xca/widgets/MW_menu.cpp
Christian Hohnstaedt 8aa5141078 Optionally allow hash algos not supported by the token
Especially EC and DSA signatures are only defined
with SHA1 in PKCS#11 v2.20 spec
2014-11-13 20:10:18 +01:00

326 lines
9.4 KiB
C++

/* vi: set sw=4 ts=4:
*
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
*
* All rights reserved.
*/
#include "MainWindow.h"
#include "PwDialog.h"
#include "Options.h"
#include "lib/load_obj.h"
#include "lib/pass_info.h"
#include "lib/pkcs11.h"
#include "lib/pki_evp.h"
#include "lib/pki_scard.h"
#include "lib/func.h"
#include "lib/db_x509super.h"
#include "ui_Options.h"
#include "widgets/hashBox.h"
#include <QtGui/QApplication>
#include <QtGui/QClipboard>
#include <QtGui/QMenuBar>
#include <QtGui/QMessageBox>
void MainWindow::init_menu()
{
QMenu *file, *help, *import, *token;
historyMenu = new tipMenu(tr("Recent DataBases") + " ...", this);
connect(historyMenu, SIGNAL(triggered(QAction*)),
this, SLOT(open_database(QAction*)));
file = menuBar()->addMenu(tr("&File"));
file->addAction(tr("&New DataBase"), this, SLOT(new_database()),
QKeySequence::New);
file->addAction(tr("&Open DataBase"), this, SLOT(load_database()),
QKeySequence::Open);
file->addMenu(historyMenu);
file->addAction(tr("Generate DH parameter"), this,
SLOT(generateDHparam()));
acList += file->addAction(tr("Set as default DataBase"), this,
SLOT(default_database()));
acList += file->addAction(tr("&Close DataBase"), this,
SLOT(close_database()), QKeySequence(QKeySequence::Close));
acList += file->addAction(tr("&Dump DataBase"), this,
SLOT(dump_database()));
acList += file->addAction(tr("C&hange DataBase password"), this,
SLOT(changeDbPass()));
acList += file->addAction(tr("&Import old db_dump"), this,
SLOT(import_dbdump()));
acList += file->addAction(tr("&Undelete items"), this,
SLOT(undelete()));
file->addSeparator();
acList += file->addAction(tr("Options"), this, SLOT(setOptions()));
file->addSeparator();
file->addAction(tr("Exit"), qApp, SLOT(quit()), Qt::ALT+Qt::Key_F4);
import = menuBar()->addMenu(tr("I&mport"));
import->addAction(tr("Keys"), this,
SLOT(on_BNimportKey_clicked()) );
import->addAction(tr("Requests"), this,
SLOT(on_BNimportReq_clicked()) );
import->addAction(tr("Certificates"), this,
SLOT(on_BNimportCert_clicked()) );
import->addAction(tr("PKCS#12"), this,
SLOT(on_BNimportPKCS12_clicked()) );
import->addAction(tr("PKCS#7"), this,
SLOT(on_BNimportPKCS7_clicked()) );
import->addAction(tr("Template"), this,
SLOT(on_BNimportTemp_clicked()) );
import->addAction(tr("Revocation list"), this,
SLOT(on_BNimportCrl_clicked()) );
import->addAction(tr("PEM file"), this,
SLOT(loadPem()) );
import->addAction(tr("paste PEM file"), this,
SLOT(pastePem()) );
token = menuBar()->addMenu(tr("&Token"));
token->addAction(tr("&Manage Security token"), this,
SLOT(manageToken()));
token->addAction(tr("&Init Security token"), this,
SLOT(initToken()));
token->addAction(tr("&Change PIN"), this,
SLOT(changePin()) );
token->addAction(tr("Change &SO PIN"), this,
SLOT(changeSoPin()) );
token->addAction(tr("Init PIN"), this,
SLOT(initPin()) );
help = menuBar()->addMenu(tr("&Help") );
help->addAction(tr("&Content"), this, SLOT(help()),
QKeySequence::HelpContents);
help->addAction(tr("&About"), this, SLOT(about()) );
help->addAction(tr("Donations"), this, SLOT(donations()) );
wdList += import;
scardList += token;
}
int MainWindow::changeDB(QString fname)
{
if (fname.isEmpty())
return 1;
close_database();
homedir = fname.mid(0, fname.lastIndexOf(QDir::separator()));
dbfile = fname;
return init_database();
}
void MainWindow::update_history_menu()
{
historyMenu->clear();
for (int i = 0; i < history.size(); i++) {
QAction *a;
QString txt = history[i];
txt = txt.remove(0, txt.lastIndexOf(QDir::separator()) +1);
if (txt.size() > 20)
txt = QString("...") + txt.mid(txt.size() - 20);
a = historyMenu->addAction(QString("%1 %2").arg(i).arg(txt));
a->setData(QVariant(history[i]));
a->setToolTip(history[i]);
}
}
void MainWindow::open_database(QAction* a)
{
changeDB(a->data().toString());
}
void MainWindow::new_database()
{
load_db l;
QString selectedFilter;
QString fname = QFileDialog::getSaveFileName(this, l.caption, homedir,
l.filter, &selectedFilter, QFileDialog::DontConfirmOverwrite);
// make sure that, if the 3 letter extension was left selected
// in Qt's OS X file open dialog,
// the filename actually ends with that extension.
// Otherwise usability breaks in jarring ways.
changeDB(getFullFilename(fname, selectedFilter));
}
void MainWindow::load_database()
{
load_db l;
QString fname = QFileDialog::getOpenFileName(this, l.caption, homedir,
l.filter);
changeDB(fname);
}
void MainWindow::import_dbdump()
{
extern int read_dump(const char *, db_base **, char *, int);
Passwd pass;
char buf[50];
db_base *dbl[] = { keys, reqs, certs, temps, crls };
if (!keys)
return;
QString file = QFileDialog::getOpenFileName(this, tr(XCA_TITLE), homedir,
tr("Database dump ( *.dump );;All files ( * )"));
if (file.isEmpty())
return;
pass_info p(tr("Import password"),
tr("Please enter the password of the old database"), this);
if (PwDialog::execute(&p, &pass) != 1)
return;
try {
read_dump(CCHAR(file), dbl, buf, sizeof(buf));
if (pki_evp::md5passwd(pass) != buf) {
xcaWarning msg(this, tr("Password verification error. Ignore keys ?"));
msg.addButton(QMessageBox::Cancel);
msg.addButton(QMessageBox::Ok)->setText(
tr("Import anyway"));
if (msg.exec() == QMessageBox::Cancel)
return;
}
pki_evp::oldpasswd = pass;
read_dump(CCHAR(file), dbl, NULL, 0);
pki_evp::oldpasswd.cleanse();
} catch (errorEx &err) {
Error(err);
}
}
void MainWindow::setOptions()
{
Options *opt = new Options(this);
opt->setExtDnString(mandatory_dn);
opt->setExpDnString(explicit_dn);
opt->setStringOpt(string_opt);
opt->setupPkcs11Provider(pkcs11path);
opt->suppress->setCheckState(
pki_base::suppress_messages ? Qt::Checked : Qt::Unchecked);
opt->noColorize->setCheckState(
pki_x509::dont_colorize_expiries ? Qt::Checked : Qt::Unchecked);
opt->transDnEntries->setCheckState(
db_x509name::translate_dn ? Qt::Checked : Qt::Unchecked);
opt->onlyTokenHashes->setCheckState(
pki_scard::only_token_hashes ? Qt::Checked : Qt::Unchecked);
if (!opt->exec()) {
delete opt;
enableTokenMenu(pkcs11::loaded());
return;
}
QString alg = opt->hashAlgo->currentHashName();
db mydb(dbfile);
mydb.set((const unsigned char *)CCHAR(alg), alg.length()+1, 1,
setting, "default_hash");
hashBox::setDefault(alg);
mandatory_dn = opt->getExtDnString();
explicit_dn = opt->getExpDnString();
mydb.set((const unsigned char *)CCHAR(mandatory_dn),
mandatory_dn.length()+1, 1, setting, "mandatory_dn");
if (explicit_dn.isEmpty())
explicit_dn = explicit_dn_default;
if (explicit_dn != explicit_dn_default) {
mydb.set((const unsigned char *)CCHAR(explicit_dn),
explicit_dn.length()+1, 1, setting, "explicit_dn");
} else {
mydb.first();
if (!mydb.find(setting, "explicit_dn")) {
mydb.erase();
}
}
QString flags = getOptFlags();
pki_base::suppress_messages = opt->suppress->checkState();
pki_x509::dont_colorize_expiries = opt->noColorize->checkState();
db_x509name::translate_dn = opt->transDnEntries->checkState();
pki_scard::only_token_hashes = opt->onlyTokenHashes->checkState();
if (flags != getOptFlags()) {
flags = getOptFlags();
mydb.set((const unsigned char *)(CCHAR(flags)),
flags.length()+1, 1, setting, "optionflags1");
mydb.first();
if (!mydb.find(setting, "suppress"))
mydb.erase();
}
if (opt->getStringOpt() != string_opt) {
string_opt = opt->getStringOpt();
ASN1_STRING_set_default_mask_asc((char *)CCHAR(string_opt));
mydb.set((const unsigned char *)CCHAR(string_opt),
string_opt.length()+1, 1, setting,"string_opt");
}
QString newpath = opt->getPkcs11Provider();
if (newpath != pkcs11path) {
pkcs11path = newpath;
mydb.set((const unsigned char *) CCHAR(pkcs11path),
pkcs11path.length()+1, 1,setting, "pkcs11path");
}
enableTokenMenu(pkcs11::loaded());
delete opt;
}
/* Documentation of the flags field:
* S: Suppress success messages
* C: Don't colorize success messages
*/
void MainWindow::setOptFlags_old(QString flags)
{
int s = flags.size(), i;
QByteArray b = flags.toAscii();
pki_base::suppress_messages = false;
pki_x509::dont_colorize_expiries = false;
db_x509name::translate_dn = false;
for (i=0; i<s; i++) {
switch (b[i]) {
case 'S':
pki_base::suppress_messages = true;
break;
case 'C':
pki_x509::dont_colorize_expiries = true;
break;
case 'T':
db_x509name::translate_dn = true;
break;
}
}
}
void MainWindow::setOptFlags(QString flags)
{
pki_base::suppress_messages = false;
pki_x509::dont_colorize_expiries = false;
db_x509name::translate_dn = false;
pki_scard::only_token_hashes = false;
foreach(QString flag, flags.split(",")) {
if (flag == "suppress_messages")
pki_base::suppress_messages = true;
else if (flag == "dont_colorize_expiries")
pki_x509::dont_colorize_expiries = true;
else if (flag == "translate_dn")
db_x509name::translate_dn = true;
else if (flag == "only_token_hashes")
pki_scard::only_token_hashes = true;
else if (!flag.isEmpty())
fprintf(stderr, "Unkown flag '%s'\n", CCHAR(flag));
}
}
QString MainWindow::getOptFlags()
{
QStringList flags;
if (pki_base::suppress_messages)
flags << "suppress_messages";
if (pki_x509::dont_colorize_expiries)
flags << "dont_colorize_expiries";
if (db_x509name::translate_dn)
flags << "translate_dn";
if (pki_scard::only_token_hashes)
flags << "only_token_hashes";
return flags.join(",");
}