[prev in list] [next in list] [prev in thread] [next in thread]
List: kde-core-devel
Subject: Re: Qt Cryptographic Architecture (QCA) bugs
From: Matt Rogers <mattr () kde ! org>
Date: 2008-08-13 20:27:20
Message-ID: 2A5337AA-2E5B-482A-A0F2-4BD99C1896C9 () kde ! org
[Download RAW message or body]
Justin Karneges is the person to contact: justin@affinix.com is valid
email address if i remember correctly.
I've taken the liberty of forwarding your email to him.
Matt
On Aug 11, 2008, at 6:41 PM, Kjell Rune Skaaraas wrote:
> Hello,
>
>
> I'm looking to come in contact with someone regarding the Qt
> Cryptographic Architecture library in KDE. I couldn't find any
> "Contact us" on either of the websites:
>
>
> http://api.kde.org/kdesupport-api/kdesupport-apidocs/qca/html/
>
> http://delta.affinix.com/qca/
>
>
> There seems to be two different issues related to the
> CertificateAuthority class in the latest 2.0.1 version. First, there
> is a function "createCertificate" in the header and documentation
> that is not in the source and causes linker error if you try to use
> it. However, I am also unable to use the "signRequest" function to
> successfully sign a certificate. I have made a simple test case and
> since it's basicly one file I'll quote it here.
>
>
> #include <QtCrypto>
> #include <QtDebug>
>
> TestCaSigning::TestCaSigning()
> {
> QCA::Initializer init;
> QCA::PrivateKey caKey = QCA::KeyGenerator().createRSA( 512 );
> QCA::CertificateOptions caOpts;
> caOpts.setAsCA();
> caOpts.setValidityPeriod( QDateTime( QDate(2008, 1, 1) ),
> QDateTime( QDate(2008, 12, 31) ) );
> QCA::Certificate caCert = QCA::Certificate( caOpts, caKey );
> QCA::CertificateAuthority ca( caCert, caKey, QString() );
>
> QCA::PrivateKey testKey = QCA::KeyGenerator().createRSA( 512 );
> QCA::CertificateOptions testOpts;
> testOpts.setValidityPeriod( QDateTime( QDate(2008, 1, 1) ),
> QDateTime( QDate(2008, 12, 31) ) );
> QCA::CertificateRequest testReq =
> QCA::CertificateRequest( testOpts, testKey );
> QCA::Certificate testCert = ca.signRequest( testReq,
> QDateTime( QDate( 2008, 12, 31 ) ) );
>
> qDebug() << __FUNCTION__ << testCert.isSelfSigned() <<
> testCert.subjectKeyId().toHex() << testCert.issuerKeyId().toHex();
>
> // Leads to linker error:
> //ca.createCertificate( testReq.subjectPublicKey(), testOpts );
> }
>
> The result of this is that I get a self-signed certificate?! Either
> getting a null certificate (something went wrong) or a signed
> certificate would be fine, but the result does not make any sense to
> me. Hopefully one of you can help me or at least point me to whom I
> should be asking/reporting this to.
>
>
> Regards,
>
> Kjell Rune Skaaraas
>
>
>
> Alt i ett. Få Yahoo! Mail med adressekartotek, kalender og notisblokk.
Matt
[Attachment #3 (text/html)]
<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; \
-webkit-line-break: after-white-space; "><div>Justin Karneges is the person to \
contact: <a href="mailto:justin@affinix.com">justin@affinix.com</a> is valid email \
address if i remember correctly.</div><div><br></div><div>I've taken the liberty of \
forwarding your email to him.</div><div><br></div><div>Matt</div><br><div><div>On Aug \
11, 2008, at 6:41 PM, Kjell Rune Skaaraas wrote:</div><br \
class="Apple-interchange-newline"><blockquote type="cite"><table cellspacing="0" \
cellpadding="0" border="0"><tbody><tr><td valign="top" style="font: \
inherit;"><p>Hello,</p><div><br class="webkit-block-placeholder"></div><p>I'm looking \
to come in contact with someone regarding the Qt Cryptographic Architecture library \
in KDE. I couldn't find any "Contact us" on either of the websites:</p><div><br \
class="webkit-block-placeholder"></div><p><a \
href="http://api.kde.org/kdesupport-api/kdesupport-apidocs/qca/html/">http://api.kde.org/kdesupport-api/kdesupport-apidocs/qca/html/</a></p><p><a \
href="http://delta.affinix.com/qca/">http://delta.affinix.com/qca/</a></p><div><br \
class="webkit-block-placeholder"></div><p>There seems to be two different issues \
related to the CertificateAuthority class in the latest 2.0.1 version. First, there \
is a function "createCertificate" in the header and documentation that is not in the \
source and causes linker error if you try to use it. However, I am also unable to use \
the "signRequest" function to successfully sign a certificate. I have made a simple \
test case and since it's basicly one file I'll quote it here.</p><div><br \
class="webkit-block-placeholder"></div><p>#include <QtCrypto><br>#include \
<QtDebug><br><br>TestCaSigning::TestCaSigning()<br>{<br> QCA::Initializer \
init;<br> QCA::PrivateKey caKey = QCA::KeyGenerator().createRSA( 512 \
);<br> QCA::CertificateOptions caOpts;<br> \
caOpts.setAsCA();<br> caOpts.setValidityPeriod( QDateTime( QDate(2008, 1, 1) \
), QDateTime( QDate(2008, 12, 31) ) );<br> QCA::Certificate caCert = \
QCA::Certificate( caOpts, caKey );<br> QCA::CertificateAuthority ca( caCert, \
caKey, QString() );<br><br> QCA::PrivateKey testKey = \
QCA::KeyGenerator().createRSA( 512 );<br> QCA::CertificateOptions \
testOpts;<br> testOpts.setValidityPeriod( QDateTime( QDate(2008, 1, 1) ), \
QDateTime( QDate(2008, 12, 31) ) );<br> QCA::CertificateRequest testReq = \
QCA::CertificateRequest( testOpts, testKey );<br> QCA::Certificate testCert = \
ca.signRequest( testReq, QDateTime( QDate( 2008, 12, 31 ) ) );<br> \
<br> qDebug() << __FUNCTION__ << testCert.isSelfSigned() \
<< testCert.subjectKeyId().toHex() << \
testCert.issuerKeyId().toHex();<br> <br> // Leads to linker \
error:<br> //ca.createCertificate( testReq.subjectPublicKey(), testOpts \
);<br>}<br><br>The result of this is that I get a self-signed certificate?! Either \
getting a null certificate (something went wrong) or a signed certificate would be \
fine, but the result does not make any sense to me. Hopefully one of you can help me \
or at least point me to whom I should be asking/reporting this to.<br></p><div><br \
class="webkit-block-placeholder"></div><p>Regards,</p><p>Kjell Rune \
Skaaraas</p></td></tr></tbody></table><br> <hr \
size="1"><br><table><tbody><tr><td>Alt i ett. Få <a \
href="http://no.mail.yahoo.com">Yahoo! Mail</a> med adressekartotek, kalender og \
notisblokk.</td></tr></tbody></table></blockquote></div><br><div> <span \
class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); \
font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; \
font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; \
text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; \
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; \
-webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; \
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; \
color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; \
font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: \
normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; \
widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; \
-webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; \
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div \
style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: \
after-white-space; "><div>Matt</div></div></span></div></span> \
</div><br></body></html>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic