xca/widgets/CertDetail.cpp
Christian Hohnstaedt fc0191a512 Disable Public key import when displaying key of cert
Importing the displayed public key of a certificate during
certificate import resulted in a double free.

The "import" flag of the key-details can now forcefully
disable the import button.

Fixing it was way more complex than simply disabling it.

Also add sanity checks for pointers that are not our childs
when creating the QModelIndex
2023-10-08 22:19:18 +02:00

294 lines
6.9 KiB
C++

/* vi: set sw=4 ts=4:
*
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
*
* All rights reserved.
*/
#include "CertDetail.h"
#include "KeyDetail.h"
#include "MainWindow.h"
#include "distname.h"
#include "clicklabel.h"
#include "Help.h"
#include "OidResolver.h"
#include "lib/func.h"
#include "lib/XcaWarningCore.h"
#include <QLabel>
#include <QPushButton>
#include <QLineEdit>
#include <QMessageBox>
CertDetail::CertDetail(QWidget *w) : XcaDetail(w)
{
setupUi(this);
}
void CertDetail::on_showExt_clicked()
{
if (showConf) {
showConf = false;
v3extensions->document()->setHtml(exts);
showExt->setText(tr("Show config"));
} else {
showConf = true;
v3extensions->document()->setPlainText(conf);
showExt->setText(tr("Show extensions"));
}
}
void CertDetail::setX509super(pki_x509super *x)
{
descr->setText(x->getIntName());
thisSqlId = x->getSqlItemId();
connect_pki(x);
// examine the key
myPubKey = x->getRefKey();
if (myPubKey) {
privKey->setText(myPubKey->getIntName());
privKey->setClickText(myPubKey->getSqlItemId().toString());
if (myPubKey->isPrivKey()) {
privKey->setGreen();
} else {
privKey->setRed();
}
} else {
tmpPubKey = myPubKey = x->getPubKey();
privKey->setText(tr("Show public key"));
privKey->setRed();
myPubKey->setIntName(x->getIntName());
myPubKey->setComment(tr("This key is not in the database."));
}
if (!myPubKey) {
privKey->setText(tr("Not available"));
privKey->setDisabled(true);
privKey->disableToolTip();
} else {
keySqlId = myPubKey->getSqlItemId();
}
connect(privKey, SIGNAL(doubleClicked(QString)),
this, SLOT(showPubKey()));
// details of the subject
subject->setX509name(x->getSubject());
// V3 extensions
extList el = x->getV3ext();
if (el.count() == 0) {
tabwidget->removeTab(4);
} else {
exts = el.getHtml("<br>");
el.genGenericConf(&conf);
v3extensions->document()->setHtml(exts);
}
// Algorithm
sigAlgo->setText(x->getSigAlg());
connect(sigAlgo, SIGNAL(doubleClicked(QString)),
MainWindow::getResolver(), SLOT(searchOid(QString)));
// Comment
comment->setPlainText(x->getComment());
setCert(dynamic_cast<pki_x509*>(x));
setReq(dynamic_cast<pki_x509req*>(x));
}
void CertDetail::setCert(pki_x509 *cert)
{
if (!cert)
return;
init("certdetail", ":certImg");
headerLabel->setText(tr("Details of the Certificate"));
try {
// No attributes
tabwidget->removeTab(3);
// examine the signature
if (cert->getSigner() == NULL) {
signature->setText(tr("Signer unknown"));
signature->setDisabled(true);
signature->disableToolTip();
} else if (cert == cert->getSigner()) {
signature->setText(tr("Self signed"));
signature->setGreen();
signature->disableToolTip();
} else {
pki_x509 *issuer = cert->getSigner();
signature->setText(issuer->getIntName());
signature->setClickText(issuer->getSqlItemId().toString());
signature->setGreen();
issuerSqlId = issuer->getSqlItemId();
connect(signature, SIGNAL(doubleClicked(QString)),
this, SLOT(showIssuer()));
}
// the serial
serialNr->setText(cert->getSerial());
// details of the issuer
issuer->setX509name(cert->getIssuerName());
// The dates
notBefore->setText(cert->getNotBefore().toPretty());
notBefore->setToolTip(cert->getNotBefore().toPrettyGMT());
notAfter->setText(cert->getNotAfter().toPretty());
notAfter->setToolTip(cert->getNotAfter().toPrettyGMT());
// validation of the Date
dateValid->disableToolTip();
if (cert->isRevoked()) {
x509rev rev = cert->getRevocation();
dateValid->setText(tr("Revoked at %1")
.arg(rev.getDate().toPretty()));
dateValid->setRed();
dateValid->setToolTip(rev.getDate().toPrettyGMT());
} else if (!cert->checkDate()) {
dateValid->setText(tr("Not valid"));
dateValid->setRed();
} else {
dateValid->setGreen();
dateValid->setText(tr("Valid"));
}
// the fingerprints
fpMD5->setText(cert->fingerprint(EVP_md5()));
fpSHA1->setText(cert->fingerprint(EVP_sha1()));
QString fp = cert->fingerprint(EVP_sha256());
int x = fp.size() / 2;
fp = fp.mid(0,x) + "\n" + fp.mid(x+1, -1);
fpSHA256->setText(fp);
openssl_error();
} catch (errorEx &err) {
XCA_WARN(err.getString());
}
}
void CertDetail::setReq(pki_x509req *req)
{
if (!req)
return;
init("csrdetail", ":csrImg");
image->setPixmap(QPixmap(":csrImg"));
headerLabel->setText(tr("Details of the certificate signing request"));
mainwin->helpdlg->register_ctxhelp_button(this, "csrdetail");
try {
// No issuer
tabwidget->removeTab(2);
// verification
if (!req->verify() ) {
signature->setRed();
signature->setText("Failed");
} else {
signature->setGreen();
signature->setText("PKCS#10");
}
signature->disableToolTip();
fingerprints->hide();
validity->hide();
serialLabel->hide();
serialNr->hide();
// The non extension attributes
int cnt = X509_REQ_get_attr_count(req->getReq());
int added = 0;
QGridLayout *attrLayout = new QGridLayout(attributes);
attrLayout->setAlignment(Qt::AlignTop);
attrLayout->setSpacing(6);
attrLayout->setContentsMargins(11, 11, 11, 11);
for (int i = 0, ii = 0; i<cnt; i++) {
int nid;
QLabel *label;
QString trans;
X509_ATTRIBUTE *att = X509_REQ_get_attr(req->getReq(), i);
nid = OBJ_obj2nid(X509_ATTRIBUTE_get0_object(att));
if (X509_REQ_extension_nid(nid)) {
continue;
}
label = new QLabel(this);
trans = dn_translations[nid];
if (Settings["translate_dn"] && !trans.isEmpty()) {
label->setText(trans);
label->setToolTip(QString(OBJ_nid2sn(nid)));
} else {
label->setText(QString(OBJ_nid2ln(nid)));
label->setToolTip(trans);
}
label->setText(QString(OBJ_nid2ln(nid)));
label->setToolTip(QString(OBJ_nid2sn(nid)));
attrLayout->addWidget(label, ii, 0);
added++;
int count = X509_ATTRIBUTE_count(att);
for (int j=0; j<count; j++) {
ASN1_TYPE *at = X509_ATTRIBUTE_get0_type(att, j);
label = labelFromAsn1String(at->value.asn1_string);
attrLayout->addWidget(label, ii, j +1);
}
ii++;
}
if (!added) {
tabwidget->removeTab(2);
}
openssl_error();
} catch (errorEx &err) {
XCA_WARN(err.getString());
}
}
QLabel *CertDetail::labelFromAsn1String(ASN1_STRING *s)
{
QLabel *label;
label = new CopyLabel(this);
label->setText(asn1ToQString(s));
label->setToolTip(QString(ASN1_tag2str(s->type)));
return label;
}
void CertDetail::itemChanged(pki_base *pki)
{
QVariant pkiSqlId = pki->getSqlItemId();
if (pkiSqlId == keySqlId)
privKey->setText(pki->getIntName());
if (pkiSqlId == issuerSqlId)
signature->setText(pki->getIntName());
if (pkiSqlId == thisSqlId)
descr->setText(pki->getIntName());
}
void CertDetail::showPubKey()
{
KeyDetail::showKey(this, myPubKey, false);
}
void CertDetail::showIssuer()
{
showCert(this, Store.lookupPki<pki_x509>(issuerSqlId));
}
void CertDetail::showCert(QWidget *parent, pki_x509super *x)
{
if (!x)
return;
CertDetail *dlg = new CertDetail(parent);
dlg->setX509super(x);
dlg->exec();
delete dlg;
}
CertDetail::~CertDetail()
{
delete tmpPubKey;
}