sm/delete.c

   1 /* delete.c
   2  * Copyright (C) 2002 Free Software Foundation, Inc.
   3  *
   4  * This file is part of GnuPG.
   5  *
   6  * GnuPG is free software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License as published by
   8  * the Free Software Foundation; either version 3 of the License, or
   9  * (at your option) any later version.
  10  *
  11  * GnuPG is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  * GNU General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * along with this program; if not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #include <config.h>
  21 #include <stdio.h>
  22 #include <stdlib.h>
  23 #include <string.h>
  24 #include <errno.h>
  25 #include <unistd.h>
  26 #include <time.h>
  27 #include <assert.h>
  28
  29 #include "gpgsm.h"
  30 #include <gcrypt.h>
  31 #include <ksba.h>
  32
  33 #include "keydb.h"
  34 #include "i18n.h"
  35
  36
  37 /* Delete a certificate or an secret key from a key database. */
  38 static int
  39 delete_one (ctrl_t ctrl, const char *username)
  40 {
  41   int rc = 0;
  42   KEYDB_SEARCH_DESC desc;
  43   KEYDB_HANDLE kh = NULL;
  44   ksba_cert_t cert = NULL;
  45   int duplicates = 0;
  46
  47   rc = keydb_classify_name (username, &desc);
  48   if (rc)
  49     {
  50       log_error (_("certificate `%s' not found: %s\n"),
  51                  username, gpg_strerror (rc));
  52       gpgsm_status2 (ctrl, STATUS_DELETE_PROBLEM, "1", NULL);
  53       goto leave;
  54     }
  55
  56   kh = keydb_new (0);
  57   if (!kh)
  58     {
  59       log_error ("keydb_new failed\n");
  60       goto leave;
  61     }
  62
  63
  64   rc = keydb_search (kh, &desc, 1);
  65   if (!rc)
  66     rc = keydb_get_cert (kh, &cert);
  67   if (!rc)
  68     {
  69       unsigned char fpr[20];
  70
  71       gpgsm_get_fingerprint (cert, 0, fpr, NULL);
  72
  73     next_ambigious:
  74       rc = keydb_search (kh, &desc, 1);
  75       if (rc == -1)
  76         rc = 0;
  77       else if (!rc)
  78         {
  79           ksba_cert_t cert2 = NULL;
  80           unsigned char fpr2[20];
  81
  82           /* We ignore all duplicated certificates which might have
  83              been inserted due to program bugs. */
  84           if (!keydb_get_cert (kh, &cert2))
  85             {
  86               gpgsm_get_fingerprint (cert2, 0, fpr2, NULL);
  87               ksba_cert_release (cert2);
  88               if (!memcmp (fpr, fpr2, 20))
  89                 {
  90                   duplicates++;
  91                   goto next_ambigious;
  92                 }
  93             }
  94           rc = gpg_error (GPG_ERR_AMBIGUOUS_NAME);
  95         }
  96     }
  97   if (rc)
  98     {
  99       if (rc == -1)
 100         rc = gpg_error (GPG_ERR_NO_PUBKEY);
 101       log_error (_("certificate `%s' not found: %s\n"),
 102                  username, gpg_strerror (rc));
 103       gpgsm_status2 (ctrl, STATUS_DELETE_PROBLEM, "3", NULL);
 104       goto leave;
 105     }
 106
 107   /* We need to search again to get back to the right position. */
 108   rc = keydb_lock (kh);
 109   if (rc)
 110     {
 111       log_error (_("error locking keybox: %s\n"), gpg_strerror (rc));
 112       goto leave;
 113     }
 114
 115   do
 116     {
 117       keydb_search_reset (kh);
 118       rc = keydb_search (kh, &desc, 1);
 119       if (rc)
 120         {
 121           log_error ("problem re-searching certificate: %s\n",
 122                      gpg_strerror (rc));
 123           goto leave;
 124         }
 125
 126       rc = keydb_delete (kh, duplicates ? 0 : 1);
 127       if (rc)
 128         goto leave;
 129       if (opt.verbose)
 130         {
 131           if (duplicates)
 132             log_info (_("duplicated certificate `%s' deleted\n"), username);
 133           else
 134             log_info (_("certificate `%s' deleted\n"), username);
 135         }
 136     }
 137   while (duplicates--);
 138
 139  leave:
 140   keydb_release (kh);
 141   ksba_cert_release (cert);
 142   return rc;
 143 }
 144
 145
 146
 147 /* Delete the certificates specified by NAMES. */
 148 int
 149 gpgsm_delete (ctrl_t ctrl, strlist_t names)
 150 {
 151   int rc;
 152
 153   if (!names)
 154     {
 155       log_error ("nothing to delete\n");
 156       return gpg_error (GPG_ERR_NO_DATA);
 157     }
 158
 159   for (; names; names=names->next )
 160     {
 161       rc = delete_one (ctrl, names->d);
 162       if (rc)
 163         {
 164           log_error (_("deleting certificate \"%s\" failed: %s\n"),
 165                      names->d, gpg_strerror (rc) );
 166           return rc;
 167         }
 168     }
 169
 170   return 0;
 171 }