mirror of
https://github.com/chris2511/xca.git
synced 2026-09-12 19:51:05 +05:00
The ImportMulti dialog does not show up if there is only one item to display, but the item is displayed directly. The displayed items have a new "Import" button to import directly from the viewed item. If XCA is called with certs, crls, keys etc. from the commandline XCA only displays and optionally imports the item if a default database is given. Afterwards XCA exits.
294 lines
6.9 KiB
C++
294 lines
6.9 KiB
C++
/* vi: set sw=4 ts=4:
|
|
*
|
|
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
|
|
*
|
|
* All rights reserved.
|
|
*/
|
|
|
|
|
|
#include "CertDetail.h"
|
|
#include "KeyDetail.h"
|
|
#include "MainWindow.h"
|
|
#include "distname.h"
|
|
#include "clicklabel.h"
|
|
#include "Help.h"
|
|
#include "OidResolver.h"
|
|
#include "lib/func.h"
|
|
#include "lib/XcaWarningCore.h"
|
|
#include <QLabel>
|
|
#include <QPushButton>
|
|
#include <QLineEdit>
|
|
#include <QMessageBox>
|
|
|
|
CertDetail::CertDetail(QWidget *w) : XcaDetail(w)
|
|
{
|
|
setupUi(this);
|
|
}
|
|
|
|
void CertDetail::on_showExt_clicked()
|
|
{
|
|
if (showConf) {
|
|
showConf = false;
|
|
v3extensions->document()->setHtml(exts);
|
|
showExt->setText(tr("Show config"));
|
|
} else {
|
|
showConf = true;
|
|
v3extensions->document()->setPlainText(conf);
|
|
showExt->setText(tr("Show extensions"));
|
|
}
|
|
|
|
}
|
|
|
|
void CertDetail::setX509super(pki_x509super *x)
|
|
{
|
|
descr->setText(x->getIntName());
|
|
thisSqlId = x->getSqlItemId();
|
|
|
|
connect_pki(x);
|
|
// examine the key
|
|
myPubKey = x->getRefKey();
|
|
if (myPubKey) {
|
|
privKey->setText(myPubKey->getIntName());
|
|
privKey->setClickText(myPubKey->getSqlItemId().toString());
|
|
if (myPubKey->isPrivKey()) {
|
|
privKey->setGreen();
|
|
} else {
|
|
privKey->setRed();
|
|
}
|
|
} else {
|
|
tmpPubKey = myPubKey = x->getPubKey();
|
|
privKey->setText(tr("Show public key"));
|
|
privKey->setRed();
|
|
myPubKey->setIntName(x->getIntName());
|
|
myPubKey->setComment(tr("This key is not in the database."));
|
|
}
|
|
|
|
if (!myPubKey) {
|
|
privKey->setText(tr("Not available"));
|
|
privKey->setDisabled(true);
|
|
privKey->disableToolTip();
|
|
} else {
|
|
keySqlId = myPubKey->getSqlItemId();
|
|
}
|
|
connect(privKey, SIGNAL(doubleClicked(QString)),
|
|
this, SLOT(showPubKey()));
|
|
|
|
// details of the subject
|
|
subject->setX509name(x->getSubject());
|
|
|
|
// V3 extensions
|
|
extList el = x->getV3ext();
|
|
if (el.count() == 0) {
|
|
tabwidget->removeTab(4);
|
|
} else {
|
|
exts = el.getHtml("<br>");
|
|
el.genGenericConf(&conf);
|
|
v3extensions->document()->setHtml(exts);
|
|
}
|
|
|
|
// Algorithm
|
|
sigAlgo->setText(x->getSigAlg());
|
|
connect(sigAlgo, SIGNAL(doubleClicked(QString)),
|
|
MainWindow::getResolver(), SLOT(searchOid(QString)));
|
|
|
|
// Comment
|
|
comment->setPlainText(x->getComment());
|
|
|
|
setCert(dynamic_cast<pki_x509*>(x));
|
|
setReq(dynamic_cast<pki_x509req*>(x));
|
|
}
|
|
|
|
void CertDetail::setCert(pki_x509 *cert)
|
|
{
|
|
if (!cert)
|
|
return;
|
|
init("certdetail", ":certImg");
|
|
headerLabel->setText(tr("Details of the Certificate"));
|
|
try {
|
|
// No attributes
|
|
tabwidget->removeTab(3);
|
|
|
|
// examine the signature
|
|
if (cert->getSigner() == NULL) {
|
|
signature->setText(tr("Signer unknown"));
|
|
signature->setDisabled(true);
|
|
signature->disableToolTip();
|
|
} else if (cert == cert->getSigner()) {
|
|
signature->setText(tr("Self signed"));
|
|
signature->setGreen();
|
|
signature->disableToolTip();
|
|
} else {
|
|
pki_x509 *issuer = cert->getSigner();
|
|
signature->setText(issuer->getIntName());
|
|
signature->setClickText(issuer->getSqlItemId().toString());
|
|
signature->setGreen();
|
|
issuerSqlId = issuer->getSqlItemId();
|
|
|
|
connect(signature, SIGNAL(doubleClicked(QString)),
|
|
this, SLOT(showIssuer()));
|
|
}
|
|
|
|
// the serial
|
|
serialNr->setText(cert->getSerial());
|
|
|
|
// details of the issuer
|
|
issuer->setX509name(cert->getIssuerName());
|
|
|
|
// The dates
|
|
notBefore->setText(cert->getNotBefore().toPretty());
|
|
notBefore->setToolTip(cert->getNotBefore().toPrettyGMT());
|
|
notAfter->setText(cert->getNotAfter().toPretty());
|
|
notAfter->setToolTip(cert->getNotAfter().toPrettyGMT());
|
|
|
|
// validation of the Date
|
|
dateValid->disableToolTip();
|
|
if (cert->isRevoked()) {
|
|
x509rev rev = cert->getRevocation();
|
|
dateValid->setText(tr("Revoked at %1")
|
|
.arg(rev.getDate().toPretty()));
|
|
dateValid->setRed();
|
|
dateValid->setToolTip(rev.getDate().toPrettyGMT());
|
|
} else if (!cert->checkDate()) {
|
|
dateValid->setText(tr("Not valid"));
|
|
dateValid->setRed();
|
|
} else {
|
|
dateValid->setGreen();
|
|
dateValid->setText(tr("Valid"));
|
|
}
|
|
// the fingerprints
|
|
fpMD5->setText(cert->fingerprint(EVP_md5()));
|
|
fpSHA1->setText(cert->fingerprint(EVP_sha1()));
|
|
QString fp = cert->fingerprint(EVP_sha256());
|
|
int x = fp.size() / 2;
|
|
fp = fp.mid(0,x) + "\n" + fp.mid(x+1, -1);
|
|
fpSHA256->setText(fp);
|
|
|
|
openssl_error();
|
|
} catch (errorEx &err) {
|
|
XCA_WARN(err.getString());
|
|
}
|
|
}
|
|
|
|
void CertDetail::setReq(pki_x509req *req)
|
|
{
|
|
if (!req)
|
|
return;
|
|
init("csrdetail", ":csrImg");
|
|
image->setPixmap(QPixmap(":csrImg"));
|
|
headerLabel->setText(tr("Details of the certificate signing request"));
|
|
mainwin->helpdlg->register_ctxhelp_button(this, "csrdetail");
|
|
try {
|
|
// No issuer
|
|
tabwidget->removeTab(2);
|
|
|
|
// verification
|
|
if (!req->verify() ) {
|
|
signature->setRed();
|
|
signature->setText("Failed");
|
|
} else {
|
|
signature->setGreen();
|
|
signature->setText("PKCS#10");
|
|
}
|
|
signature->disableToolTip();
|
|
fingerprints->hide();
|
|
validity->hide();
|
|
serialLabel->hide();
|
|
serialNr->hide();
|
|
|
|
// The non extension attributes
|
|
int cnt = X509_REQ_get_attr_count(req->getReq());
|
|
int added = 0;
|
|
QGridLayout *attrLayout = new QGridLayout(attributes);
|
|
attrLayout->setAlignment(Qt::AlignTop);
|
|
attrLayout->setSpacing(6);
|
|
attrLayout->setContentsMargins(11, 11, 11, 11);
|
|
|
|
for (int i = 0, ii = 0; i<cnt; i++) {
|
|
int nid;
|
|
QLabel *label;
|
|
QString trans;
|
|
X509_ATTRIBUTE *att = X509_REQ_get_attr(req->getReq(), i);
|
|
|
|
nid = OBJ_obj2nid(X509_ATTRIBUTE_get0_object(att));
|
|
|
|
if (X509_REQ_extension_nid(nid)) {
|
|
continue;
|
|
}
|
|
label = new QLabel(this);
|
|
trans = dn_translations[nid];
|
|
if (Settings["translate_dn"] && !trans.isEmpty()) {
|
|
label->setText(trans);
|
|
label->setToolTip(QString(OBJ_nid2sn(nid)));
|
|
} else {
|
|
label->setText(QString(OBJ_nid2ln(nid)));
|
|
label->setToolTip(trans);
|
|
}
|
|
|
|
label->setText(QString(OBJ_nid2ln(nid)));
|
|
label->setToolTip(QString(OBJ_nid2sn(nid)));
|
|
attrLayout->addWidget(label, ii, 0);
|
|
added++;
|
|
|
|
int count = X509_ATTRIBUTE_count(att);
|
|
for (int j=0; j<count; j++) {
|
|
ASN1_TYPE *at = X509_ATTRIBUTE_get0_type(att, j);
|
|
label = labelFromAsn1String(at->value.asn1_string);
|
|
attrLayout->addWidget(label, ii, j +1);
|
|
}
|
|
ii++;
|
|
}
|
|
if (!added) {
|
|
tabwidget->removeTab(2);
|
|
}
|
|
openssl_error();
|
|
} catch (errorEx &err) {
|
|
XCA_WARN(err.getString());
|
|
}
|
|
}
|
|
|
|
QLabel *CertDetail::labelFromAsn1String(ASN1_STRING *s)
|
|
{
|
|
QLabel *label;
|
|
label = new CopyLabel(this);
|
|
label->setText(asn1ToQString(s));
|
|
label->setToolTip(QString(ASN1_tag2str(s->type)));
|
|
return label;
|
|
}
|
|
|
|
void CertDetail::itemChanged(pki_base *pki)
|
|
{
|
|
QVariant pkiSqlId = pki->getSqlItemId();
|
|
|
|
if (pkiSqlId == keySqlId)
|
|
privKey->setText(pki->getIntName());
|
|
if (pkiSqlId == issuerSqlId)
|
|
signature->setText(pki->getIntName());
|
|
if (pkiSqlId == thisSqlId)
|
|
descr->setText(pki->getIntName());
|
|
}
|
|
|
|
void CertDetail::showPubKey()
|
|
{
|
|
KeyDetail::showKey(this, myPubKey, !keySqlId.isValid());
|
|
}
|
|
|
|
void CertDetail::showIssuer()
|
|
{
|
|
showCert(this, Store.lookupPki<pki_x509>(issuerSqlId));
|
|
}
|
|
|
|
void CertDetail::showCert(QWidget *parent, pki_x509super *x)
|
|
{
|
|
if (!x)
|
|
return;
|
|
CertDetail *dlg = new CertDetail(parent);
|
|
dlg->setX509super(x);
|
|
dlg->exec();
|
|
delete dlg;
|
|
}
|
|
|
|
CertDetail::~CertDetail()
|
|
{
|
|
delete tmpPubKey;
|
|
}
|