/* Copyright 2015-2016 Amebis Copyright 2016 GÉANT This file is part of GÉANTLink. GÉANTLink is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. GÉANTLink is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with GÉANTLink. If not, see . */ #include #pragma comment(lib, "Cryptui.lib") ////////////////////////////////////////////////////////////////////// // wxEAPTLSConfigPanel ////////////////////////////////////////////////////////////////////// wxEAPTLSConfigPanel::wxEAPTLSConfigPanel(eap::config_tls &cfg, wxWindow* parent) : m_cfg(cfg), wxEAPTLSConfigPanelBase(parent) { // Load and set icon. if (m_certmgr.load(_T("certmgr.dll"), NULL, LOAD_LIBRARY_AS_DATAFILE | LOAD_LIBRARY_AS_IMAGE_RESOURCE)) wxSetIconFromResource(m_server_trust_icon, m_icon, m_certmgr, MAKEINTRESOURCE(218)); m_server_names->SetValidator(wxFQDNListValidator(&(m_cfg.m_server_names))); } bool wxEAPTLSConfigPanel::TransferDataToWindow() { wxCHECK(wxEAPTLSConfigPanelBase::TransferDataToWindow(), false); // Populate trusted CA list. for (std::list::const_iterator cert = m_cfg.m_trusted_root_ca.cbegin(), cert_end = m_cfg.m_trusted_root_ca.cend(); cert != cert_end; ++cert) { winstd::tstring name; if (CertGetNameString(*cert, CERT_NAME_SIMPLE_DISPLAY_TYPE, 0, NULL, name) > 0) m_root_ca->Append(wxString(name), new wxCertificateClientData(cert->duplicate())); } return true; } bool wxEAPTLSConfigPanel::TransferDataFromWindow() { // Parse trusted CA list. m_cfg.m_trusted_root_ca.clear(); for (unsigned int i = 0, i_end = m_root_ca->GetCount(); i < i_end; i++) { wxCertificateClientData *cert = dynamic_cast(m_root_ca->GetClientObject(i)); if (cert) m_cfg.add_trusted_ca(cert->m_cert->dwCertEncodingType, cert->m_cert->pbCertEncoded, cert->m_cert->cbCertEncoded); } return wxEAPTLSConfigPanelBase::TransferDataFromWindow(); } void wxEAPTLSConfigPanel::OnRootCA(wxCommandEvent& event) { wxCertificateClientData *cert = dynamic_cast(event.GetClientObject()); m_root_ca_remove->Enable(cert ? true : false); } void wxEAPTLSConfigPanel::OnRootCADClick(wxCommandEvent& event) { wxCertificateClientData *cert = dynamic_cast(event.GetClientObject()); if (cert) CryptUIDlgViewContext(CERT_STORE_CERTIFICATE_CONTEXT, cert->m_cert, this->GetHWND(), NULL, 0, NULL); } void wxEAPTLSConfigPanel::OnRootCAAddStore(wxCommandEvent& event) { UNREFERENCED_PARAMETER(event); winstd::cert_store store; if (store.create(NULL, _T("ROOT"))) { winstd::cert_context cert; cert.attach(CryptUIDlgSelectCertificateFromStore(store, this->GetHWND(), NULL, NULL, 0, 0, NULL)); if (cert) AddRootCA(cert); } } void wxEAPTLSConfigPanel::OnRootCAAddFile(wxCommandEvent& event) { UNREFERENCED_PARAMETER(event); const wxString separator(wxT("|")); wxFileDialog open_dialog(this, _("Add Certificate"), wxEmptyString, wxEmptyString, _("Certificate Files (*.cer;*.crt;*.der;*.p7b;*.pem)") + separator + wxT("*.cer;*.crt;*.der;*.p7b;*.pem") + separator + _("X.509 Certificate Files (*.cer;*.crt;*.der;*.pem)") + separator + wxT("*.cer;*.crt;*.der;*.pem") + separator + _("PKCS #7 Certificate Files (*.p7b)") + separator + wxT("*.p7b") + separator + _("All Files (*.*)") + separator + wxT("*.*"), wxFD_OPEN|wxFD_FILE_MUST_EXIST|wxFD_MULTIPLE); if (open_dialog.ShowModal() == wxID_CANCEL) { event.Skip(); return; } wxArrayString paths; open_dialog.GetPaths(paths); for (size_t i = 0, i_end = paths.GetCount(); i < i_end; i++) { // Load certificate(s) from file. winstd::cert_store cs; if (cs.create(CERT_STORE_PROV_FILENAME, X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, NULL, CERT_STORE_OPEN_EXISTING_FLAG | CERT_STORE_READONLY_FLAG, (LPCTSTR)(paths[i]))) { for (PCCERT_CONTEXT cert = NULL; (cert = CertEnumCertificatesInStore(cs, cert)) != NULL;) AddRootCA(cert); } else wxMessageBox(wxString::Format(_("Invalid or unsupported certificate file %s"), paths[i]), _("Error"), wxOK | wxICON_EXCLAMATION, this); } } void wxEAPTLSConfigPanel::OnRootCARemove(wxCommandEvent& event) { UNREFERENCED_PARAMETER(event); wxArrayInt selections; for (int i = m_root_ca->GetSelections(selections); i--; ) m_root_ca->Delete(selections[i]); m_root_ca_remove->Enable(false); } bool wxEAPTLSConfigPanel::AddRootCA(PCCERT_CONTEXT cert) { for (unsigned int i = 0, i_end = m_root_ca->GetCount(); i < i_end; i++) { wxCertificateClientData *c = dynamic_cast(m_root_ca->GetClientObject(i)); if (c && c->m_cert && c->m_cert->cbCertEncoded == cert->cbCertEncoded && memcmp(c->m_cert->pbCertEncoded, cert->pbCertEncoded, cert->cbCertEncoded) == 0) { // This certificate is already on the list. m_root_ca->SetSelection(i); m_root_ca_remove->Enable(); return false; } } // Add certificate to the list. winstd::tstring name; if (CertGetNameString(cert, CERT_NAME_SIMPLE_DISPLAY_TYPE, 0, NULL, name) > 0) { int i = m_root_ca->Append(wxString(name), new wxCertificateClientData(CertDuplicateCertificateContext(cert))); if (0 <= i) { m_root_ca->SetSelection(i); m_root_ca_remove->Enable(); } return true; } return false; } ////////////////////////////////////////////////////////////////////// // wxCertificateClientData ////////////////////////////////////////////////////////////////////// wxCertificateClientData::wxCertificateClientData(PCCERT_CONTEXT cert) : m_cert(cert) { } wxCertificateClientData::~wxCertificateClientData() { if (m_cert) CertFreeCertificateContext(m_cert); } ////////////////////////////////////////////////////////////////////// // wxHostNameValidator ////////////////////////////////////////////////////////////////////// wxIMPLEMENT_DYNAMIC_CLASS(wxHostNameValidator, wxValidator); wxHostNameValidator::wxHostNameValidator(std::string *val) : m_val(val), wxValidator() { } wxHostNameValidator::wxHostNameValidator(const wxHostNameValidator &other) : m_val(other.m_val), wxValidator(other) { } wxObject* wxHostNameValidator::Clone() const { return new wxHostNameValidator(*this); } bool wxHostNameValidator::Validate(wxWindow *parent) { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); wxTextCtrl *ctrl = (wxTextCtrl*)GetWindow(); if (!ctrl->IsEnabled()) return true; wxString val(ctrl->GetValue()); return Parse(val, 0, val.Length(), ctrl, parent); } bool wxHostNameValidator::TransferToWindow() { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); if (m_val) ((wxTextCtrl*)GetWindow())->SetValue(*m_val); return true; } bool wxHostNameValidator::TransferFromWindow() { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); wxTextCtrl *ctrl = (wxTextCtrl*)GetWindow(); wxString val(ctrl->GetValue()); return Parse(val, 0, val.Length(), ctrl, NULL, m_val); } bool wxHostNameValidator::Parse(const wxString &val_in, size_t i_start, size_t i_end, wxTextCtrl *ctrl, wxWindow *parent, std::string *val_out) { const wxStringCharType *buf = val_in; size_t i = i_start; for (;;) { if (i >= i_end) { // End of host name found. if (val_out) val_out->assign(val_in.c_str() + i_start, i - i_start); return true; } else if (_tcschr(wxT("abcdefghijklmnopqrstuvwxyz0123456789-*"), buf[i])) { // Valid character found. i++; } else { // Invalid character found. ctrl->SetFocus(); ctrl->SetSelection(i, i + 1); wxMessageBox(wxString::Format(_("Invalid character in host name found: %c"), buf[i]), _("Validation conflict"), wxOK | wxICON_EXCLAMATION, parent); return false; } } } ////////////////////////////////////////////////////////////////////// // wxFQDNValidator ////////////////////////////////////////////////////////////////////// wxIMPLEMENT_DYNAMIC_CLASS(wxFQDNValidator, wxValidator); wxFQDNValidator::wxFQDNValidator(std::string *val) : m_val(val), wxValidator() { } wxFQDNValidator::wxFQDNValidator(const wxFQDNValidator &other) : m_val(other.m_val), wxValidator(other) { } wxObject* wxFQDNValidator::Clone() const { return new wxFQDNValidator(*this); } bool wxFQDNValidator::Validate(wxWindow *parent) { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); wxTextCtrl *ctrl = (wxTextCtrl*)GetWindow(); if (!ctrl->IsEnabled()) return true; wxString val(ctrl->GetValue()); return Parse(val, 0, val.Length(), ctrl, parent); } bool wxFQDNValidator::TransferToWindow() { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); if (m_val) ((wxTextCtrl*)GetWindow())->SetValue(*m_val); return true; } bool wxFQDNValidator::TransferFromWindow() { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); wxTextCtrl *ctrl = (wxTextCtrl*)GetWindow(); wxString val(ctrl->GetValue()); return Parse(val, 0, val.Length(), ctrl, NULL, m_val); } bool wxFQDNValidator::Parse(const wxString &val_in, size_t i_start, size_t i_end, wxTextCtrl *ctrl, wxWindow *parent, std::string *val_out) { const wxStringCharType *buf = val_in; size_t i = i_start; for (;;) { const wxStringCharType *buf_next; if ((buf_next = wmemchr(buf + i, L'.', i_end - i)) != NULL) { // FQDN separator found. if (!wxHostNameValidator::Parse(val_in, i, buf_next - buf, ctrl, parent)) return false; i = buf_next - buf + 1; } else if (wxHostNameValidator::Parse(val_in, i, i_end, ctrl, parent)) { // The rest of the FQDN parsed succesfully. if (val_out) val_out->assign(val_in.c_str() + i_start, i_end - i_start); return true; } else return false; } } ////////////////////////////////////////////////////////////////////// // wxFQDNListValidator ////////////////////////////////////////////////////////////////////// wxIMPLEMENT_DYNAMIC_CLASS(wxFQDNListValidator, wxValidator); wxFQDNListValidator::wxFQDNListValidator(std::list *val) : m_val(val), wxValidator() { } wxFQDNListValidator::wxFQDNListValidator(const wxFQDNListValidator &other) : m_val(other.m_val), wxValidator(other) { } wxObject* wxFQDNListValidator::Clone() const { return new wxFQDNListValidator(*this); } bool wxFQDNListValidator::Validate(wxWindow *parent) { wxTextCtrl *ctrl = (wxTextCtrl*)GetWindow(); if (!ctrl->IsEnabled()) return true; wxString val(ctrl->GetValue()); return Parse(val, 0, val.Length(), ctrl, parent); } bool wxFQDNListValidator::TransferToWindow() { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); if (m_val) { wxString str; for (std::list::const_iterator name = m_val->cbegin(), name_end = m_val->cend(); name != name_end; ++name) { if (!str.IsEmpty()) str += wxT("; "); str += *name; } ((wxTextCtrl*)GetWindow())->SetValue(str); } return true; } bool wxFQDNListValidator::TransferFromWindow() { wxASSERT(GetWindow()->IsKindOf(CLASSINFO(wxTextCtrl))); wxTextCtrl *ctrl = (wxTextCtrl*)GetWindow(); wxString val(ctrl->GetValue()); return Parse(val, 0, val.Length(), ctrl, NULL, m_val); } bool wxFQDNListValidator::Parse(const wxString &val_in, size_t i_start, size_t i_end, wxTextCtrl *ctrl, wxWindow *parent, std::list *val_out) { const wxStringCharType *buf = val_in; std::string _fqdn, *fqdn = val_out ? &_fqdn : NULL; std::list _val_out; size_t i = i_start; for (;;) { // Skip initial white-space. for (; i < i_end && _istspace(buf[i]); i++); const wxStringCharType *buf_next; if ((buf_next = wmemchr(buf + i, L';', i_end - i)) != NULL) { // FQDN list separator found. // Skip trailing white-space. size_t i_next = buf_next - buf; for (; i < i_next && _istspace(buf[i_next - 1]); i_next--); if (!wxFQDNValidator::Parse(val_in, i, i_next, ctrl, parent, fqdn)) return false; if (fqdn && !fqdn->empty()) _val_out.push_back(std::move(*fqdn)); i = buf_next - buf + 1; } else { // Skip trailing white-space. for (; i < i_end && _istspace(buf[i_end - 1]); i_end--); if (wxHostNameValidator::Parse(val_in, i, i_end, ctrl, parent, fqdn)) { // The rest of the FQDN list parsed succesfully. if (fqdn && !fqdn->empty()) _val_out.push_back(std::move(*fqdn)); if (val_out) *val_out = std::move(_val_out); return true; } else return false; } } }