aheinecke@21: #ifndef CERTIFICATE_H
aheinecke@21: #define CERTIFICATE_H
aheinecke@21: /**
aheinecke@21:  * @file certificate.h
aheinecke@21:  * @brief Class around native certificates.
aheinecke@21:  *
aheinecke@21:  */
aheinecke@21: 
aheinecke@21: #include <QByteArray>
aheinecke@338: #include <QDateTime>
andre@186: #include <QMap>
aheinecke@21: #include <QString>
aheinecke@21: 
aheinecke@21: #ifdef Q_OS_WIN
aheinecke@21: #include <windows.h>
aheinecke@21: #include <wincrypt.h>
aheinecke@21: #endif
aheinecke@21: 
aheinecke@21: class Certificate
aheinecke@21: {
aheinecke@21: public:
aheinecke@94: 
andre@374:     /** @brief the Status compared to the last installed list. */
rrenkert@265:     enum Status {
andre@374:         InstallNew = 1, /* Never seen this before */
andre@374:         InstallOld, /* Already contained in last list */
andre@374:         RemoveNew, /* Was an Install certificate in the last list */
andre@374:         RemoveOld /* Already removed in the last list */
rrenkert@265:     };
rrenkert@265: 
aheinecke@83:     /** @brief construct a certificate from a line of a certificate list.
aheinecke@83:      *
aheinecke@83:      * The first two characters of the string are expected to be
aheinecke@83:      * the command. I: or R:
aheinecke@83:      *
aheinecke@83:      *  @param[in] b64Line The line from the certificate list.
aheinecke@21:      **/
aheinecke@94:     Certificate(const QString& b64Line = QString());
aheinecke@21: 
andre@349:     /** @brief construct a certificate from a byte array of DER data
andre@349:      *
andre@349:      *  @param[in] derData a der encoded certificate.
andre@349:      **/
andre@349:     Certificate(const QByteArray& derData);
andre@349: 
aheinecke@21:     /** @brief check if this certificate could be parsed */
aheinecke@78:     bool isValid() const {return mValid;}
aheinecke@21: 
aheinecke@21:     /** @brief get a short description of the certificate
aheinecke@21:      *
aheinecke@21:      *  This description should be used as a short overview
aheinecke@21:      *  for this certificate
aheinecke@21:      *
aheinecke@21:      **/
andre@186:     QString shortDescription() const;
aheinecke@83: 
aheinecke@83:     /** @brief get details for the certificate
aheinecke@83:      *
aheinecke@338:      * Get a formatted details string usable for user visible
aheinecke@338:      * certificate details.
aheinecke@83:      *
aheinecke@83:      **/
aheinecke@83:     const QString& details() const {return mDetails;}
aheinecke@83: 
aheinecke@83:     /** @brief get the line from which this certificate was constructed
aheinecke@83:      *
aheinecke@83:      * The resulting line includes the instruction e.g.
aheinecke@83:      *
aheinecke@83:      * I:BASE64ENCODEDATA...
aheinecke@83:      *
aheinecke@83:      **/
aheinecke@83:     const QString& base64Line() const {return mBaseLine;}
aheinecke@21: 
aheinecke@248:     /** @brief Check if this certificate has the install instruction.
aheinecke@248:      *
aheinecke@248:      * This is shorthand for baseLine.startsWith("I:");
aheinecke@248:      **/
aheinecke@248:     bool isInstallCert() const {return mBaseLine.startsWith("I:");}
aheinecke@248: 
rrenkert@352:     /** @brief Set the install instruction for this certificate.
rrenkert@352:      *
rrenkert@352:      * Set the base 64 line prefix to "I:" or "R:".
rrenkert@352:      **/
rrenkert@352:     void setInstallCert(bool install);
rrenkert@352: 
rrenkert@357:     /** @brief Check if this certificate is editable. */
rrenkert@357:     bool isEditable() const {return mEditable;}
rrenkert@357: 
rrenkert@357:     /** @brief Set the edit state for this certificate. */
rrenkert@357:     void setEditable(bool edit) {mEditable = edit;}
rrenkert@357: 
rrenkert@341:     /** @brief get the subject OU from the certificate */
rrenkert@341:     QString subjectOU() const {return mSubjectOU;}
rrenkert@341: 
rrenkert@341:     /** @brief get the subject CN from the certificate */
rrenkert@341:     QString subjectCN() const {return mSubjectCN;}
rrenkert@341: 
rrenkert@341:     /** @brief get the subject O from the certificate */
rrenkert@341:     QString subjectO() const {return mSubjectO;}
rrenkert@341: 
rrenkert@341:     /** @brief get the subject SN from the certificate */
rrenkert@341:     QString subjectSN() const {return mSubjectSN;}
rrenkert@341: 
rrenkert@341:     /** @brief get the date the certificate was issued */
rrenkert@341:     QDateTime validFrom() const {return mValidFrom;}
rrenkert@341: 
rrenkert@341:     /** @brief get the date the certificate expires */
rrenkert@341:     QDateTime validTo() const {return mValidTo;}
rrenkert@341: 
andre@349:     /** @brief construct certificate objects from a file
andre@349:      *
andre@349:      *  Constructs a new Certificate Object from a file containing either
andre@349:      *  one DER encoded certificate or one or many PEM certificates.
andre@349:      *  If no certificate could be parsed from that file an empty list is
andre@349:      *  returned.
andre@349:      *
andre@349:      *  The size restrictions for the certificate list file also apply
andre@349:      *  for this file.
andre@349:      **/
andre@349:     static QList<Certificate> fromFileName (const QString& file_name);
andre@349: 
aheinecke@21: private:
aheinecke@338:     /** @brief Helper function to parse the details of a certificate **/
aheinecke@338:     void parseDetails(const QByteArray& cert);
aheinecke@338: 
aheinecke@21:     bool mValid;
aheinecke@248:     bool mInstCert;
rrenkert@357:     bool mEditable;
aheinecke@83: 
aheinecke@338:     QString mSubjectOU,
aheinecke@338:             mSubjectCN,
aheinecke@338:             mSubjectO,
aheinecke@338:             mSubjectSN,
aheinecke@338:             mDetails,
aheinecke@338:             mBaseLine;
aheinecke@338: 
aheinecke@338:     QDateTime mValidFrom,
aheinecke@338:               mValidTo;
aheinecke@21: };
aheinecke@21: #endif