vasilito
7284eec11e
redbear-ci / check (push) Waiting to run
kf6-kwallet's ksecretd daemon (the org.freedesktop.secrets Secret Service provider) requires Qca-qt6 2.3.1. Vendor QCA 2.3.10 under the full-fork model and build the gcrypt provider plugin (backed by the vendored libgcrypt) so QCA has a working SymmetricCipher/Hash/PBKDF2 backend on Redox. External-toolkit providers (ossl/nss/botan/gnupg/pkcs11/cyrus-sasl) are disabled — those libraries are not part of the Redox userland; logger + softstore (pure-Qt) are kept. Source edit: the top-level Qt6 find_package required the Test component unconditionally; gate it on BUILD_TESTS so a tools/tests-off build configures without Qt6Test. Install via DESTDIR since QCA anchors its install dirs to the absolute Qt prefix (/usr), which ignores cmake --install --prefix. Build libgpg-error + libgcrypt with --with-pic so their static archives can be linked into the qca-gcrypt shared plugin. Add qca to kf6-kwallet deps.
698 lines
18 KiB
C++
698 lines
18 KiB
C++
/*
|
|
Copyright (C) 2007 Justin Karneges <justin@affinix.com>
|
|
|
|
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
of this software and associated documentation files (the "Software"), to deal
|
|
in the Software without restriction, including without limitation the rights
|
|
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
copies of the Software, and to permit persons to whom the Software is
|
|
furnished to do so, subject to the following conditions:
|
|
|
|
The above copyright notice and this permission notice shall be included in
|
|
all copies or substantial portions of the Software.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
|
|
AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
|
*/
|
|
|
|
#include "certitem.h"
|
|
|
|
#include "prompter.h"
|
|
#include <QMessageBox>
|
|
#include <QtCore>
|
|
#include <QtCrypto>
|
|
#include <QtGui>
|
|
|
|
typedef QMap<CertItemStore::IconType, QPixmap> CertItemIconset;
|
|
|
|
//----------------------------------------------------------------------------
|
|
// MyPrompter
|
|
//----------------------------------------------------------------------------
|
|
class MyPrompter : public Prompter
|
|
{
|
|
Q_OBJECT
|
|
private:
|
|
QMap<QString, QCA::SecureArray> known;
|
|
QMap<QString, QCA::SecureArray> maybe;
|
|
|
|
public:
|
|
MyPrompter(QObject *parent = 0)
|
|
: Prompter(parent)
|
|
{
|
|
}
|
|
|
|
void fileSuccess(const QString &fileName)
|
|
{
|
|
if (maybe.contains(fileName)) {
|
|
known[fileName] = maybe[fileName];
|
|
maybe.remove(fileName);
|
|
}
|
|
}
|
|
|
|
void fileFailed(const QString &fileName)
|
|
{
|
|
maybe.remove(fileName);
|
|
known.remove(fileName);
|
|
}
|
|
|
|
protected:
|
|
virtual QCA::SecureArray knownPassword(const QCA::Event &event)
|
|
{
|
|
if (event.source() == QCA::Event::Data && !event.fileName().isEmpty())
|
|
return known.value(event.fileName());
|
|
else
|
|
return QCA::SecureArray();
|
|
}
|
|
|
|
virtual void userSubmitted(const QCA::SecureArray &password, const QCA::Event &event)
|
|
{
|
|
if (event.source() == QCA::Event::Data && !event.fileName().isEmpty())
|
|
maybe[event.fileName()] = password;
|
|
}
|
|
};
|
|
|
|
//----------------------------------------------------------------------------
|
|
// CertItem
|
|
//----------------------------------------------------------------------------
|
|
static QString escape(const QString &in)
|
|
{
|
|
QString out;
|
|
for (int n = 0; n < in.length(); ++n) {
|
|
if (in[n] == '\\')
|
|
out += "\\\\";
|
|
else if (in[n] == ':')
|
|
out += "\\c";
|
|
else if (in[n] == '\n')
|
|
out += "\\n";
|
|
else
|
|
out += in[n];
|
|
}
|
|
return out;
|
|
}
|
|
|
|
static QString unescape(const QString &in)
|
|
{
|
|
QString out;
|
|
for (int n = 0; n < in.length(); ++n) {
|
|
if (in[n] == '\\') {
|
|
if (n + 1 < in.length()) {
|
|
++n;
|
|
if (in[n] == '\\')
|
|
out += '\\';
|
|
else if (in[n] == 'c')
|
|
out += ':';
|
|
else if (in[n] == 'n')
|
|
out += '\n';
|
|
}
|
|
} else
|
|
out += in[n];
|
|
}
|
|
return out;
|
|
}
|
|
|
|
class CertItem::Private : public QSharedData
|
|
{
|
|
public:
|
|
QString name;
|
|
QCA::CertificateChain chain;
|
|
bool havePrivate;
|
|
StorageType storageType;
|
|
bool usable;
|
|
|
|
QString fileName;
|
|
QCA::KeyStoreEntry keyStoreEntry;
|
|
QString keyStoreEntryString;
|
|
|
|
Private()
|
|
: havePrivate(false)
|
|
, storageType(File)
|
|
, usable(false)
|
|
{
|
|
}
|
|
|
|
QString toString() const
|
|
{
|
|
QStringList parts;
|
|
|
|
parts += name;
|
|
parts += QString::number(chain.count());
|
|
foreach (const QCA::Certificate &cert, chain)
|
|
parts += QCA::Base64().arrayToString(cert.toDER());
|
|
|
|
if (havePrivate) {
|
|
if (storageType == File) {
|
|
parts += "privateFile";
|
|
parts += fileName;
|
|
} else // KeyStoreEntry
|
|
{
|
|
parts += "privateEntry";
|
|
if (!keyStoreEntry.isNull())
|
|
parts += keyStoreEntry.toString();
|
|
else
|
|
parts += keyStoreEntryString;
|
|
}
|
|
}
|
|
|
|
for (int n = 0; n < parts.count(); ++n)
|
|
parts[n] = escape(parts[n]);
|
|
return parts.join(":");
|
|
}
|
|
|
|
bool fromString(const QString &in)
|
|
{
|
|
const QStringList parts = in.split(':');
|
|
for (int n = 0; n < parts.count(); ++n)
|
|
parts[n] = unescape(parts[n]);
|
|
|
|
if (parts.count() < 3)
|
|
return false;
|
|
|
|
name = parts[0];
|
|
int chainCount = parts[1].toInt();
|
|
if (chainCount < 1 || chainCount > parts.count() - 2)
|
|
return false;
|
|
chain.clear();
|
|
for (int n = 0; n < chainCount; ++n) {
|
|
QCA::Certificate cert = QCA::Certificate::fromDER(QCA::Base64().stringToArray(parts[n + 2]).toByteArray());
|
|
if (cert.isNull())
|
|
return false;
|
|
chain += cert;
|
|
}
|
|
int at = chain.count() + 2;
|
|
|
|
if (at < parts.count()) {
|
|
havePrivate = true;
|
|
usable = false;
|
|
|
|
if (parts[at] == "privateFile") {
|
|
storageType = File;
|
|
fileName = parts[at + 1];
|
|
if (QFile::exists(fileName))
|
|
usable = true;
|
|
} else if (parts[at] == "privateEntry") {
|
|
storageType = KeyStore;
|
|
keyStoreEntryString = parts[at + 1];
|
|
keyStoreEntry = QCA::KeyStoreEntry(keyStoreEntryString);
|
|
if (!keyStoreEntry.isNull())
|
|
usable = true;
|
|
} else
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
};
|
|
|
|
CertItem::CertItem()
|
|
{
|
|
}
|
|
|
|
CertItem::CertItem(const CertItem &from)
|
|
: d(from.d)
|
|
{
|
|
}
|
|
|
|
CertItem::~CertItem()
|
|
{
|
|
}
|
|
|
|
CertItem &CertItem::operator=(const CertItem &from)
|
|
{
|
|
d = from.d;
|
|
return *this;
|
|
}
|
|
|
|
QString CertItem::name() const
|
|
{
|
|
return d->name;
|
|
}
|
|
|
|
QCA::CertificateChain CertItem::certificateChain() const
|
|
{
|
|
return d->chain;
|
|
}
|
|
|
|
bool CertItem::havePrivate() const
|
|
{
|
|
return d->havePrivate;
|
|
}
|
|
|
|
CertItem::StorageType CertItem::storageType() const
|
|
{
|
|
return d->storageType;
|
|
}
|
|
|
|
bool CertItem::isUsable() const
|
|
{
|
|
return d->usable;
|
|
}
|
|
|
|
//----------------------------------------------------------------------------
|
|
// CertItemStore
|
|
//----------------------------------------------------------------------------
|
|
static MyPrompter *g_prompter = 0;
|
|
static int g_prompter_refs = 0;
|
|
|
|
class CertItemStorePrivate : public QObject
|
|
{
|
|
Q_OBJECT
|
|
public:
|
|
CertItemStore *q;
|
|
MyPrompter *prompter;
|
|
QList<CertItem> list;
|
|
QList<int> idList;
|
|
CertItemIconset iconset;
|
|
int next_id;
|
|
int next_req_id;
|
|
|
|
class LoaderItem
|
|
{
|
|
public:
|
|
int req_id;
|
|
QCA::KeyLoader *keyLoader;
|
|
QString fileName;
|
|
};
|
|
|
|
QList<LoaderItem> loaders;
|
|
|
|
CertItemStorePrivate(CertItemStore *_q)
|
|
: QObject(_q)
|
|
, q(_q)
|
|
, next_id(0)
|
|
, next_req_id(0)
|
|
{
|
|
if (!g_prompter) {
|
|
g_prompter = new MyPrompter;
|
|
g_prompter_refs = 1;
|
|
} else
|
|
++g_prompter_refs;
|
|
|
|
prompter = g_prompter;
|
|
}
|
|
|
|
~CertItemStorePrivate()
|
|
{
|
|
foreach (const LoaderItem &i, loaders)
|
|
delete i.keyLoader;
|
|
|
|
--g_prompter_refs;
|
|
if (g_prompter_refs == 0) {
|
|
delete g_prompter;
|
|
g_prompter = 0;
|
|
}
|
|
}
|
|
|
|
QString getUniqueName(const QString &name)
|
|
{
|
|
int num = 1;
|
|
while (1) {
|
|
QString tryname;
|
|
if (num == 1)
|
|
tryname = name;
|
|
else
|
|
tryname = name + QString(" (%1)").arg(num);
|
|
|
|
bool found = false;
|
|
foreach (const CertItem &i, list) {
|
|
if (i.name() == tryname) {
|
|
found = true;
|
|
break;
|
|
}
|
|
}
|
|
if (!found)
|
|
return tryname;
|
|
|
|
++num;
|
|
}
|
|
}
|
|
|
|
static QString convertErrorToString(QCA::ConvertResult r)
|
|
{
|
|
QString str;
|
|
switch (r) {
|
|
case QCA::ConvertGood:
|
|
break;
|
|
case QCA::ErrorPassphrase:
|
|
str = tr("Incorrect passphrase.");
|
|
case QCA::ErrorFile:
|
|
str = tr("Unable to open or read file.");
|
|
case QCA::ErrorDecode:
|
|
default:
|
|
str = tr("Unable to decode format.");
|
|
}
|
|
return str;
|
|
}
|
|
|
|
public Q_SLOTS:
|
|
void loader_finished()
|
|
{
|
|
QCA::KeyLoader *keyLoader = (QCA::KeyLoader *)sender();
|
|
int at = -1;
|
|
for (int n = 0; n < loaders.count(); ++n) {
|
|
if (loaders[n].keyLoader == keyLoader) {
|
|
at = n;
|
|
break;
|
|
}
|
|
}
|
|
Q_ASSERT(at != -1);
|
|
|
|
int req_id = loaders[at].req_id;
|
|
QString fileName = loaders[at].fileName;
|
|
loaders.removeAt(at);
|
|
|
|
QCA::ConvertResult r = keyLoader->convertResult();
|
|
if (r != QCA::ConvertGood) {
|
|
delete keyLoader;
|
|
prompter->fileFailed(fileName);
|
|
QMessageBox::information(
|
|
0,
|
|
tr("Error"),
|
|
tr("Error importing certificate and private key.\nReason: %1").arg(convertErrorToString(r)));
|
|
emit q->addFailed(req_id);
|
|
return;
|
|
}
|
|
|
|
prompter->fileSuccess(fileName);
|
|
|
|
QCA::KeyBundle kb = keyLoader->keyBundle();
|
|
delete keyLoader;
|
|
|
|
QCA::CertificateChain chain = kb.certificateChain();
|
|
QCA::Certificate cert = chain.primary();
|
|
|
|
QString name = getUniqueName(cert.commonName());
|
|
|
|
CertItem i;
|
|
i.d = new CertItem::Private;
|
|
i.d->name = name;
|
|
i.d->chain = chain;
|
|
i.d->havePrivate = true;
|
|
i.d->storageType = CertItem::File;
|
|
i.d->usable = true;
|
|
i.d->fileName = fileName;
|
|
|
|
int id = next_id++;
|
|
|
|
q->beginInsertRows(QModelIndex(), list.size(), list.size());
|
|
list += i;
|
|
idList += id;
|
|
q->endInsertRows();
|
|
|
|
emit q->addSuccess(req_id, id);
|
|
}
|
|
};
|
|
|
|
CertItemStore::CertItemStore(QObject *parent)
|
|
: QAbstractListModel(parent)
|
|
{
|
|
d = new CertItemStorePrivate(this);
|
|
}
|
|
|
|
CertItemStore::~CertItemStore()
|
|
{
|
|
delete d;
|
|
}
|
|
|
|
int CertItemStore::idFromRow(int row) const
|
|
{
|
|
return d->idList[row];
|
|
}
|
|
|
|
int CertItemStore::rowFromId(int id) const
|
|
{
|
|
for (int n = 0; n < d->idList.count(); ++n) {
|
|
if (d->idList[n] == id)
|
|
return n;
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
CertItem CertItemStore::itemFromId(int id) const
|
|
{
|
|
return d->list[rowFromId(id)];
|
|
}
|
|
|
|
CertItem CertItemStore::itemFromRow(int row) const
|
|
{
|
|
return d->list[row];
|
|
}
|
|
|
|
QList<CertItem> CertItemStore::items() const
|
|
{
|
|
return d->list;
|
|
}
|
|
|
|
QStringList CertItemStore::save() const
|
|
{
|
|
QStringList out;
|
|
foreach (const CertItem &i, d->list)
|
|
out += i.d->toString();
|
|
return out;
|
|
}
|
|
|
|
bool CertItemStore::load(const QStringList &in)
|
|
{
|
|
QList<CertItem> addList;
|
|
QList<int> addIdList;
|
|
foreach (const QString &s, in) {
|
|
CertItem i;
|
|
i.d = new CertItem::Private;
|
|
if (i.d->fromString(s)) {
|
|
addList += i;
|
|
addIdList += d->next_id++;
|
|
}
|
|
}
|
|
|
|
if (addList.isEmpty())
|
|
return true;
|
|
|
|
beginInsertRows(QModelIndex(), d->list.size(), d->list.size() + addList.count() - 1);
|
|
d->list += addList;
|
|
d->idList += addIdList;
|
|
endInsertRows();
|
|
|
|
return true;
|
|
}
|
|
|
|
int CertItemStore::addFromFile(const QString &fileName)
|
|
{
|
|
CertItemStorePrivate::LoaderItem i;
|
|
i.req_id = d->next_req_id++;
|
|
i.keyLoader = new QCA::KeyLoader(d);
|
|
i.fileName = fileName;
|
|
connect(i.keyLoader, SIGNAL(finished()), d, SLOT(loader_finished()));
|
|
d->loaders += i;
|
|
i.keyLoader->loadKeyBundleFromFile(fileName);
|
|
return i.req_id;
|
|
}
|
|
|
|
int CertItemStore::addFromKeyStore(const QCA::KeyStoreEntry &entry)
|
|
{
|
|
QCA::KeyBundle kb = entry.keyBundle();
|
|
|
|
QCA::CertificateChain chain = kb.certificateChain();
|
|
QCA::Certificate cert = chain.primary();
|
|
|
|
QString name = d->getUniqueName(entry.name());
|
|
|
|
CertItem i;
|
|
i.d = new CertItem::Private;
|
|
i.d->name = name;
|
|
i.d->chain = chain;
|
|
i.d->havePrivate = true;
|
|
i.d->storageType = CertItem::KeyStore;
|
|
i.d->usable = true;
|
|
i.d->keyStoreEntry = entry;
|
|
|
|
int id = d->next_id++;
|
|
|
|
beginInsertRows(QModelIndex(), d->list.size(), d->list.size());
|
|
d->list += i;
|
|
d->idList += id;
|
|
endInsertRows();
|
|
|
|
int req_id = d->next_req_id++;
|
|
QMetaObject::invokeMethod(this, "addSuccess", Qt::QueuedConnection, Q_ARG(int, req_id), Q_ARG(int, id));
|
|
return req_id;
|
|
}
|
|
|
|
int CertItemStore::addUser(const QCA::CertificateChain &chain)
|
|
{
|
|
QCA::Certificate cert = chain.primary();
|
|
|
|
QString name = d->getUniqueName(cert.commonName());
|
|
|
|
CertItem i;
|
|
i.d = new CertItem::Private;
|
|
i.d->name = name;
|
|
i.d->chain = chain;
|
|
|
|
int id = d->next_id++;
|
|
|
|
beginInsertRows(QModelIndex(), d->list.size(), d->list.size());
|
|
d->list += i;
|
|
d->idList += id;
|
|
endInsertRows();
|
|
|
|
int req_id = d->next_req_id++;
|
|
QMetaObject::invokeMethod(this, "addSuccess", Qt::QueuedConnection, Q_ARG(int, req_id), Q_ARG(int, id));
|
|
return req_id;
|
|
}
|
|
|
|
void CertItemStore::updateChain(int id, const QCA::CertificateChain &chain)
|
|
{
|
|
int at = rowFromId(id);
|
|
d->list[at].d->chain = chain;
|
|
}
|
|
|
|
void CertItemStore::removeItem(int id)
|
|
{
|
|
int at = rowFromId(id);
|
|
|
|
beginRemoveRows(QModelIndex(), at, at);
|
|
d->list.removeAt(at);
|
|
d->idList.removeAt(at);
|
|
endRemoveRows();
|
|
}
|
|
|
|
void CertItemStore::setIcon(IconType type, const QPixmap &icon)
|
|
{
|
|
d->iconset[type] = icon;
|
|
}
|
|
|
|
int CertItemStore::rowCount(const QModelIndex &parent) const
|
|
{
|
|
Q_UNUSED(parent);
|
|
return d->list.count();
|
|
}
|
|
|
|
QVariant CertItemStore::data(const QModelIndex &index, int role) const
|
|
{
|
|
if (!index.isValid())
|
|
return QVariant();
|
|
|
|
int at = index.row();
|
|
QList<CertItem> &list = d->list;
|
|
|
|
if (at >= list.count())
|
|
return QVariant();
|
|
|
|
if (role == Qt::DisplayRole) {
|
|
QString str = list[at].name();
|
|
if (list[at].havePrivate() && !list[at].isUsable())
|
|
str += QString(" ") + tr("(not usable)");
|
|
return str;
|
|
} else if (role == Qt::EditRole)
|
|
return list[at].name();
|
|
else if (role == Qt::DecorationRole) {
|
|
if (list[at].havePrivate())
|
|
return d->iconset[CertItemStore::IconKeyBundle];
|
|
else
|
|
return d->iconset[CertItemStore::IconCert];
|
|
} else
|
|
return QVariant();
|
|
}
|
|
|
|
Qt::ItemFlags CertItemStore::flags(const QModelIndex &index) const
|
|
{
|
|
if (!index.isValid())
|
|
return Qt::ItemIsEnabled;
|
|
|
|
return Qt::ItemIsEnabled | Qt::ItemIsSelectable | Qt::ItemIsEditable;
|
|
}
|
|
|
|
bool CertItemStore::setData(const QModelIndex &index, const QVariant &value, int role)
|
|
{
|
|
if (index.isValid() && role == Qt::EditRole) {
|
|
QString str = value.toString();
|
|
d->list[index.row()].d->name = str;
|
|
emit dataChanged(index, index);
|
|
return true;
|
|
}
|
|
return false;
|
|
}
|
|
|
|
//----------------------------------------------------------------------------
|
|
// CertItemPrivateLoader
|
|
//----------------------------------------------------------------------------
|
|
class CertItemPrivateLoaderPrivate : public QObject
|
|
{
|
|
Q_OBJECT
|
|
public:
|
|
CertItemPrivateLoader *q;
|
|
CertItemStore *store;
|
|
QCA::KeyLoader *loader;
|
|
QString fileName;
|
|
QCA::PrivateKey key;
|
|
|
|
CertItemPrivateLoaderPrivate(CertItemPrivateLoader *_q)
|
|
: QObject(_q)
|
|
, q(_q)
|
|
{
|
|
}
|
|
|
|
public Q_SLOTS:
|
|
void loader_finished()
|
|
{
|
|
QCA::ConvertResult r = loader->convertResult();
|
|
if (r != QCA::ConvertGood) {
|
|
delete loader;
|
|
loader = 0;
|
|
store->d->prompter->fileFailed(fileName);
|
|
QMessageBox::information(
|
|
0,
|
|
tr("Error"),
|
|
tr("Error accessing private key.\nReason: %1").arg(CertItemStorePrivate::convertErrorToString(r)));
|
|
emit q->finished();
|
|
return;
|
|
}
|
|
|
|
store->d->prompter->fileSuccess(fileName);
|
|
|
|
key = loader->keyBundle().privateKey();
|
|
delete loader;
|
|
loader = 0;
|
|
emit q->finished();
|
|
}
|
|
};
|
|
|
|
CertItemPrivateLoader::CertItemPrivateLoader(CertItemStore *store, QObject *parent)
|
|
: QObject(parent)
|
|
{
|
|
d = new CertItemPrivateLoaderPrivate(this);
|
|
d->store = store;
|
|
}
|
|
|
|
CertItemPrivateLoader::~CertItemPrivateLoader()
|
|
{
|
|
delete d;
|
|
}
|
|
|
|
void CertItemPrivateLoader::start(int id)
|
|
{
|
|
CertItem i = d->store->itemFromId(id);
|
|
|
|
if (i.storageType() == CertItem::KeyStore) {
|
|
d->key = i.d->keyStoreEntry.keyBundle().privateKey();
|
|
QMetaObject::invokeMethod(this, "finished", Qt::QueuedConnection);
|
|
return;
|
|
}
|
|
|
|
d->key = QCA::PrivateKey();
|
|
d->fileName = i.d->fileName;
|
|
d->loader = new QCA::KeyLoader(d);
|
|
connect(d->loader, SIGNAL(finished()), d, SLOT(loader_finished()));
|
|
d->loader->loadKeyBundleFromFile(d->fileName);
|
|
}
|
|
|
|
QCA::PrivateKey CertItemPrivateLoader::privateKey() const
|
|
{
|
|
return d->key;
|
|
}
|
|
|
|
#include "certitem.moc"
|