xmlsecurity/tools/standalone/csfit/signer.cxx

   1 /*************************************************************************
   2  *
   3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   4  *
   5  * Copyright 2000, 2010 Oracle and/or its affiliates.
   6  *
   7  * OpenOffice.org - a multi-platform office productivity suite
   8  *
   9  * This file is part of OpenOffice.org.
  10  *
  11  * OpenOffice.org is free software: you can redistribute it and/or modify
  12  * it under the terms of the GNU Lesser General Public License version 3
  13  * only, as published by the Free Software Foundation.
  14  *
  15  * OpenOffice.org is distributed in the hope that it will be useful,
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  * GNU Lesser General Public License version 3 for more details
  19  * (a copy is included in the LICENSE file that accompanied this code).
  20  *
  21  * You should have received a copy of the GNU Lesser General Public License
  22  * version 3 along with OpenOffice.org.  If not, see
  23  * <http://www.openoffice.org/license.html>
  24  * for a copy of the LGPLv3 License.
  25  *
  26  ************************************************************************/
  27
  28 // MARKER(update_precomp.py): autogen include statement, do not remove
  29 #include "precompiled_xmlsecurity.hxx"
  30
  31 #include <stdio.h>
  32 #include "helper.hxx"
  33
  34 #include "libxml/tree.h"
  35 #include "libxml/parser.h"
  36 #ifndef XMLSEC_NO_XSLT
  37 #include "libxslt/xslt.h"
  38 #endif
  39
  40 #include "securityenvironment_nssimpl.hxx"
  41 #include "xmlelementwrapper_xmlsecimpl.hxx"
  42
  43 #include "nspr.h"
  44 #include "prtypes.h"
  45
  46 #include "pk11func.h"
  47 #include "cert.h"
  48 #include "cryptohi.h"
  49 #include "certdb.h"
  50 #include "nss.h"
  51
  52 #include "xmlsec/strings.h"
  53 #include "xmlsec/xmltree.h"
  54
  55 #include <rtl/ustring.hxx>
  56
  57 #include <com/sun/star/beans/PropertyValue.hpp>
  58 #include <com/sun/star/xml/wrapper/XXMLElementWrapper.hpp>
  59 #include <com/sun/star/xml/wrapper/XXMLDocumentWrapper.hpp>
  60 #include <com/sun/star/xml/crypto/XXMLSignature.hpp>
  61 #include <com/sun/star/xml/crypto/XXMLSignatureTemplate.hpp>
  62 #include <com/sun/star/xml/crypto/XXMLSecurityContext.hpp>
  63 #include <com/sun/star/xml/crypto/XSecurityEnvironment.hpp>
  64
  65 using namespace ::rtl ;
  66 using namespace ::cppu ;
  67 using namespace ::com::sun::star::uno ;
  68 using namespace ::com::sun::star::io ;
  69 using namespace ::com::sun::star::ucb ;
  70 using namespace ::com::sun::star::beans ;
  71 using namespace ::com::sun::star::document ;
  72 using namespace ::com::sun::star::lang ;
  73 using namespace ::com::sun::star::xml::wrapper ;
  74 using namespace ::com::sun::star::xml::crypto ;
  75
  76
  77 int SAL_CALL main( int argc, char **argv )
  78 {
  79     CERTCertDBHandle*   certHandle ;
  80     PK11SlotInfo*       slot ;
  81     xmlDocPtr           doc ;
  82     xmlNodePtr          tplNode ;
  83     xmlNodePtr          tarNode ;
  84     xmlAttrPtr          idAttr ;
  85     xmlChar*            idValue ;
  86     xmlAttrPtr          uriAttr ;
  87     xmlChar*            uriValue ;
  88     OUString*           uri ;
  89     Reference< XUriBinding >    xUriBinding ;
  90     FILE*               dstFile ;
  91
  92     if( argc != 5 ) {
  93         fprintf( stderr, "Usage: %s < CertDir > <file_url of template> <file_url of result> <rdb file>\n\n" , argv[0] ) ;
  94         return 1 ;
  95     }
  96
  97     for( int hhh = 0 ; hhh < 10 ; hhh ++ ) {
  98         slot = NULL ;
  99         doc = NULL ;
 100         uri = NULL ;
 101         dstFile = NULL ;
 102
 103
 104     //Init libxml and libxslt libraries
 105     xmlInitParser();
 106     LIBXML_TEST_VERSION
 107     xmlLoadExtDtdDefaultValue = XML_DETECT_IDS | XML_COMPLETE_ATTRS;
 108     xmlSubstituteEntitiesDefault(1);
 109
 110     #ifndef XMLSEC_NO_XSLT
 111     xmlIndentTreeOutput = 1;
 112     #endif // XMLSEC_NO_XSLT
 113
 114
 115     //Initialize NSPR and NSS
 116     PR_Init( PR_SYSTEM_THREAD, PR_PRIORITY_NORMAL, 1 ) ;
 117     PK11_SetPasswordFunc( PriPK11PasswordFunc ) ;
 118     if( NSS_Init( argv[1] ) != SECSuccess ) {
 119         fprintf( stderr , "### cannot intialize NSS!\n" ) ;
 120         goto done ;
 121     }
 122
 123     certHandle = CERT_GetDefaultCertDB() ;
 124     slot = PK11_GetInternalKeySlot() ;
 125
 126     if( PK11_NeedLogin( slot ) ) {
 127         SECStatus nRet = PK11_Authenticate( slot, PR_TRUE, NULL );
 128         if( nRet != SECSuccess ) {
 129             fprintf( stderr , "### cannot authehticate the crypto token!\n" ) ;
 130             goto done ;
 131         }
 132     }
 133
 134     //Load XML document
 135     doc = xmlParseFile( argv[2] ) ;
 136     if( doc == NULL || xmlDocGetRootElement( doc ) == NULL ) {
 137         fprintf( stderr , "### Cannot load template xml document!\n" ) ;
 138         goto done ;
 139     }
 140
 141     //Find the signature template
 142     tplNode = xmlSecFindNode( xmlDocGetRootElement( doc ), xmlSecNodeSignature, xmlSecDSigNs ) ;
 143     if( tplNode == NULL ) {
 144         fprintf( stderr , "### Cannot find the signature template!\n" ) ;
 145         goto done ;
 146     }
 147
 148     //Find the element with ID attribute
 149     //Here we only try to find the "document" node.
 150     tarNode = xmlSecFindNode( xmlDocGetRootElement( doc ), ( xmlChar* )"document", ( xmlChar* )"http://openoffice.org/2000/office" ) ;
 151     if( tarNode == NULL ) {
 152         tarNode = xmlSecFindNode( xmlDocGetRootElement( doc ), ( xmlChar* )"document", NULL ) ;
 153     }
 154
 155     //Find the "id" attrbute in the element
 156     if( tarNode != NULL ) {
 157         if( ( idAttr = xmlHasProp( tarNode, ( xmlChar* )"id" ) ) != NULL ) {
 158             //NULL
 159         } else if( ( idAttr = xmlHasProp( tarNode, ( xmlChar* )"Id" ) ) != NULL ) {
 160             //NULL
 161         } else {
 162             idAttr = NULL ;
 163         }
 164     }
 165
 166     //Add ID to DOM
 167     if( idAttr != NULL ) {
 168         idValue = xmlNodeListGetString( tarNode->doc, idAttr->children, 1 ) ;
 169         if( idValue == NULL ) {
 170             fprintf( stderr , "### the ID value is NULL!\n" ) ;
 171             goto done ;
 172         }
 173
 174         if( xmlAddID( NULL, doc, idValue, idAttr ) == NULL ) {
 175             fprintf( stderr , "### Can not add the ID value!\n" ) ;
 176             goto done ;
 177         }
 178     }
 179
 180     //Reference handler
 181     //Find the signature reference
 182     tarNode = xmlSecFindNode( tplNode, xmlSecNodeReference, xmlSecDSigNs ) ;
 183     if( tarNode == NULL ) {
 184         fprintf( stderr , "### Cannot find the signature reference!\n" ) ;
 185         goto done ;
 186     }
 187
 188     //Find the "URI" attrbute in the reference
 189     uriAttr = xmlHasProp( tarNode, ( xmlChar* )"URI" ) ;
 190     if( tarNode == NULL ) {
 191         fprintf( stderr , "### Cannot find URI of the reference!\n" ) ;
 192         goto done ;
 193     }
 194
 195     //Get the "URI" attrbute value
 196     uriValue = xmlNodeListGetString( tarNode->doc, uriAttr->children, 1 ) ;
 197     if( uriValue == NULL ) {
 198         fprintf( stderr , "### the URI value is NULL!\n" ) ;
 199         goto done ;
 200     }
 201
 202     if( strchr( ( const char* )uriValue, '/' ) != NULL && strchr( ( const char* )uriValue, '#' ) == NULL ) {
 203         fprintf( stdout , "### Find a stream URI [%s]\n", uriValue ) ;
 204     //  uri = new ::rtl::OUString( ( const sal_Unicode* )uriValue ) ;
 205         uri = new ::rtl::OUString( ( const sal_Char* )uriValue, xmlStrlen( uriValue ), RTL_TEXTENCODING_ASCII_US ) ;
 206     }
 207
 208     if( uri != NULL ) {
 209         fprintf( stdout , "### Find the URI [%s]\n", OUStringToOString( *uri , RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
 210         Reference< XInputStream > xStream = createStreamFromFile( *uri ) ;
 211         if( !xStream.is() ) {
 212             fprintf( stderr , "### Can not get the URI stream!\n" ) ;
 213             goto done ;
 214         }
 215
 216         xUriBinding = new OUriBinding( *uri, xStream ) ;
 217     }
 218
 219     try {
 220         Reference< XMultiComponentFactory > xManager = NULL ;
 221         Reference< XComponentContext > xContext = NULL ;
 222
 223         xManager = serviceManager( xContext , OUString::createFromAscii( "local" ), OUString::createFromAscii( argv[4] ) ) ;
 224         OSL_ENSURE( xManager.is() ,
 225             "ServicesManager - "
 226             "Cannot get service manager" ) ;
 227
 228         //Create signature template
 229         Reference< XInterface > element =
 230             xManager->createInstanceWithContext( OUString::createFromAscii( "com.sun.star.xml.security.bridge.xmlsec.XMLElementWrapper_XmlSecImpl" ) , xContext ) ;
 231         OSL_ENSURE( element.is() ,
 232             "Signer - "
 233             "Cannot get service instance of \"wrapper.XMLElementWrapper\"" ) ;
 234
 235         Reference< XXMLElementWrapper > xElement( element , UNO_QUERY ) ;
 236         OSL_ENSURE( xElement.is() ,
 237             "Signer - "
 238             "Cannot get interface of \"XXMLElement\" from service \"xsec.XMLElement\"" ) ;
 239
 240         Reference< XUnoTunnel > xEleTunnel( xElement , UNO_QUERY ) ;
 241         OSL_ENSURE( xEleTunnel.is() ,
 242             "Signer - "
 243             "Cannot get interface of \"XUnoTunnel\" from service \"xsec.XMLElement\"" ) ;
 244
 245         XMLElementWrapper_XmlSecImpl* pElement = ( XMLElementWrapper_XmlSecImpl* )xEleTunnel->getSomething( XMLElementWrapper_XmlSecImpl::getUnoTunnelImplementationId() ) ;
 246         OSL_ENSURE( pElement != NULL ,
 247             "Signer - "
 248             "Cannot get implementation of \"xsec.XMLElement\"" ) ;
 249
 250         //Set signature template
 251         pElement->setNativeElement( tplNode ) ;
 252
 253         //Build XML Signature template
 254         Reference< XInterface > signtpl =
 255             xManager->createInstanceWithContext( OUString::createFromAscii( "com.sun.star.xml.crypto.XMLSignatureTemplate" ) , xContext ) ;
 256         OSL_ENSURE( signtpl.is() ,
 257             "Signer - "
 258             "Cannot get service instance of \"xsec.XMLSignatureTemplate\"" ) ;
 259
 260         Reference< XXMLSignatureTemplate > xTemplate( signtpl , UNO_QUERY ) ;
 261         OSL_ENSURE( xTemplate.is() ,
 262             "Signer - "
 263             "Cannot get interface of \"XXMLSignatureTemplate\" from service \"xsec.XMLSignatureTemplate\"" ) ;
 264
 265         //Import the signature template
 266         xTemplate->setTemplate( xElement ) ;
 267
 268         //Import the URI/Stream binding
 269         if( xUriBinding.is() )
 270             xTemplate->setBinding( xUriBinding ) ;
 271
 272         //Create security environment
 273         //Build Security Environment
 274         Reference< XInterface > xsecenv =
 275             xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.SecurityEnvironment_NssImpl"), xContext ) ;
 276         OSL_ENSURE( xsecenv.is() ,
 277             "Signer - "
 278             "Cannot get service instance of \"xsec.SecurityEnvironment\"" ) ;
 279
 280         Reference< XSecurityEnvironment > xSecEnv( xsecenv , UNO_QUERY ) ;
 281         OSL_ENSURE( xSecEnv.is() ,
 282             "Signer - "
 283             "Cannot get interface of \"XSecurityEnvironment\" from service \"xsec.SecurityEnvironment\"" ) ;
 284
 285         //Setup key slot and certDb
 286         Reference< XUnoTunnel > xEnvTunnel( xsecenv , UNO_QUERY ) ;
 287         OSL_ENSURE( xElement.is() ,
 288             "Signer - "
 289             "Cannot get interface of \"XUnoTunnel\" from service \"xsec.SecurityEnvironment\"" ) ;
 290
 291         SecurityEnvironment_NssImpl* pSecEnv = ( SecurityEnvironment_NssImpl* )xEnvTunnel->getSomething( SecurityEnvironment_NssImpl::getUnoTunnelId() ) ;
 292         OSL_ENSURE( pSecEnv != NULL ,
 293             "Signer - "
 294             "Cannot get implementation of \"xsec.SecurityEnvironment\"" ) ;
 295
 296         pSecEnv->setCryptoSlot( slot ) ;
 297         pSecEnv->setCertDb( certHandle ) ;
 298
 299         //Build XML Security Context
 300         Reference< XInterface > xmlsecctx =
 301             xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.XMLSecurityContext_NssImpl"), xContext ) ;
 302         OSL_ENSURE( xsecenv.is() ,
 303             "Signer - "
 304             "Cannot get service instance of \"xsec.XMLSecurityContext\"" ) ;
 305
 306         Reference< XXMLSecurityContext > xSecCtx( xmlsecctx , UNO_QUERY ) ;
 307         OSL_ENSURE( xSecCtx.is() ,
 308             "Signer - "
 309             "Cannot get interface of \"XXMLSecurityContext\" from service \"xsec.XMLSecurityContext\"" ) ;
 310
 311         xSecCtx->setSecurityEnvironment( xSecEnv ) ;
 312
 313         //Generate XML signature
 314         Reference< XInterface > xmlsigner =
 315             xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.XMLSignature_NssImpl"), xContext ) ;
 316         OSL_ENSURE( xmlsigner.is() ,
 317             "Signer - "
 318             "Cannot get service instance of \"xsec.XMLSignature\"" ) ;
 319
 320         Reference< XXMLSignature > xSigner( xmlsigner , UNO_QUERY ) ;
 321         OSL_ENSURE( xSigner.is() ,
 322             "Signer - "
 323             "Cannot get interface of \"XXMLSignature\" from service \"xsec.XMLSignature\"" ) ;
 324
 325         //perform signature
 326         xTemplate = xSigner->generate( xTemplate , xSecCtx ) ;
 327         OSL_ENSURE( xTemplate.is() ,
 328             "Signer - "
 329             "Cannot generate the xml signature" ) ;
 330     } catch( Exception& e ) {
 331         fprintf( stderr , "Error Message: %s\n" , OUStringToOString( e.Message , RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
 332         goto done ;
 333     }
 334
 335     dstFile = fopen( argv[3], "w" ) ;
 336     if( dstFile == NULL ) {
 337         fprintf( stderr , "### Can not open file %s\n", argv[3] ) ;
 338         goto done ;
 339     }
 340
 341     //Save result
 342     xmlDocDump( dstFile, doc ) ;
 343
 344 done:
 345     if( uri != NULL )
 346         delete uri ;
 347
 348     if( dstFile != NULL )
 349         fclose( dstFile ) ;
 350
 351     if( doc != NULL )
 352         xmlFreeDoc( doc ) ;
 353
 354     if( slot != NULL )
 355         PK11_FreeSlot( slot ) ;
 356
 357     PK11_LogoutAll() ;
 358     NSS_Shutdown() ;
 359
 360     /* Shutdown libxslt/libxml */
 361     #ifndef XMLSEC_NO_XSLT
 362     xsltCleanupGlobals();
 363     #endif /* XMLSEC_NO_XSLT */
 364     xmlCleanupParser();
 365
 366     }
 367
 368     return 0;
 369 }
 370