371 lines
14 KiB
C++
371 lines
14 KiB
C++
/*************************************************************************
|
|
*
|
|
* $RCSfile: verifier.cxx,v $
|
|
*
|
|
* $Revision: 1.2 $
|
|
*
|
|
* last change: $Author: mmi $ $Date: 2004-07-15 08:22:31 $
|
|
*
|
|
* The Contents of this file are made available subject to the terms of
|
|
* either of the following licenses
|
|
*
|
|
* - GNU Lesser General Public License Version 2.1
|
|
* - Sun Industry Standards Source License Version 1.1
|
|
*
|
|
* Sun Microsystems Inc., October, 2000
|
|
*
|
|
* GNU Lesser General Public License Version 2.1
|
|
* =============================================
|
|
* Copyright 2000 by Sun Microsystems, Inc.
|
|
* 901 San Antonio Road, Palo Alto, CA 94303, USA
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License version 2.1, as published by the Free Software Foundation.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston,
|
|
* MA 02111-1307 USA
|
|
*
|
|
*
|
|
* Sun Industry Standards Source License Version 1.1
|
|
* =================================================
|
|
* The contents of this file are subject to the Sun Industry Standards
|
|
* Source License Version 1.1 (the "License"); You may not use this file
|
|
* except in compliance with the License. You may obtain a copy of the
|
|
* License at http://www.openoffice.org/license.html.
|
|
*
|
|
* Software provided under this License is provided on an "AS IS" basis,
|
|
* WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING,
|
|
* WITHOUT LIMITATION, WARRANTIES THAT THE SOFTWARE IS FREE OF DEFECTS,
|
|
* MERCHANTABLE, FIT FOR A PARTICULAR PURPOSE, OR NON-INFRINGING.
|
|
* See the License for the specific provisions governing your rights and
|
|
* obligations concerning the Software.
|
|
*
|
|
* The Initial Developer of the Original Code is: Sun Microsystems, Inc.
|
|
*
|
|
* Copyright: 2000 by Sun Microsystems, Inc.
|
|
*
|
|
* All Rights Reserved.
|
|
*
|
|
* Contributor(s): _______________________________________
|
|
*
|
|
*
|
|
************************************************************************/
|
|
|
|
#include <stdio.h>
|
|
#include "helper.hxx"
|
|
|
|
#include "libxml/tree.h"
|
|
#include "libxml/parser.h"
|
|
#ifndef XMLSEC_NO_XSLT
|
|
#include "libxslt/xslt.h"
|
|
#endif
|
|
|
|
#include "securityenvironment_nssimpl.hxx"
|
|
#include "xmlelementwrapper_xmlsecimpl.hxx"
|
|
|
|
#include "nspr.h"
|
|
#include "prtypes.h"
|
|
|
|
#include "pk11func.h"
|
|
#include "cert.h"
|
|
#include "cryptohi.h"
|
|
#include "certdb.h"
|
|
#include "nss.h"
|
|
|
|
#include "xmlsec/strings.h"
|
|
#include "xmlsec/xmltree.h"
|
|
|
|
#include <rtl/ustring.hxx>
|
|
#include <cppuhelper/servicefactory.hxx>
|
|
|
|
#include <com/sun/star/lang/XComponent.hpp>
|
|
#include <com/sun/star/beans/PropertyValue.hpp>
|
|
#include <com/sun/star/xml/wrapper/XXMLElementWrapper.hpp>
|
|
#include <com/sun/star/xml/wrapper/XXMLDocumentWrapper.hpp>
|
|
#include <com/sun/star/xml/crypto/XXMLSignature.hpp>
|
|
#include <com/sun/star/xml/crypto/XXMLSignatureTemplate.hpp>
|
|
#include <com/sun/star/xml/crypto/XXMLSecurityContext.hpp>
|
|
#include <com/sun/star/xml/crypto/XSecurityEnvironment.hpp>
|
|
|
|
using namespace ::rtl ;
|
|
using namespace ::cppu ;
|
|
using namespace ::com::sun::star::uno ;
|
|
using namespace ::com::sun::star::io ;
|
|
using namespace ::com::sun::star::ucb ;
|
|
using namespace ::com::sun::star::beans ;
|
|
using namespace ::com::sun::star::document ;
|
|
using namespace ::com::sun::star::lang ;
|
|
using namespace ::com::sun::star::registry ;
|
|
using namespace ::com::sun::star::xml::wrapper ;
|
|
using namespace ::com::sun::star::xml::crypto ;
|
|
|
|
|
|
int SAL_CALL main( int argc, char **argv )
|
|
{
|
|
CERTCertDBHandle* certHandle = NULL ;
|
|
PK11SlotInfo* slot = NULL ;
|
|
xmlDocPtr doc = NULL ;
|
|
xmlNodePtr tplNode ;
|
|
xmlNodePtr tarNode ;
|
|
xmlAttrPtr idAttr ;
|
|
xmlChar* idValue ;
|
|
xmlAttrPtr uriAttr ;
|
|
xmlChar* uriValue ;
|
|
OUString* uri = NULL ;
|
|
Reference< XUriBinding > xUriBinding ;
|
|
|
|
if( argc != 4 ) {
|
|
fprintf( stderr, "Usage: %s < CertDir > <file_url> <rdb file>\n" , argv[0] ) ;
|
|
return 1 ;
|
|
}
|
|
|
|
//Init libxml and libxslt libraries
|
|
xmlInitParser();
|
|
LIBXML_TEST_VERSION
|
|
xmlLoadExtDtdDefaultValue = XML_DETECT_IDS | XML_COMPLETE_ATTRS;
|
|
xmlSubstituteEntitiesDefault(1);
|
|
|
|
#ifndef XMLSEC_NO_XSLT
|
|
xmlIndentTreeOutput = 1;
|
|
#endif // XMLSEC_NO_XSLT
|
|
|
|
|
|
//Initialize NSPR and NSS
|
|
PR_Init( PR_SYSTEM_THREAD, PR_PRIORITY_NORMAL, 1 ) ;
|
|
PK11_SetPasswordFunc( PriPK11PasswordFunc ) ;
|
|
if( NSS_Init( argv[1] ) != SECSuccess ) {
|
|
fprintf( stderr , "### cannot intialize NSS!\n" ) ;
|
|
return 1 ;
|
|
}
|
|
|
|
certHandle = CERT_GetDefaultCertDB() ;
|
|
slot = PK11_GetInternalKeySlot() ;
|
|
|
|
//Load XML document
|
|
doc = xmlParseFile( argv[2] ) ;
|
|
if( doc == NULL || xmlDocGetRootElement( doc ) == NULL ) {
|
|
fprintf( stderr , "### Cannot load template xml document!\n" ) ;
|
|
goto done ;
|
|
}
|
|
|
|
//Find the signature template
|
|
tplNode = xmlSecFindNode( xmlDocGetRootElement( doc ), xmlSecNodeSignature, xmlSecDSigNs ) ;
|
|
if( tplNode == NULL ) {
|
|
fprintf( stderr , "### Cannot find the signature template!\n" ) ;
|
|
goto done ;
|
|
}
|
|
|
|
//Find the element with ID attribute
|
|
tarNode = xmlSecFindNode( xmlDocGetRootElement( doc ), ( xmlChar* )"document", ( xmlChar* )"http://openoffice.org/2000/office" ) ;
|
|
if( tarNode == NULL ) {
|
|
tarNode = xmlSecFindNode( xmlDocGetRootElement( doc ), ( xmlChar* )"document", NULL ) ;
|
|
}
|
|
|
|
//Find the "id" attrbute in the element
|
|
if( tarNode != NULL ) {
|
|
if( ( idAttr = xmlHasProp( tarNode, ( xmlChar* )"id" ) ) != NULL ) {
|
|
//NULL
|
|
} else if( ( idAttr = xmlHasProp( tarNode, ( xmlChar* )"Id" ) ) != NULL ) {
|
|
//NULL
|
|
} else {
|
|
idAttr = NULL ;
|
|
}
|
|
}
|
|
|
|
//Add ID to DOM
|
|
if( idAttr != NULL ) {
|
|
idValue = xmlNodeListGetString( tarNode->doc, idAttr->children, 1 ) ;
|
|
if( idValue == NULL ) {
|
|
fprintf( stderr , "### the ID value is NULL!\n" ) ;
|
|
goto done ;
|
|
}
|
|
|
|
if( xmlAddID( NULL, doc, idValue, idAttr ) == NULL ) {
|
|
fprintf( stderr , "### Can not add the ID value!\n" ) ;
|
|
goto done ;
|
|
}
|
|
}
|
|
|
|
//Reference handler
|
|
//Find the signature reference
|
|
tarNode = xmlSecFindNode( tplNode, xmlSecNodeReference, xmlSecDSigNs ) ;
|
|
if( tarNode == NULL ) {
|
|
fprintf( stderr , "### Cannot find the signature reference!\n" ) ;
|
|
goto done ;
|
|
}
|
|
|
|
//Find the "URI" attrbute in the reference
|
|
uriAttr = xmlHasProp( tarNode, ( xmlChar* )"URI" ) ;
|
|
if( tarNode == NULL ) {
|
|
fprintf( stderr , "### Cannot find URI of the reference!\n" ) ;
|
|
goto done ;
|
|
}
|
|
|
|
//Get the "URI" attrbute value
|
|
uriValue = xmlNodeListGetString( tarNode->doc, uriAttr->children, 1 ) ;
|
|
if( uriValue == NULL ) {
|
|
fprintf( stderr , "### the URI value is NULL!\n" ) ;
|
|
goto done ;
|
|
}
|
|
|
|
if( strchr( ( const char* )uriValue, '/' ) != NULL && strchr( ( const char* )uriValue, '#' ) == NULL ) {
|
|
fprintf( stdout , "### Find a stream URI [%s]\n", uriValue ) ;
|
|
// uri = new ::rtl::OUString( ( const sal_Unicode* )uriValue ) ;
|
|
uri = new ::rtl::OUString( ( const sal_Char* )uriValue, xmlStrlen( uriValue ), RTL_TEXTENCODING_ASCII_US ) ;
|
|
}
|
|
|
|
if( uri != NULL ) {
|
|
fprintf( stdout , "### Find the URI [%s]\n", OUStringToOString( *uri , RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
|
|
Reference< XInputStream > xStream = createStreamFromFile( *uri ) ;
|
|
if( !xStream.is() ) {
|
|
fprintf( stderr , "### Can not get the URI stream!\n" ) ;
|
|
goto done ;
|
|
}
|
|
|
|
xUriBinding = new OUriBinding( *uri, xStream ) ;
|
|
}
|
|
|
|
|
|
try {
|
|
Reference< XMultiComponentFactory > xManager = NULL ;
|
|
Reference< XComponentContext > xContext = NULL ;
|
|
|
|
xManager = serviceManager( xContext , OUString::createFromAscii( "local" ), OUString::createFromAscii( argv[3] ) ) ;
|
|
|
|
//Create signature template
|
|
Reference< XInterface > element =
|
|
xManager->createInstanceWithContext( OUString::createFromAscii( "com.sun.star.xml.security.bridge.xmlsec.XMLElementWrapper_XmlSecImpl" ) , xContext ) ;
|
|
OSL_ENSURE( element.is() ,
|
|
"Verifier - "
|
|
"Cannot get service instance of \"xsec.XMLElementWrapper\"" ) ;
|
|
|
|
Reference< XXMLElementWrapper > xElement( element , UNO_QUERY ) ;
|
|
OSL_ENSURE( xElement.is() ,
|
|
"Verifier - "
|
|
"Cannot get interface of \"XXMLElementWrapper\" from service \"xsec.XMLElementWrapper\"" ) ;
|
|
|
|
Reference< XUnoTunnel > xEleTunnel( xElement , UNO_QUERY ) ;
|
|
OSL_ENSURE( xEleTunnel.is() ,
|
|
"Verifier - "
|
|
"Cannot get interface of \"XUnoTunnel\" from service \"xsec.XMLElement\"" ) ;
|
|
|
|
XMLElementWrapper_XmlSecImpl* pElement = ( XMLElementWrapper_XmlSecImpl* )xEleTunnel->getSomething( XMLElementWrapper_XmlSecImpl::getUnoTunnelImplementationId() ) ;
|
|
OSL_ENSURE( pElement != NULL ,
|
|
"Verifier - "
|
|
"Cannot get implementation of \"xsec.XMLElementWrapper\"" ) ;
|
|
|
|
//Set signature template
|
|
pElement->setNativeElement( tplNode ) ;
|
|
|
|
//Build XML Signature template
|
|
Reference< XInterface > signtpl =
|
|
xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.crypto.XMLSignatureTemplate"), xContext ) ;
|
|
OSL_ENSURE( signtpl.is() ,
|
|
"Verifier - "
|
|
"Cannot get service instance of \"xsec.XMLSignatureTemplate\"" ) ;
|
|
|
|
Reference< XXMLSignatureTemplate > xTemplate( signtpl , UNO_QUERY ) ;
|
|
OSL_ENSURE( xTemplate.is() ,
|
|
"Verifier - "
|
|
"Cannot get interface of \"XXMLSignatureTemplate\" from service \"xsec.XMLSignatureTemplate\"" ) ;
|
|
|
|
//Import the signature template
|
|
xTemplate->setTemplate( xElement ) ;
|
|
|
|
//Import the URI/Stream binding
|
|
if( xUriBinding.is() )
|
|
xTemplate->setBinding( xUriBinding ) ;
|
|
|
|
//Create security environment
|
|
//Build Security Environment
|
|
Reference< XInterface > xsecenv =
|
|
xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.SecurityEnvironment_NssImpl"), xContext ) ;
|
|
OSL_ENSURE( xsecenv.is() ,
|
|
"Verifier - "
|
|
"Cannot get service instance of \"xsec.SecurityEnvironment\"" ) ;
|
|
|
|
Reference< XSecurityEnvironment > xSecEnv( xsecenv , UNO_QUERY ) ;
|
|
OSL_ENSURE( xSecEnv.is() ,
|
|
"Verifier - "
|
|
"Cannot get interface of \"XSecurityEnvironment\" from service \"xsec.SecurityEnvironment\"" ) ;
|
|
|
|
//Setup key slot and certDb
|
|
Reference< XUnoTunnel > xEnvTunnel( xsecenv , UNO_QUERY ) ;
|
|
OSL_ENSURE( xElement.is() ,
|
|
"Verifier - "
|
|
"Cannot get interface of \"XUnoTunnel\" from service \"xsec.SecurityEnvironment\"" ) ;
|
|
|
|
SecurityEnvironment_NssImpl* pSecEnv = ( SecurityEnvironment_NssImpl* )xEnvTunnel->getSomething( SecurityEnvironment_NssImpl::getUnoTunnelId() ) ;
|
|
OSL_ENSURE( pSecEnv != NULL ,
|
|
"Verifier - "
|
|
"Cannot get implementation of \"xsec.SecurityEnvironment\"" ) ;
|
|
|
|
pSecEnv->setCryptoSlot( slot ) ;
|
|
pSecEnv->setCertDb( certHandle ) ;
|
|
|
|
//Build XML Security Context
|
|
Reference< XInterface > xmlsecctx =
|
|
xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.XMLSecurityContext_NssImpl"), xContext ) ;
|
|
OSL_ENSURE( xsecenv.is() ,
|
|
"Verifier - "
|
|
"Cannot get service instance of \"xsec.XMLSecurityContext\"" ) ;
|
|
|
|
Reference< XXMLSecurityContext > xSecCtx( xmlsecctx , UNO_QUERY ) ;
|
|
OSL_ENSURE( xSecCtx.is() ,
|
|
"Verifier - "
|
|
"Cannot get interface of \"XXMLSecurityContext\" from service \"xsec.XMLSecurityContext\"" ) ;
|
|
|
|
xSecCtx->setSecurityEnvironment( xSecEnv ) ;
|
|
|
|
//Generate XML signature
|
|
Reference< XInterface > xmlsigner =
|
|
xManager->createInstanceWithContext( OUString::createFromAscii("com.sun.star.xml.security.bridge.xmlsec.XMLSignature_NssImpl"), xContext ) ;
|
|
OSL_ENSURE( xmlsigner.is() ,
|
|
"Verifier - "
|
|
"Cannot get service instance of \"xsec.XMLSignature\"" ) ;
|
|
|
|
Reference< XXMLSignature > xSigner( xmlsigner , UNO_QUERY ) ;
|
|
OSL_ENSURE( xSigner.is() ,
|
|
"Verifier - "
|
|
"Cannot get interface of \"XXMLSignature\" from service \"xsec.XMLSignature\"" ) ;
|
|
|
|
|
|
//perform validation
|
|
sal_Bool valid = xSigner->validate( xTemplate , xSecCtx ) ;
|
|
if( !valid ) {
|
|
printf( "Signature is INVALID!\n" ) ;
|
|
} else {
|
|
printf( "Signature is VALID!\n" ) ;
|
|
}
|
|
} catch( Exception& e ) {
|
|
fprintf( stderr , "Error Message: %s\n" , OUStringToOString( e.Message , RTL_TEXTENCODING_ASCII_US ).getStr() ) ;
|
|
goto done ;
|
|
}
|
|
|
|
done :
|
|
if( doc != NULL )
|
|
xmlFreeDoc( doc ) ;
|
|
|
|
if( slot != NULL )
|
|
PK11_FreeSlot( slot ) ;
|
|
|
|
PK11_LogoutAll() ;
|
|
NSS_Shutdown() ;
|
|
|
|
/* Shutdown libxslt/libxml */
|
|
#ifndef XMLSEC_NO_XSLT
|
|
xsltCleanupGlobals();
|
|
#endif /* XMLSEC_NO_XSLT */
|
|
xmlCleanupParser();
|
|
|
|
return 0 ;
|
|
}
|
|
|