summaryrefslogtreecommitdiff
path: root/plugins/pychrysa
diff options
context:
space:
mode:
Diffstat (limited to 'plugins/pychrysa')
-rw-r--r--plugins/pychrysa/analysis/db/Makefile.am1
-rw-r--r--plugins/pychrysa/analysis/db/certs.c327
-rw-r--r--plugins/pychrysa/analysis/db/certs.h42
-rw-r--r--plugins/pychrysa/analysis/db/module.c2
4 files changed, 372 insertions, 0 deletions
diff --git a/plugins/pychrysa/analysis/db/Makefile.am b/plugins/pychrysa/analysis/db/Makefile.am
index 2de2a16..a6bb701 100644
--- a/plugins/pychrysa/analysis/db/Makefile.am
+++ b/plugins/pychrysa/analysis/db/Makefile.am
@@ -2,6 +2,7 @@
noinst_LTLIBRARIES = libpychrysaanalysisdb.la
libpychrysaanalysisdb_la_SOURCES = \
+ certs.h certs.c \
collection.h collection.c \
item.h item.c \
module.h module.c
diff --git a/plugins/pychrysa/analysis/db/certs.c b/plugins/pychrysa/analysis/db/certs.c
new file mode 100644
index 0000000..e0358d1
--- /dev/null
+++ b/plugins/pychrysa/analysis/db/certs.c
@@ -0,0 +1,327 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * certs.c - équivalent Python du fichier "analysis/db/certs.c"
+ *
+ * Copyright (C) 2017 Cyrille Bagard
+ *
+ * This file is part of Chrysalide.
+ *
+ * Chrysalide is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * Chrysalide is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+ */
+
+
+#include "certs.h"
+
+
+#include <pygobject.h>
+#include <string.h>
+
+
+#include <i18n.h>
+#include <analysis/db/certs.h>
+
+
+#include "../../helpers.h"
+
+
+
+/* Traduit en version native une identité de certificat. */
+static bool py_certs_fill_x509_entries(PyObject *, x509_entries *);
+
+/* Crée un certificat de signature racine. */
+static PyObject *py_certs_make_ca(PyObject *, PyObject *);
+
+/* Crée un certificat pour application. */
+static PyObject *py_certs_make_request(PyObject *, PyObject *);
+
+/* Signe un certificat pour application. */
+static PyObject *py_certs_sign_cert(PyObject *, PyObject *);
+
+
+
+/******************************************************************************
+* *
+* Paramètres : dict = ensemble de propriétés renseignées. *
+* out = résumé des entrées regroupées. [OUT] *
+* *
+* Description : Traduit en version native une identité de certificat. *
+* *
+* Retour : Bilan de l'opération. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+static bool py_certs_fill_x509_entries(PyObject *dict, x509_entries *out)
+{
+ bool result; /* Bilan à retourner */
+ PyObject *value; /* Valeur au format Python */
+
+#define TRANSLATE_ENTRY(name, dest) \
+ do \
+ { \
+ value = PyDict_GetItemString(dict, name); \
+ if (value != NULL) \
+ { \
+ result = PyUnicode_Check(value); \
+ if (result) \
+ out->dest = strdup((char *)PyUnicode_DATA(value)); \
+ else \
+ PyErr_Format(PyExc_TypeError, _("The %s property must be a string."), name); \
+ } \
+ } \
+ while (0)
+
+ result = true;
+
+ memset(out, 0, sizeof(x509_entries));
+
+ TRANSLATE_ENTRY("C", country);
+
+ if (result)
+ TRANSLATE_ENTRY("ST", state);
+
+ if (result)
+ TRANSLATE_ENTRY("L", locality);
+
+ if (result)
+ TRANSLATE_ENTRY("O", organisation);
+
+ if (result)
+ TRANSLATE_ENTRY("OU", organisational_unit);
+
+ if (result)
+ TRANSLATE_ENTRY("CN", common_name);
+
+ if (!result)
+ free_x509_entries(out);
+
+ return result;
+
+}
+
+
+/******************************************************************************
+* *
+* Paramètres : self = NULL car méthode statique. *
+* args = paramètres à transmettre à l'appel natif. *
+* *
+* Description : Crée un certificat de signature racine. *
+* *
+* Retour : Bilan de l'opération. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+static PyObject *py_certs_make_ca(PyObject *self, PyObject *args)
+{
+ PyObject *result; /* Désignation à retourner */
+ const char *dir; /* Répertoire de sortie */
+ const char *label; /* Nom principal du certificat */
+ unsigned long valid; /* Durée de validité en sec. */
+ PyObject *dict; /* Détails identitaires */
+ int ret; /* Bilan de lecture des args. */
+ x509_entries entries; /* Définition d'une identité */
+ bool status; /* Bilan d'une constitution */
+
+ ret = PyArg_ParseTuple(args, "sskO!", &dir, &label, &valid, &PyDict_Type, &dict);
+ if (!ret) return NULL;
+
+ status = py_certs_fill_x509_entries(dict, &entries);
+ if (!status) return NULL;
+
+ status = make_ca(dir, label, valid, &entries);
+
+ free_x509_entries(&entries);
+
+ result = status ? Py_True : Py_False;
+
+ Py_INCREF(result);
+
+ return result;
+
+}
+
+
+/******************************************************************************
+* *
+* Paramètres : self = NULL car méthode statique. *
+* args = paramètres à transmettre à l'appel natif. *
+* *
+* Description : Crée un certificat pour application. *
+* *
+* Retour : Bilan de l'opération. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+static PyObject *py_certs_make_request(PyObject *self, PyObject *args)
+{
+ PyObject *result; /* Désignation à retourner */
+ const char *dir; /* Répertoire de sortie */
+ const char *label; /* Nom principal du certificat */
+ PyObject *dict; /* Détails identitaires */
+ int ret; /* Bilan de lecture des args. */
+ x509_entries entries; /* Définition d'une identité */
+ bool status; /* Bilan d'une constitution */
+
+ ret = PyArg_ParseTuple(args, "ssO!", &dir, &label, &PyDict_Type, &dict);
+ if (!ret) return NULL;
+
+ status = py_certs_fill_x509_entries(dict, &entries);
+ if (!status) return NULL;
+
+ status = make_request(dir, label, &entries);
+
+ free_x509_entries(&entries);
+
+ result = status ? Py_True : Py_False;
+
+ Py_INCREF(result);
+
+ return result;
+
+}
+
+
+/******************************************************************************
+* *
+* Paramètres : self = NULL car méthode statique. *
+* args = paramètres à transmettre à l'appel natif. *
+* *
+* Description : Signe un certificat pour application. *
+* *
+* Retour : Bilan de l'opération. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+static PyObject *py_certs_sign_cert(PyObject *self, PyObject *args)
+{
+ PyObject *result; /* Désignation à retourner */
+ const char *csr; /* Requête à satisfaire */
+ const char *cacert; /* Certificat de confiance */
+ const char *cakey; /* Clef de ce certificat */
+ const char *cert; /* Certificat en sortie */
+ unsigned long valid; /* Durée de validité en sec. */
+ int ret; /* Bilan de lecture des args. */
+ bool status; /* Bilan de l'opération */
+
+ ret = PyArg_ParseTuple(args, "ssssk", &csr, &cacert, &cakey, &cert, &valid);
+ if (!ret) return NULL;
+
+ status = sign_cert(csr, cacert, cakey, cert, valid);
+
+ result = status ? Py_True : Py_False;
+
+ Py_INCREF(result);
+
+ return result;
+
+}
+
+
+/******************************************************************************
+* *
+* Paramètres : - *
+* *
+* Description : Fournit un accès à une définition de type à diffuser. *
+* *
+* Retour : Définition d'objet pour Python. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+PyTypeObject *get_python_certs_type(void)
+{
+ static PyMethodDef py_certs_methods[] = {
+
+ { "make_ca", py_certs_make_ca,
+ METH_VARARGS | METH_STATIC,
+ "make_ca(dir, label, valid, entries, /)\n--\n\nCreate a certificate authority."
+ },
+ { "make_request", py_certs_make_request,
+ METH_VARARGS | METH_STATIC,
+ "make_request(dir, label, entries, /)\n--\n\nCreate a certificate sign request."
+ },
+ { "sign_cert", py_certs_sign_cert,
+ METH_VARARGS | METH_STATIC,
+ "sign_cert(csr, cacert, cakey, cert, valid, /)\n--\n\nSign a certificate sign request.."
+ },
+ { NULL }
+
+ };
+
+ static PyGetSetDef py_certs_getseters[] = {
+
+ { NULL }
+
+ };
+
+ static PyTypeObject py_certs_type = {
+
+ PyVarObject_HEAD_INIT(NULL, 0)
+
+ .tp_name = "pychrysalide.analysis.db.certs",
+ .tp_basicsize = sizeof(PyGObject),
+
+ .tp_flags = Py_TPFLAGS_DEFAULT | Py_TPFLAGS_BASETYPE,
+
+ .tp_doc = "PyChrysalide support for DataBase certicates",
+
+ .tp_methods = py_certs_methods,
+ .tp_getset = py_certs_getseters,
+
+ };
+
+ return &py_certs_type;
+
+}
+
+
+/******************************************************************************
+* *
+* Paramètres : module = module dont la définition est à compléter. *
+* *
+* Description : Prend en charge l'objet 'pychrysalide....db.certs'. *
+* *
+* Retour : Bilan de l'opération. *
+* *
+* Remarques : - *
+* *
+******************************************************************************/
+
+bool register_python_certs(PyObject *module)
+{
+ PyTypeObject *py_certs_type; /* Type Python pour 'certs' */
+ int ret; /* Bilan d'un appel */
+
+ py_certs_type = get_python_certs_type();
+
+ py_certs_type->tp_new = PyType_GenericNew;
+
+ if (PyType_Ready(py_certs_type) != 0)
+ return false;
+
+ Py_INCREF(py_certs_type);
+ ret = PyModule_AddObject(module, "certs", (PyObject *)py_certs_type);
+
+ return (ret == 0);
+
+}
diff --git a/plugins/pychrysa/analysis/db/certs.h b/plugins/pychrysa/analysis/db/certs.h
new file mode 100644
index 0000000..f7537e5
--- /dev/null
+++ b/plugins/pychrysa/analysis/db/certs.h
@@ -0,0 +1,42 @@
+
+/* Chrysalide - Outil d'analyse de fichiers binaires
+ * certs.h - prototypes pour l'équivalent Python du fichier "analysis/db/certs.h"
+ *
+ * Copyright (C) 2017 Cyrille Bagard
+ *
+ * This file is part of Chrysalide.
+ *
+ * Chrysalide is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * Chrysalide is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+ */
+
+
+#ifndef _PLUGINS_PYCHRYSA_ANALYSIS_DB_CERTS_H
+#define _PLUGINS_PYCHRYSA_ANALYSIS_DB_CERTS_H
+
+
+#include <Python.h>
+#include <stdbool.h>
+
+
+
+/* Fournit un accès à une définition de type à diffuser. */
+PyTypeObject *get_python_certs_type(void);
+
+/* Prend en charge l'objet 'pychrysalide.analysis.db.certs'. */
+bool register_python_certs(PyObject *);
+
+
+
+#endif /* _PLUGINS_PYCHRYSA_ANALYSIS_DB_CERTSS_H */
diff --git a/plugins/pychrysa/analysis/db/module.c b/plugins/pychrysa/analysis/db/module.c
index 0ae6dda..eac3641 100644
--- a/plugins/pychrysa/analysis/db/module.c
+++ b/plugins/pychrysa/analysis/db/module.c
@@ -28,6 +28,7 @@
#include <assert.h>
+#include "certs.h"
#include "collection.h"
#include "item.h"
#include "items/module.h"
@@ -80,6 +81,7 @@ bool add_analysis_db_module_to_python_module(PyObject *super)
result = true;
+ result &= register_python_certs(module);
result &= register_python_db_collection(module);
result &= register_python_db_item(module);
generated by cgit v0.11.2-87-g4458 at 2024-11-04 02:33:59 (GMT)