| /************************************************************** |
| * |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| * |
| *************************************************************/ |
| |
| |
| |
| // MARKER(update_precomp.py): autogen include statement, do not remove |
| #include "precompiled_xmlsecurity.hxx" |
| #include <sal/config.h> |
| #include <rtl/uuid.h> |
| |
| #include "com/sun/star/xml/crypto/SecurityOperationStatus.hdl" |
| #include "xmlsignature_mscryptimpl.hxx" |
| |
| #ifndef _XMLDOCUMENTWRAPPER_XMLSECIMPL_HXX_ |
| #include "xmldocumentwrapper_xmlsecimpl.hxx" |
| #endif |
| |
| #ifndef _XMLELEMENTWRAPPER_XMLSECIMPL_HXX_ |
| #include "xmlelementwrapper_xmlsecimpl.hxx" |
| #endif |
| |
| #ifndef _SECURITYENVIRONMENT_MSCRYPTIMPL_HXX_ |
| #include "securityenvironment_mscryptimpl.hxx" |
| #endif |
| #include "xmlstreamio.hxx" |
| #include "errorcallback.hxx" |
| |
| #include "xmlsec/xmlsec.h" |
| #include "xmlsec/xmldsig.h" |
| #include "xmlsec/crypto.h" |
| |
| using namespace ::com::sun::star::uno ; |
| using namespace ::com::sun::star::lang ; |
| using ::com::sun::star::lang::XMultiServiceFactory ; |
| using ::com::sun::star::lang::XSingleServiceFactory ; |
| using ::rtl::OUString ; |
| |
| using ::com::sun::star::xml::wrapper::XXMLElementWrapper ; |
| using ::com::sun::star::xml::wrapper::XXMLDocumentWrapper ; |
| using ::com::sun::star::xml::crypto::XSecurityEnvironment ; |
| using ::com::sun::star::xml::crypto::XXMLSignature ; |
| using ::com::sun::star::xml::crypto::XXMLSignatureTemplate ; |
| using ::com::sun::star::xml::crypto::XXMLSecurityContext ; |
| using ::com::sun::star::xml::crypto::XUriBinding ; |
| using ::com::sun::star::xml::crypto::XMLSignatureException ; |
| |
| |
| XMLSignature_MSCryptImpl :: XMLSignature_MSCryptImpl( const Reference< XMultiServiceFactory >& aFactory ) : m_xServiceManager( aFactory ) { |
| } |
| |
| XMLSignature_MSCryptImpl :: ~XMLSignature_MSCryptImpl() { |
| } |
| |
| /* XXMLSignature */ |
| Reference< XXMLSignatureTemplate > |
| SAL_CALL XMLSignature_MSCryptImpl :: generate( |
| const Reference< XXMLSignatureTemplate >& aTemplate , |
| const Reference< XSecurityEnvironment >& aEnvironment |
| ) throw( com::sun::star::xml::crypto::XMLSignatureException, |
| com::sun::star::uno::SecurityException ) |
| { |
| xmlSecKeysMngrPtr pMngr = NULL ; |
| xmlSecDSigCtxPtr pDsigCtx = NULL ; |
| xmlNodePtr pNode = NULL ; |
| |
| if( !aTemplate.is() ) |
| throw RuntimeException() ; |
| |
| if( !aEnvironment.is() ) |
| throw RuntimeException() ; |
| |
| //Get Keys Manager |
| Reference< XUnoTunnel > xSecTunnel( aEnvironment , UNO_QUERY ) ; |
| if( !xSecTunnel.is() ) { |
| throw RuntimeException() ; |
| } |
| |
| SecurityEnvironment_MSCryptImpl* pSecEnv = ( SecurityEnvironment_MSCryptImpl* )xSecTunnel->getSomething( SecurityEnvironment_MSCryptImpl::getUnoTunnelId() ) ; |
| if( pSecEnv == NULL ) |
| throw RuntimeException() ; |
| |
| //Get the xml node |
| Reference< XXMLElementWrapper > xElement = aTemplate->getTemplate() ; |
| if( !xElement.is() ) { |
| throw RuntimeException() ; |
| } |
| |
| Reference< XUnoTunnel > xNodTunnel( xElement , UNO_QUERY ) ; |
| if( !xNodTunnel.is() ) { |
| throw RuntimeException() ; |
| } |
| |
| XMLElementWrapper_XmlSecImpl* pElement = ( XMLElementWrapper_XmlSecImpl* )xNodTunnel->getSomething( XMLElementWrapper_XmlSecImpl::getUnoTunnelImplementationId() ) ; |
| if( pElement == NULL ) { |
| throw RuntimeException() ; |
| } |
| |
| pNode = pElement->getNativeElement() ; |
| |
| //Get the stream/URI binding |
| Reference< XUriBinding > xUriBinding = aTemplate->getBinding() ; |
| if( xUriBinding.is() ) { |
| //Register the stream input callbacks into libxml2 |
| if( xmlRegisterStreamInputCallbacks( xUriBinding ) < 0 ) |
| throw RuntimeException() ; |
| } |
| |
| setErrorRecorder( ); |
| |
| pMngr = pSecEnv->createKeysManager() ; //i39448 |
| if( !pMngr ) { |
| throw RuntimeException() ; |
| } |
| |
| //Create Signature context |
| pDsigCtx = xmlSecDSigCtxCreate( pMngr ) ; |
| if( pDsigCtx == NULL ) |
| { |
| //throw XMLSignatureException() ; |
| pSecEnv->destroyKeysManager( pMngr ) ; //i39448 |
| clearErrorRecorder(); |
| return aTemplate; |
| } |
| |
| //Sign the template |
| if( xmlSecDSigCtxSign( pDsigCtx , pNode ) == 0 ) |
| { |
| if (pDsigCtx->status == xmlSecDSigStatusSucceeded) |
| aTemplate->setStatus(com::sun::star::xml::crypto::SecurityOperationStatus_OPERATION_SUCCEEDED); |
| else |
| aTemplate->setStatus(com::sun::star::xml::crypto::SecurityOperationStatus_UNKNOWN); |
| } |
| else |
| { |
| aTemplate->setStatus(com::sun::star::xml::crypto::SecurityOperationStatus_UNKNOWN); |
| } |
| |
| |
| xmlSecDSigCtxDestroy( pDsigCtx ) ; |
| pSecEnv->destroyKeysManager( pMngr ) ; //i39448 |
| |
| //Unregistered the stream/URI binding |
| if( xUriBinding.is() ) |
| xmlUnregisterStreamInputCallbacks() ; |
| |
| clearErrorRecorder(); |
| return aTemplate ; |
| } |
| |
| /* XXMLSignature */ |
| Reference< XXMLSignatureTemplate > |
| SAL_CALL XMLSignature_MSCryptImpl :: validate( |
| const Reference< XXMLSignatureTemplate >& aTemplate , |
| const Reference< XXMLSecurityContext >& aSecurityCtx |
| ) throw( com::sun::star::uno::RuntimeException, |
| com::sun::star::uno::SecurityException, |
| com::sun::star::xml::crypto::XMLSignatureException ) { |
| xmlSecKeysMngrPtr pMngr = NULL ; |
| xmlSecDSigCtxPtr pDsigCtx = NULL ; |
| xmlNodePtr pNode = NULL ; |
| //sal_Bool valid ; |
| |
| if( !aTemplate.is() ) |
| throw RuntimeException() ; |
| |
| if( !aSecurityCtx.is() ) |
| throw RuntimeException() ; |
| |
| //Get Keys Manager |
| Reference< XSecurityEnvironment > xSecEnv |
| = aSecurityCtx->getSecurityEnvironmentByIndex( |
| aSecurityCtx->getDefaultSecurityEnvironmentIndex()); |
| Reference< XUnoTunnel > xSecTunnel( xSecEnv , UNO_QUERY ) ; |
| if( !xSecTunnel.is() ) { |
| throw RuntimeException() ; |
| } |
| |
| SecurityEnvironment_MSCryptImpl* pSecEnv = ( SecurityEnvironment_MSCryptImpl* )xSecTunnel->getSomething( SecurityEnvironment_MSCryptImpl::getUnoTunnelId() ) ; |
| if( pSecEnv == NULL ) |
| throw RuntimeException() ; |
| |
| //Get the xml node |
| Reference< XXMLElementWrapper > xElement = aTemplate->getTemplate() ; |
| if( !xElement.is() ) |
| throw RuntimeException() ; |
| |
| Reference< XUnoTunnel > xNodTunnel( xElement , UNO_QUERY ) ; |
| if( !xNodTunnel.is() ) { |
| throw RuntimeException() ; |
| } |
| |
| XMLElementWrapper_XmlSecImpl* pElement = ( XMLElementWrapper_XmlSecImpl* )xNodTunnel->getSomething( XMLElementWrapper_XmlSecImpl::getUnoTunnelImplementationId() ) ; |
| if( pElement == NULL ) |
| throw RuntimeException() ; |
| |
| pNode = pElement->getNativeElement() ; |
| |
| //Get the stream/URI binding |
| Reference< XUriBinding > xUriBinding = aTemplate->getBinding() ; |
| if( xUriBinding.is() ) { |
| //Register the stream input callbacks into libxml2 |
| if( xmlRegisterStreamInputCallbacks( xUriBinding ) < 0 ) |
| throw RuntimeException() ; |
| } |
| |
| //added for test: save the result |
| /* |
| { |
| FILE *dstFile = fopen( "c:\\1.txt", "w" ) ; |
| xmlDocDump( dstFile, pNode->doc) ; |
| fclose( dstFile ) ; |
| } |
| */ |
| |
| setErrorRecorder( ); |
| |
| pMngr = pSecEnv->createKeysManager() ; //i39448 |
| if( !pMngr ) { |
| throw RuntimeException() ; |
| } |
| |
| //Create Signature context |
| pDsigCtx = xmlSecDSigCtxCreate( pMngr ) ; |
| if( pDsigCtx == NULL ) |
| { |
| pSecEnv->destroyKeysManager( pMngr ) ; //i39448 |
| //throw XMLSignatureException() ; |
| clearErrorRecorder(); |
| return aTemplate; |
| } |
| |
| //Verify signature |
| //The documentation says that the signature is only valid if the return value is 0 (that is, not < 0) |
| //AND pDsigCtx->status == xmlSecDSigStatusSucceeded. That is, we must not make any assumptions, if |
| //the return value is < 0. Then we must regard the signature as INVALID. We cannot use the |
| //error recorder feature to get the ONE error that made the verification fail, because there is no |
| //documentation/specification as to how to interpret the number of recorded errors and what is the initial |
| //error. |
| if( xmlSecDSigCtxVerify( pDsigCtx , pNode ) == 0 ) |
| { |
| if (pDsigCtx->status == xmlSecDSigStatusSucceeded) |
| aTemplate->setStatus(com::sun::star::xml::crypto::SecurityOperationStatus_OPERATION_SUCCEEDED); |
| else |
| aTemplate->setStatus(com::sun::star::xml::crypto::SecurityOperationStatus_UNKNOWN); |
| } |
| else |
| { |
| aTemplate->setStatus(com::sun::star::xml::crypto::SecurityOperationStatus_UNKNOWN); |
| } |
| |
| xmlSecDSigCtxDestroy( pDsigCtx ) ; |
| pSecEnv->destroyKeysManager( pMngr ) ; //i39448 |
| |
| //Unregistered the stream/URI binding |
| if( xUriBinding.is() ) |
| xmlUnregisterStreamInputCallbacks() ; |
| |
| |
| clearErrorRecorder(); |
| return aTemplate; |
| } |
| |
| /* XInitialization */ |
| void SAL_CALL XMLSignature_MSCryptImpl :: initialize( const Sequence< Any >& /*aArguments*/ ) throw( Exception, RuntimeException ) { |
| // TBD |
| } ; |
| |
| /* XServiceInfo */ |
| OUString SAL_CALL XMLSignature_MSCryptImpl :: getImplementationName() throw( RuntimeException ) { |
| return impl_getImplementationName() ; |
| } |
| |
| /* XServiceInfo */ |
| sal_Bool SAL_CALL XMLSignature_MSCryptImpl :: supportsService( const OUString& serviceName) throw( RuntimeException ) { |
| Sequence< OUString > seqServiceNames = getSupportedServiceNames() ; |
| const OUString* pArray = seqServiceNames.getConstArray() ; |
| for( sal_Int32 i = 0 ; i < seqServiceNames.getLength() ; i ++ ) { |
| if( *( pArray + i ) == serviceName ) |
| return sal_True ; |
| } |
| return sal_False ; |
| } |
| |
| /* XServiceInfo */ |
| Sequence< OUString > SAL_CALL XMLSignature_MSCryptImpl :: getSupportedServiceNames() throw( RuntimeException ) { |
| return impl_getSupportedServiceNames() ; |
| } |
| |
| //Helper for XServiceInfo |
| Sequence< OUString > XMLSignature_MSCryptImpl :: impl_getSupportedServiceNames() { |
| ::osl::Guard< ::osl::Mutex > aGuard( ::osl::Mutex::getGlobalMutex() ) ; |
| Sequence< OUString > seqServiceNames( 1 ) ; |
| seqServiceNames.getArray()[0] = OUString::createFromAscii( "com.sun.star.xml.crypto.XMLSignature" ) ; |
| return seqServiceNames ; |
| } |
| |
| OUString XMLSignature_MSCryptImpl :: impl_getImplementationName() throw( RuntimeException ) { |
| return OUString::createFromAscii( "com.sun.star.xml.security.bridge.xmlsec.XMLSignature_MSCryptImpl" ) ; |
| } |
| |
| //Helper for registry |
| Reference< XInterface > SAL_CALL XMLSignature_MSCryptImpl :: impl_createInstance( const Reference< XMultiServiceFactory >& aServiceManager ) throw( RuntimeException ) { |
| return Reference< XInterface >( *new XMLSignature_MSCryptImpl( aServiceManager ) ) ; |
| } |
| |
| Reference< XSingleServiceFactory > XMLSignature_MSCryptImpl :: impl_createFactory( const Reference< XMultiServiceFactory >& aServiceManager ) { |
| //Reference< XSingleServiceFactory > xFactory ; |
| //xFactory = ::cppu::createSingleFactory( aServiceManager , impl_getImplementationName , impl_createInstance , impl_getSupportedServiceNames ) ; |
| //return xFactory ; |
| return ::cppu::createSingleFactory( aServiceManager , impl_getImplementationName() , impl_createInstance , impl_getSupportedServiceNames() ) ; |
| } |
| |
