1/****************************************************************************
2**
3** Copyright (C) 2016 The Qt Company Ltd.
4** Contact: https://www.qt.io/licensing/
5**
6** This file is part of the QtNetwork module of the Qt Toolkit.
7**
8** $QT_BEGIN_LICENSE:LGPL$
9** Commercial License Usage
10** Licensees holding valid commercial Qt licenses may use this file in
11** accordance with the commercial license agreement provided with the
12** Software or, alternatively, in accordance with the terms contained in
13** a written agreement between you and The Qt Company. For licensing terms
14** and conditions see https://www.qt.io/terms-conditions. For further
15** information use the contact form at https://www.qt.io/contact-us.
16**
17** GNU Lesser General Public License Usage
18** Alternatively, this file may be used under the terms of the GNU Lesser
19** General Public License version 3 as published by the Free Software
20** Foundation and appearing in the file LICENSE.LGPL3 included in the
21** packaging of this file. Please review the following information to
22** ensure the GNU Lesser General Public License version 3 requirements
23** will be met: https://www.gnu.org/licenses/lgpl-3.0.html.
24**
25** GNU General Public License Usage
26** Alternatively, this file may be used under the terms of the GNU
27** General Public License version 2.0 or (at your option) the GNU General
28** Public license version 3 or any later version approved by the KDE Free
29** Qt Foundation. The licenses are as published by the Free Software
30** Foundation and appearing in the file LICENSE.GPL2 and LICENSE.GPL3
31** included in the packaging of this file. Please review the following
32** information to ensure the GNU General Public License requirements will
33** be met: https://www.gnu.org/licenses/gpl-2.0.html and
34** https://www.gnu.org/licenses/gpl-3.0.html.
35**
36** $QT_END_LICENSE$
37**
38****************************************************************************/
39
40
41#ifndef QSSLCERTIFICATE_OPENSSL_P_H
42#define QSSLCERTIFICATE_OPENSSL_P_H
43
44#include <QtNetwork/private/qtnetworkglobal_p.h>
45#include "qsslcertificate.h"
46
47//
48// W A R N I N G
49// -------------
50//
51// This file is not part of the Qt API. It exists purely as an
52// implementation detail. This header file may change from version to
53// version without notice, or even be removed.
54//
55// We mean it.
56//
57
58#ifndef QT_NO_SSL
59#include "qsslsocket_p.h"
60#endif
61#include "qsslcertificateextension.h"
62#include <QtCore/qdatetime.h>
63#include <QtCore/qmap.h>
64
65#ifndef QT_NO_OPENSSL
66#include <openssl/x509.h>
67#else
68struct X509;
69struct X509_EXTENSION;
70struct ASN1_OBJECT;
71#endif
72
73#ifdef Q_OS_WINRT
74#include <wrl.h>
75#include <windows.security.cryptography.certificates.h>
76#endif
77
78#if QT_CONFIG(schannel)
79#include <wincrypt.h>
80#endif
81
82QT_BEGIN_NAMESPACE
83
84// forward declaration
85
86class QSslCertificatePrivate
87{
88public:
89 QSslCertificatePrivate()
90 : null(true), x509(nullptr)
91 {
92#ifndef QT_NO_SSL
93 QSslSocketPrivate::ensureInitialized();
94#endif
95 }
96
97 ~QSslCertificatePrivate()
98 {
99#ifndef QT_NO_OPENSSL
100 if (x509)
101 q_X509_free(a: x509);
102#endif
103#if QT_CONFIG(schannel)
104 if (certificateContext)
105 CertFreeCertificateContext(certificateContext);
106#endif
107 }
108
109 bool null;
110 QByteArray versionString;
111 QByteArray serialNumberString;
112
113 QMultiMap<QByteArray, QString> issuerInfo;
114 QMultiMap<QByteArray, QString> subjectInfo;
115 QDateTime notValidAfter;
116 QDateTime notValidBefore;
117
118#ifdef QT_NO_OPENSSL
119 bool subjectMatchesIssuer;
120 QSsl::KeyAlgorithm publicKeyAlgorithm;
121 QByteArray publicKeyDerData;
122 QMultiMap<QSsl::AlternativeNameEntryType, QString> subjectAlternativeNames;
123 QList<QSslCertificateExtension> extensions;
124
125 QByteArray derData;
126
127 bool parse(const QByteArray &data);
128 bool parseExtension(const QByteArray &data, QSslCertificateExtension *extension);
129#endif
130 X509 *x509;
131
132 void init(const QByteArray &data, QSsl::EncodingFormat format);
133
134 static QByteArray asn1ObjectId(ASN1_OBJECT *object);
135 static QByteArray asn1ObjectName(ASN1_OBJECT *object);
136 static QByteArray QByteArray_from_X509(X509 *x509, QSsl::EncodingFormat format);
137 static QString text_from_X509(X509 *x509);
138 static QSslCertificate QSslCertificate_from_X509(X509 *x509);
139 static QList<QSslCertificate> certificatesFromPem(const QByteArray &pem, int count = -1);
140 static QList<QSslCertificate> certificatesFromDer(const QByteArray &der, int count = -1);
141 static bool isBlacklisted(const QSslCertificate &certificate);
142 static QSslCertificateExtension convertExtension(X509_EXTENSION *ext);
143 static QByteArray subjectInfoToString(QSslCertificate::SubjectInfo info);
144
145 friend class QSslSocketBackendPrivate;
146
147 QAtomicInt ref;
148
149#ifdef Q_OS_WINRT
150 Microsoft::WRL::ComPtr<ABI::Windows::Security::Cryptography::Certificates::ICertificate> certificate;
151
152 static QSslCertificate QSslCertificate_from_Certificate(ABI::Windows::Security::Cryptography::Certificates::ICertificate *iCertificate);
153#endif
154
155#if QT_CONFIG(schannel)
156 const CERT_CONTEXT *certificateContext = nullptr;
157
158 static QSslCertificate QSslCertificate_from_CERT_CONTEXT(const CERT_CONTEXT *certificateContext);
159#endif
160};
161
162QT_END_NAMESPACE
163
164#endif // QSSLCERTIFICATE_OPENSSL_P_H
165

source code of qtbase/src/network/ssl/qsslcertificate_p.h