mirror of
https://github.com/chris2511/xca.git
synced 2026-09-12 19:51:05 +05:00
509 lines
14 KiB
C++
509 lines
14 KiB
C++
/* vi: set sw=4 ts=4: */
|
|
/*
|
|
* Copyright (C) 2001 Christian Hohnstaedt.
|
|
*
|
|
* All rights reserved.
|
|
*
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* - Redistributions of source code must retain the above copyright notice,
|
|
* this list of conditions and the following disclaimer.
|
|
* - Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
* - Neither the name of the author nor the names of its contributors may be
|
|
* used to endorse or promote products derived from this software without
|
|
* specific prior written permission.
|
|
*
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
|
|
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
|
|
* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
|
|
* EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
* PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
|
* OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
* WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|
* OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
|
* ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
*
|
|
* This program links to software with different licenses from:
|
|
*
|
|
* http://www.openssl.org which includes cryptographic software
|
|
* written by Eric Young (eay@cryptsoft.com)"
|
|
*
|
|
* http://www.trolltech.com
|
|
*
|
|
*
|
|
*
|
|
* http://www.hohnstaedt.de/xca
|
|
* email: christian@hohnstaedt.de
|
|
*
|
|
* $Id$
|
|
*
|
|
*/
|
|
|
|
|
|
//#define MDEBUG
|
|
#include "MainWindow.h"
|
|
//#include "ImportMulti.h"
|
|
#include <Qt/qapplication.h>
|
|
#include <Qt/qclipboard.h>
|
|
#include <Qt/qmessagebox.h>
|
|
#include <Qt/qlabel.h>
|
|
#include <Qt/qpushbutton.h>
|
|
#include <Qt/qlistview.h>
|
|
#include <Qt/qlineedit.h>
|
|
#include <Qt/qtextbrowser.h>
|
|
#include <Qt/qstatusbar.h>
|
|
#include "lib/exception.h"
|
|
#include "lib/pki_pkcs12.h"
|
|
#include "lib/load_obj.h"
|
|
#include "lib/pass_info.h"
|
|
#include "lib/func.h"
|
|
#include "ui/PassRead.h"
|
|
#include "ui/PassWrite.h"
|
|
|
|
|
|
QPixmap *MainWindow::keyImg = NULL, *MainWindow::csrImg = NULL,
|
|
*MainWindow::certImg = NULL, *MainWindow::tempImg = NULL,
|
|
*MainWindow::nsImg = NULL, *MainWindow::revImg = NULL,
|
|
*MainWindow::appIco = NULL;
|
|
|
|
db_key *MainWindow::keys = NULL;
|
|
db_x509req *MainWindow::reqs = NULL;
|
|
db_x509 *MainWindow::certs = NULL;
|
|
db_temp *MainWindow::temps = NULL;
|
|
db_base *MainWindow::settings = NULL;
|
|
db_crl *MainWindow::crls = NULL;
|
|
|
|
NIDlist *MainWindow::eku_nid = NULL;
|
|
NIDlist *MainWindow::dn_nid = NULL;
|
|
NIDlist *MainWindow::aia_nid = NULL;
|
|
|
|
|
|
MainWindow::MainWindow(QWidget *parent )
|
|
:QMainWindow(parent)
|
|
{
|
|
statusBar()->clearMessage();
|
|
|
|
setWindowTitle(tr(XCA_TITLE));
|
|
dbfile = DBFILE;
|
|
force_load = 0;
|
|
|
|
baseDir = getBaseDir();
|
|
|
|
setupUi(this);
|
|
|
|
init_menu();
|
|
|
|
init_images();
|
|
do_connections();
|
|
|
|
#ifdef MDEBUG
|
|
CRYPTO_malloc_debug_init();
|
|
CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON);
|
|
fprintf(stderr, "malloc() debugging on.\n");
|
|
#endif
|
|
|
|
ERR_load_crypto_strings();
|
|
OpenSSL_add_all_algorithms();
|
|
|
|
read_cmdline();
|
|
if (exitApp) return;
|
|
|
|
init_baseDir();
|
|
|
|
dbfile = baseDir + QDir::separator() + dbfile;
|
|
init_database();
|
|
printf("Init database\n");
|
|
}
|
|
|
|
/* creates a new nid list from the given filename */
|
|
NIDlist *MainWindow::read_nidlist(QString name)
|
|
{
|
|
NIDlist nl;
|
|
QString prefix = getPrefix();
|
|
name = QDir::separator() + name;
|
|
|
|
/* first try $HOME/xca/ */
|
|
nl = readNIDlist(baseDir + name);
|
|
|
|
#ifndef WIN32
|
|
if (nl.count() == 0){ /* next is /etx/xca/... */
|
|
QString unix_etc = ETC;
|
|
nl = readNIDlist(unix_etc + name);
|
|
}
|
|
#endif
|
|
|
|
if (nl.count() == 0) /* look at /usr/(local/)share/xca/ */
|
|
nl = readNIDlist(prefix + name);
|
|
|
|
return new NIDlist(nl);
|
|
}
|
|
|
|
void MainWindow::init_baseDir()
|
|
{
|
|
static bool done = false;
|
|
if (done) return;
|
|
fprintf(stderr, "base Dir: %s\n", CCHAR(baseDir));
|
|
QDir d(baseDir);
|
|
if ( ! d.exists() && !d.mkdir(baseDir)) {
|
|
QMessageBox::warning(this,tr(XCA_TITLE),
|
|
QString::fromLatin1("Could not create: ") + baseDir);
|
|
qFatal("Could not create base dir");
|
|
}
|
|
done = true;
|
|
|
|
/* read in all our own OIDs */
|
|
initOIDs(baseDir);
|
|
|
|
eku_nid = read_nidlist("eku.txt");
|
|
dn_nid = read_nidlist("dn.txt");
|
|
aia_nid = read_nidlist("aia.txt");
|
|
|
|
char *p;
|
|
db mydb(dbfile);
|
|
if (!mydb.find(setting, "workingdir")) {
|
|
if ((p = (char *)mydb.load(NULL))) {
|
|
workingdir = p;
|
|
free(p);
|
|
}
|
|
}
|
|
}
|
|
|
|
void MainWindow::do_connections()
|
|
{
|
|
#if 0
|
|
connect( keyList, SIGNAL(init_database()), this, SLOT(init_database()));
|
|
connect( reqList, SIGNAL(init_database()), this, SLOT(init_database()));
|
|
connect( certList, SIGNAL(init_database()), this, SLOT(init_database()));
|
|
connect( tempList, SIGNAL(init_database()), this, SLOT(init_database()));
|
|
connect( crlList, SIGNAL(init_database()), this, SLOT(init_database()));
|
|
connect( BNnewKey, SIGNAL(clicked()), keys, SLOT(newItem()));
|
|
connect( BNexportKey, SIGNAL(clicked()), keys, SLOT(store()));
|
|
connect( BNimportKey, SIGNAL(clicked()), keys, SLOT(load()));
|
|
connect( BNdetailsKey, SIGNAL(clicked()), keys, SLOT(showItem()));
|
|
connect( BNdeleteKey, SIGNAL(clicked()), keys, SLOT(deleteItem()));
|
|
connect( BNchangePass, SIGNAL(clicked()), keys, SLOT(changePasswd()));
|
|
#endif
|
|
#if 0
|
|
connect( BNnewReq, SIGNAL(clicked()), reqList, SLOT(newItem()));
|
|
connect( BNimportReq, SIGNAL(clicked()), reqList, SLOT(load()));
|
|
connect( BNdetailsReq, SIGNAL(clicked()), reqList, SLOT(showItem()));
|
|
connect( BNdeleteReq, SIGNAL(clicked()), reqList, SLOT(deleteItem()));
|
|
|
|
connect( BNnewCert, SIGNAL(clicked()), certList, SLOT(newItem()));
|
|
connect( BNimportCert, SIGNAL(clicked()), certList, SLOT(load()));
|
|
connect( BNexportCert, SIGNAL(clicked()), certList, SLOT(store()));
|
|
connect( BNdetailsCert, SIGNAL(clicked()), certList, SLOT(showItem()));
|
|
connect( BNdeleteCert, SIGNAL(clicked()), certList, SLOT(deleteItem()));
|
|
connect( BNimportPKCS12, SIGNAL(clicked()), certList, SLOT(loadPKCS12()));
|
|
connect( BNimportPFX, SIGNAL(clicked()), certList, SLOT(loadPKCS12()));
|
|
connect( BNimportPKCS7, SIGNAL(clicked()), certList, SLOT(loadPKCS7()));
|
|
connect( BNviewState, SIGNAL(clicked()), this, SLOT(changeView()));
|
|
|
|
connect( BNemptyTemp, SIGNAL(clicked()), tempList, SLOT(newEmptyTemp()));
|
|
connect( BNcaTemp, SIGNAL(clicked()), tempList, SLOT(newCaTemp()));
|
|
connect( BNclientTemp, SIGNAL(clicked()), tempList, SLOT(newClientTemp()));
|
|
connect( BNserverTemp, SIGNAL(clicked()), tempList, SLOT(newServerTemp()));
|
|
connect( BNdeleteTemp, SIGNAL(clicked()), tempList, SLOT(deleteItem()));
|
|
connect( BNchangeTemp, SIGNAL(clicked()), tempList, SLOT(alterTemp()));
|
|
connect( BNimportTemp, SIGNAL(clicked()), tempList, SLOT(load()));
|
|
connect( BNexportTemp, SIGNAL(clicked()), tempList, SLOT(store()));
|
|
|
|
connect( BNimportCrl, SIGNAL(clicked()), crlList, SLOT(load()));
|
|
connect( BNdetailsCrl, SIGNAL(clicked()), crlList, SLOT(showItem()));
|
|
connect( BNdeleteCrl, SIGNAL(clicked()), crlList, SLOT(deleteItem()));
|
|
|
|
|
|
connect( reqList, SIGNAL(newCert(pki_x509req *)),
|
|
certList, SLOT(newCert(pki_x509req *)) );
|
|
connect( certList, SIGNAL(genCrl(pki_x509 *)),
|
|
crlList, SLOT(newItem(pki_x509 *)) );
|
|
connect( tempList, SIGNAL(newCert(pki_temp *)),
|
|
certList, SLOT(newCert(pki_temp *)) );
|
|
connect( tempList, SIGNAL(newReq(pki_temp *)),
|
|
reqList, SLOT(newItem(pki_temp *)) );
|
|
#endif
|
|
}
|
|
|
|
void MainWindow::init_images()
|
|
{
|
|
keyImg = loadImg("bigkey.png");
|
|
csrImg = loadImg("bigcsr.png");
|
|
certImg = loadImg("bigcert.png");
|
|
tempImg = loadImg("bigtemp.png");
|
|
nsImg = loadImg("netscape.png");
|
|
revImg = loadImg("bigcrl.png");
|
|
appIco = loadImg("key.xpm");
|
|
printf("k:%p, c:%p\n", keyImg, csrImg);
|
|
bigKey->setPixmap(*keyImg);
|
|
bigCsr->setPixmap(*csrImg);
|
|
bigCert->setPixmap(*certImg);
|
|
bigTemp->setPixmap(*tempImg);
|
|
bigRev->setPixmap(*revImg);
|
|
setWindowIcon(*appIco);
|
|
pki_key::icon[0] = loadImg("key.png");
|
|
pki_key::icon[1] = loadImg("halfkey.png");
|
|
pki_x509req::icon[0] = loadImg("req.png");
|
|
pki_x509req::icon[1] = loadImg("reqkey.png");
|
|
pki_x509req::icon[2] = loadImg("spki.png");
|
|
pki_x509::icon[0] = loadImg("validcert.png");
|
|
pki_x509::icon[1] = loadImg("validcertkey.png");
|
|
pki_x509::icon[2] = loadImg("invalidcert.png");
|
|
pki_x509::icon[3] = loadImg("invalidcertkey.png");
|
|
pki_x509::icon[4] = loadImg("revoked.png");
|
|
pki_temp::icon = loadImg("template.png");
|
|
#if 0
|
|
pki_crl::icon = loadImg("crl.png");
|
|
#endif
|
|
}
|
|
|
|
void MainWindow::read_cmdline()
|
|
{
|
|
int cnt = 1, opt = 0 , type = 1;
|
|
char *arg = NULL;
|
|
pki_base *item = NULL;
|
|
load_base *lb = NULL;
|
|
exitApp = 0;
|
|
#if 0
|
|
ImportMulti *dlgi = NULL;
|
|
dlgi = new ImportMulti(this, NULL, true);
|
|
#endif
|
|
while (cnt < qApp->argc()) {
|
|
arg = qApp->argv()[cnt];
|
|
if (arg[0] == '-') { // option
|
|
if (lb) delete lb;
|
|
opt = 1; lb = NULL; type = 1;
|
|
switch (arg[1]) {
|
|
#if 0
|
|
case 'c' : lb = new load_cert(); break;
|
|
case 'r' : lb = new load_req(); break;
|
|
case 'k' : lb = new load_key(); break;
|
|
case 'p' : lb = new load_pkcs12(); break;
|
|
case '7' : lb = new load_pkcs7(); break;
|
|
case 'l' : lb = new load_crl(); break;
|
|
case 't' : lb = new load_temp(); break;
|
|
#endif
|
|
case 'd' : type = 1; force_load=1; break;
|
|
case 'b' : type = 2; break;
|
|
case 'v' : fprintf(stderr, XCA_TITLE " Version " VER "\n");
|
|
opt=0; exitApp=1; break;
|
|
case 'x' : exitApp = 1; opt=0; break;
|
|
default : cmd_help((char*)(QString(tr("no such option: ")) + arg).data() );
|
|
}
|
|
if (arg[2] != '\0' && opt==1) {
|
|
arg+=2;
|
|
}
|
|
else {
|
|
cnt++;
|
|
continue;
|
|
}
|
|
}
|
|
if (lb) {
|
|
item = NULL;
|
|
try {
|
|
item = lb->loadItem(arg);
|
|
//dlgi->addItem(item);
|
|
}
|
|
catch (errorEx &err) {
|
|
if (item) {
|
|
delete item;
|
|
item = NULL;
|
|
}
|
|
}
|
|
}
|
|
else {
|
|
switch (type) {
|
|
case 1 : dbfile = arg; break;
|
|
case 2 : baseDir = arg; init_baseDir(); break;
|
|
default : cmd_help("I'm puzzled: this should not happen ! " );
|
|
}
|
|
}
|
|
|
|
cnt++;
|
|
}
|
|
#if 0
|
|
connect( dlgi, SIGNAL(init_database()), this, SLOT(init_database()));
|
|
dlgi->execute(1); /* force showing of import dialog */
|
|
delete dlgi;
|
|
#endif
|
|
}
|
|
|
|
|
|
MainWindow::~MainWindow()
|
|
{
|
|
close_database();
|
|
ERR_free_strings();
|
|
EVP_cleanup();
|
|
OBJ_cleanup();
|
|
if (eku_nid)
|
|
delete eku_nid;
|
|
if (dn_nid)
|
|
delete dn_nid;
|
|
if (aia_nid)
|
|
delete aia_nid;
|
|
#ifdef MDEBUG
|
|
fprintf(stderr, "Memdebug:\n");
|
|
CRYPTO_mem_leaks_fp(stderr);
|
|
#endif
|
|
}
|
|
|
|
int MainWindow::initPass()
|
|
{
|
|
pass_info p(tr("New Password"),
|
|
tr("Please enter a password, that will be used to encrypt your private keys in the database-file"));
|
|
QString passHash;// = settings->getString("pwhash");
|
|
#warning Keep a Passwd in DB ??
|
|
if (passHash.isEmpty()) {
|
|
int keylen = passWrite((char *)pki_key::passwd, 25, 0, &p);
|
|
if (keylen == 0) return 0;
|
|
pki_key::passwd[keylen]='\0';
|
|
//settings->putString( "pwhash", md5passwd(pki_key::passwd) );
|
|
}
|
|
else {
|
|
int keylen=0;
|
|
while (md5passwd(pki_key::passwd) != passHash) {
|
|
if (keylen !=0) QMessageBox::warning(this,tr(XCA_TITLE),
|
|
tr("Password verify error, please try again"));
|
|
p.setTitle(tr("Password"));
|
|
p.setDescription(tr("Please enter the password for unlocking the database"));
|
|
keylen = passRead(pki_key::passwd, 25, 0, &p);
|
|
if (keylen == 0) return 0;
|
|
pki_key::passwd[keylen]='\0';
|
|
}
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
// Static Password Callback functions
|
|
|
|
int MainWindow::passRead(char *buf, int size, int rwflag, void *userdata)
|
|
{
|
|
pass_info *p = (pass_info *)userdata;
|
|
printf("Userdata called\n");
|
|
Ui::PassRead ui;
|
|
QDialog *dlg = new QDialog(qApp->activeWindow());
|
|
ui.setupUi(dlg);
|
|
if (p != NULL) {
|
|
//ui.image->setPixmap( *keyImg );
|
|
ui.description->setText(p->getDescription());
|
|
dlg->setWindowTitle(p->getTitle());
|
|
}
|
|
dlg->show();
|
|
//dlg->activateWindow();
|
|
ui.pass->setFocus();
|
|
|
|
buf[0] = '-'; /* if this remains the dialog was aborted */
|
|
if (dlg->exec()) {
|
|
QString x = ui.pass->text();
|
|
strncpy(buf, x.toAscii(), size);
|
|
delete dlg;
|
|
return x.length();
|
|
}
|
|
else {
|
|
delete dlg;
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
|
|
int MainWindow::passWrite(char *buf, int size, int rwflag, void *userdata)
|
|
{
|
|
pass_info *p = (pass_info *)userdata;
|
|
Ui::PassWrite ui;
|
|
QDialog *dlg = new QDialog(qApp->activeWindow());
|
|
ui.setupUi(dlg);
|
|
if (p != NULL) {
|
|
ui.image->setPixmap( *keyImg );
|
|
ui.description->setText(p->getDescription());
|
|
dlg->setWindowTitle(p->getTitle());
|
|
}
|
|
dlg->show();
|
|
dlg->activateWindow();
|
|
ui.passA->setFocus();
|
|
|
|
if (dlg->exec()) {
|
|
QString A = ui.passA->text();
|
|
QString B = ui.passB->text();
|
|
delete dlg;
|
|
if (A != B)
|
|
return 0;
|
|
strncpy(buf, A.toAscii(), size);
|
|
return A.length();
|
|
}
|
|
else {
|
|
delete dlg;
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
QString MainWindow::md5passwd(const char *pass)
|
|
{
|
|
|
|
EVP_MD_CTX mdctx;
|
|
QString str;
|
|
unsigned int n;
|
|
int j;
|
|
char zs[4];
|
|
unsigned char m[EVP_MAX_MD_SIZE];
|
|
EVP_DigestInit(&mdctx, EVP_md5());
|
|
EVP_DigestUpdate(&mdctx, pass, strlen(pass));
|
|
EVP_DigestFinal(&mdctx, m, &n);
|
|
for (j=0; j<(int)n; j++) {
|
|
sprintf(zs, "%02X%c",m[j], (j+1 == (int)n) ?'\0':':');
|
|
str += zs;
|
|
}
|
|
return str;
|
|
}
|
|
|
|
void MainWindow::Error(errorEx &err)
|
|
{
|
|
if (err.isEmpty()) return;
|
|
QString msg = tr("The following error occured:") + "\n" + err.getString();
|
|
int ret = QMessageBox::warning(qApp->activeWindow(), XCA_TITLE,
|
|
msg, tr("&OK"), tr("Copy to Clipboard"));
|
|
if (ret == 1) {
|
|
QClipboard *cb = QApplication::clipboard();
|
|
cb->setText(msg);
|
|
}
|
|
}
|
|
|
|
QString MainWindow::getPath()
|
|
{
|
|
return workingdir;
|
|
}
|
|
|
|
void MainWindow::setPath(QString str)
|
|
{
|
|
db mydb(dbfile);
|
|
workingdir = str;
|
|
mydb.set((const unsigned char *)CCHAR(str), str.length()+1, 1, setting, "workingdir");
|
|
}
|
|
|
|
NewX509 *MainWindow::newX509()
|
|
{
|
|
#if 0
|
|
return new NewX509(NULL, 0, true);
|
|
#endif
|
|
}
|
|
|
|
void MainWindow::connNewX509(NewX509 *nx)
|
|
{
|
|
connect( (const QObject *)nx->genKeyBUT, SIGNAL(clicked()), keys, SLOT(newItem()) );
|
|
connect( nx, SIGNAL(genKey()), keys, SLOT(newItem()) );
|
|
connect( keys, SIGNAL(keyDone(QString)), nx, SLOT(newKeyDone(QString)) );
|
|
}
|
|
|
|
void MainWindow::changeView()
|
|
{
|
|
#if 0
|
|
certList->changeView(BNviewState);
|
|
#endif
|
|
}
|