<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en_US" xml:lang="en_US"> <head> <title>knewstuff: security.cpp Source File (knewstuff)</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta http-equiv="Content-Style-Type" content="text/css" /> <meta http-equiv="pics-label" content='(pics-1.1 "http://www.icra.org/ratingsv02.html" comment "ICRAonline DE v2.0" l gen true for "http://www.kde.org" r (nz 1 vz 1 lz 1 oz 1 cb 1) "http://www.rsac.org/ratingsv01.html" l gen true for "http://www.kde.org" r (n 0 s 0 v 0 l 0))' /> <meta name="trademark" content="KDE e.V." /> <meta name="description" content="K Desktop Environment Homepage, KDE.org" /> <meta name="MSSmartTagsPreventParsing" content="true" /> <meta name="robots" content="all" /> <link rel="shortcut icon" href="../../favicon.ico" /> <link rel="stylesheet" media="screen" type="text/css" title="APIDOX" href="doxygen.css" /> </head> <body> <div id="nav_header_top" align="right"> <a href="#content" class="doNotDisplay" accesskey="2">Skip to main content ::</a> <a href="../.."><img id="nav_header_logo" alt="Home" align="left" src="../../kde_gear_64.png" border="0" /></a> <span class="doNotDisplay">::</span> <div id="nav_header_title" align="left">KDE API Reference</div> </div> <div id="nav_header_bottom" align="right"> <span class="doNotDisplay">:: <a href="#navigation" accesskey="5">Skip to Link Menu</a><br/></span> <div id="nav_header_bottom_right" style="text-align: left;"> / <a href="../..">API Reference</a> / <a href=".">knewstuff</a> </div> </div> <table id="main" border="0" cellpadding="0" cellspacing="0" width="100%"> <tr> <td valign="top" class="menuheader" height="0"></td> <td id="contentcolumn" valign="top" rowspan="2" > <div id="content" style="padding-top: 0px;"><div style="width:100%; margin: 0px; padding: 0px;"> <a name="content"></a> <!-- Generated by Doxygen 1.4.7 --> <h1>security.cpp</h1><div class="fragment"><pre class="fragment"><a name="l00001"></a>00001 <span class="comment">/***************************************************************************</span> <a name="l00002"></a>00002 <span class="comment"> security.cpp - description</span> <a name="l00003"></a>00003 <span class="comment"> -------------------</span> <a name="l00004"></a>00004 <span class="comment"> begin : Thu Jun 24 11:22:12 2004</span> <a name="l00005"></a>00005 <span class="comment"> copyright : (C) 2004, 2005 by Andras Mantia <amantia@kde.org></span> <a name="l00006"></a>00006 <span class="comment"> ***************************************************************************/</span> <a name="l00007"></a>00007 <a name="l00008"></a>00008 <span class="comment">/***************************************************************************</span> <a name="l00009"></a>00009 <span class="comment"> * *</span> <a name="l00010"></a>00010 <span class="comment"> * This program is free software; you can redistribute it and/or modify *</span> <a name="l00011"></a>00011 <span class="comment"> * it under the terms of the GNU Library General Public License as *</span> <a name="l00012"></a>00012 <span class="comment"> * published by the Free Software Foundation; version 2 of the License. *</span> <a name="l00013"></a>00013 <span class="comment"> * *</span> <a name="l00014"></a>00014 <span class="comment"> ***************************************************************************/</span> <a name="l00015"></a>00015 <a name="l00016"></a>00016 <span class="comment">//qt includes</span> <a name="l00017"></a>00017 <span class="preprocessor">#include <qfile.h></span> <a name="l00018"></a>00018 <span class="preprocessor">#include <qfileinfo.h></span> <a name="l00019"></a>00019 <span class="preprocessor">#include <qstringlist.h></span> <a name="l00020"></a>00020 <span class="preprocessor">#include <qtimer.h></span> <a name="l00021"></a>00021 <a name="l00022"></a>00022 <span class="comment">//kde includes</span> <a name="l00023"></a>00023 <span class="preprocessor">#include <kdebug.h></span> <a name="l00024"></a>00024 <span class="preprocessor">#include <kinputdialog.h></span> <a name="l00025"></a>00025 <span class="preprocessor">#include <klocale.h></span> <a name="l00026"></a>00026 <span class="preprocessor">#include <kmdcodec.h></span> <a name="l00027"></a>00027 <span class="preprocessor">#include <kmessagebox.h></span> <a name="l00028"></a>00028 <span class="preprocessor">#include <kpassdlg.h></span> <a name="l00029"></a>00029 <span class="preprocessor">#include <kprocio.h></span> <a name="l00030"></a>00030 <a name="l00031"></a>00031 <span class="comment">//app includes</span> <a name="l00032"></a>00032 <span class="preprocessor">#include "security.h"</span> <a name="l00033"></a>00033 <a name="l00034"></a>00034 <span class="keyword">using namespace </span>KNS; <a name="l00035"></a>00035 <a name="l00036"></a>00036 Security::Security() <a name="l00037"></a>00037 { <a name="l00038"></a>00038 m_keysRead = <span class="keyword">false</span>; <a name="l00039"></a>00039 m_gpgRunning = <span class="keyword">false</span>; <a name="l00040"></a>00040 <a class="code" href="classKNS_1_1Security.html#260209d0c6c06f1070ecbcb9f51f4611">readKeys</a>(); <a name="l00041"></a>00041 <a class="code" href="classKNS_1_1Security.html#1095dbe5474c4a21d85c461e307b84bb">readSecretKeys</a>(); <a name="l00042"></a>00042 } <a name="l00043"></a>00043 <a name="l00044"></a>00044 <a name="l00045"></a><a class="code" href="classKNS_1_1Security.html#9c54a706f244f9a3d769615225654696">00045</a> <a class="code" href="classKNS_1_1Security.html#9c54a706f244f9a3d769615225654696">Security::~Security</a>() <a name="l00046"></a>00046 { <a name="l00047"></a>00047 } <a name="l00048"></a>00048 <a name="l00049"></a><a class="code" href="classKNS_1_1Security.html#260209d0c6c06f1070ecbcb9f51f4611">00049</a> <span class="keywordtype">void</span> <a class="code" href="classKNS_1_1Security.html#260209d0c6c06f1070ecbcb9f51f4611">Security::readKeys</a>() <a name="l00050"></a>00050 { <a name="l00051"></a>00051 <span class="keywordflow">if</span> (m_gpgRunning) <a name="l00052"></a>00052 { <a name="l00053"></a>00053 <a class="codeRef" doxygen="qt.tag:" href="qtimer.html#singleShot">QTimer::singleShot</a>(5, <span class="keyword">this</span>, SLOT(<a class="code" href="classKNS_1_1Security.html#260209d0c6c06f1070ecbcb9f51f4611">readKeys</a>())); <a name="l00054"></a>00054 <span class="keywordflow">return</span>; <a name="l00055"></a>00055 } <a name="l00056"></a>00056 m_runMode = List; <a name="l00057"></a>00057 m_keys.<a class="codeRef" doxygen="qt.tag:" href="qmap.html#clear">clear</a>(); <a name="l00058"></a>00058 KProcIO *readProcess=<span class="keyword">new</span> KProcIO(); <a name="l00059"></a>00059 *readProcess << <span class="stringliteral">"gpg"</span><<<span class="stringliteral">"--no-secmem-warning"</span><<<span class="stringliteral">"--no-tty"</span><<<span class="stringliteral">"--with-colon"</span><<<span class="stringliteral">"--list-keys"</span>; <a name="l00060"></a>00060 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(readProcess, SIGNAL(processExited(KProcess *)), <span class="keyword">this</span>, SLOT(slotProcessExited(KProcess *))); <a name="l00061"></a>00061 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(readProcess, SIGNAL(readReady(KProcIO *)) ,<span class="keyword">this</span>, SLOT(slotDataArrived(KProcIO *))); <a name="l00062"></a>00062 <span class="keywordflow">if</span> (!readProcess->start(KProcess::NotifyOnExit, <span class="keyword">true</span>)) <a name="l00063"></a>00063 KMessageBox::error(0L, i18n(<span class="stringliteral">"<qt>Cannot start <i>gpg</i> and retrieve the available keys. Make sure that <i>gpg</i> is installed, otherwise verification of downloaded resources will not be possible.</qt>"</span>)); <a name="l00064"></a>00064 <span class="keywordflow">else</span> <a name="l00065"></a>00065 m_gpgRunning = <span class="keyword">true</span>; <a name="l00066"></a>00066 } <a name="l00067"></a>00067 <a name="l00068"></a><a class="code" href="classKNS_1_1Security.html#1095dbe5474c4a21d85c461e307b84bb">00068</a> <span class="keywordtype">void</span> <a class="code" href="classKNS_1_1Security.html#1095dbe5474c4a21d85c461e307b84bb">Security::readSecretKeys</a>() <a name="l00069"></a>00069 { <a name="l00070"></a>00070 <span class="keywordflow">if</span> (m_gpgRunning) <a name="l00071"></a>00071 { <a name="l00072"></a>00072 <a class="codeRef" doxygen="qt.tag:" href="qtimer.html#singleShot">QTimer::singleShot</a>(5, <span class="keyword">this</span>, SLOT(<a class="code" href="classKNS_1_1Security.html#1095dbe5474c4a21d85c461e307b84bb">readSecretKeys</a>())); <a name="l00073"></a>00073 <span class="keywordflow">return</span>; <a name="l00074"></a>00074 } <a name="l00075"></a>00075 m_runMode = ListSecret; <a name="l00076"></a>00076 KProcIO *readProcess=<span class="keyword">new</span> KProcIO(); <a name="l00077"></a>00077 *readProcess << <span class="stringliteral">"gpg"</span><<<span class="stringliteral">"--no-secmem-warning"</span><<<span class="stringliteral">"--no-tty"</span><<<span class="stringliteral">"--with-colon"</span><<<span class="stringliteral">"--list-secret-keys"</span>; <a name="l00078"></a>00078 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(readProcess, SIGNAL(processExited(KProcess *)), <span class="keyword">this</span>, SLOT(slotProcessExited(KProcess *))); <a name="l00079"></a>00079 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(readProcess, SIGNAL(readReady(KProcIO *)) ,<span class="keyword">this</span>, SLOT(slotDataArrived(KProcIO *))); <a name="l00080"></a>00080 <span class="keywordflow">if</span> (readProcess->start(KProcess::NotifyOnExit, <span class="keyword">true</span>)) <a name="l00081"></a>00081 m_gpgRunning = <span class="keyword">true</span>; <a name="l00082"></a>00082 } <a name="l00083"></a>00083 <a name="l00084"></a>00084 <span class="keywordtype">void</span> Security::slotProcessExited(KProcess *process) <a name="l00085"></a>00085 { <a name="l00086"></a>00086 <span class="keywordflow">switch</span> (m_runMode) <a name="l00087"></a>00087 { <a name="l00088"></a>00088 <span class="keywordflow">case</span> ListSecret: <a name="l00089"></a>00089 m_keysRead = <span class="keyword">true</span>; <a name="l00090"></a>00090 <span class="keywordflow">break</span>; <a name="l00091"></a>00091 <span class="keywordflow">case</span> Verify: emit <a class="code" href="classKNS_1_1Security.html#b5fa1627b8591007b3671f3860dd577c">validityResult</a>(m_result); <a name="l00092"></a>00092 <span class="keywordflow">break</span>; <a name="l00093"></a>00093 <span class="keywordflow">case</span> Sign: emit <a class="code" href="classKNS_1_1Security.html#2b007766bb2856f4517ad67e3e2d1450">fileSigned</a>(m_result); <a name="l00094"></a>00094 <span class="keywordflow">break</span>; <a name="l00095"></a>00095 <a name="l00096"></a>00096 } <a name="l00097"></a>00097 m_gpgRunning = <span class="keyword">false</span>; <a name="l00098"></a>00098 <span class="keyword">delete</span> process; <a name="l00099"></a>00099 } <a name="l00100"></a>00100 <a name="l00101"></a>00101 <span class="keywordtype">void</span> Security::slotDataArrived(KProcIO *procIO) <a name="l00102"></a>00102 { <a name="l00103"></a>00103 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> data; <a name="l00104"></a>00104 <span class="keywordflow">while</span> (procIO->readln(data, <span class="keyword">true</span>) != -1) <a name="l00105"></a>00105 { <a name="l00106"></a>00106 <span class="keywordflow">switch</span> (m_runMode) <a name="l00107"></a>00107 { <a name="l00108"></a>00108 <span class="keywordflow">case</span> List: <a name="l00109"></a>00109 <span class="keywordflow">case</span> ListSecret: <a name="l00110"></a>00110 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#startsWith">startsWith</a>(<span class="stringliteral">"pub"</span>) || data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#startsWith">startsWith</a>(<span class="stringliteral">"sec"</span>)) <a name="l00111"></a>00111 { <a name="l00112"></a>00112 <a class="code" href="structKeyStruct.html">KeyStruct</a> key; <a name="l00113"></a>00113 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#startsWith">startsWith</a>(<span class="stringliteral">"pub"</span>)) <a name="l00114"></a>00114 key.secret = <span class="keyword">false</span>; <a name="l00115"></a>00115 <span class="keywordflow">else</span> <a name="l00116"></a>00116 key.secret = <span class="keyword">true</span>; <a name="l00117"></a>00117 <a class="codeRef" doxygen="qt.tag:" href="qstringlist.html">QStringList</a> line = <a class="codeRef" doxygen="qt.tag:" href="qstringlist.html#split">QStringList::split</a>(<span class="stringliteral">":"</span>, data, <span class="keyword">true</span>); <a name="l00118"></a>00118 key.id = line[4]; <a name="l00119"></a>00119 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> shortId = key.id.right(8); <a name="l00120"></a>00120 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> trustStr = line[1]; <a name="l00121"></a>00121 key.trusted = <span class="keyword">false</span>; <a name="l00122"></a>00122 <span class="keywordflow">if</span> (trustStr == <span class="stringliteral">"u"</span> || trustStr == <span class="stringliteral">"f"</span>) <a name="l00123"></a>00123 key.trusted = <span class="keyword">true</span>; <a name="l00124"></a>00124 data = line[9]; <a name="l00125"></a>00125 key.mail=data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#section">section</a>(<span class="charliteral">'<'</span>, -1, -1); <a name="l00126"></a>00126 key.mail.truncate(key.mail.length() - 1); <a name="l00127"></a>00127 key.name=data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#section">section</a>(<span class="charliteral">'<'</span>,0,0); <a name="l00128"></a>00128 <span class="keywordflow">if</span> (key.name.find(<span class="stringliteral">"("</span>)!=-1) <a name="l00129"></a>00129 key.name=key.name.section(<span class="charliteral">'('</span>,0,0); <a name="l00130"></a>00130 m_keys[shortId] = key; <a name="l00131"></a>00131 } <a name="l00132"></a>00132 <span class="keywordflow">break</span>; <a name="l00133"></a>00133 <span class="keywordflow">case</span> Verify: <a name="l00134"></a>00134 data = data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#section">section</a>(<span class="stringliteral">"]"</span>,1,-1).stripWhiteSpace(); <a name="l00135"></a>00135 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#startsWith">startsWith</a>(<span class="stringliteral">"GOODSIG"</span>)) <a name="l00136"></a>00136 { <a name="l00137"></a>00137 m_result &= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a754e0d451e8571c18486aabe0743350809b">SIGNED_BAD_CLEAR</a>; <a name="l00138"></a>00138 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a754b2ffb721b9b3a8942b1ac21419c3fd08">SIGNED_OK</a>; <a name="l00139"></a>00139 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> <span class="keywordtype">id</span> = data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#section">section</a>(<span class="stringliteral">" "</span>, 1 , 1).right(8); <a name="l00140"></a>00140 <span class="keywordflow">if</span> (!m_keys.<a class="codeRef" doxygen="qt.tag:" href="qmap.html#contains">contains</a>(<span class="keywordtype">id</span>)) <a name="l00141"></a>00141 { <a name="l00142"></a>00142 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a7543dcce522b45dba9d1b9881226db66919">UNKNOWN</a>; <a name="l00143"></a>00143 } <span class="keywordflow">else</span> <a name="l00144"></a>00144 { <a name="l00145"></a>00145 m_signatureKey = m_keys[id]; <a name="l00146"></a>00146 } <a name="l00147"></a>00147 } <span class="keywordflow">else</span> <a name="l00148"></a>00148 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#startsWith">startsWith</a>(<span class="stringliteral">"NO_PUBKEY"</span>)) <a name="l00149"></a>00149 { <a name="l00150"></a>00150 m_result &= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a754e0d451e8571c18486aabe0743350809b">SIGNED_BAD_CLEAR</a>; <a name="l00151"></a>00151 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a7543dcce522b45dba9d1b9881226db66919">UNKNOWN</a>; <a name="l00152"></a>00152 } <span class="keywordflow">else</span> <a name="l00153"></a>00153 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#startsWith">startsWith</a>(<span class="stringliteral">"BADSIG"</span>)) <a name="l00154"></a>00154 { <a name="l00155"></a>00155 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a754dc5dbd6c9e4fe045fa1aae90ffc9941d">SIGNED_BAD</a>; <a name="l00156"></a>00156 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> <span class="keywordtype">id</span> = data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#section">section</a>(<span class="stringliteral">" "</span>, 1 , 1).right(8); <a name="l00157"></a>00157 <span class="keywordflow">if</span> (!m_keys.<a class="codeRef" doxygen="qt.tag:" href="qmap.html#contains">contains</a>(<span class="keywordtype">id</span>)) <a name="l00158"></a>00158 { <a name="l00159"></a>00159 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a7543dcce522b45dba9d1b9881226db66919">UNKNOWN</a>; <a name="l00160"></a>00160 } <span class="keywordflow">else</span> <a name="l00161"></a>00161 { <a name="l00162"></a>00162 m_signatureKey = m_keys[id]; <a name="l00163"></a>00163 } <a name="l00164"></a>00164 } <span class="keywordflow">else</span> <a name="l00165"></a>00165 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#startsWith">startsWith</a>(<span class="stringliteral">"TRUST_ULTIMATE"</span>)) <a name="l00166"></a>00166 { <a name="l00167"></a>00167 m_result &= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a754e0d451e8571c18486aabe0743350809b">SIGNED_BAD_CLEAR</a>; <a name="l00168"></a>00168 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a754416d638f2e71e5414b7348be08b4e164">TRUSTED</a>; <a name="l00169"></a>00169 } <a name="l00170"></a>00170 <span class="keywordflow">break</span>; <a name="l00171"></a>00171 <a name="l00172"></a>00172 <span class="keywordflow">case</span> Sign: <a name="l00173"></a>00173 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#find">find</a>(<span class="stringliteral">"passphrase.enter"</span>) != -1) <a name="l00174"></a>00174 { <a name="l00175"></a>00175 <a class="codeRef" doxygen="qt.tag:" href="qcstring.html">QCString</a> password; <a name="l00176"></a>00176 <a class="code" href="structKeyStruct.html">KeyStruct</a> key = m_keys[m_secretKey]; <a name="l00177"></a>00177 <span class="keywordtype">int</span> result = KPasswordDialog::getPassword(password, i18n(<span class="stringliteral">"<qt>Enter passphrase for key <b>0x%1</b>, belonging to<br><i>%2&lt;%3&gt;</i>:</qt>"</span>).arg(m_secretKey).arg(key.<a class="code" href="structKeyStruct.html#c62a9f6636ad7a559d2df9c15ccf1597">name</a>).arg(key.<a class="code" href="structKeyStruct.html#1aa90db717ccba22f3c9e195f3aa880b">mail</a>)); <a name="l00178"></a>00178 <span class="keywordflow">if</span> (result == KPasswordDialog::Accepted) <a name="l00179"></a>00179 { <a name="l00180"></a>00180 procIO->writeStdin(password, <span class="keyword">true</span>); <a name="l00181"></a>00181 password.fill(<span class="charliteral">' '</span>); <a name="l00182"></a>00182 } <a name="l00183"></a>00183 <span class="keywordflow">else</span> <a name="l00184"></a>00184 { <a name="l00185"></a>00185 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a75486c66ba3c177ff307806913c2f7d1a62">BAD_PASSPHRASE</a>; <a name="l00186"></a>00186 slotProcessExited(procIO); <a name="l00187"></a>00187 <span class="keywordflow">return</span>; <a name="l00188"></a>00188 } <a name="l00189"></a>00189 } <span class="keywordflow">else</span> <a name="l00190"></a>00190 <span class="keywordflow">if</span> (data.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#find">find</a>(<span class="stringliteral">"BAD_PASSPHRASE"</span>) != -1) <a name="l00191"></a>00191 { <a name="l00192"></a>00192 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a75486c66ba3c177ff307806913c2f7d1a62">BAD_PASSPHRASE</a>; <a name="l00193"></a>00193 } <a name="l00194"></a>00194 <span class="keywordflow">break</span>; <a name="l00195"></a>00195 } <a name="l00196"></a>00196 } <a name="l00197"></a>00197 } <a name="l00198"></a>00198 <a name="l00199"></a><a class="code" href="classKNS_1_1Security.html#42ee65e15aa1e35a6343c05d31c6bf03">00199</a> <span class="keywordtype">void</span> <a class="code" href="classKNS_1_1Security.html#42ee65e15aa1e35a6343c05d31c6bf03">Security::checkValidity</a>(<span class="keyword">const</span> <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a>& filename) <a name="l00200"></a>00200 { <a name="l00201"></a>00201 m_fileName = filename; <a name="l00202"></a>00202 <a class="code" href="classKNS_1_1Security.html#92b26fa61cb6d6f127f301640a7988ff">slotCheckValidity</a>(); <a name="l00203"></a>00203 } <a name="l00204"></a>00204 <a name="l00205"></a><a class="code" href="classKNS_1_1Security.html#92b26fa61cb6d6f127f301640a7988ff">00205</a> <span class="keywordtype">void</span> <a class="code" href="classKNS_1_1Security.html#92b26fa61cb6d6f127f301640a7988ff">Security::slotCheckValidity</a>() <a name="l00206"></a>00206 { <a name="l00207"></a>00207 <span class="keywordflow">if</span> (!m_keysRead || m_gpgRunning) <a name="l00208"></a>00208 { <a name="l00209"></a>00209 <a class="codeRef" doxygen="qt.tag:" href="qtimer.html#singleShot">QTimer::singleShot</a>(5, <span class="keyword">this</span>, SLOT(<a class="code" href="classKNS_1_1Security.html#92b26fa61cb6d6f127f301640a7988ff">slotCheckValidity</a>())); <a name="l00210"></a>00210 <span class="keywordflow">return</span>; <a name="l00211"></a>00211 } <a name="l00212"></a>00212 <span class="keywordflow">if</span> (m_keys.<a class="codeRef" doxygen="qt.tag:" href="qmap.html#count">count</a>() == 0) <a name="l00213"></a>00213 { <a name="l00214"></a>00214 emit <a class="code" href="classKNS_1_1Security.html#b5fa1627b8591007b3671f3860dd577c">validityResult</a>(-1); <a name="l00215"></a>00215 <span class="keywordflow">return</span>; <a name="l00216"></a>00216 } <a name="l00217"></a>00217 <a name="l00218"></a>00218 m_result = 0; <a name="l00219"></a>00219 m_runMode = Verify; <a name="l00220"></a>00220 <a class="codeRef" doxygen="qt.tag:" href="qfileinfo.html">QFileInfo</a> f(m_fileName); <a name="l00221"></a>00221 <span class="comment">//check the MD5 sum</span> <a name="l00222"></a>00222 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> md5sum; <a name="l00223"></a>00223 <span class="keyword">const</span> <span class="keywordtype">char</span>* c = <span class="stringliteral">""</span>; <a name="l00224"></a>00224 KMD5 context(c); <a name="l00225"></a>00225 <a class="codeRef" doxygen="qt.tag:" href="qfile.html">QFile</a> file(m_fileName); <a name="l00226"></a>00226 <span class="keywordflow">if</span> (file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#open">open</a>(IO_ReadOnly)) <a name="l00227"></a>00227 { <a name="l00228"></a>00228 context.reset(); <a name="l00229"></a>00229 context.update(file); <a name="l00230"></a>00230 md5sum = context.hexDigest(); <a name="l00231"></a>00231 file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#close">close</a>(); <a name="l00232"></a>00232 } <a name="l00233"></a>00233 file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#setName">setName</a>(f.<a class="codeRef" doxygen="qt.tag:" href="qfileinfo.html#dirPath">dirPath</a>() + <span class="stringliteral">"/md5sum"</span>); <a name="l00234"></a>00234 <span class="keywordflow">if</span> (file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#open">open</a>(IO_ReadOnly)) <a name="l00235"></a>00235 { <a name="l00236"></a>00236 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> md5sum_file; <a name="l00237"></a>00237 file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#readLine">readLine</a>(md5sum_file, 50); <a name="l00238"></a>00238 <span class="keywordflow">if</span> (!md5sum.<a class="codeRef" doxygen="qt.tag:" href="qstring.html#isEmpty">isEmpty</a>() && !md5sum_file.isEmpty() && md5sum_file.startsWith(md5sum)) <a name="l00239"></a>00239 m_result |= MD5_OK; <a name="l00240"></a>00240 file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#close">close</a>(); <a name="l00241"></a>00241 } <a name="l00242"></a>00242 m_result |= <a class="code" href="classKNS_1_1Security.html#4e64c4809be4ff65ed95b26f3623a754dc5dbd6c9e4fe045fa1aae90ffc9941d">SIGNED_BAD</a>; <a name="l00243"></a>00243 m_signatureKey.<a class="code" href="structKeyStruct.html#c9ab9631ad1a14cee94d710c26d461de">id</a> = <span class="stringliteral">""</span>; <a name="l00244"></a>00244 m_signatureKey.<a class="code" href="structKeyStruct.html#c62a9f6636ad7a559d2df9c15ccf1597">name</a> = <span class="stringliteral">""</span>; <a name="l00245"></a>00245 m_signatureKey.<a class="code" href="structKeyStruct.html#1aa90db717ccba22f3c9e195f3aa880b">mail</a> = <span class="stringliteral">""</span>; <a name="l00246"></a>00246 m_signatureKey.<a class="code" href="structKeyStruct.html#a4b798bb5de726173d203f190c677607">trusted</a> = <span class="keyword">false</span>; <a name="l00247"></a>00247 <a name="l00248"></a>00248 <span class="comment">//verify the signature</span> <a name="l00249"></a>00249 KProcIO *verifyProcess=<span class="keyword">new</span> KProcIO(); <a name="l00250"></a>00250 *verifyProcess<<<span class="stringliteral">"gpg"</span><<<span class="stringliteral">"--no-secmem-warning"</span><<<span class="stringliteral">"--status-fd=2"</span><<<span class="stringliteral">"--command-fd=0"</span><<<span class="stringliteral">"--verify"</span> << f.<a class="codeRef" doxygen="qt.tag:" href="qfileinfo.html#dirPath">dirPath</a>() + <span class="stringliteral">"/signature"</span><< m_fileName; <a name="l00251"></a>00251 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(verifyProcess, SIGNAL(processExited(KProcess *)),<span class="keyword">this</span>, SLOT(slotProcessExited(KProcess *))); <a name="l00252"></a>00252 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(verifyProcess, SIGNAL(readReady(KProcIO *)),<span class="keyword">this</span>, SLOT(slotDataArrived(KProcIO *))); <a name="l00253"></a>00253 <span class="keywordflow">if</span> (verifyProcess->start(KProcess::NotifyOnExit,<span class="keyword">true</span>)) <a name="l00254"></a>00254 m_gpgRunning = <span class="keyword">true</span>; <a name="l00255"></a>00255 <span class="keywordflow">else</span> <a name="l00256"></a>00256 { <a name="l00257"></a>00257 KMessageBox::error(0L, i18n(<span class="stringliteral">"<qt>Cannot start <i>gpg</i> and check the validity of the file. Make sure that <i>gpg</i> is installed, otherwise verification of downloaded resources will not be possible.</qt>"</span>)); <a name="l00258"></a>00258 emit <a class="code" href="classKNS_1_1Security.html#b5fa1627b8591007b3671f3860dd577c">validityResult</a>(0); <a name="l00259"></a>00259 <span class="keyword">delete</span> verifyProcess; <a name="l00260"></a>00260 } <a name="l00261"></a>00261 } <a name="l00262"></a>00262 <a name="l00263"></a><a class="code" href="classKNS_1_1Security.html#c8654b5a2a69c88860f77e328b313d98">00263</a> <span class="keywordtype">void</span> <a class="code" href="classKNS_1_1Security.html#c8654b5a2a69c88860f77e328b313d98">Security::signFile</a>(<span class="keyword">const</span> <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> &fileName) <a name="l00264"></a>00264 { <a name="l00265"></a>00265 m_fileName = fileName; <a name="l00266"></a>00266 <a class="code" href="classKNS_1_1Security.html#e31adc4e5cc46b625296450bb0a5dab0">slotSignFile</a>(); <a name="l00267"></a>00267 } <a name="l00268"></a>00268 <a name="l00269"></a><a class="code" href="classKNS_1_1Security.html#e31adc4e5cc46b625296450bb0a5dab0">00269</a> <span class="keywordtype">void</span> <a class="code" href="classKNS_1_1Security.html#e31adc4e5cc46b625296450bb0a5dab0">Security::slotSignFile</a>() <a name="l00270"></a>00270 { <a name="l00271"></a>00271 <span class="keywordflow">if</span> (!m_keysRead || m_gpgRunning) <a name="l00272"></a>00272 { <a name="l00273"></a>00273 <a class="codeRef" doxygen="qt.tag:" href="qtimer.html#singleShot">QTimer::singleShot</a>(5, <span class="keyword">this</span>, SLOT(<a class="code" href="classKNS_1_1Security.html#e31adc4e5cc46b625296450bb0a5dab0">slotSignFile</a>())); <a name="l00274"></a>00274 <span class="keywordflow">return</span>; <a name="l00275"></a>00275 } <a name="l00276"></a>00276 <a name="l00277"></a>00277 <a class="codeRef" doxygen="qt.tag:" href="qstringlist.html">QStringList</a> secretKeys; <a name="l00278"></a>00278 <span class="keywordflow">for</span> (<a class="codeRef" doxygen="qt.tag:" href="qmap.html">QMap<QString, KeyStruct>::Iterator</a> it = m_keys.<a class="codeRef" doxygen="qt.tag:" href="qmap.html#begin">begin</a>(); it != m_keys.<a class="codeRef" doxygen="qt.tag:" href="qmap.html#end">end</a>(); ++it) <a name="l00279"></a>00279 { <a name="l00280"></a>00280 <span class="keywordflow">if</span> (it.data().secret) <a name="l00281"></a>00281 secretKeys.append(it.key()); <a name="l00282"></a>00282 } <a name="l00283"></a>00283 <a name="l00284"></a>00284 <span class="keywordflow">if</span> (secretKeys.count() == 0) <a name="l00285"></a>00285 { <a name="l00286"></a>00286 emit <a class="code" href="classKNS_1_1Security.html#2b007766bb2856f4517ad67e3e2d1450">fileSigned</a>(-1); <a name="l00287"></a>00287 <span class="keywordflow">return</span>; <a name="l00288"></a>00288 } <a name="l00289"></a>00289 <a name="l00290"></a>00290 m_result = 0; <a name="l00291"></a>00291 <a class="codeRef" doxygen="qt.tag:" href="qfileinfo.html">QFileInfo</a> f(m_fileName); <a name="l00292"></a>00292 <a name="l00293"></a>00293 <span class="comment">//create the MD5 sum</span> <a name="l00294"></a>00294 <a class="codeRef" doxygen="qt.tag:" href="qstring.html">QString</a> md5sum; <a name="l00295"></a>00295 <span class="keyword">const</span> <span class="keywordtype">char</span>* c = <span class="stringliteral">""</span>; <a name="l00296"></a>00296 KMD5 context(c); <a name="l00297"></a>00297 <a class="codeRef" doxygen="qt.tag:" href="qfile.html">QFile</a> file(m_fileName); <a name="l00298"></a>00298 <span class="keywordflow">if</span> (file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#open">open</a>(IO_ReadOnly)) <a name="l00299"></a>00299 { <a name="l00300"></a>00300 context.reset(); <a name="l00301"></a>00301 context.update(file); <a name="l00302"></a>00302 md5sum = context.hexDigest(); <a name="l00303"></a>00303 file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#close">close</a>(); <a name="l00304"></a>00304 } <a name="l00305"></a>00305 file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#setName">setName</a>(f.<a class="codeRef" doxygen="qt.tag:" href="qfileinfo.html#dirPath">dirPath</a>() + <span class="stringliteral">"/md5sum"</span>); <a name="l00306"></a>00306 <span class="keywordflow">if</span> (file.<a class="codeRef" doxygen="qt.tag:" href="qfile.html#open">open</a>(IO_WriteOnly)) <a name="l00307"></a>00307 { <a name="l00308"></a>00308 <a class="codeRef" doxygen="qt.tag:" href="qtextstream.html">QTextStream</a> stream(&file); <a name="l00309"></a>00309 stream << md5sum; <a name="l00310"></a>00310 m_result |= MD5_OK; <a name="l00311"></a>00311 file.close(); <a name="l00312"></a>00312 } <a name="l00313"></a>00313 <a name="l00314"></a>00314 <span class="keywordflow">if</span> (secretKeys.count() > 1) <a name="l00315"></a>00315 { <a name="l00316"></a>00316 <span class="keywordtype">bool</span> ok; <a name="l00317"></a>00317 secretKeys = KInputDialog::getItemList(i18n(<span class="stringliteral">"Select Signing Key"</span>), i18n(<span class="stringliteral">"Key used for signing:"</span>), secretKeys, secretKeys[0], <span class="keyword">false</span>, &ok); <a name="l00318"></a>00318 <span class="keywordflow">if</span> (ok) <a name="l00319"></a>00319 m_secretKey = secretKeys[0]; <a name="l00320"></a>00320 <span class="keywordflow">else</span> <a name="l00321"></a>00321 { <a name="l00322"></a>00322 emit <a class="code" href="classKNS_1_1Security.html#2b007766bb2856f4517ad67e3e2d1450">fileSigned</a>(0); <a name="l00323"></a>00323 <span class="keywordflow">return</span>; <a name="l00324"></a>00324 } <a name="l00325"></a>00325 } <span class="keywordflow">else</span> <a name="l00326"></a>00326 m_secretKey = secretKeys[0]; <a name="l00327"></a>00327 <a name="l00328"></a>00328 <span class="comment">//verify the signature</span> <a name="l00329"></a>00329 KProcIO *signProcess=<span class="keyword">new</span> KProcIO(); <a name="l00330"></a>00330 *signProcess<<<span class="stringliteral">"gpg"</span><<<span class="stringliteral">"--no-secmem-warning"</span><<<span class="stringliteral">"--status-fd=2"</span><<<span class="stringliteral">"--command-fd=0"</span><<<span class="stringliteral">"--no-tty"</span><<<span class="stringliteral">"--detach-sign"</span> << <span class="stringliteral">"-u"</span> << m_secretKey << <span class="stringliteral">"-o"</span> << f.<a class="codeRef" doxygen="qt.tag:" href="qfileinfo.html#dirPath">dirPath</a>() + <span class="stringliteral">"/signature"</span> << m_fileName; <a name="l00331"></a>00331 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(signProcess, SIGNAL(processExited(KProcess *)),<span class="keyword">this</span>, SLOT(slotProcessExited(KProcess *))); <a name="l00332"></a>00332 <a class="codeRef" doxygen="qt.tag:" href="qobject.html#connect">connect</a>(signProcess, SIGNAL(readReady(KProcIO *)),<span class="keyword">this</span>, SLOT(slotDataArrived(KProcIO *))); <a name="l00333"></a>00333 m_runMode = Sign; <a name="l00334"></a>00334 <span class="keywordflow">if</span> (signProcess->start(KProcess::NotifyOnExit,<span class="keyword">true</span>)) <a name="l00335"></a>00335 m_gpgRunning = <span class="keyword">true</span>; <a name="l00336"></a>00336 <span class="keywordflow">else</span> <a name="l00337"></a>00337 { <a name="l00338"></a>00338 KMessageBox::error(0L, i18n(<span class="stringliteral">"<qt>Cannot start <i>gpg</i> and sign the file. Make sure that <i>gpg</i> is installed, otherwise signing of the resources will not be possible.</qt>"</span>)); <a name="l00339"></a>00339 emit <a class="code" href="classKNS_1_1Security.html#2b007766bb2856f4517ad67e3e2d1450">fileSigned</a>(0); <a name="l00340"></a>00340 <span class="keyword">delete</span> signProcess; <a name="l00341"></a>00341 } <a name="l00342"></a>00342 } <a name="l00343"></a>00343 <a name="l00344"></a>00344 <span class="preprocessor">#include "security.moc"</span> </pre></div> </div></div> </td> </tr> <tr> <td valign="top" id="leftmenu" width="25%"> <a name="navigation"></a> <div class="menu_box"><h2>knewstuff</h2> <div class="nav_list"> <ul><li><a href="index.html">Main Page</a></li><li><a href="namespaces.html">Namespace List</a></li><li><a href="hierarchy.html">Class Hierarchy</a></li><li><a href="classes.html">Alphabetical List</a></li><li><a href="annotated.html">Class List</a></li><li><a href="files.html">File List</a></li><li><a href="namespacemembers.html">Namespace Members</a></li><li><a href="functions.html">Class Members</a></li><li><a href="pages.html">Related Pages</a></li></ul> <!-- <h2>Class Picker</h2> <div style="text-align: center;"> <form name="guideform"> <select name="guidelinks" style="width:100%;" onChange="window.location=document.guideform.guidelinks.options[document.guideform.guidelinks.selectedIndex].value"> <option value="annotated.html">-- Choose --</option> <option value="classGhnsWidget.html">ghnswidget</option>, <option value="classKNewStuff.html">knewstuff</option>, <option value="classKNewStuffGeneric.html">knewstuffgeneric</option>, <option value="classKNewStuffSecure.html">knewstuffsecure</option>, <option value="classKNS_1_1Button.html">kns::button</option>, <option value="classKNS_1_1DownloadDialog.html">kns::downloaddialog</option>, <option value="classKNS_1_1Engine.html">kns::engine</option>, <option value="classKNS_1_1Entry.html">kns::entry</option>, <option value="classKNS_1_1Provider.html">kns::provider</option>, <option value="classKNS_1_1ProviderDialog.html">kns::providerdialog</option>, <option value="classKNS_1_1ProviderLoader.html">kns::providerloader</option>, <option value="classKNS_1_1Security.html">kns::security</option>, <option value="classKNS_1_1UploadDialog.html">kns::uploaddialog</option>, <option value="classMyWidget.html">mywidget</option>, <option value="classTestNewStuff.html">testnewstuff</option>, </select> </form> </div> --> </div></div> <div class="menu_box"><h2>API Dox</h2> <div class="nav_list"> <ul> <li><a href="../../arts/html/index.html">arts</a></li><li><a href="../../dcop/html/index.html">dcop</a></li><li><a href="../../dnssd/html/index.html">dnssd</a></li><li><a href="../../interfaces/html/index.html">interfaces</a></li><li> <a href="../../interfaces/kimproxy/interface/html/index.html">interface</a></li><li> <a href="../../interfaces/kimproxy/library/html/index.html">library</a></li><li> <a href="../../interfaces/kspeech/html/index.html">kspeech</a></li><li> <a href="../../interfaces/ktexteditor/html/index.html">ktexteditor</a></li><li><a href="../../kabc/html/index.html">kabc</a></li><li><a href="../../kate/html/index.html">kate</a></li><li><a href="../../kcmshell/html/index.html">kcmshell</a></li><li><a href="../../kdecore/html/index.html">kdecore</a></li><li><a href="../../kded/html/index.html">kded</a></li><li><a href="../../kdefx/html/index.html">kdefx</a></li><li><a href="../../kdeprint/html/index.html">kdeprint</a></li><li><a href="../../kdesu/html/index.html">kdesu</a></li><li><a href="../../kdeui/html/index.html">kdeui</a></li><li><a href="../../kdoctools/html/index.html">kdoctools</a></li><li><a href="../../khtml/html/index.html">khtml</a></li><li><a href="../../kimgio/html/index.html">kimgio</a></li><li><a href="../../kinit/html/index.html">kinit</a></li><li><a href="../../kio/html/index.html">kio</a></li><li> <a href="../../kio/bookmarks/html/index.html">bookmarks</a></li><li> <a href="../../kio/httpfilter/html/index.html">httpfilter</a></li><li> <a href="../../kio/kfile/html/index.html">kfile</a></li><li> <a href="../../kio/kio/html/index.html">kio</a></li><li> <a href="../../kio/kioexec/html/index.html">kioexec</a></li><li> <a href="../../kio/kpasswdserver/html/index.html">kpasswdserver</a></li><li> <a href="../../kio/kssl/html/index.html">kssl</a></li><li><a href="../../kioslave/html/index.html">kioslave</a></li><li> <a href="../../kioslave/http/html/index.html">http</a></li><li><a href="../../kjs/html/index.html">kjs</a></li><li><a href="../../kmdi/html/index.html">kmdi</a></li><li> <a href="../../kmdi/kmdi/html/index.html">kmdi</a></li><li><a href="../../knewstuff/html/index.html">knewstuff</a></li><li><a href="../../kparts/html/index.html">kparts</a></li><li><a href="../../kresources/html/index.html">kresources</a></li><li><a href="../../kspell2/html/index.html">kspell2</a></li><li><a href="../../kunittest/html/index.html">kunittest</a></li><li><a href="../../kutils/html/index.html">kutils</a></li><li><a href="../../kwallet/html/index.html">kwallet</a></li><li><a href="../../libkmid/html/index.html">libkmid</a></li><li><a href="../../libkscreensaver/html/index.html">libkscreensaver</a></li> </ul></div></div> </td> </tr> </table> <span class="doNotDisplay"> <a href="http://www.kde.org/" accesskey="8">KDE Home</a> | <a href="http://accessibility.kde.org/" accesskey="9">KDE Accessibility Home</a> | <a href="http://www.kde.org/media/accesskeys.php" accesskey="0">Description of Access Keys</a> </span> <div style="height: 8px"></div> <div id="footer"> <div id="footer_left"> Maintained by <a href="mailto:groot@kde.org">Adriaan de Groot</a> and <a href="mailto:wintert@kde.org">Allen Winter</a>. <br/> KDE and K Desktop Environment are trademarks of <a href="http://www.kde.org/areas/kde-ev/" title="Homepage of the KDE non-profit Organization">KDE e.V.</a> | <a href="http://www.kde.org/contact/impressum.php">Legal</a> </div> <div id="footer_right"><img src="/media/images/footer_right.png" style="margin: 0px" alt="" /></div> </div> <!-- WARNING: DO NOT SEND MAIL TO THE FOLLOWING EMAIL ADDRESS! YOU WILL BE BLOCKED INSTANTLY AND PERMANENTLY! <a href="mailto:aaaatrap-425acc3b5374943f@kde.org">Block me</a> WARNING END --> </body> </html>