mirror of
https://github.com/chris2511/xca.git
synced 2026-09-12 19:51:05 +05:00
This is a large squash of many small commits. Allow porting data from the legacy format to SQL. Store Binaries base64 encoded and use db->transaction Update password hash to be 8000 x SHA512 with 8 byte Salt Add revocations table and fixup CRL generation Add comment and insertion date columns Fix column saving, remove trust, add XcaDialog Allow changing the internal name and comment in Cert/Req details view Extend Comment functionality, Replace About.ui by XcaDialog.ui
190 lines
3.9 KiB
C++
190 lines
3.9 KiB
C++
/* vi: set sw=4 ts=4:
|
|
*
|
|
* Copyright (C) 2015 Christian Hohnstaedt.
|
|
*
|
|
* All rights reserved.
|
|
*/
|
|
|
|
#include "lib/pki_x509.h"
|
|
#include "CertTreeView.h"
|
|
#include "MainWindow.h"
|
|
#include <QAbstractItemModel>
|
|
#include <QAbstractItemView>
|
|
#include <QMenu>
|
|
|
|
void CertTreeView::fillContextMenu(QMenu *menu, QMenu *subExport,
|
|
const QModelIndex &index, QModelIndexList indexes)
|
|
{
|
|
QMenu *subCa;
|
|
bool parentCanSign, multi, hasScard, sameParent,
|
|
allRevoked, allUnrevoked;
|
|
pki_key *privkey;
|
|
|
|
X509SuperTreeView::fillContextMenu(menu, subExport, index, indexes);
|
|
|
|
menu->addAction(tr("Import PKCS#12"), this, SLOT(loadPKCS12()));
|
|
menu->addAction(tr("Import from PKCS#7"), this, SLOT(loadPKCS7()));
|
|
|
|
if (indexes.size() == 0)
|
|
return;
|
|
|
|
pki_x509 *cert = static_cast<pki_x509*>(index.internalPointer());
|
|
pki_x509 *parent;
|
|
|
|
privkey = cert->getRefKey();
|
|
parent = cert->getSigner();
|
|
parentCanSign = parent && parent->canSign() && (parent != cert);
|
|
hasScard = pkcs11::loaded();
|
|
|
|
multi = indexes.size() > 1;
|
|
|
|
allUnrevoked = allRevoked = sameParent = true;
|
|
foreach(QModelIndex i, indexes) {
|
|
pki_x509 *c = static_cast<pki_x509*>
|
|
(i.internalPointer());
|
|
if (c->getSigner() != parent)
|
|
sameParent = false;
|
|
if (c->isRevoked())
|
|
allUnrevoked = false;
|
|
else
|
|
allRevoked = false;
|
|
}
|
|
|
|
if (!multi) {
|
|
transform->addAction(tr("Request"), this, SLOT(toRequest()))->
|
|
setEnabled(privkey && privkey->isPrivKey());
|
|
subExport->addAction(tr("Security token"), this,
|
|
SLOT(toToken()))->setEnabled(hasScard);
|
|
subExport->addAction(tr("Other token"), this,
|
|
SLOT(toOtherToken()))->setEnabled(
|
|
hasScard && privkey && privkey->isToken());
|
|
|
|
transform->addAction(tr("Similar Certificate"), this,
|
|
SLOT(toCertificate()));
|
|
|
|
menu->addAction(tr("Delete from Security token"), this,
|
|
SLOT(deleteFromToken()))->setEnabled(hasScard);
|
|
|
|
subCa = menu->addMenu(tr("CA"));
|
|
subCa->addAction(tr("Properties"), this, SLOT(caProperties()));
|
|
subCa->addAction(tr("Generate CRL"), this, SLOT(genCrl()));
|
|
subCa->addAction(tr("Manage revocations"), this,
|
|
SLOT(manageRevocations()));
|
|
subCa->setEnabled(cert->canSign());
|
|
}
|
|
if (sameParent && parentCanSign) {
|
|
QString n = multi ? QString(" [%1]").arg(indexes.size()) : "";
|
|
menu->addAction(tr("Renewal") +n, this, SLOT(certRenewal()));
|
|
if (allUnrevoked)
|
|
menu->addAction(tr("Revoke") +n, this, SLOT(revoke()));
|
|
if (allRevoked)
|
|
menu->addAction(tr("Unrevoke") +n, this,
|
|
SLOT(unRevoke()));
|
|
}
|
|
}
|
|
|
|
void CertTreeView::changeView()
|
|
{
|
|
if (!certs)
|
|
return;
|
|
|
|
db_x509 *c = certs;
|
|
|
|
hide();
|
|
setModel();
|
|
|
|
c->changeView();
|
|
|
|
setModel(c);
|
|
show();
|
|
setRootIsDecorated(db_x509::treeview);
|
|
}
|
|
|
|
void CertTreeView::toRequest()
|
|
{
|
|
if (certs)
|
|
certs->toRequest(currentIndex());
|
|
}
|
|
|
|
void CertTreeView::toToken()
|
|
{
|
|
if (certs)
|
|
certs->toToken(currentIndex(), false);
|
|
}
|
|
|
|
void CertTreeView::toOtherToken()
|
|
{
|
|
if (certs)
|
|
certs->toToken(currentIndex(), true);
|
|
}
|
|
|
|
void CertTreeView::loadPKCS12()
|
|
{
|
|
if (certs) {
|
|
load_pkcs12 l;
|
|
certs->load_default(l);
|
|
}
|
|
}
|
|
|
|
void CertTreeView::loadPKCS7()
|
|
{
|
|
if (certs) {
|
|
load_pkcs7 l;
|
|
certs->load_default(l);
|
|
}
|
|
}
|
|
|
|
void CertTreeView::genCrl()
|
|
{
|
|
pki_x509 *cert = static_cast<pki_x509*>
|
|
(currentIndex().internalPointer());
|
|
mainwin->crls->newItem(cert);
|
|
}
|
|
|
|
void CertTreeView::toCertificate()
|
|
{
|
|
if (certs)
|
|
certs->toCertificate(currentIndex());
|
|
}
|
|
|
|
void CertTreeView::deleteFromToken()
|
|
{
|
|
pki_x509 *cert = static_cast<pki_x509*>
|
|
(currentIndex().internalPointer());
|
|
try {
|
|
cert->deleteFromToken();
|
|
} catch (errorEx &err) {
|
|
mainwin->Error(err);
|
|
}
|
|
}
|
|
|
|
void CertTreeView::manageRevocations()
|
|
{
|
|
if (certs)
|
|
certs->manageRevocations(currentIndex());
|
|
}
|
|
|
|
void CertTreeView::caProperties()
|
|
{
|
|
if (certs)
|
|
certs->caProperties(currentIndex());
|
|
}
|
|
|
|
void CertTreeView::certRenewal()
|
|
{
|
|
if (certs)
|
|
certs->certRenewal(getSelectedIndexes());
|
|
}
|
|
|
|
void CertTreeView::revoke()
|
|
{
|
|
if (certs)
|
|
certs->revoke(getSelectedIndexes());
|
|
}
|
|
|
|
void CertTreeView::unRevoke()
|
|
{
|
|
if (certs)
|
|
certs->unRevoke(getSelectedIndexes());
|
|
}
|