mirrors/nextcloud-desktop
1
0
Fork 0
mirror of https://github.com/nextcloud/desktop.git synced 2024-12-22 13:44:34 +03:00
Code Issues Projects Releases Packages Wiki Activity
nextcloud-desktop/src/mirall/sslerrordialog.cpp

222 lines
7.4 KiB
C++
Raw Normal View History

SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
/*
* Copyright (C) by Klaas Freitag <freitag@kde.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*/
A lot of krazy2 (codechecker) fixes.
2012-05-21 18:48:49 +04:00
#include "mirall/mirallconfigfile.h"
Added utility class with format fingerprint method. Removed other obsolete formatting method.
2012-12-14 00:36:44 +04:00
#include "mirall/utility.h"
#include "mirall/sslerrordialog.h"
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
#include <QtGui>
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
#include <QtNetwork>
Compile with Qt5
2013-08-28 22:58:22 +04:00
#if QT_VERSION >= QT_VERSION_CHECK(5, 0, 0)
#include <QtWidgets>
#endif
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
#include "ui_sslerrordialog.h"
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
namespace Mirall
{
Compile with Qt5
2013-08-28 22:58:22 +04:00
#if QT_VERSION >= QT_VERSION_CHECK(5, 0, 0)
namespace Utility {
// Used for QSSLCertificate::subjectInfo which returns a QStringList in Qt5, but a QString in Qt4
QString escape(const QStringList &l) { return escape(l.join(';')); }
}
#endif
Bring back proper ssl handling
2013-10-24 02:29:08 +04:00
bool SslDialogErrorHandler::handleErrors(QList<QSslError> errors, QList<QSslCertificate> *certs, Account *account)
{
Fix approved SSL certificates being forgotten
2013-11-07 15:04:45 +04:00
if (!certs) {
qDebug() << "Certs parameter required but is NULL!";
return false;
}
Bring back proper ssl handling
2013-10-24 02:29:08 +04:00
SslErrorDialog dlg(account);
Fix approved SSL certificates being forgotten
2013-11-07 15:04:45 +04:00
// whether the failing certs have previously been accepted
if (dlg.checkFailingCertsKnown(errors)) {
*certs = dlg.unknownCerts();
Bring back proper ssl handling
2013-10-24 02:29:08 +04:00
return true;
}
Fix approved SSL certificates being forgotten
2013-11-07 15:04:45 +04:00
// whether the user accepted the certs
Bring back proper ssl handling
2013-10-24 02:29:08 +04:00
if (dlg.exec() == QDialog::Accepted) {
if (dlg.trustConnection()) {
Fix approved SSL certificates being forgotten
2013-11-07 15:04:45 +04:00
*certs = dlg.unknownCerts();
return true;
Bring back proper ssl handling
2013-10-24 02:29:08 +04:00
}
}
return false;
}
Compile with Qt5
2013-08-28 22:58:22 +04:00
Bring back proper ssl handling
2013-10-24 02:29:08 +04:00
SslErrorDialog::SslErrorDialog(Account *account, QWidget *parent) :
QDialog(parent), _allTrusted(false), _ui(new Ui::SslErrorDialog), _account(account)
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
{
Hint the OS to not show [?] in Wizards and Dialogs Fixes #1156
2013-11-13 23:12:56 +04:00
setWindowFlags(windowFlags() & ~Qt::WindowContextHelpButtonHint);
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
_ui->setupUi( this );
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
setWindowTitle( tr("SSL Connection") );
Make SSL error dialog more intuitive
2012-10-27 19:03:48 +04:00
QPushButton *okButton =
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
_ui->_dialogButtonBox->button( QDialogButtonBox::Ok );
Make SSL error dialog more intuitive
2012-10-27 19:03:48 +04:00
QPushButton *cancelButton =
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
_ui->_dialogButtonBox->button( QDialogButtonBox::Cancel );
Make SSL error dialog more intuitive
2012-10-27 19:03:48 +04:00
okButton->setEnabled(false);
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
connect(_ui->_cbTrustConnect, SIGNAL(clicked(bool)),
Make SSL error dialog more intuitive
2012-10-27 19:03:48 +04:00
okButton, SLOT(setEnabled(bool)));
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
if( okButton ) {
okButton->setDefault(true);
connect( okButton, SIGNAL(clicked()),SLOT(accept()));
Make SSL error dialog more intuitive
2012-10-27 19:03:48 +04:00
connect( cancelButton, SIGNAL(clicked()),SLOT(reject()));
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
}
}
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
SslErrorDialog::~SslErrorDialog()
{
delete _ui;
}
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
QString SslErrorDialog::styleSheet() const
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
{
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
const QString style = QLatin1String(
"#cert {margin-left: 5px;} "
"#ca_error { color:#a00011; margin-left:5px; margin-right:5px; }"
"#ca_error p { margin-top: 2px; margin-bottom:2px; }"
"#ccert { margin-left: 5px; }"
"#issuer { margin-left: 5px; }"
Show hashes of unknown certs
2012-10-24 03:42:25 +04:00
"tt { font-size: small; }"
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
);
return style;
}
#define QL(x) QLatin1String(x)
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
Fix approved SSL certificates being forgotten
2013-11-07 15:04:45 +04:00
bool SslErrorDialog::checkFailingCertsKnown( const QList<QSslError> &errors )
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
{
// check if unknown certs caused errors.
_unknownCerts.clear();
QStringList errorStrings;
Use the certificateChain() in the SSL error dialog This includes the self-signed certificate anyway, and the previous behavior led to funny side-effects.
2013-03-20 18:53:55 +04:00
Bring back proper ssl handling
2013-10-24 02:29:08 +04:00
QList<QSslCertificate> trustedCerts = _account->approvedCerts();
Unbreak self-signed certificate handling
2013-04-02 17:14:56 +04:00
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
for (int i = 0; i < errors.count(); ++i) {
Fix approved SSL certificates being forgotten
2013-11-07 15:04:45 +04:00
QSslError error = errors.at(i);
if (trustedCerts.contains(error.certificate()) ||
_unknownCerts.contains(error.certificate() )) {
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
continue;
Fix approved SSL certificates being forgotten
2013-11-07 15:04:45 +04:00
}
errorStrings += error.errorString();
if (!error.certificate().isNull()) {
_unknownCerts.append(error.certificate());
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
}
}
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
// if there are no errors left, all Certs were known.
if (errorStrings.isEmpty()) {
_allTrusted = true;
return true;
}
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
QString msg = QL("<html><head>");
msg += QL("<link rel='stylesheet' type='text/css' href='format.css'>");
msg += QL("</head><body>");
// loop over the unknown certs and line up their errors.
msg += QL("<h3>") + tr("Warnings about current SSL Connection:") + QL("</h3>");
msg += QL("<div id=\"ca_errors\">");
A lot of krazy2 (codechecker) fixes.
2012-05-21 18:48:49 +04:00
foreach( const QSslCertificate& cert, _unknownCerts ) {
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += QL("<div id=\"ca_error\">");
// add the errors for this cert
foreach( QSslError err, errors ) {
if( err.certificate() == cert ) {
Fix QLatin1String issues.
2012-08-17 19:13:17 +04:00
msg += QL("<p>") + err.errorString() + QL("</p>");
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
}
}
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += QL("</div>");
msg += certDiv( cert );
if( _unknownCerts.count() > 1 ) {
msg += QL("<hr/>");
}
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
}
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += QL("</div></body></html>");
qDebug() << "# # # # # # ";
qDebug() << msg;
QTextDocument *doc = new QTextDocument(0);
QString style = styleSheet();
qDebug() << "Style: " << style;
Fix QLatin1String issues.
2012-08-17 19:13:17 +04:00
doc->addResource( QTextDocument::StyleSheetResource, QUrl( QL("format.css") ), style);
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
doc->setHtml( msg );
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
_ui->_tbErrors->setDocument( doc );
_ui->_tbErrors->show();
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
return false;
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
}
QString SslErrorDialog::certDiv( QSslCertificate cert ) const
{
QString msg;
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += QL("<div id=\"cert\">");
Compile with Qt5
2013-08-28 22:58:22 +04:00
msg += QL("<h3>") + tr("with Certificate %1").arg( Utility::escape(cert.subjectInfo( QSslCertificate::CommonName ))) + QL("</h3>");
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += QL("<div id=\"ccert\">");
QStringList li;
Show hashes of unknown certs
2012-10-24 03:42:25 +04:00
Initial changes to also build on Qt5, doesn't compile yet
2013-08-24 16:57:55 +04:00
QString org = Utility::escape(cert.subjectInfo( QSslCertificate::Organization));
QString unit = Utility::escape(cert.subjectInfo( QSslCertificate::OrganizationalUnitName));
QString country = Utility::escape(cert.subjectInfo( QSslCertificate::CountryName));
Show hashes of unknown certs
2012-10-24 03:42:25 +04:00
if (unit.isEmpty()) unit = tr("&lt;not specified&gt;");
if (org.isEmpty()) org = tr("&lt;not specified&gt;");
if (country.isEmpty()) country = tr("&lt;not specified&gt;");
li << tr("Organization: %1").arg(org);
li << tr("Unit: %1").arg(unit);
li << tr("Country: %1").arg(country);
Fix QLatin1String issues.
2012-08-17 19:13:17 +04:00
msg += QL("<p>") + li.join(QL("<br/>")) + QL("</p>");
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += QL("<p>");
Show hashes of unknown certs
2012-10-24 03:42:25 +04:00
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
QString md5sum = Utility::formatFingerprint(cert.digest(QCryptographicHash::Md5).toHex());
QString sha1sum = Utility::formatFingerprint(cert.digest(QCryptographicHash::Sha1).toHex());
There always must be both kinds of hashes, simplify code
2012-10-24 11:13:48 +04:00
msg += tr("Fingerprint (MD5): <tt>%1</tt>").arg(md5sum) + QL("<br/>");
msg += tr("Fingerprint (SHA1): <tt>%1</tt>").arg(sha1sum) + QL("<br/>");
Show hashes of unknown certs
2012-10-24 03:42:25 +04:00
msg += QL("<br/>");
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += tr("Effective Date: %1").arg( cert.effectiveDate().toString()) + QL("<br/>");
msg += tr("Expiry Date: %1").arg( cert.expiryDate().toString()) + QL("</p>");
msg += QL("</div>" );
Compile with Qt5
2013-08-28 22:58:22 +04:00
msg += QL("<h3>") + tr("Issuer: %1").arg(Utility::escape(cert.issuerInfo( QSslCertificate::CommonName))) + QL("</h3>");
Fix QLatin1String issues.
2012-08-17 19:13:17 +04:00
msg += QL("<div id=\"issuer\">");
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
li.clear();
Compile with Qt5
2013-08-28 22:58:22 +04:00
li << tr("Organization: %1").arg(Utility::escape(cert.issuerInfo( QSslCertificate::Organization)));
li << tr("Unit: %1").arg(Utility::escape(cert.issuerInfo( QSslCertificate::OrganizationalUnitName)));
li << tr("Country: %1").arg(Utility::escape(cert.issuerInfo( QSslCertificate::CountryName)));
Fix QLatin1String issues.
2012-08-17 19:13:17 +04:00
msg += QL("<p>") + li.join(QL("<br/>")) + QL("</p>");
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
msg += QL("</div>" );
msg += QL("</div>" );
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
return msg;
}
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
bool SslErrorDialog::trustConnection()
{
if( _allTrusted ) return true;
Commit squashed refactoring branch - introduce settings dialog - general settings for general / proxy settings - standalone proxy settings dialog removed - standalone status dialog removed - moved status dialog into settings dialog - radically cut down links in context menu - add help link to context menu This needs more cleanup and testing. Known issues: - When the wizard is called while the settings dialog is open, it will not show old information (see FIXME) - Some settings are not implemented yet (greyed out) - The counter in the FileItemDialog is not correct the first time around. Based on the discussion done with Jan and Klaas during the Nuenberg workshop.
2013-07-04 21:59:40 +04:00
bool stat = ( _ui->_cbTrustConnect->checkState() == Qt::Checked );
SSL Connection Warning dialog working.
2012-04-12 13:37:48 +04:00
qDebug() << "SSL-Connection is trusted: " << stat;
return stat;
}
SSL Support WIP - not yet functionable.
2012-04-06 10:53:57 +04:00
} // end namespace
Reference in a new issue Copy permalink