crymap 2.0.1

A simple, secure IMAP server with encrypted data at rest
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130

//-
// Copyright (c) 2023, 2024, 2025, Jason Lingle
//
// This file is part of Crymap.
//
// Crymap is free software: you can  redistribute it and/or modify it under the
// terms of  the GNU General Public  License as published by  the Free Software
// Foundation, either version  3 of the License, or (at  your option) any later
// version.
//
// Crymap is distributed  in the hope that  it will be useful,  but WITHOUT ANY
// WARRANTY; without  even the implied  warranty of MERCHANTABILITY  or FITNESS
// FOR  A PARTICULAR  PURPOSE.  See the  GNU General  Public  License for  more
// details.
//
// You should have received a copy of the GNU General Public License along with
// Crymap. If not, see <http://www.gnu.org/licenses/>.

use std::fs;
use std::io::{Read, Write};

use chrono::prelude::*;

use super::{super::account_config_file, defs::*};
use crate::{
    account::model::*,
    support::{error::Error, safe_name::is_safe_name, user_config::UserConfig},
};

impl Account {
    /// Load and return the user's current configuration.
    ///
    /// This may not be the exact configuration currently applied.
    pub fn load_config(&self) -> Result<UserConfig, Error> {
        let config_file = account_config_file(&self.root);
        let mut data = Vec::new();
        fs::File::open(config_file)?.read_to_end(&mut data)?;

        let config: UserConfig = toml::from_slice(&data)?;
        Ok(config)
    }

    /// Update the user's configuration.
    ///
    /// The changes do not apply to the current connection.
    ///
    /// Returns the location of the backup file this creates.
    pub fn update_config(
        &self,
        request: SetUserConfigRequest,
    ) -> Result<String, Error> {
        let config_file = account_config_file(&self.root);
        let mut config = self.load_config()?;
        let now = Utc::now();

        if let Some(internal_key_pattern) = request.internal_key_pattern {
            if !is_valid_key_pattern(&internal_key_pattern) {
                return Err(Error::UnsafeName);
            }

            // We need to format the keys with some date to check the patterns
            // for validity because they contain % in raw form, which makes for
            // an unsafe name.
            if !is_safe_name(&format!("{}", now.format(&internal_key_pattern)))
            {
                return Err(Error::UnsafeName);
            }

            config.key_store.internal_key_pattern = internal_key_pattern;
        }

        if let Some(external_key_pattern) = request.external_key_pattern {
            if !is_valid_key_pattern(&external_key_pattern) {
                return Err(Error::UnsafeName);
            }

            if !is_safe_name(&format!("{}", now.format(&external_key_pattern)))
            {
                return Err(Error::UnsafeName);
            }

            config.key_store.external_key_pattern = external_key_pattern;
        }

        if let Some(password) = request.password {
            config.master_key = self
                .master_key
                .make_config(password.as_bytes())
                .expect("argon2 hash failed");
            config.master_key.last_changed = Some(now.into());
        }

        if let Some(save) = request.smtp_out_save {
            config.smtp_out.save = save;
        }

        if let Some(success_receipts) = request.smtp_out_success_receipts {
            config.smtp_out.success_receipts = success_receipts;
        }

        if let Some(failure_receipts) = request.smtp_out_failure_receipts {
            config.smtp_out.failure_receipts = failure_receipts;
        }

        let config_toml =
            toml::to_vec(&config).expect("TOML serialisation failed");

        let mut tmpfile =
            tempfile::NamedTempFile::new_in(&self.common_paths.tmp)?;
        tmpfile.write_all(&config_toml)?;

        let backup_name = format!("config-backup-{}.toml", now.to_rfc3339());
        let backup_file = self.common_paths.tmp.join(&backup_name);
        nix::unistd::linkat(
            None,
            &config_file,
            None,
            &backup_file,
            nix::unistd::LinkatFlags::NoSymlinkFollow,
        )?;
        tmpfile.persist(&config_file).map_err(|e| e.error)?;

        Ok(backup_name)
    }
}

fn is_valid_key_pattern(pattern: &str) -> bool {
    chrono::format::strftime::StrftimeItems::new(pattern)
        .all(|r| !matches!(r, chrono::format::Item::Error))
}