The_Great_Archive/xca
1
0
Fork 0
mirror of https://github.com/chris2511/xca.git synced 2026-09-13 18:46:25 +05:00
Code Issues Actions Packages Projects Releases Wiki Activity
ac780d3e77
xca/widgets/MW_database.cpp
Patrick Monnerat ad6c2baae5 Add support for OpenSSL 1.1.0 
The API changed heavily. New functions arrived, old functions
disappeared and many structures became opaque.

This version of the patch implements pkcs11 signing as follows:
- openssl < 1.0.0: rsa & dsa without engine
- openssl 1.0.x: rsa, dsa & ec with engine
- openssl >= 1.1.0: rsa, dsa & ec without engine

In the operation, we therefore also gain implementation of dsa signing for openssl < 1.0.0 (ec disabled because EC_KEY_METHOD was not yet invented!).

I've given up trying to use a PKEY_ENGINE with openssl 1.1: seems not possible anymore.

I've succeeded compiling the patched xca with openssl 0.9.8n, 1.0.2j and 1.1.0e.
I've successfully tested pkcs11 signing using softhsm with openssl 1.0.2j and 1.1.0e.

The patch also removes gcc7 new warnings.
2017-06-19 08:32:39 +02:00

411 lines
9.2 KiB
C++
Raw Blame History

/* vi: set sw=4 ts=4:
*
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
*
* All rights reserved.
*/
#include "MainWindow.h"
#include "lib/exception.h"
#include "lib/pki_evp.h"
#include "lib/pki_scard.h"
#include "lib/entropy.h"
#include <QDir>
#include <QDebug>
#include <QStatusBar>
#include <QMessageBox>
#include "lib/db_base.h"
#include "lib/func.h"
#include "widgets/ImportMulti.h"
#include "widgets/NewKey.h"
void MainWindow::set_geometry(char *p, db_header_t *head)
{
if (head->version != 1)
return;
QByteArray ba = QByteArray::fromRawData(p, head->len);
int w, h, i;
w = db::intFromData(ba);
h = db::intFromData(ba);
i = db::intFromData(ba);
resize(w,h);
if (i != -1)
tabView->setCurrentIndex(i);
}
int MainWindow::init_database()
{
int ret = 2;
qDebug("Opening database: %s", QString2filename(dbfile));
keys = NULL; reqs = NULL; certs = NULL; temps = NULL; crls = NULL;
Entropy::seed_rng();
certView->setRootIsDecorated(db_x509::treeview);
try {
ret = initPass();
if (ret == 2)
return ret;
keys = new db_key(dbfile, this);
reqs = new db_x509req(dbfile, this);
certs = new db_x509(dbfile, this);
temps = new db_temp(dbfile, this);
crls = new db_crl(dbfile, this);
certs->updateAfterDbLoad();
}
catch (errorEx &err) {
Error(err);
dbfile = "";
return ret;
}
searchEdit->setText("");
searchEdit->show();
statusBar()->addWidget(searchEdit, 1);
mandatory_dn = "";
explicit_dn = explicit_dn_default;
string_opt = QString("MASK:0x2002");
ASN1_STRING_set_default_mask_asc((char*)CCHAR(string_opt));
hashBox::resetDefault();
pkcs11path = QString();
workingdir = QDir::currentPath();
setOptFlags((QString()));
connect( keys, SIGNAL(newKey(pki_key *)),
certs, SLOT(newKey(pki_key *)) );
connect( keys, SIGNAL(delKey(pki_key *)),
certs, SLOT(delKey(pki_key *)) );
connect( keys, SIGNAL(newKey(pki_key *)),
reqs, SLOT(newKey(pki_key *)) );
connect( keys, SIGNAL(delKey(pki_key *)),
reqs, SLOT(delKey(pki_key *)) );
connect( certs, SIGNAL(connNewX509(NewX509 *)), this,
SLOT(connNewX509(NewX509 *)) );
connect( reqs, SIGNAL(connNewX509(NewX509 *)), this,
SLOT(connNewX509(NewX509 *)) );
connect( reqs, SIGNAL(newCert(pki_x509req *)),
certs, SLOT(newCert(pki_x509req *)) );
connect( tempView, SIGNAL(newCert(pki_temp *)),
certs, SLOT(newCert(pki_temp *)) );
connect( tempView, SIGNAL(newReq(pki_temp *)),
reqs, SLOT(newItem(pki_temp *)) );
keyView->setIconSize(pki_evp::icon[0]->size());
reqView->setIconSize(pki_x509req::icon[0]->size());
certView->setIconSize(pki_x509::icon[0]->size());
tempView->setIconSize(pki_temp::icon->size());
crlView->setIconSize(pki_crl::icon->size());
keyView->setModel(keys);
reqView->setModel(reqs);
certView->setModel(certs);
tempView->setModel(temps);
crlView->setModel(crls);
try {
db mydb(dbfile);
while (mydb.find(setting, QString()) == 0) {
QString key;
db_header_t head;
char *p = (char *)mydb.load(&head);
if (!p) {
if (mydb.next())
break;
continue;
}
key = head.name;
if (key == "workingdir")
workingdir = p;
else if (key == "pkcs11path")
pkcs11path = p;
else if (key == "default_hash")
hashBox::setDefault(p);
else if (key == "mandatory_dn")
mandatory_dn = p;
else if (key == "explicit_dn")
explicit_dn = p;
/* what a stupid idea.... */
else if (key == "multiple_key_use")
mydb.erase();
else if (key == "string_opt")
string_opt = p;
else if (key == "suppress")
mydb.erase();
else if (key == "optionflags1")
setOptFlags((QString(p)));
/* Different optionflags, since setOptFlags()
* does an abort() for unknown flags in
* older versions. *Another stupid idea*
* This is for backward compatibility
*/
else if (key == "optionflags")
setOptFlags_old((QString(p)));
else if (key == "defaultkey")
NewKey::setDefault((QString(p)));
else if (key == "mw_geometry")
set_geometry(p, &head);
free(p);
if (mydb.next())
break;
}
} catch (errorEx &err) {
Error(err);
return ret;
}
ASN1_STRING_set_default_mask_asc((char*)CCHAR(string_opt));
if (explicit_dn.isEmpty())
explicit_dn = explicit_dn_default;
setWindowTitle(tr(XCA_TITLE));
setItemEnabled(true);
if (pki_evp::passwd.isNull())
XCA_INFO(tr("Using or exporting private keys will not be possible without providing the correct password"));
dbindex->setText(tr("Database") + ": " + dbfile);
load_engine();
return ret;
}
void MainWindow::dump_database()
{
QString dirname = QFileDialog::getExistingDirectory(this, tr(XCA_TITLE),
getPath());
if (dirname.isEmpty())
return;
QDir d(dirname);
if ( ! d.exists() && !d.mkdir(dirname)) {
errorEx err("Could not create '" + dirname + "'");
MainWindow::Error(err);
return;
}
printf("Dumping to %s\n", CCHAR(dirname));
try {
keys->dump(dirname);
certs->dump(dirname);
temps->dump(dirname);
crls->dump(dirname);
reqs->dump(dirname);
}
catch (errorEx &err) {
MainWindow::Error(err);
}
}
void MainWindow::undelete()
{
ImportMulti *dlgi = new ImportMulti(this);
db_header_t head;
db mydb(dbfile);
for (mydb.first(DBFLAG_OUTDATED); !mydb.eof(); mydb.next(DBFLAG_OUTDATED)) {
mydb.get_header(&head);
if (head.flags & DBFLAG_DELETED) {
pki_base *item;
unsigned char *p = NULL;
QString name = QString::fromUtf8(head.name);
switch (head.type) {
case asym_key: item = new pki_evp(name); break;
case x509_req: item = new pki_x509req(name); break;
case x509: item = new pki_x509(name); break;
case revocation: item = new pki_crl(name); break;
case tmpl: item = new pki_temp(name); break;
case smartCard: item = new pki_scard(name); break;
default: continue;
}
try {
p = mydb.load(&head);
item->fromData(p, &head);
dlgi->addItem(item);
}
catch (errorEx &err) {
Error(err);
delete item;
}
free(p);
}
}
if (dlgi->entries() > 0) {
dlgi->execute(1);
} else {
XCA_INFO(tr("No deleted items found"));
}
delete dlgi;
}
int MainWindow::open_default_db()
{
if (!dbfile.isEmpty())
return 0;
FILE *fp = fopen_read(getUserSettingsDir() +
QDir::separator() + "defaultdb");
if (!fp)
return 0;
char buff[256];
size_t len = fread(buff, 1, 255, fp);
fclose(fp);
buff[len] = 0;
dbfile = filename2QString(buff).trimmed();
if (QFile::exists(dbfile))
return init_database();
dbfile = QString();
return 0;
}
void MainWindow::default_database()
{
QFileInfo fi(dbfile);
QString dir = getUserSettingsDir();
QString file = dir +QDir::separator() +"defaultdb";
FILE *fp;
QDir d;
if (dbfile.isEmpty()) {
QFile::remove(file);
return;
}
d.mkpath(dir);
fp = fopen_write(file);
if (fp) {
QByteArray ba;
ba = filename2bytearray(fi.canonicalFilePath() + "\n");
if (fwrite(ba.constData(), ba.size(), 1, fp)) {
/* IGNORE_RESULT */
}
fclose(fp);
}
}
void MainWindow::close_database()
{
QByteArray ba;
if (!dbfile.isEmpty()) {
ba += db::intToData(size().width());
ba += db::intToData(size().height());
ba += db::intToData(tabView->currentIndex());
db mydb(dbfile);
mydb.set((const unsigned char *)ba.constData(), ba.size(), 1,
setting, "mw_geometry");
}
setItemEnabled(false);
statusBar()->removeWidget(searchEdit);
dbindex->clear();
keyView->setModel();
reqView->setModel();
certView->setModel();
tempView->setModel();
crlView->setModel();
if (crls)
delete(crls);
if (reqs)
delete(reqs);
if (certs)
delete(certs);
if (temps)
delete(temps);
if (keys)
delete(keys);
reqs = NULL;
certs = NULL;
temps = NULL;
keys = NULL;
pki_evp::passwd.cleanse();
pki_evp::passwd = QByteArray();
if (!crls)
return;
crls = NULL;
try {
int ret;
db mydb(dbfile);
ret = mydb.shrink( DBFLAG_OUTDATED | DBFLAG_DELETED );
if (ret == 1)
XCA_INFO(tr("Errors detected and repaired while deleting outdated items from the database. A backup file was created"));
if (ret == 2)
XCA_INFO(tr("Removing deleted or outdated items from the database failed."));
}
catch (errorEx &err) {
MainWindow::Error(err);
}
update_history(dbfile);
pkcs11::remove_libs();
enableTokenMenu(pkcs11::loaded());
dbfile.clear();
}
void MainWindow::load_history()
{
QFile file;
QString name = getUserSettingsDir() + QDir::separator() + "dbhistory";
file.setFileName(name);
if (!file.open(QIODevice::ReadOnly))
return;
history.clear();
while (!file.atEnd()) {
QString name;
char buf[1024];
ssize_t size = file.readLine(buf, sizeof buf);
if (size <= 0)
break;
name = filename2QString(buf);
name = name.trimmed();
if (name.size() == 0)
continue;
if (history.indexOf(name) == -1)
history << name;
}
file.close();
update_history_menu();
}
void MainWindow::update_history(QString fname)
{
QFile file;
int pos;
QString name, dir = getUserSettingsDir();
QDir d;
pos = history.indexOf(fname);
if (pos == 0)
return; /* no changes */
d.mkpath(dir);
if (pos > 0)
history.removeAt(pos);
history.prepend(fname);
while (history.size() > 10)
history.removeLast();
name = dir + QDir::separator() + "dbhistory";
file.setFileName(name);
if (!file.open(QIODevice::ReadWrite))
return;
for (pos = 0; pos < history.size(); pos++) {
QByteArray ba = filename2bytearray(history[pos]);
ba.append('\n');
if (file.write(ba) <= 0)
break;
}
file.close();
update_history_menu();
}
Reference in New Issue View Git Blame Copy Permalink