The_Great_Archive/xca
1
0
Fork 0
mirror of https://github.com/chris2511/xca.git synced 2026-09-12 19:51:05 +05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Warn in case of weak PFX algorithm configured

Browse Source
This commit is contained in:
Christian Hohnstaedt 2024-02-08 18:15:15 +01:00
parent 286ae96764
commit d17131d297
2 changed files with 25 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
test/main.cpp
View File

@ -67,7 +67,10 @@ void test_main::openDB()
pwdialog->setExpectations(QList<pw_expect*>{
new pw_expect("testdbpass", pw_ok),
});
mainwin->init_database("testdb.xdb");
mainwin->close_database();
Database.open("testdb.xdb");
Settings["pkcs12_keep_legacy"] = true;
mainwin->setup_open_database();
dbstatus();
}

22
widgets/MainWindow.cpp
View File

@ -35,6 +35,7 @@
#include "lib/pki_scard.h"
#include "lib/dhgen.h"
#include "lib/load_obj.h"
#include "lib/pki_pkcs12.h"
#include "XcaDialog.h"
#include "XcaWarning.h"
@ -600,7 +601,26 @@ enum open_result MainWindow::setup_open_database()
XCA_WARN(tr("The currently used default hash '%1' is insecure. Please select at least 'SHA 224' for security reasons.").arg(defdig.name()));
setOptions();
}
encAlgo encalg = encAlgo::getDefault();
if (encalg.legacy() && !Settings["pkcs12_keep_legacy"]) {
QString text(tr("The currently used PFX / PKCS#12 algorithm '%1' is insecure.")
.arg(encalg.name()));
xcaWarningBox msg(this, text);
msg.addButton(QMessageBox::Ok);
msg.addButton(QMessageBox::Ignore);
msg.addButton(QMessageBox::Apply, tr("Change"));
switch (msg.exec())
{
case QMessageBox::Ok:
break;
case QMessageBox::Ignore:
Settings["pkcs12_keep_legacy"] = true;
break;
case QMessageBox::Apply:
setOptions();
break;
}
}
keyView->setModel(Database.model<db_key>());
reqView->setModel(Database.model<db_x509req>());
certView->setModel(Database.model<db_x509>());