[gnome-keyring/trust-store] [xdg-store] Tool for dumping trust assertion files.

[Stefan Walter <stefw src gnome org>]

commit c41a0b14ea371ac6f6cc549a7226b98ba51cd5a9
Author: Stef Walter <stefw collabora co uk>
Date:   Tue Nov 23 23:04:11 2010 +0000

    [xdg-store] Tool for dumping trust assertion files.

 pkcs11/xdg-store/.gitignore                |    1 +
 pkcs11/xdg-store/tests/Makefile.am         |    5 +-
 pkcs11/xdg-store/tests/diddle-trust-file.c |    2 +-
 pkcs11/xdg-store/tests/dump-trust-file.c   |  201 ++++++++++++++++++++++++++++
 4 files changed, 207 insertions(+), 2 deletions(-)
---
diff --git a/pkcs11/xdg-store/.gitignore b/pkcs11/xdg-store/.gitignore
index 102fd9d..59f7480 100644
--- a/pkcs11/xdg-store/.gitignore
+++ b/pkcs11/xdg-store/.gitignore
@@ -1,2 +1,3 @@
 /asn1-def-xdg.c
 /tests/diddle-trust-file
+/tests/dump-trust-file
diff --git a/pkcs11/xdg-store/tests/Makefile.am b/pkcs11/xdg-store/tests/Makefile.am
index 6e56e48..aa3b7a3 100644
--- a/pkcs11/xdg-store/tests/Makefile.am
+++ b/pkcs11/xdg-store/tests/Makefile.am
@@ -18,7 +18,10 @@ include $(top_srcdir)/testing/testing.make
 # ------------------------------------------------------------------------------
 
 noinst_PROGRAMS += \
-	diddle-trust-file
+	diddle-trust-file \
+	dump-trust-file
 
 diddle_trust_file_LDADD =  \
 	$(top_builddir)/egg/libegg.la
+dump_trust_file_LDADD =  \
+	$(top_builddir)/egg/libegg.la
\ No newline at end of file
diff --git a/pkcs11/xdg-store/tests/diddle-trust-file.c b/pkcs11/xdg-store/tests/diddle-trust-file.c
index b9f72ce..a9c1979 100644
--- a/pkcs11/xdg-store/tests/diddle-trust-file.c
+++ b/pkcs11/xdg-store/tests/diddle-trust-file.c
@@ -1,7 +1,7 @@
 /*
  * gnome-keyring
  *
- * Copyright (C) Collabora Ltd.
+ * Copyright 2010 (C) Collabora Ltd.
  *
  * This program is free software; you can redistribute it and/or modify
  * it under the terms of the GNU Lesser General Public License as
diff --git a/pkcs11/xdg-store/tests/dump-trust-file.c b/pkcs11/xdg-store/tests/dump-trust-file.c
new file mode 100644
index 0000000..cc76dcb
--- /dev/null
+++ b/pkcs11/xdg-store/tests/dump-trust-file.c
@@ -0,0 +1,201 @@
+/*
+ * gnome-keyring
+ *
+ * Copyright 2010 (C) Collabora Ltd.
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as
+ * published by the Free Software Foundation; either version 2.1 of
+ * the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
+ * 02111-1307, USA.
+ *
+ * Author: Stef Walter <stefw collabora co uk>
+ */
+
+#include "config.h"
+
+#include "egg/egg-asn1x.h"
+#include "egg/egg-asn1-defs.h"
+#include "egg/egg-dn.h"
+#include "egg/egg-error.h"
+#include "egg/egg-hex.h"
+
+#include <libtasn1.h>
+#include <stdlib.h>
+
+/* Bring in the relevant definitions */
+#include "../asn1-def-xdg.c"
+
+
+static void
+barf_and_die (const char *msg, const char *detail)
+{
+	if (detail)
+		g_printerr ("dump-trust-file: %s: %s\n", msg, detail);
+	else
+		g_printerr ("dump-trust-file: %s\n", msg);
+	exit (1);
+}
+
+static void
+dump_certificate_reference (GNode *asn)
+{
+	gchar *issuer, *serial;
+	gpointer data;
+	gsize n_data;
+	GNode *name;
+	gconstpointer element;
+	gsize n_element;
+
+	/* Parse the name out */
+	name = egg_asn1x_create (pkix_asn1_tab, "Name");
+	g_return_if_fail (name);
+	element = egg_asn1x_get_raw_element (egg_asn1x_node (asn, "issuer", NULL), &n_element);
+	g_return_if_fail (element);
+	if (!egg_asn1x_decode (name, element, n_element))
+		barf_and_die ("couldn't parse certificate", egg_asn1x_message (name));
+
+	issuer = egg_dn_read (name);
+	g_return_if_fail (issuer);
+
+	data = egg_asn1x_get_integer_as_raw (egg_asn1x_node (asn, "serial", NULL), NULL, &n_data);
+	g_return_if_fail (data && n_data);
+	serial = egg_hex_encode (data, n_data);
+	g_free (data);
+
+	g_print ("Reference\n");
+	g_print ("    issuer: %s\n", issuer);
+	g_print ("    serial: 0x%s\n", serial);
+
+	egg_asn1x_destroy (name);
+
+	g_free (data);
+	g_free (serial);
+	g_free (issuer);
+}
+
+static void
+dump_certificate_complete (GNode *asn)
+{
+	GNode *cert;
+	gchar *issuer, *serial, *subject;
+	gconstpointer element;
+	gpointer data;
+	gsize n_data, n_element;
+
+	/* Parse the certificate out */
+	cert = egg_asn1x_create (pkix_asn1_tab, "Certificate");
+	g_return_if_fail (cert);
+	element = egg_asn1x_get_raw_element (asn, &n_element);
+	g_return_if_fail (element);
+	if (!egg_asn1x_decode (cert, element, n_element))
+		barf_and_die ("couldn't parse certificate", egg_asn1x_message (cert));
+
+	issuer = egg_dn_read (egg_asn1x_node (asn, "issuer", NULL));
+	g_return_if_fail (issuer);
+
+	subject = egg_dn_read (egg_asn1x_node (asn, "subject", NULL));
+	g_return_if_fail (subject);
+
+	data = egg_asn1x_get_integer_as_raw (egg_asn1x_node (asn, "serial", NULL), NULL, &n_data);
+	g_return_if_fail (data && n_data);
+	serial = egg_hex_encode (data, n_data);
+	g_free (data);
+
+	g_print ("Complete\n");
+	g_print ("    issuer: %s\n", issuer);
+	g_print ("    subject: %s\n", subject);
+	g_print ("    serial: 0x%s\n", serial);
+
+	egg_asn1x_destroy (cert);
+
+	g_free (data);
+	g_free (serial);
+	g_free (issuer);
+	g_free (subject);
+}
+
+
+static void
+dump_assertion (GNode *asn)
+{
+	gchar *purpose, *peer;
+	GQuark level;
+
+	purpose = egg_asn1x_get_string_as_utf8 (egg_asn1x_node (asn, "purpose", NULL), NULL);
+	g_return_if_fail (purpose);
+
+	level = egg_asn1x_get_enumerated (egg_asn1x_node (asn, "level", NULL));
+	g_return_if_fail (level);
+
+	if (egg_asn1x_have (egg_asn1x_node (asn, "peer", NULL)))
+		peer = egg_asn1x_get_string_as_utf8 (egg_asn1x_node (asn, "peer", NULL), NULL);
+	else
+		peer = NULL;
+
+	g_print ("Assertion\n");
+	g_print ("    purpose: %s\n", purpose);
+	g_print ("    level: %s\n", g_quark_to_string (level));
+	if (peer)
+		g_print ("    peer: %s\n", peer);
+
+	g_free (purpose);
+	g_free (peer);
+}
+
+int
+main(int argc, char* argv[])
+{
+	GError *err = NULL;
+	gchar *contents;
+	gsize n_contents;
+	GNode *asn, *node;
+	gint i, count;
+
+	if (argc != 2) {
+		g_printerr ("usage: dump-trust-file file\n");
+		return 2;
+	}
+
+	if (!g_file_get_contents (argv[1], &contents, &n_contents, &err))
+		barf_and_die ("couldn't load file", egg_error_message (err));
+
+	asn = egg_asn1x_create (xdg_asn1_tab, "trust-1");
+	g_return_val_if_fail (asn, 1);
+
+	if (!egg_asn1x_decode (asn, contents, n_contents))
+		barf_and_die ("couldn't parse file", egg_asn1x_message (asn));
+
+	/* Print out the certificate we refer to first */
+	node = egg_asn1x_node (asn, "reference", "certReference", NULL);
+	if (egg_asn1x_have (node)) {
+		dump_certificate_reference (node);
+	} else {
+		node = egg_asn1x_node (asn, "reference", "certComplete", NULL);
+		if (egg_asn1x_have (node))
+			dump_certificate_complete (node);
+		else
+			barf_and_die ("unsupported certificate reference", NULL);
+	}
+
+	/* Then the assertions */
+	count = egg_asn1x_count (egg_asn1x_node (asn, "assertions", NULL));
+	for (i = 0; i < count; ++i) {
+		node = egg_asn1x_node (asn, "assertions", i + 1, NULL);
+		dump_assertion (node);
+	}
+
+	egg_asn1x_destroy (asn);
+	g_free (contents);
+
+	return 0;
+}