Copy the KDE 3.5 branch to branches/trinity for new KDE 3.5 features.

BUG:215923


git-svn-id: svn://anonsvn.kde.org/home/kde/branches/trinity/kdelibs@1054174 283d02a7-25f6-0310-bc7c-ecb5cbfe19da

1 files changed, 216 insertions, 0 deletions

diff --git a/kio/kssl/ksslcertchain.cc b/kio/kssl/ksslcertchain.cc
new file mode 100644
index 000000000..aa531c067
--- /dev/null
+++ b/kio/kssl/ksslcertchain.cc
@@ -0,0 +1,216 @@
+/* This file is part of the KDE project
+ *
+ * Copyright (C) 2001 George Staikos <staikos@kde.org>
+ *
+ * This library is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Library General Public
+ * License as published by the Free Software Foundation; either
+ * version 2 of the License, or (at your option) any later version.
+ *
+ * This library is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Library General Public License for more details.
+ *
+ * You should have received a copy of the GNU Library General Public License
+ * along with this library; see the file COPYING.LIB.  If not, write to
+ * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
+ * Boston, MA 02110-1301, USA.
+ */
+#ifdef HAVE_CONFIG_H 
+#include <config.h>
+#endif
+
+#include "kssldefs.h"
+#include "ksslcertificate.h"
+#include "ksslcertchain.h"
+
+// this hack provided by Malte Starostik to avoid glibc/openssl bug
+// on some systems
+#ifdef KSSL_HAVE_SSL
+#define crypt _openssl_crypt
+#include <openssl/ssl.h>
+#include <openssl/x509.h>
+#include <openssl/x509v3.h>
+#include <openssl/x509_vfy.h>
+#include <openssl/pem.h>
+#include <openssl/stack.h>
+#include <openssl/safestack.h>
+#undef crypt
+#endif
+
+#include <kopenssl.h>
+#include <kdebug.h>
+#include <qstringlist.h>
+
+
+
+#ifdef KSSL_HAVE_SSL
+#define sk_new d->kossl->sk_new
+#define sk_push d->kossl->sk_push
+#define sk_free d->kossl->sk_free
+#define sk_value d->kossl->sk_value
+#define sk_num d->kossl->sk_num
+#define sk_dup d->kossl->sk_dup
+#define sk_pop d->kossl->sk_pop
+#endif
+
+class KSSLCertChainPrivate {
+public:
+  KSSLCertChainPrivate() {
+     kossl = KOSSL::self();
+  }
+
+  ~KSSLCertChainPrivate() {
+  }
+
+  KOSSL *kossl;
+};
+
+KSSLCertChain::KSSLCertChain() {
+  d = new KSSLCertChainPrivate;
+  _chain = NULL;
+}
+
+
+KSSLCertChain::~KSSLCertChain() {
+#ifdef KSSL_HAVE_SSL
+  if (_chain) {
+    STACK_OF(X509) *x = (STACK_OF(X509) *)_chain;
+
+    for (;;) {
+      X509* x5 = sk_X509_pop(x);
+      if (!x5) break;
+      d->kossl->X509_free(x5);
+    }
+    sk_X509_free(x);
+  }
+#endif
+  delete d;
+}
+
+
+bool KSSLCertChain::isValid() {
+  return (_chain && depth() > 0);
+}
+
+
+KSSLCertChain *KSSLCertChain::replicate() {
+KSSLCertChain *x = new KSSLCertChain;
+QPtrList<KSSLCertificate> ch = getChain();
+
+  x->setChain(ch);   // this will do a deep copy for us
+  ch.setAutoDelete(true);
+return x;
+}
+
+
+int KSSLCertChain::depth() {
+#ifdef KSSL_HAVE_SSL
+  return sk_X509_num((STACK_OF(X509)*)_chain);
+#endif
+return 0;
+}
+
+
+QPtrList<KSSLCertificate> KSSLCertChain::getChain() {
+QPtrList<KSSLCertificate> cl;
+if (!_chain) return cl;
+#ifdef KSSL_HAVE_SSL
+STACK_OF(X509) *x = (STACK_OF(X509) *)_chain;
+
+   for (int i = 0; i < sk_X509_num(x); i++) {
+     X509* x5 = sk_X509_value(x, i);
+     if (!x5) continue;
+     KSSLCertificate *nc = new KSSLCertificate;
+     nc->setCert(d->kossl->X509_dup(x5));
+     cl.append(nc);
+   }
+
+#endif
+return cl;
+}
+
+
+void KSSLCertChain::setChain(QPtrList<KSSLCertificate>& chain) {
+#ifdef KSSL_HAVE_SSL
+if (_chain) {
+    STACK_OF(X509) *x = (STACK_OF(X509) *)_chain;
+
+    for (;;) {
+      X509* x5 = sk_X509_pop(x);
+      if (!x5) break;
+      d->kossl->X509_free(x5);
+    }
+    sk_X509_free(x);
+    _chain = NULL;
+}
+
+  if (chain.count() == 0) return;
+  _chain = (void *)sk_new(NULL);
+  for (KSSLCertificate *x = chain.first(); x != 0; x = chain.next()) {
+    sk_X509_push((STACK_OF(X509)*)_chain, d->kossl->X509_dup(x->getCert()));
+  }
+
+#endif
+}
+
+ 
+void KSSLCertChain::setChain(void *stack_of_x509) {
+#ifdef KSSL_HAVE_SSL
+if (_chain) {
+    STACK_OF(X509) *x = (STACK_OF(X509) *)_chain;
+
+    for (;;) {
+      X509* x5 = sk_X509_pop(x);
+      if (!x5) break;
+      d->kossl->X509_free(x5);
+    }
+    sk_X509_free(x);
+    _chain = NULL;
+}
+
+if (!stack_of_x509) return;
+
+_chain = (void *)sk_new(NULL);
+STACK_OF(X509) *x = (STACK_OF(X509) *)stack_of_x509;
+
+   for (int i = 0; i < sk_X509_num(x); i++) {
+     X509* x5 = sk_X509_value(x, i);
+     if (!x5) continue;
+     sk_X509_push((STACK_OF(X509)*)_chain,d->kossl->X509_dup(x5));
+   }
+
+#else
+_chain = NULL;
+#endif
+}
+
+
+void KSSLCertChain::setChain(QStringList chain) {
+	setCertChain(chain);
+}
+
+void KSSLCertChain::setCertChain(const QStringList& chain) {
+    QPtrList<KSSLCertificate> cl;
+    cl.setAutoDelete(true);
+    for (QStringList::ConstIterator s = chain.begin(); s != chain.end(); ++s) {
+       KSSLCertificate *c = KSSLCertificate::fromString((*s).local8Bit());
+       if (c) {
+          cl.append(c);
+       }
+    }
+    setChain(cl);
+}
+
+
+#ifdef KSSL_HAVE_SSL
+#undef sk_new
+#undef sk_push
+#undef sk_free
+#undef sk_value
+#undef sk_num
+#undef sk_dup
+#undef sk_pop
+#endif
+