Esempio n. 1
0
        public void CrlIssuerDPWork(ref bool crlenabled, ref bool issuerenabled, ref CrlDistributionPointsExt crl, ref IssuingDistributionPointsExt issuer, ref bool critical)
        {
            List <DistributionPointEntry> crls    = new List <DistributionPointEntry>();
            List <DistributionPointEntry> issuers = new List <DistributionPointEntry>();

            foreach (ListViewItem it in listView7.Items)
            {
                if (it.Tag is DistributionPointEntry)
                {
                    if (it.Text.StartsWith("[CRL]"))
                    {
                        crls.Add((DistributionPointEntry)it.Tag);
                    }
                    else
                    {
                        issuers.Add((DistributionPointEntry)it.Tag);
                    }
                }
            }

            crlenabled    = (crls.Count > 0);
            issuerenabled = (issuers.Count > 0);
            if (crlenabled)
            {
                crl = new CrlDistributionPointsExt(crls);
            }
            else
            {
                crl = null;
            }

            if (issuerenabled)
            {
                issuer = new IssuingDistributionPointsExt(issuers[0]);
            }
            else
            {
                issuer = null;
            }
            if (issuers.Count > 1)
            {
                Log.ShowInfo("Only 1 issuing distribution point will be used", "ISSUING DISTRIBUTION POINTS");
            }
            critical = crlcrit.Checked;
        }
Esempio n. 2
0
        void ExtensionsWork()
        {
            if (!InvokeRequired)
            {
                List <Al.Security.CA.X509Ext> Extensions = new List <X509Ext>();
                bool critical = false;
                bool enabled  = false;
                // Key Identifiers
                bool skid = false;
                bool akid = false;
                extentionsfrm1.KeyIDWork(ref skid, ref akid, ref critical);
                SubjectKeyIdentifierExt skidd = new SubjectKeyIdentifierExt();
                skidd.Critical = critical;
                AuthorityKeyIdentifierExt akidd = new AuthorityKeyIdentifierExt();
                akidd.Critical = critical;
                if (skid)
                {
                    Extensions.Add(skidd);
                }
                if (akid)
                {
                    Extensions.Add(akidd);
                }

                // CUSTOM
                // Basic Constraints
                BasicConstraintsExt bc = null;
                extentionsfrm1.BasicConstraintWork(ref bc, ref critical);
                bc.Critical = critical;
                if (bc != null)
                {
                    Extensions.Add(bc);
                }
                else
                {
                    throw new ArgumentException("Basic Constraints is required");
                }
                //  Key Usage
                List <X509KeyUsages> keyusage = new List <X509KeyUsages>();

                extentionsfrm1.KeyUsageWork(ref keyusage, ref critical);
                if (keyusage != null)
                {
                    X509KeyUsageExt k = new X509KeyUsageExt(keyusage);
                    k.Critical = critical;
                    Extensions.Add(k);
                }
                else
                {
                    throw new ArgumentException("No Key Usage Option was defined");
                }
                // Extended Key Usage
                List <X509ExtendedKeyUsages> keypid = null;
                List <string> customoid             = null;
                extentionsfrm1.ExtendedKeyUsageWork(ref keypid, ref customoid, ref critical);

                if (keypid != null)
                {
                    X509ExtendedKeyUsageExt kext = null;
                    if (customoid != null)
                    {
                        kext = new X509ExtendedKeyUsageExt(keypid, customoid);
                    }
                    else
                    {
                        kext = new X509ExtendedKeyUsageExt(keypid);
                    }

                    kext.Critical = critical;

                    Extensions.Add(kext);
                }
                else
                {
                    throw new ArgumentException("Extended Key Usage Error");
                }
                // Name Constraints
                List <GlobalName> Permitted = null;
                List <GlobalName> Excluded  = null;
                enabled = false;
                extentionsfrm1.NameConstraintsWork(ref enabled, ref Permitted, ref Excluded, ref critical);
                if (enabled)
                {
                    List <NameConstraintsExt> nexts = new List <NameConstraintsExt>();
                    if (Permitted != null)
                    {
                        foreach (GlobalName g in Permitted)
                        {
                            NameConstraintsExt nce = new NameConstraintsExt(g, true);
                            //  nce.Critical = critical;
                            nexts.Add(nce);
                        }
                    }
                    if (Excluded != null)
                    {
                        foreach (GlobalName g in Excluded)
                        {
                            NameConstraintsExt nce = new NameConstraintsExt(g, false);
                            // nce.Critical = critical;
                            nexts.Add(nce);
                        }
                    }
                    NameConstraintsExt ncef = new NameConstraintsExt(nexts);
                    ncef.Critical = critical;
                    Extensions.Add(ncef);
                }
                //  Authority Access Informations
                List <AuthorityInfoAccessExt> authseq = null;
                enabled = false;
                extentionsfrm1.AuthorityInfoWork(ref enabled, ref critical, ref authseq);
                if (enabled && authseq != null)
                {
                    AuthorityInfoAccessExt ext = new AuthorityInfoAccessExt(authseq);
                    ext.Critical = critical;
                    Extensions.Add(ext);
                }
                // Policy Settings
                bool polen = false;
                enabled = false;
                int inhibmap    = 0;
                int explicitmap = 0;
                int inhib       = 0;
                extentionsfrm1.PolicySettingsWork(ref polen, ref enabled, ref critical, ref inhibmap, ref explicitmap, ref inhib);
                if (polen)
                {
                    PolicyConstraintsExt pc = new PolicyConstraintsExt((int)explicitmap, (int)inhibmap);
                    pc.Critical = critical;
                    Extensions.Add(pc);
                    //   certificateGenerator.AddExtension(X509Extensions.PolicyConstraints, critical, new DerOctetSequence(new byte[] { 128, 1, explicitmap, 129, 1, inhibmap }));
                }
                if (enabled)
                {
                    InhibAnyPolicyConstraintsExt inh = new InhibAnyPolicyConstraintsExt(inhib);
                    inh.Critical = critical;
                    Extensions.Add(inh);
                }

                // Subject Alt Names
                enabled = false;
                List <GlobalName> names = null;
                extentionsfrm1.SubjectAltWork(ref enabled, ref critical, ref names);
                if (names != null && enabled)
                {
                    SubjectAltNameExt saltext = new SubjectAltNameExt(names);
                    saltext.Critical = critical;
                    Extensions.Add(saltext);
                }
                // Issuer Alt Names
                enabled = false;
                names   = null;
                extentionsfrm1.IssuerAltWork(ref enabled, ref critical, ref names);
                if (names != null && enabled)
                {
                    if (names.Count > 0)
                    {
                        IssuerAltNameExt saltext = new IssuerAltNameExt(names);
                        saltext.Critical = critical;
                        Extensions.Add(saltext);
                    }
                }
                // Crl/Issuer Distribution Points

                polen   = false;
                enabled = false;
                CrlDistributionPointsExt     crlext    = null;
                IssuingDistributionPointsExt issuerext = null;
                extentionsfrm1.CrlIssuerDPWork(ref polen, ref enabled, ref crlext, ref issuerext, ref critical);
                if (polen && crlext != null)
                {
                    crlext.Critical = critical;
                    Extensions.Add(crlext);
                }
                if (enabled && issuerext != null)
                {
                    issuerext.Critical = critical;
                    Extensions.Add(issuerext);
                }


                // Policy Information
                enabled = false;
                CertificatePoliciesExt pols = null;
                extentionsfrm1.PolicyWork(ref enabled, ref critical, ref pols);
                if (enabled && pols != null)
                {
                    pols.Critical = critical;
                    Extensions.Add(pols);
                }
                // Netscape Informations
                enabled = false;
                polen   = false;
                string nsurl      = "";
                string nscomment  = "";
                string nspol      = "";
                string nscarevurl = "";
                string nsrevurl   = "";
                string sslname    = "";
                extentionsfrm1.NetscapeWork(ref critical, ref enabled, ref nscomment, ref nsurl, ref nspol, ref nscarevurl, ref nsrevurl, ref sslname);

                if (enabled)
                {
                    List <NetscapeKeyUsage> nk = new List <NetscapeKeyUsage>();

                    foreach (X509ExtendedKeyUsages k in keypid)
                    {
                        if (k == X509ExtendedKeyUsages.clientAuth)
                        {
                            nk.Add(NetscapeKeyUsage.client);
                        }
                        else if (k == X509ExtendedKeyUsages.codeSigning)
                        {
                            nk.Add(NetscapeKeyUsage.objsign);
                        }

                        else if (k == X509ExtendedKeyUsages.emailProtection)
                        {
                            nk.Add(NetscapeKeyUsage.email);
                        }
                        else if (k == X509ExtendedKeyUsages.serverAuth)
                        {
                            nk.Add(NetscapeKeyUsage.server);
                        }

                        if (bc.Value.Contains("TRUE"))
                        {
                            if (k == X509ExtendedKeyUsages.serverAuth || k == X509ExtendedKeyUsages.clientAuth)
                            {
                                nk.Add(NetscapeKeyUsage.sslCA);
                            }

                            if (k == X509ExtendedKeyUsages.emailProtection)
                            {
                                nk.Add(NetscapeKeyUsage.emailCA);
                            }

                            if (k == X509ExtendedKeyUsages.codeSigning)
                            {
                                nk.Add(NetscapeKeyUsage.objCA);
                            }
                        }
                    }
                    NsKeyUsageExt nsk = new NsKeyUsageExt(nk);
                    nsk.Critical = critical;
                    Extensions.Add(nsk);
                }
                if (!string.IsNullOrEmpty(nscomment))
                {
                    NsCommentExt nsext = new NsCommentExt(nscomment);
                    nsext.Critical = critical;
                    Extensions.Add(nsext);
                }
                if (!string.IsNullOrEmpty(nsurl))
                {
                    NsUrlExt nsext = new NsUrlExt(nsurl);
                    nsext.Critical = critical;
                    Extensions.Add(nsext);
                }
                if (!string.IsNullOrEmpty(nscarevurl))
                {
                    nsCaRevocationUrlExt nsext = new nsCaRevocationUrlExt(nscarevurl);
                    nsext.Critical = critical;
                    Extensions.Add(nsext);
                }
                if (!string.IsNullOrEmpty(nspol))
                {
                    nsCaPolicyUrlExt nsext = new nsCaPolicyUrlExt(nspol);
                    nsext.Critical = critical;
                    Extensions.Add(nsext);
                }
                if (!string.IsNullOrEmpty(nsrevurl))
                {
                    nsRevocationUrlExt nsext = new nsRevocationUrlExt(nsrevurl);
                    nsext.Critical = critical;
                    Extensions.Add(nsext);
                }
                if (!string.IsNullOrEmpty(sslname))
                {
                    nsSslServerNameExt nsext = new nsSslServerNameExt(sslname);
                    nsext.Critical = critical;
                    Extensions.Add(nsext);
                }
                //  17 : Custom Extensions
                List <CustomExtension> custom = extentionsfrm1.GetCustoms();
                if (custom.Count > 0)
                {
                    foreach (CustomExtension c in custom)
                    {
                        Extensions.Add(c);
                    }
                }

                X509ExtensionManager.Export(Application.StartupPath + @"\ext.cfg", Extensions);
                SectionManager.Clean();
                MainForm.mf.configbox.Text = File.ReadAllText(Application.StartupPath + @"\ext.cfg");
            }
            else
            {
                this.Invoke(new ExtWork(ExtensionsWork));
            }
        }