trustbridge: ui/certificate.cpp annotate

annotate ui/certificate.cpp @ 1332:8362e30f7b55

(issue139) Check that pid is not running if the lock can be aquired If the lock on the lockfile can be aquired it might still be possible that another process is running. So we read the pid from the lockfile and check if another process with the same installation prefix as us is running.

author	Andre Heinecke <andre.heinecke@intevation.de>
date	Wed, 15 Oct 2014 14:19:46 +0200
parents	60e481aa75ca
children

rev	line source
404 17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	1 /* Copyright (C) 2014 by Bundesamt für Sicherheit in der Informationstechnik
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	2 * Software engineering by Intevation GmbH
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	3 *
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	4 * This file is Free Software under the GNU GPL (v>=2)
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	5 * and comes with ABSOLUTELY NO WARRANTY!
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	6 * See LICENSE.txt for details.
17e1c8f37d72 Add License Andre Heinecke <aheinecke@intevation.de> parents: 403 diff changeset	7 */
21 dc1e1e9e62ce Add certificate class and use it Andre Heinecke <aheinecke@intevation.de> parents: diff changeset	8 #include "certificate.h"
82 1f27d6db5ee3 Polarssl based certificate handling Andre Heinecke <aheinecke@intevation.de> parents: 81 diff changeset	9 #include <QDebug>
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	10 #include <QFile>
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	11 #include <QStringList>
21 dc1e1e9e62ce Add certificate class and use it Andre Heinecke <aheinecke@intevation.de> parents: diff changeset	12 #include <QObject>
1297 c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	13 #include <QProcess>
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	14 #include <QTemporaryFile>
21 dc1e1e9e62ce Add certificate class and use it Andre Heinecke <aheinecke@intevation.de> parents: diff changeset	15
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	16 #include <polarssl/sha1.h>
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	17
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	18 #include "certhelp.h"
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	19 #include "listutil.h"
94 f1ebab8639dc Do not save the x509 cert as a member variable Andre Heinecke <aheinecke@intevation.de> parents: 83 diff changeset	20
1288 265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	21 #ifdef WIN32
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	22 #include <cryptuiapi.h>
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	23 #endif
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	24
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	25 /* Qt wrapper around certhelp functions. */
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	26 QString getX509Value(x509_name namebuf, unsigned char oid) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	27 QString retval;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	28 char * buf = get_oid_valstr(namebuf, oid);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	29 if (buf == NULL) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	30 return retval;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	31 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	32 retval = QString::fromUtf8(buf, -1);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	33 free(buf);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	34 return retval;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	35 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	36
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	37 void Certificate::parseDetails(const QByteArray& cert) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	38 x509_crt chain;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	39
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	40 x509_crt_init(&chain);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	41 if (x509_crt_parse_der(&chain, (const unsigned char *)cert.data(),
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	42 cert.size()) != 0) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	43 qDebug() << "Failed to parse cert..";
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	44 return;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	45 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	46
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	47 mValidFrom = QDateTime(QDate(chain.valid_from.year,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	48 chain.valid_from.mon,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	49 chain.valid_from.day),
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	50 QTime(chain.valid_from.hour,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	51 chain.valid_from.min,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	52 chain.valid_from.sec));
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	53
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	54 mValidTo = QDateTime(QDate(chain.valid_to.year,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	55 chain.valid_to.mon,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	56 chain.valid_to.day),
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	57 QTime(chain.valid_to.hour,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	58 chain.valid_to.min,
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	59 chain.valid_to.sec));
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	60
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	61 mSubjectCN = getX509Value(&(chain.subject), CERT_OID_CN);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	62 mSubjectOU = getX509Value(&(chain.subject), CERT_OID_OU);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	63 mSubjectO = getX509Value(&(chain.subject), CERT_OID_O);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	64 mSubjectSN = getX509Value(&(chain.subject), CERT_OID_SN);
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	65
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	66 /* Calculate sha1 fingerprint */
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	67 unsigned char sha1sum[20];
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	68 sha1(chain.raw.p, chain.raw.len, sha1sum);
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	69 for (int i=0; i < 20; i++) {
403 7a15a3066f7b Fill to two characters Andre Heinecke <aheinecke@intevation.de> parents: 380 diff changeset	70 mFingerprint += QString("%1").arg(sha1sum[i], 0, 16).rightJustified(2, '0');
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	71 if (i != 19) {
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	72 mFingerprint += ":";
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	73 }
379 2ddc685cba33 Make the fingerprint uppercase Andre Heinecke <andre.heinecke@intevation.de> parents: 378 diff changeset	74 mFingerprint = mFingerprint.toUpper();
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	75 }
31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	76
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	77 x509_crt_free(&chain);
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	78
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	79 mDetails = QObject::tr("Certificate:\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	80 " <bold>%1</bold>\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	81 " %2, %3\n\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	82 "Serial number:\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	83 "%4\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	84 "Valid from: <bold>%5</bold> to <bold>%6</bold>\n\n"
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	85 "Issued by: ..")
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	86 .arg(mSubjectCN)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	87 .arg(mSubjectO)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	88 .arg(mSubjectOU)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	89 .arg(mSubjectSN)
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	90 .arg(QLocale::system().toString(mValidFrom))
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	91 .arg(QLocale::system().toString(mValidTo));
378 31079bd54036 Add fingerprint to certificate Andre Heinecke <andre.heinecke@intevation.de> parents: 356 diff changeset	92
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	93 }
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	94
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	95 Certificate::Certificate(const QByteArray& derData) :
547 bf445b0e1126 Certificate: initialising member variable mEditable in the constructors. Bernhard Reiter <bernhard@intevation.de> parents: 530 diff changeset	96 mValid(false),
1108 9bb9932bb819 Revert commit 1101 the inactive manual changes were a bad idea Andre Heinecke <andre.heinecke@intevation.de> parents: 1101 diff changeset	97 mEditable(false)
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	98 {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	99 if (derData.isEmpty()) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	100 return;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	101 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	102
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	103 parseDetails(derData);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	104
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	105 mValid = !mSubjectCN.isEmpty();
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	106
356 67b471c4d1fc Default for loaded certificates from file to install Andre Heinecke <andre.heinecke@intevation.de> parents: 355 diff changeset	107 /* Default is installation for new certificates */
67b471c4d1fc Default for loaded certificates from file to install Andre Heinecke <andre.heinecke@intevation.de> parents: 355 diff changeset	108 mBaseLine = QString::fromLatin1("I:") + derData.toBase64();
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	109 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	110
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	111 Certificate::Certificate(const QString& b64Line) :
547 bf445b0e1126 Certificate: initialising member variable mEditable in the constructors. Bernhard Reiter <bernhard@intevation.de> parents: 530 diff changeset	112 mValid(false),
bf445b0e1126 Certificate: initialising member variable mEditable in the constructors. Bernhard Reiter <bernhard@intevation.de> parents: 530 diff changeset	113 mEditable(false)
81 112228bd7e4b Remove platform specific certificate immplementations. Andre Heinecke <aheinecke@intevation.de> parents: 78 diff changeset	114 {
204 825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	115 if (b64Line.isEmpty()) {
825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	116 return;
825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	117 }
825b42da1855 Avoid printing an error when an empty certificate ist constructed Andre Heinecke <andre.heinecke@intevation.de> parents: 186 diff changeset	118
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	119 /* Cut of the first two chars (e.g. I: and decode) */
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	120 QByteArray derData = QByteArray::fromBase64(
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	121 b64Line.right(b64Line.size() - 2).toLatin1());
ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	122
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	123 parseDetails(derData);
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	124
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	125 /* If the subject CN is set then at least one x509parse
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	126 * in polarssl was successfull. And a root certificate
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	127 * always needs to have a subject CN */
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	128 mValid = !mSubjectCN.isEmpty();
83 ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	129
ba8a548ff252 Expand certificate class to make raw data accessible Andre Heinecke <aheinecke@intevation.de> parents: 82 diff changeset	130 mBaseLine = b64Line;
81 112228bd7e4b Remove platform specific certificate immplementations. Andre Heinecke <aheinecke@intevation.de> parents: 78 diff changeset	131 }
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	132
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	133 QString Certificate::shortDescription() const {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	134 if (!isValid()) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	135 return QObject::tr("Failed to parse certificate");
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	136 }
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	137
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	138 QString ret = mSubjectCN; /* Necessary by definition */
530 fb47bab4c71a Only show CN als shortDescription Andre Heinecke <aheinecke@intevation.de> parents: 404 diff changeset	139 /*
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	140 if (!mSubjectO.isEmpty()) {
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	141 ret += " - " + mSubjectO;
64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	142 }
530 fb47bab4c71a Only show CN als shortDescription Andre Heinecke <aheinecke@intevation.de> parents: 404 diff changeset	143 */
338 64e38886f903 Use certhelp for certificate parsing and add some dummy info Andre Heinecke <aheinecke@intevation.de> parents: 204 diff changeset	144 return ret;
186 2551ad24d3c2 Get subject from the certificate and parse it's attributes Andre Heinecke <andre.heinecke@intevation.de> parents: 94 diff changeset	145 }
349 a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	146
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	147 QList<Certificate> Certificate::fromFileName(const QString& file_name) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	148 /* We read the file using Qt to avoid filename encoding problems
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	149 * on Windows */
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	150
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	151 QFile certificateFile(file_name);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	152 QByteArray fileContent;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	153 QList<Certificate> retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	154 x509_crt chain;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	155 int ret = 0;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	156 if (!certificateFile.open(QIODevice::ReadOnly)) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	157 qDebug() << "Failed to read file.";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	158 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	159 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	160
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	161 if (certificateFile.size() > MAX_LINE_LENGTH * MAX_LINES) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	162 qDebug() << "File too large";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	163 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	164 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	165
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	166 fileContent = certificateFile.readAll();
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	167
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	168 x509_crt_init(&chain);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	169
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	170 ret = x509_crt_parse(&chain,
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	171 reinterpret_cast<const unsigned char*>(fileContent.constData()),
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	172 fileContent.size());
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	173
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	174 if (ret < 0) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	175 qDebug() << "Failed to parse certificates.";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	176 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	177 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	178
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	179 if (ret > 0) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	180 qDebug() << "Some certificates could not be parsed.";
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	181 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	182
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	183 x509_crt *iter = &chain;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	184
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	185 while (iter) {
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	186 QByteArray derData(reinterpret_cast<const char*>(iter->raw.p),
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	187 static_cast<int>(iter->raw.len));
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	188 retval << Certificate(derData);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	189 iter = iter->next;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	190 }
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	191 x509_crt_free(&chain);
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	192
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	193 return retval;
a49766196a7d Add certificateFromFile method Andre Heinecke <andre.heinecke@intevation.de> parents: 338 diff changeset	194 }
355 5f1494fab517 merged. Raimund Renkert <rrenkert@intevation.de> parents: 352 349 diff changeset	195
352 b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	196 void Certificate::setInstallCert(bool install)
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	197 {
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	198 if (install && mBaseLine.startsWith("R:")) {
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	199 mBaseLine.replace(0, 1, "I");
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	200 }
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	201 else if (!install && mBaseLine.startsWith("I:")) {
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	202 mBaseLine.replace(0, 1, "R");
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	203 }
b0a274f4f9e2 Added setter to certificate to change the install/remove state. Raimund Renkert <rrenkert@intevation.de> parents: 338 diff changeset	204 }
1288 265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	205
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	206 #ifdef WIN32
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	207 bool Certificate::showNativeUI(void *parent)
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	208 {
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	209 /* Cut of the first two chars (e.g. I: and decode) */
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	210 bool retval = false;
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	211 QByteArray pemData = QByteArray(
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	212 mBaseLine.right(mBaseLine.size() - 2).toLatin1());
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	213 PCCERT_CONTEXT pCert = b64_to_cert_context (pemData.data(), pemData.size());
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	214 typedef BOOL (CALLBACK* LPFNVIEWDLG)(DWORD,const void ,HWND,LPCWSTR,DWORD,void );
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	215 LPFNVIEWDLG funcPtr;
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	216
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	217 /* CryptUIDlgViewContext is not part of mingw 3.1.0
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	218 * so we workaround this by geting the process address dynamically. */
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	219 HMODULE hmod = LoadLibraryW(L"cryptui");
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	220
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	221 if (!hmod) {
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	222 qDebug() << "Failed to open Cryptui.dll";
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	223 goto done;
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	224 }
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	225
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	226 funcPtr = (LPFNVIEWDLG) GetProcAddress (hmod, "CryptUIDlgViewContext");
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	227 if (!funcPtr) {
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	228 qDebug() << "Failed to find Address of CryptUIDlgViewContext";
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	229 goto done;
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	230 }
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	231
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	232 if (pCert == NULL) {
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	233 qDebug() << "Failed to parse certificate.";
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	234 goto done;
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	235 }
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	236
1310 60e481aa75ca (issue152) Do not return CryptUIDlgViewContext's return value Andre Heinecke <andre.heinecke@intevation.de> parents: 1297 diff changeset	237 funcPtr(CERT_STORE_CERTIFICATE_CONTEXT,
1288 265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	238 pCert,
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	239 (HWND) parent,
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	240 NULL, // Default Title
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	241 0,
1310 60e481aa75ca (issue152) Do not return CryptUIDlgViewContext's return value Andre Heinecke <andre.heinecke@intevation.de> parents: 1297 diff changeset	242 NULL);
1288 265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	243
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	244 retval = true;
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	245 done:
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	246
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	247 if (pCert) {
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	248 CertFreeCertificateContext(pCert);
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	249 }
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	250 if (hmod) {
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	251 FreeLibrary(hmod);
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	252 }
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	253 return retval;
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	254 }
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	255 #else
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	256 bool Certificate::showNativeUI(void *parent)
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	257 {
1297 c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	258 QTemporaryFile *tmpCert = new QTemporaryFile;
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	259 tmpCert->open();
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	260 tmpCert->write("-----BEGIN CERTIFICATE-----\n");
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	261 tmpCert->write(mBaseLine.right(mBaseLine.size() - 2).toLatin1());
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	262 tmpCert->write("-----END CERTIFICATE-----\n");
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	263 tmpCert->close();
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	264 QStringList args;
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	265 args << tmpCert->fileName();
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	266 QProcess *viewer = new QProcess();
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	267 viewer->setProgram("gcr-viewer");
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	268 viewer->setArguments(args);
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	269
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	270 QObject::connect (viewer, SIGNAL(finished(int, QProcess::ExitStatus)), tmpCert, SLOT(deleteLater()));
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	271 QObject::connect (viewer, SIGNAL(finished(int, QProcess::ExitStatus)), viewer, SLOT(deleteLater()));
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	272 viewer->start();
c2fd36cd4093 (issue123) Use gcr-viewer to view certificate details on Linux Andre Heinecke <andre.heinecke@intevation.de> parents: 1288 diff changeset	273 return !(!viewer->waitForStarted() \|\| viewer->state() == QProcess::NotRunning);
1288 265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	274 }
265583011f24 (issue123) Add possibility to open native certificate dialog Andre Heinecke <andre.heinecke@intevation.de> parents: 1162 diff changeset	275 #endif

Mercurial > trustbridge

annotate ui/certificate.cpp @ 1332:8362e30f7b55