pax_global_header00006660000000000000000000000064116461225270014520gustar00rootroot0000000000000052 comment=8fabbca54f01e781707c587062703abbaeee24d0 certificatepatrol-2.0.14/000077500000000000000000000000001164612252700153105ustar00rootroot00000000000000certificatepatrol-2.0.14/chrome.manifest000066400000000000000000000022501164612252700203140ustar00rootroot00000000000000content certpatrol content/ # L10n validator doesn't like English. It has to be American English. *shrug* #ocale certpatrol en locale/en/ locale certpatrol en-US locale/en/ locale certpatrol de locale/de/ locale certpatrol de-DE locale/de/ locale certpatrol it locale/it/ locale certpatrol it-IT locale/it/ # Firefox, Iceweasel, Flock overlay chrome://browser/content/browser.xul chrome://certpatrol/content/overlay.xul overlay chrome://browser/content/sanitize.xul chrome://certpatrol/content/sanitize.xul overlay chrome://pippki/content/certManager.xul chrome://certpatrol/content/certManager.xul # Mobile (Fennec) override chrome://certpatrol/content/prefs.xul chrome://certpatrol/content/prefs-mobile.xul application={a23983c0-fd0e-11dc-95ff-0800200c9a66} # Thunderbird, Mozilla Mail overlay chrome://messenger/content/messenger.xul chrome://certpatrol/content/overlay.xul # SeaMonkey overlay chrome://navigator/content/navigator.xul chrome://certpatrol/content/overlay.xul # Songbird overlay chrome://songbird/content/xul/mainScriptsOverlay.xul chrome://certpatrol/content/overlay.xul # chrome://chatzilla/content/chatzilla.xul and # chrome://calendar/content/calendar.xul maybe? certificatepatrol-2.0.14/content/000077500000000000000000000000001164612252700167625ustar00rootroot00000000000000certificatepatrol-2.0.14/content/CertPatrol.css000066400000000000000000000013311164612252700215510ustar00rootroot00000000000000@import url("chrome://global/skin/global.css"); .warning { padding: 1em 2em 1em 4em; font-weight: bold; } .warnCP { outline: 2px dashed yellow; outline-offset: 1px; -moz-outline-radius: 12px; } .panicCP { outline: 2px dashed red; outline-offset: 1px; -moz-outline-radius: 12px; } .infoCP { font-size: 140%; border: none; } .old { color: rgb(205,0,0); } .old.plain:before { width: 12px; float: left; text-align: center; content: "\002013"; } .new { color: rgb(0,205,0); } .new.plain:before { width: 12px; float: left; text-align: center; content: "+"; } .threat-0 { } .threat-1 { background-color: darkgreen; } .threat-2 { background-color: darkorange; } .threat-3 { background-color: darkred; } certificatepatrol-2.0.14/content/CertPatrol.js000066400000000000000000001026331164612252700214040ustar00rootroot00000000000000 /* ***** BEGIN LICENSE BLOCK ***** * Version: MPL 1.1/GPL 2.0/LGPL 2.1 * * ''Certificate Patrol'' was conceived by Carlo v. Loesch and * implemented by Aiko Barz, Gabor Adam Toth, Carlo v. Loesch and Mukunda Modell. * Wildcard functionality was contributed by Georg Koppen, JonDos GmbH 2010. * * http://patrol.psyced.org * * The contents of this file are subject to the Mozilla Public License Version * 1.1 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * http://www.mozilla.org/MPL/ * * Software distributed under the License is distributed on an "AS IS" basis, * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License * for the specific language governing rights and limitations under the * License. * * Alternatively, the contents of this file may be used under the terms of * either the GNU General Public License Version 2 or later (the "GPL"), or * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), * in which case the provisions of the GPL or the LGPL are applicable instead * of those above. If you wish to allow use of your version of this file only * under the terms of either the GPL or the LGPL, and not to allow others to * use your version of this file under the terms of the MPL, indicate your * decision by deleting the provisions above and replace them with the notice * and other provisions required by the GPL or the LGPL. If you do not delete * the provisions above, a recipient may use your version of this file under * the terms of any one of the MPL, the GPL or the LGPL. * * ***** END LICENSE BLOCK ***** */ // This source code is formatted according to half-indented KNF. var CertPatrol = { CHECK_ISSUER_ONLY: 1, extID: "CertPatrol@PSYC.EU", locale: {}, // Main onLoad: function() { this.initialized = true; var self = this; this.getMyVersion(function(version) { self.version = version; self.dbinit(); self.init(); }); }, onUnload: function() { this.unregisterObserver("http-on-examine-response"); }, // DB init dbinit: function() { this.dbh = null; this.db = {}; try { var file = Components.classes["@mozilla.org/file/directory_service;1"] .getService(Components.interfaces.nsIProperties) .get("ProfD", Components.interfaces.nsIFile); var storage = Components.classes["@mozilla.org/storage/service;1"] .getService(Components.interfaces.mozIStorageService); file.append("CertPatrol.sqlite"); // Must be checked before openDatabase() var exists = file.exists(); // Now, CertPatrol.sqlite exists this.dbh = storage.openDatabase(file); // CertPatrol.sqlite initialization if (!exists) { this.dbh.executeSimpleSQL("CREATE TABLE version (version INT, extversion TEXT)"); this.dbh.executeSimpleSQL("INSERT INTO version (version, extversion) VALUES (3, '"+ this.version +"')"); this.dbh.executeSimpleSQL( "CREATE TABLE certificates ("+ " host VARCHAR, commonName VARCHAR, organization VARCHAR, organizationalUnit VARCHAR, "+ " serialNumber VARCHAR, emailAddress VARCHAR, notBeforeGMT VARCHAR, notAfterGMT VARCHAR, "+ " issuerCommonName VARCHAR, issuerOrganization VARCHAR, issuerOrganizationUnit VARCHAR, "+ " md5Fingerprint VARCHAR, sha1Fingerprint VARCHAR, "+ " issuerMd5Fingerprint VARCHAR, issuerSha1Fingerprint VARCHAR, "+ " cert BLOB, flags INT, stored INT)"); } else { var stmt = this.dbh.createStatement("SELECT version FROM version"); stmt.executeStep(); var version = stmt.row.version; stmt.reset(); if (version < 2) { this.dbh.executeSimpleSQL("ALTER TABLE certificates ADD COLUMN issuerMd5Fingerprint VARCHAR"); this.dbh.executeSimpleSQL("ALTER TABLE certificates ADD COLUMN issuerSha1Fingerprint VARCHAR"); this.dbh.executeSimpleSQL("ALTER TABLE certificates ADD COLUMN cert BLOB"); this.dbh.executeSimpleSQL("UPDATE version SET version = 2"); } if (version < 3) { this.dbh.executeSimpleSQL("ALTER TABLE certificates ADD COLUMN flags INT"); this.dbh.executeSimpleSQL("ALTER TABLE certificates ADD COLUMN stored INT"); this.dbh.executeSimpleSQL("UPDATE version SET version = 3"); } var extversion; try { var stmt = this.dbh.createStatement("SELECT extversion FROM version"); stmt.executeStep(); extversion = stmt.row.extversion; stmt.reset(); } catch (e) { this.dbh.executeSimpleSQL("ALTER TABLE version ADD COLUMN extversion TEXT"); } if (extversion && this.version && extversion != this.version) { this.dbh.executeSimpleSQL("UPDATE version SET extversion='"+ this.version +"'"); // show release notes for stable versions after upgrade when at least minor version changes var re = /(.*?\..*?)\..*/; var vold = extversion.replace(re, "$1"), vnew = this.version.replace(re, "$1"); if (!/[a-z]/.test(this.version) && vold != vnew) { this.showRelNotes(); } } } // Prepared statements this.db = { selectAll: this.dbh.createStatement("SELECT * FROM certificates"), selectHost: this.dbh.createStatement("SELECT * FROM certificates WHERE host=?1"), selectWild: this.dbh.createStatement("SELECT * FROM certificates WHERE md5Fingerprint=?12 AND sha1Fingerprint=?13"), insert: this.dbh.createStatement( "INSERT INTO certificates ("+ " host, commonName, organization, organizationalUnit, serialNumber, emailAddress, "+ " notBeforeGMT, notAfterGMT, issuerCommonName, issuerOrganization, issuerOrganizationUnit, "+ " md5Fingerprint, sha1Fingerprint, issuerMd5Fingerprint, issuerSha1Fingerprint, cert, flags, stored) "+ "VALUES (?1,?2,?3,?4,?5,?6,?7,?8,?9,?10,?11,?12,?13,?14,?15,?16,?17,?18)"), update: this.dbh.createStatement( "UPDATE certificates SET "+ " commonName=?2, organization=?3, organizationalUnit=?4, serialNumber=?5, emailAddress=?6, "+ " notBeforeGMT=?7, notAfterGMT=?8, issuerCommonName=?9, issuerOrganization=?10, issuerOrganizationUnit=?11, "+ " md5Fingerprint=?12, sha1Fingerprint=?13, issuerMd5Fingerprint=?14, issuerSha1Fingerprint=?15, cert=?16, flags=?17, stored=?18 "+ "WHERE host=?1"), delHost: this.dbh.createStatement("DELETE FROM certificates WHERE host=?1"), delSince: this.dbh.createStatement("DELETE FROM certificates WHERE stored >= ?18"), delAll: this.dbh.createStatement("DELETE FROM certificates"), }; } catch (err) { this.warn("Error initializing SQLite operations: ", err); } }, dbclose: function() { try { if (this.dbh) { this.dbh.close(); this.dbh = null; } } catch (err) { this.log("CertPatrol: Error trying to close connection: ", err); } }, // Application trigger init: function() { var Cc = Components.classes, Ci = Components.interfaces; this.prefs = Cc["@mozilla.org/preferences-service;1"] .getService(Ci.nsIPrefService) .getBranch("certpatrol.") .QueryInterface(Ci.nsIPrefBranch2); this.registerObserver("http-on-examine-response"); }, getMyVersion: function(callback) { try { // Firefox 4 and later; Mozilla 2 and later Components.utils.import("resource://gre/modules/AddonManager.jsm"); AddonManager.getAddonByID(this.extID, function(addon) { callback(addon.version); }); } catch (ex) { // Firefox 3.6 and before; Mozilla 1.9.2 and before try { var em = Components.classes["@mozilla.org/extensions/manager;1"] .getService(Components.interfaces.nsIExtensionManager); var addon = em.getItemForID(this.extID); callback(addon.version); } catch (ex) { callback(); } } }, // helper functions for advanced patrol isodate: function(tim) { if (isNaN(tim)) { var iso = tim.replace(/^(\d\d)\/(\d\d)\/(\d+)/, "$3-$1-$2"); // upcoming Y3K bug, but you must delete this line before 2020 if (iso != tim) { if (iso[0] != '2') iso = "20"+ iso; return iso; } } var d = new Date(tim / 1000); return d.toLocaleFormat("%Y-%m-%d %H:%M:%S"); }, timedelta: function(tim) { if (!isNaN(tim)) tim /= 1000; var d = new Date(tim); // Y2K bug in Javascript... :) if (d.getFullYear() < 1990) d.setFullYear(100 + d.getFullYear()); var now = new Date(); //alert("Now is "+ now.getTime() +" and cert is "+ d.getTime()); return d.getTime() - now.getTime(); }, daysdelta: function(td) { td = Math.round(td / 86400000); // milliseconds per day return " ("+ this.psycText(this.locale[td < 0 ? "daysPast" : "daysFuture"], {_days: td < 0 ? -td : td}) +")"; }, isodatedelta: function(tim) { return tim ? this.isodate(tim) + this.daysdelta(this.timedelta(tim)) : ""; }, byteArrayToString: function(ba) { var s = ""; for (var i = 0; i < ba.length; i++) s += String.fromCharCode(ba[i]); return s; }, byteArrayToCert: function(ba) { var Cc = Components.classes, Ci = Components.interfaces; var c = "@mozilla.org/security/x509certdb;1", i= "nsIX509CertDB"; return Cc[c].getService(Ci[i]).constructX509FromBase64(window.btoa(this.byteArrayToString(ba.value))); }, findASN1Object: function (struc, re) { if (!struc) return; if (re.test(struc.displayName)) return struc; var s, Ci = Components.interfaces; try { s = struc.QueryInterface(Ci.nsIASN1Sequence); } catch (e) {} if (!s || !s.isValidContainer) return; for (var i=0; i 7777777777) { certobj.threat++; certobj.warn.notAfter_notdue = true; } // certificate due sometime soonish else if (natd > 0) certobj.warn.notAfter_due = true; } // now looking into the NEW certificate var td = this.timedelta(now.notBefore); if (td > 0) { // new certificate isn't valid yet certobj.warn.notBefore = true; certobj.threat += 2; } // further checks done by agent before we even get here // check if they have the same issuer if (old.cert && now.cert.issuer && now.cert.issuer.equals(old.cert.issuer)) { if (certobj.threat == 0 && certobj.flags & this.CHECK_ISSUER_ONLY) return; } else if (old.cert || (!old.cert && // old method, if we don't have a cert stored yet (now.issuerOrganization != old.issuerOrganization || now.issuerCommonName != old.issuerCommonName))) { certobj.warn.issuerCommonName = true; // companies pick different CAs all the time unfortunately certobj.threat++; // TODO: implement more refined CA comparisons like // has the root CA remained the same ( } // fetch suitable scare message if (certobj.threat > 3) certobj.threat = 3; // produce human readable expiration dates old.notBefore = this.isodatedelta(old.notBefore); old.notAfter = this.isodatedelta(old.notAfter); now.notBefore = this.isodatedelta(now.notBefore); now.notAfter = this.isodatedelta(now.notAfter); if (old.stored) old.stored = this.isodatedelta(old.stored * 1000); if (wild && certobj.threat == 0) { certobj.warn.wildcard = true; certobj.event = this.locale.wildEvent; } else { certobj.event = this.locale.changeEvent +" "+ this.locale["threat"+ certobj.threat]; } this.outchange(browser, certobj); // New certificate } else if (!found) { if (save) { // Store data stmt = this.db.insert; try { stmt.bindUTF8StringParameter( 0, certobj.host); stmt.bindUTF8StringParameter( 1, now.commonName); stmt.bindUTF8StringParameter( 2, now.organization); stmt.bindUTF8StringParameter( 3, now.organizationalUnit); stmt.bindUTF8StringParameter( 4, now.serialNumber); stmt.bindUTF8StringParameter( 5, now.emailAddress); stmt.bindUTF8StringParameter( 6, now.notBefore); stmt.bindUTF8StringParameter( 7, now.notAfter); stmt.bindUTF8StringParameter( 8, now.issuerCommonName); stmt.bindUTF8StringParameter( 9, now.issuerOrganization); stmt.bindUTF8StringParameter(10, now.issuerOrganizationUnit); stmt.bindUTF8StringParameter(11, now.md5Fingerprint); stmt.bindUTF8StringParameter(12, now.sha1Fingerprint); stmt.bindUTF8StringParameter(13, now.issuerMd5Fingerprint); stmt.bindUTF8StringParameter(14, now.issuerSha1Fingerprint); var der = now.cert.getRawDER({}); stmt.bindBlobParameter(15, der, der.length); stmt.bindInt64Parameter(16, 0); stmt.bindInt64Parameter(17, parseInt(new Date().getTime() / 1000)); stmt.execute(); } catch(err) { this.warn("Error trying to insert certificate for "+ certobj.host +": ", err); } finally { stmt.reset(); } } now.notBefore = this.isodatedelta(now.notBefore); now.notAfter = this.isodatedelta(now.notAfter); if (wild) { certobj.warn.wildcard = true; certobj.event = this.locale.wildEvent; } else { certobj.event = this.locale.newEvent; } this.outnew(browser, certobj); } }, // wildcardCertCheck contributed by Georg Koppen, JonDos GmbH 2010. Thanks! // We are using it differently, though. The JonDos version is less paranoid. // wildcardCertCheck: function(cert) { var stmt; // First, we check whether we have a wildcard certificate at all. If not // just return false and the new cert dialog will be schown. But even if // we have one but no SHA1 fingerprint we should show it for security's // sake... if (cert.commonName.charAt(0) === '*' && cert.md5Fingerprint && cert.sha1Fingerprint) { // We got one, check now if we have it already. If not, return false and // the certificate will be shown. Otherwise, return yes and the new cert // dialog will be omitted. try { stmt = this.db.selectWild; // starts counting from 0, so ?13 is 12 here. you gotta love it. stmt.bindUTF8StringParameter(11, cert.md5Fingerprint); stmt.bindUTF8StringParameter(12, cert.sha1Fingerprint); if (stmt.executeStep()) { return true; } else { // This case could occur as well if we have *.example.com and // foo.example.com with SHA1(1) saved and we find a cert with // *.example.com and bar.example.com and SHA1(2): We would show // the dialog even if we have already saved the wildcard cert. But // that's okay due to the changed SHA1 fingerprint, thus prioritizing // security and not convenience... return false; } } catch (err) { this.warn("Error trying to check wildcard certificate "+ cert.commonName +": ", err); } finally { stmt.reset(); } } else return false; }, // accept changed cert saveCert: function(certobj) { var stmt = this.db.update; var cert = certobj.now.cert; try { stmt.bindUTF8StringParameter( 0, certobj.host); stmt.bindUTF8StringParameter( 1, cert.commonName); stmt.bindUTF8StringParameter( 2, cert.organization); stmt.bindUTF8StringParameter( 3, cert.organizationalUnit); stmt.bindUTF8StringParameter( 4, cert.serialNumber); stmt.bindUTF8StringParameter( 5, cert.emailAddress); stmt.bindUTF8StringParameter( 6, cert.validity.notBefore); stmt.bindUTF8StringParameter( 7, cert.validity.notAfter); stmt.bindUTF8StringParameter( 8, cert.issuerCommonName); stmt.bindUTF8StringParameter( 9, cert.issuerOrganization); stmt.bindUTF8StringParameter(10, cert.issuerOrganizationUnit); stmt.bindUTF8StringParameter(11, cert.md5Fingerprint); stmt.bindUTF8StringParameter(12, cert.sha1Fingerprint); if (cert.issuer) { stmt.bindUTF8StringParameter(13, cert.issuer.md5Fingerprint); stmt.bindUTF8StringParameter(14, cert.issuer.sha1Fingerprint); } var der = cert.getRawDER({}); stmt.bindBlobParameter(15, der, der.length); stmt.bindInt64Parameter(16, certobj.flags); stmt.bindInt64Parameter(17, parseInt(new Date().getTime() / 1000)); stmt.execute(); } catch(err) { this.warn("Error trying to update certificate: ", err); } finally { stmt.reset(); } return true; }, // reject new cert delCert: function(host) { var stmt; try { stmt = this.db.delHost; stmt.bindUTF8StringParameter(0, host); stmt.executeStep(); } catch (err) { this.warn("Error while trying to remove certificate: ", err); } finally { stmt.reset(); } }, delCerts: function(hosts) { if (!hosts || !hosts.length) return; if (!this.dbh) this.dbinit(); var params = []; for (var i=1; i<=hosts.length; i++) params.push('?'+i); try { var stmt = this.dbh.createStatement("DELETE FROM certificates WHERE host IN ("+ params.join(",") +")"); for (var i=0; i 0) { timeout = setTimeout(function() { if (n.parentNode) notifyBox.removeNotification(n); n = null; }, t * 1000); } } catch (err) {} } if (popup) win.openDialog("chrome://certpatrol/content/new.xul", "_blank", "chrome,dialog,modal", certobj, CertPatrol); }, outchange: function(browser, certobj) { var forcePopup = false; try { if (this.prefs) forcePopup = this.prefs.getBoolPref("popup.change"); } catch (err) {} var win = browser && browser.contentWindow ? browser.contentWindow : window; var notifyBox = this.getNotificationBox(browser); var popup = forcePopup || certobj.threat > 1 || !notifyBox; if (notifyBox && !popup) { var priority = [ notifyBox.PRIORITY_INFO_LOW, notifyBox.PRIORITY_INFO_HIGH, notifyBox.PRIORITY_WARNING_HIGH, notifyBox.PRIORITY_CRITICAL_HIGH ]; var warn = ""; for (var k in certobj.warn) if (this.locale["warn_"+k]) warn += " *** " + this.locale["warn_"+k]; var timeout; var n = notifyBox.appendNotification( "(CertPatrol) "+ certobj.host +": "+ certobj.event +" "+ certobj.now.commonName +". "+ this.locale.issuedBy +" "+ (certobj.now.issuerOrganization || certobj.now.issuerCommonName) +" "+ warn, certobj.host, null, priority[certobj.threat], [{ label: this.locale.accept, accessKey: this.locale.accept_key, callback: function(msg, btn) { if (timeout) clearTimeout(timeout); CertPatrol.saveCert(certobj); } }, { label: this.locale.viewDetails, accessKey: this.locale.viewDetails_key, callback: function(msg, btn) { if (timeout) clearTimeout(timeout); win.openDialog("chrome://certpatrol/content/change.xul", "_blank", "chrome,dialog,modal", certobj, CertPatrol); } }]); n.persistence = 10; // make sure it stays visible after redirects if (certobj.threat == 0) { try { var t = this.prefs.getIntPref("notify.timeout"); if (t > 0) { timeout = setTimeout(function() { if (n.parentNode) { notifyBox.removeNotification(n); CertPatrol.saveCert(certobj); } n = certobj = null; }, t * 1000); } } catch (err) {} } } if (popup) win.openDialog("chrome://certpatrol/content/change.xul", "_blank", "chrome,dialog,modal", certobj, CertPatrol); }, getNotificationBox: function (win) { if (typeof gBrowser != "undefined") return gBrowser.getNotificationBox(win); if (window.getNotificationBox) return window.getNotificationBox(); // does not seem to work }, warn: function(result, error) { if (error) result += error +" at "+ error.fileName +" line "+ error.lineNumber; window.openDialog("chrome://certpatrol/content/warning.xul", "_blank", "chrome,dialog,modal", result); this.log("CertPatol: "+ result); }, log: function(s, a) { if (a && a.length && a.join) s += " " + a.join(", "); Components.classes["@mozilla.org/consoleservice;1"].getService(Components.interfaces.nsIConsoleService).logStringMessage(s); }, // functions for the new & change dialogs addCertChain: function(node, cert) { if (!cert) return; var chain = cert.getChain(); var text = ""; for (var i = chain.length - 1; i >= 0; i--) { var cert = chain.queryElementAt(i, Components.interfaces.nsIX509Cert); text += Array((chain.length - i - 1) * 2 + 1).join(" ") + "- " + (cert.commonName || cert.windowTitle) + (i > 0 ? "\n" : ""); } node.value = text; node.clickSelectsAll = true; node.setAttribute("rows", chain.length); }, viewCert: function(cert, parent) { Components.classes["@mozilla.org/nsCertificateDialogs;1"] .getService(Components.interfaces.nsICertificateDialogs) .viewCert(parent, cert); }, psycText: function(template, vars) { return template.replace(/\[(\w+)\]/g, function(match, name) { return name in vars ? vars[name] : match; }); }, showRelNotes: function() { var url = "chrome://certpatrol/content/pages/version.html"; window.openDialog(url, "_blank", "width=700,height=600"); }, showCertMgr: function() { document.documentElement.openWindow("mozilla:certmanager", "chrome://pippki/content/certManager.xul", "", null); }, showSanitizer: function() { var browserGlue = Components.classes["@mozilla.org/browser/browserglue;1"]. getService(Components.interfaces.nsIBrowserGlue); browserGlue.sanitize(window); }, }; certificatepatrol-2.0.14/content/certManager.js000066400000000000000000000231371164612252700215560ustar00rootroot00000000000000/* ***** BEGIN LICENSE BLOCK ***** * Version: MPL 1.1/GPL 2.0/LGPL 2.1 * * ''Certificate Patrol'' was conceived by Carlo v. Loesch and * implemented by Aiko Barz, Mukunda Modell, Carlo v. Loesch and Gabor Adam Toth. * * http://patrol.psyced.org * * The contents of this file are subject to the Mozilla Public License Version * 1.1 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * http://www.mozilla.org/MPL/ * * Software distributed under the License is distributed on an "AS IS" basis, * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License * for the specific language governing rights and limitations under the * License. * * Alternatively, the contents of this file may be used under the terms of * either the GNU General Public License Version 2 or later (the "GPL"), or * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), * in which case the provisions of the GPL or the LGPL are applicable instead * of those above. If you wish to allow use of your version of this file only * under the terms of either the GPL or the LGPL, and not to allow others to * use your version of this file under the terms of the MPL, indicate your * decision by deleting the provisions above and replace them with the notice * and other provisions required by the GPL or the LGPL. If you do not delete * the provisions above, a recipient may use your version of this file under * the terms of any one of the MPL, the GPL or the LGPL. * * ***** END LICENSE BLOCK ***** */ var CP_CertManager = { locale: {}, inited: false, grouping: true, log: CertPatrol.log, onLoad: function() { var tree = this.tree = document.getElementById('CertPatrol-tree'); var tabbox = this.tabbox = document.getElementById("certmanagertabs"); var tab = this.tab = document.getElementById("CertPatrol_tab"); var panel = this.panel = document.getElementById("CertPatrolCerts"); this.buttons = { view: document.getElementById("CertPatrol_viewButton"), delete: document.getElementById("CertPatrol_deleteButton"), setIssuerOnly: document.getElementById("CertPatrol_setIssuerOnlyButton"), unsetIssuerOnly: document.getElementById("CertPatrol_unsetIssuerOnlyButton"), } tabbox.tabpanels.appendChild(panel); if (tabbox.tabs.selectedItem == tab) { tabbox.tabs.selectedIndex = 0; tabbox.tabs.selectedItem = tab; this.init(); } tabbox.addEventListener("select", function(event) { if (tabbox.tabs.selectedItem != tab) return; CP_CertManager.init(); }, false); }, init: function() { if (this.inited) return; this.tree.focus(); this.loadCerts(); this.inited = true; }, loadCerts: function() { this.certs = CertPatrol.getAllCerts(); this.addCerts(); }, addCerts: function() { var Cc = Components.classes, Ci = Components.interfaces; var rows = []; if (this.grouping) { var tree = {}; for (var i=0; i 1) { issuer = chain.queryElementAt(chain.length - 1, Ci.nsIX509Cert); key = ['\0', issuer.organization, issuer.organizationUnit, issuer.sha1Fingerprint, issuer.md5Fingerprint].join('|'); } else { issuer = c.issuer; key = [c.issuer.organization, c.issuer.organizationUnit].join('|'); } if (!tree[key]) tree[key] = {children: []}; tree[key].cert = issuer; tree[key].children.push(c); } var keys = []; for (var k in tree) keys.push(k); keys.sort(function(a, b) { a = a.toLowerCase(); b = b.toLowerCase(); return a > b ? 1 : a < b ? -1 : 0 }); for (var i=0; i 0) { for (var i=0; i b.data[key] ? 1 : a.data[key] < b.data[key] ? -1 : 0; else ret = acert[key] > bcert[key] ? 1 : acert[key] < bcert[key] ? -1 : 0; } else { var aval = acert[key[0]][key[1]]; var bval = bcert[key[0]][key[1]]; if (key[0] == 'validity') { if (typeof aval == 'string' && aval.indexOf(' ') >= 0) aval = 0; if (typeof bval == 'string' && bval.indexOf(' ') >= 0) bval = 0; } ret = aval > bval ? 1 : aval < bval ? -1 : 0; } return ret * order; }; if (!this.grouping) return this. _rowMap.sort(sort); for (var i=0; i %certpatrol; %pippki; ]> &certManager.description;