void AB_Value__toString(const AB_VALUE *v, GWEN_BUFFER *buf) {
int rv;
uint32_t size;
char *p;
assert(v);
GWEN_Buffer_AllocRoom(buf, AB_VALUE_STRSIZE);
p=GWEN_Buffer_GetPosPointer(buf);
size=GWEN_Buffer_GetMaxUnsegmentedWrite(buf);
rv=gmp_snprintf(p, size, "%Qi", v->value);
assert(rv<size);
GWEN_Buffer_IncrementPos(buf, rv+1);
GWEN_Buffer_AdjustUsedBytes(buf);
}
GWENHYWFAR_CB
int GWEN_CryptMgrKeys_EncryptKey(GWEN_CRYPTMGR *cm,
const uint8_t *pData, uint32_t lData,
GWEN_BUFFER *dbuf) {
GWEN_CRYPTMGR_KEYS *xcm;
int rv;
GWEN_BUFFER *tbuf;
int ksize;
uint32_t l;
assert(cm);
xcm=GWEN_INHERIT_GETDATA(GWEN_CRYPTMGR, GWEN_CRYPTMGR_KEYS, cm);
assert(xcm);
if (xcm->peerKey==NULL) {
DBG_ERROR(GWEN_LOGDOMAIN, "No peer key");
return GWEN_ERROR_GENERIC;
}
ksize=GWEN_Crypt_Key_GetKeySize(xcm->peerKey);
/* padd key data */
tbuf=GWEN_Buffer_new(0, ksize, 0, 1);
GWEN_Buffer_AppendBytes(tbuf, (const char*) pData, lData);
rv=GWEN_Padd_PaddWithIso9796_2(tbuf, ksize);
if (rv<0) {
DBG_INFO(GWEN_LOGDOMAIN, "here (%d)", rv);
GWEN_Buffer_free(tbuf);
return rv;
}
GWEN_Buffer_AllocRoom(dbuf, ksize);
l=GWEN_Buffer_GetMaxUnsegmentedWrite(dbuf);
rv=GWEN_Crypt_Key_Encipher(xcm->peerKey,
(const uint8_t*)GWEN_Buffer_GetStart(tbuf),
GWEN_Buffer_GetUsedBytes(tbuf),
(uint8_t*)GWEN_Buffer_GetPosPointer(dbuf),
&l);
GWEN_Buffer_free(tbuf);
if (rv<0) {
DBG_INFO(GWEN_LOGDOMAIN, "here (%d)", rv);
return rv;
}
GWEN_Buffer_IncrementPos(dbuf, l);
GWEN_Buffer_AdjustUsedBytes(dbuf);
return 0;
}
int EBC_Provider_Generate_OrderId(AB_PROVIDER *pro, GWEN_BUFFER *buf) {
uint32_t id;
char rbuf[4];
char c;
uint32_t j;
GWEN_Buffer_AllocRoom(buf, 4);
id=AB_Banking_GetUniqueId(AB_Provider_GetBanking(pro));
if (id==0)
return GWEN_ERROR_IO;
rbuf[3]=id%36;
j=id/36;
rbuf[2]=j%36;
j/=36;
rbuf[1]=j%36;
j/=36;
rbuf[0]=j%26;
c=rbuf[0];
c+='A';
GWEN_Buffer_AppendByte(buf, c);
c=rbuf[1];
if (c<10) c+='0';
else c+='A'-10;
GWEN_Buffer_AppendByte(buf, c);
c=rbuf[2];
if (c<10) c+='0';
else c+='A'-10;
GWEN_Buffer_AppendByte(buf, c);
c=rbuf[3];
if (c<10) c+='0';
else c+='A'-10;
GWEN_Buffer_AppendByte(buf, c);
return 0;
}
int readFile(const char *fname, GWEN_BUFFER *dbuf) {
FILE *f;
f=fopen(fname, "rb");
if (f) {
while(!feof(f)) {
uint32_t l;
ssize_t s;
char *p;
GWEN_Buffer_AllocRoom(dbuf, 1024);
l=GWEN_Buffer_GetMaxUnsegmentedWrite(dbuf);
p=GWEN_Buffer_GetPosPointer(dbuf);
s=fread(p, 1, l, f);
if (s==0)
break;
if (s==(ssize_t)-1) {
DBG_INFO(GWEN_LOGDOMAIN,
"fread(%s): %s",
fname, strerror(errno));
fclose(f);
return GWEN_ERROR_IO;
}
GWEN_Buffer_IncrementPos(dbuf, s);
GWEN_Buffer_AdjustUsedBytes(dbuf);
}
fclose(f);
return 0;
}
else {
DBG_INFO(GWEN_LOGDOMAIN,
"fopen(%s): %s",
fname, strerror(errno));
return GWEN_ERROR_IO;
}
}
GWENHYWFAR_CB
int GWEN_CryptMgrKeys_SignData(GWEN_CRYPTMGR *cm,
const uint8_t *pData, uint32_t lData,
GWEN_BUFFER *dbuf) {
GWEN_CRYPTMGR_KEYS *xcm;
GWEN_MDIGEST *md;
int rv;
GWEN_BUFFER *tbuf;
int ksize;
uint32_t signatureLen;
assert(cm);
xcm=GWEN_INHERIT_GETDATA(GWEN_CRYPTMGR, GWEN_CRYPTMGR_KEYS, cm);
assert(xcm);
if (xcm->localKey==NULL) {
DBG_ERROR(GWEN_LOGDOMAIN, "No local key");
return GWEN_ERROR_GENERIC;
}
ksize=GWEN_Crypt_Key_GetKeySize(xcm->localKey);
/* hash pData */
md=GWEN_MDigest_Rmd160_new();
rv=GWEN_MDigest_Begin(md);
if (rv<0) {
DBG_INFO(GWEN_LOGDOMAIN, "here (%d)", rv);
GWEN_MDigest_free(md);
return rv;
}
rv=GWEN_MDigest_Update(md, pData, lData);
if (rv<0) {
DBG_INFO(GWEN_LOGDOMAIN, "here (%d)", rv);
GWEN_MDigest_free(md);
return rv;
}
rv=GWEN_MDigest_End(md);
if (rv<0) {
DBG_INFO(GWEN_LOGDOMAIN, "here (%d)", rv);
GWEN_MDigest_free(md);
return rv;
}
/* padd */
tbuf=GWEN_Buffer_new(0, ksize, 0, 1);
GWEN_Buffer_AppendBytes(tbuf,
(const char*)GWEN_MDigest_GetDigestPtr(md),
GWEN_MDigest_GetDigestSize(md));
GWEN_MDigest_free(md);
GWEN_Padd_PaddWithIso9796_2(tbuf, ksize);
/* sign */
GWEN_Buffer_AllocRoom(dbuf, ksize);
signatureLen=GWEN_Buffer_GetMaxUnsegmentedWrite(dbuf);
rv=GWEN_Crypt_Key_Sign(xcm->localKey,
(uint8_t*)GWEN_Buffer_GetStart(tbuf),
GWEN_Buffer_GetUsedBytes(tbuf),
(uint8_t*)GWEN_Buffer_GetPosPointer(dbuf),
&signatureLen);
GWEN_Buffer_free(tbuf);
if (rv<0) {
DBG_INFO(GWEN_LOGDOMAIN, "here (%d)", rv);
return rv;
}
GWEN_Buffer_IncrementPos(dbuf, signatureLen);
GWEN_Buffer_AdjustUsedBytes(dbuf);
return 0;
}
static int EBC_Provider_SignMessage_X001(AB_PROVIDER *pro,
EB_MSG *msg,
AB_USER *u,
xmlNodePtr node) {
EBC_PROVIDER *dp;
int rv;
GWEN_CRYPT_TOKEN *ct;
const GWEN_CRYPT_TOKEN_CONTEXT *ctx;
const GWEN_CRYPT_TOKEN_KEYINFO *ki;
uint32_t keyId;
GWEN_BUFFER *hbuf;
GWEN_BUFFER *bbuf;
xmlNodePtr nodeX = NULL;
xmlNodePtr nodeXX = NULL;
xmlNodePtr nodeXXX = NULL;
xmlNodePtr nodeXXXX = NULL;
xmlNsPtr ns;
assert(pro);
dp=GWEN_INHERIT_GETDATA(AB_PROVIDER, EBC_PROVIDER, pro);
assert(dp);
/* get crypt token and context */
rv=EBC_Provider_MountToken(pro, u, &ct, &ctx);
if (rv<0) {
DBG_INFO(AQEBICS_LOGDOMAIN, "here (%d)", rv);
return rv;
}
/* get key id */
keyId=GWEN_Crypt_Token_Context_GetAuthSignKeyId(ctx);
ki=GWEN_Crypt_Token_GetKeyInfo(ct,
keyId,
0xffffffff,
0);
if (ki==NULL) {
DBG_INFO(AQEBICS_LOGDOMAIN,
"Keyinfo %04x not found on crypt token [%s:%s]",
keyId,
GWEN_Crypt_Token_GetTypeName(ct),
GWEN_Crypt_Token_GetTokenName(ct));
GWEN_Crypt_Token_Close(ct, 0, 0);
return GWEN_ERROR_NOT_FOUND;
}
/* prepare signature nodes */
ns=xmlSearchNs(EB_Msg_GetDoc(msg), node, BAD_CAST "ds");
assert(ns);
/* build hash */
bbuf=GWEN_Buffer_new(0, 256, 0, 1);
rv=EB_Msg_BuildHashSha1(msg, bbuf);
if (rv) {
DBG_ERROR(AQEBICS_LOGDOMAIN, "Could not build hash");
GWEN_Buffer_free(bbuf);
return rv;
}
/* base64 encode */
hbuf=GWEN_Buffer_new(0, 256, 0, 1);
rv=GWEN_Base64_Encode((const uint8_t*)GWEN_Buffer_GetStart(bbuf),
GWEN_Buffer_GetUsedBytes(bbuf),
hbuf, 0);
if (rv<0) {
DBG_INFO(AQEBICS_LOGDOMAIN, "here (%d)", rv);
GWEN_Buffer_free(hbuf);
GWEN_Buffer_free(bbuf);
return rv;
}
GWEN_Buffer_free(bbuf);
/* create signature node */
nodeX=xmlNewChild(node, ns, BAD_CAST "SignedInfo", NULL);
nodeXX=xmlNewChild(nodeX, ns, BAD_CAST "CanonicalizationMethod", NULL);
xmlNewProp(nodeXX,
BAD_CAST "Algorithm",
BAD_CAST "http://www.w3.org/TR/2001/REC-xml-c14n-20010315");
nodeXX=xmlNewChild(nodeX, ns, BAD_CAST "SignatureMethod", NULL);
xmlNewProp(nodeXX,
BAD_CAST "Algorithm",
BAD_CAST "http://www.w3.org/2000/09/xmldsig#rsa-sha1");
nodeXX=xmlNewChild(nodeX, ns, BAD_CAST "Reference", NULL);
xmlNewProp(nodeXX,
BAD_CAST "URI",
BAD_CAST "#xpointer(//*[@authenticate='true'])");
nodeXXX=xmlNewChild(nodeXX, ns, BAD_CAST "Transforms", NULL);
nodeXXXX=xmlNewChild(nodeXXX, ns, BAD_CAST "Transform", NULL);
xmlNewProp(nodeXXXX,
BAD_CAST "Algorithm",
BAD_CAST "http://www.w3.org/TR/2001/REC-xml-c14n-20010315");
nodeXXX=xmlNewChild(nodeXX, ns, BAD_CAST "DigestMethod", NULL);
xmlNewProp(nodeXXX,
BAD_CAST "Algorithm",
BAD_CAST "http://www.w3.org/2000/09/xmldsig#sha1");
/* store hash value */
xmlNewTextChild(nodeXX, ns,
BAD_CAST "DigestValue",
BAD_CAST GWEN_Buffer_GetStart(hbuf));
GWEN_Buffer_free(hbuf);
/* build hash over SignedInfo */
bbuf=GWEN_Buffer_new(0, 256, 0, 1);
rv=EB_Xml_BuildNodeHashSha1(nodeX, "#xpointer(//*)", bbuf);
if (rv<0) {
DBG_INFO(AQEBICS_LOGDOMAIN, "here (%d)", rv);
GWEN_Buffer_free(bbuf);
return rv;
}
/* sign hash */
if (1) {
GWEN_CRYPT_PADDALGO *algo;
int ksize;
uint32_t l;
const uint8_t prefix[]={
0x30, 0x21, 0x30, 0x09,
0x06, 0x05, 0x2B, 0x0E,
0x03, 0x02, 0x1A, 0x05,
0x00, 0x04, 0x14};
/* add prefix to hash of SignedInfo */
hbuf=GWEN_Buffer_new(0, 256, 0, 1);
ksize=GWEN_Crypt_Token_KeyInfo_GetKeySize(ki);
GWEN_Buffer_AppendBytes(hbuf, (const char*)prefix, sizeof(prefix));
GWEN_Buffer_AppendBuffer(hbuf, bbuf);
GWEN_Buffer_Reset(bbuf);
/* select padd algo */
algo=GWEN_Crypt_PaddAlgo_new(GWEN_Crypt_PaddAlgoId_Pkcs1_1);
GWEN_Crypt_PaddAlgo_SetPaddSize(algo, ksize);
/* actually sign */
GWEN_Buffer_AllocRoom(bbuf, ksize+16);
l=GWEN_Buffer_GetMaxUnsegmentedWrite(bbuf);
rv=GWEN_Crypt_Token_Sign(ct, keyId,
algo,
(const uint8_t*)GWEN_Buffer_GetStart(hbuf),
GWEN_Buffer_GetUsedBytes(hbuf),
(uint8_t*)GWEN_Buffer_GetPosPointer(bbuf),
&l,
NULL, /* ignore seq counter */
0);
GWEN_Crypt_PaddAlgo_free(algo);
if (rv<0) {
DBG_INFO(AQEBICS_LOGDOMAIN, "here (%d)", rv);
GWEN_Buffer_free(bbuf);
GWEN_Buffer_free(hbuf);
return rv;
}
GWEN_Buffer_IncrementPos(bbuf, l);
GWEN_Buffer_AdjustUsedBytes(bbuf);
/* base 64 encode signature */
GWEN_Buffer_Reset(hbuf);
rv=GWEN_Base64_Encode((const uint8_t*)GWEN_Buffer_GetStart(bbuf),
GWEN_Buffer_GetUsedBytes(bbuf),
hbuf, 0);
if (rv<0) {
DBG_INFO(AQEBICS_LOGDOMAIN, "here (%d)", rv);
GWEN_Buffer_free(hbuf);
GWEN_Buffer_free(bbuf);
return rv;
}
GWEN_Buffer_free(bbuf);
/* store signature */
xmlNewTextChild(node, ns,
BAD_CAST "SignatureValue",
BAD_CAST GWEN_Buffer_GetStart(hbuf));
GWEN_Buffer_free(hbuf);
}
return 0;
}
int AHB_DTAUS__CreateSetC(GWEN_BUFFER *dst,
GWEN_DB_NODE *cfg,
GWEN_DB_NODE *xa,
AB_VALUE *sumEUR,
AB_VALUE *sumDEM,
AB_VALUE *sumBankCodes,
AB_VALUE *sumAccountIds){
unsigned int i;
const char *p;
char buffer[32];
int isDebitNote;
int isEuro;
unsigned int extSets;
//unsigned int startPos;
AB_VALUE *val;
GWEN_STRINGLIST *purposeList;
DBG_DEBUG(AQBANKING_LOGDOMAIN, "Creating C set");
/* ______________________________________________________________________
* preparations
*/
purposeList=GWEN_StringList_new();
/* cut purpose lines into manageable portions (max 27 chars) */
for (i=0; ; i++) {
int slen;
GWEN_BUFFER *nbuf;
p=GWEN_DB_GetCharValue(xa, "purpose", i, 0);
if (p==NULL)
break;
if (i>14) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Too many purpose lines (maxmimum is 14)");
GWEN_StringList_free(purposeList);
return -1;
}
slen=strlen(p);
nbuf=GWEN_Buffer_new(0, slen+1, 0, 1);
AB_ImExporter_Utf8ToDta(p, -1, nbuf);
p=GWEN_Buffer_GetStart(nbuf);
while(*p) {
while(*p>0 && *p<33)
p++;
slen=strlen(p);
if (slen==0)
break;
else if (slen>27) {
char *ns;
ns=(char*) malloc(28);
assert(ns);
memmove(ns, p, 27);
ns[27]=0;
/* let stringlist take over ownership of the the string */
GWEN_StringList_AppendString(purposeList, ns, 1, 0);
p+=27;
}
else {
GWEN_StringList_AppendString(purposeList, p, 0, 0);
break;
}
}
GWEN_Buffer_free(nbuf);
} /* for */
//startPos=GWEN_Buffer_GetPos(dst);
GWEN_Buffer_AllocRoom(dst, 256);
isDebitNote=(strcasecmp(GWEN_DB_GetCharValue(cfg, "type", 0, "transfer"),
"debitnote")==0);
isEuro=(strcasecmp(GWEN_DB_GetCharValue(cfg, "currency", 0, "EUR"),
"EUR")==0);
/* compute number of extension sets */
extSets=0;
/* add purpose */
if (GWEN_StringList_Count(purposeList))
extSets+=GWEN_StringList_Count(purposeList)-1;
/* add name */
for (i=1; i<2; i++) { /* max 1 extset for local name */
if (GWEN_DB_GetCharValue(xa, "localName", i, 0)==0)
break;
if (i>1) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Too many name lines (maxmimum is 2)");
GWEN_StringList_free(purposeList);
return -1;
}
extSets++;
} /* for */
/* add other name */
for (i=1; i<2; i++) { /* max 1 extset for remote name */
if (GWEN_DB_GetCharValue(xa, "remoteName", i, 0)==0)
break;
if (i>1) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Too many peer name lines (maxmimum is 2)");
GWEN_StringList_free(purposeList);
return -1;
}
extSets++;
} /* for */
/* check number of extension sets */
if (extSets>15) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Too many extension sets (%d)", extSets);
GWEN_StringList_free(purposeList);
return -1;
}
/* ______________________________________________________________________
* actually write C set
*/
/* field 1, 2: record header */
snprintf(buffer, sizeof(buffer), "%04d", 187+(extSets*29));
GWEN_Buffer_AppendString(dst, buffer);
GWEN_Buffer_AppendByte(dst, 'C');
/* field 3: acting bank code */
if (AHB_DTAUS__AddNum(dst, 8, GWEN_DB_GetCharValue(cfg, "bankCode", 0, ""))) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 4: destination bank code */
p=GWEN_DB_GetCharValue(xa, "remoteBankCode", 0, 0);
if (p) {
val=AB_Value_fromString(p);
if (val==NULL) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Bad bank code");
GWEN_StringList_free(purposeList);
return -1;
}
AB_Value_AddValue(sumBankCodes, val);
AB_Value_free(val);
if (AHB_DTAUS__AddNum(dst, 8, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
}
else {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Peer bank code missing");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 5: destination account id */
p=GWEN_DB_GetCharValue(xa, "remoteAccountNumber", 0, 0);
if (p) {
val=AB_Value_fromString(p);
if (val==NULL) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Bad account id");
GWEN_StringList_free(purposeList);
return -1;
}
AB_Value_AddValue(sumAccountIds, val);
AB_Value_free(val);
if (AHB_DTAUS__AddNum(dst, 10, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
}
else {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Peer account id missing");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 6: internal customer number (0s for now) */
for (i=0; i<13; i++) GWEN_Buffer_AppendByte(dst, '0');
/* field 7a: text key */
snprintf(buffer, sizeof(buffer), "%02d", GWEN_DB_GetIntValue(xa, "textkey", 0, isDebitNote?5:51));
if (AHB_DTAUS__AddNum(dst, 2, buffer)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 7b: text key extension */
snprintf(buffer, sizeof(buffer), "%03d", GWEN_DB_GetIntValue(xa, "textkeyext", 0, 0));
if (AHB_DTAUS__AddNum(dst, 3, buffer)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 8: bank internal field */
GWEN_Buffer_AppendByte(dst, ' ');
/* field 9: value in DEM */
if (!isEuro) {
val=AB_Value_fromString(GWEN_DB_GetCharValue(xa, "value/value", 0, "0,0"));
if (val==NULL || AB_Value_IsZero(val)) {
AB_Value_free(val);
DBG_ERROR(AQBANKING_LOGDOMAIN, "Bad DEM value:");
GWEN_StringList_free(purposeList);
return -1;
}
AB_Value_AddValue(sumDEM, val);
snprintf(buffer, sizeof(buffer), "%011.0f", AB_Value_GetValueAsDouble(val)*100.0);
AB_Value_free(val);
if (AHB_DTAUS__AddNum(dst, 11, buffer)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
}
else {
if (AHB_DTAUS__AddNum(dst, 11, "0")) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
}
/* field 10: local bank code */
p=GWEN_DB_GetCharValue(xa, "localbankCode", 0, 0);
if (!p)
p=GWEN_DB_GetCharValue(cfg, "bankCode", 0, 0);
if (!p) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "No local bank code");
GWEN_StringList_free(purposeList);
return -1;
}
if (AHB_DTAUS__AddNum(dst, 8, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 11: local account id */
p=GWEN_DB_GetCharValue(xa, "localAccountNumber", 0, 0);
if (!p)
GWEN_DB_GetCharValue(cfg, "accountId", 0, 0);
if (!p) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "No local account number");
GWEN_StringList_free(purposeList);
return -1;
}
if (AHB_DTAUS__AddNum(dst, 10, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 12: value in EUR */
if (isEuro) {
val=AB_Value_fromString(GWEN_DB_GetCharValue(xa, "value/value", 0, "0,0"));
if (val==NULL || AB_Value_IsZero(val)) {
AB_Value_free(val);
DBG_ERROR(AQBANKING_LOGDOMAIN, "Bad EUR value:");
GWEN_StringList_free(purposeList);
return -1;
}
AB_Value_AddValue(sumEUR, val);
snprintf(buffer, sizeof(buffer), "%011.0f", AB_Value_GetValueAsDouble(val)*100.0);
AB_Value_free(val);
if (AHB_DTAUS__AddNum(dst, 11, buffer)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
}
else {
if (AHB_DTAUS__AddNum(dst, 11, "0")) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
}
/* field 13: blanks */
for (i=0; i<3; i++) GWEN_Buffer_AppendByte(dst, ' ');
/* field 14a: peer name */
if (AHB_DTAUS__AddWord(dst, 27, GWEN_DB_GetCharValue(xa, "remoteName", 0, ""))) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 14b: blanks */
for (i=0; i<8; i++) GWEN_Buffer_AppendByte(dst, ' ');
/* field 15: name */
if (AHB_DTAUS__AddWord(dst, 27, GWEN_DB_GetCharValue(xa, "localname", 0, ""))) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 16: purpose */
p=GWEN_StringList_FirstString(purposeList);
if (p==NULL)
p="";
if (AHB_DTAUS__AddWord(dst, 27, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
/* field 17a: currency */
if (isEuro)
GWEN_Buffer_AppendByte(dst, '1');
else
GWEN_Buffer_AppendByte(dst, ' ');
/* field 17b: blanks */
for (i=0; i<2; i++) GWEN_Buffer_AppendByte(dst, ' ');
/* field 18: number of extension sets */
snprintf(buffer, sizeof(buffer), "%02d", extSets);
if (AHB_DTAUS__AddNum(dst, 2, buffer)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
if (extSets) {
unsigned int writtenExtSets=0;
/* now append extension sets */
/* add peer name lines */
for (i=1; i<2; i++) { /* max: 1 extset */
unsigned int j;
p=GWEN_DB_GetCharValue(xa, "remoteName", i, 0);
if (!p)
break;
/* append extension set */
GWEN_Buffer_AppendString(dst, "01");
if (AHB_DTAUS__AddWord(dst, 27, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
writtenExtSets++;
if (writtenExtSets==2)
/* 2 ext sets written, so we need to align "C 2.Satzabschnitt" to 128 now */
for (j=0; j<11; j++) GWEN_Buffer_AppendByte(dst, ' ');
else if (writtenExtSets>2 && ((writtenExtSets-2) % 4)==0)
/* "C 3-5.Satzabschnitt" complete, align to 128 bytes */
for (j=0; j<12; j++) GWEN_Buffer_AppendByte(dst, ' ');
} /* for */
/* add purpose lines */
for (i=1; i<GWEN_StringList_Count(purposeList); i++) {
unsigned int j;
p=GWEN_StringList_StringAt(purposeList, i);
if (!p)
break;
/* append extension set */
GWEN_Buffer_AppendString(dst, "02");
/* strings in the list are already in DTA charset */
if (AHB_DTAUS__AddDtaWord(dst, 27, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
writtenExtSets++;
if (writtenExtSets==2)
/* 2 ext sets written, so we need to align "C 2.Satzabschnitt" to 128 now */
for (j=0; j<11; j++) GWEN_Buffer_AppendByte(dst, ' ');
else if (writtenExtSets>2 && ((writtenExtSets-2) % 4)==0)
/* "C 3-5.Satzabschnitt" complete, align to 128 bytes */
for (j=0; j<12; j++) GWEN_Buffer_AppendByte(dst, ' ');
} /* for */
/* add name lines */
for (i=1; i<2; i++) { /* max: 1 extset */
unsigned int j;
p=GWEN_DB_GetCharValue(xa, "localname", i, 0);
if (!p)
break;
/* append extension set */
GWEN_Buffer_AppendString(dst, "03");
if (AHB_DTAUS__AddWord(dst, 27, p)) {
DBG_ERROR(AQBANKING_LOGDOMAIN, "Error writing to buffer");
GWEN_StringList_free(purposeList);
return -1;
}
writtenExtSets++;
if (writtenExtSets==2)
/* 2 ext sets written, so we need to align "C 2.Satzabschnitt" to 128 now */
for (j=0; j<11; j++) GWEN_Buffer_AppendByte(dst, ' ');
else if (writtenExtSets>2 && ((writtenExtSets-2) % 4)==0)
/* "C 3-5.Satzabschnitt" complete, align to 128 bytes */
for (j=0; j<12; j++) GWEN_Buffer_AppendByte(dst, ' ');
} /* for */
}
i=((GWEN_Buffer_GetUsedBytes(dst)+127) & ~127)-GWEN_Buffer_GetUsedBytes(dst);
while(i--)
GWEN_Buffer_AppendByte(dst, ' ');
GWEN_StringList_free(purposeList);
return 0;
}
int EBC_Provider_EuSign_A005(AB_PROVIDER *pro,
AB_USER *u,
const char *requestType,
const uint8_t *pMsg,
uint32_t lMsg,
GWEN_BUFFER *sbuf)
{
EBC_PROVIDER *dp;
GWEN_BUFFER *xbuf;
GWEN_BUFFER *hbuf;
GWEN_CRYPT_TOKEN *ct;
const GWEN_CRYPT_TOKEN_CONTEXT *ctx;
const GWEN_CRYPT_TOKEN_KEYINFO *ki;
uint32_t keyId;
int ksize;
uint32_t l;
GWEN_CRYPT_PADDALGO *algo;
int rv;
int numPaddBytes=0;
const uint8_t digestInfo[]= {
0x30, 0x31, 0x30, 0x0d,
0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01,
0x05, 0x00,
0x04, 0x20
};
assert(pro);
dp=GWEN_INHERIT_GETDATA(AB_PROVIDER, EBC_PROVIDER, pro);
assert(dp);
/* get crypt token and context */
rv=EBC_Provider_MountToken(pro, u, &ct, &ctx);
if (rv<0) {
DBG_INFO(AQEBICS_LOGDOMAIN, "here (%d)", rv);
return rv;
}
/* get key id */
keyId=GWEN_Crypt_Token_Context_GetSignKeyId(ctx);
ki=GWEN_Crypt_Token_GetKeyInfo(ct,
keyId,
0xffffffff,
0);
if (ki==NULL) {
DBG_INFO(AQEBICS_LOGDOMAIN,
"Keyinfo %04x not found on crypt token [%s:%s]",
keyId,
GWEN_Crypt_Token_GetTypeName(ct),
GWEN_Crypt_Token_GetTokenName(ct));
GWEN_Crypt_Token_Close(ct, 0, 0);
return GWEN_ERROR_NOT_FOUND;
}
xbuf=GWEN_Buffer_new(0, 40, 0, 1);
EBC_Provider_Sha256(pMsg, lMsg, xbuf);
/* add digestInfo to hash of SignedInfo */
hbuf=GWEN_Buffer_new(0, 256, 0, 1);
ksize=GWEN_Crypt_Token_KeyInfo_GetKeySize(ki);
GWEN_Buffer_AppendByte(hbuf, 0x01); /* block type */
numPaddBytes=ksize-3-sizeof(digestInfo)-GWEN_Buffer_GetUsedBytes(xbuf);
if (numPaddBytes<1) {
DBG_ERROR(AQEBICS_LOGDOMAIN, "Invalid number of padd bytes, key too small (%d)", numPaddBytes);
GWEN_Buffer_free(xbuf);
GWEN_Buffer_free(hbuf);
return GWEN_ERROR_INTERNAL;
}
GWEN_Buffer_FillWithBytes(hbuf, 0xff, numPaddBytes);
GWEN_Buffer_AppendByte(hbuf, 0x01); /* separator */
GWEN_Buffer_AppendBytes(hbuf, (const char *)digestInfo, sizeof(digestInfo)); /* digest info */
GWEN_Buffer_AppendBytes(hbuf, GWEN_Buffer_GetStart(xbuf), GWEN_Buffer_GetUsedBytes(xbuf)); /* hash */
GWEN_Buffer_free(xbuf);
/* select padd algo */
algo=GWEN_Crypt_PaddAlgo_new(GWEN_Crypt_PaddAlgoId_None);
GWEN_Crypt_PaddAlgo_SetPaddSize(algo, ksize);
/* actually sign */
GWEN_Buffer_AllocRoom(sbuf, ksize+16);
l=GWEN_Buffer_GetMaxUnsegmentedWrite(sbuf);
rv=GWEN_Crypt_Token_Sign(ct, keyId,
algo,
(const uint8_t *)GWEN_Buffer_GetStart(hbuf),
GWEN_Buffer_GetUsedBytes(hbuf),
(uint8_t *)GWEN_Buffer_GetPosPointer(sbuf),
&l,
NULL, /* ignore seq counter */
0);
GWEN_Crypt_PaddAlgo_free(algo);
if (rv<0) {
DBG_INFO(AQEBICS_LOGDOMAIN, "here (%d)", rv);
GWEN_Buffer_free(hbuf);
return rv;
}
GWEN_Buffer_IncrementPos(sbuf, l);
GWEN_Buffer_AdjustUsedBytes(sbuf);
GWEN_Buffer_free(hbuf);
return 0;
}
