Bug 220805 - [sec] Need API for showing certificates to a UI
Summary: [sec] Need API for showing certificates to a UI
Status: RESOLVED FIXED
Alias: None
Product: Equinox
Classification: Eclipse Project
Component: Security (show other bugs)
Version: 3.4   Edit
Hardware: All All
: P3 normal (vote)
Target Milestone: 3.4 M7   Edit
Assignee: Matt Flaherty CLA
QA Contact:
URL:
Whiteboard:
Keywords: api
Depends on:
Blocks: 208891 213192 215103
  Show dependency tree
 
Reported: 2008-02-28 14:00 EST by Tim Mok CLA
Modified: 2008-05-23 09:11 EDT (History)
2 users (show)

See Also:

Attachments
WIP - Trust Management (27.88 KB, patch)
2008-04-01 15:44 EDT, Tim Mok CLA 		no flags Details | Diff
Adds certificate API to provisional package (53.24 KB, patch)
2008-04-02 15:53 EDT, Matt Flaherty CLA 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Tim Mok CLA 2008-02-28 14:00:07 EST 
Some API in security needs to be exposed for building UI to show certificates. The current requirement should be a TableContentProvider that can show the certificate's subject and exposing the X500PrincipleHelper to parse the a certificate's fields.
Comment 1 Tim Mok CLA 2008-03-06 11:08:25 EST 
I'll also need something like a cross between the X509CertificateViewDialog and ConfirmationDialog for bug 215929. Just need to be able to present the user with a certificate in a similar way to X509CertificateViewDialog and have confirmation buttons like the ConfirmationDialog. The dialog should also be able to use a String to display a message to the user. The current message in ConfirmationDialog is only useful for removing a certificate.
Comment 2 John Arthorne CLA 2008-03-17 11:45:19 EDT 
Time is running out with the API freeze next week. Will this make it in?
Comment 3 Oleg Besedin CLA 2008-03-18 13:11:25 EDT 
I think you guys decided that this will be "internal.provisional" non-API with consumers being x-friends?
Comment 4 Tim Mok CLA 2008-04-01 11:26:29 EDT 
Is there any update on opening up some ui pieces through x-friends? I want to get my patch depending on this committed early in M7.
Comment 5 Matt Flaherty CLA 2008-04-01 14:15:32 EDT 
Tim, can you post a patch so that I can tie your code together with a reasonable API? Or is the API that we have sufficient, and we just need the x-friends and be done with it?
Comment 6 Tim Mok CLA 2008-04-01 15:44:40 EDT 
Created attachment 94423 [details]
WIP - Trust Management

Here's a patch of my current progress. The TrustCertificateDialog still needs a detailed certificate dialog that I would let the user open up.

I think I may be able to get away with just an x-friends with the current API. X509CertificateAttributeLabelProvider might need some tweaking to provide more user-friendly output. I think it just spits out a big scary String.

Ideally, it would be good to have a dialog that I could use and displays a certificate and its parents. Displaying just the certificate's provider name for each certificate in the chain should be fine for now.
Comment 7 Matt Flaherty CLA 2008-04-02 15:53:48 EDT 
Created attachment 94611 [details]
Adds certificate API to provisional package

Also collapses the provisional API to one package for now.
Comment 8 Matt Flaherty CLA 2008-04-02 15:58:43 EDT 
Patch to move into provisional package committed to HEAD. Keeping open as we refine.
Comment 9 Matt Flaherty CLA 2008-04-15 14:14:05 EDT 
The work that this blocks is ongoing into M7.
Comment 10 Matt Flaherty CLA 2008-05-01 09:50:12 EDT 
Resolving as fixed. P2 has added support for signing using this provisional API.