The Tor Browser: security/manager/pki/src/nsNSSDialogs.cpp@b8a032363ba2 (annotated)

security/manager/pki/src/nsNSSDialogs.cpp@b8a032363ba2 (annotated)

security/manager/pki/src/nsNSSDialogs.cpp

Thu, 22 Jan 2015 13:21:57 +0100

author: Michael Schloh von Bennewitz <michael@schloh.com>
date: Thu, 22 Jan 2015 13:21:57 +0100
branch: TOR_BUG_9701
changeset 15: b8a032363ba2
permissions: -rw-r--r--

Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6

 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*-
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /*
  * Dialog services for PIP.
  */
 #include "nsCOMPtr.h"
 #include "nsString.h"
 #include "nsXPIDLString.h"
 #include "nsReadableUtils.h"
 #include "nsIDOMWindow.h"
 #include "nsIDialogParamBlock.h"
 #include "nsIComponentManager.h"
 #include "nsIServiceManager.h"
 #include "nsIStringBundle.h"
 #include "nsIInterfaceRequestor.h"
 #include "nsIInterfaceRequestorUtils.h"
 #include "nsIX509Cert.h"
 #include "nsIX509CertDB.h"
 #include "nsIDateTimeFormat.h"
 #include "nsDateTimeFormatCID.h"
 #include "nsPromiseFlatString.h"
 #include "nsNSSDialogs.h"
 #include "nsPKIParamBlock.h"
 #include "nsIKeygenThread.h"
 #include "nsIProtectedAuthThread.h"
 #include "nsNSSDialogHelper.h"
 #include "nsIWindowWatcher.h"
 #include "nsIX509CertValidity.h"
 #include "nsEmbedCID.h"
 #include "nsIPromptService.h"
 #define PIPSTRING_BUNDLE_URL "chrome://pippki/locale/pippki.properties"
 /* ==== */
 nsNSSDialogs::nsNSSDialogs()
 {
 }
 nsNSSDialogs::~nsNSSDialogs()
 {
 }
 NS_IMPL_ISUPPORTS(nsNSSDialogs, nsITokenPasswordDialogs,
                   nsICertificateDialogs,
                   nsIClientAuthDialogs,
                   nsICertPickDialogs,
                   nsITokenDialogs,
                   nsIDOMCryptoDialogs,
                   nsIGeneratingKeypairInfoDialogs,
                   nsISSLCertErrorDialog)
 nsresult
 nsNSSDialogs::Init()
 {
   nsresult rv;
   nsCOMPtr<nsIStringBundleService> service =
            do_GetService(NS_STRINGBUNDLE_CONTRACTID, &rv);
   if (NS_FAILED(rv)) return rv;
   rv = service->CreateBundle(PIPSTRING_BUNDLE_URL,
                              getter_AddRefs(mPIPStringBundle));
   return rv;
 }
 nsresult
 nsNSSDialogs::SetPassword(nsIInterfaceRequestor *ctx,
                           const char16_t *tokenName, bool* _canceled)
 {
   nsresult rv;
   *_canceled = false;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsCOMPtr<nsIDialogParamBlock> block =
            do_CreateInstance(NS_DIALOGPARAMBLOCK_CONTRACTID);
   if (!block) return NS_ERROR_FAILURE;
   // void ChangePassword(in wstring tokenName, out int status);
   rv = block->SetString(1, tokenName);
   if (NS_FAILED(rv)) return rv;
   rv = nsNSSDialogHelper::openDialog(parent,
                                 "chrome://pippki/content/changepassword.xul",
                                 block);
   if (NS_FAILED(rv)) return rv;
   int32_t status;
   rv = block->GetInt(1, &status);
   if (NS_FAILED(rv)) return rv;
   *_canceled = (status == 0)?true:false;
   return rv;
 }
 nsresult
 nsNSSDialogs::GetPassword(nsIInterfaceRequestor *ctx,
                           const char16_t *tokenName,
                           char16_t **_password,
                           bool* _canceled)
 {
   nsresult rv;
   *_canceled = false;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsCOMPtr<nsIDialogParamBlock> block =
            do_CreateInstance(NS_DIALOGPARAMBLOCK_CONTRACTID);
   if (!block) return NS_ERROR_FAILURE;
   // Set the token name in the window
   rv = block->SetString(1, tokenName);
   if (NS_FAILED(rv)) return rv;
   // open up the window
   rv = nsNSSDialogHelper::openDialog(parent,
                                      "chrome://pippki/content/getpassword.xul",
                                      block);
   if (NS_FAILED(rv)) return rv;
   // see if user canceled
   int32_t status;
   rv = block->GetInt(1, &status);
   if (NS_FAILED(rv)) return rv;
   *_canceled = (status == 0) ? true : false;
   if (!*_canceled) {
     // retrieve the password
     rv = block->GetString(2, _password);
   }
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::ConfirmDownloadCACert(nsIInterfaceRequestor *ctx,
                                     nsIX509Cert *cert,
                                     uint32_t *_trust,
                                     bool *_retval)
 {
   nsresult rv;
   *_retval = true;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsCOMPtr<nsIPKIParamBlock> block =
            do_CreateInstance(NS_PKIPARAMBLOCK_CONTRACTID);
   if (!block)
     return NS_ERROR_FAILURE;
   rv = block->SetISupportAtIndex(1, cert);
   if (NS_FAILED(rv))
     return rv;
   rv = nsNSSDialogHelper::openDialog(parent,
                                      "chrome://pippki/content/downloadcert.xul",
                                      block);
   if (NS_FAILED(rv)) return rv;
   int32_t status;
   int32_t ssl, email, objsign;
   nsCOMPtr<nsIDialogParamBlock> dlgParamBlock = do_QueryInterface(block);
   rv = dlgParamBlock->GetInt(1, &status);
   if (NS_FAILED(rv)) return rv;
   rv = dlgParamBlock->GetInt(2, &ssl);
   if (NS_FAILED(rv)) return rv;
   rv = dlgParamBlock->GetInt(3, &email);
   if (NS_FAILED(rv)) return rv;
   rv = dlgParamBlock->GetInt(4, &objsign);
   if (NS_FAILED(rv)) return rv;
   *_trust = nsIX509CertDB::UNTRUSTED;
   *_trust |= (ssl) ? nsIX509CertDB::TRUSTED_SSL : 0;
   *_trust |= (email) ? nsIX509CertDB::TRUSTED_EMAIL : 0;
   *_trust |= (objsign) ? nsIX509CertDB::TRUSTED_OBJSIGN : 0;
   *_retval = (status == 0)?false:true;
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::NotifyCACertExists(nsIInterfaceRequestor *ctx)
 {
   nsresult rv;
   nsCOMPtr<nsIPromptService> promptSvc(do_GetService(NS_PROMPTSERVICE_CONTRACTID));
   if (!promptSvc)
     return NS_ERROR_FAILURE;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsAutoString title;
   rv = mPIPStringBundle->GetStringFromName(MOZ_UTF16("caCertExistsTitle"),
                                            getter_Copies(title));
   NS_ENSURE_SUCCESS(rv, rv);
   nsAutoString msg;
   rv = mPIPStringBundle->GetStringFromName(MOZ_UTF16("caCertExistsMessage"),
                                            getter_Copies(msg));
   NS_ENSURE_SUCCESS(rv, rv);
   rv = promptSvc->Alert(parent, title.get(), msg.get());
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::ChooseCertificate(nsIInterfaceRequestor *ctx, const char16_t *cn, const char16_t *organization, const char16_t *issuer, const char16_t **certNickList, const char16_t **certDetailsList, uint32_t count, int32_t *selectedIndex, bool *canceled)
 {
   nsresult rv;
   uint32_t i;
   *canceled = false;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsCOMPtr<nsIDialogParamBlock> block =
            do_CreateInstance(NS_DIALOGPARAMBLOCK_CONTRACTID);
   if (!block) return NS_ERROR_FAILURE;
   block->SetNumberStrings(4+count*2);
   rv = block->SetString(0, cn);
   if (NS_FAILED(rv)) return rv;
   rv = block->SetString(1, organization);
   if (NS_FAILED(rv)) return rv;
   rv = block->SetString(2, issuer);
   if (NS_FAILED(rv)) return rv;
   for (i = 0; i < count; i++) {
     rv = block->SetString(i+3, certNickList[i]);
     if (NS_FAILED(rv)) return rv;
   }
   for (i = 0; i < count; i++) {
     rv = block->SetString(i+count+3, certDetailsList[i]);
     if (NS_FAILED(rv)) return rv;
   }
   rv = block->SetInt(0, count);
   if (NS_FAILED(rv)) return rv;
   rv = nsNSSDialogHelper::openDialog(nullptr,
                                 "chrome://pippki/content/clientauthask.xul",
                                 block);
   if (NS_FAILED(rv)) return rv;
   int32_t status;
   rv = block->GetInt(0, &status);
   if (NS_FAILED(rv)) return rv;
   nsCOMPtr<nsIClientAuthUserDecision> extraResult = do_QueryInterface(ctx);
   if (extraResult) {
     int32_t rememberSelection;
     rv = block->GetInt(2, &rememberSelection);
     if (NS_SUCCEEDED(rv)) {
       extraResult->SetRememberClientAuthCertificate(rememberSelection!=0);
     }
   }
   *canceled = (status == 0)?true:false;
   if (!*canceled) {
     // retrieve the nickname
     rv = block->GetInt(1, selectedIndex);
   }
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::PickCertificate(nsIInterfaceRequestor *ctx,
                               const char16_t **certNickList,
                               const char16_t **certDetailsList,
                               uint32_t count,
                               int32_t *selectedIndex,
                               bool *canceled)
 {
   nsresult rv;
   uint32_t i;
   *canceled = false;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsCOMPtr<nsIDialogParamBlock> block =
            do_CreateInstance(NS_DIALOGPARAMBLOCK_CONTRACTID);
   if (!block) return NS_ERROR_FAILURE;
   block->SetNumberStrings(1+count*2);
   for (i = 0; i < count; i++) {
     rv = block->SetString(i, certNickList[i]);
     if (NS_FAILED(rv)) return rv;
   }
   for (i = 0; i < count; i++) {
     rv = block->SetString(i+count, certDetailsList[i]);
     if (NS_FAILED(rv)) return rv;
   }
   rv = block->SetInt(0, count);
   if (NS_FAILED(rv)) return rv;
   rv = block->SetInt(1, *selectedIndex);
   if (NS_FAILED(rv)) return rv;
   rv = nsNSSDialogHelper::openDialog(nullptr,
                                 "chrome://pippki/content/certpicker.xul",
                                 block);
   if (NS_FAILED(rv)) return rv;
   int32_t status;
   rv = block->GetInt(0, &status);
   if (NS_FAILED(rv)) return rv;
   *canceled = (status == 0)?true:false;
   if (!*canceled) {
     rv = block->GetInt(1, selectedIndex);
   }
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::SetPKCS12FilePassword(nsIInterfaceRequestor *ctx,
                                     nsAString &_password,
                                     bool *_retval)
 {
   nsresult rv;
   *_retval = true;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsCOMPtr<nsIDialogParamBlock> block =
            do_CreateInstance(NS_DIALOGPARAMBLOCK_CONTRACTID);
   if (!block) return NS_ERROR_FAILURE;
   // open up the window
   rv = nsNSSDialogHelper::openDialog(parent,
                                   "chrome://pippki/content/setp12password.xul",
                                   block);
   if (NS_FAILED(rv)) return rv;
   // see if user canceled
   int32_t status;
   rv = block->GetInt(1, &status);
   if (NS_FAILED(rv)) return rv;
   *_retval = (status == 0) ? false : true;
   if (*_retval) {
     // retrieve the password
     char16_t *pw;
     rv = block->GetString(2, &pw);
     if (NS_SUCCEEDED(rv)) {
       _password = pw;
       nsMemory::Free(pw);
     }
   }
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::GetPKCS12FilePassword(nsIInterfaceRequestor *ctx,
                                     nsAString &_password,
                                     bool *_retval)
 {
   nsresult rv;
   *_retval = true;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   nsCOMPtr<nsIDialogParamBlock> block =
            do_CreateInstance(NS_DIALOGPARAMBLOCK_CONTRACTID);
   if (!block) return NS_ERROR_FAILURE;
   // open up the window
   rv = nsNSSDialogHelper::openDialog(parent,
                                   "chrome://pippki/content/getp12password.xul",
                                   block);
   if (NS_FAILED(rv)) return rv;
   // see if user canceled
   int32_t status;
   rv = block->GetInt(1, &status);
   if (NS_FAILED(rv)) return rv;
   *_retval = (status == 0) ? false : true;
   if (*_retval) {
     // retrieve the password
     char16_t *pw;
     rv = block->GetString(2, &pw);
     if (NS_SUCCEEDED(rv)) {
       _password = pw;
       nsMemory::Free(pw);
     }
   }
   return rv;
 }
 /* void viewCert (in nsIX509Cert cert); */
 NS_IMETHODIMP
 nsNSSDialogs::ViewCert(nsIInterfaceRequestor *ctx,
                        nsIX509Cert *cert)
 {
   nsresult rv;
   nsCOMPtr<nsIPKIParamBlock> block =
            do_CreateInstance(NS_PKIPARAMBLOCK_CONTRACTID);
   if (!block)
     return NS_ERROR_FAILURE;
   rv = block->SetISupportAtIndex(1, cert);
   if (NS_FAILED(rv))
     return rv;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(ctx);
   rv = nsNSSDialogHelper::openDialog(parent,
                                      "chrome://pippki/content/certViewer.xul",
                                      block,
                                      false);
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::DisplayGeneratingKeypairInfo(nsIInterfaceRequestor *aCtx, nsIKeygenThread *runnable)
 {
   nsresult rv;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(aCtx);
   rv = nsNSSDialogHelper::openDialog(parent,
                                      "chrome://pippki/content/createCertInfo.xul",
                                      runnable);
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::ChooseToken(nsIInterfaceRequestor *aCtx, const char16_t **aTokenList, uint32_t aCount, char16_t **aTokenChosen, bool *aCanceled) {
   nsresult rv;
   uint32_t i;
   *aCanceled = false;
   // Get the parent window for the dialog
   nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(aCtx);
   nsCOMPtr<nsIDialogParamBlock> block =
            do_CreateInstance(NS_DIALOGPARAMBLOCK_CONTRACTID);
   if (!block) return NS_ERROR_FAILURE;
   block->SetNumberStrings(aCount);
   for (i = 0; i < aCount; i++) {
     rv = block->SetString(i, aTokenList[i]);
     if (NS_FAILED(rv)) return rv;
   }
   rv = block->SetInt(0, aCount);
   if (NS_FAILED(rv)) return rv;
   rv = nsNSSDialogHelper::openDialog(nullptr,
                                 "chrome://pippki/content/choosetoken.xul",
                                 block);
   if (NS_FAILED(rv)) return rv;
   int32_t status;
   rv = block->GetInt(0, &status);
   if (NS_FAILED(rv)) return rv;
   *aCanceled = (status == 0)?true:false;
   if (!*aCanceled) {
     // retrieve the nickname
     rv = block->GetString(0, aTokenChosen);
   }
   return rv;
 }
 /* boolean ConfirmKeyEscrow (in nsIX509Cert escrowAuthority); */
 NS_IMETHODIMP
 nsNSSDialogs::ConfirmKeyEscrow(nsIX509Cert *escrowAuthority, bool *_retval)
 {
   *_retval = false;
   nsresult rv;
   nsCOMPtr<nsIPKIParamBlock> block =
            do_CreateInstance(NS_PKIPARAMBLOCK_CONTRACTID);
   if (!block)
     return NS_ERROR_FAILURE;
   rv = block->SetISupportAtIndex(1, escrowAuthority);
   if (NS_FAILED(rv))
     return rv;
   rv = nsNSSDialogHelper::openDialog(nullptr,
                                      "chrome://pippki/content/escrowWarn.xul",
                                      block);
   if (NS_FAILED(rv))
     return rv;
   int32_t status=0;
   nsCOMPtr<nsIDialogParamBlock> dlgParamBlock = do_QueryInterface(block);
   rv = dlgParamBlock->GetInt(1, &status);
   if (status) {
     *_retval = true;
   }
   return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::DisplayProtectedAuth(nsIInterfaceRequestor *aCtx, nsIProtectedAuthThread *runnable)
 {
     // We cannot use nsNSSDialogHelper here. We cannot allow close widget
     // in the window because protected authentication is interruptible
     // from user interface and changing nsNSSDialogHelper's static variable
     // would not be thread-safe
     nsresult rv = NS_ERROR_FAILURE;
     // Get the parent window for the dialog
     nsCOMPtr<nsIDOMWindow> parent = do_GetInterface(aCtx);
     nsCOMPtr<nsIWindowWatcher> windowWatcher =
         do_GetService("@mozilla.org/embedcomp/window-watcher;1", &rv);
     if (NS_FAILED(rv))
         return rv;
     if (!parent) {
         windowWatcher->GetActiveWindow(getter_AddRefs(parent));
     }
     nsCOMPtr<nsIDOMWindow> newWindow;
     rv = windowWatcher->OpenWindow(parent,
         "chrome://pippki/content/protectedAuth.xul",
         "_blank",
         "centerscreen,chrome,modal,titlebar,close=no",
         runnable,
         getter_AddRefs(newWindow));
     return rv;
 }
 NS_IMETHODIMP
 nsNSSDialogs::ShowCertError(nsIInterfaceRequestor *ctx,
                             nsISSLStatus *status,
                             nsIX509Cert *cert,
                             const nsAString & textErrorMessage,
                             const nsAString & htmlErrorMessage,
                             const nsACString & hostName,
                             uint32_t portNumber)
 {
   nsCOMPtr<nsIPKIParamBlock> block =
            do_CreateInstance(NS_PKIPARAMBLOCK_CONTRACTID);
   if (!block)
     return NS_ERROR_OUT_OF_MEMORY;
   nsCOMPtr<nsIDialogParamBlock> dialogBlock = do_QueryInterface(block);
   nsresult rv;
   rv = dialogBlock->SetInt(1, portNumber);
   if (NS_FAILED(rv))
     return rv;
   rv = dialogBlock->SetString(1, NS_ConvertUTF8toUTF16(hostName).get());
   if (NS_FAILED(rv))
     return rv;
   rv = dialogBlock->SetString(2, PromiseFlatString(textErrorMessage).get());
   if (NS_FAILED(rv))
     return rv;
   rv = block->SetISupportAtIndex(1, cert);
   if (NS_FAILED(rv))
     return rv;
   rv = nsNSSDialogHelper::openDialog(nullptr,
                                      "chrome://pippki/content/certerror.xul",
                                      block);
   return rv;
 }

The Tor Browser / annotate

security/manager/pki/src/nsNSSDialogs.cpp@b8a032363ba2 (annotated)

security/manager/pki/src/nsNSSDialogs.cpp