Imported former upstream version 0.7.5
This commit is contained in:
commit
e136e7cbbf
|
|
@ -0,0 +1,212 @@
|
|||
$Id: CHANGES,v 1.23 2006/07/25 20:10:54 sm Exp $
|
||||
|
||||
version 0.7.5 - Tue July 25 2006
|
||||
* added swedish translation
|
||||
many thanks to Daniel Nylander
|
||||
|
||||
version 0.7.4 - Thu June 29 2006
|
||||
* fixed invalid filename encoding with german umlauts in base64
|
||||
thanks to Bruno Blumenthal
|
||||
* Fixed display of UTF8 characters in the GUI
|
||||
Debian #367829
|
||||
|
||||
version 0.7.3 - Tue May 23 2006
|
||||
* Add environment variable
|
||||
Gentoo #78576
|
||||
thanks to dragonheart at gentoo dot org
|
||||
* Fixed crash when CA is created with nsCertType
|
||||
Debian #354386
|
||||
|
||||
version 0.7.3 - Tue May 23 2006
|
||||
* Enhanced version detection
|
||||
thanks to Peter Marschall
|
||||
Debian #360766 #360555
|
||||
* Changed command for openssl due to changed openssl behavior
|
||||
regarding fingerprints
|
||||
thanks to Peter Marschall
|
||||
Debian #360768
|
||||
* Added "friendly name" to PKCS#12 export
|
||||
Debian #364617
|
||||
* Corrected exit call
|
||||
thanks to Peter Marschall
|
||||
Debian #360767
|
||||
|
||||
|
||||
version 0.7.2 - Sat Feb 18 2006
|
||||
* Fixed bug, which made keysize always 4096
|
||||
* Implemented correct usage of openssl crl depending on openssl version
|
||||
* Added tar file support for export
|
||||
|
||||
version 0.7.1 - Sat Oct 22 2005
|
||||
* Fixed possible crashbug, thanks to
|
||||
* Choose CA validity as maximal certificate lifetime
|
||||
* correctly include/don't include keys in exported certificate files
|
||||
thanks to "thus0 at free dot fr"
|
||||
* added ripemd160 support, thanks to Wim Lewis
|
||||
* added possibility to create pkcs#12 without password
|
||||
* fixed broken OU in SubCA, thanks to Charles Lepple
|
||||
* fixed bug which made saving options with comboboxes impossible
|
||||
thanks to "thus0 at free dot fr"
|
||||
* fixed bug inseting the right serial number during import
|
||||
thanks to Daniel Kahn Gillmor
|
||||
|
||||
version 0.7.0 - Sun Apr 10 2005
|
||||
* migrated to perl-Gtk2
|
||||
* added advanced export options (Debian #293931)
|
||||
* added CA history
|
||||
* fixed some minor bugs
|
||||
|
||||
version 0.6.8 (beta) - Sun Feb 20 2004
|
||||
* added detection for openssl 0.9.8
|
||||
* removed crlDistributionPoint for Root-CA
|
||||
* added patch for multiple OUs
|
||||
Thanks to Uwe Arndt <arndt@uni-koblenz.de>
|
||||
* added patch for multiple subjectAltName extensions (Debian #271183)
|
||||
Thanks to Peter Marschall <peter@adpm.de>
|
||||
|
||||
version 0.6.7 (beta) - Mon Dec 5 2004
|
||||
* added import functionality
|
||||
|
||||
version 0.6.6 (beta) - Fri Aug 13 2004
|
||||
* added czech translation
|
||||
Thanks to Robert Wolf <gentoo@slave.umbr.cas.cz>
|
||||
|
||||
version 0.6.5 (beta) - Thu Aug 05 2004
|
||||
* added spanish translation
|
||||
Thanks to Ramon Pons Vivanco <rpons@rinu.org>
|
||||
* force (re)parsing a newly created request
|
||||
* force delete of internal structures, when deleting a CA
|
||||
|
||||
version 0.6.4 (beta) - Thu Jul 15 2004
|
||||
* fixed bug, showing wrong options for renewal of certificates
|
||||
* fixed bug creating requests via rightclick directly after creating a new CA
|
||||
(thanks to wbx@openbsd.de)
|
||||
* fixed bug which added ugly empty box to cert/req page
|
||||
* fixed bug with wrong openssl.conf during startup (server-cert with
|
||||
ca-extensions)
|
||||
(thanks to bernhard.dawuidow@tronicplanet.de)
|
||||
* fixed ca-config dialog during creation of root-ca (drop-downs)
|
||||
(thanks to X_KurJ@viessmann.com)
|
||||
* revocation reason can be given with openssl 0.9.7
|
||||
* changed default exportdir to users home
|
||||
* remeber exportdir from last export
|
||||
* added possibility to set the extension extendedKeyUsage
|
||||
* added possibility to leave email out of the subject dn (0.9.7)
|
||||
|
||||
version 0.6.3 (beta) - Wed Jun 16 2004
|
||||
* fixed bug which made it impossible to create new requests
|
||||
|
||||
version 0.6.2 (beta) - Sun Jun 13 2004
|
||||
* added new look for some functions
|
||||
* key, request and certificate can be generated in one step
|
||||
* code cleanup
|
||||
|
||||
version 0.6.1 (beta) - Sat May 22 2004
|
||||
* fixed bug, which made it impossible to create a new Root-CA
|
||||
Thanks to Olaf Gellert <og@pre-secure.de>
|
||||
|
||||
version 0.6.0 (beta) - Tue May 11 2004
|
||||
* some minor usability improvements
|
||||
* added possibility to create SubCAs now
|
||||
* added possibility also to use DSA keys
|
||||
* added possibility to select the digest during key creation
|
||||
* added possibility to export the complete CA-chain of a SubCA
|
||||
Thanks a lot to Olaf Gellert <og@pre-secure.de> for ideas and patches.
|
||||
|
||||
version 0.5.4 (beta) - Fri Oct 3 2003
|
||||
* added a lot of configuration options
|
||||
* correctly import/show details of requests without extensions
|
||||
(thanks to James.Leavitt@anywaregroup.com)
|
||||
|
||||
version 0.5.3 (beta) - Mon Sep 29 2003
|
||||
* fixed wrong label while creating new CA
|
||||
* fixed bug, saving configuration is possible again
|
||||
|
||||
version 0.5.2 (beta) - Mon Sep 1 2003
|
||||
* added renewal of certificates
|
||||
|
||||
version 0.5.1 (beta) - Tue Aug 26 2003
|
||||
* code cleanup
|
||||
* fixed some minor bugs and typos
|
||||
* corrected some window sizes and tables
|
||||
* added accelerators to the menu
|
||||
|
||||
version 0.5.0 (beta) - Sat Aug 16 2003
|
||||
* GUI rewriten with perl-Gtk/Gnome
|
||||
|
||||
version 0.4.9 (beta) - Sat Jul 5 2003
|
||||
* added german translation
|
||||
|
||||
version 0.4.8 (beta) - Tue Jul 1 2003
|
||||
* convert index.txt if openssl changed from 0.9.6x to 0.9.7x
|
||||
|
||||
version 0.4.7 (beta) - Fri Jun 27 2003
|
||||
* added export into zip-file
|
||||
thanks to ludwig.nussel@suse.de
|
||||
|
||||
version 0.4.6 (beta) - Mon Jun 23 2003
|
||||
* some tiny usability improvements
|
||||
thanks to ludwig.nussel@suse.de again
|
||||
|
||||
version 0.4.5 (beta) - Thu Jun 19 2003
|
||||
* some usability improvements
|
||||
thanks to ludwig.nussel@suse.de
|
||||
* some more configuration options
|
||||
|
||||
version 0.4.4 (beta) - Fri Oct 4 2002
|
||||
* Fixed bug exporting keys in PEM format
|
||||
* Fixed possible empty lines in cert/key/reqlist
|
||||
thanks to waldemar.mertke@gmx.de
|
||||
|
||||
version 0.4.3 (beta) - Fri Sep 27 2002
|
||||
* Fixed some minor bugs and typos (e.g. concerning openssl 0.9.7)
|
||||
thanks to iebgener@yahoo.com and waldemar.mertke@gmx.de
|
||||
|
||||
version 0.4.2 (beta) - Sat Aug 24 2002
|
||||
* fixed revocation when serial is > 15
|
||||
thanks to curly@e-card.bg
|
||||
* fixed recognition of java-generated requests
|
||||
thanks to matthew.lewis@syntegra.com
|
||||
* code cleanup
|
||||
|
||||
version 0.4.1 (beta) - Wed Aug 21 2002
|
||||
* fixed revocation
|
||||
* added some colors
|
||||
* thanks to curly@e-card.bg
|
||||
|
||||
version 0.4.0 (beta) - Sun Aug 18 2002
|
||||
* works independent of OpenCA modules now
|
||||
* some enhancements to functionality (e.g. export of key without
|
||||
passwd)
|
||||
* some smaller bugfixes in usability
|
||||
* new specfile (thanks to oron@actcom.co.il)
|
||||
|
||||
version 0.3.4 (beta) - Mon Jun 3 2002
|
||||
* fixed wrong templatedir when creating a new CA
|
||||
|
||||
version 0.3.3 (beta) - Sun Jun 2 2002
|
||||
* fixed some minor bugs and typos
|
||||
import of requests from ssh-sentinel should work now without problems
|
||||
|
||||
version 0.3.2 (beta) - Sat May 11 2002
|
||||
* added parser for x509 extensions when viewing certificate details
|
||||
|
||||
version 0.3.1 (beta) - Fri May 3 2002
|
||||
* added option to view complete certificate/request as text
|
||||
|
||||
version 0.3.0 (beta) - Thu Apr 18 2002
|
||||
* added possibility to configure openssl
|
||||
* fixed some minor bugs
|
||||
|
||||
version 0.2.5 (beta) - Sun Apr 7 2002
|
||||
* improved usabilty and errorhandling
|
||||
* fixed some minor bugs and typos
|
||||
|
||||
version 0.2.4 (beta) - Sun Mar 31 2002
|
||||
* added possibilty to import PKCS#10 requests
|
||||
* added function to delete a configured CA
|
||||
|
||||
version 0.2.3 (beta) - Tue Mar 26 2002
|
||||
* fixed bug with expiration date defaults to 30 days when creating
|
||||
a new CA
|
||||
* change status to E in index.txt, if certificate is expired
|
||||
|
|
@ -0,0 +1,30 @@
|
|||
1. Unpack the sources (seems like you got it already)
|
||||
|
||||
2. Configure the following paths for your setup. These variables
|
||||
are located in the file tinyca itself.
|
||||
|
||||
@INC (location of the directory lib)
|
||||
$init->{'opensslbin'} (location of your openssl binary)
|
||||
$init->{'templatedir'} (location of the directory templates)
|
||||
$init->{'zipbin'} (location of your zip binary)
|
||||
$init->{'tarbin'} (location of your tar binary)
|
||||
|
||||
3. If you want to have german/spanish/czech/swedish texts:
|
||||
Generate the file tinyca.mo from po/de.po:
|
||||
msgfmt po/de.po -o locale/de/LC_MESSAGES/tinyca.mo
|
||||
msgfmt po/es.po -o locale/es/LC_MESSAGES/tinyca.mo
|
||||
msgfmt po/cs.po -o locale/cs/LC_MESSAGES/tinyca.mo
|
||||
msgfmt po/sv.po -o locale/sv/LC_MESSAGES/tinyca.mo
|
||||
or even more simple: call make in the directory po/
|
||||
|
||||
If your locale is not set to german/spanish:
|
||||
export LC_ALL=de_DE.UTF-8
|
||||
or
|
||||
export LC_ALL=es_ES.UTF-8
|
||||
or
|
||||
export LC_ALL=cs_CZ.UTF-8
|
||||
or
|
||||
export LC_ALL=sv_SE.UTF-8
|
||||
before you call tinyca.
|
||||
|
||||
4. Call tinyca2, use it and report bugs :-))
|
||||
|
|
@ -0,0 +1,9 @@
|
|||
#!/bin/bash
|
||||
|
||||
mkdir -p locale/de/LC_MESSAGES
|
||||
mkdir -p locale/es/LC_MESSAGES
|
||||
mkdir -p locale/cs/LC_MESSAGES
|
||||
|
||||
msgfmt po/de.po -o locale/de/LC_MESSAGES/tinyca2.mo
|
||||
msgfmt po/es.po -o locale/es/LC_MESSAGES/tinyca2.mo
|
||||
msgfmt po/cs.po -o locale/cs/LC_MESSAGES/tinyca2.mo
|
||||
|
|
@ -0,0 +1,713 @@
|
|||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: CERT.pm,v 1.11 2006/06/28 21:50:41 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
|
||||
package CERT;
|
||||
|
||||
use POSIX;
|
||||
|
||||
sub new {
|
||||
my $that = shift;
|
||||
my $class = ref($that) || $that;
|
||||
|
||||
my $self = {};
|
||||
|
||||
$self->{'OpenSSL'} = shift;
|
||||
|
||||
bless($self, $class);
|
||||
}
|
||||
|
||||
#
|
||||
# read certificates in directory into list
|
||||
#
|
||||
sub read_certlist {
|
||||
my ($self, $certdir, $crlfile, $indexfile, $force, $main) = @_;
|
||||
|
||||
my($f, $certlist, $crl, $modt, $parsed, $tmp, $t, $c, $p, @files);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$certlist = [];
|
||||
|
||||
$modt = (stat($certdir))[9];
|
||||
|
||||
if(defined($self->{'lastread'}) &&
|
||||
($self->{'lastread'} >= $modt) &&
|
||||
not defined($force)) {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
return(0);
|
||||
}
|
||||
|
||||
$crl = $self->{'OpenSSL'}->parsecrl($crlfile, $force);
|
||||
|
||||
opendir(DIR, $certdir) || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = sprintf(_("Can't open Certificate directory: %s"), $certdir);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return(0);
|
||||
};
|
||||
|
||||
while($f = readdir(DIR)) {
|
||||
next if $f =~ /^\./;
|
||||
push(@files, $f);
|
||||
$c++;
|
||||
}
|
||||
|
||||
$main->{'barbox'}->pack_start($main->{'progress'}, 0, 0, 0);
|
||||
$main->{'progress'}->show();
|
||||
foreach $f (@files) {
|
||||
next if $f =~ /^\./;
|
||||
|
||||
$f =~ s/\.pem//;
|
||||
|
||||
$tmp = HELPERS::dec_base64($f);
|
||||
next if not defined($tmp);
|
||||
next if $tmp eq "";
|
||||
|
||||
if(defined($main)) {
|
||||
$t = sprintf(_(" Read Certificate: %s"), $tmp);
|
||||
GUI::HELPERS::set_status($main, $t);
|
||||
$p += 100/$c;
|
||||
if($p/100 <= 1) {
|
||||
$main->{'progress'}->set_fraction($p/100);
|
||||
while(Gtk2->events_pending) {
|
||||
Gtk2->main_iteration;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
my $debugf = $certdir."/".$f.".pem";
|
||||
|
||||
$parsed = $self->{'OpenSSL'}->parsecert($crlfile, $indexfile,
|
||||
$certdir."/".$f.".pem", $force);
|
||||
|
||||
defined($parsed) || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_error(_("Can't read Certificate"));
|
||||
};
|
||||
|
||||
$tmp .= "%".$parsed->{'STATUS'};
|
||||
|
||||
push(@{$certlist}, $tmp);
|
||||
}
|
||||
@{$certlist} = sort(@{$certlist});
|
||||
closedir(DIR);
|
||||
|
||||
$self->{'certlist'} = $certlist;
|
||||
|
||||
$self->{'lastread'} = time();
|
||||
|
||||
if(defined($main)) {
|
||||
$main->{'progress'}->set_fraction(0);
|
||||
$main->{'barbox'}->remove($main->{'progress'});
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
}
|
||||
|
||||
return(1); # got new list
|
||||
}
|
||||
|
||||
#
|
||||
# get information for renewing a certifikate
|
||||
#
|
||||
sub get_renew_cert {
|
||||
my ($self, $main, $opts, $box) = @_;
|
||||
|
||||
my ($cert, $status, $t, $ca, $cadir);
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
if((not defined($opts->{'certfile'})) ||
|
||||
(not defined($opts->{'passwd'})) ||
|
||||
($opts->{'certfile'} eq '') ||
|
||||
($opts->{'passwd'} eq '')) {
|
||||
|
||||
$cert = $main->{'certbrowser'}->selection_dn();
|
||||
|
||||
if(not defined($cert)) {
|
||||
GUI::HELPERS::print_info(_("Please select a Certificate first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$ca = $main->{'certbrowser'}->selection_caname();
|
||||
$cadir = $main->{'certbrowser'}->selection_cadir();
|
||||
$status = $main->{'certbrowser'}->selection_status();
|
||||
|
||||
if($status eq _("VALID")) {
|
||||
$t = sprintf(
|
||||
_("Can't renew Certifikate with Status: %s\nPlease revoke the Certificate first"),
|
||||
$status);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
$opts->{'certname'} = HELPERS::enc_base64($cert);
|
||||
$opts->{'reqname'} = $opts->{'certname'};
|
||||
$opts->{'certfile'} = $cadir."/certs/".$opts->{'certname'}.".pem";
|
||||
$opts->{'keyfile'} = $cadir."/keys/".$opts->{'certname'}.".pem";
|
||||
$opts->{'reqfile'} = $cadir."/req/".$opts->{'certname'}.".pem";
|
||||
|
||||
if((not -s $opts->{'certfile'}) ||
|
||||
(not -s $opts->{'keyfile'}) ||
|
||||
(not -s $opts->{'reqfile'})) {
|
||||
$t = _("Key and Request are necessary for renewal of a Certificate\nRenewal is not possible!");
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
$main->show_req_sign_dialog($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
$main->{'REQ'}->sign_req($main, $opts);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# get information for revoking a certifikate
|
||||
#
|
||||
sub get_revoke_cert {
|
||||
my ($self, $main, $opts, $box) = @_;
|
||||
|
||||
my ($cert, $status, $t, $ca, $cadir);
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
if((not defined($opts->{'certfile'})) ||
|
||||
(not defined($opts->{'passwd'})) ||
|
||||
($opts->{'certfile'} eq '') ||
|
||||
($opts->{'passwd'} eq '')) {
|
||||
$opts->{'certfile'} = $main->{'certbrowser'}->selection_fname();
|
||||
|
||||
if(not defined($opts->{'certfile'})) {
|
||||
$t = _("Please select a Certificate first");
|
||||
GUI::HELPERS::print_info($t);
|
||||
return;
|
||||
}
|
||||
|
||||
$ca = $main->{'certbrowser'}->selection_caname();
|
||||
$cadir = $main->{'certbrowser'}->selection_cadir();
|
||||
$cert = $main->{'certbrowser'}->selection_dn();
|
||||
$status = $main->{'certbrowser'}->selection_status();
|
||||
|
||||
if($status ne _("VALID")) {
|
||||
$t = sprintf(_("Can't revoke Certifikate with Status: %s"),
|
||||
$status);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
$opts->{'certname'} = HELPERS::enc_base64($cert);
|
||||
$opts->{'cert'} = $cert;
|
||||
|
||||
$main->show_cert_revoke_dialog($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
$self->revoke_cert($main, $opts);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# now really revoke the certificate
|
||||
#
|
||||
sub revoke_cert {
|
||||
my ($self, $main, $opts) = @_;
|
||||
|
||||
my($ca, $cadir, $ret, $t, $ext, $reason);
|
||||
|
||||
$ca = $main->{'certbrowser'}->selection_caname();
|
||||
$cadir = $main->{'certbrowser'}->selection_cadir();
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
if(defined($opts->{'reason'}) && $opts->{'reason'} ne '') {
|
||||
$reason = $opts->{'reason'};
|
||||
} else {
|
||||
$reason = 'none';
|
||||
}
|
||||
|
||||
($ret, $ext) = $self->{'OpenSSL'}->revoke(
|
||||
'config' => $main->{'CA'}->{$ca}->{'cnf'},
|
||||
'infile' => $cadir."/certs/".$opts->{'certname'}.".pem",
|
||||
'pass' => $opts->{'passwd'},
|
||||
'reason' => $reason
|
||||
);
|
||||
|
||||
if($ret eq 1) {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = _("Wrong CA password given\nRevoking the Certificate failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
} elsif($ret eq 2) {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = _("CA Key not found\nRevoking the Certificate failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
} elsif($ret) {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = _("Revoking the Certificate failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
}
|
||||
|
||||
($ret, $ext) = $self->{'OpenSSL'}->newcrl(
|
||||
'config' => $main->{'CA'}->{$ca}->{'cnf'},
|
||||
'pass' => $opts->{'passwd'},
|
||||
'crldays' => 365,
|
||||
'outfile' => $cadir."/crl/crl.pem"
|
||||
);
|
||||
|
||||
if (not -s $cadir."/crl/crl.pem" || $ret) {
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_error(
|
||||
_("Generating a new Revocation List failed"), $ext);
|
||||
}
|
||||
|
||||
$self->{'OpenSSL'}->parsecrl( $cadir."/crl/crl.pem", 1);
|
||||
|
||||
$self->reread_cert($main, $opts->{'cert'});
|
||||
|
||||
# force reread of certlist
|
||||
$main->{'certbrowser'}->update($cadir."/certs",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# get name of certificatefile to delete
|
||||
#
|
||||
sub get_del_cert {
|
||||
my ($self, $main) = @_;
|
||||
|
||||
my($certname, $cert, $certfile, $status, $t, $cadir, $ca);
|
||||
|
||||
$certfile = $main->{'certbrowser'}->selection_fname();
|
||||
|
||||
if(not defined $certfile) {
|
||||
GUI::HELPERS::print_info(_("Please select a Certificate first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$ca = $main->{'certbrowser'}->selection_caname();
|
||||
$cadir = $main->{'certbrowser'}->selection_cadir();
|
||||
$cert = $main->{'certbrowser'}->selection_dn();
|
||||
$status = $main->{'certbrowser'}->selection_status();
|
||||
|
||||
$certname = HELPERS::enc_base64($cert);
|
||||
|
||||
if($status eq _("VALID")) {
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Can't delete VALID certificate!\nPlease revoke the Certificate first."));
|
||||
return;
|
||||
}
|
||||
|
||||
$main->show_del_confirm($certfile, 'cert');
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# now really delete the certificatefile
|
||||
#
|
||||
sub del_cert {
|
||||
my ($self, $main, $file) = @_;
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
unlink($file);
|
||||
|
||||
my $cadir = $main->{'certbrowser'}->selection_cadir();
|
||||
|
||||
$main->{'certbrowser'}->update($cadir."/certs",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# get informations for exporting a certificate
|
||||
#
|
||||
sub get_export_cert {
|
||||
my ($self, $main, $opts, $box) = @_;
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
my($ca, $t, $cn, $email, $cadir);
|
||||
|
||||
if(not defined($opts)) {
|
||||
$cn = $main->{'certbrowser'}->selection_cn();
|
||||
$email = $main->{'certbrowser'}->selection_email();
|
||||
|
||||
if(not defined $cn) {
|
||||
GUI::HELPERS::print_info(_("Please select a Certificate first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$ca = $main->{'certbrowser'}->selection_caname();
|
||||
$cadir = $main->{'certbrowser'}->selection_cadir();
|
||||
|
||||
$opts->{'status'} = $main->{'certbrowser'}->selection_status();
|
||||
$opts->{'cert'} = $main->{'certbrowser'}->selection_dn();
|
||||
|
||||
$opts->{'certname'} = HELPERS::enc_base64($opts->{'cert'});
|
||||
$opts->{'certfile'} = $cadir."/certs/".$opts->{'certname'}.".pem";
|
||||
$opts->{'keyfile'} = $cadir."/keys/".$opts->{'certname'}.".pem";
|
||||
$opts->{'cafile'} = $cadir."/cacert.pem";
|
||||
|
||||
if (-f $cadir."/cachain.pem") {
|
||||
$opts->{'cafile'} = $cadir."/cachain.pem";
|
||||
}
|
||||
|
||||
if($opts->{'status'} ne _("VALID")) {
|
||||
$t = _("Certificate seems not to be VALID");
|
||||
$t .= "\n";
|
||||
$t .= _("Export is not possible");
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
$opts->{'parsed'} = $self->parse_cert($main, $opts->{'certname'});
|
||||
|
||||
if((defined($email)) && $email ne '' && $email ne ' ') {
|
||||
$opts->{'outfile'} = "$main->{'exportdir'}/$email-cert.pem";
|
||||
}elsif((defined($cn)) && $cn ne '' && $cn ne ' ') {
|
||||
$opts->{'outfile'} = "$main->{'exportdir'}/$cn-cert.pem";
|
||||
}else{
|
||||
$opts->{'outfile'} = "$main->{'exportdir'}/cert.pem";
|
||||
}
|
||||
$opts->{'format'} = 'PEM';
|
||||
$opts->{'include'} = 0;
|
||||
$opts->{'incfp'} = 0;
|
||||
$opts->{'nopass'} = 0;
|
||||
$opts->{'friendlyname'} = '';
|
||||
|
||||
$main->show_export_dialog($opts, 'cert');
|
||||
return;
|
||||
}
|
||||
|
||||
if((not defined($opts->{'outfile'})) || ($opts->{'outfile'} eq '')) {
|
||||
$main->show_export_dialog($opts, 'cert');
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Please give at least the output file"));
|
||||
return;
|
||||
}
|
||||
|
||||
if($opts->{'format'} eq 'P12') {
|
||||
if(not -s $opts->{'keyfile'}) {
|
||||
$t = _("Key is necessary for export as PKCS#12");
|
||||
$t .= "\n";
|
||||
$t .= _("Export is not possible!");
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
if((not defined($opts->{'p12passwd'})) &&
|
||||
(not $opts->{'nopass'})) {
|
||||
$opts->{'includeca'} = 1;
|
||||
$main->show_p12_export_dialog($opts, 'cert');
|
||||
return;
|
||||
}
|
||||
} elsif(($opts->{'format'} eq 'ZIP') || ($opts->{'format'} eq 'TAR')) {
|
||||
if(not -s $opts->{'keyfile'}) {
|
||||
$t = sprintf(
|
||||
_("Key is necessary for export as %s"), $opts->{'format'});
|
||||
$t .= "\n";
|
||||
$t .= _("Export is not possible!");
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
}
|
||||
|
||||
$self->export_cert($main, $opts); #FIXME no need for two functions
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
#
|
||||
# now really export the certificate
|
||||
#
|
||||
sub export_cert {
|
||||
my ($self, $main, $opts) = @_;
|
||||
|
||||
my($ca, $t, $out, $ret, $ext);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
|
||||
if($opts->{'format'} eq 'PEM') {
|
||||
if($opts->{'incfp'}) {
|
||||
$out = '';
|
||||
$out .= "Fingerprint (MD5): $opts->{'parsed'}->{'FINGERPRINTMD5'}\n";
|
||||
$out .= "Fingerprint (SHA1): $opts->{'parsed'}->{'FINGERPRINTSHA1'}\n\n";
|
||||
} else {
|
||||
$out = '';
|
||||
}
|
||||
|
||||
$out .= $opts->{'parsed'}->{'PEM'};
|
||||
|
||||
if($opts->{'include'}) {
|
||||
open(IN, "<$opts->{'keyfile'}") || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = sprintf(_("Can't open Certificate file: %s: %s"),
|
||||
$opts->{'keyfile'}, $!);
|
||||
return;
|
||||
};
|
||||
$out .= "\n";
|
||||
$out .= $_ while(<IN>);
|
||||
close(IN);
|
||||
}
|
||||
} elsif ($opts->{'format'} eq 'DER') {
|
||||
$out = $opts->{'parsed'}->{'DER'};
|
||||
} elsif ($opts->{'format'} eq 'TXT') {
|
||||
$out = $opts->{'parsed'}->{'TEXT'};
|
||||
} elsif ($opts->{'format'} eq 'P12') {
|
||||
unlink($opts->{'outfile'});
|
||||
($ret, $ext) = $self->{'OpenSSL'}->genp12(
|
||||
certfile => $opts->{'certfile'},
|
||||
keyfile => $opts->{'keyfile'},
|
||||
cafile => $opts->{'cafile'},
|
||||
outfile => $opts->{'outfile'},
|
||||
passwd => $opts->{'passwd'},
|
||||
p12passwd => $opts->{'p12passwd'},
|
||||
includeca => $opts->{'includeca'},
|
||||
nopass => $opts->{'nopass'},
|
||||
friendly => $opts->{'friendlyname'}
|
||||
);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
if($ret eq 1) {
|
||||
$t = "Wrong password given\nDecrypting Key failed\nGenerating PKCS#12 failed";
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
return;
|
||||
} elsif($ret || (not -s $opts->{'outfile'})) {
|
||||
$t = _("Generating PKCS#12 failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
return;
|
||||
}
|
||||
|
||||
$main->{'exportdir'} = HELPERS::write_export_dir($main,
|
||||
$opts->{'outfile'});
|
||||
|
||||
$t = sprintf(_("Certificate and Key successfully exported to %s"),
|
||||
$opts->{'outfile'});
|
||||
GUI::HELPERS::print_info($t, $ext);
|
||||
return;
|
||||
|
||||
} elsif (($opts->{'format'} eq "ZIP") || ($opts->{'format'} eq "TAR")) {
|
||||
|
||||
my $tmpcert = "$main->{'tmpdir'}/cert.pem";
|
||||
my $tmpkey = "$main->{'tmpdir'}/key.pem";
|
||||
my $tmpcacert = "$main->{'tmpdir'}/cacert.pem";
|
||||
|
||||
open(OUT, ">$tmpcert") || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = sprintf(_("Can't create temporary file: %s: %s"),
|
||||
$tmpcert, $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
print OUT $opts->{'parsed'}->{'PEM'};
|
||||
close OUT;
|
||||
|
||||
# store key in temporary location
|
||||
{
|
||||
open(IN, "<$opts->{'keyfile'}") || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = sprintf(_("Can't read Key file: %s: %s"), $tmpcert, $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
my @key = <IN>;
|
||||
close IN;
|
||||
|
||||
open(OUT, ">$tmpkey") || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = sprintf(_("Can't create temporary file: %s: %s"),
|
||||
$tmpcert, $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
print OUT @key;
|
||||
close OUT;
|
||||
}
|
||||
|
||||
# store cacert in temporary location
|
||||
{
|
||||
open(IN, "<$opts->{'cafile'}") || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_warning(_("Can't read CA certificate"));
|
||||
return;
|
||||
};
|
||||
my @cacert = <IN>;
|
||||
close IN;
|
||||
|
||||
open(OUT, ">$tmpcacert") || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_warning(_("Can't create temporary file"));
|
||||
return;
|
||||
};
|
||||
print OUT @cacert;
|
||||
close OUT;
|
||||
}
|
||||
|
||||
unlink($opts->{'outfile'});
|
||||
if($opts->{'format'} eq "ZIP") {
|
||||
system($main->{'init'}->{'zipbin'}, '-j', $opts->{'outfile'},
|
||||
$tmpcacert, $tmpkey, $tmpcert);
|
||||
my $ret = $? >> 8;
|
||||
} elsif ($opts->{'format'} eq "TAR") {
|
||||
system($main->{'init'}->{'tarbin'}, 'cfv', $opts->{'outfile'},
|
||||
$tmpcacert, $tmpkey, $tmpcert);
|
||||
}
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
if(not -s $opts->{'outfile'} || $ret) {
|
||||
GUI::HELPERS::print_warning(
|
||||
sprintf(_("Generating %s file failed"), $opts->{'format'})
|
||||
);
|
||||
} else {
|
||||
$main->{'exportdir'} = HELPERS::write_export_dir($main,
|
||||
$opts->{'outfile'});
|
||||
|
||||
$t = sprintf(
|
||||
_("Certificate and Key successfully exported to %s"),
|
||||
$opts->{'outfile'});
|
||||
GUI::HELPERS::print_info($t);
|
||||
unlink($tmpcacert);
|
||||
unlink($tmpcert);
|
||||
unlink($tmpkey);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
} else {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
$t = sprintf(_("Invalid Format for export_cert(): %s"),
|
||||
$opts->{'format'});
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
open(OUT, ">$opts->{'outfile'}") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't open output file: %s: %s"),
|
||||
$opts->{'outfile'}, $!);
|
||||
return;
|
||||
};
|
||||
|
||||
print OUT $out;
|
||||
close OUT;
|
||||
|
||||
$main->{'exportdir'} = HELPERS::write_export_dir($main,
|
||||
$opts->{'outfile'});
|
||||
|
||||
$t = sprintf(_("Certificate successfully exported to: %s"),
|
||||
$opts->{'outfile'});
|
||||
GUI::HELPERS::print_info($t);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
sub reread_cert {
|
||||
my ($self, $main, $name) = @_;
|
||||
|
||||
my ($parsed, $tmp);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$name = HELPERS::enc_base64($name);
|
||||
|
||||
$parsed = $self->parse_cert($main, $name, 1);
|
||||
|
||||
# print STDERR "DEBUG: status $parsed->{'STATUS'}\n";
|
||||
|
||||
foreach(@{$self->{'certlist'}}) {
|
||||
if(/^$name%/) {
|
||||
; #delete
|
||||
} else {
|
||||
push(@{$tmp}, $_);
|
||||
}
|
||||
}
|
||||
push(@{$tmp}, $name."%".$parsed->{'STATUS'});
|
||||
@{$tmp} = sort(@{$tmp});
|
||||
|
||||
delete($self->{'certlist'});
|
||||
$self->{'certlist'} = $tmp;
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
sub parse_cert {
|
||||
my ($self, $main, $name, $force) = @_;
|
||||
|
||||
my($ca, $certfile, $x509, $parsed);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
|
||||
if($name eq 'CA') {
|
||||
$certfile = $main->{'CA'}->{$ca}->{'dir'}."/cacert.pem";
|
||||
} else {
|
||||
$certfile = $main->{'CA'}->{$ca}->{'dir'}."/certs/".$name.".pem";
|
||||
}
|
||||
|
||||
$parsed = $self->{'OpenSSL'}->parsecert(
|
||||
$main->{'CA'}->{$ca}->{'dir'}."/crl/crl.pem",
|
||||
$main->{'CA'}->{$ca}->{'dir'}."/index.txt",
|
||||
$certfile,
|
||||
$force
|
||||
);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
return($parsed);
|
||||
}
|
||||
|
||||
1
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,173 @@
|
|||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: CALLBACK.pm,v 1.6 2006/06/28 21:50:42 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
package GUI::CALLBACK;
|
||||
|
||||
use POSIX;
|
||||
|
||||
#
|
||||
# fill given var-reference with text from entry
|
||||
#
|
||||
sub entry_to_var {
|
||||
my ($widget, $entry, $var, $box, $words) = @_;
|
||||
|
||||
if(defined($words)) {
|
||||
$$var = $words->{$entry->get_text()};
|
||||
}else{
|
||||
$$var = $entry->get_text();
|
||||
}
|
||||
|
||||
if(defined($box)) {
|
||||
$box->{'button_ok'}->set_sensitive(1);
|
||||
$box->{'button_apply'}->set_sensitive(1);
|
||||
}
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# fill given var-reference with text from entry subjectAltName
|
||||
# and set senitivity of togglebuttons
|
||||
#
|
||||
sub entry_to_var_san {
|
||||
my ($widget, $entry, $var, $box, $words, $radio1, $radio2, $radio3, $radio4) = @_;
|
||||
|
||||
if(defined($words)) {
|
||||
if(my $tmp = $words->{$entry->get_text()}) {
|
||||
$$var = $tmp;
|
||||
} else {
|
||||
$$var = $entry->get_text();
|
||||
}
|
||||
#print STDERR "DEBUG: var: $$var\n";
|
||||
if($$var eq 'user') {
|
||||
#print STDERR "set sensitive(1)\n";
|
||||
$radio1->set_sensitive(1) if(defined($radio1));
|
||||
$radio2->set_sensitive(1) if(defined($radio2));
|
||||
$radio3->set_sensitive(1) if(defined($radio3));
|
||||
$radio4->set_sensitive(1) if(defined($radio4));
|
||||
}else{
|
||||
#print STDERR "DEBUG: set sensitive(0)\n";
|
||||
#print STDERR "DEBUG: r1 $radio1 r2 $radio2 r3 $radio3 r4 $radio4\n";
|
||||
$radio1->set_sensitive(0) if(defined($radio1));
|
||||
$radio2->set_sensitive(0) if(defined($radio2));
|
||||
$radio3->set_sensitive(0) if(defined($radio3));
|
||||
$radio4->set_sensitive(0) if(defined($radio4));
|
||||
}
|
||||
}else{
|
||||
$$var = $entry->get_text();
|
||||
}
|
||||
|
||||
if(defined($box)) {
|
||||
$box->{'button_ok'}->set_sensitive(1);
|
||||
$box->{'button_apply'}->set_sensitive(1);
|
||||
}
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# fill given var-reference with text from entry subjectAltName
|
||||
# and set senitivity of togglebuttons
|
||||
#
|
||||
sub entry_to_var_key {
|
||||
my ($widget, $entry, $var, $box, $words, $radio1, $radio2, $radio3) = @_;
|
||||
|
||||
if(defined($words)) {
|
||||
if(my $tmp = $words->{$entry->get_text()}) {
|
||||
$$var = $tmp;
|
||||
} else {
|
||||
$$var = $entry->get_text();
|
||||
}
|
||||
if(($$var ne '') && ($$var ne 'none')) {
|
||||
$radio1->set_sensitive(1) if(defined($radio1));
|
||||
$radio2->set_sensitive(1) if(defined($radio2));
|
||||
$radio3->set_sensitive(1) if(defined($radio3));
|
||||
}else{
|
||||
$radio1->set_sensitive(0) if(defined($radio1));
|
||||
$radio2->set_sensitive(0) if(defined($radio2));
|
||||
$radio3->set_sensitive(0) if(defined($radio3));
|
||||
}
|
||||
}else{
|
||||
$$var = $entry->get_text();
|
||||
}
|
||||
|
||||
if(defined($box)) {
|
||||
$box->{'button_ok'}->set_sensitive(1);
|
||||
$box->{'button_apply'}->set_sensitive(1);
|
||||
}
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# fill given var-reference with value from togglebutton
|
||||
#
|
||||
sub toggle_to_var {
|
||||
my ($button, $var, $value, $outfileref, $formatref, $fileentry, $pass1,
|
||||
$pass2) = @_;
|
||||
|
||||
$$var = $value;
|
||||
|
||||
if(defined($outfileref) && defined($formatref)) {
|
||||
if($$outfileref =~ s/\.(pem|der|txt|p12|zip|tar)$//i) {
|
||||
$$outfileref .= "." . lc $$formatref;
|
||||
# something seem broken, need tmp var
|
||||
my $tmp = $$outfileref;
|
||||
$fileentry->set_text($tmp);
|
||||
}
|
||||
}
|
||||
if(defined($pass1) && defined($pass2)) {
|
||||
if($$formatref eq "PEM") {
|
||||
$pass1->set_sensitive(1);
|
||||
$pass2->set_sensitive(1);
|
||||
} elsif ($$formatref eq "DER") {
|
||||
$pass1->set_sensitive(0);
|
||||
$pass2->set_sensitive(0);
|
||||
} elsif ($$formatref eq "P12") {
|
||||
$pass1->set_sensitive(0);
|
||||
$pass2->set_sensitive(0);
|
||||
} elsif ($$formatref eq "ZIP") {
|
||||
$pass1->set_sensitive(0);
|
||||
$pass2->set_sensitive(0);
|
||||
} elsif ($$formatref eq "TAR") {
|
||||
$pass1->set_sensitive(0);
|
||||
$pass2->set_sensitive(0);
|
||||
}
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# fill given var-reference with value from togglebutton
|
||||
#
|
||||
sub toggle_to_var_pref {
|
||||
my ($button, $var, $value, $box) = @_;
|
||||
|
||||
$$var = $value;
|
||||
|
||||
if(defined($box) && defined($box->{'nb'}->get_current_page())) {
|
||||
$box->{'button_ok'}->set_sensitive(1);
|
||||
$box->{'button_apply'}->set_sensitive(1);
|
||||
}
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
1
|
||||
|
||||
|
|
@ -0,0 +1,479 @@
|
|||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: HELPERS.pm,v 1.6 2006/06/28 21:50:42 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
package GUI::HELPERS;
|
||||
|
||||
use POSIX;
|
||||
|
||||
#
|
||||
# Error message box, kills application
|
||||
#
|
||||
sub print_error {
|
||||
my ($t, $ext) = @_;
|
||||
|
||||
my ($box, $button, $dbutton, $expander, $text, $scrolled, $buffer);
|
||||
|
||||
$button = Gtk2::Button->new_from_stock('gtk-ok');
|
||||
$button->signal_connect('clicked', sub { HELPERS::exit_clean(1) });
|
||||
$button->can_default(1);
|
||||
|
||||
$box = Gtk2::MessageDialog->new(
|
||||
undef, [qw/destroy-with-parent modal/], 'error', 'none', $t);
|
||||
$box->set_default_size(600, 0);
|
||||
$box->set_resizable(1);
|
||||
|
||||
if(defined($ext)) {
|
||||
$buffer = Gtk2::TextBuffer->new();
|
||||
$buffer->set_text($ext);
|
||||
|
||||
$text = Gtk2::TextView->new_with_buffer($buffer);
|
||||
$text->set_editable(0);
|
||||
$text->set_wrap_mode('word');
|
||||
|
||||
$scrolled = Gtk2::ScrolledWindow->new(undef, undef);
|
||||
$scrolled->set_policy('never', 'automatic');
|
||||
$scrolled->set_shadow_type('etched-in');
|
||||
$scrolled->add($text);
|
||||
|
||||
$expander = Gtk2::Expander->new(_("Command Details"));
|
||||
$expander->add($scrolled);
|
||||
$box->vbox->add($expander);
|
||||
}
|
||||
|
||||
$box->add_action_widget($button, 0);
|
||||
|
||||
$box->show_all();
|
||||
}
|
||||
|
||||
#
|
||||
# Warning message box
|
||||
#
|
||||
sub print_warning {
|
||||
my ($t, $ext) = @_;
|
||||
|
||||
my ($box, $button, $dbutton, $expander, $text, $scrolled, $buffer);
|
||||
|
||||
$button = Gtk2::Button->new_from_stock('gtk-ok');
|
||||
$button->signal_connect('clicked', sub { $box->destroy() });
|
||||
$button->can_default(1);
|
||||
|
||||
$box = Gtk2::MessageDialog->new(
|
||||
undef, [qw/destroy-with-parent modal/], 'warning', 'none', $t);
|
||||
$box->set_default_size(600, 0);
|
||||
$box->set_resizable(1);
|
||||
|
||||
if(defined($ext)) {
|
||||
$buffer = Gtk2::TextBuffer->new();
|
||||
$buffer->set_text($ext);
|
||||
|
||||
$text = Gtk2::TextView->new_with_buffer($buffer);
|
||||
$text->set_editable(0);
|
||||
$text->set_wrap_mode('word');
|
||||
|
||||
$scrolled = Gtk2::ScrolledWindow->new(undef, undef);
|
||||
$scrolled->set_policy('never', 'automatic');
|
||||
$scrolled->set_shadow_type('etched-in');
|
||||
$scrolled->add($text);
|
||||
|
||||
$expander = Gtk2::Expander->new(_("Command Details"));
|
||||
$expander->add($scrolled);
|
||||
$box->vbox->add($expander);
|
||||
}
|
||||
$box->add_action_widget($button, 0);
|
||||
|
||||
$box->show_all();
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# Info message box
|
||||
#
|
||||
sub print_info {
|
||||
my ($t, $ext) = @_;
|
||||
|
||||
my ($box, $button, $dbutton, $buffer, $text, $scrolled, $expander);
|
||||
|
||||
$button = Gtk2::Button->new_from_stock('gtk-ok');
|
||||
$button->signal_connect('clicked', sub { $box->destroy() });
|
||||
$button->can_default(1);
|
||||
|
||||
$box = Gtk2::MessageDialog->new(
|
||||
undef, [qw/destroy-with-parent modal/], 'info', 'none', $t);
|
||||
$box->set_default_size(600, 0);
|
||||
$box->set_resizable(1);
|
||||
|
||||
if(defined($ext)) {
|
||||
$buffer = Gtk2::TextBuffer->new();
|
||||
$buffer->set_text($ext);
|
||||
|
||||
$text = Gtk2::TextView->new_with_buffer($buffer);
|
||||
$text->set_editable(0);
|
||||
$text->set_wrap_mode('word');
|
||||
|
||||
$scrolled = Gtk2::ScrolledWindow->new(undef, undef);
|
||||
$scrolled->set_policy('never', 'automatic');
|
||||
$scrolled->set_shadow_type('etched-in');
|
||||
$scrolled->add($text);
|
||||
|
||||
$expander = Gtk2::Expander->new(_("Command Details"));
|
||||
$expander->add($scrolled);
|
||||
$box->vbox->add($expander);
|
||||
}
|
||||
$box->add_action_widget($button, 0);
|
||||
|
||||
$box->show_all();
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# create standard dialog box
|
||||
#
|
||||
sub dialog_box {
|
||||
my ($title, $text, $button1, $button2) = @_;
|
||||
|
||||
my $box = Gtk2::Dialog->new($title, undef, ["destroy-with-parent"]);
|
||||
|
||||
$box->add_action_widget($button1, 0);
|
||||
|
||||
if(defined($button2)) {
|
||||
$box->add_action_widget($button2, 0);
|
||||
$box->action_area->set_layout('spread');
|
||||
}
|
||||
|
||||
if(defined($text)) {
|
||||
my $label = create_label($text, 'center', 0, 1);
|
||||
$box->vbox->pack_start($label, 0, 0, 0);
|
||||
}
|
||||
|
||||
$box->signal_connect(response => sub { $box->destroy });
|
||||
|
||||
return($box);
|
||||
}
|
||||
|
||||
#
|
||||
# create standard label
|
||||
#
|
||||
sub create_label {
|
||||
my ($text, $mode, $wrap, $bold) = @_;
|
||||
|
||||
$text = "<b>$text</b>" if($bold);
|
||||
|
||||
my $label = Gtk2::Label->new($text);
|
||||
|
||||
$label->set_justify($mode);
|
||||
if($mode eq 'center') {
|
||||
$label->set_alignment(0.5, 0.5);
|
||||
}elsif($mode eq 'left') {
|
||||
$label->set_alignment(0, 0);
|
||||
}elsif($mode eq 'right') {
|
||||
$label->set_alignment(1, 1);
|
||||
}
|
||||
|
||||
$label->set_line_wrap($wrap);
|
||||
|
||||
$label->set_markup($text) if($bold);
|
||||
|
||||
return($label);
|
||||
}
|
||||
|
||||
#
|
||||
# write two labels to table
|
||||
#
|
||||
sub label_to_table {
|
||||
my ($key, $val, $table, $row, $mode, $wrap, $bold) = @_;
|
||||
|
||||
my ($label, $entry);
|
||||
|
||||
$label = create_label($key, $mode, $wrap, $bold);
|
||||
$label->set_padding(20, 0);
|
||||
$table->attach_defaults($label, 0, 1, $row, $row+1);
|
||||
|
||||
$label = create_label($val, $mode, $wrap, $bold);
|
||||
$label->set_padding(20, 0);
|
||||
$table->attach_defaults($label, 1, 2, $row, $row+1);
|
||||
|
||||
$row++;
|
||||
$table->resize($row, 2);
|
||||
|
||||
return($row);
|
||||
}
|
||||
|
||||
#
|
||||
# write label and entry to table
|
||||
#
|
||||
sub entry_to_table {
|
||||
my ($text, $var, $table, $row, $visibility, $box) = @_;
|
||||
|
||||
my ($label, $entry);
|
||||
|
||||
$label = create_label($text, 'left', 0, 0);
|
||||
$table->attach_defaults($label, 0, 1, $row, $row+1);
|
||||
|
||||
$entry = Gtk2::Entry->new();
|
||||
$entry->set_text($$var) if(defined($$var));
|
||||
|
||||
$table->attach_defaults($entry, 1, 2, $row, $row+1);
|
||||
$entry->signal_connect('changed' =>
|
||||
sub {GUI::CALLBACK::entry_to_var($entry, $entry, $var, $box)} );
|
||||
$entry->set_visibility($visibility);
|
||||
|
||||
return($entry);
|
||||
}
|
||||
|
||||
#
|
||||
# sort the table by the clicked column
|
||||
#
|
||||
sub sort_clist {
|
||||
my ($clist, $col) = @_;
|
||||
|
||||
$clist->set_sort_column($col);
|
||||
$clist->sort();
|
||||
|
||||
return(1);
|
||||
}
|
||||
|
||||
sub create_activity_bar {
|
||||
my ($t) = @_;
|
||||
|
||||
my($box, $bar);
|
||||
|
||||
$box = Gtk2::MessageDialog->new(
|
||||
undef, [qw/destroy-with-parent modal/], 'info', 'none', $t);
|
||||
|
||||
$bar = Gtk2::ProgressBar->new();
|
||||
$bar->pulse();
|
||||
$bar->set_pulse_step(0.1);
|
||||
|
||||
$box->vbox->add($bar);
|
||||
|
||||
$box->show_all();
|
||||
|
||||
return($box, $bar);
|
||||
}
|
||||
|
||||
#
|
||||
# set curser busy
|
||||
#
|
||||
sub set_cursor {
|
||||
my $main = shift;
|
||||
my $busy = shift;
|
||||
|
||||
if($busy) {
|
||||
$main->{'rootwin'}->set_cursor($main->{'busycursor'});
|
||||
} else {
|
||||
$main->{'rootwin'}->set_cursor($main->{'cursor'});
|
||||
}
|
||||
while(Gtk2->events_pending) {
|
||||
Gtk2->main_iteration;
|
||||
}
|
||||
}
|
||||
|
||||
#
|
||||
# call file chooser
|
||||
#
|
||||
sub browse_file {
|
||||
my($title, $entry, $mode) = @_;
|
||||
|
||||
my($file_chooser, $filename, $filter);
|
||||
|
||||
$file_chooser = Gtk2::FileChooserDialog->new ($title, undef, $mode,
|
||||
'gtk-cancel' => 'cancel',
|
||||
'gtk-ok' => 'ok');
|
||||
|
||||
$file_chooser->add_shortcut_folder ('/tmp');
|
||||
|
||||
if($mode eq 'open') {
|
||||
$filter = Gtk2::FileFilter->new();
|
||||
$filter->set_name(_("Request Files (*.pem, *.der, *.req)"));
|
||||
$filter->add_pattern("*.pem");
|
||||
$filter->add_pattern("*.der");
|
||||
$filter->add_pattern("*.req");
|
||||
$file_chooser->add_filter($filter);
|
||||
|
||||
$filter = Gtk2::FileFilter->new();
|
||||
$filter->set_name(_("All Files (*.*)"));
|
||||
$filter->add_pattern("*");
|
||||
$file_chooser->add_filter($filter);
|
||||
}
|
||||
|
||||
if ('ok' eq $file_chooser->run) {
|
||||
$filename = $file_chooser->get_filename();
|
||||
$entry->set_text($filename);
|
||||
}
|
||||
|
||||
$file_chooser->destroy();
|
||||
}
|
||||
|
||||
#
|
||||
# set text in statusbar
|
||||
#
|
||||
sub set_status {
|
||||
my ($main, $t) = @_;
|
||||
|
||||
$main->{'bar'}->pop($main->{'lastid'}) if(defined($main->{'lastid'}));
|
||||
$main->{'lastid'} = $main->{'bar'}->get_context_id('gargs');
|
||||
$main->{'bar'}->push($main->{'lastid'}, $t);
|
||||
}
|
||||
|
||||
1
|
||||
|
||||
__END__
|
||||
|
||||
=head1 NAME
|
||||
|
||||
GUI::HELPERS - helper functions for TinyCA, doing small jobs related to the
|
||||
GUI
|
||||
|
||||
=head1 SYNOPSIS
|
||||
|
||||
use GUI::HELPERS;
|
||||
|
||||
GUI::HELPERS::print_info($text, $ext);
|
||||
GUI::HELPERS::print_warning($text, $ext);
|
||||
GUI::HELPERS::print_error($text, $ext);
|
||||
GUI::HELPERS::sort_clist($clist, $col);
|
||||
GUI::HELPERS::set_cursor($main, $busy);
|
||||
GUI::HELPERS::browse_file($main, $entry, $mode);
|
||||
GUI::HELPERS::set_status($main, $text);
|
||||
|
||||
$box = GUI::HELPERS::dialog_box(
|
||||
$title, $text, $button1, $button2);
|
||||
$label = GUI::HELPERS::create_label(
|
||||
$text, $mode, $wrap, $bold);
|
||||
$row = GUI::HELPERS::label_to_table(
|
||||
$key, $val, $table, $row, $mode, $wrap, $bold);
|
||||
$entry = GUI::HELPERS::entry_to_table(
|
||||
$text, $var, $table, $row, $visibility, $box);
|
||||
|
||||
=head1 DESCRIPTION
|
||||
|
||||
GUI::HELPERS.pm is a library, containing some useful functions used by other
|
||||
TinyCA2 modules. All functions are related to the GUI.
|
||||
|
||||
=head2 GUI::HELPERS::print_info($text, $ext);
|
||||
|
||||
=over 1
|
||||
|
||||
creates an Gtk2::MessageDialog of the type info. The string given in $text is
|
||||
shown as message, the (multiline) string $ext is available through the
|
||||
"Details" Button.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::print_warning($text, $ext);
|
||||
|
||||
=over 1
|
||||
|
||||
is identically with GUI::HELPERS::print_warning(), only the
|
||||
Gtk2::MessageDialog is of type warning.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::print_error($text, $ext);
|
||||
|
||||
=over 1
|
||||
|
||||
is identically with GUI::HELPERS::print_info(), only the Gtk2::MessageDialogog
|
||||
is of type error and the program will shut down after closing the message.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::sort_clist($clist, $col);
|
||||
|
||||
=over 1
|
||||
|
||||
sorts the clist with the values from the given column $col.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::dialog_box($title, $text, $button1, $button2);
|
||||
|
||||
=over 1
|
||||
|
||||
returns the reference to a new window of type Gtk2::Dialog. $title and
|
||||
$button1 must be given. $text and $button2 are optional arguments and can be
|
||||
undef.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::create_label($text, $mode, $wrap, $bold);
|
||||
|
||||
=over 1
|
||||
|
||||
returns the reference to a new Gtk2::Label. $mode can be "center", "left" or
|
||||
"right". $wrap and $bold are boolean values.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::label_to_table($key, $val, $table, $row, $mode, $wrap, $bold);
|
||||
|
||||
=over 1
|
||||
|
||||
adds a new row to $table. The new row is appended at $row and has two columns:
|
||||
the first will contain a label with the content of string $k, the second the
|
||||
content of string $v. $mode, $wrap, $bold are the arguments for
|
||||
GUI::HELPERS::create_label(), mentioned above.
|
||||
The function returns the number of the next free row in the table.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::entry_to_table($text, $var, $table, $row, $visibility, $box);
|
||||
|
||||
=over 1
|
||||
|
||||
adds a new row to $table. The new row is appended at $row and has two columns:
|
||||
the first will contain a label with the content of the string $text, the
|
||||
second one will contain a textentry Gtk2::Entry, associated with the variable
|
||||
$var. $visibility controls, if the entered text will be displayed or not
|
||||
(passwords).
|
||||
The function returns the reference to the new created entry.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::set_cursor($main, $busy);
|
||||
|
||||
=over 1
|
||||
|
||||
sets the actual cursor to busy or back to normal. The value of $busy is
|
||||
boolean.
|
||||
This functions returns nothing;
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::browse_file($main, $entry, $mode);
|
||||
|
||||
=over 1
|
||||
|
||||
opens a FileChooser dialog to select files or directories. $entry is a
|
||||
reference to the variable, where the selected path shall be stored. If $mode
|
||||
is set to "open", then only files with appropriate suffixes are displyed.
|
||||
|
||||
=back
|
||||
|
||||
=head2 GUI::HELPERS::set_status($main, $text);
|
||||
|
||||
=over 1
|
||||
|
||||
sets the text in $text to the statusbar at the bottom of the window.
|
||||
|
||||
=back
|
||||
|
||||
=cut
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,112 @@
|
|||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: WORDS.pm,v 1.2 2006/06/28 21:50:42 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
package GUI::WORDS;
|
||||
|
||||
sub new {
|
||||
my $that = shift;
|
||||
|
||||
my $self = {
|
||||
'none' => _("Not set"),
|
||||
'user' => _("Ask User"),
|
||||
'critical' => _("critical"),
|
||||
'noncritical' => _("not critical"),
|
||||
'emailcopy' => _("Copy Email"),
|
||||
'raw' => _("raw"),
|
||||
'dns' => _("DNS Name"),
|
||||
'ip' => _("IP Address"),
|
||||
'mail' => _("Email"),
|
||||
'server' => _("SSL Server"),
|
||||
'server, client' => _("SSL Server, SSL Client"),
|
||||
'key' => _("Key Encipherment"),
|
||||
'sig' => _("Digital Signature"),
|
||||
'keysig' => _("Key Encipherment, Digital Signature"),
|
||||
'objsign' => _("Object Signing"),
|
||||
'client, objsign' => _("SSL Client, Object Signing"),
|
||||
'client, email' => _("SSL Client, Email(S/MIME)"),
|
||||
'client' => _("SSL Client"),
|
||||
'email' => _("Email(S/MIME)"),
|
||||
'client, email, objsign'=> _("SSL Client, Email, Object Signing"),
|
||||
'objCA' => _("Object Signing CA"),
|
||||
'emailCA' => _("S/MIME CA"),
|
||||
'sslCA' => _("SSL CA"),
|
||||
'sslCA, emailCA' => _("SSL CA, S/MIME CA"),
|
||||
'sslCA, objCA' => _("SSL CA, Object Signing CA"),
|
||||
'emailCA, objCA' => _("S/MIME CA, Object Signing CA"),
|
||||
'sslCA, emailCA, objCA' => _("SSL CA, S/MIME CA, Object Signing CA"),
|
||||
'keyCertSign' => _("Certificate Signing"),
|
||||
'cRLSign' => _("CRL Signing"),
|
||||
'keyCertSign, cRLSign' => _("Certificate Signing, CRL Signing"),
|
||||
'CN' => _("Common Name"),
|
||||
'EMAIL' => _("eMail Address"),
|
||||
'O' => _("Organization"),
|
||||
'OU' => _("Organizational Unit"),
|
||||
'L' => _("Location"),
|
||||
'ST' => _("State"),
|
||||
'C' => _("Country"),
|
||||
'NOTBEFORE' => _("Creation Date"),
|
||||
'NOTAFTER' => _("Expiration Date"),
|
||||
'KEYSIZE' => _("Keylength"),
|
||||
'PK_ALGORITHM' => _("Public Key Algorithm"),
|
||||
'SIG_ALGORITHM' => _("Signature Algorithm"),
|
||||
'TYPE' => _("Type"),
|
||||
'SERIAL' => _("Serial"),
|
||||
'STATUS' => _("Status"),
|
||||
'FINGERPRINTMD5' => _("Fingerprint (MD5)"),
|
||||
'FINGERPRINTSHA1' => _("Fingerprint (SHA1)"),
|
||||
_("Not set") => 'none',
|
||||
_("Ask User") => 'user',
|
||||
_("critical") => 'critical',
|
||||
_("not critical") => 'noncritical',
|
||||
_("Copy Email") => 'emailcopy',
|
||||
_("raw") => 'raw',
|
||||
_("DNS Name") => 'dns',
|
||||
_("Email") => 'email',
|
||||
_("IP Address") => 'ip',
|
||||
_("SSL Server") => 'server',
|
||||
_("SSL Server, SSL Client") => 'server, client',
|
||||
_("Key Encipherment") => 'key',
|
||||
_("Digital Signature") => 'sig',
|
||||
_("Key Encipherment, Digital Signature") => 'keysig',
|
||||
_("Object Signing") => 'objsign',
|
||||
_("Email(S/MIME)") => 'email',
|
||||
_("SSL Client, Email(S/MIME)") => 'client, email',
|
||||
_("SSL Client") => 'client',
|
||||
_("SSL Client, Object Signing") => 'client, objsign',
|
||||
_("SSL Client, Email, Object Signing") => 'client, email, objsign',
|
||||
_("Object Signing CA") => 'objCA',
|
||||
_("S/MIME CA") => 'emailCA',
|
||||
_("SSL CA") => 'sslCA',
|
||||
_("SSL CA, S/MIME CA") => 'sslCA, emailCA',
|
||||
_("SSL CA, Object Signing CA") => 'sslCA, objCA',
|
||||
_("S/MIME CA, Object Signing CA") => 'emailCA, objCA',
|
||||
_("SSL CA, S/MIME CA, Object Signing CA")=> 'sslCA, emailCA, objCA',
|
||||
_("Certificate Signing") => 'keyCertSign',
|
||||
_("CRL Signing") => 'cRLSign',
|
||||
_("Certificate Signing, CRL Signing") => 'keyCertSign, cRLSign'
|
||||
};
|
||||
|
||||
my $class = ref($that) || $that;
|
||||
|
||||
bless($self, $class);
|
||||
|
||||
$self;
|
||||
}
|
||||
|
||||
1
|
||||
|
|
@ -0,0 +1,879 @@
|
|||
# Copyright (c) Olaf Gellert <og@pre-secure.de> and
|
||||
# Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: X509_browser.pm,v 1.6 2006/06/28 21:50:42 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
package GUI::X509_browser;
|
||||
|
||||
use HELPERS;
|
||||
use GUI::HELPERS;
|
||||
use GUI::X509_infobox;
|
||||
|
||||
use POSIX;
|
||||
|
||||
my $tmpdefault="/tmp";
|
||||
|
||||
my $version = "0.1";
|
||||
my $true = 1;
|
||||
my $false = undef;
|
||||
|
||||
sub new {
|
||||
my $that = shift;
|
||||
my $self = {};
|
||||
|
||||
$self->{'main'} = shift;
|
||||
my $mode = shift;
|
||||
|
||||
my ($font, $fontfix);
|
||||
|
||||
my $class = ref($that) || $that;
|
||||
|
||||
|
||||
if ((defined $mode) &&
|
||||
(($mode eq 'cert') || ($mode eq 'req') || ($mode eq 'key'))) {
|
||||
$self->{'mode'} = $mode;
|
||||
} else {
|
||||
printf STDERR "No mode specified for X509browser\n";
|
||||
return undef;
|
||||
}
|
||||
|
||||
# initialize fonts and styles
|
||||
$font = Gtk2::Pango::FontDescription->from_string(
|
||||
"-adobe-helvetica-bold-r-normal--*-120-*-*-*-*-*-*");
|
||||
if(defined($font)) {
|
||||
$self->{'stylebold'} = Gtk2::Style->new();
|
||||
$self->{'stylebold'}->font_desc->from_string(
|
||||
"-adobe-helvetica-bold-r-normal--*-120-*-*-*-*-*-*");
|
||||
} else {
|
||||
$self->{'stylebold'} = undef;
|
||||
}
|
||||
|
||||
$fontfix = Gtk2::Pango::FontDescription->from_string(
|
||||
"-adobe-courier-medium-r-normal--*-100-*-*-*-*-*-*");
|
||||
if(defined($fontfix)) {
|
||||
$self->{'stylefix'} = Gtk2::Style->new();
|
||||
$self->{'stylefix'}->font_desc->from_string(
|
||||
"-adobe-courier-medium-r-normal--*-100-*-*-*-*-*-*");
|
||||
} else {
|
||||
$self->{'stylefix'} = undef;
|
||||
}
|
||||
|
||||
bless($self, $class);
|
||||
|
||||
$self;
|
||||
}
|
||||
|
||||
|
||||
# sub create_window {
|
||||
# my ($self, $title, $ok_text, $cancel_text,
|
||||
# $ok_function, $cancel_function) = @_;
|
||||
#
|
||||
# my ($button_ok, $button_cancel);
|
||||
#
|
||||
# if ( $self->{'dialog_shown'} == $true ) {
|
||||
# return(undef);
|
||||
# }
|
||||
#
|
||||
# # check arguments
|
||||
# if ($title eq undef) {
|
||||
# $title = "CA browser, V$version";
|
||||
# }
|
||||
#
|
||||
# if (not defined($ok_text)) {
|
||||
# $ok_text = _("OK");
|
||||
# }
|
||||
# if (not defined($cancel_text)) {
|
||||
# $cancel_text = _("Cancel");
|
||||
# }
|
||||
#
|
||||
# # initialize main window
|
||||
# $self->{'window'} = new Gtk::Dialog();
|
||||
#
|
||||
# # $self->{'window'}->set_policy($false,$false,$true);
|
||||
#
|
||||
# # store pointer to vbox as "browser widget"
|
||||
# $self->{'browser'}=$self->{'window'}->vbox;
|
||||
#
|
||||
# if (defined $ok_function) {
|
||||
# # todo: we should check if this is a function reference
|
||||
# $self->{'User_OK_function'} = $ok_function;
|
||||
# }
|
||||
# $self->{'OK_function'} = sub { $self->ok_function(); };
|
||||
#
|
||||
# if (defined $cancel_function) {
|
||||
# # todo: we should check if this is a function reference
|
||||
# $self->{'User_CANCEL_function'} = $cancel_function;
|
||||
# }
|
||||
# $self->{'CANCEL_function'} = sub { $self->cancel_function(); };
|
||||
#
|
||||
#
|
||||
#
|
||||
# $button_ok = new Gtk::Button( "$ok_text" );
|
||||
# $button_ok->signal_connect( "clicked", $self->{'OK_function'});
|
||||
# $self->{'window'}->action_area->pack_start( $button_ok, $true, $true, 0 );
|
||||
#
|
||||
# $button_cancel = new Gtk::Button( "$cancel_text" );
|
||||
# $button_cancel->signal_connect('clicked', $self->{'CANCEL_function'});
|
||||
# $self->{'window'}->action_area->pack_start( $button_cancel, $true, $true, 0 );
|
||||
#
|
||||
# $self->{'window'}->set_title( "$title" );
|
||||
#
|
||||
# $self->{'window'}->show_all();
|
||||
#
|
||||
# }
|
||||
|
||||
sub set_window {
|
||||
my $self = shift;
|
||||
my $widget = shift;
|
||||
|
||||
if ( (not defined $self->{'browser'}) || ( $self->{'browser'} == undef )) {
|
||||
$self->{'browser'}=$widget;
|
||||
} else {
|
||||
# browser widget already exists
|
||||
return $false;
|
||||
}
|
||||
}
|
||||
|
||||
sub add_list {
|
||||
my ($self, $actca, $directory, $crlfile, $indexfile) = @_;
|
||||
|
||||
my ($x509listwin, @titles, @certtitles, @reqtitles, @keytitles, $column,
|
||||
$color, $text, $iter, $renderer);
|
||||
|
||||
# printf STDERR "AddList: Self: $self, Dir $directory, CRL $crlfile, Index: $indexfile\n";
|
||||
|
||||
@reqtitles = (_("Common Name"),
|
||||
_("eMail Address"),
|
||||
_("Organizational Unit"),
|
||||
_("Organization"),
|
||||
_("Location"),
|
||||
_("State"),
|
||||
_("Country"));
|
||||
|
||||
@certtitles = (_("Common Name"),
|
||||
_("eMail Address"),
|
||||
_("Organizational Unit"),
|
||||
_("Organization"),
|
||||
_("Location"),
|
||||
_("State"),
|
||||
_("Country"),
|
||||
_("Status"));
|
||||
|
||||
@keytitles = (_("Common Name"),
|
||||
_("eMail Address"),
|
||||
_("Organizational Unit"),
|
||||
_("Organization"),
|
||||
_("Location"),
|
||||
_("State"),
|
||||
_("Country"),
|
||||
_("Type"));
|
||||
|
||||
$self->{'actca'} = $actca;
|
||||
$self->{'actdir'} = $directory;
|
||||
$self->{'actcrl'} = $crlfile;
|
||||
$self->{'actindex'} = $indexfile;
|
||||
|
||||
if(defined($self->{'x509box'})) {
|
||||
$self->{'browser'}->remove($self->{'x509box'});
|
||||
$self->{'x509box'}->destroy();
|
||||
}
|
||||
|
||||
$self->{'x509box'} = Gtk2::VBox->new(0, 0);
|
||||
|
||||
# pane for list (top) and cert infos (bottom)
|
||||
$self->{'x509pane'} = Gtk2::VPaned->new();
|
||||
$self->{'x509pane'}->set_position(250);
|
||||
$self->{'x509box'}->add($self->{'x509pane'});
|
||||
|
||||
$self->{'browser'}->pack_start($self->{'x509box'}, 1, 1, 0);
|
||||
|
||||
# now the list
|
||||
$x509listwin = Gtk2::ScrolledWindow->new(undef, undef);
|
||||
$x509listwin->set_policy('automatic', 'automatic');
|
||||
$x509listwin->set_shadow_type('etched-in');
|
||||
$self->{'x509pane'}->pack1($x509listwin, 1, 1);
|
||||
|
||||
# shall we display certificates, requests or keys?
|
||||
if ((defined $self->{'mode'}) && ($self->{'mode'} eq "cert")) {
|
||||
|
||||
$self->{'x509store'} = Gtk2::ListStore->new(
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::Int');
|
||||
|
||||
@titles = @certtitles;
|
||||
|
||||
} elsif ((defined $self->{'mode'}) && ($self->{'mode'} eq "req")) {
|
||||
|
||||
$self->{'x509store'} = Gtk2::ListStore->new(
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::Int');
|
||||
|
||||
@titles = @reqtitles;
|
||||
|
||||
} elsif ((defined $self->{'mode'}) && ($self->{'mode'} eq "key")) {
|
||||
|
||||
$self->{'x509store'} = Gtk2::ListStore->new(
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::String',
|
||||
'Glib::Int');
|
||||
|
||||
@titles = @keytitles;
|
||||
|
||||
} else {
|
||||
# undefined mode
|
||||
return undef;
|
||||
}
|
||||
|
||||
$self->{'x509store'}->set_sort_column_id(0, 'ascending');
|
||||
|
||||
$self->{'x509clist'} = Gtk2::TreeView->new_with_model($self->{'x509store'});
|
||||
$self->{'x509clist'}->get_selection->set_mode ('single');
|
||||
|
||||
for(my $i = 0; $titles[$i]; $i++) {
|
||||
$renderer = Gtk2::CellRendererText->new();
|
||||
$column = Gtk2::TreeViewColumn->new_with_attributes(
|
||||
$titles[$i], $renderer, 'text' => $i);
|
||||
$column->set_sort_column_id($i);
|
||||
$column->set_resizable(1);
|
||||
if (($i == 7) && ($self->{'mode'} eq 'cert')) {
|
||||
$column->set_cell_data_func ($renderer, sub {
|
||||
my ($column, $cell, $model, $iter) = @_;
|
||||
$text = $model->get($iter, 7);
|
||||
$color = $text eq _("VALID")?'green':'red';
|
||||
$cell->set (text => $text, foreground => $color);
|
||||
});
|
||||
}
|
||||
$self->{'x509clist'}->append_column($column);
|
||||
}
|
||||
|
||||
if ((defined $self->{'mode'}) && ($self->{'mode'} eq 'cert')) {
|
||||
$self->{'x509clist'}->get_selection->signal_connect('changed' =>
|
||||
sub { _fill_info($self, 'cert') });
|
||||
} elsif ((defined $self->{'mode'}) && ($self->{'mode'} eq 'req')) {
|
||||
$self->{'x509clist'}->get_selection->signal_connect('changed' =>
|
||||
sub { _fill_info($self, 'req') });
|
||||
}
|
||||
|
||||
$x509listwin->add($self->{'x509clist'});
|
||||
|
||||
update($self, $directory, $crlfile, $indexfile, $true);
|
||||
|
||||
}
|
||||
|
||||
sub update {
|
||||
my ($self, $directory, $crlfile, $indexfile, $force) = @_;
|
||||
|
||||
$self->{'actdir'} = $directory;
|
||||
$self->{'actcrl'} = $crlfile;
|
||||
$self->{'actindex'} = $indexfile;
|
||||
|
||||
# print STDERR "DEBUG: set new dir: $self->{'actdir'}\n";
|
||||
|
||||
if ($self->{'mode'} eq "cert") {
|
||||
update_cert($self, $directory, $crlfile, $indexfile, $force);
|
||||
} elsif ($self->{'mode'} eq "req") {
|
||||
update_req($self, $directory, $crlfile, $indexfile, $force);
|
||||
} elsif ($self->{'mode'} eq "key") {
|
||||
update_key($self, $directory, $crlfile, $indexfile, $force);
|
||||
} else {
|
||||
return undef;
|
||||
}
|
||||
|
||||
if ((defined $self->{'infowin'}) && ($self->{'infowin'} ne "")) {
|
||||
update_info($self);
|
||||
}
|
||||
|
||||
$self->{'browser'}->show_all();
|
||||
|
||||
return($true);
|
||||
}
|
||||
|
||||
sub update_req {
|
||||
my ($self, $directory, $crlfile, $indexfile, $force) = @_;
|
||||
|
||||
my ($ind, $name, $state, @line, $iter);
|
||||
|
||||
$self->{'main'}->{'REQ'}->read_reqlist(
|
||||
$directory, $crlfile, $indexfile, $force, $self->{'main'});
|
||||
|
||||
$self->{'x509store'}->clear();
|
||||
|
||||
$ind = 0;
|
||||
foreach my $n (@{$self->{'main'}->{'REQ'}->{'reqlist'}}) {
|
||||
($name, $state) = split(/\%/, $n);
|
||||
@line = split(/\:/, $name);
|
||||
$iter = $self->{'x509store'}->append();
|
||||
$self->{'x509store'}->set($iter,
|
||||
0 => $line[0],
|
||||
1 => $line[1],
|
||||
2 => $line[2],
|
||||
3 => $line[3],
|
||||
4 => $line[4],
|
||||
5 => $line[5],
|
||||
6 => $line[6],
|
||||
7 => $ind);
|
||||
$ind++;
|
||||
}
|
||||
# now select the first row to display certificate informations
|
||||
$self->{'x509clist'}->get_selection->select_path(
|
||||
Gtk2::TreePath->new_first());
|
||||
|
||||
}
|
||||
|
||||
sub update_cert {
|
||||
my ($self, $directory, $crlfile, $indexfile, $force) = @_;
|
||||
|
||||
my ($ind, $name, $state, @line, $iter);
|
||||
|
||||
$self->{'main'}->{'CERT'}->read_certlist(
|
||||
$directory, $crlfile, $indexfile, $force, $self->{'main'});
|
||||
|
||||
$self->{'x509store'}->clear();
|
||||
|
||||
$ind = 0;
|
||||
foreach my $n (@{$self->{'main'}->{'CERT'}->{'certlist'}}) {
|
||||
($name, $state) = split(/\%/, $n);
|
||||
@line = split(/\:/, $name);
|
||||
$iter = $self->{'x509store'}->append();
|
||||
$self->{'x509store'}->set($iter,
|
||||
0 => $line[0],
|
||||
1 => $line[1],
|
||||
2 => $line[2],
|
||||
3 => $line[3],
|
||||
4 => $line[4],
|
||||
5 => $line[5],
|
||||
6 => $line[6],
|
||||
7 => $state,
|
||||
8 => $ind);
|
||||
|
||||
|
||||
# $self->{'x509clist'}->set_text($row, 7, $state);
|
||||
# if($state eq _("VALID")) {
|
||||
# $self->{'x509clist'}->set_cell_style($row, 7, $self->{'stylegreen'});
|
||||
# } else {
|
||||
# $self->{'x509clist'}->set_cell_style($row, 7, $self->{'stylered'});
|
||||
# }
|
||||
# $self->{'x509clist'}->set_text($row, 8, $ind);
|
||||
$ind++;
|
||||
}
|
||||
# now select the first row to display certificate informations
|
||||
$self->{'x509clist'}->get_selection->select_path(
|
||||
Gtk2::TreePath->new_first());
|
||||
}
|
||||
|
||||
sub update_key {
|
||||
my ($self, $directory, $crlfile, $indexfile, $force) = @_;
|
||||
|
||||
my ($ind, $name, @line, $iter, $state);
|
||||
|
||||
$self->{'main'}->{'KEY'}->read_keylist($self->{'main'});
|
||||
|
||||
$self->{'x509store'}->clear();
|
||||
|
||||
$ind = 0;
|
||||
foreach my $n (@{$self->{'main'}->{'KEY'}->{'keylist'}}) {
|
||||
($name, $state) = split(/\%/, $n);
|
||||
@line = split(/\:/, $name);
|
||||
$iter = $self->{'x509store'}->append();
|
||||
$self->{'x509store'}->set($iter,
|
||||
0 => $line[0],
|
||||
1 => $line[1],
|
||||
2 => $line[2],
|
||||
3 => $line[3],
|
||||
4 => $line[4],
|
||||
5 => $line[5],
|
||||
6 => $line[6],
|
||||
7 => $state,
|
||||
8 => $ind);
|
||||
|
||||
|
||||
# $self->{'x509clist'}->set_text($row, 7, $state);
|
||||
# if($state eq _("VALID")) {
|
||||
# $self->{'x509clist'}->set_cell_style($row, 7, $self->{'stylegreen'});
|
||||
# } else {
|
||||
# $self->{'x509clist'}->set_cell_style($row, 7, $self->{'stylered'});
|
||||
# }
|
||||
# $self->{'x509clist'}->set_text($row, 8, $ind);
|
||||
$ind++;
|
||||
}
|
||||
}
|
||||
|
||||
sub update_info {
|
||||
my ($self)=@_;
|
||||
|
||||
my ($title, $parsed, $dn);
|
||||
|
||||
$dn = selection_dn($self);
|
||||
|
||||
if (defined $dn) {
|
||||
$dn = HELPERS::enc_base64($dn);
|
||||
|
||||
if ($self->{'mode'} eq 'cert') {
|
||||
$parsed = $self->{'main'}->{'CERT'}->parse_cert($self->{'main'},
|
||||
$dn, $false);
|
||||
$title = _("Certificate Information");
|
||||
} else {
|
||||
$parsed = $self->{'main'}->{'REQ'}->parse_req($self->{'main'}, $dn,
|
||||
$false);
|
||||
$title = _("Request Information");
|
||||
}
|
||||
|
||||
defined($parsed) ||
|
||||
GUI::HELPERS::print_error(_("Can't read file"));
|
||||
|
||||
if(not defined($self->{'infobox'})) {
|
||||
$self->{'infobox'} = Gtk2::VBox->new();
|
||||
}
|
||||
|
||||
# printf STDERR "DEBUG: Infowin: $self->{'infowin'}, infobox: $self->{'infobox'}\n";
|
||||
$self->{'infowin'}->display($self->{'infobox'}, $parsed,
|
||||
$self->{'mode'}, $title);
|
||||
|
||||
} else {
|
||||
# nothing selected
|
||||
$self->{'infowin'}->hide();
|
||||
}
|
||||
}
|
||||
|
||||
#
|
||||
# add infobox to the browser window
|
||||
#
|
||||
sub add_info {
|
||||
my $self = shift;
|
||||
|
||||
my ($row, $index, $parsed, $title, $status, $list, $dn);
|
||||
|
||||
if ((defined $self->{'infowin'}) && ($self->{'infowin'} ne "")) {
|
||||
$self->{'infowin'}->hide();
|
||||
} else {
|
||||
$self->{'infowin'} = GUI::X509_infobox->new();
|
||||
}
|
||||
|
||||
# printf STDERR "Infowin: $self->{'infowin'}\n";
|
||||
# printf STDERR "x509clist: $self->{'x509clist'}\n";
|
||||
|
||||
$row = $self->{'x509clist'}->get_selection->get_selected();
|
||||
|
||||
if(defined($row)) {
|
||||
if ($self->{'mode'} eq 'cert') {
|
||||
$index = ($self->{'x509store'}->get($row))[8];
|
||||
$list = $self->{'main'}->{'CERT'}->{'certlist'};
|
||||
} else {
|
||||
$index = ($self->{'x509store'}->get($row))[7];
|
||||
$list = $self->{'main'}->{'REQ'}->{'reqlist'};
|
||||
}
|
||||
}
|
||||
|
||||
if (defined $index) {
|
||||
($dn, $status) = split(/\%/, $list->[$index]);
|
||||
$dn = HELPERS::enc_base64($dn);
|
||||
|
||||
if ($self->{'mode'} eq 'cert') {
|
||||
$parsed = $self->{'main'}->{'CERT'}->parse_cert($self->{'main'}, $dn,
|
||||
$false);
|
||||
$title="Certificate Information";
|
||||
} else {
|
||||
$parsed = $self->{'main'}->{'REQ'}->parse_req($self->{'main'}, $dn,
|
||||
$false);
|
||||
$title="Request Information";
|
||||
}
|
||||
|
||||
defined($parsed) || GUI::HELPERS::print_error(_("Can't read file"));
|
||||
|
||||
# printf STDERR "Infowin: $self->{'infowin'}\n";
|
||||
$self->{'infobox'} = Gtk2::VBox->new();
|
||||
$self->{'x509pane'}->pack2($self->{'infobox'}, 1, 1);
|
||||
$self->{'infowin'}->display($self->{'infobox'}, $parsed, $self->{'mode'},
|
||||
$title);
|
||||
}
|
||||
}
|
||||
|
||||
sub hide {
|
||||
my ($self) = @_;
|
||||
|
||||
$self->{'window'}->hide();
|
||||
$self->{'dialog_shown'} = $false;
|
||||
}
|
||||
|
||||
sub destroy {
|
||||
my ($self) = @_;
|
||||
|
||||
$self->{'window'}->destroy();
|
||||
$self->{'dialog_shown'} = $false;
|
||||
}
|
||||
|
||||
#
|
||||
# signal handler for selected list items
|
||||
# (updates the X509_infobox window)
|
||||
# XXX why is that function needed??
|
||||
#
|
||||
sub _fill_info {
|
||||
my ($self) = @_;
|
||||
|
||||
# print STDERR "DEBUG: fill_info: @_\n";
|
||||
update_info($self) if (defined $self->{'infowin'});
|
||||
}
|
||||
|
||||
sub selection_fname {
|
||||
my $self = shift;
|
||||
|
||||
my ($selected, $row, $index, $dn, $status, $filename, $list);
|
||||
|
||||
$row = $self->{'x509clist'}->get_selection->get_selected();
|
||||
|
||||
return undef if (not defined $row);
|
||||
|
||||
if ($self->{'mode'} eq 'req') {
|
||||
$index = ($self->{'x509store'}->get($row))[7];
|
||||
$list = $self->{'main'}->{'REQ'}->{'reqlist'};
|
||||
} elsif ($self->{'mode'} eq 'cert') {
|
||||
$index = ($self->{'x509store'}->get($row))[8];
|
||||
$list = $self->{'main'}->{'CERT'}->{'certlist'};
|
||||
} elsif ($self->{'mode'} eq 'key') {
|
||||
$index = ($self->{'x509store'}->get($row))[8];
|
||||
$list = $self->{'main'}->{'KEY'}->{'certlist'};
|
||||
} else {
|
||||
GUI::HELPERS::print_error(
|
||||
_("Invalid browser mode for selection_fname():"." "
|
||||
.$self->{'mode'}));
|
||||
}
|
||||
|
||||
|
||||
if (defined $index) {
|
||||
($dn, $status) = split(/\%/, $list->[$index]);
|
||||
$filename= HELPERS::enc_base64($dn);
|
||||
$filename=$self->{'actdir'}."/$filename".".pem";
|
||||
} else {
|
||||
$filename = undef;
|
||||
}
|
||||
|
||||
return($filename);
|
||||
}
|
||||
|
||||
sub selection_dn {
|
||||
my $self = shift;
|
||||
|
||||
my ($selected, $row, $index, $dn, $status, $list);
|
||||
|
||||
$row = $self->{'x509clist'}->get_selection->get_selected();
|
||||
|
||||
return undef if (not defined $row);
|
||||
|
||||
if ($self->{'mode'} eq 'req') {
|
||||
$index = ($self->{'x509store'}->get($row))[7];
|
||||
$list = $self->{'main'}->{'REQ'}->{'reqlist'};
|
||||
} elsif ($self->{'mode'} eq 'cert') {
|
||||
$index = ($self->{'x509store'}->get($row))[8];
|
||||
$list = $self->{'main'}->{'CERT'}->{'certlist'};
|
||||
} elsif ($self->{'mode'} eq 'key') {
|
||||
$index = ($self->{'x509store'}->get($row))[8];
|
||||
$list = $self->{'main'}->{'KEY'}->{'keylist'};
|
||||
} else {
|
||||
GUI::HELPERS::print_error(
|
||||
_("Invalid browser mode for selection_dn():"." "
|
||||
.$self->{'mode'}));
|
||||
}
|
||||
|
||||
if (defined $index) {
|
||||
($dn, $status) = split(/\%/, $list->[$index]);
|
||||
} else {
|
||||
$dn = undef;
|
||||
}
|
||||
|
||||
return($dn);
|
||||
}
|
||||
|
||||
sub selection_cadir {
|
||||
my $self = shift;
|
||||
|
||||
my $dir;
|
||||
|
||||
$dir = $self->{'actdir'};
|
||||
# cut off the last directory name to provide the ca-directory
|
||||
$dir =~ s/\/certs|\/req|\/keys$//;
|
||||
return($dir);
|
||||
}
|
||||
|
||||
|
||||
sub selection_caname {
|
||||
my $self = shift;
|
||||
|
||||
my ($selected, $caname);
|
||||
|
||||
$caname = $self->{'actca'};
|
||||
return($caname);
|
||||
}
|
||||
|
||||
sub selection_cn {
|
||||
my $self = shift;
|
||||
|
||||
my ($selected, $row, $index, $cn);
|
||||
|
||||
$row = $self->{'x509clist'}->get_selection->get_selected();
|
||||
|
||||
return undef if (not defined $row);
|
||||
|
||||
if (($self->{'mode'} eq 'req') ||
|
||||
($self->{'mode'} eq 'cert')||
|
||||
($self->{'mode'} eq 'key')) {
|
||||
$cn = ($self->{'x509store'}->get($row))[0];
|
||||
} else {
|
||||
GUI::HELPERS::print_error(
|
||||
_("Invalid browser mode for selection_cn():"." "
|
||||
.$self->{'mode'}));
|
||||
}
|
||||
|
||||
return($cn);
|
||||
}
|
||||
|
||||
sub selection_email {
|
||||
my $self = shift;
|
||||
|
||||
my ($selected, $row, $index, $email);
|
||||
|
||||
$row = $self->{'x509clist'}->get_selection->get_selected();
|
||||
return undef if (not defined $row);
|
||||
|
||||
if (($self->{'mode'} eq 'req') ||
|
||||
($self->{'mode'} eq 'cert') ||
|
||||
($self->{'mode'} eq 'key')) {
|
||||
$email = ($self->{'x509store'}->get($row))[1];
|
||||
} else {
|
||||
GUI::HELPERS::print_error(
|
||||
_("Invalid browser mode for selection_cn():"." "
|
||||
.$self->{'mode'}));
|
||||
}
|
||||
|
||||
return($email);
|
||||
}
|
||||
|
||||
sub selection_status {
|
||||
my $self = shift;
|
||||
|
||||
my ($selected, $row, $index, $dn, $status, $list);
|
||||
|
||||
$row = $self->{'x509clist'}->get_selection->get_selected();
|
||||
|
||||
return undef if (not defined $row);
|
||||
|
||||
if ($self->{'mode'} eq 'cert') {
|
||||
$index = ($self->{'x509store'}->get($row))[8];
|
||||
$list = $self->{'main'}->{'CERT'}->{'certlist'};
|
||||
} else {
|
||||
GUI::HELPERS::print_error(
|
||||
_("Invalid browser mode for selection_status():"." "
|
||||
.$self->{'mode'}));
|
||||
}
|
||||
|
||||
if (defined $index) {
|
||||
($dn, $status) = split(/\%/, $list->[$index]);
|
||||
} else {
|
||||
$status = undef;
|
||||
}
|
||||
|
||||
return($status);
|
||||
}
|
||||
|
||||
sub selection_type {
|
||||
my $self = shift;
|
||||
|
||||
my ($selected, $row, $index, $dn, $type, $list);
|
||||
|
||||
$row = $self->{'x509clist'}->get_selection->get_selected();
|
||||
|
||||
return undef if (not defined $row);
|
||||
|
||||
if ($self->{'mode'} eq 'key') {
|
||||
$index = ($self->{'x509store'}->get($row))[8];
|
||||
$list = $self->{'main'}->{'KEY'}->{'keylist'};
|
||||
} else {
|
||||
GUI::HELPERS::print_error(
|
||||
_("Invalid browser mode for selection_type():"." "
|
||||
.$self->{'mode'}));
|
||||
}
|
||||
|
||||
if (defined $index) {
|
||||
($dn, $type) = split(/\%/, $list->[$index]);
|
||||
} else {
|
||||
$type = undef;
|
||||
}
|
||||
|
||||
return($type);
|
||||
}
|
||||
|
||||
|
||||
sub ok_function {
|
||||
my ($self) = @_;
|
||||
|
||||
# is there a user defined ok_function?
|
||||
if (defined $self->{'User_OK_function'}) {
|
||||
$self->{'User_OK_function'}($self, selection_fname($self));
|
||||
}
|
||||
# otherwise do default
|
||||
else {
|
||||
printf STDOUT "%s\n", selection_fname($self);
|
||||
$self->hide();
|
||||
}
|
||||
return $true;
|
||||
|
||||
}
|
||||
|
||||
sub cancel_function {
|
||||
my ($self) = @_;
|
||||
|
||||
# is there a user defined ok_function?
|
||||
if (defined $self->{'User_CANCEL_function'}) {
|
||||
$self->{'User_CANCEL_function'}($self, get_listselect($self));
|
||||
}
|
||||
# otherwise do default
|
||||
else {
|
||||
$self->{'window'}->hide();
|
||||
$self->{'dialog_shown'} = $false;
|
||||
}
|
||||
return $true;
|
||||
}
|
||||
|
||||
|
||||
|
||||
#
|
||||
# sort the table by the clicked column
|
||||
#
|
||||
sub _sort_clist {
|
||||
my ($clist, $col) = @_;
|
||||
|
||||
$clist->set_sort_column($col);
|
||||
$clist->sort();
|
||||
|
||||
return(1);
|
||||
}
|
||||
|
||||
|
||||
#
|
||||
# called on mouseclick in certlist
|
||||
#
|
||||
sub _show_cert_menu {
|
||||
my ($clist, $self, $event) = @_;
|
||||
|
||||
if ((defined($event->{'type'})) &&
|
||||
$event->{'button'} == 3) {
|
||||
$self->{'certmenu'}->popup(
|
||||
undef,
|
||||
undef,
|
||||
0,
|
||||
$event->{'button'},
|
||||
undef);
|
||||
|
||||
return(1);
|
||||
}
|
||||
|
||||
return(0);
|
||||
}
|
||||
|
||||
$true;
|
||||
|
||||
__END__
|
||||
|
||||
=head1 NAME
|
||||
|
||||
GUI::X509_browser - Perl-Gtk2 browser for X.509 certificates and requests
|
||||
|
||||
=head1 SYNOPSIS
|
||||
|
||||
use X509_browser;
|
||||
|
||||
$browser=X509_browser->new($mode);
|
||||
$browser->create_window($title, $oktext, $canceltext,
|
||||
\&okayfunction, \&cancelfunction);
|
||||
$browser->add_ca_select($cadir, @calist, $active-ca);
|
||||
$browser->add_list($active-ca, $X509dir, $crlfile, $indexfile);
|
||||
$browser->add_info();
|
||||
my $selection = $browser->selection_fname();
|
||||
$browser->hide();
|
||||
|
||||
=head1 DESCRIPTION
|
||||
|
||||
This displays a browser for X.509v3 certificates or certification
|
||||
requests (CSR) from a CA managed by TinyCA2 (or some similar
|
||||
structure).
|
||||
|
||||
Creation of an X509_browser is done by calling B<new()>,
|
||||
the argument has to be 'cert' or 'req' to display certificates
|
||||
or requests.
|
||||
|
||||
A window can be created for this purpose using
|
||||
B<create_window($title, $oktext, $canceltext, \&okfunction, \&cancelfunction)>,
|
||||
all arguments are optional.
|
||||
|
||||
=over 1
|
||||
|
||||
=item $title:
|
||||
|
||||
the existing Gtk2::VBox inside which the info will be
|
||||
displayed.
|
||||
|
||||
=item $oktext:
|
||||
|
||||
The text to be displayed on the OK button of the dialog.
|
||||
|
||||
=item $canceltext:
|
||||
|
||||
The text to be displayed on the CANCEL button of the dialog.
|
||||
|
||||
=item \&okfunction:
|
||||
|
||||
Reference to a function that is executed on click on OK button.
|
||||
This function should fetch the selected result (using
|
||||
B<selection_fname()>) and also close the dialog using B<hide()>.
|
||||
|
||||
=item \&cancelfunction:
|
||||
|
||||
Reference to a function that is executed on click on CANCEL button.
|
||||
This function should also close the dialog using B<hide()>.
|
||||
|
||||
=back
|
||||
|
||||
Further functions to get information about the selected item
|
||||
exist, these are <B>selection_dn()</B>, <B>selection_status()</B>,
|
||||
<B>selection_cadir()</B> and <B>selection_caname()</B>.
|
||||
|
||||
An existing infobox that already displays the content
|
||||
of some directory can be modified by calling
|
||||
<B>update()</B> with the same arguments that add_list().
|
||||
|
||||
An existing infobox is destroyed by calling B<destroy()>.
|
||||
|
||||
=cut
|
||||
|
|
@ -0,0 +1,280 @@
|
|||
# Copyright (c) Olaf Gellert <og@pre-secure.de> and
|
||||
# Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: X509_infobox.pm,v 1.7 2006/06/28 21:50:42 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
package GUI::X509_infobox;
|
||||
|
||||
use HELPERS;
|
||||
use GUI::HELPERS;
|
||||
use GUI::WORDS;
|
||||
|
||||
use POSIX;
|
||||
|
||||
my $version = "0.1";
|
||||
my $true = 1;
|
||||
my $false = undef;
|
||||
|
||||
sub new {
|
||||
my $that = shift;
|
||||
my $self = {};
|
||||
|
||||
my $class = ref($that) || $that;
|
||||
|
||||
$self->{'init'} = shift;
|
||||
|
||||
bless($self, $class);
|
||||
|
||||
$self;
|
||||
}
|
||||
|
||||
|
||||
sub display {
|
||||
my ($self, $parent, $parsed, $mode, $title) = @_;
|
||||
|
||||
my ($bottombox, $textbox, $lefttable, $righttable, $leftbox, $rightbox,
|
||||
@fields, $scrolled);
|
||||
|
||||
$self->{'root'} = $parent;
|
||||
|
||||
if (defined $self->{'child'}) {
|
||||
$self->{'child'}->destroy();
|
||||
}
|
||||
|
||||
# if title is given create a surrounding frame with the title
|
||||
if (defined $title) {
|
||||
$self->{'child'}= Gtk2::Frame->new($title);
|
||||
$self->{'x509textbox'}= Gtk2::VBox->new(0,0);
|
||||
$self->{'child'}->add($self->{'x509textbox'});
|
||||
}
|
||||
# otherwise we create the VBox directly inside the root widget
|
||||
else {
|
||||
$self->{'child'} = Gtk2::VBox->new(0,0);
|
||||
$self->{'x509textbox'} = $self->{'child'};
|
||||
}
|
||||
|
||||
# and pack it there
|
||||
$self->{'root'}->pack_start($self->{'child'}, 1, 1, 0);
|
||||
|
||||
if (($mode eq 'cert') || ($mode eq 'cacert')) {
|
||||
# fingerprint in the top of certtextbox
|
||||
if(defined($self->{'certfingerprintmd5'})) {
|
||||
$self->{'certfingerprintmd5'}->destroy();
|
||||
}
|
||||
$self->{'certfingerprintmd5'} = GUI::HELPERS::create_label(
|
||||
_("Fingerprint (MD5)").": ".$parsed->{'FINGERPRINTMD5'},
|
||||
'center', 0, 0);
|
||||
$self->{'x509textbox'}->pack_start( $self->{'certfingerprintmd5'},
|
||||
0, 0, 0);
|
||||
|
||||
if(defined($self->{'certfingerprintsha1'})) {
|
||||
$self->{'certfingerprintsha1'}->destroy();
|
||||
}
|
||||
$self->{'certfingerprintsha1'} = GUI::HELPERS::create_label(
|
||||
_("Fingerprint (SHA1)").": ".$parsed->{'FINGERPRINTSHA1'},
|
||||
'center', 0, 0);
|
||||
$self->{'x509textbox'}->pack_start($self->{'certfingerprintsha1'},
|
||||
0, 0, 0);
|
||||
}
|
||||
|
||||
if (($mode eq 'cert') || ($mode eq 'cacert')) {
|
||||
$bottombox = 'certbottombox';
|
||||
$textbox = 'x509textbox';
|
||||
$lefttable = 'certlefttable';
|
||||
$leftbox = 'certleftbox';
|
||||
$righttable = 'certrighttable';
|
||||
$rightbox = 'certrightbox';
|
||||
}else{
|
||||
$bottombox = 'reqbottombox';
|
||||
$textbox = 'x509textbox';
|
||||
$lefttable = 'reqlefttable';
|
||||
$leftbox = 'reqleftbox';
|
||||
$righttable = 'reqrighttable';
|
||||
$rightbox = 'reqrightbox';
|
||||
}
|
||||
|
||||
# hbox in the bottom
|
||||
if(defined($self->{$bottombox})) {
|
||||
$self->{$bottombox}->destroy();
|
||||
}
|
||||
$self->{$bottombox} = Gtk2::HBox->new(1, 0);
|
||||
$self->{$textbox}->pack_start($self->{$bottombox}, 1, 1, 5);
|
||||
|
||||
# vbox in the bottom/left
|
||||
if(defined($self->{$lefttable})) {
|
||||
$self->{$lefttable}->destroy();
|
||||
}
|
||||
@fields = qw( CN EMAIL O OU L ST C);
|
||||
$self->{$lefttable} = _create_detail_table(\@fields, $parsed);
|
||||
|
||||
# the only widget i know to set shadow type :-(
|
||||
$scrolled = Gtk2::ScrolledWindow->new();
|
||||
$scrolled->set_shadow_type('etched-in');
|
||||
$scrolled->set_policy('never', 'never');
|
||||
|
||||
$self->{$leftbox} = Gtk2::VBox->new(0, 0);
|
||||
$self->{$bottombox}->pack_start($self->{$leftbox}, 1, 1, 0);
|
||||
|
||||
$self->{$leftbox}->pack_start($scrolled, 1, 1, 0);
|
||||
$scrolled->add($self->{$lefttable});
|
||||
|
||||
# vbox in the bottom/right
|
||||
if(defined($self->{$righttable})) {
|
||||
$self->{$righttable}->destroy();
|
||||
}
|
||||
if ($mode eq "cacert") {
|
||||
@fields = qw(SERIAL NOTBEFORE NOTAFTER KEYSIZE PK_ALGORITHM SIG_ALGORITHM
|
||||
TYPE);
|
||||
} else {
|
||||
@fields = qw(STATUS SERIAL NOTBEFORE NOTAFTER KEYSIZE PK_ALGORITHM
|
||||
SIG_ALGORITHM TYPE);
|
||||
}
|
||||
|
||||
$self->{$righttable} = _create_detail_table(\@fields, $parsed);
|
||||
|
||||
$scrolled = Gtk2::ScrolledWindow->new();
|
||||
$scrolled->set_shadow_type('etched-in');
|
||||
$scrolled->set_policy('never', 'never');
|
||||
|
||||
$self->{$rightbox} = Gtk2::VBox->new(0, 0);
|
||||
$self->{$bottombox}->pack_start($self->{$rightbox}, 1, 1, 0);
|
||||
|
||||
$self->{$rightbox}->pack_start($scrolled, 1, 1, 0);
|
||||
$scrolled->add($self->{$righttable});
|
||||
|
||||
$self->{$textbox}->show_all();
|
||||
|
||||
$parent->show_all();
|
||||
}
|
||||
|
||||
sub hide {
|
||||
my $self = shift;
|
||||
|
||||
if (defined $self->{'child'}) {
|
||||
$self->{'child'}->destroy();
|
||||
undef $self->{'child'};
|
||||
}
|
||||
}
|
||||
|
||||
#
|
||||
# create standard table with details (cert/req)
|
||||
#
|
||||
sub _create_detail_table {
|
||||
my ($fields, $parsed) = @_;
|
||||
|
||||
my ($list, $store, $rows, $words, @l, $iter, $column, $renderer);
|
||||
|
||||
$words = GUI::WORDS->new();
|
||||
|
||||
$store = Gtk2::ListStore->new('Glib::String', 'Glib::String');
|
||||
$list = Gtk2::TreeView->new_with_model($store);
|
||||
$list->set_headers_visible(0);
|
||||
$list->get_selection->set_mode('none');
|
||||
|
||||
$renderer = Gtk2::CellRendererText->new();
|
||||
$column = Gtk2::TreeViewColumn->new_with_attributes(
|
||||
'', $renderer, 'text' => 0);
|
||||
$list->append_column($column);
|
||||
|
||||
$renderer = Gtk2::CellRendererText->new();
|
||||
$column = Gtk2::TreeViewColumn->new_with_attributes(
|
||||
'', $renderer, 'text' => 1);
|
||||
$list->append_column($column);
|
||||
|
||||
|
||||
foreach my $f (@{$fields}) {
|
||||
if(defined($parsed->{$f})){
|
||||
if(ref($parsed->{$f})) {
|
||||
foreach(@{$parsed->{$f}}) {
|
||||
$iter = $store->append();
|
||||
$store->set($iter, 0 => $words->{$f}, 1 => $_);
|
||||
# print STDERR "DEBUG: add line: @l\n";
|
||||
|
||||
}
|
||||
}else{
|
||||
# print STDERR "DEBUG: add line: @l\n";
|
||||
$iter = $store->append();
|
||||
$store->set($iter, 0 => $words->{$f}, 1 => $parsed->{$f});
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return($list);
|
||||
}
|
||||
|
||||
|
||||
1;
|
||||
|
||||
|
||||
__END__
|
||||
|
||||
=head1 NAME
|
||||
|
||||
GUI::X509_infobox - show X.509 certificates and requests in a Gtk2::VBox
|
||||
|
||||
=head1 SYNOPSIS
|
||||
|
||||
use X509_infobox;
|
||||
|
||||
$infobox=X509_infobox->new();
|
||||
$infobox->update($parent,$parsed,$mode,$title);
|
||||
$infobox->update($parent,$parsed,$mode);
|
||||
$infobox->hide();
|
||||
|
||||
=head1 DESCRIPTION
|
||||
|
||||
This displays the information of an X.509v3 certificate or
|
||||
certification request (CSR) inside a given Gtk2::VBox.
|
||||
|
||||
Creation of an X509_infobox is done by calling B<new()>,
|
||||
no arguments are required.
|
||||
|
||||
The infobox is shown when inserted into an already
|
||||
existing Gtk2::VBox using the method B<update()>. Arguments
|
||||
to update are:
|
||||
|
||||
=over 1
|
||||
|
||||
=item $parent:
|
||||
|
||||
the existing Gtk2::VBox inside which the info will be
|
||||
displayed.
|
||||
|
||||
=item $parsed:
|
||||
|
||||
a structure returned by OpenSSL::parsecert() or OpenSSL::parsecrl()
|
||||
containing the required information.
|
||||
|
||||
=item $mode:
|
||||
|
||||
what type of information is to be displayed. Valid modes
|
||||
are 'req' (certification request), 'cert' (certificate), 'key' or 'cacert'
|
||||
(same as certificate but without displaying the validity information
|
||||
of the cert because this cannot be decided on from the view of the
|
||||
actual CA).
|
||||
|
||||
=item $title:
|
||||
|
||||
if specified, a surrounding frame with the given title
|
||||
is drawn.
|
||||
|
||||
=back
|
||||
|
||||
An existing infobox is destroyed by calling B<hide()>.
|
||||
|
||||
=cut
|
||||
|
|
@ -0,0 +1,393 @@
|
|||
# Copyright (c) Olaf Gellert <og@pre-secure.de> and
|
||||
# Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: HELPERS.pm,v 1.6 2006/06/28 21:50:41 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
package HELPERS;
|
||||
|
||||
use POSIX;
|
||||
|
||||
my $version = "0.1";
|
||||
my $true = 1;
|
||||
my $false = undef;
|
||||
|
||||
#
|
||||
# generate filename from Subject-DN
|
||||
#
|
||||
sub gen_name {
|
||||
my $opts = shift;
|
||||
|
||||
my $name = '';
|
||||
|
||||
foreach (qw(CN EMAIL OU O L ST C)) {
|
||||
if((not defined($opts->{$_})) || ($opts->{$_} eq '')) {
|
||||
$opts->{$_} = ".";
|
||||
}
|
||||
if($opts->{$_} ne '.' && not ref($opts->{$_})) {
|
||||
$name .= $opts->{$_};
|
||||
} elsif (ref($opts->{$_})) {
|
||||
if(defined($opts->{$_}->[0])) {
|
||||
$name .= $opts->{$_}->[0];
|
||||
} else {
|
||||
$name .= " ";
|
||||
}
|
||||
} else {
|
||||
$name .= " ";
|
||||
}
|
||||
$name .= ":" if($_ ne 'C');
|
||||
}
|
||||
|
||||
return($name);
|
||||
}
|
||||
|
||||
#
|
||||
# generate temporary filename
|
||||
#
|
||||
sub mktmp {
|
||||
my $base = shift;
|
||||
|
||||
my @rand = ();
|
||||
my $ret = '';
|
||||
|
||||
do {
|
||||
for(my $i = 0; $i < 8; $i++) {
|
||||
push(@rand, int(rand 26)+65);
|
||||
}
|
||||
my $end = pack("C8", @rand);
|
||||
$ret = $base.$end;
|
||||
} while (-e $ret);
|
||||
|
||||
return($ret);
|
||||
}
|
||||
|
||||
|
||||
#
|
||||
# finished...
|
||||
#
|
||||
sub exit_clean {
|
||||
my ($ret) = @_;
|
||||
|
||||
$ret = 0 unless(defined $ret);
|
||||
|
||||
# hack to avoid busy cursor
|
||||
my $rootwin = Gtk2::Gdk->get_default_root_window();
|
||||
my $cursor = Gtk2::Gdk::Cursor->new('left-ptr');
|
||||
|
||||
$rootwin->set_cursor($cursor);
|
||||
|
||||
Gtk2->main_quit();
|
||||
exit($ret);
|
||||
}
|
||||
|
||||
#
|
||||
# split Subject DN and return hash
|
||||
#
|
||||
sub parse_dn {
|
||||
my $dn = shift;
|
||||
|
||||
my (@dn, $k, $v, $tmp);
|
||||
|
||||
$tmp = {};
|
||||
|
||||
$dn =~ s/,/\//g;
|
||||
|
||||
@dn = split(/\//, $dn);
|
||||
foreach(@dn) {
|
||||
s/^\s+//;
|
||||
s/\s+$//;
|
||||
($k, $v) = split(/=/);
|
||||
next if(not defined($k));
|
||||
if($k =~ /ou/i) {
|
||||
$tmp->{'OU'} or $tmp->{'OU'} = [];
|
||||
push(@{$tmp->{'OU'}}, $v);
|
||||
} else {
|
||||
if($k =~ /emailaddress/i) {
|
||||
$tmp->{'EMAIL'} = $v;
|
||||
} else {
|
||||
$tmp->{uc($k)} = $v;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return($tmp);
|
||||
}
|
||||
|
||||
#
|
||||
# parse (requested) X509 extensions and return hash
|
||||
#
|
||||
sub parse_extensions {
|
||||
my ($lines, $mode) = @_;
|
||||
|
||||
my ($sep, $i, $k, $v, $tmp);
|
||||
|
||||
$sep = $mode eq "req"?"Requested extensions:":"X509v3 extensions:";
|
||||
|
||||
$tmp = {};
|
||||
|
||||
# skip everything before the extensions
|
||||
for($i = 0; defined($lines->[$i]) && $lines->[$i] !~ /^[\s\t]*$sep$/i; $i++) {
|
||||
return(undef) if not defined($lines->[$i]);
|
||||
}
|
||||
$i++;
|
||||
|
||||
while($i < @{$lines}) {
|
||||
if(($lines->[$i] =~ /^[\s\t]*[^:]+:\s*$/) ||
|
||||
($lines->[$i] =~ /^[\s\t]*[^:]+:\s+.+$/)) {
|
||||
if($lines->[$i] =~ /^[\s\t]*Signature Algorithm/i) {
|
||||
$i++;
|
||||
next;
|
||||
}
|
||||
$k = $lines->[$i];
|
||||
$k =~ s/[\s\t:]*$//g;
|
||||
$k =~ s/^[\s\t]*//g;
|
||||
$tmp->{$k} = [];
|
||||
$i++;
|
||||
while(($lines->[$i] !~ /^[\s\t].+:\s*$/) &&
|
||||
($lines->[$i] !~ /^[\s\t]*[^:]+:\s+.+$/) &&
|
||||
($lines->[$i] !~ /^[\s\t]*Signature Algorithm/i) &&
|
||||
($i < @{$lines})) {
|
||||
$v = $lines->[$i];
|
||||
$v =~ s/^[\s]+//g;
|
||||
$v =~ s/[\s]+$//g;
|
||||
$i++;
|
||||
next if $v =~ /^$/;
|
||||
next if $v =~ /Signature Algorithm:/;
|
||||
my @vs = split(/,/, $v);
|
||||
foreach(@vs) {
|
||||
$_ =~ s/^\s//;
|
||||
$_ =~ s/\s$//;
|
||||
push(@{$tmp->{$k}}, $_);
|
||||
}
|
||||
}
|
||||
} else {
|
||||
$i++;
|
||||
}
|
||||
}
|
||||
|
||||
return($tmp);
|
||||
}
|
||||
|
||||
#
|
||||
# get last used export directory
|
||||
#
|
||||
sub get_export_dir {
|
||||
my $main = shift;
|
||||
|
||||
open(EXPIN, "<$main->{'cadir'}/.exportdir") || return(undef);
|
||||
my $dir = <EXPIN>;
|
||||
chomp($dir);
|
||||
|
||||
return($dir);
|
||||
}
|
||||
|
||||
#
|
||||
# write last used export directory
|
||||
#
|
||||
sub write_export_dir {
|
||||
my ($main, $dir) = @_;
|
||||
|
||||
$dir =~ s:/[^/]+$::;
|
||||
|
||||
open(EXPOUT, ">$main->{'cadir'}/.exportdir") || do {
|
||||
my $t = sprintf(_("Can't write exportdir: %s, %s"),
|
||||
"$main->{'cadir'}/.exportdir", $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
print EXPOUT "$dir\n";
|
||||
|
||||
close(EXPOUT);
|
||||
|
||||
return($dir);
|
||||
}
|
||||
|
||||
#
|
||||
# generate contents for subjectAltName
|
||||
#
|
||||
sub gen_subjectaltname_contents($@)
|
||||
{
|
||||
my $type = shift || '';
|
||||
my @input = map { split/,\s*|\s+/, $_ } @_; # split on ',' and ' '
|
||||
my %output = (); # uniq on the fly
|
||||
|
||||
if ($type) { # type given => use that one for all
|
||||
foreach my $elem (@input) {
|
||||
$output{$type.$elem} = 1;
|
||||
}
|
||||
}
|
||||
else { # no type => use heuristigcs to guess type per element
|
||||
foreach my $elem (@input) {
|
||||
if ($elem =~ s/^(ip:|dns:)(.*)/$2/i) {
|
||||
$type = uc($1);
|
||||
} elsif ($elem =~ s/^(email:)(.*)/$2/i) {
|
||||
$type = lc($1);
|
||||
} else {
|
||||
if ($elem =~ /^\d+\.\d+\.\d+\.\d+$/) { # it's an IP address
|
||||
$type = 'IP:';
|
||||
}
|
||||
elsif ($elem =~ /^.+\@.+\.\w+$/) { # it's a mail address
|
||||
$type = 'email:';
|
||||
}
|
||||
else {
|
||||
$type = 'DNS:' # otherwise it's a DNS name
|
||||
}
|
||||
}
|
||||
$output{$type.$elem} = 1;
|
||||
}
|
||||
}
|
||||
return(wantarray ? keys(%output) : join(', ', keys(%output)));
|
||||
}
|
||||
|
||||
sub enc_base64 {
|
||||
my $data = shift;
|
||||
my $ret = MIME::Base64::encode($data, '');
|
||||
$ret =~ tr/\/+/-_/;
|
||||
return $ret;
|
||||
}
|
||||
|
||||
sub dec_base64 {
|
||||
my $data = shift;
|
||||
$data =~ tr/-_/\/+/;
|
||||
return MIME::Base64::decode($data);
|
||||
}
|
||||
|
||||
|
||||
1
|
||||
|
||||
__END__
|
||||
|
||||
=head1 NAME
|
||||
|
||||
HELPERS - helper functions for TinyCA, doing small jobs not related to the GUI
|
||||
|
||||
=head1 SYNOPSIS
|
||||
|
||||
use HELPERS;
|
||||
|
||||
$name = HELPERS::gen_name($opts);
|
||||
$tmpnam = HELPERS::mktmp($base);
|
||||
$dnhash = HELPERS::parse_dn($dnstring);
|
||||
$exthash = HELPERS::parse_extensions($mode, $lines);
|
||||
$subjaltname = HELPERS::gen_subjectaltname_contents($type, @list);
|
||||
|
||||
exit_clean($retcode);
|
||||
|
||||
=head1 DESCRIPTION
|
||||
|
||||
HELPERS.pm is just a library, containing some useful functions used by other
|
||||
TinyCA modules.
|
||||
|
||||
=head1 FUNCTIONS
|
||||
|
||||
=head2 HELPERS::gen_name($opts)
|
||||
|
||||
=over 1
|
||||
|
||||
returns a string with the TinyCA filename for a certificate, request or key.
|
||||
The filename is generated from the following parts of the Subject DN from the
|
||||
related request or certificate if present:
|
||||
|
||||
CN EMAIL OU O L ST C
|
||||
|
||||
These parts need to be elements in the given options hash.
|
||||
|
||||
=back
|
||||
|
||||
=head2 HELPERS::mktmp($base)
|
||||
|
||||
=over 1
|
||||
|
||||
returns a string, containing a uniqe filename starting with $base, which is
|
||||
not existing yet.
|
||||
|
||||
$base needs to be an absolute path to allow HELPERS::mktmp() reliable check
|
||||
that the filename is really uniqe.
|
||||
|
||||
=back
|
||||
|
||||
=head2 HELPERS::parse_dn($dnstring)
|
||||
|
||||
=over 1
|
||||
|
||||
returns the reference to a hash containing all elements of the Subject DN,
|
||||
given in $dnstring.
|
||||
|
||||
The element OU is included as an array refernce in the hash, with an array
|
||||
containing all values of OU.
|
||||
|
||||
=back
|
||||
|
||||
=head2 HELPERS::parse_extensions($mode, $lines)
|
||||
|
||||
=over 1
|
||||
|
||||
returns the reference to a hash containing all X509 extensions of the given
|
||||
request or certificate.
|
||||
|
||||
The request or certificate is given in textform as an array reference
|
||||
with the array containing one line per element.
|
||||
|
||||
$mode contains one of the strings "req" or "cert" depending on the type of the
|
||||
data.
|
||||
|
||||
=back
|
||||
|
||||
=head2 HELPERS::exit_clean($retcode)
|
||||
|
||||
=over 1
|
||||
|
||||
does nothing yet, than closing the Gtk application returning the exitcode
|
||||
given in $retcode.
|
||||
|
||||
=back
|
||||
|
||||
=head2 $main->HELPERS::get_export_dir()
|
||||
|
||||
=over 1
|
||||
|
||||
Get last used export directory.
|
||||
|
||||
=back
|
||||
|
||||
=head2 $main->HELPERS::write_export-dir($dir)
|
||||
|
||||
=over 1
|
||||
|
||||
Store last used export directory
|
||||
|
||||
=back
|
||||
|
||||
=head2 HELPERS::gen_subjectaltname_contents($type, @list)
|
||||
|
||||
=over 1
|
||||
|
||||
Generate a string suitable for the use as subjhectAltname contets for OpenSSL.
|
||||
|
||||
If $Type is not empty create the contents of that type only,
|
||||
otherwise use either the type prefix of the list elements or
|
||||
the following heuristics to find the type for the appropriate elements:
|
||||
|
||||
If the element looks like an IP address in dotted quad notation set
|
||||
then treat it as one.
|
||||
If the element contains a '@' followed by a '.' and a sequence of letters
|
||||
then treat the element as an email address.
|
||||
In all other cases treat it as a DNS name.
|
||||
|
||||
=back
|
||||
|
||||
=cut
|
||||
|
|
@ -0,0 +1,494 @@
|
|||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: KEY.pm,v 1.8 2006/06/28 21:50:41 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
|
||||
package KEY;
|
||||
|
||||
use POSIX;
|
||||
|
||||
sub new {
|
||||
my $self = {};
|
||||
my $that = shift;
|
||||
my $class = ref($that) || $that;
|
||||
|
||||
bless($self, $class);
|
||||
}
|
||||
|
||||
#
|
||||
# get name of keyfile to delete
|
||||
#
|
||||
sub get_del_key {
|
||||
my ($self, $main) = @_;
|
||||
|
||||
my($keyname, $key, $keyfile, $row, $ind, $ca, $type);
|
||||
|
||||
$ca = $main->{'keybrowser'}->selection_caname();
|
||||
$key = $main->{'keybrowser'}->selection_dn();
|
||||
|
||||
if(not defined $key) {
|
||||
GUI::HELPERS::print_info(_("Please select a Key first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$keyname = HELPERS::enc_base64($key);
|
||||
|
||||
$keyfile = $main->{'cadir'}."/keys/".$keyname.".pem";
|
||||
|
||||
if(not -s $keyfile) {
|
||||
GUI::HELPERS::print_warning(_("Key file not found:".$keyfile));
|
||||
return;
|
||||
}
|
||||
|
||||
$main->show_del_confirm($keyfile, 'key');
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# now really delete the key
|
||||
#
|
||||
sub del_key {
|
||||
my ($self, $main, $file) = @_;
|
||||
|
||||
unlink($file);
|
||||
|
||||
my $cadir = $main->{'keybrowser'}->selection_cadir();
|
||||
|
||||
$main->{'keybrowser'}->update($cadir."/keys",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# read keys in directory into list
|
||||
#
|
||||
sub read_keylist {
|
||||
my ($self, $main) = @_;
|
||||
|
||||
my ($f, $modt, $tmp, $ca, $keydir, $keylist);
|
||||
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
$keydir = $main->{'cadir'}."/keys";
|
||||
$keylist = [];
|
||||
|
||||
$modt = (stat($keydir))[9];
|
||||
|
||||
if(defined($self->{'lastread'}) &&
|
||||
$self->{'lastread'} >= $modt) {
|
||||
return(0);
|
||||
}
|
||||
|
||||
opendir(DIR, $keydir) || do {
|
||||
GUI::HELPERS::print_warning(_("Can't open key directory"));
|
||||
return(0);
|
||||
};
|
||||
|
||||
while($f = readdir(DIR)) {
|
||||
next if $f =~ /^\./;
|
||||
$f =~ s/\.pem//;
|
||||
$tmp = HELPERS::dec_base64($f);
|
||||
next if not defined($tmp);
|
||||
next if $tmp eq "";
|
||||
$tmp = _check_key($main, $keydir."/".$f.".pem", $tmp);
|
||||
push(@{$keylist}, $tmp);
|
||||
}
|
||||
@{$keylist} = sort(@{$keylist});
|
||||
closedir(DIR);
|
||||
|
||||
$self->{'keylist'} = $keylist;
|
||||
|
||||
$self->{'lastread'} = time();
|
||||
return(1); # got new list
|
||||
}
|
||||
|
||||
#
|
||||
# get the information to export the key
|
||||
#
|
||||
sub get_export_key {
|
||||
my ($self, $main, $opts, $box) = @_;
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
my($ca, $ind, $row, $t, $out, $cn, $email, $ret, $ext, $cadir);
|
||||
|
||||
if(not defined($opts)) {
|
||||
$cn = $main->{'keybrowser'}->selection_cn();
|
||||
|
||||
if(not defined $cn) {
|
||||
GUI::HELPERS::print_info(_("Please select a Key first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$ca = $main->{'keybrowser'}->selection_caname();
|
||||
$cadir = $main->{'keybrowser'}->selection_cadir();
|
||||
$email = $main->{'keybrowser'}->selection_email();
|
||||
|
||||
$opts->{'type'} = $main->{'keybrowser'}->selection_type();
|
||||
$opts->{'key'} = $main->{'keybrowser'}->selection_dn();
|
||||
|
||||
$opts->{'keyname'} = HELPERS::enc_base64($opts->{'key'});
|
||||
$opts->{'keyfile'} = $cadir."/keys/".$opts->{'keyname'}.".pem";
|
||||
$opts->{'certfile'} = $cadir."/certs/".$opts->{'keyname'}.".pem";
|
||||
|
||||
# set some defaults
|
||||
$opts->{'nopass'} = 0;
|
||||
$opts->{'include'} = 0;
|
||||
$opts->{'format'} = 'PEM';
|
||||
$opts->{'friendlyname'} = '';
|
||||
|
||||
if((defined($email)) && $email ne '' && $email ne ' ') {
|
||||
$opts->{'outfile'} = "$main->{'exportdir'}/$email-key.pem";
|
||||
}elsif((defined($cn)) && $cn ne '' && $cn ne ' ') {
|
||||
$opts->{'outfile'} = "$main->{'exportdir'}/$cn-key.pem";
|
||||
}else{
|
||||
$opts->{'outfile'} = "$main->{'exportdir'}/key.pem";
|
||||
}
|
||||
|
||||
$main->show_export_dialog($opts, 'key');
|
||||
return;
|
||||
}
|
||||
|
||||
if((not defined($opts->{'outfile'})) || ($opts->{'outfile'} eq '')) {
|
||||
$main->show_export_dialog($opts, 'key');
|
||||
GUI::HELPERS::print_warning(_("Please give at least the output file"));
|
||||
return;
|
||||
}
|
||||
|
||||
if(($opts->{'nopass'} || $opts->{'format'} eq 'DER') &&
|
||||
((not defined($opts->{'passwd'})) || ($opts->{'passwd'} eq ''))) {
|
||||
$main->show_key_nopasswd_dialog($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
if(($opts->{'format'} eq 'PEM') || ($opts->{'format'} eq 'DER')) {
|
||||
unless(($opts->{'format'} eq 'PEM') && not $opts->{'nopass'}) {
|
||||
($out, $ext) = $main->{'OpenSSL'}->convkey(
|
||||
'type' => $opts->{'type'},
|
||||
'inform' => 'PEM',
|
||||
'outform' => $opts->{'format'},
|
||||
'nopass' => $opts->{'nopass'},
|
||||
'pass' => $opts->{'passwd'},
|
||||
'keyfile' => $opts->{'keyfile'}
|
||||
);
|
||||
|
||||
if(defined($out) && $out eq 1) {
|
||||
$t = _("Wrong password given\nDecrypting of the Key failed\nExport is not possible");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
return;
|
||||
} elsif((not defined($out)) || (length($out) < 3)) {
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Converting failed, Export not possible"), $ext);
|
||||
return;
|
||||
}
|
||||
}
|
||||
|
||||
if(($opts->{'format'} eq 'PEM') && not $opts->{'nopass'}) {
|
||||
open(IN, "<$opts->{'keyfile'}") || do {
|
||||
$t = sprintf(_("Can't open Key file: %s: %s"),
|
||||
$opts->{'keyfile'}, $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
$out .= $_ while(<IN>);
|
||||
close(IN);
|
||||
}
|
||||
if($opts->{'include'}) {
|
||||
open(IN, "<$opts->{'certfile'}") || do {
|
||||
$t = sprintf(_("Can't open Certificate file: %s: %s"),
|
||||
$opts->{'certfile'}, $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
$out .= "\n";
|
||||
$out .= $_ while(<IN>);
|
||||
close(IN);
|
||||
}
|
||||
|
||||
open(OUT, ">$opts->{'outfile'}") || do {
|
||||
$t = sprintf(_("Can't open output file: %s: %s"),
|
||||
$opts->{'outfile'}, $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
|
||||
print OUT $out;
|
||||
close(OUT);
|
||||
|
||||
$main->{'exportdir'} = HELPERS::write_export_dir($main,
|
||||
$opts->{'outfile'});
|
||||
|
||||
$t = sprintf(_("Key succesfully exported to %s"),
|
||||
$opts->{'outfile'});
|
||||
GUI::HELPERS::print_info($t);
|
||||
return;
|
||||
|
||||
} elsif ($opts->{'format'} eq 'P12') {
|
||||
$opts->{'certfile'} =
|
||||
$main->{'cadir'}."/certs/".$opts->{'keyname'}.".pem";
|
||||
$opts->{'cafile'} =
|
||||
$main->{'cadir'}."/cacert.pem";
|
||||
|
||||
if (-f $main->{'cadir'}."/cachain.pem") {
|
||||
$opts->{'cafile'} = $main->{'cadir'}."/cachain.pem";
|
||||
}
|
||||
|
||||
if(not -s $opts->{'certfile'}) {
|
||||
$t = _("Certificate is necessary for export as PKCS#12");
|
||||
$t .= "\n";
|
||||
$t .= _("Export is not possible!");
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
if((not defined($opts->{'p12passwd'})) &&
|
||||
(not $opts->{'nopass'})) {
|
||||
$opts->{'includeca'} = 1;
|
||||
$main->show_p12_export_dialog($opts, 'key');
|
||||
return;
|
||||
}
|
||||
|
||||
unlink($opts->{'outfile'});
|
||||
($ret, $ext) = $main->{'OpenSSL'}->genp12(
|
||||
type => $opts->{'type'},
|
||||
certfile => $opts->{'certfile'},
|
||||
keyfile => $opts->{'keyfile'},
|
||||
cafile => $opts->{'cafile'},
|
||||
outfile => $opts->{'outfile'},
|
||||
passwd => $opts->{'passwd'},
|
||||
p12passwd => $opts->{'p12passwd'},
|
||||
includeca => $opts->{'includeca'},
|
||||
nopass => $opts->{'nopass'},
|
||||
friendly => $opts->{'friendlyname'}
|
||||
);
|
||||
|
||||
if($ret eq 1) {
|
||||
$t = "Wrong password given\nDecrypting Key failed\nGenerating PKCS#12 failed";
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
return;
|
||||
} elsif($ret || (not -s $opts->{'outfile'})) {
|
||||
$t = _("Generating PKCS#12 failed");
|
||||
return;
|
||||
}
|
||||
|
||||
$main->{'exportdir'} = HELPERS::write_export_dir($main,
|
||||
$opts->{'outfile'});
|
||||
|
||||
$t = sprintf(_("Certificate and Key successfully exported to %s"),
|
||||
$opts->{'outfile'});
|
||||
GUI::HELPERS::print_info($t, $ext);
|
||||
return;
|
||||
|
||||
} elsif (($opts->{'format'} eq "ZIP") || ($opts->{'format'} eq "TAR")) {
|
||||
$opts->{'certfile'} =
|
||||
$main->{'cadir'}."/certs/".$opts->{'keyname'}.".pem";
|
||||
if(not -s $opts->{'certfile'}) {
|
||||
$t = sprintf(
|
||||
_("Certificate is necessary for export as %s file"),
|
||||
$opts->{'format'});
|
||||
$t .= "\n";
|
||||
$t .= _("Export is not possible!");
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
$opts->{'parsed'} =
|
||||
$main->{'CERT'}->parse_cert($main, $opts->{'keyname'});
|
||||
|
||||
my $tmpcert = "$main->{'tmpdir'}/cert.pem";
|
||||
my $tmpkey = "$main->{'tmpdir'}/key.pem";
|
||||
my $tmpcacert = "$main->{'tmpdir'}/cacert.pem";
|
||||
|
||||
open(OUT, ">$tmpcert") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't create temporary file"));
|
||||
return;
|
||||
};
|
||||
print OUT $opts->{'parsed'}->{'PEM'};
|
||||
close OUT;
|
||||
|
||||
# store key in temporary location
|
||||
{
|
||||
open(IN, "<$opts->{'keyfile'}") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't read Key file"));
|
||||
return;
|
||||
};
|
||||
my @key = <IN>;
|
||||
close IN;
|
||||
|
||||
open(OUT, ">$tmpkey") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't create temporary file"));
|
||||
return;
|
||||
};
|
||||
print OUT @key;
|
||||
close OUT;
|
||||
}
|
||||
|
||||
# store cacert in temporary location
|
||||
{
|
||||
$opts->{'cafile'} = $main->{'cadir'}."/cacert.pem";
|
||||
open(IN, "<$opts->{'cafile'}") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't read CA certificate"));
|
||||
return;
|
||||
};
|
||||
my @cacert = <IN>;
|
||||
close IN;
|
||||
|
||||
open(OUT, ">$tmpcacert") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't create temporary file"));
|
||||
return;
|
||||
};
|
||||
print OUT @cacert;
|
||||
close OUT;
|
||||
}
|
||||
|
||||
unlink($opts->{'outfile'});
|
||||
if($opts->{'format'} eq 'ZIP') {
|
||||
system($main->{'init'}->{'zipbin'}, '-j', $opts->{'outfile'},
|
||||
$tmpcacert, $tmpkey, $tmpcert);
|
||||
my $ret = $? >> 8;
|
||||
} elsif ($opts->{'format'} eq 'TAR') {
|
||||
system($main->{'init'}->{'tarbin'}, 'cfv', $opts->{'outfile'},
|
||||
$tmpcacert, $tmpkey, $tmpcert);
|
||||
my $ret = $? >> 8;
|
||||
}
|
||||
|
||||
if(not -s $opts->{'outfile'} || $ret) {
|
||||
GUI::HELPERS::print_warning(
|
||||
sprintf(_("Generating %s file failed"),
|
||||
$opts->{'format'}));
|
||||
} else {
|
||||
$main->{'exportdir'} = HELPERS::write_export_dir($main,
|
||||
$opts->{'outfile'});
|
||||
$t = sprintf(
|
||||
_("Certificate and Key successfully exported to %s"),
|
||||
$opts->{'outfile'});
|
||||
GUI::HELPERS::print_info($t);
|
||||
}
|
||||
unlink($tmpcacert);
|
||||
unlink($tmpcert);
|
||||
unlink($tmpkey);
|
||||
|
||||
return;
|
||||
|
||||
} else {
|
||||
$t = sprintf(_("Invalid format for export requested: %s"),
|
||||
$opts->{'format'});
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
}
|
||||
|
||||
GUI::HELPERS::print_warning(_("Something Failed ??"));
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
# check if its a dsa or rsa key
|
||||
sub _check_key {
|
||||
my ($main, $file, $name) = @_;
|
||||
|
||||
my ($t, $type);
|
||||
|
||||
open(KEY, "<$file") || do {
|
||||
$t = sprintf(_("Can't open Key file: %s: %s"),
|
||||
$file, $!);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return;
|
||||
};
|
||||
|
||||
while(<KEY>) {
|
||||
if(/RSA PRIVATE KEY/i) {
|
||||
$type = "RSA";
|
||||
last;
|
||||
} elsif(/DSA PRIVATE KEY/i) {
|
||||
$type = "DSA";
|
||||
last;
|
||||
} else {
|
||||
$type = "UNKNOWN";
|
||||
}
|
||||
}
|
||||
close(KEY);
|
||||
|
||||
if(defined($type) && $type ne "") {
|
||||
$name .= "%".$type;
|
||||
}
|
||||
|
||||
return($name);
|
||||
}
|
||||
|
||||
sub key_change_passwd {
|
||||
my ($self, $main, $file, $oldpass, $newpass) = @_;
|
||||
my $opts = {};
|
||||
my ($t, $ret, $ext);
|
||||
|
||||
my $inform = "DER";
|
||||
my $outform = "PEM";
|
||||
|
||||
my($type);
|
||||
|
||||
# ckeck file format
|
||||
open(KEY, "<$file") || do {
|
||||
$t = sprintf(_("Can't open Key file:\n%s"),
|
||||
$file);
|
||||
GUI::HELPERS::print_warning($t);
|
||||
return(1);
|
||||
};
|
||||
while(<KEY>) {
|
||||
if(/BEGIN RSA PRIVATE KEY/) {
|
||||
$inform = "PEM";
|
||||
$type = "RSA";
|
||||
last;
|
||||
} elsif(/BEGIN RSA PRIVATE KEY/){
|
||||
$inform = "PEM";
|
||||
$type = "DSA";
|
||||
last;
|
||||
} else {
|
||||
$type = "UNKNOWN";
|
||||
}
|
||||
}
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
($ret, $ext) = $main->{'OpenSSL'}->convkey(
|
||||
'type' => $type,
|
||||
'inform' => $inform,
|
||||
'outform' => $outform,
|
||||
'nopass' => 0,
|
||||
'pass' => $newpass,
|
||||
'oldpass' => $oldpass,
|
||||
'keyfile' => $file
|
||||
);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
if($ret eq 1) {
|
||||
$t = _("Generating key failed");
|
||||
|
||||
if($ext =~ /unable to load Private Key/) {
|
||||
$t .= _("The password for your old CA Key is wrong");
|
||||
}
|
||||
GUI::HELPERS::print_warning(($t), $ext);
|
||||
return($ret);
|
||||
}
|
||||
|
||||
return($ret);
|
||||
}
|
||||
|
||||
1
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,777 @@
|
|||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: REQ.pm,v 1.7 2006/06/28 21:50:42 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
|
||||
package REQ;
|
||||
|
||||
use POSIX;
|
||||
|
||||
sub new {
|
||||
my $that = shift;
|
||||
my $class = ref($that) || $that;
|
||||
|
||||
my $self = {};
|
||||
|
||||
$self->{'OpenSSL'} = shift;
|
||||
|
||||
bless($self, $class);
|
||||
}
|
||||
|
||||
#
|
||||
# check if all data for creating a new request is available
|
||||
#
|
||||
sub get_req_create {
|
||||
my ($self, $main, $opts, $box) = @_;
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
my ($name, $action, $parsed, $reqfile, $keyfile, $ca, $t);
|
||||
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
|
||||
if(!(defined($opts)) || !(ref($opts))) {
|
||||
if(defined($opts) && $opts eq "signserver") {
|
||||
$opts = {};
|
||||
$opts->{'sign'} = 1;
|
||||
$opts->{'type'} = "server";
|
||||
} elsif(defined($opts) && $opts eq "signclient") {
|
||||
$opts = {};
|
||||
$opts->{'sign'} = 1;
|
||||
$opts->{'type'} = "client";
|
||||
} elsif (defined($opts)) {
|
||||
$t = sprintf(_("Strange value for 'opts': %s"), $opts);
|
||||
GUI::HELPERS::print_error($t);
|
||||
}
|
||||
$opts->{'bits'} = 4096;
|
||||
$opts->{'digest'} = 'sha1';
|
||||
$opts->{'algo'} = 'rsa';
|
||||
if(defined($opts) && $opts eq "sign") {
|
||||
$opts->{'sign'} = 1;
|
||||
}
|
||||
|
||||
$parsed = $main->{'CERT'}->parse_cert($main, 'CA');
|
||||
|
||||
defined($parsed) ||
|
||||
GUI::HELPERS::print_error(_("Can't read CA certificate"));
|
||||
|
||||
# set defaults
|
||||
if(defined $parsed->{'C'}) {
|
||||
$opts->{'C'} = $parsed->{'C'};
|
||||
}
|
||||
if(defined $parsed->{'ST'}) {
|
||||
$opts->{'ST'} = $parsed->{'ST'};
|
||||
}
|
||||
if(defined $parsed->{'L'}) {
|
||||
$opts->{'L'} = $parsed->{'L'};
|
||||
}
|
||||
if(defined $parsed->{'O'}) {
|
||||
$opts->{'O'} = $parsed->{'O'};
|
||||
}
|
||||
my $cc = 0;
|
||||
foreach my $ou (@{$parsed->{'OU'}}) {
|
||||
$opts->{'OU'}->[$cc++] = $ou;
|
||||
}
|
||||
|
||||
$main->show_req_dialog($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
if((not defined($opts->{'CN'})) ||
|
||||
($opts->{'CN'} eq "") ||
|
||||
(not defined($opts->{'passwd'})) ||
|
||||
($opts->{'passwd'} eq "")) {
|
||||
$main->show_req_dialog($opts);
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Please specify at least Common Name ")
|
||||
._("and Password"));
|
||||
return;
|
||||
}
|
||||
|
||||
if((not defined($opts->{'passwd2'})) ||
|
||||
$opts->{'passwd'} ne $opts->{'passwd2'}) {
|
||||
$main->show_req_dialog($opts);
|
||||
GUI::HELPERS::print_warning(_("Passwords don't match"));
|
||||
return;
|
||||
}
|
||||
|
||||
$opts->{'C'} = uc($opts->{'C'});
|
||||
|
||||
if((defined $opts->{'C'}) &&
|
||||
($opts->{'C'} ne "") &&
|
||||
(length($opts->{'C'}) != 2)) {
|
||||
$main->show_req_dialog($opts);
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Country must be exact 2 letter code"));
|
||||
return;
|
||||
}
|
||||
|
||||
$name = HELPERS::gen_name($opts);
|
||||
|
||||
$opts->{'reqname'} = HELPERS::enc_base64($name);
|
||||
|
||||
$reqfile = $main->{'CA'}->{$ca}->{'dir'}."/req/".$opts->{'reqname'}.".pem";
|
||||
$keyfile = $main->{'CA'}->{$ca}->{'dir'}."/keys/".$opts->{'reqname'}.".pem";
|
||||
|
||||
if(-s $reqfile || -s $keyfile) {
|
||||
$main->show_req_overwrite_warning($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
$self->create_req($main, $opts);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# create new request and key
|
||||
#
|
||||
sub create_req {
|
||||
my ($self, $main, $opts) = @_;
|
||||
|
||||
my($reqfile, $keyfile, $ca, $ret, $ext, $cadir);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
$cadir = $main->{'CA'}->{$ca}->{'dir'};
|
||||
|
||||
$reqfile = $cadir."/req/".$opts->{'reqname'}.".pem";
|
||||
$keyfile = $cadir."/keys/".$opts->{'reqname'}.".pem";
|
||||
|
||||
($ret, $ext) = $self->{'OpenSSL'}->newkey(
|
||||
'algo' => $opts->{'algo'},
|
||||
'bits' => $opts->{'bits'},
|
||||
'outfile' => $keyfile,
|
||||
'pass' => $opts->{'passwd'}
|
||||
);
|
||||
|
||||
if (not -s $keyfile || $ret) {
|
||||
unlink($keyfile);
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_warning(_("Generating key failed"), $ext);
|
||||
return;
|
||||
}
|
||||
|
||||
my @dn = ( $opts->{'C'}, $opts->{'ST'}, $opts->{'L'}, $opts->{'O'} );
|
||||
if(ref($opts->{'OU'})) {
|
||||
foreach my $ou (@{$opts->{'OU'}}) {
|
||||
push(@dn,$ou);
|
||||
}
|
||||
} else {
|
||||
push(@dn, $opts->{'OU'});
|
||||
}
|
||||
@dn = (@dn, $opts->{'CN'}, $opts->{'EMAIL'}, '', '');
|
||||
($ret, $ext) = $self->{'OpenSSL'}->newreq(
|
||||
'config' => $main->{'CA'}->{$ca}->{'cnf'},
|
||||
'outfile' => $reqfile,
|
||||
'keyfile' => $keyfile,
|
||||
'digest' => $opts->{'digest'},
|
||||
'pass' => $opts->{'passwd'},
|
||||
'dn' => \@dn,
|
||||
);
|
||||
|
||||
if (not -s $reqfile || $ret) {
|
||||
unlink($keyfile);
|
||||
unlink($reqfile);
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_warning(_("Generating Request failed"), $ext);
|
||||
return;
|
||||
}
|
||||
|
||||
my $parsed = $self->parse_req($main, $opts->{'reqname'}, 1);
|
||||
|
||||
$main->{'reqbrowser'}->update($cadir."/req",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
$main->{'keybrowser'}->update($cadir."/keys",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
if($opts->{'sign'}) {
|
||||
$opts->{'reqfile'} = $reqfile;
|
||||
$opts->{'passwd'} = undef; # to sign request, ca-password is needed
|
||||
$self->get_sign_req($main, $opts);
|
||||
}
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# get name of requestfile to delete
|
||||
#
|
||||
sub get_del_req {
|
||||
my ($self, $main) = @_;
|
||||
|
||||
my($reqname, $req, $reqfile, $row, $ind, $ca, $cadir);
|
||||
|
||||
$ca = $main->{'reqbrowser'}->selection_caname();
|
||||
$cadir = $main->{'reqbrowser'}->selection_cadir();
|
||||
|
||||
if(not(defined($reqfile))) {
|
||||
$req = $main->{'reqbrowser'}->selection_dn();
|
||||
|
||||
|
||||
if(not defined($req)) {
|
||||
GUI::HELPERS::print_info(_("Please select a Request first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$reqname = HELPERS::enc_base64($req);
|
||||
$reqfile = $cadir."/req/".$reqname.".pem";
|
||||
|
||||
}
|
||||
|
||||
if(not -s $reqfile) {
|
||||
GUI::HELPERS::print_warning(_("Request file not found"));
|
||||
return;
|
||||
}
|
||||
|
||||
$main->show_del_confirm($reqfile, 'req');
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# now really delete the requestfile
|
||||
#
|
||||
sub del_req {
|
||||
my ($self, $main, $file) = @_;
|
||||
|
||||
my ($ca, $cadir);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
unlink($file);
|
||||
|
||||
$ca = $main->{'reqbrowser'}->selection_caname();
|
||||
$cadir = $main->{'reqbrowser'}->selection_cadir();
|
||||
|
||||
$main->{'reqbrowser'}->update($cadir."/req",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
sub read_reqlist {
|
||||
my ($self, $reqdir, $crlfile, $indexfile, $force, $main) = @_;
|
||||
|
||||
my ($f, $modt, $d, $reqlist, $c, $p, $t);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$reqlist = [];
|
||||
|
||||
$modt = (stat($reqdir))[9];
|
||||
|
||||
if(defined($self->{'lastread'}) &&
|
||||
$self->{'lastread'} >= $modt) {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
return(0);
|
||||
}
|
||||
|
||||
opendir(DIR, $reqdir) || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_warning(_("Can't open Request directory"));
|
||||
return(0);
|
||||
};
|
||||
|
||||
while($f = readdir(DIR)) {
|
||||
next if $f =~ /^\./;
|
||||
$c++;
|
||||
}
|
||||
rewinddir(DIR);
|
||||
|
||||
$main->{'barbox'}->pack_start($main->{'progress'}, 0, 0, 0);
|
||||
$main->{'progress'}->show();
|
||||
while($f = readdir(DIR)) {
|
||||
next if $f =~ /^\./;
|
||||
$f =~ s/\.pem//;
|
||||
$d = HELPERS::dec_base64($f);
|
||||
next if not defined($d);
|
||||
next if $d eq "";
|
||||
push(@{$reqlist}, $d);
|
||||
|
||||
if(defined($main)) {
|
||||
$t = sprintf(_(" Read Request: %s"), $d);
|
||||
GUI::HELPERS::set_status($main, $t);
|
||||
$p += 100/$c;
|
||||
if($p/100 <= 1) {
|
||||
$main->{'progress'}->set_fraction($p/100);
|
||||
while(Gtk2->events_pending) {
|
||||
Gtk2->main_iteration;
|
||||
}
|
||||
}
|
||||
select(undef, undef, undef, 0.025);
|
||||
}
|
||||
}
|
||||
@{$reqlist} = sort(@{$reqlist});
|
||||
closedir(DIR);
|
||||
|
||||
delete($self->{'reqlist'});
|
||||
$self->{'reqlist'} = $reqlist;
|
||||
|
||||
$self->{'lastread'} = time();
|
||||
|
||||
if(defined($main)) {
|
||||
$main->{'progress'}->set_fraction(0);
|
||||
$main->{'barbox'}->remove($main->{'progress'});
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
}
|
||||
|
||||
return(1); # got new list
|
||||
}
|
||||
|
||||
#
|
||||
# get name of request to sign
|
||||
#
|
||||
sub get_sign_req {
|
||||
my ($self, $main, $opts, $box) = @_;
|
||||
|
||||
my($time, $parsed, $ca, $cadir, $ext, $ret);
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
$time = time();
|
||||
$ca = $main->{'reqbrowser'}->selection_caname();
|
||||
$cadir = $main->{'reqbrowser'}->selection_cadir();
|
||||
|
||||
if(not(defined($opts->{'reqfile'}))) {
|
||||
$opts->{'req'} = $main->{'reqbrowser'}->selection_dn();
|
||||
|
||||
if(not defined($opts->{'req'})) {
|
||||
GUI::HELPERS::print_info(_("Please select a Request first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$opts->{'reqname'} = HELPERS::enc_base64($opts->{'req'});
|
||||
$opts->{'reqfile'} = $cadir."/req/".$opts->{'reqname'}.".pem";
|
||||
}
|
||||
|
||||
if(not -s $opts->{'reqfile'}) {
|
||||
GUI::HELPERS::print_warning(_("Request file not found"));
|
||||
return;
|
||||
}
|
||||
|
||||
if((-s $cadir."/certs/".$opts->{'reqname'}.".pem") &&
|
||||
(!(defined($opts->{'overwrite'})) || ($opts->{'overwrite'} ne 'true'))) {
|
||||
$main->show_cert_overwrite_confirm($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
$parsed = $main->{'CERT'}->parse_cert($main, 'CA');
|
||||
|
||||
defined($parsed) ||
|
||||
GUI::HELPERS::print_error(_("Can't read CA certificate"));
|
||||
|
||||
if(!defined($opts->{'passwd'})) {
|
||||
$opts->{'days'} =
|
||||
$main->{'TCONFIG'}->{$opts->{'type'}."_ca"}->{'default_days'};
|
||||
|
||||
if($opts->{'days'} > (($parsed->{'EXPDATE'}/86400) - ($time/86400))) {
|
||||
$opts->{'days'} = int(($parsed->{'EXPDATE'}/86400) - ($time/86400));
|
||||
}
|
||||
|
||||
$main->show_req_sign_dialog($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
if((($time + ($opts->{'days'} * 86400)) > $parsed->{'EXPDATE'}) &&
|
||||
(!(defined($opts->{'ignoredate'})) ||
|
||||
$opts->{'ignoredate'} ne 'true')){
|
||||
$main->show_req_date_warning($opts);
|
||||
return;
|
||||
}
|
||||
|
||||
# try to find message digest used for the request
|
||||
$parsed = undef;
|
||||
$parsed = $self->parse_req($main, $opts->{'reqname'}, 1);
|
||||
defined($parsed) ||
|
||||
GUI::HELPERS::print_error(_("Can't read Request file"));
|
||||
|
||||
if(defined($parsed->{'SIG_ALGORITHM'})) {
|
||||
$opts->{'digest'} = $parsed->{'SIG_ALGORITHM'};
|
||||
|
||||
if($opts->{'digest'} =~ /^md2/) {
|
||||
$opts->{'digest'} = "md2";
|
||||
} elsif ($opts->{'digest'} =~ /^mdc2/) {
|
||||
$opts->{'digest'} = "mdc2";
|
||||
} elsif ($opts->{'digest'} =~ /^md4/) {
|
||||
$opts->{'digest'} = "md4";
|
||||
} elsif ($opts->{'digest'} =~ /^md5/) {
|
||||
$opts->{'digest'} = "md5";
|
||||
} elsif ($opts->{'digest'} =~ /^sha1/) {
|
||||
$opts->{'digest'} = "sha1";
|
||||
} elsif ($opts->{'digest'} =~ /^ripemd160/) {
|
||||
$opts->{'digest'} = "ripemd160";
|
||||
} else {
|
||||
}
|
||||
} else {
|
||||
$opts->{'digest'} = 0;
|
||||
}
|
||||
|
||||
($ret, $ext) = $self->sign_req($main, $opts);
|
||||
|
||||
return($ret, $ext);
|
||||
}
|
||||
|
||||
#
|
||||
# now really sign the request
|
||||
#
|
||||
sub sign_req {
|
||||
my ($self, $main, $opts) = @_;
|
||||
|
||||
my($serial, $certout, $certfile, $certfile2, $ca, $cadir, $ret, $t, $ext);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$ca = $main->{'reqbrowser'}->selection_caname();
|
||||
$cadir = $main->{'reqbrowser'}->selection_cadir();
|
||||
|
||||
$serial = $cadir."/serial";
|
||||
open(IN, "<$serial") || do {
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_warning(_("Can't read serial"));
|
||||
return;
|
||||
};
|
||||
$serial = <IN>;
|
||||
chomp($serial);
|
||||
close IN;
|
||||
|
||||
if(not defined($opts->{'nsSslServerName'})) {
|
||||
$opts->{'nsSslServerName'} = 'none';
|
||||
}
|
||||
if(not defined($opts->{'nsRevocationUrl'})) {
|
||||
$opts->{'nsRevocationUrl'} = 'none';
|
||||
}
|
||||
if(not defined($opts->{'nsRenewalUrl'})) {
|
||||
$opts->{'nsRenewalUrl'} = 'none';
|
||||
}
|
||||
if(not defined($opts->{'subjectAltName'})) {
|
||||
$opts->{'subjectAltName'} = 'none';
|
||||
$opts->{'subjectAltNameType'} = 'none';
|
||||
} else {
|
||||
$opts->{'subjectAltNameType'} =
|
||||
$main->{TCONFIG}->{$opts->{'type'}.'_cert'}->{'subjectAltNameType'};
|
||||
}
|
||||
if(not defined($opts->{'extendedKeyUsage'})) {
|
||||
$opts->{'extendedKeyUsage'} = 'none';
|
||||
$opts->{'extendedKeyUsageType'} = 'none';
|
||||
} else {
|
||||
$opts->{'extendedKeyUsageType'} =
|
||||
$main->{TCONFIG}->{$opts->{'type'}.'_cert'}->{'extendedKeyUsageType'};
|
||||
}
|
||||
|
||||
if(defined($opts->{'mode'}) && $opts->{'mode'} eq "sub") {
|
||||
($ret, $ext) = $self->{'OpenSSL'}->signreq(
|
||||
'mode' => $opts->{'mode'},
|
||||
'config' => $main->{'CA'}->{$ca}->{'cnf'},
|
||||
'reqfile' => $opts->{'reqfile'},
|
||||
'keyfile' => $opts->{'keyfile'},
|
||||
'cacertfile' => $opts->{'cacertfile'},
|
||||
'outdir' => $opts->{'outdir'},
|
||||
'days' => $opts->{'days'},
|
||||
'parentpw' => $opts->{'parentpw'},
|
||||
'caname' => "ca_ca",
|
||||
'revocationurl' => $opts->{'nsRevocationUrl'},
|
||||
'renewalurl' => $opts->{'nsRenewalUrl'},
|
||||
'subjaltname' => $opts->{'subjectAltName'},
|
||||
'subjaltnametype' => $opts->{'subjectAltNameType'},
|
||||
'extendedkeyusage' => $opts->{'extendedKeyUsage'},
|
||||
'extendedkeyusagetype' => $opts->{'extendedKeyUsageType'},
|
||||
'noemaildn' => $opts->{'noemaildn'},
|
||||
'digest' => $opts->{'digest'}
|
||||
);
|
||||
} else {
|
||||
($ret, $ext) = $self->{'OpenSSL'}->signreq(
|
||||
'config' => $main->{'CA'}->{$ca}->{'cnf'},
|
||||
'reqfile' => $opts->{'reqfile'},
|
||||
'days' => $opts->{'days'},
|
||||
'pass' => $opts->{'passwd'},
|
||||
'caname' => $opts->{'type'}."_ca",
|
||||
'sslservername' => $opts->{'nsSslServerName'},
|
||||
'revocationurl' => $opts->{'nsRevocationUrl'},
|
||||
'renewalurl' => $opts->{'nsRenewalUrl'},
|
||||
'subjaltname' => $opts->{'subjectAltName'},
|
||||
'subjaltnametype' => $opts->{'subjectAltNameType'},
|
||||
'extendedkeyusage' => $opts->{'extendedKeyUsage'},
|
||||
'extendedkeyusagetype' => $opts->{'extendedKeyUsageType'},
|
||||
'noemaildn' => $opts->{'noemaildn'},
|
||||
'digest' => $opts->{'digest'}
|
||||
);
|
||||
}
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
if($ret eq 1) {
|
||||
$t = _("Wrong CA password given\nSigning of the Request failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
} elsif($ret eq 2) {
|
||||
$t = _("CA Key not found\nSigning of the Request failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
} elsif($ret eq 3) {
|
||||
$t = _("Certificate already existing\nSigning of the Request failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
} elsif($ret eq 4) {
|
||||
$t = _("Invalid IP Address given\nSigning of the Request failed");
|
||||
GUI::HELPERS::print_warning($t, $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
} elsif($ret) {
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Signing of the Request failed"), $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return($ret, $ext);
|
||||
}
|
||||
|
||||
if(defined($opts->{'mode'}) && $opts->{'mode'} eq "sub") {
|
||||
$certout = $cadir."/newcerts/".$serial.".pem";
|
||||
$certfile = $opts->{'outfile'};
|
||||
$certfile2 = $cadir."/certs/".$opts->{'reqname'}.".pem";
|
||||
} else {
|
||||
$certout = $cadir."/newcerts/".$serial.".pem";
|
||||
$certfile = $cadir."/certs/".$opts->{'reqname'}.".pem";
|
||||
#print STDERR "DEBUG: write certificate to: ".$cadir."/certs/".$opts->{'reqname'}.".pem";
|
||||
}
|
||||
|
||||
if (not -s $certout) {
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Signing of the Request failed"), $ext);
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
}
|
||||
|
||||
open(IN, "<$certout") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't read Certificate file"));
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
};
|
||||
open(OUT, ">$certfile") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't write Certificate file"));
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
};
|
||||
print OUT while(<IN>);
|
||||
|
||||
if(defined($opts->{'mode'}) && $opts->{'mode'} eq "sub") {
|
||||
close OUT;
|
||||
open(OUT, ">$certfile2") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't write Certificate file"));
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
return;
|
||||
};
|
||||
seek(IN, 0, 0);
|
||||
print OUT while(<IN>);
|
||||
}
|
||||
|
||||
close IN; close OUT;
|
||||
|
||||
GUI::HELPERS::print_info(
|
||||
_("Request signed succesfully.\nCertificate created"), $ext);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$main->{'CERT'}->reread_cert($main,
|
||||
HELPERS::dec_base64($opts->{'reqname'}));
|
||||
|
||||
$main->{'certbrowser'}->update($cadir."/certs",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
delete($opts->{$_}) foreach(keys(%$opts));
|
||||
$opts = undef;
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
return($ret, $ext);
|
||||
}
|
||||
|
||||
#
|
||||
# get informations/verifications to import request from file
|
||||
#
|
||||
sub get_import_req {
|
||||
my ($self, $main, $opts, $box) = @_;
|
||||
|
||||
my ($ret, $ext, $der);
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
my($ca, $parsed, $file, $format);
|
||||
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
|
||||
if(not defined($opts)) {
|
||||
$main->show_req_import_dialog();
|
||||
return;
|
||||
}
|
||||
|
||||
if(not defined($opts->{'infile'})) {
|
||||
$main->show_req_import_dialog();
|
||||
GUI::HELPERS::print_warning(_("Please select a Request file first"));
|
||||
return;
|
||||
}
|
||||
if(not -s $opts->{'infile'}) {
|
||||
$main->show_req_import_dialog();
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Can't find Request file: ").$opts->{'infile'});
|
||||
return;
|
||||
}
|
||||
|
||||
open(IN, "<$opts->{'infile'}") || do {
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Can't read Request file:").$opts->{'infile'});
|
||||
return;
|
||||
};
|
||||
|
||||
$opts->{'in'} .= $_ while(<IN>);
|
||||
|
||||
if($opts->{'in'} =~ /-BEGIN[\s\w]+CERTIFICATE REQUEST-/i) {
|
||||
$format = "PEM";
|
||||
$file = $opts->{'infile'};
|
||||
} else {
|
||||
$format = "DER";
|
||||
}
|
||||
|
||||
if($format eq "DER") {
|
||||
($ret, $der, $ext) = $opts->{'in'} = $self->{'OpenSSL'}->convdata(
|
||||
'cmd' => 'req',
|
||||
'data' => $opts->{'in'},
|
||||
'inform' => 'DER',
|
||||
'outform' => 'PEM'
|
||||
);
|
||||
|
||||
if($ret) {
|
||||
GUI::HELPERS::print_warning(
|
||||
_("Error converting Request"), $ext);
|
||||
return;
|
||||
}
|
||||
|
||||
$opts->{'tmpfile'} =
|
||||
HELPERS::mktmp($self->{'OpenSSL'}->{'tmp'}."/import");
|
||||
|
||||
open(TMP, ">$opts->{'tmpfile'}") || do {
|
||||
GUI::HELPERS::print_warning( _("Can't create temporary file: %s: %s"),
|
||||
$opts->{'tmpfile'}, $!);
|
||||
return;
|
||||
};
|
||||
print TMP $opts->{'in'};
|
||||
close(TMP);
|
||||
$file = $opts->{'tmpfile'};
|
||||
}
|
||||
|
||||
$parsed = $self->{'OpenSSL'}->parsereq(
|
||||
$main->{'CA'}->{$ca}->{'cnf'},
|
||||
$file);
|
||||
|
||||
if(not defined($parsed)) {
|
||||
unlink($opts->{'tmpfile'});
|
||||
GUI::HELPERS::print_warning(_("Parsing Request failed"));
|
||||
return;
|
||||
}
|
||||
|
||||
$main->show_import_verification("req", $opts, $parsed);
|
||||
return;
|
||||
}
|
||||
|
||||
#
|
||||
# import request
|
||||
#
|
||||
sub import_req {
|
||||
my ($self, $main, $opts, $parsed, $box) = @_;
|
||||
|
||||
my ($ca, $cadir);
|
||||
|
||||
$box->destroy() if(defined($box));
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$ca = $main->{'reqbrowser'}->selection_caname();
|
||||
$cadir = $main->{'reqbrowser'}->selection_cadir();
|
||||
|
||||
$opts->{'name'} = HELPERS::gen_name($parsed);
|
||||
|
||||
$opts->{'reqname'} = HELPERS::enc_base64($opts->{'name'});
|
||||
|
||||
$opts->{'reqfile'} = $cadir."/req/".$opts->{'reqname'}.".pem";
|
||||
|
||||
open(OUT, ">$opts->{'reqfile'}") || do {
|
||||
unlink($opts->{'tmpfile'});
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
GUI::HELPERS::print_warning(_("Can't open output file: %s: %s"),
|
||||
$opts->{'reqfile'}, $!);
|
||||
return;
|
||||
};
|
||||
print OUT $opts->{'in'};
|
||||
close OUT;
|
||||
|
||||
$main->{'reqbrowser'}->update($cadir."/req",
|
||||
$cadir."/crl/crl.pem",
|
||||
$cadir."/index.txt",
|
||||
0);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
sub parse_req {
|
||||
my ($self, $main, $name, $force) = @_;
|
||||
|
||||
my ($parsed, $ca, $reqfile, $req);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 1);
|
||||
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
|
||||
$reqfile = $main->{'CA'}->{$ca}->{'dir'}."/req/".$name.".pem";
|
||||
|
||||
$parsed = $self->{'OpenSSL'}->parsereq($main->{'CA'}->{$ca}->{'cnf'},
|
||||
$reqfile, $force);
|
||||
|
||||
GUI::HELPERS::set_cursor($main, 0);
|
||||
|
||||
return($parsed);
|
||||
}
|
||||
|
||||
1
|
||||
|
||||
|
|
@ -0,0 +1,555 @@
|
|||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# $Id: TCONFIG.pm,v 1.2 2006/06/28 21:50:42 sm Exp $
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
use strict;
|
||||
|
||||
package TCONFIG;
|
||||
|
||||
use POSIX;
|
||||
|
||||
sub new {
|
||||
my $self = {};
|
||||
my $that = shift;
|
||||
my $class = ref($that) || $that;
|
||||
|
||||
bless($self, $class);
|
||||
}
|
||||
|
||||
sub init_config {
|
||||
my ($self, $main, $ca) = @_;
|
||||
|
||||
my($file, @lines, $i, $section, $l, $k, $v);
|
||||
|
||||
if(not defined($ca)) {
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
}
|
||||
if(not defined($ca)) {
|
||||
GUI::HELPERS::print_warning(_("Please select a CA first"));
|
||||
return;
|
||||
}
|
||||
|
||||
$file = $main->{'CA'}->{$ca}->{'cnf'};
|
||||
|
||||
open(IN, "<$file") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't open configuration"));
|
||||
return;
|
||||
};
|
||||
|
||||
@lines = <IN>;
|
||||
close IN;
|
||||
chomp(@lines);
|
||||
|
||||
# clean old configuration
|
||||
foreach $k (keys(%$self)) {
|
||||
delete($self->{$k});
|
||||
}
|
||||
|
||||
foreach $l (@lines) {
|
||||
next if $l =~ /^#/;
|
||||
next if $l =~ /^$/;
|
||||
next if $l =~ /^ *$/;
|
||||
|
||||
# find section
|
||||
if($l =~ /\[\s*([^\s]+)\s*\]/) {
|
||||
$section = $1;
|
||||
} elsif ($l =~ /^([^\s\t]+)[\s\t]*=[\s\t]*([^\s\t]+.*)$/) {
|
||||
if($section eq "ca" ||
|
||||
$section eq "policy_client" ||
|
||||
$section eq "policy_server" ||
|
||||
$section eq "policy_ca" ||
|
||||
$section eq "req" ||
|
||||
$section eq "req_distinguished_name" ||
|
||||
$section eq "v3_req" ||
|
||||
$section eq "req_attributes") {
|
||||
if(not defined($self->{$section})) {
|
||||
$self->{$section} = [];
|
||||
}
|
||||
push(@{$self->{$section}}, $l);
|
||||
} else {
|
||||
$k = $1;
|
||||
$v = $2;
|
||||
# really ugly hack XXX
|
||||
if($v =~ /ENV::(\w+)$/) {
|
||||
$ENV{$1} = 'dummy';
|
||||
}
|
||||
if(not defined($self->{$section})) {
|
||||
$self->{$section} = {};
|
||||
}
|
||||
$self->{$section}->{$k} = $v;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
# store nsSslServerName information
|
||||
if(defined($self->{'server_cert'}->{'nsSslServerName'})) {
|
||||
if($self->{'server_cert'}->{'nsSslServerName'}
|
||||
=~ /ENV:/) {
|
||||
$self->{'server_cert'}->{'nsSslServerName'} = 'user';
|
||||
}
|
||||
}else {
|
||||
$self->{'server_cert'}->{'nsSslServerName'} = 'none';
|
||||
}
|
||||
|
||||
# store subjectAltName information
|
||||
# ca
|
||||
if(defined($self->{'v3_ca'}->{'subjectAltName'})) {
|
||||
if($self->{'v3_ca'}->{'subjectAltName'} eq 'email:copy') {
|
||||
$self->{'v3_ca'}->{'subjectAltName'} = 'emailcopy';
|
||||
}
|
||||
}else {
|
||||
$self->{'v3_ca'}->{'subjectAltName'} = 'none';
|
||||
}
|
||||
|
||||
# server
|
||||
if(defined($self->{'server_cert'}->{'subjectAltName'})) {
|
||||
if($self->{'server_cert'}->{'subjectAltName'}
|
||||
=~ /ENV:.*IP/) {
|
||||
$self->{'server_cert'}->{'subjectAltNameType'} = 'ip';
|
||||
$self->{'server_cert'}->{'subjectAltName'} = 'user';
|
||||
}elsif($self->{'server_cert'}->{'subjectAltName'}
|
||||
=~ /ENV:.*DNS/) {
|
||||
$self->{'server_cert'}->{'subjectAltNameType'} = 'dns';
|
||||
$self->{'server_cert'}->{'subjectAltName'} = 'user';
|
||||
}elsif($self->{'server_cert'}->{'subjectAltName'}
|
||||
=~ /ENV:.*RAW/) {
|
||||
$self->{'server_cert'}->{'subjectAltNameType'} = 'raw';
|
||||
$self->{'server_cert'}->{'subjectAltName'} = 'user';
|
||||
}elsif($self->{'server_cert'}->{'subjectAltName'}
|
||||
eq 'email:copy') {
|
||||
$self->{'server_cert'}->{'subjectAltName'} = 'emailcopy';
|
||||
$self->{'server_cert'}->{'subjectAltNameType'} = 'ip';
|
||||
}
|
||||
}else {
|
||||
$self->{'server_cert'}->{'subjectAltNameType'} = 'ip';
|
||||
$self->{'server_cert'}->{'subjectAltName'} = 'none';
|
||||
}
|
||||
|
||||
# client
|
||||
if(defined($self->{'client_cert'}->{'subjectAltName'})) {
|
||||
if($self->{'client_cert'}->{'subjectAltName'}
|
||||
=~ /ENV:.*IP/) {
|
||||
$self->{'client_cert'}->{'subjectAltNameType'} = 'ip';
|
||||
$self->{'client_cert'}->{'subjectAltName'} = 'user';
|
||||
}elsif($self->{'client_cert'}->{'subjectAltName'}
|
||||
=~ /ENV:.*DNS/) {
|
||||
$self->{'client_cert'}->{'subjectAltNameType'} = 'dns';
|
||||
$self->{'client_cert'}->{'subjectAltName'} = 'user';
|
||||
}elsif($self->{'client_cert'}->{'subjectAltName'}
|
||||
=~ /ENV:.*EMAIL/) {
|
||||
$self->{'client_cert'}->{'subjectAltNameType'} = 'mail';
|
||||
$self->{'client_cert'}->{'subjectAltName'} = 'user';
|
||||
}elsif($self->{'client_cert'}->{'subjectAltName'}
|
||||
=~ /ENV:.*RAW/) {
|
||||
$self->{'client_cert'}->{'subjectAltNameType'} = 'raw';
|
||||
$self->{'client_cert'}->{'subjectAltName'} = 'user';
|
||||
}elsif($self->{'client_cert'}->{'subjectAltName'}
|
||||
eq 'email:copy') {
|
||||
$self->{'client_cert'}->{'subjectAltName'} = 'emailcopy';
|
||||
$self->{'client_cert'}->{'subjectAltNameType'} = 'ip';
|
||||
}
|
||||
}else {
|
||||
$self->{'client_cert'}->{'subjectAltNameType'} = 'ip';
|
||||
$self->{'client_cert'}->{'subjectAltName'} = 'none';
|
||||
}
|
||||
|
||||
foreach my $sect ('server_cert', 'client_cert', 'v3_ca') {
|
||||
# store nsRevocationUrl information
|
||||
if(defined($self->{$sect}->{'nsRevocationUrl'})) {
|
||||
if($self->{$sect}->{'nsRevocationUrl'}
|
||||
=~ /ENV:/) {
|
||||
$self->{$sect}->{'nsRevocationUrl'} = 'user';
|
||||
}
|
||||
}else {
|
||||
$self->{$sect}->{'nsRevocationUrl'} = 'none';
|
||||
}
|
||||
|
||||
# store nsRenewalUrl information
|
||||
if(defined($self->{$sect}->{'nsRenewalUrl'})) {
|
||||
if($self->{$sect}->{'nsRenewalUrl'}
|
||||
=~ /ENV:/) {
|
||||
$self->{$sect}->{'nsRenewalUrl'} = 'user';
|
||||
}
|
||||
}else {
|
||||
$self->{$sect}->{'nsRenewalUrl'} = 'none';
|
||||
}
|
||||
|
||||
# store extendedKeyUsage information
|
||||
if(defined($self->{$sect}->{'extendedKeyUsage'})) {
|
||||
if($self->{$sect}->{'extendedKeyUsage'} =~ /critical/) {
|
||||
$self->{$sect}->{'extendedKeyUsageType'} = 'critical';
|
||||
$self->{$sect}->{'extendedKeyUsage'} =~ s/critical\s*,\s*//;
|
||||
}else {
|
||||
$self->{$sect}->{'extendedKeyUsageType'} = 'noncritical';
|
||||
}
|
||||
if($self->{$sect}->{'extendedKeyUsage'}
|
||||
=~ /ENV:/) {
|
||||
$self->{$sect}->{'extendedKeyUsage'} = 'user';
|
||||
}
|
||||
}else {
|
||||
$self->{$sect}->{'extendedKeyUsage'} = 'none';
|
||||
$self->{$sect}->{'extendedKeyUsageType'} = 'noncritical';
|
||||
}
|
||||
|
||||
# store keyUsage information
|
||||
if(defined($self->{$sect}->{'keyUsage'})) {
|
||||
if($self->{$sect}->{'keyUsage'} =~ /critical/) {
|
||||
$self->{$sect}->{'keyUsageType'} = 'critical';
|
||||
}else {
|
||||
$self->{$sect}->{'keyUsageType'} = 'noncritical';
|
||||
}
|
||||
if($self->{$sect}->{'keyUsage'}
|
||||
=~ /digitalSignature, keyEncipherment/) {
|
||||
$self->{$sect}->{'keyUsage'} = 'keysig';
|
||||
} elsif($self->{$sect}->{'keyUsage'}
|
||||
=~ /digitalSignature/) {
|
||||
$self->{$sect}->{'keyUsage'} = 'sig';
|
||||
} elsif($self->{$sect}->{'keyUsage'}
|
||||
=~ /keyEncipherment/) {
|
||||
$self->{$sect}->{'keyUsage'} = 'key';
|
||||
} elsif($self->{$sect}->{'keyUsage'}
|
||||
=~ /keyCertSign, cRLSign/) {
|
||||
$self->{$sect}->{'keyUsage'} = 'keyCertSign, cRLSign';
|
||||
} elsif($self->{$sect}->{'keyUsage'}
|
||||
=~ /keyCertSign/) {
|
||||
$self->{$sect}->{'keyUsage'} = 'keyCertSign';
|
||||
} elsif($self->{$sect}->{'keyUsage'}
|
||||
=~ /cRLSign/) {
|
||||
$self->{$sect}->{'keyUsage'} = 'cRLSign';
|
||||
}else {
|
||||
$self->{$sect}->{'keyUsage'} = 'none';
|
||||
}
|
||||
}else {
|
||||
$self->{$sect}->{'keyUsage'} = 'none';
|
||||
$self->{$sect}->{'keyUsageType'} = 'noncritical';
|
||||
}
|
||||
}
|
||||
|
||||
# hack to add new section to openssl.cnf, if old config
|
||||
if(not defined($self->{'ca_ca'})) {
|
||||
$self->{'ca_ca'} = $self->{'server_ca'};
|
||||
$self->{'ca_ca'}->{'x509_extensions'} = "v3_ca";
|
||||
$self->{'server_ca'}->{'x509_extensions'} = "server_cert";
|
||||
|
||||
$self->write_config($main, $ca);
|
||||
}
|
||||
if($self->{'server_ca'}->{'x509_extensions'} eq "v3_ca") {
|
||||
$self->{'server_ca'}->{'x509_extensions'} = "server_cert";
|
||||
$self->write_config($main, $ca);
|
||||
}
|
||||
|
||||
# hack to add new option
|
||||
if(not defined($self->{'ca_ca'}->{'unique_subject'})) {
|
||||
$self->{'ca_ca'}->{'unique_subject'} = "yes";
|
||||
|
||||
$self->write_config($main, $ca);
|
||||
}
|
||||
if(not defined($self->{'server_ca'}->{'unique_subject'})) {
|
||||
$self->{'server_ca'}->{'unique_subject'} = "yes";
|
||||
|
||||
$self->write_config($main, $ca);
|
||||
}
|
||||
if(not defined($self->{'client_ca'}->{'unique_subject'})) {
|
||||
$self->{'client_ca'}->{'unique_subject'} = "yes";
|
||||
|
||||
$self->write_config($main, $ca);
|
||||
}
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
sub config_ca {
|
||||
my ($self, $main, $ca) = @_;
|
||||
|
||||
my($action);
|
||||
|
||||
if(not defined($ca)) {
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
}
|
||||
if(not defined($ca)) {
|
||||
GUI::HELPERS::print_warning(_("Can't get CA name"));
|
||||
}
|
||||
|
||||
$action = GUI::TCONFIG::show_config_ca($main, $ca);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
sub config_openssl {
|
||||
my ($self, $main, $ca) = @_;
|
||||
|
||||
if(not defined($ca)) {
|
||||
$ca = $main->{'CA'}->{'actca'};
|
||||
}
|
||||
if(not defined($ca)) {
|
||||
GUI::HELPERS::print_warning(_("Can't get CA name"));
|
||||
}
|
||||
|
||||
GUI::TCONFIG::show_configbox($main, $ca);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
sub write_config {
|
||||
my ($self, $main, $ca) = @_;
|
||||
|
||||
my($file, @sections, $line, $sect, $key, $val, @opts);
|
||||
|
||||
# these sections are not configurable
|
||||
@sections = qw(
|
||||
ca
|
||||
policy_client
|
||||
policy_server
|
||||
policy_ca
|
||||
req
|
||||
req_distinguished_name
|
||||
v3_req
|
||||
req_attributes
|
||||
);
|
||||
|
||||
$file = $main->{'CA'}->{$ca}->{'cnf'};
|
||||
|
||||
open(OUT, ">$file") || do {
|
||||
GUI::HELPERS::print_warning(_("Can't open configfile"));
|
||||
return;
|
||||
};
|
||||
|
||||
foreach $sect (@sections) {
|
||||
print OUT "[ $sect ]\n";
|
||||
foreach $line (@{$self->{$sect}}) {
|
||||
print OUT "$line\n";
|
||||
}
|
||||
print OUT "\n";
|
||||
}
|
||||
|
||||
# these sections are configurable
|
||||
@sections = qw(
|
||||
v3_ca
|
||||
crl_ext
|
||||
server_ca
|
||||
client_ca
|
||||
ca_ca
|
||||
client_cert
|
||||
server_cert
|
||||
);
|
||||
|
||||
foreach $sect (@sections) {
|
||||
print OUT "[ $sect ]\n";
|
||||
if($sect eq "v3_ca") {
|
||||
@opts = qw(
|
||||
subjectKeyIdentifier
|
||||
authorityKeyIdentifier
|
||||
basicConstraints
|
||||
nsCertType
|
||||
issuerAltName
|
||||
nsComment
|
||||
crlDistributionPoints
|
||||
nsCaRevocationUrl
|
||||
nsCaPolicyUrl
|
||||
nsRevocationUrl
|
||||
nsRenewalUrl
|
||||
);
|
||||
|
||||
foreach $key (@opts) {
|
||||
if(defined($self->{$sect}->{$key}) &&
|
||||
$self->{$sect}->{$key} ne '' &&
|
||||
$self->{$sect}->{$key} ne 'none') {
|
||||
print OUT "$key = $self->{$sect}->{$key}\n";
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'subjectAltName'})) {
|
||||
if($self->{$sect}->{'subjectAltName'} eq 'emailcopy') {
|
||||
print OUT "subjectAltName = email:copy\n";
|
||||
} elsif($self->{$sect}->{'subjectAltName'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'keyUsage'})) {
|
||||
if($self->{$sect}->{'keyUsage'} eq 'keyCertSign') {
|
||||
if($self->{$sect}->{'keyUsageType'} eq 'critical') {
|
||||
print OUT "keyUsage = critical, keyCertSign\n";
|
||||
} else {
|
||||
print OUT "keyUsage = keyCertSign\n";
|
||||
}
|
||||
}elsif($self->{$sect}->{'keyUsage'} eq 'cRLSign') {
|
||||
if($self->{$sect}->{'keyUsageType'} eq 'critical') {
|
||||
print OUT "keyUsage = critical, cRLSign\n";
|
||||
}else {
|
||||
print OUT "keyUsage = cRLSign\n";
|
||||
}
|
||||
}elsif($self->{$sect}->{'keyUsage'} eq 'keyCertSign, cRLSign') {
|
||||
if($self->{$sect}->{'keyUsageType'} eq 'critical') {
|
||||
print OUT "keyUsage = critical, keyCertSign, cRLSign\n";
|
||||
}else {
|
||||
print OUT "keyUsage = keyCertSign, cRLSign\n";
|
||||
}
|
||||
}elsif($self->{$sect}->{'keyUsage'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
} elsif($sect eq "server_cert" ||
|
||||
$sect eq "client_cert") {
|
||||
@opts = qw(
|
||||
basicConstraints
|
||||
nsCertType
|
||||
nsComment
|
||||
subjectKeyIdentifier
|
||||
authorityKeyIdentifier
|
||||
issuerAltName
|
||||
crlDistributionPoints
|
||||
nsCaRevocationUrl
|
||||
nsBaseUrl
|
||||
nsCaPolicyUrl
|
||||
);
|
||||
|
||||
foreach $key (@opts) {
|
||||
if(defined($self->{$sect}->{$key}) &&
|
||||
$self->{$sect}->{$key} ne '' &&
|
||||
$self->{$sect}->{$key} ne 'none') {
|
||||
print OUT "$key = $self->{$sect}->{$key}\n";
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'nsSslServerName'})) {
|
||||
if($self->{$sect}->{'nsSslServerName'} eq 'user') {
|
||||
print OUT "nsSslServerName = \$ENV::NSSSLSERVERNAME\n";
|
||||
} elsif($self->{$sect}->{'nsSslServerName'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'nsRevocationUrl'})) {
|
||||
if($self->{$sect}->{'nsRevocationUrl'} eq 'user') {
|
||||
print OUT "nsRevocationUrl = \$ENV::NSREVOCATIONURL\n";
|
||||
} elsif($self->{$sect}->{'nsRevocationUrl'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'nsRenewalUrl'})) {
|
||||
if($self->{$sect}->{'nsRenewalUrl'} eq 'user') {
|
||||
print OUT "nsRenewalUrl = \$ENV::NSRENEWALURL\n";
|
||||
} elsif($self->{$sect}->{'nsRenewalUrl'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'subjectAltName'})) {
|
||||
if($self->{$sect}->{'subjectAltName'} eq 'user') {
|
||||
if($self->{$sect}->{'subjectAltNameType'} eq 'ip') {
|
||||
print OUT "subjectAltName = \$ENV::SUBJECTALTNAMEIP\n";
|
||||
} elsif($self->{$sect}->{'subjectAltNameType'} eq 'dns') {
|
||||
print OUT "subjectAltName = \$ENV::SUBJECTALTNAMEDNS\n";
|
||||
} elsif($self->{$sect}->{'subjectAltNameType'} eq 'mail') {
|
||||
print OUT "subjectAltName = \$ENV::SUBJECTALTNAMEEMAIL\n";
|
||||
} elsif($self->{$sect}->{'subjectAltNameType'} eq 'raw') {
|
||||
print OUT "subjectAltName = \$ENV::SUBJECTALTNAMERAW\n";
|
||||
}
|
||||
} elsif($self->{$sect}->{'subjectAltName'} eq 'emailcopy') {
|
||||
print OUT "subjectAltName = email:copy\n";
|
||||
} elsif($self->{$sect}->{'subjectAltName'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'keyUsage'})) {
|
||||
if($self->{$sect}->{'keyUsage'} eq 'key') {
|
||||
if($self->{$sect}->{'keyUsageType'} eq 'critical') {
|
||||
print OUT "keyUsage = critical, keyEncipherment\n";
|
||||
} else {
|
||||
print OUT "keyUsage = keyEncipherment\n";
|
||||
}
|
||||
}elsif($self->{$sect}->{'keyUsage'} eq 'sig') {
|
||||
if($self->{$sect}->{'keyUsageType'} eq 'critical') {
|
||||
print OUT "keyUsage = critical, digitalSignature\n";
|
||||
}else {
|
||||
print OUT "keyUsage = digitalSignature\n";
|
||||
}
|
||||
}elsif($self->{$sect}->{'keyUsage'} eq 'keysig') {
|
||||
if($self->{$sect}->{'keyUsageType'} eq 'critical') {
|
||||
print OUT "keyUsage = critical, digitalSignature, keyEncipherment\n";
|
||||
}else {
|
||||
print OUT "keyUsage = digitalSignature, keyEncipherment\n";
|
||||
}
|
||||
}elsif($self->{$sect}->{'keyUsage'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
if(defined($self->{$sect}->{'extendedKeyUsage'})) {
|
||||
if(($self->{$sect}->{'extendedKeyUsage'} ne 'none') &&
|
||||
($self->{$sect}->{'extendedKeyUsage'} ne '')) {
|
||||
if($self->{$sect}->{'extendedKeyUsage'} eq 'user') {
|
||||
if($self->{$sect}->{'extendedKeyUsageType'} eq 'critical') {
|
||||
print OUT "extendedKeyUsage = critical, \$ENV::EXTENDEDKEYUSAGE\n";
|
||||
} else {
|
||||
print OUT "extendedKeyUsage = \$ENV::EXTENDEDKEYUSAGE\n";
|
||||
}
|
||||
} else {
|
||||
if($self->{$sect}->{'extendedKeyUsageType'} eq 'critical') {
|
||||
print OUT "extendedKeyUsage = critical, $self->{$sect}->{'extendedKeyUsage'}\n";
|
||||
} else {
|
||||
print OUT "extendedKeyUsage = $self->{$sect}->{'extendedKeyUsage'}\n";
|
||||
}
|
||||
}
|
||||
} elsif ($self->{$sect}->{'extendedKeyUsage'} eq 'none') {
|
||||
;# do nothing
|
||||
}
|
||||
}
|
||||
} elsif(($sect eq "server_ca") ||
|
||||
($sect eq "client_ca") ||
|
||||
($sect eq "ca_ca")) {
|
||||
@opts = qw(
|
||||
dir
|
||||
certs
|
||||
crl_dir
|
||||
database
|
||||
new_certs_dir
|
||||
certificate
|
||||
serial
|
||||
crl
|
||||
private_key
|
||||
RANDFILE
|
||||
x509_extensions
|
||||
default_days
|
||||
default_crl_days
|
||||
default_md
|
||||
preserve
|
||||
policy
|
||||
unique_subject
|
||||
);
|
||||
|
||||
foreach $key (@opts) {
|
||||
if(defined($self->{$sect}->{$key}) &&
|
||||
$self->{$sect}->{$key} ne '' &&
|
||||
$self->{$sect}->{$key} ne 'none') {
|
||||
print OUT "$key = $self->{$sect}->{$key}\n";
|
||||
}
|
||||
}
|
||||
} else {
|
||||
while(($key, $val) = each(%{$self->{$sect}})) {
|
||||
if(defined($val) && $val ne "") {
|
||||
print OUT "$key = $val\n";
|
||||
}
|
||||
}
|
||||
}
|
||||
print OUT "\n";
|
||||
}
|
||||
|
||||
close OUT;
|
||||
|
||||
# print STDERR "DEBUG: wrote config and reinit\n";
|
||||
# $self->init_config($main, $ca);
|
||||
|
||||
return;
|
||||
}
|
||||
|
||||
1
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
POTFILES=$(wildcard ../lib/*.pm) $(wildcard ../lib/GUI/*.pm) ../tinyca2
|
||||
CATALOGS=de.mo es.mo cs.mo fr.mo sv.mo
|
||||
|
||||
all: $(CATALOGS)
|
||||
|
||||
.po.mo:
|
||||
msgfmt -o $@ $<
|
||||
install -m 644 $@ ../locale/`basename $@ .mo`/LC_MESSAGES/tinyca2.mo
|
||||
|
||||
%.po: tinyca2.pot
|
||||
msgmerge -vU $@ tinyca2.pot
|
||||
|
||||
tinyca2.pot: $(POTFILES)
|
||||
xgettext --add-comments \
|
||||
--keyword=_ \
|
||||
--keyword=N_ \
|
||||
--language=C \
|
||||
-o tinyca2.pot \
|
||||
$(POTFILES); \
|
||||
|
||||
clean:
|
||||
rm -f $(CATALOGS)
|
||||
rm -f tinyca2.pot
|
||||
|
||||
.SUFFIXES: .po .pot .mo
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,147 @@
|
|||
[ ca ]
|
||||
default_ca = server_ca
|
||||
|
||||
[ client_ca ]
|
||||
dir = %dir%
|
||||
certs = $dir/certs
|
||||
crl_dir = $dir/crl
|
||||
database = $dir/index.txt
|
||||
new_certs_dir = $dir/newcerts
|
||||
certificate = $dir/cacert.pem
|
||||
serial = $dir/serial
|
||||
crl = $dir/crl.pem
|
||||
private_key = $dir/cacert.key
|
||||
RANDFILE = $dir/.rand
|
||||
x509_extensions = client_cert
|
||||
default_days = 365
|
||||
default_crl_days= 30
|
||||
default_md = sha1
|
||||
preserve = no
|
||||
policy = policy_client
|
||||
|
||||
[ server_ca ]
|
||||
dir = %dir%
|
||||
certs = $dir/certs
|
||||
crl_dir = $dir/crl
|
||||
database = $dir/index.txt
|
||||
new_certs_dir = $dir/newcerts
|
||||
certificate = $dir/cacert.pem
|
||||
serial = $dir/serial
|
||||
crl = $dir/crl.pem
|
||||
private_key = $dir/cacert.key
|
||||
RANDFILE = $dir/.rand
|
||||
x509_extensions = server_cert
|
||||
default_days = 365
|
||||
default_crl_days= 30
|
||||
default_md = sha1
|
||||
preserve = no
|
||||
policy = policy_server
|
||||
|
||||
[ ca_ca ]
|
||||
dir = %dir%
|
||||
certs = $dir/certs
|
||||
crl_dir = $dir/crl
|
||||
database = $dir/index.txt
|
||||
new_certs_dir = $dir/newcerts
|
||||
certificate = $dir/cacert.pem
|
||||
serial = $dir/serial
|
||||
crl = $dir/crl.pem
|
||||
private_key = $dir/cacert.key
|
||||
RANDFILE = $dir/.rand
|
||||
x509_extensions = v3_ca
|
||||
default_days = 365
|
||||
default_crl_days= 30
|
||||
default_md = sha1
|
||||
preserve = no
|
||||
policy = policy_ca
|
||||
|
||||
[ policy_client ]
|
||||
countryName = optional
|
||||
stateOrProvinceName = optional
|
||||
organizationName = optional
|
||||
organizationalUnitName = optional
|
||||
commonName = supplied
|
||||
emailAddress = optional
|
||||
|
||||
[ policy_server ]
|
||||
countryName = optional
|
||||
stateOrProvinceName = optional
|
||||
organizationName = optional
|
||||
organizationalUnitName = optional
|
||||
commonName = supplied
|
||||
emailAddress = optional
|
||||
|
||||
[ policy_ca ]
|
||||
countryName = optional
|
||||
stateOrProvinceName = optional
|
||||
organizationName = optional
|
||||
organizationalUnitName = optional
|
||||
commonName = supplied
|
||||
emailAddress = optional
|
||||
|
||||
[ req ]
|
||||
default_bits = 4096
|
||||
default_keyfile = privkey.pem
|
||||
distinguished_name = req_distinguished_name
|
||||
attributes = req_attributes
|
||||
x509_extensions = v3_ca
|
||||
string_mask = nombstr
|
||||
req_extensions = v3_req
|
||||
|
||||
[ req_distinguished_name ]
|
||||
countryName = Country Name (2 letter code)
|
||||
countryName_default = AU
|
||||
countryName_min = 2
|
||||
countryName_max = 2
|
||||
stateOrProvinceName = State or Province Name (full name)
|
||||
stateOrProvinceName_default = Some-State
|
||||
localityName = Locality Name (eg, city)
|
||||
0.organizationName = Organization Name (eg, company)
|
||||
0.organizationName_default = Internet Widgits Pty Ltd
|
||||
organizationalUnitName = Organizational Unit Name (eg, section)
|
||||
commonName = Common Name (eg, YOUR name)
|
||||
commonName_max = 64
|
||||
emailAddress = Email Address
|
||||
emailAddress_max = 40
|
||||
|
||||
[ v3_req ]
|
||||
basicConstraints = CA:FALSE
|
||||
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||||
|
||||
[ req_attributes ]
|
||||
challengePassword = A challenge password
|
||||
challengePassword_min = 4
|
||||
challengePassword_max = 20
|
||||
unstructuredName = An optional company name
|
||||
|
||||
[ client_cert ]
|
||||
basicConstraints=CA:FALSE
|
||||
nsCertType = client, email, objsign
|
||||
nsComment = "TinyCA Generated Certificate"
|
||||
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
||||
subjectKeyIdentifier=hash
|
||||
authorityKeyIdentifier=keyid,issuer:always
|
||||
subjectAltName=email:copy
|
||||
issuerAltName=issuer:copy
|
||||
|
||||
[ server_cert ]
|
||||
basicConstraints=CA:FALSE
|
||||
nsCertType = server
|
||||
nsComment = "TinyCA Generated Certificate"
|
||||
subjectKeyIdentifier=hash
|
||||
authorityKeyIdentifier=keyid,issuer:always
|
||||
subjectAltName=email:copy
|
||||
issuerAltName=issuer:copy
|
||||
|
||||
[ v3_ca ]
|
||||
nsComment = "TinyCA Generated Certificate"
|
||||
subjectKeyIdentifier=hash
|
||||
authorityKeyIdentifier=keyid:always,issuer:always
|
||||
basicConstraints = critical,CA:true
|
||||
keyUsage = keyCertSign, cRLSign
|
||||
nsCertType = sslCA, emailCA
|
||||
subjectAltName=email:copy
|
||||
issuerAltName=issuer:copy
|
||||
|
||||
[ crl_ext ]
|
||||
authorityKeyIdentifier=keyid:always,issuer:always
|
||||
|
|
@ -0,0 +1,115 @@
|
|||
#!/usr/bin/perl -w
|
||||
#
|
||||
# $Id: tinyca2,v 1.6 2006/07/04 19:53:16 sm Exp $
|
||||
#
|
||||
# Copyright (c) Stephan Martin <sm@sm-zone.net>
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation; either version 2 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111, USA.
|
||||
|
||||
BEGIN { unshift(@INC, './lib'); # put here the location of the modules
|
||||
}
|
||||
|
||||
use strict;
|
||||
|
||||
use Gtk2 '-init';
|
||||
|
||||
use MIME::Base64;
|
||||
|
||||
use POSIX;
|
||||
use Locale::gettext;
|
||||
|
||||
use OpenSSL;
|
||||
use CA;
|
||||
use GUI;
|
||||
use HELPERS;
|
||||
use GUI::TCONFIG;
|
||||
use GUI::HELPERS;
|
||||
use GUI::CALLBACK;
|
||||
use GUI::WORDS;
|
||||
use GUI::X509_infobox;
|
||||
use GUI::X509_browser;
|
||||
use CERT;
|
||||
use REQ;
|
||||
use KEY;
|
||||
use TCONFIG;
|
||||
|
||||
setlocale(LC_MESSAGES, "");
|
||||
bindtextdomain("tinyca2", "./locale/");
|
||||
textdomain("tinyca2");
|
||||
|
||||
# https://bugs.gentoo.org/show_bug.cgi?id=78576
|
||||
$ENV{XLIB_SKIP_ARGB_VISUALS}= '1';
|
||||
|
||||
my $init = {};
|
||||
|
||||
# location of openssl
|
||||
$init->{'opensslbin'} = "/usr/bin/openssl";
|
||||
$init->{'zipbin'} = "/usr/bin/zip";
|
||||
$init->{'tarbin'} = "/bin/tar";
|
||||
|
||||
if(not -x $init->{'opensslbin'}) {
|
||||
printf(gettext("Can't execute %s.\n"), $init->{'opensslbin'});
|
||||
print gettext("Configure correct path to openssl in tinyca.\n");
|
||||
exit(1);
|
||||
}
|
||||
|
||||
if(not -x $init->{'zipbin'}) {
|
||||
print gettext("zip command not found, support disabled.\n");
|
||||
print gettext("Configure correct path to zip in tinyca.\n");
|
||||
}
|
||||
|
||||
if(not -x $init->{'tarbin'}) {
|
||||
print gettext("tar command not found, support disabled.\n");
|
||||
print gettext("Configure correct path to tar in tinyca.\n");
|
||||
}
|
||||
|
||||
# directory with the templates
|
||||
$init->{'templatedir'} = "./templates";
|
||||
|
||||
if(not -d $init->{'templatedir'}) {
|
||||
print gettext("Can't find templatedir.\n");
|
||||
print gettext("Please configure correct path with templates in tinyca.\n");
|
||||
exit(1);
|
||||
}
|
||||
|
||||
# location for CA files
|
||||
$init->{'basedir'} = $ENV{HOME}."/.TinyCA";
|
||||
$init->{'exportdir'} = $ENV{HOME};
|
||||
|
||||
umask(0077);
|
||||
|
||||
# create main object and initialize CA
|
||||
my $gui = GUI->new($init);
|
||||
|
||||
# and now run...
|
||||
$gui->{'mw'}->show_all();
|
||||
|
||||
# decide what to do on startup
|
||||
if(@{$gui->{'CA'}->{'calist'}}) {
|
||||
$gui->{'CA'}->get_open_name($gui);
|
||||
} else {
|
||||
$gui->{'CA'}->get_ca_create($gui);
|
||||
}
|
||||
|
||||
sub _ {
|
||||
my $s = gettext(@_);
|
||||
utf8::decode($s);
|
||||
return($s);
|
||||
}
|
||||
|
||||
Gtk2->main();
|
||||
|
||||
exit(0);
|
||||
|
||||
|
|
@ -0,0 +1,38 @@
|
|||
[Desktop Entry]
|
||||
Encoding=UTF-8
|
||||
Type=Application
|
||||
GenericName=Tool to manage a Certification Authority
|
||||
Name=TinyCA2
|
||||
Exec=tinyca2
|
||||
|
||||
Categories=Network;Security
|
||||
GenericName[bg]=GenericName(tinyca.desktop): Управление на сертификационните регистри (Certification Authority)
|
||||
Name[cs]=TinyCA2
|
||||
GenericName[cs]=Nástroj pro správu certifikační autority
|
||||
Name[de]=TinyCA2
|
||||
GenericName[de]=Werkzeug zum Verwalten einer Certification Authority
|
||||
Name[es]=TinyCA2
|
||||
GenericName[es]=Herramienta para gestionar autoridades certificadoras
|
||||
Name[fr]=TinyCA2
|
||||
GenericName[fr]=Outil de gestion d'une autorité de certification
|
||||
Name[hu]=TinyCA2
|
||||
GenericName[hu]=CA (Certification Authority) kezelő segédeszköz
|
||||
Name[it]=TinyCA2
|
||||
GenericName[it]=Tool d'amministrazione per una certification authority
|
||||
Name[ja]=TinyCA2
|
||||
GenericName[ja]=認証局の管理ツール
|
||||
Name[nb]=TinyCA2
|
||||
GenericName[nb]=Administrasjonsverktøy for sertifikater
|
||||
Name[nl]=TinyCA2
|
||||
GenericName[nl]=Programma om een certificaat autoriteit te beheren
|
||||
Name[pl]=TinyCA2
|
||||
GenericName[pl]=Narzędzie do zarządzania centrum certyfikacyjnym
|
||||
Name[pt_BR]=TinyCA2
|
||||
GenericName[pt_BR]=Ferramenta para gerenciar uma Autoridade de Certificação
|
||||
Name[sk]=TinyCA2
|
||||
GenericName[sk]=Nástroj pre správu certifikačnej autority
|
||||
Name[zh_CN]=TinyCA2
|
||||
GenericName[zh_CN]=管理证书授权者的工具
|
||||
Name[zh_TW]=TinyCA2
|
||||
GenericName[zh_TW]=管理認證授權的工具
|
||||
X-SuSE-translate=true
|
||||
|
|
@ -0,0 +1,170 @@
|
|||
# spec file for package tinyca
|
||||
#
|
||||
# $Id: tinyca2.spec,v 1.9 2006/07/25 20:10:54 sm Exp $
|
||||
#
|
||||
# Copyright (c) 2002 Stephan Martin
|
||||
# This file and all modifications and additions to the pristine
|
||||
# package are under the same license as the package itself.
|
||||
#
|
||||
|
||||
%define bindir %{_bindir}
|
||||
%define libdir %{_datadir}/TinyCA2/lib
|
||||
%define templatesdir %{_datadir}/TinyCA2/templates
|
||||
%define localedir %{_datadir}/TinyCA2/locale/
|
||||
|
||||
Name: tinyca2
|
||||
URL: http://tinyca.sm-zone.net/
|
||||
Group: Productivity/Networking/Security
|
||||
License: GPL
|
||||
Requires: perl perl-Gtk2 perl-MIME-Base64
|
||||
Packager: Stephan Martin <sm@sm-zone.net>
|
||||
Version: @version@
|
||||
Release: 0
|
||||
Source0: %{name}-%{version}.tar.gz
|
||||
Source1: %{name}.desktop
|
||||
Summary: Graphical Tool for Managing a Certification Authority
|
||||
BuildArch: noarch
|
||||
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||
|
||||
%description
|
||||
TinyCA is a graphical tool written in Perl/Gtk to manage a small
|
||||
Certification Authority (CA) using openssl.
|
||||
|
||||
TinyCA supports - creation and revocation of x509 - S/MIME
|
||||
certificates.
|
||||
|
||||
- PKCS#10 requests.
|
||||
|
||||
- exporting certificates as PEM, DER, TXT, and PKCS#12.
|
||||
|
||||
- server certificates for use in web servers, email servers, IPsec,
|
||||
and more.
|
||||
|
||||
- client certificates for use in web browsers, email clients, IPsec,
|
||||
and more.
|
||||
|
||||
- creation and management of SubCAs
|
||||
|
||||
|
||||
Authors:
|
||||
--------
|
||||
Stephan Martin <sm@sm-zone.net>
|
||||
|
||||
%prep
|
||||
%setup
|
||||
|
||||
%build
|
||||
# Configure pristine source
|
||||
perl -pi -e 's:./lib:%{libdir}:g' tinyca2
|
||||
perl -pi -e 's:./templates:%{templatesdir}:g' tinyca2
|
||||
perl -pi -e 's:./locale:%{localedir}:g' tinyca2
|
||||
make -C po
|
||||
|
||||
%install
|
||||
[ "$RPM_BUILD_ROOT" != "/" ] && [ -d $RPM_BUILD_ROOT ] && rm -rf $RPM_BUILD_ROOT;
|
||||
|
||||
LANGUAGES="de es cs fr sv"
|
||||
|
||||
mkdir -p $RPM_BUILD_ROOT%{bindir}
|
||||
mkdir -p $RPM_BUILD_ROOT%{libdir}
|
||||
mkdir -p $RPM_BUILD_ROOT%{libdir}/GUI
|
||||
mkdir -p $RPM_BUILD_ROOT%{templatesdir}
|
||||
|
||||
install -m 644 lib/*.pm $RPM_BUILD_ROOT%{libdir}
|
||||
install -m 644 lib/GUI/*.pm $RPM_BUILD_ROOT%{libdir}/GUI/
|
||||
install -m 644 templates/openssl.cnf $RPM_BUILD_ROOT%{templatesdir}
|
||||
install -m 755 tinyca2 $RPM_BUILD_ROOT%{bindir}
|
||||
mkdir -p $RPM_BUILD_ROOT/usr/share/applications/
|
||||
install -m 644 tinyca2.desktop $RPM_BUILD_ROOT/usr/share/applications/
|
||||
|
||||
for LANG in $LANGUAGES; do
|
||||
mkdir -p $RPM_BUILD_ROOT%{localedir}/$LANG/LC_MESSAGES/
|
||||
install -m 644 locale/$LANG/LC_MESSAGES/tinyca2.mo %{buildroot}%{localedir}/$LANG/LC_MESSAGES/
|
||||
done
|
||||
|
||||
%clean
|
||||
rm -rf %{buildroot}
|
||||
|
||||
%files
|
||||
%defattr(-,root,root)
|
||||
%doc CHANGES
|
||||
%dir %{_datadir}/TinyCA2
|
||||
%{bindir}/tinyca2
|
||||
%{_datadir}/TinyCA2/*
|
||||
%{_datadir}/applications/*
|
||||
|
||||
%changelog
|
||||
* Sun Dec 5 2004 - sm@sm-zone.net
|
||||
- import functioins added
|
||||
* Fri Aug 13 2004 - sm@sm-zone.net
|
||||
- czech translation
|
||||
* Sun Jun 13 2004 - sm@sm-zone.net
|
||||
- gui polishing
|
||||
- code cleanup
|
||||
- some usability improvements
|
||||
* Wed Jun 2 2004 - sm@sm-zone.net
|
||||
- gui polishing
|
||||
- GUI module splitted to several files
|
||||
* Fri Oct 3 2003 - sm@sm-zone.net
|
||||
- added a lot of configuration options
|
||||
- correctly import/show details of requests without extensions
|
||||
(thanks to James.Leavitt@anywaregroup.com)
|
||||
* Mon Sep 1 2003 - sm@sm-zone.net
|
||||
- added renewal of certificates
|
||||
* Wed Aug 13 2003 - sm@sm-zone.net
|
||||
- rewite, now using perl-Gtk
|
||||
* Sat Jul 5 2003 - sm@sm-zone.net
|
||||
- added german translation
|
||||
* Tue Jul 1 2003 - sm@sm-zone.net
|
||||
- convert index.txt if openssl changed from 0.9.6x to 0.9.7x
|
||||
* Fri Jun 27 2003 - sm@sm-zone.net
|
||||
- added export into zip-file
|
||||
thanks to ludwig.nussel@suse.de
|
||||
* Mon Jun 23 2003 - sm@sm-zone.net
|
||||
- some tiny usability improvements
|
||||
thanks to ludwig.nussel@suse.de again
|
||||
* Thu Jun 19 2003 - sm@sm-zone.net
|
||||
- some usability improvements
|
||||
thanks to ludwig.nussel@suse.de
|
||||
- some more configuration options
|
||||
* Fri Oct 4 2002 - sm@sm-zone.net
|
||||
- Fixed bug exporting keys in PEM format
|
||||
- Fixed possible empty lines in cert/key/reqlist
|
||||
thanks to waldemar.mertke@gmx.de
|
||||
* Fri Sep 27 2002 - sm@sm-zone.net
|
||||
- fixed some minor bugs and typos (e.g. concerning openssl 0.9.7)
|
||||
thanks to iebgener@yahoo.com and waldemar.mertke@gmx.de
|
||||
* Wed Aug 21 2002 - sm@sm-zone.net
|
||||
- fixed revocation
|
||||
- added some colors
|
||||
- thanks to curly@e-card.bg
|
||||
* Sun Aug 18 2002 - sm@sm-zone.net
|
||||
- new version 0.4.0
|
||||
- works independent of OpenCA modules now
|
||||
- some enhancements to functionality (e.g. export of key without
|
||||
passwd)
|
||||
- some smaller bugfixes in usability
|
||||
- new specfile (thanks to oron@actcom.co.il)
|
||||
* Thu Jun 6 2002 - Oron Peled <oron@actcom.co.il>
|
||||
- Cleaned .spec file
|
||||
* Mon Jun 3 2002 - sm@sm-zone.net
|
||||
- fixed wrong templatedir when creating new CA
|
||||
* Sun Jun 2 2002 - sm@sm-zone.net
|
||||
- fixed some minor bugs and typos
|
||||
* Sat May 11 2002 - sm@sm-zone.net
|
||||
- Added parser for x509 extensions
|
||||
* Fri May 03 2002 - sm@sm-zone.net
|
||||
- added possibility to view requests/certificates
|
||||
* Thu Apr 18 2002 - sm@sm-zone.net
|
||||
- added configuration
|
||||
* Sun Apr 7 2002 - sm@sm-zone.net
|
||||
- improved usability
|
||||
* Sun Mar 31 2002 - sm@sm-zone.net
|
||||
- added function to delete ca
|
||||
* Sat Mar 30 2002 - sm@sm-zone.net
|
||||
- allow import of pkcs#10 requests
|
||||
* Thu Mar 21 2002 - sm@sm-zone.et
|
||||
- use different listboxes
|
||||
* Mon Mar 18 2002 - sm@sm-zone.net
|
||||
- initial package
|
||||
|
||||
Loading…
Reference in New Issue