xca/lib/db_x509super.cpp
Christian Hohnstaedt 4b3ee2c705 Switch database format to SQL(ite)
This is a large squash of many small commits.

Allow porting data from the legacy format to SQL.
Store Binaries base64 encoded and use db->transaction
Update password hash to be 8000 x SHA512 with 8 byte Salt
Add revocations table and fixup CRL generation
Add comment and insertion date columns

Fix column saving, remove trust, add XcaDialog
Allow changing the internal name and comment in Cert/Req details view
Extend Comment functionality, Replace About.ui by XcaDialog.ui
2018-03-05 07:42:36 +01:00

216 lines
5.1 KiB
C++

/* vi: set sw=4 ts=4:
*
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
*
* All rights reserved.
*/
#include "pki_base.h"
#include "db_x509super.h"
#include "widgets/MainWindow.h"
#include "widgets/CertDetail.h"
#include "widgets/XcaDialog.h"
#include "oid.h"
#include <QMessageBox>
db_x509name::db_x509name(MainWindow *mw)
:db_base(mw)
{
}
dbheaderList db_x509name::getHeaders()
{
dbheaderList h = db_base::getHeaders();
h << new dbheader(HD_subject_name, false, tr("Subject"),
tr("Complete distinguished name")) <<
new dbheader(HD_subject_hash, false, tr("Subject hash"),
tr("Hash to lookup certs in directories"));
foreach(int nid, *MainWindow::dn_nid)
h << new nid_dbheader(nid, dbheader::hd_x509name);
return h;
}
db_x509super::db_x509super(MainWindow *mw)
:db_x509name(mw)
{
}
void db_x509super::loadContainer()
{
db_x509name::loadContainer();
/* Resolve Key references */
FOR_ALL_pki(pki, pki_x509super) {
QVariant keySqlId = pki->getKeySqlId();
if (!keySqlId.isValid())
continue;
quint64 id = keySqlId.toULongLong();
if (!lookup.contains(id))
continue;
pki->setRefKey(static_cast<pki_key*>(lookup[id]));
}
}
dbheaderList db_x509super::getHeaders()
{
dbheaderList h = db_x509name::getHeaders();
NIDlist v3nid, v3ns_nid;
v3nid <<
NID_subject_alt_name <<
NID_issuer_alt_name <<
NID_subject_key_identifier <<
NID_authority_key_identifier <<
NID_key_usage <<
NID_ext_key_usage <<
NID_crl_distribution_points <<
NID_info_access;
v3ns_nid <<
NID_netscape_cert_type <<
NID_netscape_base_url <<
NID_netscape_revocation_url <<
NID_netscape_ca_revocation_url <<
NID_netscape_renewal_url <<
NID_netscape_ca_policy_url <<
NID_netscape_ssl_server_name <<
NID_netscape_comment;
h << new dbheader(HD_x509key_name, false, tr("Key name"),
tr("Internal name of the key")) <<
new dbheader(HD_x509_sigalg, false, tr("Signature algorithm"));
foreach(int nid, v3nid)
h << new nid_dbheader(nid, dbheader::hd_v3ext);
foreach(int nid, v3ns_nid)
h << new nid_dbheader(nid, dbheader::hd_v3ext_ns);
return h;
}
pki_key *db_x509super::findKey(pki_x509super *ref)
{
pki_key *key, *refkey;
if (!ref)
return NULL;
if ((key = ref->getRefKey()) != NULL )
return key;
refkey = ref->getPubKey();
if (!refkey)
return NULL;
key = (pki_key *)mainwin->keys->getByReference(refkey);
ref->setRefKey(key);
delete(refkey);
return key;
}
QList<pki_x509super *> db_x509super::findByPubKey(pki_key *refkey)
{
QList<pki_x509super *> list;
FOR_ALL_pki(pki, pki_x509super) {
pki_key *key = pki->getPubKey();
if (!key)
continue;
if (refkey->compare(key))
list << pki;
delete key;
}
return list;
}
void db_x509super::extractPubkey(QModelIndex index)
{
pki_key *key;
pki_x509super *pki = static_cast<pki_x509super*>
(index.internalPointer());
if (!pki)
return;
key = pki->getPubKey();
if (!key)
return;
key->setIntName(pki->getIntName());
key = (pki_key*)mainwin->keys->insert(key);
if (!key)
return;
if (pki_base::suppress_messages)
return;
XCA_INFO(key->getMsg(pki_base::msg_import).arg(pki->getIntName()));
}
void db_x509super::toOpenssl(QModelIndex index) const
{
pki_x509super *pki = static_cast<pki_x509super*>(index.internalPointer());
QString fn = mainwin->getPath() + QDir::separator() +
pki->getUnderlinedName() + ".conf";
QString fname = QFileDialog::getSaveFileName(mainwin,
tr("Save as OpenSSL config"), fn,
tr("Config files ( *.conf *.cnf);; All files ( * )"));
if (fname.isEmpty())
return;
fname = nativeSeparator(fname);
mainwin->setPath(fname.mid(0, fname.lastIndexOf(QRegExp("[/\\\\]")) ));
pki->opensslConf(fname);
}
void db_x509super::toTemplate(QModelIndex index)
{
pki_x509super *pki = static_cast<pki_x509super*>(index.internalPointer());
if (!pki)
return;
try {
pki_temp *temp = new pki_temp();
check_oom(temp);
temp->setIntName(pki->getIntName());
extList el = temp->fromCert(pki);
if (el.size()) {
QString etext;
etext = QString("<h3>") +
tr("The following extensions were not ported into the template") +
QString("</h3><hr>") +
el.getHtml("<br>");
QTextEdit *textbox = new QTextEdit(etext);
XcaDialog *d = new XcaDialog(mainwin, x509, textbox,
QString(), QString());
d->aboutDialog(MainWindow::tempImg);
d->exec();
delete d;
}
createSuccess(mainwin->temps->insert(temp));
}
catch (errorEx &err) {
mainwin->Error(err);
}
}
void db_x509super::showPki(pki_base *pki)
{
pki_x509super *x = (pki_x509req *)pki;
CertDetail *dlg;
dlg = new CertDetail(mainwin);
if (!dlg)
return;
switch (x->getType()) {
case x509_req: dlg->setReq((pki_x509req*)x); break;
case x509: dlg->setCert((pki_x509*)x); break;
default:
delete dlg;
return;
}
connect(dlg->privKey, SIGNAL(doubleClicked(QString)),
mainwin->keys, SLOT(showItem(QString)));
connect(dlg->signature, SIGNAL(doubleClicked(QString)),
this, SLOT(showItem(QString)));
if (dlg->exec()) {
QString newname = dlg->descr->text();
QString newcomment = dlg->comment->toPlainText();
if (newname != pki->getIntName() ||
newcomment != pki->getComment())
{
updateItem(pki, newname, newcomment);
}
}
delete dlg;
}