xref: /trunk/main/xmlsecurity/tools/standalone/csfit/signer.cxx (revision cdf0e10c4e3984b49a9502b011690b615761d4a3)
1 /*************************************************************************
2  *
3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
4  *
5  * Copyright 2000, 2010 Oracle and/or its affiliates.
6  *
7  * OpenOffice.org - a multi-platform office productivity suite
8  *
9  * This file is part of OpenOffice.org.
10  *
11  * OpenOffice.org is free software: you can redistribute it and/or modify
12  * it under the terms of the GNU Lesser General Public License version 3
13  * only, as published by the Free Software Foundation.
14  *
15  * OpenOffice.org is distributed in the hope that it will be useful,
16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18  * GNU Lesser General Public License version 3 for more details
19  * (a copy is included in the LICENSE file that accompanied this code).
20  *
21  * You should have received a copy of the GNU Lesser General Public License
22  * version 3 along with OpenOffice.org.  If not, see
23  * <http://www.openoffice.org/license.html>
24  * for a copy of the LGPLv3 License.
25  *
26  ************************************************************************/
27 
28 // MARKER(update_precomp.py): autogen include statement, do not remove
29 #include "precompiled_xmlsecurity.hxx"
30 
31 #include <stdio.h>
32 #include "helper.hxx"
33 
34 #include "libxml/tree.h"
35 #include "libxml/parser.h"
36 #ifndef XMLSEC_NO_XSLT
37 #include "libxslt/xslt.h"
38 #endif
39 
40 #include "securityenvironment_nssimpl.hxx"
41 #include "xmlelementwrapper_xmlsecimpl.hxx"
42 
43 #include "nspr.h"
44 #include "prtypes.h"
45 
46 #include "pk11func.h"
47 #include "cert.h"
48 #include "cryptohi.h"
49 #include "certdb.h"
50 #include "nss.h"
51 
52 #include "xmlsec/strings.h"
53 #include "xmlsec/xmltree.h"
54 
55 #include <rtl/ustring.hxx>
56 
57 #include <com/sun/star/beans/PropertyValue.hpp>
58 #include <com/sun/star/xml/wrapper/XXMLElementWrapper.hpp>
59 #include <com/sun/star/xml/wrapper/XXMLDocumentWrapper.hpp>
60 #include <com/sun/star/xml/crypto/XXMLSignature.hpp>
61 #include <com/sun/star/xml/crypto/XXMLSignatureTemplate.hpp>
62 #include <com/sun/star/xml/crypto/XXMLSecurityContext.hpp>
63 #include <com/sun/star/xml/crypto/XSecurityEnvironment.hpp>
64 
65 using namespace ::rtl ;
66 using namespace ::cppu ;
67 using namespace ::com::sun::star::uno ;
68 using namespace ::com::sun::star::io ;
69 using namespace ::com::sun::star::ucb ;
70 using namespace ::com::sun::star::beans ;
71 using namespace ::com::sun::star::document ;
72 using namespace ::com::sun::star::lang ;
73 using namespace ::com::sun::star::xml::wrapper ;
74 using namespace ::com::sun::star::xml::crypto ;
75 
76 
77 int SAL_CALL main( int argc, char **argv )
78 {
79     CERTCertDBHandle*   certHandle ;
80     PK11SlotInfo*       slot ;
81     xmlDocPtr           doc ;
82     xmlNodePtr          tplNode ;
83     xmlNodePtr          tarNode ;
84     xmlAttrPtr          idAttr ;
85     xmlChar*            idValue ;
86     xmlAttrPtr          uriAttr ;
87     xmlChar*            uriValue ;
88     OUString*           uri ;
89     Reference< XUriBinding >    xUriBinding ;
90     FILE*               dstFile ;
91 
92     if( argc != 5 ) {
93         fprintf( stderr, "Usage: %s < CertDir > <file_url of template> <file_url of result> <rdb file>\n\n" , argv[0] ) ;
94         return 1 ;
95     }
96 
97     for( int hhh = 0 ; hhh < 10 ; hhh ++ ) {
98         slot = NULL ;
99         doc = NULL ;
100         uri = NULL ;
101         dstFile = NULL ;
102 
103 
104     //Init libxml and libxslt libraries
105     xmlInitParser();
106     LIBXML_TEST_VERSION
107     xmlLoadExtDtdDefaultValue = XML_DETECT_IDS | XML_COMPLETE_ATTRS;
108     xmlSubstituteEntitiesDefault(1);
109 
110     #ifndef XMLSEC_NO_XSLT
111     xmlIndentTreeOutput = 1;
112     #endif // XMLSEC_NO_XSLT
113 
114 
115     //Initialize NSPR and NSS
116     PR_Init( PR_SYSTEM_THREAD, PR_PRIORITY_NORMAL, 1 ) ;
117     PK11_SetPasswordFunc( PriPK11PasswordFunc ) ;
118     if( NSS_Init( argv[1] ) != SECSuccess ) {
119         fprintf( stderr , "### cannot intialize NSS!\n" ) ;
120         goto done ;
121     }
122 
123     certHandle = CERT_GetDefaultCertDB() ;
124     slot = PK11_GetInternalKeySlot() ;
125 
126     if( PK11_NeedLogin( slot ) ) {
127         SECStatus nRet = PK11_Authenticate( slot, PR_TRUE, NULL );
128         if( nRet != SECSuccess ) {
129             fprintf( stderr , "### cannot authehticate the crypto token!\n" ) ;
130             goto done ;
131         }
132     }
133 
134     //Load XML document
135     doc = xmlParseFile( argv[2] ) ;
136     if( doc == NULL || xmlDocGetRootElement( doc ) == NULL ) {
137         fprintf( stderr , "### Cannot load template xml document!\n" ) ;
138         goto done ;
139     }
140 
141     //Find the signature template
142     tplNode = xmlSecFindNode( xmlDocGetRootElement( doc ), xmlSecNodeSignature, xmlSecDSigNs ) ;
143     if( tplNode == NULL ) {
144         fprintf( stderr , "### Cannot find the signature template!\n" ) ;
145         goto done ;
146     }
147 
148     //Find the element with ID attribute
149     //Here we only try to find the "document" node.
150     tarNode = xmlSecFindNode( xmlDocGetRootElement( doc ), ( xmlChar* )"document", ( xmlChar* )"http://openoffice.org/2000/office" ) ;
151     if( tarNode == NULL ) {
152         tarNode = xmlSecFindNode( xmlDocGetRootElement( doc ), ( xmlChar* )"document", NULL ) ;
153     }
154 
155     //Find the "id" attrbute in the element
156     if( tarNode != NULL ) {
157         if( ( idAttr = xmlHasProp( tarNode, ( xmlChar* )"id" ) ) != NULL ) {
158             //NULL
159         } else if( ( idAttr = xmlHasProp( tarNode, ( xmlChar* )"Id" ) ) != NULL ) {
160             //NULL
161         } else {
162             idAttr = NULL ;
163         }
164     }
165 
166     //Add ID to DOM
167     if( idAttr != NULL ) {
168         idValue = xmlNodeListGetString( tarNode->doc, idAttr->children, 1 ) ;
169         if( idValue == NULL ) {
170             fprintf( stderr , "### the ID value is NULL!\n" ) ;
171             goto done ;
172         }
173 
174         if( xmlAddID( NULL, doc, idValue, idAttr ) == NULL ) {
175             fprintf( stderr , "### Can not add the ID value!\n" ) ;
176             goto done ;
177         }
178     }
179 
180     //Reference handler
181     //Find the signature reference
182     tarNode = xmlSecFindNode( tplNode, xmlSecNodeReference, xmlSecDSigNs ) ;
183     if( tarNode == NULL ) {
184         fprintf( stderr , "### Cannot find the signature reference!\n" ) ;
185         goto done ;
186     }
187 
188     //Find the "URI" attrbute in the reference
189     uriAttr = xmlHasProp( tarNode, ( xmlChar* )"URI" ) ;
190     if( tarNode == NULL ) {
191         fprintf( stderr , "### Cannot find URI of the reference!\n" ) ;
192         goto done ;
193     }
194 
195     //Get the "URI" attrbute value
196     uriValue = xmlNodeListGetString( tarNode->doc, uriAttr->children, 1 ) ;
197     if( uriValue == NULL ) {
198         fprintf( stderr , "### the URI value is NULL!\n" ) ;
199         goto done ;
200     }
201 
202     if( strchr( ( const char* )uriValue, '/' ) != NULL && strchr( ( const char* )uriValue, '#' ) == NULL ) {
203         fprintf( stdout , "### Find a stream URI [%s]\n", uriValue ) ;
204     //  uri = new ::rtl::OUString( ( const sal_Unicode* )uriValue ) ;
205         uri = new ::rtl::OUString( ( const sal_Char* )uriValue, xmlStrlen( uriValue ), RTL_TEXTENCODING_ASCII_US ) ;
206     }
207 
208     if( uri != NULL ) {
209         fprintf( stdout , "### Find the URI [%s]\n", OUStringToOString( *uri , RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
210         Reference< XInputStream > xStream = createStreamFromFile( *uri ) ;
211         if( !xStream.is() ) {
212             fprintf( stderr , "### Can not get the URI stream!\n" ) ;
213             goto done ;
214         }
215 
216         xUriBinding = new OUriBinding( *uri, xStream ) ;
217     }
218 
219     try {
220         Reference< XMultiComponentFactory > xManager = NULL ;
221         Reference< XComponentContext > xContext = NULL ;
222 
223         xManager = serviceManager( xContext , OUString::createFromAscii( "local" ), OUString::createFromAscii( argv[4] ) ) ;
224         OSL_ENSURE( xManager.is() ,
225             "ServicesManager - "
226             "Cannot get service manager" ) ;
227 
228         //Create signature template
229         Reference< XInterface > element =
230             xManager->createInstanceWithContext( OUString::createFromAscii( "com.sun.star.xml.security.bridge.xmlsec.XMLElementWrapper_XmlSecImpl" ) , xContext ) ;
231         OSL_ENSURE( element.is() ,
232             "Signer - "
233             "Cannot get service instance of \"wrapper.XMLElementWrapper\"" ) ;
234 
235         Reference< XXMLElementWrapper > xElement( element , UNO_QUERY ) ;
236         OSL_ENSURE( xElement.is() ,
237             "Signer - "
238             "Cannot get interface of \"XXMLElement\" from service \"xsec.XMLElement\"" ) ;
239 
240         Reference< XUnoTunnel > xEleTunnel( xElement , UNO_QUERY ) ;
241         OSL_ENSURE( xEleTunnel.is() ,
242             "Signer - "
243             "Cannot get interface of \"XUnoTunnel\" from service \"xsec.XMLElement\"" ) ;
244 
245         XMLElementWrapper_XmlSecImpl* pElement = ( XMLElementWrapper_XmlSecImpl* )xEleTunnel->getSomething( XMLElementWrapper_XmlSecImpl::getUnoTunnelImplementationId() ) ;
246         OSL_ENSURE( pElement != NULL ,
247             "Signer - "
248             "Cannot get implementation of \"xsec.XMLElement\"" ) ;
249 
250         //Set signature template
251         pElement->setNativeElement( tplNode ) ;
252 
253         //Build XML Signature template
254         Reference< XInterface > signtpl =
255             xManager->createInstanceWithContext( OUString::createFromAscii( "com.sun.star.xml.crypto.XMLSignatureTemplate" ) , xContext ) ;
256         OSL_ENSURE( signtpl.is() ,
257             "Signer - "
258             "Cannot get service instance of \"xsec.XMLSignatureTemplate\"" ) ;
259 
260         Reference< XXMLSignatureTemplate > xTemplate( signtpl , UNO_QUERY ) ;
261         OSL_ENSURE( xTemplate.is() ,
262             "Signer - "
263             "Cannot get interface of \"XXMLSignatureTemplate\" from service \"xsec.XMLSignatureTemplate\"" ) ;
264 
265         //Import the signature template
266         xTemplate->setTemplate( xElement ) ;
267 
268         //Import the URI/Stream binding
269         if( xUriBinding.is() )
270             xTemplate->setBinding( xUriBinding ) ;
271 
272         //Create security environment
273         //Build Security Environment
274         Reference< XInterface > xsecenv =
275             xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.SecurityEnvironment_NssImpl"), xContext ) ;
276         OSL_ENSURE( xsecenv.is() ,
277             "Signer - "
278             "Cannot get service instance of \"xsec.SecurityEnvironment\"" ) ;
279 
280         Reference< XSecurityEnvironment > xSecEnv( xsecenv , UNO_QUERY ) ;
281         OSL_ENSURE( xSecEnv.is() ,
282             "Signer - "
283             "Cannot get interface of \"XSecurityEnvironment\" from service \"xsec.SecurityEnvironment\"" ) ;
284 
285         //Setup key slot and certDb
286         Reference< XUnoTunnel > xEnvTunnel( xsecenv , UNO_QUERY ) ;
287         OSL_ENSURE( xElement.is() ,
288             "Signer - "
289             "Cannot get interface of \"XUnoTunnel\" from service \"xsec.SecurityEnvironment\"" ) ;
290 
291         SecurityEnvironment_NssImpl* pSecEnv = ( SecurityEnvironment_NssImpl* )xEnvTunnel->getSomething( SecurityEnvironment_NssImpl::getUnoTunnelId() ) ;
292         OSL_ENSURE( pSecEnv != NULL ,
293             "Signer - "
294             "Cannot get implementation of \"xsec.SecurityEnvironment\"" ) ;
295 
296         pSecEnv->setCryptoSlot( slot ) ;
297         pSecEnv->setCertDb( certHandle ) ;
298 
299         //Build XML Security Context
300         Reference< XInterface > xmlsecctx =
301             xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.XMLSecurityContext_NssImpl"), xContext ) ;
302         OSL_ENSURE( xsecenv.is() ,
303             "Signer - "
304             "Cannot get service instance of \"xsec.XMLSecurityContext\"" ) ;
305 
306         Reference< XXMLSecurityContext > xSecCtx( xmlsecctx , UNO_QUERY ) ;
307         OSL_ENSURE( xSecCtx.is() ,
308             "Signer - "
309             "Cannot get interface of \"XXMLSecurityContext\" from service \"xsec.XMLSecurityContext\"" ) ;
310 
311         xSecCtx->setSecurityEnvironment( xSecEnv ) ;
312 
313         //Generate XML signature
314         Reference< XInterface > xmlsigner =
315             xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.XMLSignature_NssImpl"), xContext ) ;
316         OSL_ENSURE( xmlsigner.is() ,
317             "Signer - "
318             "Cannot get service instance of \"xsec.XMLSignature\"" ) ;
319 
320         Reference< XXMLSignature > xSigner( xmlsigner , UNO_QUERY ) ;
321         OSL_ENSURE( xSigner.is() ,
322             "Signer - "
323             "Cannot get interface of \"XXMLSignature\" from service \"xsec.XMLSignature\"" ) ;
324 
325         //perform signature
326         xTemplate = xSigner->generate( xTemplate , xSecCtx ) ;
327         OSL_ENSURE( xTemplate.is() ,
328             "Signer - "
329             "Cannot generate the xml signature" ) ;
330     } catch( Exception& e ) {
331         fprintf( stderr , "Error Message: %s\n" , OUStringToOString( e.Message , RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
332         goto done ;
333     }
334 
335     dstFile = fopen( argv[3], "w" ) ;
336     if( dstFile == NULL ) {
337         fprintf( stderr , "### Can not open file %s\n", argv[3] ) ;
338         goto done ;
339     }
340 
341     //Save result
342     xmlDocDump( dstFile, doc ) ;
343 
344 done:
345     if( uri != NULL )
346         delete uri ;
347 
348     if( dstFile != NULL )
349         fclose( dstFile ) ;
350 
351     if( doc != NULL )
352         xmlFreeDoc( doc ) ;
353 
354     if( slot != NULL )
355         PK11_FreeSlot( slot ) ;
356 
357     PK11_LogoutAll() ;
358     NSS_Shutdown() ;
359 
360     /* Shutdown libxslt/libxml */
361     #ifndef XMLSEC_NO_XSLT
362     xsltCleanupGlobals();
363     #endif /* XMLSEC_NO_XSLT */
364     xmlCleanupParser();
365 
366     }
367 
368     return 0;
369 }
370 
371