1 ;;; sieve-manage.el --- Implementation of the managesieve protocol in elisp
3 ;; Copyright (C) 2001-2013 Free Software Foundation, Inc.
5 ;; Author: Simon Josefsson <simon@josefsson.org>
7 ;; This file is part of GNU Emacs.
9 ;; GNU Emacs is free software: you can redistribute it and/or modify
10 ;; it under the terms of the GNU General Public License as published by
11 ;; the Free Software Foundation, either version 3 of the License, or
12 ;; (at your option) any later version.
14 ;; GNU Emacs is distributed in the hope that it will be useful,
15 ;; but WITHOUT ANY WARRANTY; without even the implied warranty of
16 ;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 ;; GNU General Public License for more details.
19 ;; You should have received a copy of the GNU General Public License
20 ;; along with GNU Emacs. If not, see <http://www.gnu.org/licenses/>.
24 ;; This library provides an elisp API for the managesieve network
27 ;; It uses the SASL library for authentication, which means it
28 ;; supports DIGEST-MD5, CRAM-MD5, SCRAM-MD5, NTLM, PLAIN and LOGIN
29 ;; methods. STARTTLS is not well tested, but should be easy to get to
30 ;; work if someone wants.
32 ;; The API should be fairly obvious for anyone familiar with the
33 ;; managesieve protocol, interface functions include:
35 ;; `sieve-manage-open'
36 ;; open connection to managesieve server, returning a buffer to be
37 ;; used by all other API functions.
39 ;; `sieve-manage-opened'
40 ;; check if a server is open or not
42 ;; `sieve-manage-close'
43 ;; close a server connection.
45 ;; `sieve-manage-listscripts'
46 ;; `sieve-manage-deletescript'
47 ;; `sieve-manage-getscript'
48 ;; performs managesieve protocol actions
50 ;; and that's it. Example of a managesieve session in *scratch*:
52 ;; (with-current-buffer (sieve-manage-open "mail.example.com")
53 ;; (sieve-manage-authenticate)
54 ;; (sieve-manage-listscripts))
56 ;; => ((active . "main") "vacation")
60 ;; draft-martin-managesieve-02.txt,
61 ;; "A Protocol for Remotely Managing Sieve Scripts",
66 ;; 2001-10-31 Committed to Oort Gnus.
67 ;; 2002-07-27 Added DELETESCRIPT. Suggested by Ned Ludd.
68 ;; 2002-08-03 Use SASL library.
72 ;; For Emacs <22.2 and XEmacs.
74 (unless (fboundp 'declare-function) (defmacro declare-function (&rest r))))
76 (if (locate-library "password-cache")
77 (require 'password-cache)
84 (autoload 'sasl-find-mechanism "sasl")
85 (autoload 'starttls-open-stream "starttls")
86 (autoload 'auth-source-search "auth-source")
88 ;; User customizable variables:
90 (defgroup sieve-manage nil
91 "Low-level Managesieve protocol issues."
95 (defcustom sieve-manage-log "*sieve-manage-log*"
96 "Name of buffer for managesieve session trace."
100 (defcustom sieve-manage-server-eol "\r\n"
101 "The EOL string sent from the server."
103 :group 'sieve-manage)
105 (defcustom sieve-manage-client-eol "\r\n"
106 "The EOL string we send to the server."
108 :group 'sieve-manage)
110 (defcustom sieve-manage-streams '(network starttls shell)
111 "Priority of streams to consider when opening connection to server."
112 :group 'sieve-manage)
114 (defcustom sieve-manage-stream-alist
115 '((network sieve-manage-network-p sieve-manage-network-open)
116 (shell sieve-manage-shell-p sieve-manage-shell-open)
117 (starttls sieve-manage-starttls-p sieve-manage-starttls-open))
118 "Definition of network streams.
122 NAME names the stream, CHECK is a function returning non-nil if the
123 server support the stream and OPEN is a function for opening the
125 :group 'sieve-manage)
127 (defcustom sieve-manage-authenticators '(digest-md5
133 "Priority of authenticators to consider when authenticating to server."
134 :group 'sieve-manage)
136 (defcustom sieve-manage-authenticator-alist
137 '((cram-md5 sieve-manage-cram-md5-p sieve-manage-cram-md5-auth)
138 (digest-md5 sieve-manage-digest-md5-p sieve-manage-digest-md5-auth)
139 (scram-md5 sieve-manage-scram-md5-p sieve-manage-scram-md5-auth)
140 (ntlm sieve-manage-ntlm-p sieve-manage-ntlm-auth)
141 (plain sieve-manage-plain-p sieve-manage-plain-auth)
142 (login sieve-manage-login-p sieve-manage-login-auth))
143 "Definition of authenticators.
145 \(NAME CHECK AUTHENTICATE)
147 NAME names the authenticator. CHECK is a function returning non-nil if
148 the server support the authenticator and AUTHENTICATE is a function
149 for doing the actual authentication."
150 :group 'sieve-manage)
152 (defcustom sieve-manage-default-port "sieve"
153 "Default port number or service name for managesieve protocol."
154 :type '(choice integer string)
156 :group 'sieve-manage)
158 (defcustom sieve-manage-default-stream 'network
159 "Default stream type to use for `sieve-manage'.
160 Must be a name of a stream in `sieve-manage-stream-alist'."
163 :group 'sieve-manage)
165 ;; Internal variables:
167 (defconst sieve-manage-local-variables '(sieve-manage-server
172 sieve-manage-client-eol
173 sieve-manage-server-eol
174 sieve-manage-capability))
175 (defconst sieve-manage-coding-system-for-read 'binary)
176 (defconst sieve-manage-coding-system-for-write 'binary)
177 (defvar sieve-manage-stream nil)
178 (defvar sieve-manage-auth nil)
179 (defvar sieve-manage-server nil)
180 (defvar sieve-manage-port nil)
181 (defvar sieve-manage-state 'closed
183 Valid states are `closed', `initial', `nonauth', and `auth'.")
184 (defvar sieve-manage-process nil)
185 (defvar sieve-manage-capability nil)
187 ;; Internal utility functions
189 (defmacro sieve-manage-disable-multibyte ()
190 "Enable multibyte in the current buffer."
191 (unless (featurep 'xemacs)
192 '(set-buffer-multibyte nil)))
194 (defun sieve-manage-erase (&optional p buffer)
195 (let ((buffer (or buffer (current-buffer))))
196 (and sieve-manage-log
197 (with-current-buffer (get-buffer-create sieve-manage-log)
198 (sieve-manage-disable-multibyte)
199 (buffer-disable-undo)
200 (goto-char (point-max))
201 (insert-buffer-substring buffer (with-current-buffer buffer
203 (or p (with-current-buffer buffer
205 (delete-region (point-min) (or p (point-max))))
207 (defun sieve-manage-open-1 (buffer)
208 (with-current-buffer buffer
210 (setq sieve-manage-state 'initial
213 (funcall (nth 2 (assq sieve-manage-stream
214 sieve-manage-stream-alist))
215 "sieve" buffer sieve-manage-server sieve-manage-port)
217 (when sieve-manage-process
218 (while (and (eq sieve-manage-state 'initial)
219 (memq (process-status sieve-manage-process) '(open run)))
220 (message "Waiting for response from %s..." sieve-manage-server)
221 (accept-process-output sieve-manage-process 1))
222 (message "Waiting for response from %s...done" sieve-manage-server)
223 (and (memq (process-status sieve-manage-process) '(open run))
224 sieve-manage-process))))
228 (defun sieve-manage-network-p (buffer)
231 (defun sieve-manage-network-open (name buffer server port)
232 (let* ((port (or port sieve-manage-default-port))
233 (coding-system-for-read sieve-manage-coding-system-for-read)
234 (coding-system-for-write sieve-manage-coding-system-for-write)
235 (process (open-network-stream name buffer server port)))
237 (while (and (memq (process-status process) '(open run))
238 (set-buffer buffer) ;; XXX "blue moon" nntp.el bug
239 (goto-char (point-min))
240 (not (sieve-manage-parse-greeting-1)))
241 (accept-process-output process 1)
243 (sieve-manage-erase nil buffer)
244 (when (memq (process-status process) '(open run))
247 (defun sieve-manage-starttls-p (buffer)
251 (call-process "starttls"))
254 (defun sieve-manage-starttls-open (name buffer server port)
255 (let* ((port (or port sieve-manage-default-port))
256 (coding-system-for-read sieve-manage-coding-system-for-read)
257 (coding-system-for-write sieve-manage-coding-system-for-write)
258 (process (starttls-open-stream name buffer server port))
261 (while (and (memq (process-status process) '(open run))
262 (set-buffer buffer) ;; XXX "blue moon" nntp.el bug
263 (goto-char (point-min))
264 (not (sieve-manage-parse-greeting-1)))
265 (accept-process-output process 1)
267 (sieve-manage-erase nil buffer)
268 (sieve-manage-send "STARTTLS")
269 (starttls-negotiate process))
270 (when (memq (process-status process) '(open run))
274 (defun sieve-sasl-auth (buffer mech)
275 "Login to server using the SASL MECH method."
276 (message "sieve: Authenticating using %s..." mech)
277 (with-current-buffer buffer
278 (let* ((auth-info (auth-source-search :host sieve-manage-server
282 (user-name (or (plist-get (nth 0 auth-info) :user) ""))
283 (user-password (or (plist-get (nth 0 auth-info) :secret) ""))
284 (user-password (if (functionp user-password)
285 (funcall user-password)
287 (client (sasl-make-client (sasl-find-mechanism (list mech))
288 user-name "sieve" sieve-manage-server))
289 (sasl-read-passphrase
290 ;; We *need* to copy the password, because sasl will modify it
292 `(lambda (prompt) ,(copy-sequence user-password)))
293 (step (sasl-next-step client nil))
294 (tag (sieve-manage-send
299 (and (sasl-step-data step)
302 (base64-encode-string
303 (sasl-step-data step)
310 (goto-char (point-min))
311 (while (null (or (progn
312 (setq rsp (sieve-manage-is-string))
313 (if (not (and rsp (looking-at
314 sieve-manage-server-eol)))
316 (goto-char (match-end 0))
318 (setq rsp (sieve-manage-is-okno))))
319 (accept-process-output sieve-manage-process 1)
320 (goto-char (point-min)))
322 (when (sieve-manage-ok-p rsp)
323 (when (and (cadr rsp)
324 (string-match "^SASL \"\\([^\"]+\\)\"" (cadr rsp)))
326 step (base64-decode-string (match-string 1 (cadr rsp)))))
327 (if (and (setq step (sasl-next-step client step))
328 (setq data (sasl-step-data step)))
329 ;; We got data for server but it's finished
330 (error "Server not ready for SASL data: %s" data)
331 ;; The authentication process is finished.
333 (unless (stringp rsp)
334 (error "Server aborted SASL authentication: %s" (caddr rsp)))
335 (sasl-step-set-data step (base64-decode-string rsp))
336 (setq step (sasl-next-step client step))
338 (if (sasl-step-data step)
340 (base64-encode-string (sasl-step-data step)
344 (message "sieve: Login using %s...done" mech))))
346 (defun sieve-manage-cram-md5-p (buffer)
347 (sieve-manage-capability "SASL" "CRAM-MD5" buffer))
349 (defun sieve-manage-cram-md5-auth (buffer)
350 "Login to managesieve server using the CRAM-MD5 SASL method."
351 (sieve-sasl-auth buffer "CRAM-MD5"))
353 (defun sieve-manage-digest-md5-p (buffer)
354 (sieve-manage-capability "SASL" "DIGEST-MD5" buffer))
356 (defun sieve-manage-digest-md5-auth (buffer)
357 "Login to managesieve server using the DIGEST-MD5 SASL method."
358 (sieve-sasl-auth buffer "DIGEST-MD5"))
360 (defun sieve-manage-scram-md5-p (buffer)
361 (sieve-manage-capability "SASL" "SCRAM-MD5" buffer))
363 (defun sieve-manage-scram-md5-auth (buffer)
364 "Login to managesieve server using the SCRAM-MD5 SASL method."
365 (sieve-sasl-auth buffer "SCRAM-MD5"))
367 (defun sieve-manage-ntlm-p (buffer)
368 (sieve-manage-capability "SASL" "NTLM" buffer))
370 (defun sieve-manage-ntlm-auth (buffer)
371 "Login to managesieve server using the NTLM SASL method."
372 (sieve-sasl-auth buffer "NTLM"))
374 (defun sieve-manage-plain-p (buffer)
375 (sieve-manage-capability "SASL" "PLAIN" buffer))
377 (defun sieve-manage-plain-auth (buffer)
378 "Login to managesieve server using the PLAIN SASL method."
379 (sieve-sasl-auth buffer "PLAIN"))
381 (defun sieve-manage-login-p (buffer)
382 (sieve-manage-capability "SASL" "LOGIN" buffer))
384 (defun sieve-manage-login-auth (buffer)
385 "Login to managesieve server using the LOGIN SASL method."
386 (sieve-sasl-auth buffer "LOGIN"))
390 (defun sieve-manage-open (server &optional port stream auth buffer)
391 "Open a network connection to a managesieve SERVER (string).
392 Optional argument PORT is port number (integer) on remote server.
393 Optional argument STREAM is any of `sieve-manage-streams' (a symbol).
394 Optional argument AUTH indicates authenticator to use, see
395 `sieve-manage-authenticators' for available authenticators.
396 If nil, chooses the best stream the server is capable of.
397 Optional argument BUFFER is buffer (buffer, or string naming buffer)
399 (or port (setq port sieve-manage-default-port))
400 (setq buffer (or buffer (format " *sieve* %s:%s" server port)))
401 (with-current-buffer (get-buffer-create buffer)
402 (mapc 'make-local-variable sieve-manage-local-variables)
403 (sieve-manage-disable-multibyte)
404 (buffer-disable-undo)
405 (setq sieve-manage-server (or server sieve-manage-server))
406 (setq sieve-manage-port port)
407 (setq sieve-manage-stream (or stream sieve-manage-stream))
408 (message "sieve: Connecting to %s..." sieve-manage-server)
409 (if (let ((sieve-manage-stream
410 (or sieve-manage-stream sieve-manage-default-stream)))
411 (sieve-manage-open-1 buffer))
413 (let (stream-changed)
414 (message "sieve: Connecting to %s...done" sieve-manage-server)
415 (when (null sieve-manage-stream)
416 (let ((streams sieve-manage-streams))
417 (while (setq stream (pop streams))
418 (if (funcall (nth 1 (assq stream
419 sieve-manage-stream-alist)) buffer)
421 (not (eq (or sieve-manage-stream
422 sieve-manage-default-stream)
424 sieve-manage-stream stream
426 (unless sieve-manage-stream
427 (error "Couldn't figure out a stream for server"))))
429 (message "sieve: Reconnecting with stream `%s'..."
431 (sieve-manage-close buffer)
432 (if (sieve-manage-open-1 buffer)
433 (message "sieve: Reconnecting with stream `%s'...done"
435 (message "sieve: Reconnecting with stream `%s'...failed"
436 sieve-manage-stream))
437 (setq sieve-manage-capability nil))
438 (if (sieve-manage-opened buffer)
439 ;; Choose authenticator
440 (when (and (null sieve-manage-auth)
441 (not (eq sieve-manage-state 'auth)))
442 (let ((auths sieve-manage-authenticators))
443 (while (setq auth (pop auths))
444 (if (funcall (nth 1 (assq
446 sieve-manage-authenticator-alist))
448 (setq sieve-manage-auth auth
450 (unless sieve-manage-auth
451 (error "Couldn't figure out authenticator for server"))))))
452 (message "sieve: Connecting to %s...failed" sieve-manage-server))
453 (when (sieve-manage-opened buffer)
457 (defun sieve-manage-authenticate (&optional buffer)
458 "Authenticate on server in BUFFER.
459 Return `sieve-manage-state' value."
460 (with-current-buffer (or buffer (current-buffer))
461 (if (eq sieve-manage-state 'nonauth)
462 (when (funcall (nth 2 (assq sieve-manage-auth
463 sieve-manage-authenticator-alist))
465 (setq sieve-manage-state 'auth))
466 sieve-manage-state)))
468 (defun sieve-manage-opened (&optional buffer)
469 "Return non-nil if connection to managesieve server in BUFFER is open.
470 If BUFFER is nil then the current buffer is used."
471 (and (setq buffer (get-buffer (or buffer (current-buffer))))
472 (buffer-live-p buffer)
473 (with-current-buffer buffer
474 (and sieve-manage-process
475 (memq (process-status sieve-manage-process) '(open run))))))
477 (defun sieve-manage-close (&optional buffer)
478 "Close connection to managesieve server in BUFFER.
479 If BUFFER is nil, the current buffer is used."
480 (with-current-buffer (or buffer (current-buffer))
481 (when (sieve-manage-opened)
482 (sieve-manage-send "LOGOUT")
484 (when (and sieve-manage-process
485 (memq (process-status sieve-manage-process) '(open run)))
486 (delete-process sieve-manage-process))
487 (setq sieve-manage-process nil)
491 (defun sieve-manage-capability (&optional name value buffer)
492 "Check if capability NAME of server BUFFER match VALUE.
493 If it does, return the server value of NAME. If not returns nil.
494 If VALUE is nil, do not check VALUE and return server value.
495 If NAME is nil, return the full server list of capabilities."
496 (with-current-buffer (or buffer (current-buffer))
498 sieve-manage-capability
499 (let ((server-value (cadr (assoc name sieve-manage-capability))))
500 (when (or (null value)
502 (string-match value server-value)))
505 (defun sieve-manage-listscripts (&optional buffer)
506 (with-current-buffer (or buffer (current-buffer))
507 (sieve-manage-send "LISTSCRIPTS")
508 (sieve-manage-parse-listscripts)))
510 (defun sieve-manage-havespace (name size &optional buffer)
511 (with-current-buffer (or buffer (current-buffer))
512 (sieve-manage-send (format "HAVESPACE \"%s\" %s" name size))
513 (sieve-manage-parse-okno)))
515 (defun sieve-manage-putscript (name content &optional buffer)
516 (with-current-buffer (or buffer (current-buffer))
517 (sieve-manage-send (format "PUTSCRIPT \"%s\" {%d+}%s%s" name
518 ;; Here we assume that the coding-system will
519 ;; replace each char with a single byte.
520 ;; This is always the case if `content' is
523 sieve-manage-client-eol content))
524 (sieve-manage-parse-okno)))
526 (defun sieve-manage-deletescript (name &optional buffer)
527 (with-current-buffer (or buffer (current-buffer))
528 (sieve-manage-send (format "DELETESCRIPT \"%s\"" name))
529 (sieve-manage-parse-okno)))
531 (defun sieve-manage-getscript (name output-buffer &optional buffer)
532 (with-current-buffer (or buffer (current-buffer))
533 (sieve-manage-send (format "GETSCRIPT \"%s\"" name))
534 (let ((script (sieve-manage-parse-string)))
535 (sieve-manage-parse-crlf)
536 (with-current-buffer output-buffer
538 (sieve-manage-parse-okno))))
540 (defun sieve-manage-setactive (name &optional buffer)
541 (with-current-buffer (or buffer (current-buffer))
542 (sieve-manage-send (format "SETACTIVE \"%s\"" name))
543 (sieve-manage-parse-okno)))
545 ;; Protocol parsing routines
547 (defun sieve-manage-ok-p (rsp)
548 (string= (downcase (or (car-safe rsp) "")) "ok"))
550 (defsubst sieve-manage-forward ()
551 (or (eobp) (forward-char)))
553 (defun sieve-manage-is-okno ()
554 (when (looking-at (concat
555 "^\\(OK\\|NO\\)\\( (\\([^)]+\\))\\)?\\( \\(.*\\)\\)?"
556 sieve-manage-server-eol))
557 (let ((status (match-string 1))
558 (resp-code (match-string 3))
559 (response (match-string 5)))
561 (goto-char (match-beginning 5))
562 (setq response (sieve-manage-is-string)))
563 (list status resp-code response))))
565 (defun sieve-manage-parse-okno ()
568 (accept-process-output (get-buffer-process (current-buffer)) 1)
569 (goto-char (point-min))
570 (setq rsp (sieve-manage-is-okno)))
574 (defun sieve-manage-parse-capability-1 ()
575 "Accept a managesieve greeting."
577 (while (setq str (sieve-manage-is-string))
578 (if (eq (char-after) ? )
580 (sieve-manage-forward)
581 (push (list str (sieve-manage-is-string))
582 sieve-manage-capability))
583 (push (list str) sieve-manage-capability))
585 (when (re-search-forward (concat "^OK.*" sieve-manage-server-eol) nil t)
586 (setq sieve-manage-state 'nonauth)))
588 (defalias 'sieve-manage-parse-greeting-1 'sieve-manage-parse-capability-1)
590 (defun sieve-manage-is-string ()
591 (cond ((looking-at "\"\\([^\"]+\\)\"")
594 (goto-char (match-end 0))))
595 ((looking-at (concat "{\\([0-9]+\\+?\\)}" sieve-manage-server-eol))
596 (let ((pos (match-end 0))
597 (len (string-to-number (match-string 1))))
598 (if (< (point-max) (+ pos len))
600 (goto-char (+ pos len))
601 (buffer-substring pos (+ pos len)))))))
603 (defun sieve-manage-parse-string ()
606 (accept-process-output (get-buffer-process (current-buffer)) 1)
607 (goto-char (point-min))
608 (setq rsp (sieve-manage-is-string)))
609 (sieve-manage-erase (point))
612 (defun sieve-manage-parse-crlf ()
613 (when (looking-at sieve-manage-server-eol)
614 (sieve-manage-erase (match-end 0))))
616 (defun sieve-manage-parse-listscripts ()
619 (while (null (or (setq rsp (sieve-manage-is-okno))
620 (setq tmp (sieve-manage-is-string))))
621 (accept-process-output (get-buffer-process (current-buffer)) 1)
622 (goto-char (point-min)))
624 (while (not (looking-at (concat "\\( ACTIVE\\)?"
625 sieve-manage-server-eol)))
626 (accept-process-output (get-buffer-process (current-buffer)) 1)
627 (goto-char (point-min)))
629 (push (cons 'active tmp) data)
631 (goto-char (match-end 0))
634 (if (sieve-manage-ok-p rsp)
638 (defun sieve-manage-send (cmdstr)
639 (setq cmdstr (concat cmdstr sieve-manage-client-eol))
640 (and sieve-manage-log
641 (with-current-buffer (get-buffer-create sieve-manage-log)
642 (sieve-manage-disable-multibyte)
643 (buffer-disable-undo)
644 (goto-char (point-max))
646 (process-send-string sieve-manage-process cmdstr))
648 (provide 'sieve-manage)
650 ;; sieve-manage.el ends here