+++ /dev/null
-/*
- * Copyright 2001-2007 Internet2
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-/* siterefresh.cpp - command-line tool to refresh and verify metadata
-
- Scott Cantor
- 5/12/03
-
- $Id:siterefresh.cpp 2252 2007-05-20 20:20:57Z cantor $
-*/
-
-#include <saml/SAMLConfig.h>
-#include <saml/saml2/metadata/Metadata.h>
-#include <saml/util/SAMLConstants.h>
-#include <xmltooling/logging.h>
-#include <xmltooling/XMLToolingConfig.h>
-#include <xmltooling/signature/Signature.h>
-#include <xmltooling/util/XMLHelper.h>
-
-#include <fstream>
-#if defined(XMLTOOLING_LOG4SHIB)
-# include <log4shib/OstreamAppender.hh>
-#elif defined(XMLTOOLING_LOG4CPP)
-# include <log4cpp/OstreamAppender.hh>
-#endif
-#include <xercesc/framework/URLInputSource.hpp>
-#include <xercesc/framework/StdInInputSource.hpp>
-#include <xercesc/framework/Wrapper4InputSource.hpp>
-#include <xsec/enc/XSECCryptoProvider.hpp>
-#include <xsec/enc/XSECKeyInfoResolverDefault.hpp>
-#include <xsec/enc/XSECCryptoException.hpp>
-#include <xsec/enc/OpenSSL/OpenSSLCryptoX509.hpp>
-#include <xsec/enc/OpenSSL/OpenSSLCryptoKeyRSA.hpp>
-#include <xsec/framework/XSECProvider.hpp>
-#include <xsec/framework/XSECException.hpp>
-#include <xsec/dsig/DSIGTransformC14n.hpp>
-#include <xsec/dsig/DSIGReference.hpp>
-#include <xsec/dsig/DSIGTransformList.hpp>
-
-using namespace xmlsignature;
-using namespace xmlconstants;
-using namespace xmltooling::logging;
-using namespace xmltooling;
-using namespace samlconstants;
-using namespace opensaml::saml2md;
-using namespace opensaml;
-using namespace xercesc;
-using namespace std;
-
-void verifySignature(DOMDocument* doc, DOMNode* sigNode, const char* cert=NULL)
-{
- Category& log=Category::getInstance("siterefresh");
- static const XMLCh ID[]={chLatin_I, chLatin_D, chNull};
-
- // Load the signature.
- XSECProvider prov;
- DSIGSignature* sig=NULL;
- try {
- sig=prov.newSignatureFromDOM(doc,sigNode);
- sig->load();
-
- bool valid=false;
-
- // Verify the signature coverage.
- DSIGReferenceList* refs=sig->getReferenceList();
- if (sig->getSignatureMethod()==SIGNATURE_RSA && refs && refs->getSize()==1) {
- DSIGReference* ref=refs->item(0);
- if (ref) {
- const XMLCh* URI=ref->getURI();
- if (!URI || !*URI || (*URI==chPound &&
- !XMLString::compareString(&URI[1],static_cast<DOMElement*>(sigNode->getParentNode())->getAttributeNS(NULL,ID)))) {
- DSIGTransformList* tlist=ref->getTransforms();
- for (unsigned int i=0; tlist && i<tlist->getSize(); i++) {
- if (tlist->item(i)->getTransformType()==TRANSFORM_ENVELOPED_SIGNATURE)
- valid=true;
- else if (tlist->item(i)->getTransformType()!=TRANSFORM_EXC_C14N) {
- valid=false;
- break;
- }
- }
- }
- }
- }
-
- if (!valid) {
- log.error("detected an invalid signature profile");
- throw SignatureException("detected an invalid signature profile");
- }
-
- if (cert) {
- // Load the certificate, stripping the header and trailer.
- string certbuf,line;
- auto_ptr<OpenSSLCryptoX509> x509(new OpenSSLCryptoX509());
- bool sawheader=false;
- ifstream infile(cert);
- while (!getline(infile,line).fail()) {
- if (line.find("CERTIFICATE-----")==string::npos) {
- if (sawheader)
- certbuf+=line + '\n';
- }
- else
- sawheader=true;
- }
- x509->loadX509Base64Bin(certbuf.data(),certbuf.length());
- sig->setSigningKey(x509->clonePublicKey());
- }
- else {
- log.warn("verifying with key inside signature, this is a sanity check but provides no security");
- XSECKeyInfoResolverDefault resolver;
- sig->setKeyInfoResolver(resolver.clone());
- }
-
- if (!sig->verify()) {
- log.error("detected an invalid signature value");
- throw SignatureException("detected an invalid signature value");
- }
-
- prov.releaseSignature(sig);
- }
- catch(...) {
- if (sig)
- prov.releaseSignature(sig);
- throw;
- }
-}
-
-int main(int argc,char* argv[])
-{
- int ret=0;
- SAMLConfig& conf=SAMLConfig::getConfig();
- bool verify=true;
- char* url_param=NULL;
- char* cert_param=NULL;
- char* out_param=NULL;
- char* path=getenv("SHIBSCHEMAS");
- char* ns_param=NULL;
- char* name_param=NULL;
-
- for (int i=1; i<argc; i++) {
- if (!strcmp(argv[i],"--schema") && i+1<argc)
- path=argv[++i];
- else if (!strcmp(argv[i],"--url") && i+1<argc)
- url_param=argv[++i];
- else if (!strcmp(argv[i],"--noverify"))
- verify=false;
- else if (!strcmp(argv[i],"--cert") && i+1<argc)
- cert_param=argv[++i];
- else if (!strcmp(argv[i],"--out") && i+1<argc)
- out_param=argv[++i];
- else if (!strcmp(argv[i],"--rootns") && i+1<argc)
- ns_param=argv[++i];
- else if (!strcmp(argv[i],"--rootname") && i+1<argc)
- name_param=argv[++i];
- }
-
- if (verify && !cert_param) {
- cout << "usage: " << argv[0] << endl <<
- "\t--url <URL of metadata>" << endl <<
- "\t--noverify OR --cert <PEM Certificate>" << endl <<
- "\t[--out <pathname to copy data to>]" << endl <<
- "\t[--schema <schema path>]" << endl <<
- "\t[--rootns <root element XML namespace>]" << endl <<
- "\t[--rootname <root element name>]" << endl;
- return -100;
- }
-
- Category::setRootPriority(Priority::WARN);
- Category::getRoot().addAppender(new OstreamAppender("default",&cerr));
- Category& log=Category::getInstance("siterefresh");
- if (!conf.init())
- return -10;
-
- /*
- saml::XML::registerSchema(shibtarget::XML::SAML2META_NS,shibtarget::XML::SAML2META_SCHEMA_ID);
- saml::XML::registerSchema(shibtarget::XML::SAML2ASSERT_NS,shibtarget::XML::SAML2ASSERT_SCHEMA_ID);
- saml::XML::registerSchema(shibtarget::XML::XMLENC_NS,shibtarget::XML::XMLENC_SCHEMA_ID);
- */
-
- try {
- // Parse the specified document.
- static XMLCh base[]={chLatin_f, chLatin_i, chLatin_l, chLatin_e, chColon, chForwardSlash, chForwardSlash, chForwardSlash, chNull};
- DOMDocument* doc=NULL;
- if (url_param && *url_param) {
- URLInputSource src(base,url_param);
- Wrapper4InputSource dsrc(&src,false);
- doc=XMLToolingConfig::getConfig().getParser().parse(dsrc);
- }
- else {
- StdInInputSource src;
- Wrapper4InputSource dsrc(&src,false);
- doc=XMLToolingConfig::getConfig().getParser().parse(dsrc);
- }
-
- // Check root element.
- if (ns_param && name_param) {
- auto_ptr_XMLCh ns(ns_param);
- auto_ptr_XMLCh name(name_param);
- if (!XMLHelper::isNodeNamed(doc->getDocumentElement(),ns.get(),name.get()))
- throw XMLObjectException(string("Root element does not match specified QName of {") + ns_param + "}:" + name_param);
- }
- else if (!XMLHelper::isNodeNamed(doc->getDocumentElement(),SAML20MD_NS,EntitiesDescriptor::LOCAL_NAME) &&
- !XMLHelper::isNodeNamed(doc->getDocumentElement(),SAML20MD_NS,EntityDescriptor::LOCAL_NAME))
- throw XMLObjectException("Root element does not signify a known metadata format");
-
- // Verify the "root" signature.
- DOMElement* rootSig=XMLHelper::getFirstChildElement(doc->getDocumentElement(),XMLSIG_NS,Signature::LOCAL_NAME);
- if (verify) {
- if (rootSig) {
- verifySignature(doc,rootSig,cert_param);
- }
- else {
- doc->release();
- log.error("unable to locate root signature to verify in document");
- throw SignatureException("Verification implies that the document must be signed");
- }
- }
- else if (rootSig) {
- log.warn("verification of signer disabled, make sure you trust the source of this file!");
- verifySignature(doc,rootSig,cert_param);
- }
- else {
- log.warn("verification disabled, and file is unsigned!");
- }
-
- // Verify all signatures.
- DOMNodeList* siglist=doc->getElementsByTagNameNS(XMLSIG_NS,Signature::LOCAL_NAME);
- for (unsigned int i=0; siglist && i<siglist->getLength(); i++)
- verifySignature(doc,siglist->item(i),cert_param);
-
- if (out_param) {
- // Output the data to the specified file.
- ofstream outfile(out_param);
- outfile << *(doc->getDocumentElement());
- }
- else
- cout << *(doc->getDocumentElement());
- doc->release();
- }
- catch (SignatureException&) {
- ret=-1;
- }
- catch(XMLToolingException& e) {
- log.errorStream() << "caught an XMLTooling exception: " << e.what() << CategoryStream::ENDLINE;
- ret=-2;
- }
- catch(XMLException& e) {
- auto_ptr_char temp(e.getMessage());
- log.errorStream() << "caught an XML exception: " << temp.get() << CategoryStream::ENDLINE;
- ret=-3;
- }
- catch(XSECException& e) {
- auto_ptr_char temp(e.getMsg());
- log.errorStream() << "caught an XMLSec exception: " << temp.get() << CategoryStream::ENDLINE;
- ret=-4;
- }
- catch(XSECCryptoException& e) {
- log.errorStream() << "caught an XMLSecCrypto exception: " << e.getMsg() << CategoryStream::ENDLINE;
- ret=-5;
- }
- catch(...) {
- log.errorStream() << "caught an unknown exception" << CategoryStream::ENDLINE;
- ret=-6;
- }
-
- conf.term();
- return ret;
-}
+++ /dev/null
-<?xml version="1.0" encoding="Windows-1252"?>
-<VisualStudioProject
- ProjectType="Visual C++"
- Version="8.00"
- Name="siterefresh"
- ProjectGUID="{4D02F36E-D2CD-4FD1-AC50-2941E27BB3FB}"
- >
- <Platforms>
- <Platform
- Name="Win32"
- />
- </Platforms>
- <ToolFiles>
- </ToolFiles>
- <Configurations>
- <Configuration
- Name="Release|Win32"
- OutputDirectory="$(SolutionDir)$(ConfigurationName)"
- IntermediateDirectory="$(ConfigurationName)"
- ConfigurationType="1"
- InheritedPropertySheets="$(VCInstallDir)VCProjectDefaults\UpgradeFromVC71.vsprops"
- UseOfMFC="0"
- ATLMinimizesCRunTimeLibraryUsage="false"
- CharacterSet="2"
- >
- <Tool
- Name="VCPreBuildEventTool"
- />
- <Tool
- Name="VCCustomBuildTool"
- />
- <Tool
- Name="VCXMLDataGeneratorTool"
- />
- <Tool
- Name="VCWebServiceProxyGeneratorTool"
- />
- <Tool
- Name="VCMIDLTool"
- TypeLibraryName=".\Release/siterefresh.tlb"
- HeaderFileName=""
- />
- <Tool
- Name="VCCLCompilerTool"
- Optimization="2"
- InlineFunctionExpansion="1"
- AdditionalIncludeDirectories="..;"..\..\cpp-opensaml2";"..\..\cpp-xmltooling""
- PreprocessorDefinitions="WIN32;NDEBUG;_CONSOLE"
- StringPooling="true"
- RuntimeLibrary="2"
- EnableFunctionLevelLinking="true"
- RuntimeTypeInfo="true"
- PrecompiledHeaderFile=".\Release/siterefresh.pch"
- AssemblerListingLocation=".\Release/"
- ObjectFile=".\Release/"
- ProgramDataBaseFileName=".\Release/"
- WarningLevel="3"
- SuppressStartupBanner="true"
- Detect64BitPortabilityProblems="true"
- CompileAs="0"
- />
- <Tool
- Name="VCManagedResourceCompilerTool"
- />
- <Tool
- Name="VCResourceCompilerTool"
- PreprocessorDefinitions="NDEBUG"
- Culture="1033"
- />
- <Tool
- Name="VCPreLinkEventTool"
- />
- <Tool
- Name="VCLinkerTool"
- AdditionalDependencies="log4shib1.lib xerces-c_2.lib xsec_1.lib saml2.lib xmltooling1.lib"
- LinkIncremental="1"
- SuppressStartupBanner="true"
- AdditionalLibraryDirectories="..\..\cpp-opensaml2\$(ConfigurationName);..\..\cpp-xmltooling\$(ConfigurationName)"
- ProgramDatabaseFile=".\Release/siterefresh.pdb"
- SubSystem="1"
- TargetMachine="1"
- />
- <Tool
- Name="VCALinkTool"
- />
- <Tool
- Name="VCManifestTool"
- />
- <Tool
- Name="VCXDCMakeTool"
- />
- <Tool
- Name="VCBscMakeTool"
- />
- <Tool
- Name="VCFxCopTool"
- />
- <Tool
- Name="VCAppVerifierTool"
- />
- <Tool
- Name="VCWebDeploymentTool"
- />
- <Tool
- Name="VCPostBuildEventTool"
- />
- </Configuration>
- <Configuration
- Name="Debug|Win32"
- OutputDirectory="$(SolutionDir)$(ConfigurationName)"
- IntermediateDirectory="$(ConfigurationName)"
- ConfigurationType="1"
- InheritedPropertySheets="$(VCInstallDir)VCProjectDefaults\UpgradeFromVC71.vsprops"
- UseOfMFC="0"
- ATLMinimizesCRunTimeLibraryUsage="false"
- CharacterSet="2"
- >
- <Tool
- Name="VCPreBuildEventTool"
- />
- <Tool
- Name="VCCustomBuildTool"
- />
- <Tool
- Name="VCXMLDataGeneratorTool"
- />
- <Tool
- Name="VCWebServiceProxyGeneratorTool"
- />
- <Tool
- Name="VCMIDLTool"
- TypeLibraryName=".\Debug/siterefresh.tlb"
- HeaderFileName=""
- />
- <Tool
- Name="VCCLCompilerTool"
- Optimization="0"
- AdditionalIncludeDirectories="..;"..\..\cpp-opensaml2";"..\..\cpp-xmltooling""
- PreprocessorDefinitions="_CONSOLE;WIN32;_DEBUG"
- BasicRuntimeChecks="3"
- RuntimeLibrary="3"
- RuntimeTypeInfo="true"
- PrecompiledHeaderFile=".\Debug/siterefresh.pch"
- AssemblerListingLocation=".\Debug/"
- ObjectFile=".\Debug/"
- ProgramDataBaseFileName=".\Debug/"
- BrowseInformation="1"
- WarningLevel="3"
- SuppressStartupBanner="true"
- Detect64BitPortabilityProblems="true"
- DebugInformationFormat="4"
- CompileAs="0"
- />
- <Tool
- Name="VCManagedResourceCompilerTool"
- />
- <Tool
- Name="VCResourceCompilerTool"
- PreprocessorDefinitions="_DEBUG"
- Culture="1033"
- />
- <Tool
- Name="VCPreLinkEventTool"
- />
- <Tool
- Name="VCLinkerTool"
- AdditionalDependencies="log4shib1D.lib xerces-c_2D.lib xsec_1D.lib saml2D.lib xmltooling1D.lib"
- LinkIncremental="2"
- SuppressStartupBanner="true"
- AdditionalLibraryDirectories="..\..\cpp-opensaml2\$(ConfigurationName);..\..\cpp-xmltooling\$(ConfigurationName)"
- GenerateDebugInformation="true"
- SubSystem="1"
- TargetMachine="1"
- />
- <Tool
- Name="VCALinkTool"
- />
- <Tool
- Name="VCManifestTool"
- />
- <Tool
- Name="VCXDCMakeTool"
- />
- <Tool
- Name="VCBscMakeTool"
- />
- <Tool
- Name="VCFxCopTool"
- />
- <Tool
- Name="VCAppVerifierTool"
- />
- <Tool
- Name="VCWebDeploymentTool"
- />
- <Tool
- Name="VCPostBuildEventTool"
- />
- </Configuration>
- </Configurations>
- <References>
- </References>
- <Files>
- <File
- RelativePath="siterefresh.cpp"
- >
- </File>
- </Files>
- <Globals>
- </Globals>
-</VisualStudioProject>
projects / shibboleth / cpp-sp.git / commitdiff