127 lines
3.5 KiB
C++
127 lines
3.5 KiB
C++
/*
|
|
* Deskflow -- mouse and keyboard sharing utility
|
|
* SPDX-FileCopyrightText: (C) 2025 Deskflow Developers
|
|
* SPDX-FileCopyrightText: (C) 2024 Synergy App Ltd
|
|
* SPDX-License-Identifier: GPL-2.0-only WITH LicenseRef-OpenSSL-Exception
|
|
*/
|
|
|
|
#include "TlsUtility.h"
|
|
|
|
#include "common/Settings.h"
|
|
#include "net/SecureUtils.h"
|
|
|
|
#include <QFile>
|
|
#include <QSslCertificate>
|
|
#include <QSslKey>
|
|
#include <QString>
|
|
|
|
namespace deskflow::gui::TlsUtility {
|
|
|
|
bool isEnabled()
|
|
{
|
|
return Settings::value(Settings::Security::TlsEnabled).toBool();
|
|
}
|
|
|
|
bool isCertValid(const QString &certPath)
|
|
{
|
|
const auto certs = QSslCertificate::fromPath(certPath);
|
|
if (certs.isEmpty()) {
|
|
//: %1 will be replaced by the certificate path
|
|
qDebug() << QObject::tr("failed to read key from certificate file: %1").arg(certPath);
|
|
return false;
|
|
}
|
|
|
|
const auto cert = certs.first();
|
|
if (cert.isNull()) {
|
|
//: %1 will be replaced by the certificate path
|
|
qDebug() << QObject::tr("failed to parse certificate file: %1").arg(certPath);
|
|
return false;
|
|
}
|
|
|
|
const auto key = cert.publicKey();
|
|
if (key.isNull()) {
|
|
//: %1 will be replaced by the certificate path
|
|
qDebug() << QObject::tr("failed to read key from certificate file: %1").arg(certPath);
|
|
return false;
|
|
}
|
|
|
|
if (key.length() != Settings::value(Settings::Security::KeySize).toInt()) {
|
|
qDebug() << QObject::tr("key detected is the incorrect size");
|
|
return false;
|
|
}
|
|
|
|
if (key.algorithm() != QSsl::Rsa) {
|
|
//: %1 will be replaced by the certificate path
|
|
qDebug() << QObject::tr("failed to read RSA key from certificate file: %1").arg(certPath);
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
int getCertKeyLength(const QString &certPath)
|
|
{
|
|
QFile file(certPath);
|
|
if (!file.open(QFile::ReadOnly)) {
|
|
//: %1 will be replaced by the certificate path
|
|
qDebug() << QObject::tr("failed to read key from certificate file: %1").arg(certPath);
|
|
return -1;
|
|
}
|
|
|
|
const auto key = QSslKey(&file, QSsl::Rsa);
|
|
if (key.isNull()) {
|
|
//: %1 will be replaced by the certificate path
|
|
qDebug() << QObject::tr("failed to parse certificate file: %1").arg(certPath);
|
|
return -1;
|
|
}
|
|
return key.length();
|
|
}
|
|
|
|
QByteArray certFingerprint(const QString &certPath)
|
|
{
|
|
QByteArray fingerprint;
|
|
|
|
const auto certs = QSslCertificate::fromPath(certPath);
|
|
if (certs.isEmpty()) {
|
|
//: %1 will be replaced by the certificate path
|
|
qDebug() << QObject::tr("failed to read key from certificate file: %1").arg(certPath);
|
|
return fingerprint;
|
|
}
|
|
|
|
const auto cert = certs.first();
|
|
if (cert.isNull()) {
|
|
//: %1 will be replaced by the certificate path
|
|
qWarning() << QObject::tr("failed to parse certificate file: %1").arg(certPath);
|
|
return fingerprint;
|
|
}
|
|
|
|
return cert.digest(QCryptographicHash::Sha256);
|
|
}
|
|
|
|
bool generateCertificate()
|
|
{
|
|
qDebug(
|
|
"generating tls certificate, "
|
|
"all clients must trust the new fingerprint"
|
|
);
|
|
|
|
const auto keyLength = std::max(2048, Settings::value(Settings::Security::KeySize).toInt());
|
|
const auto certPath = Settings::value(Settings::Security::Certificate).toString();
|
|
|
|
QFileInfo info(certPath);
|
|
if (QDir dir(info.absolutePath()); !dir.exists() && !dir.mkpath(".")) {
|
|
qCritical("failed to create directory for tls certificate");
|
|
return false;
|
|
}
|
|
|
|
try {
|
|
deskflow::generatePemSelfSignedCert(certPath, keyLength);
|
|
} catch (const std::exception &e) {
|
|
qCritical() << "failed to generate self-signed pem cert:" << e.what();
|
|
return false;
|
|
}
|
|
qDebug("tls certificate generated");
|
|
return true;
|
|
}
|
|
|
|
} // namespace deskflow::gui::TlsUtility
|