xmlsecurity/source/xmlsec/mscrypt/x509certificate_mscryptimpl.cxx

   1 /*************************************************************************
   2  *
   3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   4  *
   5  * Copyright 2000, 2010 Oracle and/or its affiliates.
   6  *
   7  * OpenOffice.org - a multi-platform office productivity suite
   8  *
   9  * This file is part of OpenOffice.org.
  10  *
  11  * OpenOffice.org is free software: you can redistribute it and/or modify
  12  * it under the terms of the GNU Lesser General Public License version 3
  13  * only, as published by the Free Software Foundation.
  14  *
  15  * OpenOffice.org is distributed in the hope that it will be useful,
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  * GNU Lesser General Public License version 3 for more details
  19  * (a copy is included in the LICENSE file that accompanied this code).
  20  *
  21  * You should have received a copy of the GNU Lesser General Public License
  22  * version 3 along with OpenOffice.org.  If not, see
  23  * <http://www.openoffice.org/license.html>
  24  * for a copy of the LGPLv3 License.
  25  *
  26  ************************************************************************/
  27
  28 // MARKER(update_precomp.py): autogen include statement, do not remove
  29 #include "precompiled_xmlsecurity.hxx"
  30 #include <sal/config.h>
  31 #include <rtl/uuid.h>
  32 #include "x509certificate_mscryptimpl.hxx"
  33 #include "certificateextension_xmlsecimpl.hxx"
  34
  35 //MM : added by MM
  36 #include "oid.hxx"
  37 //MM : end
  38
  39 //CP : added by CP
  40 #include <rtl/locale.h>
  41 #include <osl/nlsupport.h>
  42 #include <osl/process.h>
  43 #include <utility>
  44
  45 //CP : end
  46
  47 using namespace ::com::sun::star::uno ;
  48 using namespace ::com::sun::star::security ;
  49 using ::rtl::OUString ;
  50
  51 using ::com::sun::star::security::XCertificate ;
  52 using ::com::sun::star::util::DateTime ;
  53
  54 #define OUSTR(x) ::rtl::OUString( RTL_CONSTASCII_USTRINGPARAM(x) )
  55
  56 /*Resturns the index withing rRawString where sTypeName starts and where it ends.
  57     The starting index is pair.first. The ending index in pair.second points
  58     one char after the last character of the type.
  59     sTypeName can be
  60     "S" or "CN" (without ""). Do not use spaces at the beginning of the type name.
  61     If the type name is not found then pair.first and pair.second are -1.
  62 */
  63 std::pair< sal_Int32, sal_Int32 >
  64 findTypeInDN(const OUString& rRawString, const OUString& sTypeName)
  65 {
  66     std::pair< sal_Int32, sal_Int32 > retVal;
  67     bool bInEscape = false;
  68     bool bInValue = false;
  69     bool bFound = false;
  70     sal_Int32 nTypeNameStart = 0;
  71     sal_Int32 length = rRawString.getLength();
  72
  73     for (sal_Int32 i = 0; i < length; i++)
  74     {
  75         sal_Unicode c = rRawString[i];
  76
  77         if (c == '=')
  78         {
  79             if (! bInValue)
  80             {
  81                 OUString sType = rRawString.copy(nTypeNameStart, i - nTypeNameStart);
  82                 sType = sType.trim();
  83                 if (sType.equalsIgnoreAsciiCase(sTypeName))
  84                 {
  85                     bFound = true;
  86                     break;
  87                 }
  88             }
  89         }
  90         else if (c == '"')
  91         {
  92             if (!bInEscape)
  93             {
  94                 //If this is the quote is the first of the couple which enclose the
  95                 //whole value, because the value contains special characters
  96                 //then we just drop it. That is, this character must be followed by
  97                 //a character which is not '"'.
  98                 if ( i + 1 < length && rRawString[i+1] == '"')
  99                     bInEscape = true;
 100                 else
 101                     bInValue = !bInValue; //value is enclosed in " "
 102             }
 103             else
 104             {
 105                 //This quote is escaped by a preceding quote and therefore is
 106                 //part of the value
 107                 bInEscape = false;
 108             }
 109         }
 110         else if (c == ',' || c == '+')
 111         {
 112             //The comma separate the attribute value pairs.
 113             //If the comma is not part of a value (the value would then be enclosed in '"'),
 114             //then we have reached the end of the value
 115             if (!bInValue)
 116             {
 117                 //The next char is the start of the new type
 118                 nTypeNameStart = i + 1;
 119             }
 120         }
 121     }
 122
 123     //Found the Type Name, but there can still be spaces after the last comma
 124     //and the beginning of the type.
 125     if (bFound)
 126     {
 127         while (true)
 128         {
 129             sal_Unicode c = rRawString[nTypeNameStart];
 130             if (c != ' ' && c != '\t')
 131                 //found
 132                 break;
 133             nTypeNameStart ++;
 134         }
 135         // search end (one after last letter)
 136         sal_Int32 nTypeNameEnd = nTypeNameStart;
 137         nTypeNameEnd++;
 138         while (true)
 139         {
 140              sal_Unicode c = rRawString[nTypeNameEnd];
 141              if (c == ' ' || c == '\t' || c == '=')
 142                  break;
 143              nTypeNameEnd++;
 144         }
 145         retVal = std::make_pair(nTypeNameStart, nTypeNameEnd);
 146     }
 147     else
 148     {
 149         retVal = std::make_pair(-1, -1);
 150     }
 151     return retVal;
 152 }
 153
 154
 155 /*
 156   MS Crypto uses the 'S' tag (equal to the 'ST' tag in NSS), but the NSS can't recognise
 157   it, so the 'S' tag should be changed to 'ST' tag. However I am not sure if this is necessary
 158   anymore, because we provide always the signers certificate when signing. So libmlsec can find
 159   the private key based on the provided certificate (X509Certificate element) and does not need
 160   the issuer name (X509IssuerName element). The issuer name in the xml signature has also no
 161   effect for the signature nor the certificate validation.
 162   In many RFCs, for example 4519, on speaks of 'ST'. However, the certificate does not contain
 163   strings for type names. Instead it uses OIDs.
 164  */
 165
 166 OUString replaceTagSWithTagST(OUString oldDN)
 167 {
 168     std::pair<sal_Int32, sal_Int32 > pairIndex = findTypeInDN(oldDN, OUSTR("S"));
 169
 170     if (pairIndex.first != -1)
 171     {
 172         OUString newDN = oldDN.copy(0, pairIndex.first);
 173         newDN += OUSTR("ST");
 174         newDN += oldDN.copy(pairIndex.second);
 175         return newDN;
 176     }
 177     return oldDN;
 178 }
 179 /* end */
 180
 181 X509Certificate_MSCryptImpl :: X509Certificate_MSCryptImpl() :
 182     m_pCertContext( NULL )
 183 {
 184 }
 185
 186 X509Certificate_MSCryptImpl :: ~X509Certificate_MSCryptImpl() {
 187     if( m_pCertContext != NULL ) {
 188         CertFreeCertificateContext( m_pCertContext ) ;
 189     }
 190 }
 191
 192 //Methods from XCertificate
 193 sal_Int16 SAL_CALL X509Certificate_MSCryptImpl :: getVersion() throw ( ::com::sun::star::uno::RuntimeException) {
 194     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL ) {
 195         return ( char )m_pCertContext->pCertInfo->dwVersion ;
 196     } else {
 197         return -1 ;
 198     }
 199 }
 200
 201 ::com::sun::star::uno::Sequence< sal_Int8 > SAL_CALL X509Certificate_MSCryptImpl :: getSerialNumber() throw ( ::com::sun::star::uno::RuntimeException) {
 202     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL ) {
 203         Sequence< sal_Int8 > serial( m_pCertContext->pCertInfo->SerialNumber.cbData ) ;
 204         for( unsigned int i = 0 ; i < m_pCertContext->pCertInfo->SerialNumber.cbData ; i ++ )
 205             serial[i] = *( m_pCertContext->pCertInfo->SerialNumber.pbData + m_pCertContext->pCertInfo->SerialNumber.cbData - i - 1 ) ;
 206
 207         return serial ;
 208     } else {
 209         return NULL ;
 210     }
 211 }
 212
 213 ::rtl::OUString SAL_CALL X509Certificate_MSCryptImpl :: getIssuerName() throw ( ::com::sun::star::uno::RuntimeException) {
 214     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL ) {
 215         char* issuer ;
 216         DWORD cbIssuer ;
 217
 218         cbIssuer = CertNameToStr(
 219             X509_ASN_ENCODING | PKCS_7_ASN_ENCODING ,
 220             &( m_pCertContext->pCertInfo->Issuer ),
 221             CERT_X500_NAME_STR | CERT_NAME_STR_REVERSE_FLAG ,
 222             NULL, 0
 223         ) ;
 224
 225         // Here the cbIssuer count the last 0x00 , take care.
 226         if( cbIssuer != 0 ) {
 227             issuer = new char[ cbIssuer ] ;
 228             if( issuer == NULL )
 229                 throw RuntimeException() ;
 230
 231             cbIssuer = CertNameToStr(
 232                 X509_ASN_ENCODING | PKCS_7_ASN_ENCODING ,
 233                 &( m_pCertContext->pCertInfo->Issuer ),
 234                 CERT_X500_NAME_STR | CERT_NAME_STR_REVERSE_FLAG ,
 235                 issuer, cbIssuer
 236             ) ;
 237
 238             if( cbIssuer <= 0 ) {
 239                 delete [] issuer ;
 240                 throw RuntimeException() ;
 241             }
 242
 243             // By CP , for correct encoding
 244             sal_uInt16 encoding ;
 245             rtl_Locale *pLocale = NULL ;
 246             osl_getProcessLocale( &pLocale ) ;
 247             encoding = osl_getTextEncodingFromLocale( pLocale ) ;
 248             // CP end
 249
 250             if(issuer[cbIssuer-1] == 0) cbIssuer--; //delimit the last 0x00;
 251             OUString xIssuer(issuer , cbIssuer ,encoding ) ; //By CP
 252             delete [] issuer ;
 253
 254             return replaceTagSWithTagST(xIssuer);
 255         } else {
 256             return OUString() ;
 257         }
 258     } else {
 259         return OUString() ;
 260     }
 261 }
 262
 263 ::rtl::OUString SAL_CALL X509Certificate_MSCryptImpl :: getSubjectName() throw ( ::com::sun::star::uno::RuntimeException)
 264 {
 265     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL )
 266     {
 267         wchar_t* subject ;
 268         DWORD cbSubject ;
 269
 270         cbSubject = CertNameToStrW(
 271             X509_ASN_ENCODING | PKCS_7_ASN_ENCODING ,
 272             &( m_pCertContext->pCertInfo->Subject ),
 273             CERT_X500_NAME_STR | CERT_NAME_STR_REVERSE_FLAG ,
 274             NULL, 0
 275         ) ;
 276
 277         if( cbSubject != 0 )
 278         {
 279             subject = new wchar_t[ cbSubject ] ;
 280             if( subject == NULL )
 281                 throw RuntimeException() ;
 282
 283             cbSubject = CertNameToStrW(
 284                 X509_ASN_ENCODING | PKCS_7_ASN_ENCODING ,
 285                 &( m_pCertContext->pCertInfo->Subject ),
 286                 CERT_X500_NAME_STR | CERT_NAME_STR_REVERSE_FLAG ,
 287                 subject, cbSubject
 288             ) ;
 289
 290             if( cbSubject <= 0 ) {
 291                 delete [] subject ;
 292                 throw RuntimeException() ;
 293             }
 294
 295             OUString xSubject(reinterpret_cast<const sal_Unicode*>(subject));
 296             delete [] subject ;
 297
 298             return replaceTagSWithTagST(xSubject);
 299         } else
 300         {
 301             return OUString() ;
 302         }
 303     }
 304     else
 305     {
 306         return OUString() ;
 307     }
 308 }
 309
 310 ::com::sun::star::util::DateTime SAL_CALL X509Certificate_MSCryptImpl :: getNotValidBefore() throw ( ::com::sun::star::uno::RuntimeException ) {
 311     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL ) {
 312         SYSTEMTIME explTime ;
 313         DateTime dateTime ;
 314         FILETIME localFileTime;
 315
 316         if (FileTimeToLocalFileTime(&( m_pCertContext->pCertInfo->NotBefore ), &localFileTime))
 317         {
 318             if( FileTimeToSystemTime( &localFileTime, &explTime ) ) {
 319                 //Convert the time to readable local time
 320                 dateTime.HundredthSeconds = explTime.wMilliseconds / 100 ;
 321                 dateTime.Seconds = explTime.wSecond ;
 322                 dateTime.Minutes = explTime.wMinute ;
 323                 dateTime.Hours = explTime.wHour ;
 324                 dateTime.Day = explTime.wDay ;
 325                 dateTime.Month = explTime.wMonth ;
 326                 dateTime.Year = explTime.wYear ;
 327             }
 328         }
 329
 330         return dateTime ;
 331     } else {
 332         return DateTime() ;
 333     }
 334 }
 335
 336 ::com::sun::star::util::DateTime SAL_CALL X509Certificate_MSCryptImpl :: getNotValidAfter() throw ( ::com::sun::star::uno::RuntimeException) {
 337     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL ) {
 338         SYSTEMTIME explTime ;
 339         DateTime dateTime ;
 340         FILETIME localFileTime;
 341
 342         if (FileTimeToLocalFileTime(&( m_pCertContext->pCertInfo->NotAfter ), &localFileTime))
 343         {
 344             if( FileTimeToSystemTime( &localFileTime, &explTime ) ) {
 345                 //Convert the time to readable local time
 346                 dateTime.HundredthSeconds = explTime.wMilliseconds / 100 ;
 347                 dateTime.Seconds = explTime.wSecond ;
 348                 dateTime.Minutes = explTime.wMinute ;
 349                 dateTime.Hours = explTime.wHour ;
 350                 dateTime.Day = explTime.wDay ;
 351                 dateTime.Month = explTime.wMonth ;
 352                 dateTime.Year = explTime.wYear ;
 353             }
 354         }
 355
 356         return dateTime ;
 357     } else {
 358         return DateTime() ;
 359     }
 360 }
 361
 362 ::com::sun::star::uno::Sequence< sal_Int8 > SAL_CALL X509Certificate_MSCryptImpl :: getIssuerUniqueID() throw ( ::com::sun::star::uno::RuntimeException) {
 363     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL ) {
 364         Sequence< sal_Int8 > issuerUid( m_pCertContext->pCertInfo->IssuerUniqueId.cbData ) ;
 365         for( unsigned int i = 0 ; i < m_pCertContext->pCertInfo->IssuerUniqueId.cbData; i ++ )
 366             issuerUid[i] = *( m_pCertContext->pCertInfo->IssuerUniqueId.pbData + i ) ;
 367
 368         return issuerUid ;
 369     } else {
 370         return NULL ;
 371     }
 372 }
 373
 374 ::com::sun::star::uno::Sequence< sal_Int8 > SAL_CALL X509Certificate_MSCryptImpl :: getSubjectUniqueID() throw ( ::com::sun::star::uno::RuntimeException ) {
 375     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL ) {
 376         Sequence< sal_Int8 > subjectUid( m_pCertContext->pCertInfo->SubjectUniqueId.cbData ) ;
 377         for( unsigned int i = 0 ; i < m_pCertContext->pCertInfo->SubjectUniqueId.cbData; i ++ )
 378             subjectUid[i] = *( m_pCertContext->pCertInfo->SubjectUniqueId.pbData + i ) ;
 379
 380         return subjectUid ;
 381     } else {
 382         return NULL ;
 383     }
 384 }
 385
 386 ::com::sun::star::uno::Sequence< ::com::sun::star::uno::Reference< ::com::sun::star::security::XCertificateExtension > > SAL_CALL X509Certificate_MSCryptImpl :: getExtensions() throw ( ::com::sun::star::uno::RuntimeException ) {
 387     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL && m_pCertContext->pCertInfo->cExtension != 0 ) {
 388         CertificateExtension_XmlSecImpl* xExtn ;
 389         CERT_EXTENSION* pExtn ;
 390         Sequence< Reference< XCertificateExtension > > xExtns( m_pCertContext->pCertInfo->cExtension ) ;
 391
 392         for( unsigned int i = 0; i < m_pCertContext->pCertInfo->cExtension; i++ ) {
 393             pExtn = &(m_pCertContext->pCertInfo->rgExtension[i]) ;
 394
 395             xExtn = new CertificateExtension_XmlSecImpl() ;
 396             if( xExtn == NULL )
 397                 throw RuntimeException() ;
 398
 399             xExtn->setCertExtn( pExtn->Value.pbData, pExtn->Value.cbData, ( unsigned char* )pExtn->pszObjId, strlen( pExtn->pszObjId ), sal::static_int_cast<sal_Bool>(pExtn->fCritical) ) ;
 400
 401             xExtns[i] = xExtn ;
 402         }
 403
 404         return xExtns ;
 405     } else {
 406         return NULL ;
 407     }
 408 }
 409
 410 ::com::sun::star::uno::Reference< ::com::sun::star::security::XCertificateExtension > SAL_CALL X509Certificate_MSCryptImpl :: findCertificateExtension( const ::com::sun::star::uno::Sequence< sal_Int8 >& /*oid*/ ) throw (::com::sun::star::uno::RuntimeException) {
 411     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL && m_pCertContext->pCertInfo->cExtension != 0 ) {
 412         CertificateExtension_XmlSecImpl* xExtn ;
 413         CERT_EXTENSION* pExtn ;
 414         Sequence< Reference< XCertificateExtension > > xExtns( m_pCertContext->pCertInfo->cExtension ) ;
 415
 416         xExtn = NULL ;
 417         for( unsigned int i = 0; i < m_pCertContext->pCertInfo->cExtension; i++ ) {
 418             pExtn = &( m_pCertContext->pCertInfo->rgExtension[i] ) ;
 419
 420             //TODO: Compare the oid
 421             if( 0 ) {
 422                 xExtn = new CertificateExtension_XmlSecImpl() ;
 423                 if( xExtn == NULL )
 424                     throw RuntimeException() ;
 425
 426                 xExtn->setCertExtn( pExtn->Value.pbData, pExtn->Value.cbData, ( unsigned char* )pExtn->pszObjId, strlen( pExtn->pszObjId ), sal::static_int_cast<sal_Bool>(pExtn->fCritical) ) ;
 427             }
 428         }
 429
 430         return xExtn ;
 431     } else {
 432         return NULL ;
 433     }
 434 }
 435
 436
 437 ::com::sun::star::uno::Sequence< sal_Int8 > SAL_CALL X509Certificate_MSCryptImpl :: getEncoded() throw ( ::com::sun::star::uno::RuntimeException) {
 438     if( m_pCertContext != NULL && m_pCertContext->cbCertEncoded > 0 ) {
 439         Sequence< sal_Int8 > rawCert( m_pCertContext->cbCertEncoded ) ;
 440
 441         for( unsigned int i = 0 ; i < m_pCertContext->cbCertEncoded ; i ++ )
 442             rawCert[i] = *( m_pCertContext->pbCertEncoded + i ) ;
 443
 444         return rawCert ;
 445     } else {
 446         return NULL ;
 447     }
 448 }
 449
 450 //Helper methods
 451 void X509Certificate_MSCryptImpl :: setMswcryCert( const CERT_CONTEXT* cert ) {
 452     if( m_pCertContext != NULL ) {
 453         CertFreeCertificateContext( m_pCertContext ) ;
 454         m_pCertContext = NULL ;
 455     }
 456
 457     if( cert != NULL ) {
 458         m_pCertContext = CertDuplicateCertificateContext( cert ) ;
 459     }
 460 }
 461
 462 const CERT_CONTEXT* X509Certificate_MSCryptImpl :: getMswcryCert() const {
 463     if( m_pCertContext != NULL ) {
 464         return m_pCertContext ;
 465     } else {
 466         return NULL ;
 467     }
 468 }
 469
 470 void X509Certificate_MSCryptImpl :: setRawCert( Sequence< sal_Int8 > rawCert ) throw ( ::com::sun::star::uno::RuntimeException) {
 471     if( m_pCertContext != NULL ) {
 472         CertFreeCertificateContext( m_pCertContext ) ;
 473         m_pCertContext = NULL ;
 474     }
 475
 476     if( rawCert.getLength() != 0 ) {
 477         m_pCertContext = CertCreateCertificateContext( X509_ASN_ENCODING, ( const BYTE* )&rawCert[0], rawCert.getLength() ) ;
 478     }
 479 }
 480
 481 /* XUnoTunnel */
 482 sal_Int64 SAL_CALL X509Certificate_MSCryptImpl :: getSomething( const Sequence< sal_Int8 >& aIdentifier ) throw( RuntimeException ) {
 483     if( aIdentifier.getLength() == 16 && 0 == rtl_compareMemory( getUnoTunnelId().getConstArray(), aIdentifier.getConstArray(), 16 ) ) {
 484         return ( sal_Int64 )this ;
 485     }
 486     return 0 ;
 487 }
 488
 489 /* XUnoTunnel extension */
 490 const Sequence< sal_Int8>& X509Certificate_MSCryptImpl :: getUnoTunnelId() {
 491     static Sequence< sal_Int8 >* pSeq = 0 ;
 492     if( !pSeq ) {
 493         ::osl::Guard< ::osl::Mutex > aGuard( ::osl::Mutex::getGlobalMutex() ) ;
 494         if( !pSeq ) {
 495             static Sequence< sal_Int8> aSeq( 16 ) ;
 496             rtl_createUuid( ( sal_uInt8* )aSeq.getArray() , 0 , sal_True ) ;
 497             pSeq = &aSeq ;
 498         }
 499     }
 500     return *pSeq ;
 501 }
 502
 503 /* XUnoTunnel extension */
 504 X509Certificate_MSCryptImpl* X509Certificate_MSCryptImpl :: getImplementation( const Reference< XInterface > xObj ) {
 505     Reference< XUnoTunnel > xUT( xObj , UNO_QUERY ) ;
 506     if( xUT.is() ) {
 507         return ( X509Certificate_MSCryptImpl* )xUT->getSomething( getUnoTunnelId() ) ;
 508     } else
 509         return NULL ;
 510 }
 511
 512 // MM : added by MM
 513 ::rtl::OUString findOIDDescription(char *oid)
 514 {
 515     OUString ouOID = OUString::createFromAscii( oid );
 516     for (int i=0; i<nOID; i++)
 517     {
 518         OUString item = OUString::createFromAscii( OIDs[i].oid );
 519         if (ouOID == item)
 520         {
 521             return OUString::createFromAscii( OIDs[i].desc );
 522         }
 523     }
 524
 525     return OUString() ;
 526 }
 527
 528 ::com::sun::star::uno::Sequence< sal_Int8 > getThumbprint(const CERT_CONTEXT* pCertContext, DWORD dwPropId)
 529 {
 530     if( pCertContext != NULL )
 531     {
 532         DWORD cbData = 20;
 533         unsigned char fingerprint[20];
 534         if (CertGetCertificateContextProperty(pCertContext, dwPropId, (void*)fingerprint, &cbData))
 535         {
 536             Sequence< sal_Int8 > thumbprint( cbData ) ;
 537             for( unsigned int i = 0 ; i < cbData ; i ++ )
 538             {
 539                 thumbprint[i] = fingerprint[i];
 540             }
 541
 542             return thumbprint;
 543         }
 544         else
 545         {
 546             DWORD e = GetLastError();
 547             cbData = e;
 548         }
 549     }
 550
 551     return NULL;
 552 }
 553
 554 ::rtl::OUString SAL_CALL X509Certificate_MSCryptImpl::getSubjectPublicKeyAlgorithm()
 555     throw ( ::com::sun::star::uno::RuntimeException)
 556 {
 557     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL )
 558     {
 559         CRYPT_ALGORITHM_IDENTIFIER algorithm = m_pCertContext->pCertInfo->SubjectPublicKeyInfo.Algorithm;
 560         return findOIDDescription( algorithm.pszObjId ) ;
 561     }
 562     else
 563     {
 564         return OUString() ;
 565     }
 566 }
 567
 568 ::com::sun::star::uno::Sequence< sal_Int8 > SAL_CALL X509Certificate_MSCryptImpl::getSubjectPublicKeyValue()
 569     throw ( ::com::sun::star::uno::RuntimeException)
 570 {
 571     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL )
 572     {
 573         CRYPT_BIT_BLOB publicKey = m_pCertContext->pCertInfo->SubjectPublicKeyInfo.PublicKey;
 574
 575         Sequence< sal_Int8 > key( publicKey.cbData ) ;
 576         for( unsigned int i = 0 ; i < publicKey.cbData ; i++ )
 577         {
 578             key[i] = *(publicKey.pbData + i) ;
 579         }
 580
 581         return key;
 582     }
 583     else
 584     {
 585         return NULL ;
 586     }
 587 }
 588
 589 ::rtl::OUString SAL_CALL X509Certificate_MSCryptImpl::getSignatureAlgorithm()
 590     throw ( ::com::sun::star::uno::RuntimeException)
 591 {
 592     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL )
 593     {
 594         CRYPT_ALGORITHM_IDENTIFIER algorithm = m_pCertContext->pCertInfo->SignatureAlgorithm;
 595         return findOIDDescription( algorithm.pszObjId ) ;
 596     }
 597     else
 598     {
 599         return OUString() ;
 600     }
 601 }
 602
 603 ::com::sun::star::uno::Sequence< sal_Int8 > SAL_CALL X509Certificate_MSCryptImpl::getSHA1Thumbprint()
 604     throw ( ::com::sun::star::uno::RuntimeException)
 605 {
 606     return getThumbprint(m_pCertContext, CERT_SHA1_HASH_PROP_ID);
 607 }
 608
 609 ::com::sun::star::uno::Sequence< sal_Int8 > SAL_CALL X509Certificate_MSCryptImpl::getMD5Thumbprint()
 610     throw ( ::com::sun::star::uno::RuntimeException)
 611 {
 612     return getThumbprint(m_pCertContext, CERT_MD5_HASH_PROP_ID);
 613 }
 614
 615 sal_Int32 SAL_CALL X509Certificate_MSCryptImpl::getCertificateUsage(  )
 616     throw ( ::com::sun::star::uno::RuntimeException)
 617 {
 618     sal_Int32 usage =
 619         CERT_DATA_ENCIPHERMENT_KEY_USAGE |
 620         CERT_DIGITAL_SIGNATURE_KEY_USAGE |
 621         CERT_KEY_AGREEMENT_KEY_USAGE |
 622         CERT_KEY_CERT_SIGN_KEY_USAGE |
 623         CERT_KEY_ENCIPHERMENT_KEY_USAGE |
 624         CERT_NON_REPUDIATION_KEY_USAGE |
 625         CERT_OFFLINE_CRL_SIGN_KEY_USAGE;
 626
 627     if( m_pCertContext != NULL && m_pCertContext->pCertInfo != NULL && m_pCertContext->pCertInfo->cExtension != 0 )
 628     {
 629         CERT_EXTENSION* pExtn = CertFindExtension(
 630             szOID_KEY_USAGE,
 631             m_pCertContext->pCertInfo->cExtension,
 632             m_pCertContext->pCertInfo->rgExtension);
 633
 634         if (pExtn != NULL)
 635         {
 636             CERT_KEY_USAGE_RESTRICTION_INFO keyUsage;
 637             DWORD length = sizeof(CERT_KEY_USAGE_RESTRICTION_INFO);
 638
 639             bool rc = CryptDecodeObject(
 640                 X509_ASN_ENCODING,
 641                 X509_KEY_USAGE,
 642                 pExtn->Value.pbData,
 643                 pExtn->Value.cbData,
 644                 CRYPT_DECODE_NOCOPY_FLAG,
 645                 (void *)&keyUsage,
 646                 &length);
 647
 648             if (rc && keyUsage.RestrictedKeyUsage.cbData!=0)
 649             {
 650                 usage = (sal_Int32)keyUsage.RestrictedKeyUsage.pbData;
 651             }
 652         }
 653     }
 654
 655     return usage;
 656 }
 657
 658 // MM : end
 659