trustbridge: ui/certificate.cpp annotate

annotate ui/certificate.cpp @ 633:6c090638b2b4

Use static buffer for module file name. According to the msdn examle the return value of getmodulefilename should be used to indicate success and not the size. And according to comments on that function on Windows 8.1 it does not return the needed size. So better be more robust and just use max_path as a limit.

author	Andre Heinecke <andre.heinecke@intevation.de>
date	Mon, 23 Jun 2014 15:29:48 +0200
parents	bf445b0e1126
children	320a64d58e62

rev	line source
404 17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	1 /* Copyright (C) 2014 by Bundesamt für Sicherheit in der Informationstechnik
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	2 * Software engineering by Intevation GmbH
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	3 *
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	4 * This file is Free Software under the GNU GPL (v>=2)
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	5 * and comes with ABSOLUTELY NO WARRANTY!
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	6 * See LICENSE.txt for details.
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	7 */
21 dc1e1e9e62ce Add certificate class and use it Andre Heinecke <aheinecke@intevation.de> parents: diff changeset	8 #include "certificate.h"
82 1f27d6db5ee3 Polarssl based certificate handling Andre Heinecke <aheinecke@intevation.de> parents: 81 diff changeset	9 #include <QDebug>
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	10 #include <QFile>
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	11 #include <QStringList>
21 dc1e1e9e62ce Add certificate class and use it Andre Heinecke <aheinecke@intevation.de> parents: diff changeset	12 #include <QObject>
dc1e1e9e62ce Add certificate class and use it Andre Heinecke <aheinecke@intevation.de> parents: diff changeset	13
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	14 #include <polarssl/sha1.h>
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	15
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	16 #include "certhelp.h"
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	17 #include "listutil.h"
94 f1ebab8639dc Do not save the x509 cert as a member variable Andre Heinecke <aheinecke@intevation.de> parents: 83 diff changeset	18
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	19 /* Qt wrapper around certhelp functions. */
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	20 QString getX509Value(x509_name namebuf, unsigned char oid) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	21 QString retval;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	22 char * buf = get_oid_valstr(namebuf, oid);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	23 if (buf == NULL) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	24 return retval;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	25 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	26 retval = QString::fromUtf8(buf, -1);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	27 free(buf);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	28 return retval;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	29 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	30
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	31 void Certificate::parseDetails(const QByteArray& cert) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	32 x509_crt chain;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	33
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	34 x509_crt_init(&chain);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	35 if (x509_crt_parse_der(&chain, (const unsigned char *)cert.data(),
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	36 cert.size()) != 0) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	37 qDebug() << "Failed to parse cert..";
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	38 return;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	39 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	40
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	41 mValidFrom = QDateTime(QDate(chain.valid_from.year,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	42 chain.valid_from.mon,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	43 chain.valid_from.day),
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	44 QTime(chain.valid_from.hour,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	45 chain.valid_from.min,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	46 chain.valid_from.sec));
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	47
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	48 mValidTo = QDateTime(QDate(chain.valid_to.year,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	49 chain.valid_to.mon,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	50 chain.valid_to.day),
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	51 QTime(chain.valid_to.hour,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	52 chain.valid_to.min,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	53 chain.valid_to.sec));
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	54
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	55 mSubjectCN = getX509Value(&(chain.subject), CERT_OID_CN);
380 1220b741cd51 Add some more fields for a certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 379 diff changeset	56 mIssuerCN = getX509Value(&(chain.issuer), CERT_OID_CN);
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	57 mSubjectOU = getX509Value(&(chain.subject), CERT_OID_OU);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	58 mSubjectO = getX509Value(&(chain.subject), CERT_OID_O);
380 1220b741cd51 Add some more fields for a certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 379 diff changeset	59 mIssuerO = getX509Value(&(chain.issuer), CERT_OID_O);
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	60 mSubjectSN = getX509Value(&(chain.subject), CERT_OID_SN);
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	61
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	62 /* Calculate sha1 fingerprint */
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	63 unsigned char sha1sum[20];
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	64 sha1(chain.raw.p, chain.raw.len, sha1sum);
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	65 for (int i=0; i < 20; i++) {
403 7a15a3066f7b Fill to two characters Andre Heinecke <aheinecke@intevation.de> parents: 380 diff changeset	66 mFingerprint += QString("%1").arg(sha1sum[i], 0, 16).rightJustified(2, '0');
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	67 if (i != 19) {
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	68 mFingerprint += ":";
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	69 }
379 2ddc685cba33 Make the fingerprint uppercase Andre Heinecke <andre.heinecke@intevation.de> parents: 378 diff changeset	70 mFingerprint = mFingerprint.toUpper();
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	71 }
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	72
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	73 x509_crt_free(&chain);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	74
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	75 mDetails = QObject::tr("Certificate:\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	76 " <bold>%1</bold>\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	77 " %2, %3\n\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	78 "Serial number:\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	79 "%4\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	80 "Valid from: <bold>%5</bold> to <bold>%6</bold>\n\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	81 "Issued by: ..")
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	82 .arg(mSubjectCN)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	83 .arg(mSubjectO)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	84 .arg(mSubjectOU)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	85 .arg(mSubjectSN)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	86 .arg(QLocale::system().toString(mValidFrom))
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	87 .arg(QLocale::system().toString(mValidTo));
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	88
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	89 }
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	90
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	91 Certificate::Certificate(const QByteArray& derData) :
547 bf445b0e1126 Certificate: initialising member variable mEditable in the constructors. Bernhard Reiter <bernhard@intevation.de> parents: 530 diff changeset	92 mValid(false),
bf445b0e1126 Certificate: initialising member variable mEditable in the constructors. Bernhard Reiter <bernhard@intevation.de> parents: 530 diff changeset	93 mEditable(false)
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	94 {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	95 if (derData.isEmpty()) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	96 return;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	97 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	98
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	99 parseDetails(derData);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	100
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	101 mValid = !mSubjectCN.isEmpty();
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	102
356 67b471c4d1fc Default for loaded certificates from file to install Andre Heinecke <andre.heinecke@intevation.de> parents: 355 diff changeset	103 /* Default is installation for new certificates */
67b471c4d1fc Default for loaded certificates from file to install Andre Heinecke <andre.heinecke@intevation.de> parents: 355 diff changeset	104 mBaseLine = QString::fromLatin1("I:") + derData.toBase64();
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	105 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	106
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	107 Certificate::Certificate(const QString& b64Line) :
547 bf445b0e1126 Certificate: initialising member variable mEditable in the constructors. Bernhard Reiter <bernhard@intevation.de> parents: 530 diff changeset	108 mValid(false),
bf445b0e1126 Certificate: initialising member variable mEditable in the constructors. Bernhard Reiter <bernhard@intevation.de> parents: 530 diff changeset	109 mEditable(false)
81 112228bd7e4b Remove platform specific certificate immplementations. Andre Heinecke <aheinecke@intevation.de> parents: 78 diff changeset	110 {
204 825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	111 if (b64Line.isEmpty()) {
825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	112 return;
825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	113 }
825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	114
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	115 /* Cut of the first two chars (e.g. I: and decode) */
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	116 QByteArray derData = QByteArray::fromBase64(
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	117 b64Line.right(b64Line.size() - 2).toLatin1());
ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	118
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	119 parseDetails(derData);
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	120
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	121 /* If the subject CN is set then at least one x509parse
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	122 * in polarssl was successfull. And a root certificate
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	123 * always needs to have a subject CN */
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	124 mValid = !mSubjectCN.isEmpty();
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	125
ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	126 mBaseLine = b64Line;
81 112228bd7e4b Remove platform specific certificate immplementations. Andre Heinecke <aheinecke@intevation.de> parents: 78 diff changeset	127 }
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	128
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	129 QString Certificate::shortDescription() const {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	130 if (!isValid()) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	131 return QObject::tr("Failed to parse certificate");
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	132 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	133
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	134 QString ret = mSubjectCN; /* Necessary by definition */
530 fb47bab4c71a Only show CN als shortDescription Andre Heinecke <aheinecke@intevation.de> parents: 404 diff changeset	135 /*
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	136 if (!mSubjectO.isEmpty()) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	137 ret += " - " + mSubjectO;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	138 }
530 fb47bab4c71a Only show CN als shortDescription Andre Heinecke <aheinecke@intevation.de> parents: 404 diff changeset	139 */
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	140 return ret;
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	141 }
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	142
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	143 QList<Certificate> Certificate::fromFileName(const QString& file_name) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	144 /* We read the file using Qt to avoid filename encoding problems
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	145 * on Windows */
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	146
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	147 /* TODO change qDebug errors into messageboxes */
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	148 QFile certificateFile(file_name);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	149 QByteArray fileContent;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	150 QList<Certificate> retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	151 x509_crt chain;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	152 int ret = 0;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	153 if (!certificateFile.open(QIODevice::ReadOnly)) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	154 qDebug() << "Failed to read file.";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	155 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	156 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	157
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	158 if (certificateFile.size() > MAX_LINE_LENGTH * MAX_LINES) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	159 qDebug() << "File too large";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	160 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	161 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	162
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	163 fileContent = certificateFile.readAll();
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	164
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	165 x509_crt_init(&chain);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	166
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	167 ret = x509_crt_parse(&chain,
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	168 reinterpret_cast<const unsigned char*>(fileContent.constData()),
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	169 fileContent.size());
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	170
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	171 if (ret < 0) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	172 qDebug() << "Failed to parse certificates.";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	173 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	174 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	175
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	176 if (ret > 0) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	177 qDebug() << "Some certificates could not be parsed.";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	178 /* Maybe return here? */
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	179 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	180
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	181 x509_crt *iter = &chain;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	182
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	183 while (iter) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	184 QByteArray derData(reinterpret_cast<const char*>(iter->raw.p),
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	185 static_cast<int>(iter->raw.len));
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	186 retval << Certificate(derData);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	187 iter = iter->next;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	188 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	189 x509_crt_free(&chain);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	190
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	191 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	192 }
355 5f1494fab517 merged. Raimund Renkert <rrenkert@intevation.de> parents: 352 349 diff changeset	193
352 b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	194 void Certificate::setInstallCert(bool install)
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	195 {
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	196 if (install && mBaseLine.startsWith("R:")) {
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	197 mBaseLine.replace(0, 1, "I");
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	198 }
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	199 else if (!install && mBaseLine.startsWith("I:")) {
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	200 mBaseLine.replace(0, 1, "R");
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	201 }
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	202 }

Mercurial > trustbridge

annotate ui/certificate.cpp @ 633:6c090638b2b4