1 /**************************************************************
2  *
3  * Licensed to the Apache Software Foundation (ASF) under one
4  * or more contributor license agreements.  See the NOTICE file
5  * distributed with this work for additional information
6  * regarding copyright ownership.  The ASF licenses this file
7  * to you under the Apache License, Version 2.0 (the
8  * "License"); you may not use this file except in compliance
9  * with the License.  You may obtain a copy of the License at
10  *
11  *   http://www.apache.org/licenses/LICENSE-2.0
12  *
13  * Unless required by applicable law or agreed to in writing,
14  * software distributed under the License is distributed on an
15  * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
16  * KIND, either express or implied.  See the License for the
17  * specific language governing permissions and limitations
18  * under the License.
19  *
20  *************************************************************/
21 
22 
23 
24 // MARKER(update_precomp.py): autogen include statement, do not remove
25 #include "precompiled_xmlsecurity.hxx"
26 
27 #include <stdio.h>
28 #include "helper.hxx"
29 
30 #include "libxml/tree.h"
31 #include "libxml/parser.h"
32 #ifndef XMLSEC_NO_XSLT
33 #include "libxslt/xslt.h"
34 #endif
35 
36 #include "securityenvironment_nssimpl.hxx"
37 
38 #include <xmlsecurity/biginteger.hxx>
39 
40 
41 #include "nspr.h"
42 #include "prtypes.h"
43 
44 #include "pk11func.h"
45 #include "cert.h"
46 #include "cryptohi.h"
47 #include "certdb.h"
48 #include "nss.h"
49 
50 #include "xmlsec/strings.h"
51 #include "xmlsec/xmltree.h"
52 
53 #include <rtl/ustring.hxx>
54 
55 using namespace ::rtl ;
56 using namespace ::cppu ;
57 using namespace ::com::sun::star::uno ;
58 using namespace ::com::sun::star::io ;
59 using namespace ::com::sun::star::ucb ;
60 using namespace ::com::sun::star::beans ;
61 using namespace ::com::sun::star::document ;
62 using namespace ::com::sun::star::lang ;
63 using namespace ::com::sun::star::security ;
64 using namespace ::com::sun::star::xml::wrapper ;
65 using namespace ::com::sun::star::xml::crypto ;
66 
main(int argc,char ** argv)67 int SAL_CALL main( int argc, char **argv )
68 {
69 	CERTCertDBHandle*	certHandle ;
70 	PK11SlotInfo*		slot ;
71 
72 	if( argc != 3 ) {
73 		fprintf( stderr, "Usage: %s < CertDir > <rdb file>\n\n" , argv[0] ) ;
74 		return 1 ;
75 	}
76 
77 	for( ; getchar() != 'q' ; ) {
78 		slot = NULL ;
79 
80 	//Initialize NSPR and NSS
81 	PR_Init( PR_SYSTEM_THREAD, PR_PRIORITY_NORMAL, 1 ) ;
82 	PK11_SetPasswordFunc( PriPK11PasswordFunc ) ;
83 	if( NSS_Init( argv[1] ) != SECSuccess ) {
84 		fprintf( stderr , "### cannot initialize NSS!\n" ) ;
85 		goto done ;
86 	}
87 
88 	certHandle = CERT_GetDefaultCertDB() ;
89 	slot = PK11_GetInternalKeySlot() ;
90 
91 	if( PK11_NeedLogin( slot ) ) {
92 		SECStatus nRet = PK11_Authenticate( slot, PR_TRUE, NULL );
93 		if( nRet != SECSuccess ) {
94 			fprintf( stderr , "### cannot authehticate the crypto token!\n" ) ;
95 			goto done ;
96 		}
97 	}
98 
99 
100 	try {
101 		Reference< XMultiComponentFactory > xManager = NULL ;
102 		Reference< XComponentContext > xContext = NULL ;
103 
104 		xManager = serviceManager( xContext , OUString::createFromAscii( "local" ), OUString::createFromAscii( argv[2] ) ) ;
105 		OSL_ENSURE( xManager.is() ,
106 			"ServicesManager - "
107 			"Cannot get service manager" ) ;
108 
109 		//Create security environment
110 		//Build Security Environment
111 		Reference< XInterface > xsecenv =
112 			xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.SecurityEnvironment_NssImpl"), xContext ) ;
113 		OSL_ENSURE( xsecenv.is() ,
114 			"Signer - "
115 			"Cannot get service instance of \"xsec.SecurityEnvironment\"" ) ;
116 
117 		Reference< XSecurityEnvironment > xSecEnv( xsecenv , UNO_QUERY ) ;
118 		OSL_ENSURE( xSecEnv.is() ,
119 			"Signer - "
120 			"Cannot get interface of \"XSecurityEnvironment\" from service \"xsec.SecurityEnvironment\"" ) ;
121 
122 		//Setup key slot and certDb
123 		Reference< XUnoTunnel > xEnvTunnel( xsecenv , UNO_QUERY ) ;
124 		OSL_ENSURE( xEnvTunnel.is() ,
125 			"Signer - "
126 			"Cannot get interface of \"XUnoTunnel\" from service \"xsec.SecurityEnvironment\"" ) ;
127 
128 		SecurityEnvironment_NssImpl* pSecEnv = ( SecurityEnvironment_NssImpl* )xEnvTunnel->getSomething( SecurityEnvironment_NssImpl::getUnoTunnelId() ) ;
129 		OSL_ENSURE( pSecEnv != NULL ,
130 			"Signer - "
131 			"Cannot get implementation of \"xsec.SecurityEnvironment\"" ) ;
132 
133 		pSecEnv->setCryptoSlot( slot ) ;
134 		pSecEnv->setCertDb( certHandle ) ;
135 
136 		//Get personal certificate
137 		Sequence < Reference< XCertificate > > xPersonalCerts = pSecEnv->getPersonalCertificates() ;
138 		Sequence < Reference< XCertificate > > xCertPath ;
139 		for( int i = 0; i < xPersonalCerts.getLength(); i ++ ) {
140 			//Print the certificate infomation.
141 			fprintf( stdout, "\nPersonal Certificate Info\n" ) ;
142 			fprintf( stdout, "\tCertificate Issuer[%s]\n", OUStringToOString( xPersonalCerts[i]->getIssuerName(), RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
143 			fprintf( stdout, "\tCertificate Serial Number[%s]\n", OUStringToOString( bigIntegerToNumericString( xPersonalCerts[i]->getSerialNumber() ), RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
144 			fprintf( stdout, "\tCertificate Subject[%s]\n", OUStringToOString( xPersonalCerts[i]->getSubjectName(), RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
145 
146 			//build the certificate path
147 			xCertPath = pSecEnv->buildCertificatePath( xPersonalCerts[i] ) ;
148 			//Print the certificate path.
149 			fprintf( stdout, "\tCertificate Path\n" ) ;
150 			for( int j = 0; j < xCertPath.getLength(); j ++ ) {
151 				fprintf( stdout, "\t\tCertificate Authority Subject[%s]\n", OUStringToOString( xCertPath[j]->getSubjectName(), RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
152 			}
153 
154 			//Get the certificate
155 			Sequence < sal_Int8 > serial = xPersonalCerts[i]->getSerialNumber() ;
156 			Reference< XCertificate > xcert = pSecEnv->getCertificate( xPersonalCerts[i]->getIssuerName(), xPersonalCerts[i]->getSerialNumber() ) ;
157 			if( !xcert.is() ) {
158 				fprintf( stdout, "The personal certificate is not in the certificate database\n" ) ;
159 			}
160 
161 			//Get the certificate characters
162 			sal_Int32 chars = pSecEnv->getCertificateCharacters( xPersonalCerts[i] ) ;
163 			fprintf( stdout, "The certificate characters are %d\n", chars ) ;
164 
165 			//Get the certificate status
166 			sal_Int32 validity = pSecEnv->verifyCertificate( xPersonalCerts[i] ) ;
167 			fprintf( stdout, "The certificate validities are %d\n", validity ) ;
168 		}
169 	} catch( Exception& e ) {
170 		fprintf( stderr , "Error Message: %s\n" , OUStringToOString( e.Message , RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
171 		goto done ;
172 	}
173 
174 done:
175 	if( slot != NULL )
176 		PK11_FreeSlot( slot ) ;
177 
178 	PK11_LogoutAll() ;
179 	NSS_Shutdown() ;
180 
181 	}
182 
183 	return 0;
184 }
185 
186