okular/part/certificateviewer.cpp
Sune Vuorela 763328a6ba Better dialog for selecting certificates
Instead of just a simple list of "nickname"'s which is kind of like the
signing backend's internal ID for a given certificate, provide some more
context to each key.

This is a slight improvement, not a complete overhaul.
2023-05-03 13:41:14 +00:00

240 lines
10 KiB
C++

/*
SPDX-FileCopyrightText: 2018 Chinmoy Ranjan Pradhan <chinmoyrp65@gmail.com>
SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "certificateviewer.h"
#include "gui/certificatemodel.h"
#include <KColumnResizer>
#include <KLocalizedString>
#include <KMessageBox>
#include <QCryptographicHash>
#include <QDebug>
#include <QDialogButtonBox>
#include <QFileDialog>
#include <QFormLayout>
#include <QGroupBox>
#include <QLabel>
#include <QPushButton>
#include <QTextEdit>
#include <QTreeView>
#include <QVBoxLayout>
#include "gui/signatureguiutils.h"
// DN (DistinguishedName) attributes can be
// C Country
// CN Common name
// DC Domain component
// E E-mail address
// EMAIL E-mail address (preferred)
// EMAILADDRESS E-mail address
// L Locality
// O Organization name
// OU Organizational unit name
// PC Postal code
// S State or province
// SN Family name
// SP State or province
// ST State or province (preferred)
// STREET Street
// T Title
// CN=James Hacker,
// L=Basingstoke,
// O=Widget Inc,
// C=GB
// CN=L. Eagle, O="Sue, Grabbit and Runn", C=GB
// CN=L. Eagle, O=Sue\, Grabbit and Runn, C=GB
// This is a poor man's attempt at parsing DN, if it fails it is not a problem since it's only for display in a list
static QString splitDNAttributes(const QStringList &text)
{
static const QStringList attributes = {QStringLiteral("C"),
QStringLiteral("CN"),
QStringLiteral("DC"),
QStringLiteral("E"),
QStringLiteral("EMAIL"),
QStringLiteral("EMAILADDRESS"),
QStringLiteral("L"),
QStringLiteral("O"),
QStringLiteral("OU"),
QStringLiteral("PC"),
QStringLiteral("S"),
QStringLiteral("SN"),
QStringLiteral("SP"),
QStringLiteral("ST"),
QStringLiteral("STREET"),
QStringLiteral("T")};
for (const QString &t : text) {
for (const QString &attribute : attributes) {
const QRegularExpression re(QStringLiteral("(.*),\\s*(%1=.*)").arg(attribute), QRegularExpression::DotMatchesEverythingOption);
const QRegularExpressionMatch match = re.match(t);
if (match.hasMatch()) {
QStringList results = text;
const int index = results.indexOf(t);
results.removeAt(index);
results.insert(index, match.captured(2));
results.insert(index, match.captured(1));
return splitDNAttributes(results);
}
}
}
// Clean escaped commas
QStringList result = text;
for (QString &t : result) {
t.replace(QLatin1String("\\,"), QLatin1String(","));
}
// Clean up quoted attributes
for (QString &t : result) {
for (const QString &attribute : attributes) {
const QRegularExpression re(QStringLiteral("%1=\"(.*)\"").arg(attribute));
const QRegularExpressionMatch match = re.match(t);
if (match.hasMatch()) {
t = attribute + QLatin1Char('=') + match.captured(1);
}
}
}
return result.join(QStringLiteral("\n"));
}
static QString splitDNAttributes(const QString &text)
{
return splitDNAttributes(QStringList {text});
}
CertificateViewer::CertificateViewer(const Okular::CertificateInfo &certInfo, QWidget *parent)
: KPageDialog(parent)
, m_certificateInfo(certInfo)
{
setModal(true);
setMinimumSize(QSize(500, 500));
setFaceType(Tabbed);
setWindowTitle(i18n("Certificate Viewer"));
setStandardButtons(QDialogButtonBox::Close);
auto exportBtn = new QPushButton(i18n("Export..."));
connect(exportBtn, &QPushButton::clicked, this, &CertificateViewer::exportCertificate);
addActionButton(exportBtn);
// General tab
auto generalPage = new QFrame(this);
addPage(generalPage, i18n("General"));
auto issuerBox = new QGroupBox(i18n("Issued By"), generalPage);
auto issuerFormLayout = new QFormLayout(issuerBox);
issuerFormLayout->setLabelAlignment(Qt::AlignLeft);
issuerFormLayout->addRow(i18n("Common Name(CN)"), new QLabel(m_certificateInfo.issuerInfo(Okular::CertificateInfo::CommonName, Okular::CertificateInfo::EmptyString::TranslatedNotAvailable)));
issuerFormLayout->addRow(i18n("EMail"), new QLabel(m_certificateInfo.issuerInfo(Okular::CertificateInfo::EmailAddress, Okular::CertificateInfo::EmptyString::TranslatedNotAvailable)));
issuerFormLayout->addRow(i18n("Organization(O)"), new QLabel(m_certificateInfo.issuerInfo(Okular::CertificateInfo::Organization, Okular::CertificateInfo::EmptyString::TranslatedNotAvailable)));
auto subjectBox = new QGroupBox(i18n("Issued To"), generalPage);
auto subjectFormLayout = new QFormLayout(subjectBox);
subjectFormLayout->setLabelAlignment(Qt::AlignLeft);
subjectFormLayout->addRow(i18n("Common Name(CN)"), new QLabel(m_certificateInfo.subjectInfo(Okular::CertificateInfo::CommonName, Okular::CertificateInfo::EmptyString::TranslatedNotAvailable)));
subjectFormLayout->addRow(i18n("EMail"), new QLabel(m_certificateInfo.subjectInfo(Okular::CertificateInfo::EmailAddress, Okular::CertificateInfo::EmptyString::TranslatedNotAvailable)));
subjectFormLayout->addRow(i18n("Organization(O)"), new QLabel(m_certificateInfo.subjectInfo(Okular::CertificateInfo::Organization, Okular::CertificateInfo::EmptyString::TranslatedNotAvailable)));
auto validityBox = new QGroupBox(i18n("Validity"), generalPage);
auto validityFormLayout = new QFormLayout(validityBox);
validityFormLayout->setLabelAlignment(Qt::AlignLeft);
validityFormLayout->addRow(i18n("Issued On"), new QLabel(QLocale().toString(m_certificateInfo.validityStart(), QLocale::LongFormat)));
validityFormLayout->addRow(i18n("Expires On"), new QLabel(QLocale().toString(m_certificateInfo.validityEnd(), QLocale::LongFormat)));
auto fingerprintBox = new QGroupBox(i18n("Fingerprints"), generalPage);
auto fingerprintFormLayout = new QFormLayout(fingerprintBox);
fingerprintFormLayout->setLabelAlignment(Qt::AlignLeft);
QByteArray certData = m_certificateInfo.certificateData();
auto sha1Label = new QLabel(QString::fromLatin1(QCryptographicHash::hash(certData, QCryptographicHash::Sha1).toHex(' ')));
sha1Label->setWordWrap(true);
auto sha256Label = new QLabel(QString::fromLatin1(QCryptographicHash::hash(certData, QCryptographicHash::Sha256).toHex(' ')));
sha256Label->setWordWrap(true);
fingerprintFormLayout->addRow(i18n("SHA-1 Fingerprint"), sha1Label);
fingerprintFormLayout->addRow(i18n("SHA-256 Fingerprint"), sha256Label);
auto generalPageLayout = new QVBoxLayout(generalPage);
generalPageLayout->addWidget(issuerBox);
generalPageLayout->addWidget(subjectBox);
generalPageLayout->addWidget(validityBox);
generalPageLayout->addWidget(fingerprintBox);
generalPageLayout->addStretch();
// force column 1 to have same width
auto resizer = new KColumnResizer(this);
resizer->addWidgetsFromLayout(issuerBox->layout(), 0);
resizer->addWidgetsFromLayout(subjectBox->layout(), 0);
resizer->addWidgetsFromLayout(validityBox->layout(), 0);
resizer->addWidgetsFromLayout(fingerprintBox->layout(), 0);
// Details tab
auto detailsFrame = new QFrame(this);
addPage(detailsFrame, i18n("Details"));
auto certDataLabel = new QLabel(i18n("Certificate Data:"));
auto certTree = new QTreeView(this);
certTree->setIndentation(0);
m_certificateModel = new CertificateModel(m_certificateInfo, this);
certTree->setModel(m_certificateModel);
connect(certTree->selectionModel(), &QItemSelectionModel::currentChanged, this, &CertificateViewer::updateText);
m_propertyText = new QTextEdit(this);
m_propertyText->setReadOnly(true);
auto detailsPageLayout = new QVBoxLayout(detailsFrame);
detailsPageLayout->addWidget(certDataLabel);
detailsPageLayout->addWidget(certTree);
detailsPageLayout->addWidget(m_propertyText);
}
void CertificateViewer::updateText(const QModelIndex &index)
{
QString text;
const CertificateModel::Property key = m_certificateModel->data(index, CertificateModel::PropertyKeyRole).value<CertificateModel::Property>();
switch (key) {
case CertificateModel::SerialNumber:
case CertificateModel::Version:
case CertificateModel::IssuedOn:
case CertificateModel::ExpiresOn:
text = m_certificateModel->data(index, CertificateModel::PropertyVisibleValueRole).toString();
break;
case CertificateModel::Issuer:
case CertificateModel::Subject:
text = splitDNAttributes(m_certificateModel->data(index, CertificateModel::PropertyVisibleValueRole).toString());
break;
case CertificateModel::PublicKey:
text = QString::fromLatin1(m_certificateInfo.publicKey().toHex(' '));
break;
case CertificateModel::KeyUsage:
text = SignatureGuiUtils::getReadableKeyUsageNewLineSeparated(m_certificateInfo.keyUsageExtensions());
break;
case CertificateModel::IssuerName:
case CertificateModel::IssuerEmail:
case CertificateModel::IssuerOrganization:
case CertificateModel::SubjectName:
case CertificateModel::SubjectEmail:
case CertificateModel::SubjectOrganization:
case CertificateModel::Sha1:
case CertificateModel::Sha256:
Q_ASSERT(false);
qWarning() << "Unused";
}
m_propertyText->setText(text);
}
void CertificateViewer::exportCertificate()
{
const QString caption = i18n("Where do you want to save this certificate?");
const QString path = QFileDialog::getSaveFileName(this, caption, QStringLiteral("Certificate.cer"), i18n("Certificate File (*.cer)"));
if (!path.isEmpty()) {
if (!m_certificateModel->exportCertificateTo(path)) {
KMessageBox::error(this, i18n("Could not export the certificate"));
}
}
}