Mercurial > pidgin.yaz
view pidgin/gtkcertmgr.c @ 21855:214da49fdcd4
merge of '3cec6952fcadbd73dddc4c009e798b6fb1789a5b'
and 'eba941c70407d0a6e17fa2204792caadadeda848'
author | Evan Schoenberg <evan.s@dreskin.net> |
---|---|
date | Tue, 18 Dec 2007 02:26:57 +0000 |
parents | 665e04562de0 |
children | 2a2496044eef |
line wrap: on
line source
/* * @file gtkcertmgr.c GTK+ Certificate Manager API * @ingroup pidgin */ /* pidgin * * Pidgin is the legal property of its developers, whose names are too numerous * to list here. Please refer to the COPYRIGHT file distributed with this * source distribution. * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02111-1301 USA * */ #include <glib.h> #include "core.h" #include "internal.h" #include "pidgin.h" #include "pidginstock.h" #include "certificate.h" #include "debug.h" #include "notify.h" #include "request.h" #include "gtkblist.h" #include "gtkutils.h" #include "gtkcertmgr.h" /***************************************************************************** * X.509 tls_peers management interface * *****************************************************************************/ typedef struct { GtkWidget *mgmt_widget; GtkTreeView *listview; GtkTreeSelection *listselect; GtkWidget *importbutton; GtkWidget *exportbutton; GtkWidget *infobutton; GtkWidget *deletebutton; PurpleCertificatePool *tls_peers; } tls_peers_mgmt_data; tls_peers_mgmt_data *tpm_dat = NULL; /* Columns See http://developer.gnome.org/doc/API/2.0/gtk/TreeWidget.html */ enum { TPM_HOSTNAME_COLUMN, TPM_N_COLUMNS }; static void tls_peers_mgmt_destroy(GtkWidget *mgmt_widget, gpointer data) { purple_debug_info("certmgr", "tls peers self-destructs\n"); purple_signals_disconnect_by_handle(tpm_dat); purple_request_close_with_handle(tpm_dat); g_free(tpm_dat); tpm_dat = NULL; } static void tls_peers_mgmt_repopulate_list(void) { GtkTreeView *listview = tpm_dat->listview; PurpleCertificatePool *tls_peers; GList *idlist, *l; GtkListStore *store = GTK_LIST_STORE( gtk_tree_view_get_model(GTK_TREE_VIEW(listview))); /* First, delete everything in the list */ gtk_list_store_clear(store); /* Locate the "tls_peers" pool */ tls_peers = purple_certificate_find_pool("x509", "tls_peers"); g_return_if_fail(tls_peers); /* Grab the loaded certificates */ idlist = purple_certificate_pool_get_idlist(tls_peers); /* Populate the listview */ for (l = idlist; l; l = l->next) { GtkTreeIter iter; gtk_list_store_append(store, &iter); gtk_list_store_set(GTK_LIST_STORE(store), &iter, TPM_HOSTNAME_COLUMN, l->data, -1); } purple_certificate_pool_destroy_idlist(idlist); } static void tls_peers_mgmt_mod_cb(PurpleCertificatePool *pool, const gchar *id, gpointer data) { g_assert (pool == tpm_dat->tls_peers); tls_peers_mgmt_repopulate_list(); } static void tls_peers_mgmt_select_chg_cb(GtkTreeSelection *ignored, gpointer data) { GtkTreeSelection *select = tpm_dat->listselect; GtkTreeIter iter; GtkTreeModel *model; /* See if things are selected */ if (gtk_tree_selection_get_selected(select, &model, &iter)) { /* Enable buttons if something is selected */ gtk_widget_set_sensitive(GTK_WIDGET(tpm_dat->exportbutton), TRUE); gtk_widget_set_sensitive(GTK_WIDGET(tpm_dat->infobutton), TRUE); gtk_widget_set_sensitive(GTK_WIDGET(tpm_dat->deletebutton), TRUE); } else { /* Otherwise, disable them */ gtk_widget_set_sensitive(GTK_WIDGET(tpm_dat->exportbutton), FALSE); gtk_widget_set_sensitive(GTK_WIDGET(tpm_dat->infobutton), FALSE); gtk_widget_set_sensitive(GTK_WIDGET(tpm_dat->deletebutton), FALSE); } } static void tls_peers_mgmt_import_ok2_cb(gpointer data, const char *result) { PurpleCertificate *crt = (PurpleCertificate *) data; const char *id = result; /* TODO: Perhaps prompt if you're overwriting a cert? */ /* Drop the certificate into the pool */ purple_certificate_pool_store(tpm_dat->tls_peers, id, crt); /* And this certificate is not needed any more */ purple_certificate_destroy(crt); } static void tls_peers_mgmt_import_cancel2_cb(gpointer data, const char *result) { PurpleCertificate *crt = (PurpleCertificate *) data; purple_certificate_destroy(crt); } static void tls_peers_mgmt_import_ok_cb(gpointer data, const char *filename) { PurpleCertificateScheme *x509; PurpleCertificate *crt; /* Load the scheme of our tls_peers pool (ought to be x509) */ x509 = purple_certificate_pool_get_scheme(tpm_dat->tls_peers); /* Now load the certificate from disk */ crt = purple_certificate_import(x509, filename); /* Did it work? */ if (crt != NULL) { gchar *default_hostname; /* Get name to add to pool as */ /* Make a guess about what the hostname should be */ default_hostname = purple_certificate_get_subject_name(crt); /* TODO: Find a way to make sure that crt gets destroyed if the window gets closed unusually, such as by handle deletion */ /* TODO: Display some more information on the certificate? */ purple_request_input(tpm_dat, _("Certificate Import"), _("Specify a hostname"), _("Type the host name this certificate is for."), default_hostname, FALSE, /* Not multiline */ FALSE, /* Not masked? */ NULL, /* No hints? */ _("OK"), G_CALLBACK(tls_peers_mgmt_import_ok2_cb), _("Cancel"), G_CALLBACK(tls_peers_mgmt_import_cancel2_cb), NULL, NULL, NULL, /* No account/who/conv*/ crt /* Pass cert instance to callback*/ ); g_free(default_hostname); } else { /* Errors! Oh no! */ /* TODO: Perhaps find a way to be specific about what just went wrong? */ gchar * secondary; secondary = g_strdup_printf(_("File %s could not be imported.\nMake sure that the file is readable and in PEM format.\n"), filename); purple_notify_error(NULL, _("Certificate Import Error"), _("X.509 certificate import failed"), secondary); g_free(secondary); } } static void tls_peers_mgmt_import_cb(GtkWidget *button, gpointer data) { /* TODO: need to tell the user that we want a .PEM file! */ purple_request_file(tpm_dat, _("Select a PEM certificate"), "certificate.pem", FALSE, /* Not a save dialog */ G_CALLBACK(tls_peers_mgmt_import_ok_cb), NULL, /* Do nothing if cancelled */ NULL, NULL, NULL, NULL );/* No account,conv,etc. */ } static void tls_peers_mgmt_export_ok_cb(gpointer data, const char *filename) { PurpleCertificate *crt = (PurpleCertificate *) data; g_assert(filename); if (!purple_certificate_export(filename, crt)) { /* Errors! Oh no! */ /* TODO: Perhaps find a way to be specific about what just went wrong? */ gchar * secondary; secondary = g_strdup_printf(_("Export to file %s failed.\nCheck that you have write permission to the target path\n"), filename); purple_notify_error(NULL, _("Certificate Export Error"), _("X.509 certificate export failed"), secondary); g_free(secondary); } purple_certificate_destroy(crt); } static void tls_peers_mgmt_export_cancel_cb(gpointer data, const char *filename) { PurpleCertificate *crt = (PurpleCertificate *) data; /* Pressing cancel just frees the duplicated certificate */ purple_certificate_destroy(crt); } static void tls_peers_mgmt_export_cb(GtkWidget *button, gpointer data) { PurpleCertificate *crt; GtkTreeSelection *select = tpm_dat->listselect; GtkTreeIter iter; GtkTreeModel *model; gchar *id; /* See if things are selected */ if (!gtk_tree_selection_get_selected(select, &model, &iter)) { purple_debug_warning("gtkcertmgr/tls_peers_mgmt", "Export clicked with no selection?\n"); return; } /* Retrieve the selected hostname */ gtk_tree_model_get(model, &iter, TPM_HOSTNAME_COLUMN, &id, -1); /* Extract the certificate from the pool now to make sure it doesn't get deleted out from under us */ crt = purple_certificate_pool_retrieve(tpm_dat->tls_peers, id); if (NULL == crt) { purple_debug_error("gtkcertmgr/tls_peers_mgmt", "Id %s was not in the peers cache?!\n", id); g_free(id); return; } g_free(id); /* TODO: inform user that it will be a PEM? */ purple_request_file(tpm_dat, _("PEM X.509 Certificate Export"), "certificate.pem", TRUE, /* Is a save dialog */ G_CALLBACK(tls_peers_mgmt_export_ok_cb), G_CALLBACK(tls_peers_mgmt_export_cancel_cb), NULL, NULL, NULL, /* No account,conv,etc. */ crt); /* Pass the certificate on to the callback */ } static void tls_peers_mgmt_info_cb(GtkWidget *button, gpointer data) { GtkTreeSelection *select = tpm_dat->listselect; GtkTreeIter iter; GtkTreeModel *model; gchar *id; PurpleCertificate *crt; /* See if things are selected */ if (!gtk_tree_selection_get_selected(select, &model, &iter)) { purple_debug_warning("gtkcertmgr/tls_peers_mgmt", "Info clicked with no selection?\n"); return; } /* Retrieve the selected hostname */ gtk_tree_model_get(model, &iter, TPM_HOSTNAME_COLUMN, &id, -1); /* Now retrieve the certificate */ crt = purple_certificate_pool_retrieve(tpm_dat->tls_peers, id); g_return_if_fail(crt); /* Fire the notification */ purple_certificate_display_x509(crt); g_free(id); purple_certificate_destroy(crt); } static void tls_peers_mgmt_delete_confirm_cb(gchar *id, gint choice) { if (1 == choice) { /* Yes, delete was confirmed */ /* Now delete the thing */ if (!purple_certificate_pool_delete(tpm_dat->tls_peers, id)) { purple_debug_warning("gtkcertmgr/tls_peers_mgmt", "Deletion failed on id %s\n", id); }; } g_free(id); } static void tls_peers_mgmt_delete_cb(GtkWidget *button, gpointer data) { GtkTreeSelection *select = tpm_dat->listselect; GtkTreeIter iter; GtkTreeModel *model; /* See if things are selected */ if (gtk_tree_selection_get_selected(select, &model, &iter)) { gchar *id; gchar *primary; /* Retrieve the selected hostname */ gtk_tree_model_get(model, &iter, TPM_HOSTNAME_COLUMN, &id, -1); /* Prompt to confirm deletion */ primary = g_strdup_printf( _("Really delete certificate for %s?"), id ); purple_request_yes_no(tpm_dat, _("Confirm certificate delete"), primary, NULL, /* Can this be NULL? */ 2, /* NO is default action */ NULL, NULL, NULL, id, /* id ownership passed to callback */ tls_peers_mgmt_delete_confirm_cb, tls_peers_mgmt_delete_confirm_cb ); g_free(primary); } else { purple_debug_warning("gtkcertmgr/tls_peers_mgmt", "Delete clicked with no selection?\n"); return; } } static GtkWidget * tls_peers_mgmt_build(void) { GtkWidget *bbox; GtkListStore *store; /* This block of variables will end up in tpm_dat */ GtkTreeView *listview; GtkTreeSelection *select; GtkWidget *importbutton; GtkWidget *exportbutton; GtkWidget *infobutton; GtkWidget *deletebutton; /** Element to return to the Certmgr window to put in the Notebook */ GtkWidget *mgmt_widget; /* Create a struct to store context information about this window */ tpm_dat = g_new0(tls_peers_mgmt_data, 1); tpm_dat->mgmt_widget = mgmt_widget = gtk_hbox_new(FALSE, /* Non-homogeneous */ PIDGIN_HIG_BORDER); gtk_widget_show(mgmt_widget); /* Ensure that everything gets cleaned up when the dialog box is closed */ g_signal_connect(G_OBJECT(mgmt_widget), "destroy", G_CALLBACK(tls_peers_mgmt_destroy), NULL); /* List view */ store = gtk_list_store_new(TPM_N_COLUMNS, G_TYPE_STRING); tpm_dat->listview = listview = GTK_TREE_VIEW(gtk_tree_view_new_with_model(GTK_TREE_MODEL(store))); { GtkCellRenderer *renderer; GtkTreeViewColumn *column; /* Set up the display columns */ renderer = gtk_cell_renderer_text_new(); column = gtk_tree_view_column_new_with_attributes( "Hostname", renderer, "text", TPM_HOSTNAME_COLUMN, NULL); gtk_tree_view_append_column(GTK_TREE_VIEW(listview), column); gtk_tree_sortable_set_sort_column_id(GTK_TREE_SORTABLE(store), TPM_HOSTNAME_COLUMN, GTK_SORT_ASCENDING); } /* Get the treeview selector into the struct */ tpm_dat->listselect = select = gtk_tree_view_get_selection(GTK_TREE_VIEW(listview)); /* Force the selection mode */ gtk_tree_selection_set_mode(select, GTK_SELECTION_SINGLE); /* Use a callback to enable/disable the buttons based on whether something is selected */ g_signal_connect(G_OBJECT(select), "changed", G_CALLBACK(tls_peers_mgmt_select_chg_cb), NULL); gtk_box_pack_start(GTK_BOX(mgmt_widget), GTK_WIDGET(listview), TRUE, TRUE, /* Take up lots of space */ 0); /* TODO: this padding is wrong */ gtk_widget_show(GTK_WIDGET(listview)); /* Fill the list for the first time */ tls_peers_mgmt_repopulate_list(); /* Right-hand side controls box */ bbox = gtk_vbutton_box_new(); gtk_box_pack_end(GTK_BOX(mgmt_widget), bbox, FALSE, FALSE, /* Do not take up space */ 0); /* TODO: this padding is probably wrong */ gtk_box_set_spacing(GTK_BOX(bbox), PIDGIN_HIG_BOX_SPACE); gtk_button_box_set_layout(GTK_BUTTON_BOX(bbox), GTK_BUTTONBOX_START); gtk_widget_show(bbox); /* Import button */ /* TODO: This is the wrong stock button */ tpm_dat->importbutton = importbutton = gtk_button_new_from_stock(GTK_STOCK_ADD); gtk_box_pack_start(GTK_BOX(bbox), importbutton, FALSE, FALSE, 0); gtk_widget_show(importbutton); g_signal_connect(G_OBJECT(importbutton), "clicked", G_CALLBACK(tls_peers_mgmt_import_cb), NULL); /* Export button */ /* TODO: This is the wrong stock button */ tpm_dat->exportbutton = exportbutton = gtk_button_new_from_stock(GTK_STOCK_SAVE); gtk_box_pack_start(GTK_BOX(bbox), exportbutton, FALSE, FALSE, 0); gtk_widget_show(exportbutton); g_signal_connect(G_OBJECT(exportbutton), "clicked", G_CALLBACK(tls_peers_mgmt_export_cb), NULL); /* Info button */ tpm_dat->infobutton = infobutton = gtk_button_new_from_stock(PIDGIN_STOCK_INFO); gtk_box_pack_start(GTK_BOX(bbox), infobutton, FALSE, FALSE, 0); gtk_widget_show(infobutton); g_signal_connect(G_OBJECT(infobutton), "clicked", G_CALLBACK(tls_peers_mgmt_info_cb), NULL); /* Delete button */ tpm_dat->deletebutton = deletebutton = gtk_button_new_from_stock(GTK_STOCK_DELETE); gtk_box_pack_start(GTK_BOX(bbox), deletebutton, FALSE, FALSE, 0); gtk_widget_show(deletebutton); g_signal_connect(G_OBJECT(deletebutton), "clicked", G_CALLBACK(tls_peers_mgmt_delete_cb), NULL); /* Call the "selection changed" callback, which will probably disable all the buttons since nothing is selected yet */ tls_peers_mgmt_select_chg_cb(select, NULL); /* Bind us to the tls_peers pool */ tpm_dat->tls_peers = purple_certificate_find_pool("x509", "tls_peers"); /**** libpurple signals ****/ /* Respond to certificate add/remove by just reloading everything */ purple_signal_connect(tpm_dat->tls_peers, "certificate-stored", tpm_dat, PURPLE_CALLBACK(tls_peers_mgmt_mod_cb), NULL); purple_signal_connect(tpm_dat->tls_peers, "certificate-deleted", tpm_dat, PURPLE_CALLBACK(tls_peers_mgmt_mod_cb), NULL); return mgmt_widget; } const PidginCertificateManager tls_peers_mgmt = { tls_peers_mgmt_build, /* Widget creation function */ N_("SSL Servers") }; /***************************************************************************** * GTK+ main certificate manager * *****************************************************************************/ typedef struct { GtkWidget *window; GtkWidget *notebook; GtkWidget *closebutton; } CertMgrDialog; /* If a certificate manager window is open, this will point to it. So if it is set, don't open another one! */ CertMgrDialog *certmgr_dialog = NULL; static void certmgr_close_cb(GtkWidget *w, CertMgrDialog *dlg) { /* TODO: Ignoring the arguments to this function may not be ideal, but there *should* only be "one dialog to rule them all" at a time*/ pidgin_certmgr_hide(); } void pidgin_certmgr_show(void) { CertMgrDialog *dlg; GtkWidget *win; GtkWidget *vbox; GtkWidget *bbox; /* Enumerate all the certificates on file */ { GList *idlist, *poollist; for ( poollist = purple_certificate_get_pools(); poollist; poollist = poollist->next ) { PurpleCertificatePool *pool = poollist->data; GList *l; purple_debug_info("gtkcertmgr", "Pool %s found for scheme %s -" "Enumerating certificates:\n", pool->name, pool->scheme_name); idlist = purple_certificate_pool_get_idlist(pool); for (l=idlist; l; l = l->next) { purple_debug_info("gtkcertmgr", "- %s\n", l->data ? (gchar *) l->data : "(null)"); } /* idlist */ purple_certificate_pool_destroy_idlist(idlist); } /* poollist */ } /* If the manager is already open, bring it to the front */ if (certmgr_dialog != NULL) { gtk_window_present(GTK_WINDOW(certmgr_dialog->window)); return; } /* Create the dialog, and set certmgr_dialog so we never create more than one at a time */ dlg = certmgr_dialog = g_new0(CertMgrDialog, 1); win = dlg->window = pidgin_create_window(_("Certificate Manager"),/* Title */ PIDGIN_HIG_BORDER, /*Window border*/ "certmgr", /* Role */ TRUE); /* Allow resizing */ g_signal_connect(G_OBJECT(win), "delete_event", G_CALLBACK(certmgr_close_cb), dlg); /* TODO: Retrieve the user-set window size and use it */ gtk_window_set_default_size(GTK_WINDOW(win), 400, 400); /* Main vbox */ vbox = gtk_vbox_new( FALSE, PIDGIN_HIG_BORDER ); gtk_container_add(GTK_CONTAINER(win), vbox); gtk_widget_show(vbox); /* Notebook of various certificate managers */ dlg->notebook = gtk_notebook_new(); gtk_box_pack_start(GTK_BOX(vbox), dlg->notebook, TRUE, TRUE, /* Notebook should take extra space */ 0); gtk_widget_show(dlg->notebook); /* Box for the close button */ bbox = gtk_hbutton_box_new(); gtk_box_set_spacing(GTK_BOX(bbox), PIDGIN_HIG_BOX_SPACE); gtk_button_box_set_layout(GTK_BUTTON_BOX(bbox), GTK_BUTTONBOX_END); gtk_box_pack_end(GTK_BOX(vbox), bbox, FALSE, TRUE, 0); gtk_widget_show(bbox); /* Close button */ dlg->closebutton = gtk_button_new_from_stock(GTK_STOCK_CLOSE); gtk_box_pack_start(GTK_BOX(bbox), dlg->closebutton, FALSE, FALSE, 0); gtk_widget_show(dlg->closebutton); g_signal_connect(G_OBJECT(dlg->closebutton), "clicked", G_CALLBACK(certmgr_close_cb), dlg); /* Add the defined certificate managers */ /* TODO: Find a way of determining whether each is shown or not */ /* TODO: Implement this correctly */ gtk_notebook_append_page(GTK_NOTEBOOK (dlg->notebook), (tls_peers_mgmt.build)(), gtk_label_new(_(tls_peers_mgmt.label)) ); gtk_widget_show(win); } void pidgin_certmgr_hide(void) { /* If it isn't open, do nothing */ if (certmgr_dialog == NULL) { return; } purple_signals_disconnect_by_handle(certmgr_dialog); purple_prefs_disconnect_by_handle(certmgr_dialog); gtk_widget_destroy(certmgr_dialog->window); g_free(certmgr_dialog); certmgr_dialog = NULL; }