mirror of
https://github.com/chris2511/xca.git
synced 2026-09-14 02:56:18 +05:00
Use the probably modified internal name of the template in the template-details dialog before import. Therefore the name of the qlineedit of the internal name of all other details dialogs changed from "descr" to "description" to match the name in the NewX509 dialog and to be found by the "XcaDetails" class. When exporting the template data, add the internal name and the comment to the exported data. The XCA template data is defined by us and can be modified. This change is backwards and upwards compatible: New versions of XCA can read an old Template export and vice-versa.
292 lines
6.8 KiB
C++
292 lines
6.8 KiB
C++
/* vi: set sw=4 ts=4:
|
|
*
|
|
* Copyright (C) 2001 - 2014 Christian Hohnstaedt.
|
|
*
|
|
* All rights reserved.
|
|
*/
|
|
|
|
|
|
#include "CertDetail.h"
|
|
#include "KeyDetail.h"
|
|
#include "MainWindow.h"
|
|
#include "distname.h"
|
|
#include "clicklabel.h"
|
|
#include "Help.h"
|
|
#include "OidResolver.h"
|
|
#include "lib/func.h"
|
|
#include "lib/XcaWarningCore.h"
|
|
#include <QLabel>
|
|
#include <QPushButton>
|
|
#include <QLineEdit>
|
|
#include <QMessageBox>
|
|
|
|
CertDetail::CertDetail(QWidget *w) : XcaDetail(w)
|
|
{
|
|
setupUi(this);
|
|
}
|
|
|
|
void CertDetail::on_showExt_clicked()
|
|
{
|
|
if (showConf) {
|
|
showConf = false;
|
|
v3extensions->document()->setHtml(exts);
|
|
showExt->setText(tr("Show config"));
|
|
} else {
|
|
showConf = true;
|
|
v3extensions->document()->setPlainText(conf);
|
|
showExt->setText(tr("Show extensions"));
|
|
}
|
|
|
|
}
|
|
|
|
void CertDetail::setX509super(pki_x509super *x)
|
|
{
|
|
description->setText(x->getIntName());
|
|
thisSqlId = x->getSqlItemId();
|
|
|
|
connect_pki(x);
|
|
// examine the key
|
|
myPubKey = x->getRefKey();
|
|
if (myPubKey) {
|
|
privKey->setText(myPubKey->getIntName());
|
|
privKey->setClickText(myPubKey->getSqlItemId().toString());
|
|
if (myPubKey->isPrivKey()) {
|
|
privKey->setGreen();
|
|
} else {
|
|
privKey->setRed();
|
|
}
|
|
} else {
|
|
tmpPubKey = myPubKey = x->getPubKey();
|
|
privKey->setText(tr("Show public key"));
|
|
privKey->setRed();
|
|
myPubKey->setIntName(x->getIntName());
|
|
myPubKey->setComment(tr("This key is not in the database."));
|
|
}
|
|
|
|
if (!myPubKey) {
|
|
privKey->setText(tr("Not available"));
|
|
privKey->setDisabled(true);
|
|
privKey->disableToolTip();
|
|
} else {
|
|
keySqlId = myPubKey->getSqlItemId();
|
|
}
|
|
connect(privKey, SIGNAL(doubleClicked(QString)),
|
|
this, SLOT(showPubKey()));
|
|
|
|
// details of the subject
|
|
subject->setX509name(x->getSubject());
|
|
|
|
// V3 extensions
|
|
extList el = x->getV3ext();
|
|
if (el.count() == 0) {
|
|
tabwidget->removeTab(4);
|
|
} else {
|
|
exts = el.getHtml("<br>");
|
|
el.genGenericConf(&conf);
|
|
v3extensions->document()->setHtml(exts);
|
|
}
|
|
|
|
// Algorithm
|
|
sigAlgo->setText(x->getSigAlg());
|
|
connect(sigAlgo, SIGNAL(doubleClicked(QString)),
|
|
MainWindow::getResolver(), SLOT(searchOid(QString)));
|
|
|
|
// Comment
|
|
comment->setPlainText(x->getComment());
|
|
|
|
setCert(dynamic_cast<pki_x509*>(x));
|
|
setReq(dynamic_cast<pki_x509req*>(x));
|
|
}
|
|
|
|
void CertDetail::setCert(pki_x509 *cert)
|
|
{
|
|
if (!cert)
|
|
return;
|
|
init("certdetail", ":certImg");
|
|
headerLabel->setText(tr("Details of the Certificate"));
|
|
try {
|
|
// No attributes
|
|
tabwidget->removeTab(3);
|
|
|
|
// examine the signature
|
|
if (cert->getSigner() == NULL) {
|
|
signature->setText(tr("Signer unknown"));
|
|
signature->setDisabled(true);
|
|
signature->disableToolTip();
|
|
} else if (cert == cert->getSigner()) {
|
|
signature->setText(tr("Self signed"));
|
|
signature->setGreen();
|
|
signature->disableToolTip();
|
|
} else {
|
|
pki_x509 *issuer = cert->getSigner();
|
|
signature->setText(issuer->getIntName());
|
|
signature->setClickText(issuer->getSqlItemId().toString());
|
|
signature->setGreen();
|
|
issuerSqlId = issuer->getSqlItemId();
|
|
|
|
connect(signature, SIGNAL(doubleClicked(QString)),
|
|
this, SLOT(showIssuer()));
|
|
}
|
|
|
|
// the serial
|
|
serialNr->setText(cert->getSerial());
|
|
|
|
// details of the issuer
|
|
issuer->setX509name(cert->getIssuerName());
|
|
|
|
// The dates
|
|
notBefore->setText(cert->getNotBefore().toPretty());
|
|
notBefore->setToolTip(cert->getNotBefore().toPrettyGMT());
|
|
notAfter->setText(cert->getNotAfter().toPretty());
|
|
notAfter->setToolTip(cert->getNotAfter().toPrettyGMT());
|
|
|
|
// validation of the Date
|
|
dateValid->disableToolTip();
|
|
if (cert->isRevoked()) {
|
|
x509rev rev = cert->getRevocation();
|
|
dateValid->setText(tr("Revoked at %1")
|
|
.arg(rev.getDate().toPretty()));
|
|
dateValid->setRed();
|
|
dateValid->setToolTip(rev.getDate().toPrettyGMT());
|
|
} else if (!cert->checkDate()) {
|
|
dateValid->setText(tr("Not valid"));
|
|
dateValid->setRed();
|
|
} else {
|
|
dateValid->setGreen();
|
|
dateValid->setText(tr("Valid"));
|
|
}
|
|
// the fingerprints
|
|
fpMD5->setText(cert->fingerprint(EVP_md5()));
|
|
fpSHA1->setText(cert->fingerprint(EVP_sha1()));
|
|
QString fp = cert->fingerprint(EVP_sha256());
|
|
int x = fp.size() / 2;
|
|
fp = fp.mid(0,x) + "\n" + fp.mid(x+1, -1);
|
|
fpSHA256->setText(fp);
|
|
|
|
openssl_error();
|
|
} catch (errorEx &err) {
|
|
XCA_WARN(err.getString());
|
|
}
|
|
}
|
|
|
|
void CertDetail::setReq(pki_x509req *req)
|
|
{
|
|
if (!req)
|
|
return;
|
|
init("csrdetail", ":csrImg");
|
|
headerLabel->setText(tr("Details of the certificate signing request"));
|
|
try {
|
|
// No issuer
|
|
tabwidget->removeTab(2);
|
|
|
|
// verification
|
|
if (!req->verify() ) {
|
|
signature->setRed();
|
|
signature->setText("Failed");
|
|
} else {
|
|
signature->setGreen();
|
|
signature->setText("PKCS#10");
|
|
}
|
|
signature->disableToolTip();
|
|
fingerprints->hide();
|
|
validity->hide();
|
|
serialLabel->hide();
|
|
serialNr->hide();
|
|
|
|
// The non extension attributes
|
|
int cnt = X509_REQ_get_attr_count(req->getReq());
|
|
int added = 0;
|
|
QGridLayout *attrLayout = new QGridLayout(attributes);
|
|
attrLayout->setAlignment(Qt::AlignTop);
|
|
attrLayout->setSpacing(6);
|
|
attrLayout->setContentsMargins(11, 11, 11, 11);
|
|
|
|
for (int i = 0, ii = 0; i<cnt; i++) {
|
|
int nid;
|
|
QLabel *label;
|
|
QString trans;
|
|
X509_ATTRIBUTE *att = X509_REQ_get_attr(req->getReq(), i);
|
|
|
|
nid = OBJ_obj2nid(X509_ATTRIBUTE_get0_object(att));
|
|
|
|
if (X509_REQ_extension_nid(nid)) {
|
|
continue;
|
|
}
|
|
label = new QLabel(this);
|
|
trans = dn_translations[nid];
|
|
if (Settings["translate_dn"] && !trans.isEmpty()) {
|
|
label->setText(trans);
|
|
label->setToolTip(QString(OBJ_nid2sn(nid)));
|
|
} else {
|
|
label->setText(QString(OBJ_nid2ln(nid)));
|
|
label->setToolTip(trans);
|
|
}
|
|
|
|
label->setText(QString(OBJ_nid2ln(nid)));
|
|
label->setToolTip(QString(OBJ_nid2sn(nid)));
|
|
attrLayout->addWidget(label, ii, 0);
|
|
added++;
|
|
|
|
int count = X509_ATTRIBUTE_count(att);
|
|
for (int j=0; j<count; j++) {
|
|
ASN1_TYPE *at = X509_ATTRIBUTE_get0_type(att, j);
|
|
label = labelFromAsn1String(at->value.asn1_string);
|
|
attrLayout->addWidget(label, ii, j +1);
|
|
}
|
|
ii++;
|
|
}
|
|
if (!added) {
|
|
tabwidget->removeTab(2);
|
|
}
|
|
openssl_error();
|
|
} catch (errorEx &err) {
|
|
XCA_WARN(err.getString());
|
|
}
|
|
}
|
|
|
|
QLabel *CertDetail::labelFromAsn1String(ASN1_STRING *s)
|
|
{
|
|
QLabel *label;
|
|
label = new CopyLabel(this);
|
|
label->setText(asn1ToQString(s));
|
|
label->setToolTip(QString(ASN1_tag2str(s->type)));
|
|
return label;
|
|
}
|
|
|
|
void CertDetail::itemChanged(pki_base *pki)
|
|
{
|
|
QVariant pkiSqlId = pki->getSqlItemId();
|
|
|
|
if (pkiSqlId == keySqlId)
|
|
privKey->setText(pki->getIntName());
|
|
if (pkiSqlId == issuerSqlId)
|
|
signature->setText(pki->getIntName());
|
|
if (pkiSqlId == thisSqlId)
|
|
description->setText(pki->getIntName());
|
|
}
|
|
|
|
void CertDetail::showPubKey()
|
|
{
|
|
KeyDetail::showKey(this, myPubKey, false);
|
|
}
|
|
|
|
void CertDetail::showIssuer()
|
|
{
|
|
showCert(this, Store.lookupPki<pki_x509>(issuerSqlId));
|
|
}
|
|
|
|
void CertDetail::showCert(QWidget *parent, pki_x509super *x)
|
|
{
|
|
if (!x)
|
|
return;
|
|
CertDetail *dlg = new CertDetail(parent);
|
|
dlg->setX509super(x);
|
|
dlg->exec();
|
|
delete dlg;
|
|
}
|
|
|
|
CertDetail::~CertDetail()
|
|
{
|
|
delete tmpPubKey;
|
|
}
|