1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
|
/****************************************************************************
**
** Copyright (C) 2011 Richard J. Moore <rich@kde.org>
** Contact: http://www.qt.io/licensing/
**
** This file is part of the QtNetwork module of the Qt Toolkit.
**
** $QT_BEGIN_LICENSE:LGPL21$
** Commercial License Usage
** Licensees holding valid commercial Qt licenses may use this file in
** accordance with the commercial license agreement provided with the
** Software or, alternatively, in accordance with the terms contained in
** a written agreement between you and The Qt Company. For licensing terms
** and conditions see http://www.qt.io/terms-conditions. For further
** information use the contact form at http://www.qt.io/contact-us.
**
** GNU Lesser General Public License Usage
** Alternatively, this file may be used under the terms of the GNU Lesser
** General Public License version 2.1 or version 3 as published by the Free
** Software Foundation and appearing in the file LICENSE.LGPLv21 and
** LICENSE.LGPLv3 included in the packaging of this file. Please review the
** following information to ensure the GNU Lesser General Public License
** requirements will be met: https://www.gnu.org/licenses/lgpl.html and
** http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html.
**
** As a special exception, The Qt Company gives you certain additional
** rights. These rights are described in The Qt Company LGPL Exception
** version 1.1, included in the file LGPL_EXCEPTION.txt in this package.
**
** $QT_END_LICENSE$
**
****************************************************************************/
/*!
\class QSslCertificateExtension
\brief The QSslCertificateExtension class provides an API for accessing the
extensions of an X509 certificate.
\since 5.0
\reentrant
\ingroup network
\ingroup ssl
\ingroup shared
\inmodule QtNetwork
QSslCertificateExtension provides access to an extension stored in
an X509 certificate. The information available depends on the type
of extension being accessed.
All X509 certificate extensions have the following properties:
\table
\header
\li Property
\li Description
\row
\li name
\li The human readable name of the extension, eg. 'basicConstraints'.
\row
\li criticality
\li This is a boolean value indicating if the extension is critical
to correctly interpreting the certificate.
\row
\li oid
\li The ASN.1 object identifier that specifies which extension this
is.
\row
\li supported
\li If this is true the structure of the extension's value will not
change between Qt versions.
\row
\li value
\li A QVariant with a structure dependent on the type of extension.
\endtable
Whilst this class provides access to any type of extension, only
some are guaranteed to be returned in a format that will remain
unchanged between releases. The isSupported() method returns \c true
for extensions where this is the case.
The extensions currently supported, and the structure of the value
returned are as follows:
\table
\header
\li Name
\li OID
\li Details
\row
\li basicConstraints
\li 2.5.29.19
\li Returned as a QVariantMap. The key 'ca' contains a boolean value,
the optional key 'pathLenConstraint' contains an integer.
\row
\li authorityInfoAccess
\li 1.3.6.1.5.5.7.1.1
\li Returned as a QVariantMap. There is a key for each access method,
with the value being a URI.
\row
\li subjectKeyIdentifier
\li 2.5.29.14
\li Returned as a QVariant containing a QString. The string is the key
identifier.
\row
\li authorityKeyIdentifier
\li 2.5.29.35
\li Returned as a QVariantMap. The optional key 'keyid' contains the key
identifier as a hex string stored in a QByteArray. The optional key
'serial' contains the authority key serial number as a qlonglong.
Currently there is no support for the general names field of this
extension.
\endtable
In addition to the supported extensions above, many other common extensions
will be returned in a reasonably structured way. Extensions that the SSL
backend has no support for at all will be returned as a QByteArray.
Further information about the types of extensions certificates can
contain can be found in RFC 5280.
\sa QSslCertificate::extensions()
*/
#include "qsslcertificateextension.h"
#include "qsslcertificateextension_p.h"
QT_BEGIN_NAMESPACE
/*!
Constructs a QSslCertificateExtension.
*/
QSslCertificateExtension::QSslCertificateExtension()
: d(new QSslCertificateExtensionPrivate)
{
}
/*!
Constructs a copy of \a other.
*/
QSslCertificateExtension::QSslCertificateExtension(const QSslCertificateExtension &other)
: d(other.d)
{
}
/*!
Destroys the extension.
*/
QSslCertificateExtension::~QSslCertificateExtension()
{
}
/*!
Assigns \a other to this extension and returns a reference to this extension.
*/
QSslCertificateExtension &QSslCertificateExtension::operator=(const QSslCertificateExtension &other)
{
d = other.d;
return *this;
}
/*!
\fn void QSslCertificateExtension::swap(QSslCertificateExtension &other)
Swaps this certificate extension instance with \a other. This
function is very fast and never fails.
*/
/*!
Returns the ASN.1 OID of this extension.
*/
QString QSslCertificateExtension::oid() const
{
return d->oid;
}
/*!
Returns the name of the extension. If no name is known for the
extension then the OID will be returned.
*/
QString QSslCertificateExtension::name() const
{
return d->name;
}
/*!
Returns the value of the extension. The structure of the value
returned depends on the extension type.
*/
QVariant QSslCertificateExtension::value() const
{
return d->value;
}
/*!
Returns the criticality of the extension.
*/
bool QSslCertificateExtension::isCritical() const
{
return d->critical;
}
/*!
Returns the true if this extension is supported. In this case,
supported simply means that the structure of the QVariant returned
by the value() accessor will remain unchanged between versions.
Unsupported extensions can be freely used, however there is no
guarantee that the returned data will have the same structure
between versions.
*/
bool QSslCertificateExtension::isSupported() const
{
return d->supported;
}
QT_END_NAMESPACE
|
