xca/widgets/CertDetail.cpp
2015-05-18 17:51:20 +02:00

254 lines
5.9 KiB
C++

/* vi: set sw=4 ts=4:
*
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
*
* All rights reserved.
*/
#include "CertDetail.h"
#include "MainWindow.h"
#include "distname.h"
#include "clicklabel.h"
#include "lib/func.h"
#include <QtGui/QLabel>
#include <QtGui/QPushButton>
#include <QtGui/QLineEdit>
#include <QtGui/QMessageBox>
CertDetail::CertDetail(QWidget *parent)
:QDialog(parent)
{
setupUi(this);
setWindowTitle(XCA_TITLE);
descr->setReadOnly(true);
showConf = false;
}
void CertDetail::on_showExt_clicked()
{
if (showConf) {
showConf = false;
v3extensions->document()->setHtml(exts);
showExt->setText(tr("Show config"));
} else {
showConf = true;
v3extensions->document()->setPlainText(conf);
showExt->setText(tr("Show extensions"));
}
}
void CertDetail::setX509super(pki_x509super *x)
{
descr->setText(x->getIntName());
// examine the key
pki_key *key= x->getRefKey();
if (key) {
privKey->setText(key->getIntName());
if (key->isPrivKey()) {
privKey->setGreen();
} else {
privKey->setRed();
}
} else {
privKey->setText(tr("Not available"));
privKey->setDisabled(true);
privKey->disableToolTip();
}
// details of the subject
subject->setX509name(x->getSubject());
// V3 extensions
extList el = x->getV3ext();
if (el.count() == 0) {
tabwidget->removeTab(4);
} else {
exts = el.getHtml("<br>");
el.genGenericConf(&conf);
v3extensions->document()->setHtml(exts);
}
// Algorithm
sigAlgo->setText(x->getSigAlg());
}
void CertDetail::setCert(pki_x509 *cert)
{
image->setPixmap(*MainWindow::certImg);
headerLabel->setText(tr("Details of the certificate"));
try {
setX509super(cert);
// No attributes
tabwidget->removeTab(3);
// examine the signature
if ( cert->getSigner() == NULL) {
signature->setText(tr("Signer unknown"));
signature->setDisabled(true);
signature->disableToolTip();
} else if ( cert == cert->getSigner()) {
signature->setText(tr("Self signed"));
signature->setGreen();
signature->disableToolTip();
} else {
signature->setText(cert->getSigner()->getIntName());
signature->setGreen();
}
// check trust state
trustState->disableToolTip();
if (cert->getEffTrust() == 0) {
trustState->setText(tr("Not trusted"));
trustState->setRed();
}
else {
trustState->setText(tr("Trusted"));
trustState->setGreen();
}
// the serial
serialNr->setText(cert->getSerial().toHex());
// details of the issuer
issuer->setX509name(cert->getIssuer());
// The dates
notBefore->setText(cert->getNotBefore().toPretty());
notBefore->setToolTip(cert->getNotBefore().toPrettyGMT());
notAfter->setText(cert->getNotAfter().toPretty());
notAfter->setToolTip(cert->getNotAfter().toPrettyGMT());
// validation of the Date
dateValid->disableToolTip();
if (cert->isRevoked()) {
x509rev rev = cert->getRevocation();
dateValid->setText(tr("Revoked: ") +
rev.getDate().toPretty());
dateValid->setRed();
dateValid->setToolTip(rev.getDate().toPrettyGMT());
} else if (!cert->checkDate()) {
dateValid->setText(tr("Not valid"));
dateValid->setRed();
} else {
dateValid->setGreen();
dateValid->setText(tr("Valid"));
}
// the fingerprints
fpMD5->setText(cert->fingerprint(EVP_md5()));
fpSHA1->setText(cert->fingerprint(EVP_sha1()));
QString fp = cert->fingerprint(EVP_sha256());
int x = fp.size() / 2;
fp = fp.mid(0,x) + "\n" + fp.mid(x+1, -1);
fpSHA256->setText(fp);
openssl_error();
} catch (errorEx &err) {
XCA_WARN(err.getString());
}
}
void CertDetail::setReq(pki_x509req *req)
{
image->setPixmap(*MainWindow::csrImg);
headerLabel->setText(tr("Details of the certificate signing request"));
try {
setX509super(req);
// No issuer
tabwidget->removeTab(2);
// verification
if (!req->verify() ) {
signature->setRed();
signature->setText("Failed");
} else {
signature->setGreen();
if (req->isSpki()) {
signature->setText("SPKAC");
} else {
signature->setText("PKCS#10");
}
}
signature->disableToolTip();
trustState->hide();
fingerprints->hide();
validity->hide();
serialLabel->hide();
serialNr->hide();
// The non extension attributes
int cnt = X509_REQ_get_attr_count(req->getReq());
int added = 0;
QGridLayout *attrLayout = new QGridLayout(attributes);
attrLayout->setAlignment(Qt::AlignTop);
attrLayout->setSpacing(6);
attrLayout->setMargin(11);
for (int i = 0; i<cnt; i++) {
int nid;
QLabel *label;
QString trans;
X509_ATTRIBUTE *att = X509_REQ_get_attr(req->getReq(), i);
nid = OBJ_obj2nid(att->object);
if (X509_REQ_extension_nid(nid)) {
continue;
}
label = new QLabel(this);
trans = dn_translations[nid];
if (translate_dn && !trans.isEmpty()) {
label->setText(trans);
label->setToolTip(QString(OBJ_nid2sn(nid)));
} else {
label->setText(QString(OBJ_nid2ln(nid)));
label->setToolTip(trans);
}
label->setText(QString(OBJ_nid2ln(nid)));
label->setToolTip(QString(OBJ_nid2sn(nid)));
attrLayout->addWidget(label, i, 0);
added++;
if (att->single) {
label = labelFromAsn1String(att->value.single->value.asn1_string);
attrLayout->addWidget(label, i, 1);
continue;
}
int count = sk_ASN1_TYPE_num(att->value.set);
for (int j=0; j<count; j++) {
label = labelFromAsn1String(sk_ASN1_TYPE_value(att->value.set, j)->value.asn1_string);
attrLayout->addWidget(label, i, j +1);
}
}
ASN1_IA5STRING *chal = req->spki_challange();
if (chal) {
QLabel *label;
label = new QLabel(this);
label->setText(QString("SPKI Challenge String"));
attrLayout->addWidget(label, 0, 0);
label = labelFromAsn1String(chal);
attrLayout->addWidget(label, 0, 1);
added++;
}
if (!added) {
tabwidget->removeTab(2);
}
openssl_error();
} catch (errorEx &err) {
XCA_WARN(err.getString());
}
}
QLabel *CertDetail::labelFromAsn1String(ASN1_STRING *s)
{
QLabel *label;
label = new CopyLabel(this);
label->setText(asn1ToQString(s));
label->setToolTip(QString(ASN1_tag2str(s->type)));
return label;
}