A simple Qt based browser with no bullshit that supports PKCS#11 tokens (such as the SuisseID).
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 

68 lines
2.3 KiB

/*! @file
@id $Id$
*/
// 1 2 3 4 5 6 7 8
// 45678901234567890123456789012345678901234567890123456789012345678901234567890
#ifndef __QBROWSERLIB_CERTS_HXX__
#define __QBROWSERLIB_CERTS_HXX__
#include <cryptoki.hxx>
#include <QtCore/QList>
#include <QtNetwork/QSslCertificate>
namespace qbrowserlib {
extern const QString LIBNAME;
//! Access certificate information from cryptoki library.
/*! Advice: Keep one instance per executable, because library is
loaded, instanciated and unloaded on each object creation or
deletion. */
class Certs {
public:
//! Initialize cryptoki library.
/*! Advice: Keep one instance per executable, because library is
loaded, instanciated and unloaded on each object creation or
deletion.
@throws throws std::exception in case of error */
Certs(const QString& lib = LIBNAME): _cryptoki(lib.toStdString()) {}
//! Get a list of authentification certificates.
/*! @throws throws std::exception in case of error */
QList<QSslCertificate> auth() {
QList<QSslCertificate> authCerts;
cryptoki::SlotList slotlist(_cryptoki.slotList());
for (cryptoki::SlotList::iterator slot(slotlist.begin());
slot!=slotlist.end(); ++slot) {
cryptoki::Session session(*slot);
cryptoki::ObjectList certs(session.find
(cryptoki::Attribute(CKA_CLASS)
.from<CK_OBJECT_CLASS>(CKO_CERTIFICATE)));
for (cryptoki::ObjectList::iterator cert(certs.begin());
cert!=certs.end(); ++cert) {
cryptoki::Attribute label(cert->attribute(CKA_LABEL));
if (label.value.find("auth")==0 ||
label.value.find("Authentication")!=std::string::npos) {
std::string data(cert->attribute(CKA_VALUE).value);
authCerts.push_back(QSslCertificate(QByteArray(data.data(),
data.size()),
QSsl::Der));
}
}
}
return authCerts;
}
private:
cryptoki::Library _cryptoki;
};
}
#endif