xmlsecurity/source/xmlsec/nss/sanextension_nssimpl.cxx

   1 /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
   2 /*
   3  * This file is part of the LibreOffice project.
   4  *
   5  * This Source Code Form is subject to the terms of the Mozilla Public
   6  * License, v. 2.0. If a copy of the MPL was not distributed with this
   7  * file, You can obtain one at http://mozilla.org/MPL/2.0/.
   8  *
   9  * This file incorporates work covered by the following license notice:
  10  *
  11  *   Licensed to the Apache Software Foundation (ASF) under one or more
  12  *   contributor license agreements. See the NOTICE file distributed
  13  *   with this work for additional information regarding copyright
  14  *   ownership. The ASF licenses this file to you under the Apache
  15  *   License, Version 2.0 (the "License"); you may not use this file
  16  *   except in compliance with the License. You may obtain a copy of
  17  *   the License at http://www.apache.org/licenses/LICENSE-2.0 .
  18  */
  19
  20 #include <sal/config.h>
  21 #include <rtl/ustring.hxx>
  22 #include <com/sun/star/security/ExtAltNameType.hpp>
  23 #include <com/sun/star/security/CertAltNameEntry.hpp>
  24 #include <com/sun/star/beans/PropertyValue.hpp>
  25 #include <comphelper/sequence.hxx>
  26 #include <seccomon.h>
  27 #include <cert.h>
  28 #include <certt.h>
  29
  30 #include "sanextension_nssimpl.hxx"
  31
  32 using namespace ::com::sun::star;
  33 using namespace ::com::sun::star::uno ;
  34 using namespace ::com::sun::star::security ;
  35
  36 namespace {
  37     // Helper functions from nss/lib/certdb/genname.c
  38     int GetNamesLength(CERTGeneralName *names)
  39     {
  40         int              length = 0;
  41         CERTGeneralName  *first;
  42
  43         first = names;
  44         if (names != nullptr) {
  45             do {
  46                 length++;
  47                 names = CERT_GetNextGeneralName(names);
  48             } while (names != first);
  49         }
  50         return length;
  51     }
  52
  53 }
  54
  55 //Methods from XSanExtension
  56 css::uno::Sequence< css::security::CertAltNameEntry > SAL_CALL SanExtensionImpl::getAlternativeNames()
  57 {
  58     if (m_Entries.empty())
  59     {
  60         SECItem item;
  61
  62         item.type = siDERCertBuffer;
  63         item.data = reinterpret_cast<unsigned char*>(m_Extn.m_xExtnValue.getArray());
  64         item.len = m_Extn.m_xExtnValue.getLength();
  65
  66         PRArenaPool *arena;
  67         CERTGeneralName *nameList;
  68         arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
  69
  70         if (!arena)
  71             return css::uno::Sequence<css::security::CertAltNameEntry>();
  72
  73         nameList = CERT_DecodeAltNameExtension(arena, &item);
  74
  75         CERTGeneralName* current = nameList;
  76
  77         int size = GetNamesLength(nameList);
  78         m_Entries.resize(size);
  79         for(int i = 0; i < size; ++i){
  80             switch (current->type) {
  81                 case certOtherName: {
  82                     m_Entries[i].Type = ExtAltNameType_OTHER_NAME;
  83                     css::beans::PropertyValue otherNameProp;
  84                     otherNameProp.Name = OUString::createFromAscii(CERT_GetOidString(&current->name.OthName.oid));
  85
  86                     Sequence< sal_Int8 > otherName( current->name.OthName.name.len ) ;
  87                     auto otherNameRange = asNonConstRange(otherName);
  88                     for( unsigned int r = 0; r < current->name.OthName.name.len ; r ++ )
  89                         otherNameRange[r] = *( current->name.OthName.name.data + r ) ;
  90
  91                     otherNameProp.Value <<= otherName;
  92
  93                     m_Entries[i].Value <<= otherNameProp;
  94                     break;
  95                                     }
  96                 case certRFC822Name:
  97                     m_Entries[i].Type = ExtAltNameType_RFC822_NAME;
  98                     m_Entries[i].Value <<= OUString(reinterpret_cast<char*>(current->name.other.data), current->name.other.len, RTL_TEXTENCODING_ASCII_US);
  99                     break;
 100                 case certDNSName:
 101                     m_Entries[i].Type = ExtAltNameType_DNS_NAME;
 102                     m_Entries[i].Value <<= OUString(reinterpret_cast<char*>(current->name.other.data), current->name.other.len, RTL_TEXTENCODING_ASCII_US);
 103                     break;
 104                 case certX400Address: {
 105                     // unsupported
 106                     m_Entries[i].Type = ExtAltNameType_X400_ADDRESS;
 107                     break;
 108                                       }
 109                 case certDirectoryName: {
 110                     // unsupported
 111                     m_Entries[i].Type = ExtAltNameType_DIRECTORY_NAME;
 112                     break;
 113                                         }
 114                 case certEDIPartyName:  {
 115                     // unsupported
 116                     m_Entries[i].Type = ExtAltNameType_EDI_PARTY_NAME;
 117                     break;
 118                                         }
 119                 case certURI:
 120                     m_Entries[i].Type = ExtAltNameType_URL;
 121                     m_Entries[i].Value <<= OUString(reinterpret_cast<char*>(current->name.other.data), current->name.other.len, RTL_TEXTENCODING_ASCII_US);
 122                     break;
 123                 case certIPAddress: {
 124                     m_Entries[i].Type = ExtAltNameType_IP_ADDRESS;
 125
 126                     Sequence< sal_Int8 > ipAddress( current->name.other.len ) ;
 127                     auto ipAddressRange = asNonConstRange(ipAddress);
 128                     for( unsigned int r = 0; r < current->name.other.len ; r ++ )
 129                         ipAddressRange[r] = *( current->name.other.data + r ) ;
 130
 131                     m_Entries[i].Value <<= ipAddress;
 132                     break;
 133                                     }
 134                 case certRegisterID:
 135                     m_Entries[i].Type = ExtAltNameType_REGISTERED_ID;
 136
 137
 138                     OString nssOid(CERT_GetOidString(&current->name.other));
 139                     OString unoOid = removeOIDFromString(nssOid);
 140                     m_Entries[i].Value <<= OStringToOUString( unoOid, RTL_TEXTENCODING_ASCII_US );
 141                     break;
 142             }
 143             current = CERT_GetNextGeneralName(current);
 144         }
 145
 146         PORT_FreeArena(arena, PR_FALSE);
 147     }
 148
 149     return comphelper::containerToSequence<css::security::CertAltNameEntry>(m_Entries);
 150 }
 151
 152 OString SanExtensionImpl::removeOIDFromString( const OString &oidString)
 153 {
 154     OString objID;
 155     static constexpr std::string_view oid("OID.");
 156     if (oidString.match(oid))
 157         objID = oidString.copy(oid.size());
 158     else
 159         objID = oidString;
 160     return objID;
 161
 162 }
 163
 164 /* vim:set shiftwidth=4 softtabstop=4 expandtab: */