xca/widgets/CertDetail.cpp
Christian Hohnstaedt 2333b02ddc Close #384: Quick view of certificates without trying to open XCA
The ImportMulti dialog does not show up if there is only
one item to display, but the item is displayed directly.

The displayed items have a new "Import" button to import
directly from the viewed item.

If XCA is called with certs, crls, keys etc. from the commandline
XCA only displays and optionally imports the item if a default
database is given. Afterwards XCA exits.
2023-10-05 23:12:40 +02:00

294 lines
6.9 KiB
C++

/* vi: set sw=4 ts=4:
*
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
*
* All rights reserved.
*/
#include "CertDetail.h"
#include "KeyDetail.h"
#include "MainWindow.h"
#include "distname.h"
#include "clicklabel.h"
#include "Help.h"
#include "OidResolver.h"
#include "lib/func.h"
#include "lib/XcaWarningCore.h"
#include <QLabel>
#include <QPushButton>
#include <QLineEdit>
#include <QMessageBox>
CertDetail::CertDetail(QWidget *w) : XcaDetail(w)
{
setupUi(this);
}
void CertDetail::on_showExt_clicked()
{
if (showConf) {
showConf = false;
v3extensions->document()->setHtml(exts);
showExt->setText(tr("Show config"));
} else {
showConf = true;
v3extensions->document()->setPlainText(conf);
showExt->setText(tr("Show extensions"));
}
}
void CertDetail::setX509super(pki_x509super *x)
{
descr->setText(x->getIntName());
thisSqlId = x->getSqlItemId();
connect_pki(x);
// examine the key
myPubKey = x->getRefKey();
if (myPubKey) {
privKey->setText(myPubKey->getIntName());
privKey->setClickText(myPubKey->getSqlItemId().toString());
if (myPubKey->isPrivKey()) {
privKey->setGreen();
} else {
privKey->setRed();
}
} else {
tmpPubKey = myPubKey = x->getPubKey();
privKey->setText(tr("Show public key"));
privKey->setRed();
myPubKey->setIntName(x->getIntName());
myPubKey->setComment(tr("This key is not in the database."));
}
if (!myPubKey) {
privKey->setText(tr("Not available"));
privKey->setDisabled(true);
privKey->disableToolTip();
} else {
keySqlId = myPubKey->getSqlItemId();
}
connect(privKey, SIGNAL(doubleClicked(QString)),
this, SLOT(showPubKey()));
// details of the subject
subject->setX509name(x->getSubject());
// V3 extensions
extList el = x->getV3ext();
if (el.count() == 0) {
tabwidget->removeTab(4);
} else {
exts = el.getHtml("<br>");
el.genGenericConf(&conf);
v3extensions->document()->setHtml(exts);
}
// Algorithm
sigAlgo->setText(x->getSigAlg());
connect(sigAlgo, SIGNAL(doubleClicked(QString)),
MainWindow::getResolver(), SLOT(searchOid(QString)));
// Comment
comment->setPlainText(x->getComment());
setCert(dynamic_cast<pki_x509*>(x));
setReq(dynamic_cast<pki_x509req*>(x));
}
void CertDetail::setCert(pki_x509 *cert)
{
if (!cert)
return;
init("certdetail", ":certImg");
headerLabel->setText(tr("Details of the Certificate"));
try {
// No attributes
tabwidget->removeTab(3);
// examine the signature
if (cert->getSigner() == NULL) {
signature->setText(tr("Signer unknown"));
signature->setDisabled(true);
signature->disableToolTip();
} else if (cert == cert->getSigner()) {
signature->setText(tr("Self signed"));
signature->setGreen();
signature->disableToolTip();
} else {
pki_x509 *issuer = cert->getSigner();
signature->setText(issuer->getIntName());
signature->setClickText(issuer->getSqlItemId().toString());
signature->setGreen();
issuerSqlId = issuer->getSqlItemId();
connect(signature, SIGNAL(doubleClicked(QString)),
this, SLOT(showIssuer()));
}
// the serial
serialNr->setText(cert->getSerial());
// details of the issuer
issuer->setX509name(cert->getIssuerName());
// The dates
notBefore->setText(cert->getNotBefore().toPretty());
notBefore->setToolTip(cert->getNotBefore().toPrettyGMT());
notAfter->setText(cert->getNotAfter().toPretty());
notAfter->setToolTip(cert->getNotAfter().toPrettyGMT());
// validation of the Date
dateValid->disableToolTip();
if (cert->isRevoked()) {
x509rev rev = cert->getRevocation();
dateValid->setText(tr("Revoked at %1")
.arg(rev.getDate().toPretty()));
dateValid->setRed();
dateValid->setToolTip(rev.getDate().toPrettyGMT());
} else if (!cert->checkDate()) {
dateValid->setText(tr("Not valid"));
dateValid->setRed();
} else {
dateValid->setGreen();
dateValid->setText(tr("Valid"));
}
// the fingerprints
fpMD5->setText(cert->fingerprint(EVP_md5()));
fpSHA1->setText(cert->fingerprint(EVP_sha1()));
QString fp = cert->fingerprint(EVP_sha256());
int x = fp.size() / 2;
fp = fp.mid(0,x) + "\n" + fp.mid(x+1, -1);
fpSHA256->setText(fp);
openssl_error();
} catch (errorEx &err) {
XCA_WARN(err.getString());
}
}
void CertDetail::setReq(pki_x509req *req)
{
if (!req)
return;
init("csrdetail", ":csrImg");
image->setPixmap(QPixmap(":csrImg"));
headerLabel->setText(tr("Details of the certificate signing request"));
mainwin->helpdlg->register_ctxhelp_button(this, "csrdetail");
try {
// No issuer
tabwidget->removeTab(2);
// verification
if (!req->verify() ) {
signature->setRed();
signature->setText("Failed");
} else {
signature->setGreen();
signature->setText("PKCS#10");
}
signature->disableToolTip();
fingerprints->hide();
validity->hide();
serialLabel->hide();
serialNr->hide();
// The non extension attributes
int cnt = X509_REQ_get_attr_count(req->getReq());
int added = 0;
QGridLayout *attrLayout = new QGridLayout(attributes);
attrLayout->setAlignment(Qt::AlignTop);
attrLayout->setSpacing(6);
attrLayout->setContentsMargins(11, 11, 11, 11);
for (int i = 0, ii = 0; i<cnt; i++) {
int nid;
QLabel *label;
QString trans;
X509_ATTRIBUTE *att = X509_REQ_get_attr(req->getReq(), i);
nid = OBJ_obj2nid(X509_ATTRIBUTE_get0_object(att));
if (X509_REQ_extension_nid(nid)) {
continue;
}
label = new QLabel(this);
trans = dn_translations[nid];
if (Settings["translate_dn"] && !trans.isEmpty()) {
label->setText(trans);
label->setToolTip(QString(OBJ_nid2sn(nid)));
} else {
label->setText(QString(OBJ_nid2ln(nid)));
label->setToolTip(trans);
}
label->setText(QString(OBJ_nid2ln(nid)));
label->setToolTip(QString(OBJ_nid2sn(nid)));
attrLayout->addWidget(label, ii, 0);
added++;
int count = X509_ATTRIBUTE_count(att);
for (int j=0; j<count; j++) {
ASN1_TYPE *at = X509_ATTRIBUTE_get0_type(att, j);
label = labelFromAsn1String(at->value.asn1_string);
attrLayout->addWidget(label, ii, j +1);
}
ii++;
}
if (!added) {
tabwidget->removeTab(2);
}
openssl_error();
} catch (errorEx &err) {
XCA_WARN(err.getString());
}
}
QLabel *CertDetail::labelFromAsn1String(ASN1_STRING *s)
{
QLabel *label;
label = new CopyLabel(this);
label->setText(asn1ToQString(s));
label->setToolTip(QString(ASN1_tag2str(s->type)));
return label;
}
void CertDetail::itemChanged(pki_base *pki)
{
QVariant pkiSqlId = pki->getSqlItemId();
if (pkiSqlId == keySqlId)
privKey->setText(pki->getIntName());
if (pkiSqlId == issuerSqlId)
signature->setText(pki->getIntName());
if (pkiSqlId == thisSqlId)
descr->setText(pki->getIntName());
}
void CertDetail::showPubKey()
{
KeyDetail::showKey(this, myPubKey, !keySqlId.isValid());
}
void CertDetail::showIssuer()
{
showCert(this, Store.lookupPki<pki_x509>(issuerSqlId));
}
void CertDetail::showCert(QWidget *parent, pki_x509super *x)
{
if (!x)
return;
CertDetail *dlg = new CertDetail(parent);
dlg->setX509super(x);
dlg->exec();
delete dlg;
}
CertDetail::~CertDetail()
{
delete tmpPubKey;
}