xmlsecurity/workben/pdfverify.cxx

   1 /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
   2 /*
   3  * This file is part of the LibreOffice project.
   4  *
   5  * This Source Code Form is subject to the terms of the Mozilla Public
   6  * License, v. 2.0. If a copy of the MPL was not distributed with this
   7  * file, You can obtain one at http://mozilla.org/MPL/2.0/.
   8  */
   9
  10 #include <iostream>
  11 #include <string_view>
  12
  13 #include <com/sun/star/lang/XMultiServiceFactory.hpp>
  14 #include <com/sun/star/uno/XComponentContext.hpp>
  15 #include <com/sun/star/xml/crypto/SEInitializer.hpp>
  16
  17 #include <comphelper/processfactory.hxx>
  18 #include <cppuhelper/bootstrap.hxx>
  19 #include <osl/file.hxx>
  20 #include <sal/log.hxx>
  21 #include <sal/main.h>
  22 #include <comphelper/diagnose_ex.hxx>
  23 #include <vcl/filter/PngImageWriter.hxx>
  24 #include <vcl/svapp.hxx>
  25 #include <vcl/graphicfilter.hxx>
  26 #include <vcl/filter/pdfdocument.hxx>
  27 #include <comphelper/scopeguard.hxx>
  28 #include <svl/sigstruct.hxx>
  29
  30 #include <pdfsignaturehelper.hxx>
  31
  32 using namespace com::sun::star;
  33
  34 namespace
  35 {
  36 /// Does PDF to PNG conversion using pdfium.
  37 void generatePreview(std::string_view rPdfPath, std::string_view rPngPath)
  38 {
  39     GraphicFilter& rFilter = GraphicFilter::GetGraphicFilter();
  40     Graphic aGraphic;
  41     OUString aInURL;
  42     osl::FileBase::getFileURLFromSystemPath(OUString::fromUtf8(rPdfPath), aInURL);
  43     SvFileStream aInStream(aInURL, StreamMode::READ);
  44     if (rFilter.ImportGraphic(aGraphic, u"", aInStream, GRFILTER_FORMAT_DONTKNOW, nullptr,
  45                               GraphicFilterImportFlags::NONE)
  46         != ERRCODE_NONE)
  47         return;
  48
  49     BitmapEx aBitmapEx = aGraphic.GetBitmapEx();
  50     OUString aOutURL;
  51     osl::FileBase::getFileURLFromSystemPath(OUString::fromUtf8(rPngPath), aOutURL);
  52     SvFileStream aOutStream(aOutURL, StreamMode::WRITE);
  53     vcl::PngImageWriter aWriter(aOutStream);
  54     aWriter.write(aBitmapEx);
  55 }
  56
  57 int pdfVerify(int nArgc, char** pArgv)
  58 {
  59     if (nArgc < 2)
  60     {
  61         SAL_WARN("xmlsecurity.workben", "not enough parameters");
  62         return 1;
  63     }
  64
  65     // Initialize nss / mscrypto.
  66     uno::Reference<uno::XComponentContext> xComponentContext;
  67     try
  68     {
  69         xComponentContext = cppu::defaultBootstrap_InitialComponentContext();
  70     }
  71     catch (const uno::RuntimeException&)
  72     {
  73         TOOLS_WARN_EXCEPTION("xmlsecurity.workben",
  74                              "cppu::defaultBootstrap_InitialComponentContext() failed:");
  75         return 1;
  76     }
  77     uno::Reference<lang::XMultiComponentFactory> xMultiComponentFactory
  78         = xComponentContext->getServiceManager();
  79     uno::Reference<lang::XMultiServiceFactory> xMultiServiceFactory(xMultiComponentFactory,
  80                                                                     uno::UNO_QUERY);
  81     comphelper::setProcessServiceFactory(xMultiServiceFactory);
  82
  83     InitVCL();
  84     comphelper::ScopeGuard g([] { DeInitVCL(); });
  85     if (nArgc > 3 && pArgv[3] == std::string_view("-p"))
  86     {
  87         generatePreview(pArgv[1], pArgv[2]);
  88         return 0;
  89     }
  90
  91     uno::Reference<xml::crypto::XSEInitializer> xSEInitializer;
  92     try
  93     {
  94         xSEInitializer = xml::crypto::SEInitializer::create(xComponentContext);
  95     }
  96     catch (const uno::DeploymentException&)
  97     {
  98         TOOLS_WARN_EXCEPTION("xmlsecurity.workben",
  99                              "DeploymentException while creating SEInitializer:");
 100         return 1;
 101     }
 102     uno::Reference<xml::crypto::XXMLSecurityContext> xSecurityContext
 103         = xSEInitializer->createSecurityContext(OUString());
 104
 105     OUString aInURL;
 106     osl::FileBase::getFileURLFromSystemPath(OUString::fromUtf8(pArgv[1]), aInURL);
 107     OUString aOutURL;
 108     if (nArgc > 2)
 109         osl::FileBase::getFileURLFromSystemPath(OUString::fromUtf8(pArgv[2]), aOutURL);
 110
 111     bool bRemoveSignature = false;
 112     if (nArgc > 3 && pArgv[3] == std::string_view("-r"))
 113         bRemoveSignature = true;
 114
 115     SvFileStream aStream(aInURL, StreamMode::READ);
 116     if (aOutURL.isEmpty() && !bRemoveSignature)
 117     {
 118         std::cerr << "verifying signatures" << std::endl;
 119         PDFSignatureHelper aHelper;
 120         aStream.Seek(0);
 121         aHelper.ReadAndVerifySignatureSvStream(aStream);
 122         if (aHelper.GetSignatureInformations().empty())
 123             std::cerr << "found no signatures" << std::endl;
 124         else
 125         {
 126             std::cerr << "found " << aHelper.GetSignatureInformations().size() << " signatures"
 127                       << std::endl;
 128             for (size_t i = 0; i < aHelper.GetSignatureInformations().size(); ++i)
 129             {
 130                 const SignatureInformation& rInfo = aHelper.GetSignatureInformations()[i];
 131                 bool bSuccess
 132                     = rInfo.nStatus == xml::crypto::SecurityOperationStatus_OPERATION_SUCCEEDED;
 133                 std::cerr << "signature #" << i << ": digest match? " << bSuccess << std::endl;
 134                 std::cerr << "signature #" << i << ": partial? " << rInfo.bPartialDocumentSignature
 135                           << std::endl;
 136             }
 137         }
 138
 139         return 0;
 140     }
 141
 142     vcl::filter::PDFDocument aDocument;
 143     if (!aDocument.Read(aStream))
 144     {
 145         SAL_WARN("xmlsecurity.workben", "failed to read the document");
 146         return 1;
 147     }
 148
 149     if (bRemoveSignature)
 150     {
 151         std::cerr << "removing the last signature" << std::endl;
 152         std::vector<vcl::filter::PDFObjectElement*> aSignatures = aDocument.GetSignatureWidgets();
 153         if (aSignatures.empty())
 154         {
 155             std::cerr << "found no signatures" << std::endl;
 156             return 1;
 157         }
 158
 159         size_t nPosition = aSignatures.size() - 1;
 160         if (!aDocument.RemoveSignature(nPosition))
 161         {
 162             SAL_WARN("xmlsecurity.workben", "failed to remove signature #" << nPosition);
 163             return 1;
 164         }
 165
 166         SvFileStream aOutStream(aOutURL, StreamMode::WRITE | StreamMode::TRUNC);
 167         if (!aDocument.Write(aOutStream))
 168         {
 169             SAL_WARN("xmlsecurity.workben", "failed to write the document");
 170             return 1;
 171         }
 172
 173         return 0;
 174     }
 175
 176     std::cerr << "adding a new signature" << std::endl;
 177     uno::Reference<xml::crypto::XSecurityEnvironment> xSecurityEnvironment
 178         = xSecurityContext->getSecurityEnvironment();
 179     uno::Sequence<uno::Reference<security::XCertificate>> aCertificates
 180         = xSecurityEnvironment->getPersonalCertificates();
 181     if (!aCertificates.hasElements())
 182     {
 183         SAL_WARN("xmlsecurity.workben", "no signing certificates found");
 184         return 1;
 185     }
 186     if (!aDocument.Sign(aCertificates[0], "pdfverify", /*bAdES=*/true))
 187     {
 188         SAL_WARN("xmlsecurity.workben", "failed to sign");
 189         return 1;
 190     }
 191
 192     SvFileStream aOutStream(aOutURL, StreamMode::WRITE | StreamMode::TRUNC);
 193     if (!aDocument.Write(aOutStream))
 194     {
 195         SAL_WARN("xmlsecurity.workben", "failed to write the document");
 196         return 1;
 197     }
 198
 199     return 0;
 200 }
 201 }
 202
 203 SAL_IMPLEMENT_MAIN_WITH_ARGS(nArgc, pArgv)
 204 {
 205     try
 206     {
 207         return pdfVerify(nArgc, pArgv);
 208     }
 209     catch (...)
 210     {
 211         std::cerr << "pdfverify: uncaught exception while invoking pdfVerify()" << std::endl;
 212         return 1;
 213     }
 214 }
 215
 216 /* vim:set shiftwidth=4 softtabstop=4 expandtab: */