssl_error(H3270 *session, int rc, const SSL_ERROR_MESSAGE *message); | |
| 835 | 835 | |
| 836 | 836 | /** |
| 837 | - * @brief Emite popup on SSL error. | |
| 837 | + * @brief Emits SSL popup. | |
| 838 | + * | |
| 838 | 839 | * |
| 839 | 840 | */ |
| 840 | - LIB3270_INTERNAL int notify_ssl_error(H3270 *hSession, int rc, const SSL_ERROR_MESSAGE *message); | |
| 841 | + LIB3270_INTERNAL void ssl_popup_message(H3270 *hSession, const SSL_ERROR_MESSAGE *msg); | |
| 842 | + | |
| 841 | 843 | |
| 842 | 844 | #endif |
| 843 | 845 | ... | ... |
src/include/lib3270/popup.h
| ... | ... | @@ -88,6 +88,20 @@ |
| 88 | 88 | LIB3270_EXPORT LIB3270_NOTIFY lib3270_get_ssl_state_icon(const H3270 *hSession); |
| 89 | 89 | LIB3270_EXPORT const char * lib3270_get_ssl_state_icon_name(const H3270 *hSession); |
| 90 | 90 | |
| 91 | + /** | |
| 92 | + * @brief Emit popup message. | |
| 93 | + * | |
| 94 | + * @param hSession TN3270 Session handle. | |
| 95 | + * @param popup Popup descriptor. | |
| 96 | + * @param wait If non zero waits for user response. | |
| 97 | + * | |
| 98 | + * @return User action. | |
| 99 | + * | |
| 100 | + * @retval 0 User has confirmed, continue action. | |
| 101 | + * @retval ECANCELED Operation was cancelled. | |
| 102 | + */ | |
| 103 | + LIB3270_EXPORT int lib3270_emit_popup(H3270 *hSession, const LIB3270_POPUP_DESCRIPTOR *popup, unsigned char wait); | |
| 104 | + | |
| 91 | 105 | #ifdef __cplusplus |
| 92 | 106 | } |
| 93 | 107 | #endif | ... | ... |
src/ssl/crl.c
| ... | ... | @@ -161,10 +161,14 @@ int lib3270_crl_new_from_x509(H3270 *hSession, void *ssl_error, X509 *cert) |
| 161 | 161 | |
| 162 | 162 | if(!dist_points) |
| 163 | 163 | { |
| 164 | - ((SSL_ERROR_MESSAGE *) ssl_error)->id = "NODISTPOINTS"; | |
| 165 | - ((SSL_ERROR_MESSAGE *) ssl_error)->title = _( "Security error" ); | |
| 166 | - ((SSL_ERROR_MESSAGE *) ssl_error)->text = _( "Can't verify." ); | |
| 167 | - ((SSL_ERROR_MESSAGE *) ssl_error)->description = _( "The host certificate doesn't have CRL distribution points" ); | |
| 164 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 165 | + .name = "SSL-NoDistPoints", | |
| 166 | + .type = LIB3270_NOTIFY_SECURE, | |
| 167 | + .summary = N_("Can't verify"), | |
| 168 | + .body = N_( "The host certificate doesn't have CRL distribution points" ) | |
| 169 | + }; | |
| 170 | + | |
| 171 | + ((SSL_ERROR_MESSAGE *) ssl_error)->popup = &popup; | |
| 168 | 172 | return EACCES; |
| 169 | 173 | } |
| 170 | 174 | ... | ... |
src/ssl/linux/getcrl.c
| ... | ... | @@ -51,11 +51,15 @@ X509_CRL * lib3270_download_crl(H3270 *hSession, SSL_ERROR_MESSAGE * message, co |
| 51 | 51 | |
| 52 | 52 | if(!(consturl && *consturl)) |
| 53 | 53 | { |
| 54 | - message->error = hSession->ssl.error = 0; | |
| 55 | - message->id = "CRLINVURL"; | |
| 56 | - message->title = _( "Security error" ); | |
| 57 | - message->text = _( "Can't open CRL File" ); | |
| 58 | - message->description = _("The URL for the CRL is undefined or empty"); | |
| 54 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 55 | + .type = LIB3270_NOTIFY_SECURE, | |
| 56 | + .name = "SSL-INVCRLURL", | |
| 57 | + .summary = N_( "Can't open CRL File" ), | |
| 58 | + .body = N_("The URL for the CRL is undefined or empty") | |
| 59 | + }; | |
| 60 | + | |
| 61 | + message->code = hSession->ssl.error = 0; | |
| 62 | + message->popup = &popup; | |
| 59 | 63 | errno = ENOENT; |
| 60 | 64 | return NULL; |
| 61 | 65 | } |
| ... | ... | @@ -69,12 +73,17 @@ X509_CRL * lib3270_download_crl(H3270 *hSession, SSL_ERROR_MESSAGE * message, co |
| 69 | 73 | // Can't open CRL File. |
| 70 | 74 | int err = errno; |
| 71 | 75 | |
| 72 | - message->error = hSession->ssl.error = 0; | |
| 73 | - message->id = "CRLOPEN"; | |
| 74 | - message->title = _( "Security error" ); | |
| 75 | - message->text = _( "Can't open CRL File" ); | |
| 76 | - message->description = strerror(err); | |
| 77 | - trace_ssl(hSession,"Can't open %s: %s\n",consturl,message->description); | |
| 76 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 77 | + .type = LIB3270_NOTIFY_SECURE, | |
| 78 | + .name = "SSL-CRLOPEN", | |
| 79 | + .summary = N_( "Can't open CRL File" ) | |
| 80 | + }; | |
| 81 | + | |
| 82 | + message->code = hSession->ssl.error = 0; | |
| 83 | + message->popup = &popup; | |
| 84 | + | |
| 85 | + trace_ssl(hSession,"Can't open %s: %s\n",consturl,strerror(err)); | |
| 86 | + | |
| 78 | 87 | return NULL; |
| 79 | 88 | |
| 80 | 89 | } |
| ... | ... | @@ -82,16 +91,17 @@ X509_CRL * lib3270_download_crl(H3270 *hSession, SSL_ERROR_MESSAGE * message, co |
| 82 | 91 | trace_ssl(hSession,"Loading CRL from %s\n",consturl+7); |
| 83 | 92 | if(d2i_X509_CRL_fp(hCRL, &x509_crl)) |
| 84 | 93 | { |
| 85 | - message->id = "CRLDECODE"; | |
| 86 | - message->error = hSession->ssl.error = ERR_get_error(); | |
| 87 | - message->title = _( "Security error" ); | |
| 88 | - message->text = _( "Can't decode CRL" ); | |
| 89 | - lib3270_write_log(hSession,"ssl","%s: %s",consturl, message->text); | |
| 94 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 95 | + .type = LIB3270_NOTIFY_SECURE, | |
| 96 | + .name = "SSL-CRLDECODE", | |
| 97 | + .summary = N_( "Can't decode CRL" ) | |
| 98 | + }; | |
| 99 | + message->code = hSession->ssl.error = ERR_get_error(); | |
| 100 | + message->popup = &popup; | |
| 101 | + lib3270_write_log(hSession,"ssl","%s: %s",consturl, popup.summary); | |
| 90 | 102 | return NULL; |
| 91 | 103 | } |
| 92 | 104 | |
| 93 | - | |
| 94 | - | |
| 95 | 105 | } |
| 96 | 106 | #ifdef HAVE_LDAP |
| 97 | 107 | else if(strncasecmp(consturl,"ldap://",7) == 0 && strlen(consturl) > 8) | ... | ... |
src/ssl/linux/init.c
| ... | ... | @@ -85,10 +85,14 @@ int ssl_ctx_init(H3270 *hSession, SSL_ERROR_MESSAGE * message) |
| 85 | 85 | ssl_ctx = SSL_CTX_new(SSLv23_method()); |
| 86 | 86 | if(ssl_ctx == NULL) |
| 87 | 87 | { |
| 88 | - message->error = hSession->ssl.error = ERR_get_error(); | |
| 89 | - message->id = "SSLCTXERR"; | |
| 90 | - message->title = _( "Security error" ); | |
| 91 | - message->text = _( "Cant initialize the SSL context." ); | |
| 88 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 89 | + .name = "SSL-CTXERROR", | |
| 90 | + .type = LIB3270_NOTIFY_SECURE, | |
| 91 | + .summary = N_( "Cant initialize the SSL context." ) | |
| 92 | + }; | |
| 93 | + | |
| 94 | + message->code = hSession->ssl.error = ERR_get_error(); | |
| 95 | + message->popup = &popup; | |
| 92 | 96 | return -1; |
| 93 | 97 | } |
| 94 | 98 | ... | ... |
src/ssl/linux/url.c
| ... | ... | @@ -58,12 +58,18 @@ LIB3270_INTERNAL X509_CRL * get_crl_using_url(H3270 *hSession, SSL_ERROR_MESSAGE |
| 58 | 58 | X509_CRL * x509_crl = NULL; |
| 59 | 59 | |
| 60 | 60 | size_t szText = 0; |
| 61 | - lib3270_autoptr(char) httpText = lib3270_get_from_url(hSession, consturl, &szText, &message->description); | |
| 61 | + const char * error_message = NULL; | |
| 62 | + lib3270_autoptr(char) httpText = lib3270_get_from_url(hSession, consturl, &szText, &error_message); | |
| 62 | 63 | |
| 63 | 64 | if(!httpText) |
| 64 | 65 | { |
| 65 | - message->title = _( "Security error" ); | |
| 66 | - message->text = _( "Error getting certificate revocation list" ); | |
| 66 | + LIB3270_POPUP_DESCRIPTOR popup = { | |
| 67 | + .type = LIB3270_NOTIFY_SECURE, | |
| 68 | + .name = "SSL-CantGetCRL", | |
| 69 | + .summary = N_( "Error getting certificate revocation list" ), | |
| 70 | + .body = error_message | |
| 71 | + }; | |
| 72 | + message->popup = &popup; | |
| 67 | 73 | return NULL; |
| 68 | 74 | } |
| 69 | 75 | |
| ... | ... | @@ -76,9 +82,13 @@ LIB3270_INTERNAL X509_CRL * get_crl_using_url(H3270 *hSession, SSL_ERROR_MESSAGE |
| 76 | 82 | char * data = strstr((char *) httpText,":: "); |
| 77 | 83 | if(!data) |
| 78 | 84 | { |
| 79 | - message->error = hSession->ssl.error = ERR_get_error(); | |
| 80 | - message->title = _( "Security error" ); | |
| 81 | - message->text = _( "Got a bad formatted certificate revocation list from LDAP server" ); | |
| 85 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 86 | + .type = LIB3270_NOTIFY_SECURE, | |
| 87 | + .summary = N_( "Got a bad formatted certificate revocation list from LDAP server" ) | |
| 88 | + }; | |
| 89 | + | |
| 90 | + message->code = hSession->ssl.error = ERR_get_error(); | |
| 91 | + message->popup = &popup; | |
| 82 | 92 | lib3270_write_log(hSession,"ssl","%s: invalid format:\n%s\n", consturl, httpText); |
| 83 | 93 | errno = EINVAL; |
| 84 | 94 | return NULL; |
| ... | ... | @@ -94,10 +104,15 @@ LIB3270_INTERNAL X509_CRL * get_crl_using_url(H3270 *hSession, SSL_ERROR_MESSAGE |
| 94 | 104 | |
| 95 | 105 | if(!d2i_X509_CRL_bio(bio, &x509_crl)) |
| 96 | 106 | { |
| 97 | - message->error = hSession->ssl.error = ERR_get_error(); | |
| 98 | - message->title = _( "Security error" ); | |
| 99 | - message->text = _( "Can't decode certificate revocation list got from LDAP server" ); | |
| 100 | - lib3270_write_log(hSession,"ssl","%s: %s",consturl, message->text); | |
| 107 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 108 | + .type = LIB3270_NOTIFY_SECURE, | |
| 109 | + .summary = N_( "Can't decode certificate revocation list got from LDAP server" ) | |
| 110 | + }; | |
| 111 | + | |
| 112 | + message->code = hSession->ssl.error = ERR_get_error(); | |
| 113 | + message->popup = &popup; | |
| 114 | + | |
| 115 | + lib3270_write_log(hSession,"ssl","%s: %s",consturl, popup.summary); | |
| 101 | 116 | errno = EINVAL; |
| 102 | 117 | return NULL; |
| 103 | 118 | } |
| ... | ... | @@ -111,10 +126,14 @@ LIB3270_INTERNAL X509_CRL * get_crl_using_url(H3270 *hSession, SSL_ERROR_MESSAGE |
| 111 | 126 | |
| 112 | 127 | if(!d2i_X509_CRL(&x509_crl, &crl_data, szText)) |
| 113 | 128 | { |
| 114 | - message->error = hSession->ssl.error = ERR_get_error(); | |
| 115 | - message->title = _( "Security error" ); | |
| 116 | - message->text = _( "Can't decode certificate revocation list" ); | |
| 117 | - lib3270_write_log(hSession,"ssl","%s: %s",consturl, message->text); | |
| 129 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 130 | + .type = LIB3270_NOTIFY_SECURE, | |
| 131 | + .summary = N_( "Can't decode certificate revocation list" ) | |
| 132 | + }; | |
| 133 | + | |
| 134 | + message->code = hSession->ssl.error = ERR_get_error(); | |
| 135 | + message->popup = &popup; | |
| 136 | + lib3270_write_log(hSession,"ssl","%s: %s",consturl, popup.summary); | |
| 118 | 137 | return NULL; |
| 119 | 138 | } |
| 120 | 139 | ... | ... |
src/ssl/negotiate.c
| ... | ... | @@ -103,9 +103,13 @@ static int background_ssl_init(H3270 *hSession, void *message) |
| 103 | 103 | hSession->ssl.con = SSL_new(ssl_ctx); |
| 104 | 104 | if(hSession->ssl.con == NULL) |
| 105 | 105 | { |
| 106 | - ((SSL_ERROR_MESSAGE *) message)->error = hSession->ssl.error = ERR_get_error(); | |
| 107 | - ((SSL_ERROR_MESSAGE *) message)->title = _( "Security error" ); | |
| 108 | - ((SSL_ERROR_MESSAGE *) message)->text = _( "Cant create a new SSL structure for current connection." ); | |
| 106 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 107 | + .type = LIB3270_NOTIFY_SECURE, | |
| 108 | + .summary = N_( "Cant create a new SSL structure for current connection." ) | |
| 109 | + }; | |
| 110 | + | |
| 111 | + ((SSL_ERROR_MESSAGE *) message)->code = hSession->ssl.error = ERR_get_error(); | |
| 112 | + ((SSL_ERROR_MESSAGE *) message)->popup = &popup; | |
| 109 | 113 | return -1; |
| 110 | 114 | } |
| 111 | 115 | |
| ... | ... | @@ -238,9 +242,12 @@ static int background_ssl_negotiation(H3270 *hSession, void *message) |
| 238 | 242 | { |
| 239 | 243 | trace_ssl(hSession,"%s","SSL_set_fd failed!\n"); |
| 240 | 244 | |
| 241 | - ((SSL_ERROR_MESSAGE *) message)->title = _( "Security error" ); | |
| 242 | - ((SSL_ERROR_MESSAGE *) message)->text = _( "SSL negotiation failed" ); | |
| 243 | - ((SSL_ERROR_MESSAGE *) message)->description = _( "Cant set the file descriptor for the input/output facility for the TLS/SSL (encrypted) side of ssl." ); | |
| 245 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 246 | + .summary = N_( "SSL negotiation failed" ), | |
| 247 | + .body = N_( "Cant set the file descriptor for the input/output facility for the TLS/SSL (encrypted) side of ssl." ) | |
| 248 | + }; | |
| 249 | + | |
| 250 | + ((SSL_ERROR_MESSAGE *) message)->popup = &popup; | |
| 244 | 251 | |
| 245 | 252 | return -1; |
| 246 | 253 | } |
| ... | ... | @@ -262,18 +269,20 @@ static int background_ssl_negotiation(H3270 *hSession, void *message) |
| 262 | 269 | |
| 263 | 270 | if (rv != 1) |
| 264 | 271 | { |
| 265 | - const char * msg = ""; | |
| 272 | + ((SSL_ERROR_MESSAGE *) message)->code = SSL_get_error(hSession->ssl.con,rv); | |
| 273 | + if(((SSL_ERROR_MESSAGE *) message)->code == SSL_ERROR_SYSCALL && hSession->ssl.error) | |
| 274 | + ((SSL_ERROR_MESSAGE *) message)->code = hSession->ssl.error; | |
| 266 | 275 | |
| 267 | - ((SSL_ERROR_MESSAGE *) message)->error = SSL_get_error(hSession->ssl.con,rv); | |
| 268 | - if(((SSL_ERROR_MESSAGE *) message)->error == SSL_ERROR_SYSCALL && hSession->ssl.error) | |
| 269 | - ((SSL_ERROR_MESSAGE *) message)->error = hSession->ssl.error; | |
| 270 | - | |
| 271 | - msg = ERR_lib_error_string(((SSL_ERROR_MESSAGE *) message)->error); | |
| 276 | + const char * msg = ERR_lib_error_string(((SSL_ERROR_MESSAGE *) message)->code); | |
| 272 | 277 | |
| 273 | 278 | trace_ssl(hSession,"SSL_connect failed: %s %s\n",msg,ERR_reason_error_string(hSession->ssl.error)); |
| 274 | 279 | |
| 275 | - ((SSL_ERROR_MESSAGE *) message)->title = _( "Security error" ); | |
| 276 | - ((SSL_ERROR_MESSAGE *) message)->text = _( "SSL Connect failed" ); | |
| 280 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 281 | + .type = LIB3270_NOTIFY_ERROR, | |
| 282 | + .summary = N_( "SSL Connect failed" ), | |
| 283 | + }; | |
| 284 | + | |
| 285 | + ((SSL_ERROR_MESSAGE *) message)->popup = &popup; | |
| 277 | 286 | |
| 278 | 287 | return -1; |
| 279 | 288 | |
| ... | ... | @@ -366,9 +375,12 @@ static int background_ssl_negotiation(H3270 *hSession, void *message) |
| 366 | 375 | trace_ssl(hSession,"Unexpected or invalid TLS/SSL verify result %d\n",rv); |
| 367 | 376 | set_ssl_state(hSession,LIB3270_SSL_UNSECURE); |
| 368 | 377 | |
| 369 | - ((SSL_ERROR_MESSAGE *) message)->title = _( "Security error" ); | |
| 370 | - ((SSL_ERROR_MESSAGE *) message)->text = _( "Can't verify." ); | |
| 371 | - ((SSL_ERROR_MESSAGE *) message)->description = _( "Unexpected or invalid TLS/SSL verify result" ); | |
| 378 | + static LIB3270_POPUP_DESCRIPTOR popup = { | |
| 379 | + .summary = N_( "Can't verify." ), | |
| 380 | + .body = N_( "Unexpected or invalid TLS/SSL verify result" ) | |
| 381 | + }; | |
| 382 | + | |
| 383 | + ((SSL_ERROR_MESSAGE *) message)->popup = &popup; | |
| 372 | 384 | return EACCES; |
| 373 | 385 | |
| 374 | 386 | } |
| ... | ... | @@ -388,9 +400,13 @@ static int background_ssl_negotiation(H3270 *hSession, void *message) |
| 388 | 400 | set_ssl_state(hSession,LIB3270_SSL_NEGOTIATED); |
| 389 | 401 | |
| 390 | 402 | #ifdef SSL_ENABLE_SELF_SIGNED_CERT_CHECK |
| 391 | - ((SSL_ERROR_MESSAGE *) message)->title = _( "Security error" ); | |
| 392 | - ((SSL_ERROR_MESSAGE *) message)->text = _( "The SSL certificate for this host is not trusted." ); | |
| 393 | - ((SSL_ERROR_MESSAGE *) message)->description = _( "The security certificate presented by this host was not issued by a trusted certificate authority." ); | |
| 403 | + static const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 404 | + .name = "SelfSignedCert", | |
| 405 | + .type = LIB3270_NOTIFY_SECURE, | |
| 406 | + .summary = N_( "The SSL certificate for this host is not trusted." ), | |
| 407 | + .body = N_( "The security certificate presented by this host was not issued by a trusted certificate authority." ) | |
| 408 | + } | |
| 409 | + ((SSL_ERROR_MESSAGE *) message)->popup = &popup; | |
| 394 | 410 | return EACCES; |
| 395 | 411 | #else |
| 396 | 412 | break; |
| ... | ... | @@ -399,21 +415,15 @@ static int background_ssl_negotiation(H3270 *hSession, void *message) |
| 399 | 415 | default: |
| 400 | 416 | trace_ssl(hSession,"TLS/SSL verify result was %d (%s)\n", rv, msg->body); |
| 401 | 417 | |
| 402 | - debug("message: %s",msg->summary); | |
| 403 | - debug("description: %s",msg->body); | |
| 418 | + ((SSL_ERROR_MESSAGE *) message)->popup = (LIB3270_POPUP_DESCRIPTOR *) msg; | |
| 404 | 419 | |
| 405 | - ((SSL_ERROR_MESSAGE *) message)->text = gettext(msg->summary); | |
| 406 | - ((SSL_ERROR_MESSAGE *) message)->description = gettext(msg->body); | |
| 420 | + debug("message: %s",((SSL_ERROR_MESSAGE *) message)->popup->summary); | |
| 421 | + debug("description: %s",((SSL_ERROR_MESSAGE *) message)->popup->body); | |
| 407 | 422 | |
| 408 | 423 | set_ssl_state(hSession,LIB3270_SSL_NEGOTIATED); |
| 409 | 424 | |
| 410 | 425 | if(msg->type == LIB3270_NOTIFY_ERROR) |
| 411 | - { | |
| 412 | - ((SSL_ERROR_MESSAGE *) message)->title = _( "Security error" ); | |
| 413 | 426 | return EACCES; |
| 414 | - } | |
| 415 | - | |
| 416 | - ((SSL_ERROR_MESSAGE *) message)->title = _( "Security warning" ); | |
| 417 | 427 | |
| 418 | 428 | } |
| 419 | 429 | |
| ... | ... | @@ -448,45 +458,41 @@ int ssl_negotiate(H3270 *hSession) |
| 448 | 458 | |
| 449 | 459 | rc = lib3270_run_task(hSession, background_ssl_negotiation, &msg); |
| 450 | 460 | |
| 451 | - if(rc == EACCES) | |
| 461 | + if(rc && msg.popup) | |
| 452 | 462 | { |
| 453 | - // SSL validation has failed | |
| 454 | - | |
| 455 | - int abort = -1; | |
| 456 | - | |
| 457 | - if(msg.description) | |
| 458 | - abort = popup_ssl_error(hSession,rc,msg.title,msg.text,msg.description); | |
| 459 | - else | |
| 460 | - abort = popup_ssl_error(hSession,rc,msg.title,msg.text,ERR_reason_error_string(msg.error)); | |
| 463 | + // SSL Negotiation has failed. | |
| 464 | + host_disconnect(hSession,1); // Disconnect with "failed" status. | |
| 461 | 465 | |
| 462 | - if(abort) | |
| 466 | + if(popup_ssl_error(hSession,rc,&msg)) | |
| 463 | 467 | { |
| 464 | 468 | host_disconnect(hSession,1); // Disconnect with "failed" status. |
| 465 | 469 | return rc; |
| 466 | 470 | } |
| 467 | 471 | |
| 468 | - } | |
| 469 | - else if(rc) | |
| 470 | - { | |
| 471 | - // SSL Negotiation has failed. | |
| 472 | - host_disconnect(hSession,1); // Disconnect with "failed" status. | |
| 472 | + } else if(rc) { | |
| 473 | 473 | |
| 474 | - if(msg.description) | |
| 475 | - lib3270_popup_dialog(hSession, LIB3270_NOTIFY_ERROR, msg.title, msg.text, "%s", msg.description); | |
| 476 | - else | |
| 477 | - lib3270_popup_dialog(hSession, LIB3270_NOTIFY_ERROR, msg.title, msg.text, "%s", ERR_reason_error_string(msg.error)); | |
| 474 | + // SSL Negotiation has failed, no popup to present. | |
| 475 | + const LIB3270_POPUP_DESCRIPTOR popup = { | |
| 476 | + .summary = N_("SSL negotiation has failed") | |
| 477 | + }; | |
| 478 | 478 | |
| 479 | - return rc; | |
| 479 | + msg.popup = &popup; | |
| 480 | + if(popup_ssl_error(hSession,rc,&msg)) | |
| 481 | + { | |
| 482 | + host_disconnect(hSession,1); // Disconnect with "failed" status. | |
| 483 | + return rc; | |
| 484 | + } | |
| 480 | 485 | |
| 481 | 486 | } |
| 482 | 487 | |
| 483 | - /* Tell the world that we are (still) connected, now in secure mode. */ | |
| 488 | + // Tell the world that we are (still) connected, now in secure mode. | |
| 484 | 489 | lib3270_set_connected_initial(hSession); |
| 485 | 490 | non_blocking(hSession,True); |
| 486 | 491 | |
| 487 | 492 | return 0; |
| 488 | 493 | } |
| 489 | 494 | |
| 495 | + | |
| 490 | 496 | int ssl_init(H3270 *hSession) { |
| 491 | 497 | |
| 492 | 498 | int rc; |
| ... | ... | @@ -502,10 +508,25 @@ int ssl_init(H3270 *hSession) { |
| 502 | 508 | // SSL init has failed. |
| 503 | 509 | host_disconnect(hSession,1); // Disconnect with "failed" status. |
| 504 | 510 | |
| 505 | - if(msg.description) | |
| 506 | - lib3270_popup_dialog(hSession, LIB3270_NOTIFY_ERROR, msg.title, msg.text, "%s", msg.description); | |
| 511 | + if(msg.popup) | |
| 512 | + { | |
| 513 | + ssl_popup_message(hSession,&msg); | |
| 514 | + } | |
| 507 | 515 | else |
| 508 | - lib3270_popup_dialog(hSession, LIB3270_NOTIFY_ERROR, msg.title, msg.text, "%s", ERR_reason_error_string(msg.error)); | |
| 516 | + { | |
| 517 | + LIB3270_POPUP_DESCRIPTOR popup = { | |
| 518 | + .summary = N_("Unexpected error on SSL initialization") | |
| 519 | + }; | |
| 520 | + | |
| 521 | + lib3270_autoptr(char) body = lib3270_strdup_printf("%s (rc=%d)",strerror(rc),rc); | |
| 522 | + popup.body = body; | |
| 523 | + | |
| 524 | + msg.popup = &popup; | |
| 525 | + ssl_popup_message(hSession,&msg); | |
| 526 | + msg.popup = NULL; | |
| 527 | + | |
| 528 | + } | |
| 529 | + | |
| 509 | 530 | |
| 510 | 531 | } |
| 511 | 532 | ... | ... |
src/ssl/notify.c
| ... | ... | @@ -43,16 +43,76 @@ |
| 43 | 43 | |
| 44 | 44 | #include <openssl/err.h> |
| 45 | 45 | |
| 46 | -int popup_ssl_error(H3270 GNUC_UNUSED(*hSession), int rc, const char GNUC_UNUSED(*title), const char *summary, const char *body) | |
| 46 | +/** | |
| 47 | + * @brief Translate strings from ssl error message. | |
| 48 | + * | |
| 49 | + * @param msg SSL error message descriptor. | |
| 50 | + * @param rc Value of errno. | |
| 51 | + * | |
| 52 | + * @return Dynamically allocated popup description. | |
| 53 | + * | |
| 54 | + */ | |
| 55 | +static LIB3270_POPUP_DESCRIPTOR * translate_ssl_error_message(const SSL_ERROR_MESSAGE *msg, int rc) | |
| 47 | 56 | { |
| 57 | + LIB3270_POPUP_DESCRIPTOR * popup; | |
| 58 | + | |
| 59 | + if(msg->popup->body) | |
| 60 | + { | |
| 61 | + popup = lib3270_malloc(sizeof(LIB3270_POPUP_DESCRIPTOR)); | |
| 62 | + memcpy(popup,msg->popup,sizeof(LIB3270_POPUP_DESCRIPTOR)); | |
| 63 | + popup->body = dgettext(GETTEXT_PACKAGE,msg->popup->body); | |
| 64 | + } | |
| 65 | + else | |
| 66 | + { | |
| 67 | + lib3270_autoptr(char) body = NULL; | |
| 68 | + if(msg->code) | |
| 69 | + { | |
| 70 | + body = lib3270_strdup_printf(_( "%s (SSL error %d)" ),ERR_reason_error_string(msg->code),msg->code); | |
| 71 | + } | |
| 72 | +#ifdef _WIN32 | |
| 73 | + else if(msg->lasterror) | |
| 74 | + { | |
| 75 | + lib3270_autoptr(char) windows_error = lib3270_win32_translate_error_code(msg->lasterror); | |
| 76 | + body = lib3270_strdup_printf(_( "Windows error was \"%s\" (%u)" ), windows_error,(unsigned int) msg->lasterror); | |
| 77 | + } | |
| 78 | +#endif | |
| 79 | + else if(rc) { | |
| 80 | + body = lib3270_strdup_printf(_( "%s (rc=%d)" ),strerror(rc),rc); | |
| 81 | + } | |
| 82 | + | |
| 83 | + popup = lib3270_malloc(sizeof(LIB3270_POPUP_DESCRIPTOR)+strlen(body)+1); | |
| 84 | + memcpy(popup,msg->popup,sizeof(LIB3270_POPUP_DESCRIPTOR)); | |
| 85 | + popup->body = (char *) (popup+1); | |
| 86 | + strcpy((char *) (popup+1),body); | |
| 87 | + | |
| 88 | + } | |
| 89 | + | |
| 90 | + if(popup->summary) | |
| 91 | + popup->summary = dgettext(GETTEXT_PACKAGE,popup->summary); | |
| 92 | + | |
| 93 | + if(popup->title) | |
| 94 | + popup->title = dgettext(GETTEXT_PACKAGE,popup->title); | |
| 95 | + else | |
| 96 | + popup->title = _("Security alert"); | |
| 97 | + | |
| 98 | + return popup; | |
| 99 | +} | |
| 100 | + | |
| 101 | + | |
| 102 | +int popup_ssl_error(H3270 GNUC_UNUSED(*hSession), int rc, const SSL_ERROR_MESSAGE *msg) | |
| 103 | +{ | |
| 104 | + int response = 0; | |
| 105 | + | |
| 106 | + LIB3270_POPUP_DESCRIPTOR * popup = translate_ssl_error_message(msg,0); | |
| 107 | + | |
| 48 | 108 | #ifdef _WIN32 |
| 49 | 109 | |
| 50 | 110 | lib3270_autoptr(char) rcMessage = lib3270_strdup_printf("The error code was %d",rc); |
| 51 | 111 | |
| 52 | 112 | const char *outMsg[] = { |
| 53 | - title, | |
| 54 | - summary, | |
| 55 | - (body ? body : ""), | |
| 113 | + popup->title, | |
| 114 | + popup->summary, | |
| 115 | + (popup->body ? popup->body : ""), | |
| 56 | 116 | rcMessage |
| 57 | 117 | }; |
| 58 | 118 | |
| ... | ... | @@ -70,63 +130,42 @@ int popup_ssl_error(H3270 GNUC_UNUSED(*hSession), int rc, const char GNUC_UNUSED |
| 70 | 130 | |
| 71 | 131 | #else |
| 72 | 132 | |
| 73 | - lib3270_write_log(hSession, "SSL", "%s %s (rc=%d)", summary, (body ? body : ""), rc); | |
| 133 | + lib3270_write_log(hSession, "SSL", "%s %s (rc=%d)", popup->summary, (popup->body ? popup->body : ""), rc); | |
| 74 | 134 | |
| 75 | 135 | #endif // _WIN32 |
| 76 | 136 | |
| 77 | 137 | #ifdef SSL_ENABLE_NOTIFICATION_WHEN_FAILED |
| 78 | 138 | |
| 79 | - return hSession->cbk.popup_ssl_error(hSession,rc,title,summary,body); | |
| 80 | - | |
| 81 | -#else | |
| 139 | + response = hSession->cbk.popup_ssl_error( | |
| 140 | + hSession, | |
| 141 | + rc, | |
| 142 | + popup->title, | |
| 143 | + popup->summary, | |
| 144 | + popup->body | |
| 145 | + ); | |
| 82 | 146 | |
| 83 | - return 0; | |
| 84 | 147 | |
| 85 | 148 | #endif // SSL_ENABLE_NOTIFICATION_WHEN_FAILED |
| 86 | -} | |
| 87 | 149 | |
| 88 | -int notify_ssl_error(H3270 *hSession, int rc, const SSL_ERROR_MESSAGE *message) | |
| 89 | -{ | |
| 90 | - lib3270_write_log( | |
| 91 | - hSession, | |
| 92 | - "SSL-CRL-GET", | |
| 93 | - "CRL GET error: %s (rc=%d ssl_error=%d)", | |
| 94 | - message->title, | |
| 95 | - rc, | |
| 96 | - message->error | |
| 97 | - ); | |
| 150 | + lib3270_free(popup); | |
| 151 | + return response; | |
| 98 | 152 | |
| 99 | - if(message->description) | |
| 100 | - { | |
| 101 | - if(popup_ssl_error(hSession,rc,message->title,message->text,message->description)) | |
| 102 | - return rc; | |
| 103 | - } | |
| 104 | -#ifdef _WIN32 | |
| 105 | - else if(message->lasterror) | |
| 106 | - { | |
| 107 | - lib3270_autoptr(char) windows_error = lib3270_win32_translate_error_code(message->lasterror); | |
| 108 | - lib3270_autoptr(char) formatted_error = lib3270_strdup_printf(_( "Windows error was \"%s\" (%u)" ), windows_error,(unsigned int) message->lasterror); | |
| 153 | +} | |
| 109 | 154 | |
| 110 | - if(popup_ssl_error(hSession,rc,message->title,message->text,formatted_error)) | |
| 111 | - return rc; | |
| 155 | +void ssl_popup_message(H3270 *hSession, const SSL_ERROR_MESSAGE *msg) { | |
| 112 | 156 | |
| 113 | - } | |
| 114 | -#endif // WIN32 | |
| 115 | - else if(message->error) | |
| 116 | - { | |
| 117 | - lib3270_autoptr(char) formatted_error = lib3270_strdup_printf(_( "%s (SSL error %d)" ),ERR_reason_error_string(message->error),message->error); | |
| 118 | - lib3270_write_log(hSession,"SSL-CRL-GET","%s",formatted_error); | |
| 157 | + LIB3270_POPUP_DESCRIPTOR * popup = translate_ssl_error_message(msg,0); | |
| 119 | 158 | |
| 120 | - if(popup_ssl_error(hSession,rc,message->title,message->text,formatted_error)) | |
| 121 | - return rc; | |
| 122 | - } | |
| 123 | - else | |
| 124 | - { | |
| 125 | - if(popup_ssl_error(hSession,rc,message->title,message->text,"")) | |
| 126 | - return rc; | |
| 127 | - } | |
| 159 | + lib3270_popup_dialog( | |
| 160 | + hSession, | |
| 161 | + popup->type, | |
| 162 | + popup->title, | |
| 163 | + popup->summary, | |
| 164 | + "%s", popup->body | |
| 165 | + ); | |
| 166 | + | |
| 167 | + lib3270_free(popup); | |
| 128 | 168 | |
| 129 | - return 0; | |
| 130 | 169 | } |
| 131 | 170 | |
| 132 | 171 | #endif // defined(HAVE_LIBSSL) | ... | ... |