110e5e4fb3
Certified user identities in keys can be revoked using the same popup for certification. Requires GnuPG 2.2.24 (not available in distro's repository, not fully tested to date).
282 lines
9.9 KiB
C++
282 lines
9.9 KiB
C++
/*
|
|
* File: PopupCertifyUserId.cpp
|
|
* Author: SET - nmset@yandex.com
|
|
* License : GPL v2
|
|
* Copyright SET - © 2019
|
|
*
|
|
* Created on October 30, 2020, 7:50 PM
|
|
*/
|
|
|
|
#include "PopupCertifyUserId.h"
|
|
#include "global.h"
|
|
#include "Tools.h"
|
|
#include <Wt/WStandardItem.h>
|
|
#include <Wt/WStandardItemModel.h>
|
|
#include <Wt/WRadioButton.h>
|
|
#include <iostream>
|
|
#include <algorithm>
|
|
|
|
using namespace std;
|
|
|
|
PopupCertifyUserId::PopupCertifyUserId(WWidget * anchorWidget, TransientMessageWidget * txtMessage,
|
|
const WLength& width)
|
|
: WPopupWidget(cpp14::make_unique<WContainerWidget>())
|
|
{
|
|
m_tmwMessage = txtMessage;
|
|
m_cwMain = NULL;
|
|
m_cmbPrivKeys = NULL;
|
|
m_cbOptionExportable = NULL;
|
|
m_cbOptionNonRevocable = NULL;
|
|
// m_cbOptionTrust = NULL;
|
|
m_lblPassphrase = NULL;
|
|
m_lePassphrase = NULL;
|
|
m_btnApply = NULL;
|
|
m_certifyOptions = 0;
|
|
setTransient(true);
|
|
setAnchorWidget(anchorWidget);
|
|
setWidth(width);
|
|
}
|
|
|
|
PopupCertifyUserId::~PopupCertifyUserId()
|
|
{
|
|
}
|
|
|
|
void PopupCertifyUserId::Create(vector<WString>& privateKeys,
|
|
const WString& fprKeyToSign)
|
|
{
|
|
m_fprKeyToSign = fprKeyToSign;
|
|
m_cwMain = static_cast<WContainerWidget*> (implementation());
|
|
m_cwMain->setStyleClass("popup");
|
|
|
|
WVBoxLayout * vblMain = new WVBoxLayout();
|
|
m_cwMain->setLayout(unique_ptr<WVBoxLayout> (vblMain));
|
|
|
|
m_cmbPrivKeys = new WComboBox();
|
|
vblMain->addWidget(unique_ptr<WComboBox> (m_cmbPrivKeys));
|
|
FillPrivateKeyComboBox(privateKeys);
|
|
/*
|
|
* Column 0 : user identities in checkboxes
|
|
* Column 1 : signing options in checkboxes
|
|
*/
|
|
m_hblPreferences = new WHBoxLayout();
|
|
vblMain->addLayout(unique_ptr<WHBoxLayout> (m_hblPreferences));
|
|
// Column 0
|
|
m_vblEmail = new WVBoxLayout();
|
|
m_hblPreferences->addLayout(unique_ptr<WVBoxLayout> (m_vblEmail));
|
|
PresentEmail();
|
|
// Column 1
|
|
m_gbOptions = new WGroupBox(TR("Options"));
|
|
WVBoxLayout * vblOptions = new WVBoxLayout();
|
|
m_gbOptions->setLayout(unique_ptr<WVBoxLayout> (vblOptions));
|
|
m_hblPreferences->addWidget(unique_ptr<WGroupBox> (m_gbOptions));
|
|
m_cbOptionExportable = new WCheckBox(TR("ExportableCertification"));
|
|
m_cbOptionExportable->setToolTip(TR("OneWayHint"));
|
|
vblOptions->addWidget(unique_ptr<WCheckBox> (m_cbOptionExportable));
|
|
m_cbOptionNonRevocable = new WCheckBox(TR("NonRevocableCertification"));
|
|
m_cbOptionNonRevocable->setToolTip(TR("OneWayHint"));
|
|
vblOptions->addWidget(unique_ptr<WCheckBox> (m_cbOptionNonRevocable));
|
|
/*m_cbOptionTrust = new WCheckBox(TR("TrustCertification"));
|
|
gbOptions->addWidget(unique_ptr<WCheckBox> (m_cbOptionTrust));*/
|
|
|
|
WHBoxLayout * hblPassphrase = new WHBoxLayout();
|
|
m_lblPassphrase = new WText(TR("Passphrase"));
|
|
hblPassphrase->addWidget(unique_ptr<WText> (m_lblPassphrase), 0);
|
|
m_lePassphrase = new WLineEdit();
|
|
m_lePassphrase->setEchoMode(EchoMode::Password);
|
|
hblPassphrase->addWidget(unique_ptr<WLineEdit> (m_lePassphrase), 1);
|
|
vblMain->addLayout(unique_ptr<WHBoxLayout> (hblPassphrase));
|
|
|
|
WHBoxLayout * hblWhat = new WHBoxLayout();
|
|
WRadioButton * rbCertifyUid = new WRadioButton(TR("CertifyUid"));
|
|
hblWhat->addWidget(unique_ptr<WRadioButton> (rbCertifyUid));
|
|
WRadioButton * rbRevokeCertification =
|
|
new WRadioButton(TR("RevokeUidCertification"));
|
|
hblWhat->addWidget(unique_ptr<WRadioButton> (rbRevokeCertification));
|
|
m_bgWhat = make_shared<WButtonGroup>();
|
|
m_bgWhat->addButton(rbCertifyUid, What::CertifyUid);
|
|
m_bgWhat->addButton(rbRevokeCertification, What::RevokeUidCertification);
|
|
m_bgWhat->setCheckedButton(rbCertifyUid);
|
|
vblMain->addLayout(unique_ptr<WHBoxLayout> (hblWhat));
|
|
|
|
WHBoxLayout * hblButtons = new WHBoxLayout();
|
|
WPushButton * btnClose = new WPushButton(TR("Close"));
|
|
hblButtons->addWidget(unique_ptr<WPushButton> (btnClose));
|
|
m_btnApply = new WPushButton(TR("Apply"));
|
|
hblButtons->addWidget(unique_ptr<WPushButton> (m_btnApply));
|
|
vblMain->addLayout(unique_ptr<WHBoxLayout> (hblButtons));
|
|
|
|
m_cmbPrivKeys->changed().connect(std::bind(&PopupCertifyUserId::ShowPassphrase, this, true));
|
|
m_cbOptionExportable->checked().connect(std::bind(&PopupCertifyUserId::OnCertifyOptionChecked, this, 1));
|
|
m_cbOptionNonRevocable->checked().connect(std::bind(&PopupCertifyUserId::OnCertifyOptionChecked, this, 2));
|
|
// m_cbOptionTrust->checked().connect(std::bind(&PopupCertifyUserId::OnCertifyOptionChecked, this, 4));
|
|
m_cbOptionExportable->unChecked().connect(std::bind(&PopupCertifyUserId::OnCertifyOptionUnChecked, this, 1));
|
|
m_cbOptionNonRevocable->unChecked().connect(std::bind(&PopupCertifyUserId::OnCertifyOptionUnChecked, this, 2));
|
|
// m_cbOptionTrust->unChecked().connect(std::bind(&PopupCertifyUserId::OnCertifyOptionUnChecked, this, 4));
|
|
btnClose->clicked().connect(this, &WPopupWidget::hide);
|
|
m_bgWhat->checkedChanged().connect(this, &PopupCertifyUserId::OnButtonGroupWhat);
|
|
}
|
|
|
|
void PopupCertifyUserId::FillPrivateKeyComboBox(vector<WString>& privateKeys)
|
|
{
|
|
if (m_cmbPrivKeys == NULL)
|
|
return;
|
|
vector<WString>::iterator it;
|
|
GpgMEWorker gpgw;
|
|
GpgME::Error e;
|
|
shared_ptr<WStandardItemModel> iModel =
|
|
make_shared<WStandardItemModel> (0, 2);
|
|
for (it = privateKeys.begin(); it != privateKeys.end(); it++)
|
|
{
|
|
vector<GpgME::Key> lst = gpgw.FindKeys((*it).toUTF8().c_str(), true, e);
|
|
if (e.code() != 0)
|
|
{
|
|
m_tmwMessage->SetText(e.asString());
|
|
return;
|
|
}
|
|
/*
|
|
* A fingerprint manually added in the config file may be missing in
|
|
* the keyring.
|
|
*/
|
|
if (lst.size() == 0)
|
|
continue;
|
|
// We are expecting one single key from a full fpr
|
|
const GpgME::Key k = lst.at(0);
|
|
if (!Tools::ConfigKeyIdMatchesKey(k, (*it)))
|
|
{
|
|
m_tmwMessage->SetText((*it) + TR("BadConfigKeyId"));
|
|
return;
|
|
}
|
|
/* Limit to first email. name should be the same
|
|
* for all UIDs of the key.
|
|
*/
|
|
const WString displayed = WString(k.userID(0).name())
|
|
+ _SPACE_
|
|
+ _ANGLE_BRACKET_OPEN_ + k.userID(0).email()
|
|
+ _ANGLE_BRACKET_CLOSE_
|
|
+ _SPACE_
|
|
+ _BRACKET_OPEN_ + k.shortKeyID() + _BRACKET_CLOSE_;
|
|
iModel->appendRow(cpp14::make_unique<WStandardItem> (*it));
|
|
iModel->setItem(iModel->rowCount() - 1, 1, cpp14::make_unique<WStandardItem> (displayed));
|
|
}
|
|
m_cmbPrivKeys->setModel(iModel);
|
|
m_cmbPrivKeys->setModelColumn(1);
|
|
}
|
|
|
|
void PopupCertifyUserId::PresentEmail()
|
|
{
|
|
WText * lblEmail = new WText(TR("Email"));
|
|
m_vblEmail->addWidget(unique_ptr<WText> (lblEmail));
|
|
|
|
GpgMEWorker gpgw;
|
|
GpgME::Error e;
|
|
vector<GpgME::Key> lst = gpgw.FindKeys(m_fprKeyToSign.toUTF8().c_str(), false, e);
|
|
if (e.code() != 0)
|
|
{
|
|
m_tmwMessage->SetText(e.asString());
|
|
return;
|
|
}
|
|
if (lst.size() != 1)
|
|
{
|
|
m_tmwMessage->SetText(m_fprKeyToSign + TR("BadKeyCount"));
|
|
return;
|
|
}
|
|
const GpgME::Key k = lst.at(0);
|
|
|
|
vector<GpgME::UserID> uids = k.userIDs();
|
|
vector<GpgME::UserID>::iterator it;
|
|
uint id = 0;
|
|
for (it = uids.begin(); it != uids.end(); it++)
|
|
{
|
|
WCheckBox * cbEmail = new WCheckBox(it->email());
|
|
m_vblEmail->addWidget(unique_ptr<WCheckBox> (cbEmail));
|
|
cbEmail->setId(std::to_string(id));
|
|
cbEmail->checked().connect(std::bind(&PopupCertifyUserId::OnEmailChecked, this, cbEmail, (*it)));
|
|
cbEmail->unChecked().connect(std::bind(&PopupCertifyUserId::OnEmailUnChecked, this, cbEmail, (*it)));
|
|
id++;
|
|
}
|
|
}
|
|
|
|
WString PopupCertifyUserId::GetSelectedKey() const
|
|
{
|
|
if (!m_cmbPrivKeys->count())
|
|
return WString::Empty;
|
|
shared_ptr<WAbstractItemModel> aiModel = m_cmbPrivKeys->model();
|
|
WStandardItemModel * iModel = static_cast<WStandardItemModel*> (aiModel.get());
|
|
if (!iModel) return WString::Empty;
|
|
WStandardItem * item = iModel->item(m_cmbPrivKeys->currentIndex(), 0);
|
|
if (!item) return WString::Empty;
|
|
return item->text();
|
|
}
|
|
|
|
void PopupCertifyUserId::ShowPassphrase(bool show)
|
|
{
|
|
if (show)
|
|
{
|
|
m_lblPassphrase->show();
|
|
m_lePassphrase->show();
|
|
/*
|
|
* We cannot know the reason of a certify failure.
|
|
* Empty the passphrase widget in any case.
|
|
*/
|
|
m_lePassphrase->setText(WString::Empty);
|
|
}
|
|
else
|
|
{
|
|
m_lblPassphrase->hide();
|
|
m_lePassphrase->hide();
|
|
/*
|
|
* The passphrase widget is not cleared.
|
|
* gpg-agent will not fetch it from the loopback passphrase provider
|
|
* as long as its caching timeout is not reached.
|
|
* To better mimic the behavior of the default pinentry mechanism,
|
|
* we should probably clear m_lePassphrase AND the passphrase stored
|
|
* in the loopback passphrase provider.
|
|
*/
|
|
}
|
|
}
|
|
|
|
void PopupCertifyUserId::OnEmailChecked(WCheckBox* cb, GpgME::UserID& uid)
|
|
{
|
|
int id = Tools::ToInt(cb->id());
|
|
m_uidsToSign.push_back(id);
|
|
m_uidsToRevokeCertification.push_back(uid);
|
|
}
|
|
|
|
void PopupCertifyUserId::OnEmailUnChecked(WCheckBox* cb, GpgME::UserID& uid)
|
|
{
|
|
const uint id = Tools::ToInt(cb->id());
|
|
vector<uint>::iterator it =
|
|
std::find(m_uidsToSign.begin(), m_uidsToSign.end(), id);
|
|
if (it != m_uidsToSign.end())
|
|
m_uidsToSign.erase(it);
|
|
|
|
vector<GpgME::UserID>::iterator uit;
|
|
for (uit = m_uidsToRevokeCertification.begin();
|
|
uit != m_uidsToRevokeCertification.end(); uit++)
|
|
{
|
|
if ((*uit).uidhash() == uid.uidhash())
|
|
{
|
|
m_uidsToRevokeCertification.erase(uit);
|
|
break;
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
void PopupCertifyUserId::OnCertifyOptionChecked(int id)
|
|
{
|
|
m_certifyOptions += id;
|
|
}
|
|
|
|
void PopupCertifyUserId::OnCertifyOptionUnChecked(int id)
|
|
{
|
|
m_certifyOptions -= id;
|
|
}
|
|
|
|
void PopupCertifyUserId::OnButtonGroupWhat(WRadioButton* btn)
|
|
{
|
|
m_gbOptions->setDisabled(m_bgWhat->checkedId()
|
|
== What::RevokeUidCertification);
|
|
|
|
}
|