+ env.Append(CPPDEFINES = ["_ITERATOR_DEBUG_LEVEL=0"])

+

+--- START OF SIMPLIFIED BSD LICENSE

+

+Copyright (c) 2012 Isode Limited, London, England.

+All rights reserved.

+

+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

+

+Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

+Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

+

+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WA RRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

+

+--- END OF SIMPLIFIED BSD LICENSE

+ loginWindow_->onLoginRequest.connect(boost::bind(&MainController::handleLoginRequest, this, _1, _2, _3, _4, _5, _6));

+ /* FIXME: deal with autologin with a cert*/

+ handleLoginRequest(selectedLoginJID, cachedPassword, cachedCertificate, CertificateWithKey::ref(), true, true);

+void MainController::handleLoginRequest(const std::string &username, const std::string &password, const std::string& certificatePath, CertificateWithKey::ref certificate, bool remember, bool loginAutomatically) {

+ profileSettings_->storeString("certificate", certificatePath);

+ certificate_ = certificate;

+ if (certificate_ && !certificate_->isNull()) {

+ client_->setCertificate(certificate_);

+ void handleLoginRequest(const std::string& username, const std::string& password, const std::string& certificatePath, CertificateWithKey::ref certificate, bool remember, bool loginAutomatically);

+ CertificateWithKey::ref certificate_;

+ * Copyright (c) 2010-2012 Kevin Smith

+#include <Swiften/Base/boost_bsignals.h>

+#include <Swiften/TLS/CertificateWithKey.h>

+ /** The certificate is what is used for login, the certificatePath is used for remembering paths to populate the loginwindow with*/

+ boost::signal<void (const std::string&, const std::string&, const std::string& /*CertificatePath*/, CertificateWithKey::ref /* clientCertificate */, bool /* remember password*/, bool /* login automatically */)> onLoginRequest;

+#include "CAPICertificateSelector.h"

+

+#include <boost/algorithm/string.hpp>

+bool isCAPIURI(std::string uri) {

+ return (boost::iequals(uri.substr(0, 10), "certstore:"));

+}

+ bool isCAPIURI(std::string uri);

+#include <Swiften/TLS/CAPICertificate.h>

+#include <Swiften/TLS/PKCS12Certificate.h>

+ CertificateWithKey::ref certificate;

+ std::string certificateString = Q2PSTRING(certificateFile_);

+#if defined(HAVE_SCHANNEL)

+ if (isCAPIURI(certificateString)) {

+ certificate = boost::make_shared<CAPICertificate>(certificateString);

+ } else {

+ certificate = boost::make_shared<PKCS12Certificate>(certificateString, createSafeByteArray(Q2PSTRING(password_->text())));

+ }

+#else

+ certificate = boost::make_shared<PKCS12Certificate>(certificateString, createSafeByteArray(Q2PSTRING(password_->text())));

+#endif

+

+ onLoginRequest(Q2PSTRING(username_->currentText()), Q2PSTRING(password_->text()), certificateString, certificate, remember_->isChecked(), loginAutomatically_->isChecked());

+ certificateFile_ = P2QSTRING(selectCAPICertificate());

+ myenv.Append(CPPDEFINES = "HAVE_SCHANNEL")

+ if env["debug"] :

+ myenv.Append(LINKFLAGS = ["/NODEFAULTLIB:msvcrt"])

+ if (certificate_ && !certificate_->isNull()) {

+ sessionStream_->setTLSCertificate(certificate_);

+void CoreClient::setCertificate(CertificateWithKey::ref certificate) {

+ * Copyright (c) 2010-2012 Remko Tronçon

+#include <Swiften/TLS/CertificateWithKey.h>

+ /**

+ * Set a client certificate to use for strong authentication with the server.

+ * Ensure that it is of the correct type for the TLS engine in use.

+ * This means, largely, PKCS12Certificate for OpenSSL and CAPICertificate for CAPI.

+ */

+ void setCertificate(CertificateWithKey::ref certificate);

+ CertificateWithKey::ref certificate_;

+ * Copyright (c) 2010-2012 Remko Tronçon

+ SessionStream(): certificate() {}

+ void setTLSCertificate(CertificateWithKey::ref cert) {

+ CertificateWithKey::ref getTLSCertificate() const {

+ CertificateWithKey::ref certificate;

+bool TLSLayer::setClientCertificate(CertificateWithKey::ref certificate) {

+#include <Swiften/TLS/CertificateWithKey.h>

+ bool setClientCertificate(CertificateWithKey::ref cert);

+/*

+ * Copyright (c) 2012 Isode Limited, London, England.

+ * Licensed under the simplified BSD license.

+ * See Documentation/Licenses/BSD-simplified.txt for more information.

+ */

+#pragma once

+

+#include <Swiften/TLS/CAPICertificate.h>

+

+#include <boost/algorithm/string/predicate.hpp>

+

+

+namespace Swift {

+CAPICertificate::CAPICertificate(const std::string& capiUri)

+ : valid_(false), uri_(capiUri), certStoreHandle_(0), certStore_(), certName_() {

+ setUri(capiUri);

+}

+

+CAPICertificate::~CAPICertificate() {

+ if (certStoreHandle_) {

+ CertCloseStore(certStoreHandle_, 0);

+ }

+}

+

+bool CAPICertificate::isNull() const {

+ return uri_.empty() || !valid_;

+}

+

+const std::string& CAPICertificate::getCertStoreName() const {

+ return certStore_;

+}

+

+const std::string& CAPICertificate::getCertName() const {

+ return certName_;

+}

+

+void CAPICertificate::setUri (const std::string& capiUri) {

+

+ valid_ = false;

+

+ /* Syntax: "certstore:" [<cert_store> ":"] <cert_id> */

+

+ if (!boost::iequals(capiUri.substr(0, 10), "certstore:")) {

+ return;

+ }

+

+ /* Substring of subject: uses "storename" */

+ std::string capi_identity = capiUri.substr(10);

+ std::string new_certStore_name;

+ size_t pos = capi_identity.find_first_of (':');

+

+ if (pos == std::string::npos) {

+ /* Using the default certificate store */

+ new_certStore_name = "MY";

+ certName_ = capi_identity;

+ }

+ else {

+ new_certStore_name = capi_identity.substr(0, pos);

+ certName_ = capi_identity.substr(pos + 1);

+ }

+

+ PCCERT_CONTEXT pCertContext = NULL;

+

+ if (certStoreHandle_ != NULL) {

+ if (new_certStore_name != certStore_) {

+ CertCloseStore(certStoreHandle_, 0);

+ certStoreHandle_ = NULL;

+ }

+ }

+

+ if (certStoreHandle_ == NULL) {

+ certStoreHandle_ = CertOpenSystemStore(0, certStore_.c_str());

+ if (!certStoreHandle_) {

+ return;

+ }

+ }

+

+ certStore_ = new_certStore_name;

+

+ /* NB: This might have to change, depending on how we locate certificates */

+

+ // Find client certificate. Note that this sample just searches for a

+ // certificate that contains the user name somewhere in the subject name.

+ pCertContext = CertFindCertificateInStore(certStoreHandle_,

+ X509_ASN_ENCODING,

+ 0, // dwFindFlags

+ CERT_FIND_SUBJECT_STR_A,

+ certName_.c_str(), // *pvFindPara

+ NULL ); // pPrevCertContext

+

+ if (!pCertContext) {

+ return;

+ }

+

+

+ /* Now verify that we can have access to the corresponding private key */

+

+ DWORD len;

+ CRYPT_KEY_PROV_INFO *pinfo;

+ HCRYPTPROV hprov;

+ HCRYPTKEY key;

+

+ if (!CertGetCertificateContextProperty(pCertContext,

+ CERT_KEY_PROV_INFO_PROP_ID,

+ NULL,

+ &len)) {

+ CertFreeCertificateContext(pCertContext);

+ return;

+ }

+

+ pinfo = static_cast<CRYPT_KEY_PROV_INFO *>(malloc(len));

+ if (!pinfo) {

+ CertFreeCertificateContext(pCertContext);

+ return;

+ }

+

+ if (!CertGetCertificateContextProperty(pCertContext,

+ CERT_KEY_PROV_INFO_PROP_ID,

+ pinfo,

+ &len)) {

+ CertFreeCertificateContext(pCertContext);

+ free(pinfo);

+ return;

+ }

+

+ CertFreeCertificateContext(pCertContext);

+

+ // Now verify if we have access to the private key

+ if (!CryptAcquireContextW(&hprov,

+ pinfo->pwszContainerName,

+ pinfo->pwszProvName,

+ pinfo->dwProvType,

+ 0)) {

+ free(pinfo);

+ return;

+ }

+

+ if (!CryptGetUserKey(hprov, pinfo->dwKeySpec, &key)) {

+ CryptReleaseContext(hprov, 0);

+ free(pinfo);

+ return;

+ }

+

+ CryptDestroyKey(key);

+ CryptReleaseContext(hprov, 0);

+ free(pinfo);

+

+ valid_ = true;

+}

+

+}

+#include <Windows.h>

+ CAPICertificate(const std::string& capiUri);

+ virtual ~CAPICertificate();

+ virtual bool isNull() const;

+ const std::string& getCertStoreName() const;

+ const std::string& getCertName() const;

+ private:

+ void setUri (const std::string& capiUri);

+ HCERTSTORE certStoreHandle_;

+ std::string certStore_;

+ std::string certName_;

+ typedef boost::shared_ptr<CertificateWithKey> ref;

+ boost::shared_ptr<PKCS12Certificate> pkcs12Certificate = boost::dynamic_pointer_cast<PKCS12Certificate>(certificate);

+ if (!pkcs12Certificate || pkcs12Certificate->isNull()) {

+ BIO_write(bio, vecptr(certificate->getData()), pkcs12Certificate->getData().size());

+ int result = PKCS12_parse(pkcs12.get(), reinterpret_cast<const char*>(vecptr(pkcs12Certificate->getPassword())), &privateKeyPtr, &certPtr, &caCertsPtr);

+ bool setClientCertificate(CertificateWithKey::ref cert);

+ "CAPICertificate.cpp",

+#include <Swiften/TLS/Schannel/SchannelContext.h>

+#include <Swiften/TLS/Schannel/SchannelCertificate.h>

+#include <Swiften/TLS/CAPICertificate.h>

+, m_cert_name()

+bool SchannelContext::setClientCertificate(CertificateWithKey::ref certificate)

+ boost::shared_ptr<CAPICertificate> capiCertificate = boost::dynamic_pointer_cast<CAPICertificate>(certificate);

+ if (!capiCertificate || capiCertificate->isNull()) {

+ // We assume that the Certificate Store Name/Certificate Name

+ // are valid at this point

+ m_cert_store_name = capiCertificate->getCertStoreName();

+ m_cert_name = capiCertificate->getCertName();

+ return true;

+ virtual bool setClientCertificate(CertificateWithKey::ref cert);

+#include <Swiften/TLS/CertificateWithKey.h>

+ virtual bool setClientCertificate(CertificateWithKey::ref cert) = 0;