2 * Copyright © 2016-2018 Soren Stoutner <soren@stoutner.com>.
4 * This file is part of Privacy Browser <https://www.stoutner.com/privacy-browser>.
6 * Privacy Browser is free software: you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation, either version 3 of the License, or
9 * (at your option) any later version.
11 * Privacy Browser is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with Privacy Browser. If not, see <http://www.gnu.org/licenses/>.
20 package com.stoutner.privacybrowser.dialogs;
22 import android.annotation.SuppressLint;
23 import android.app.AlertDialog;
24 import android.app.Dialog;
25 import android.app.DialogFragment;
26 import android.graphics.drawable.BitmapDrawable;
27 import android.graphics.drawable.Drawable;
28 import android.net.Uri;
29 import android.net.http.SslCertificate;
30 import android.os.Bundle;
31 import android.text.SpannableStringBuilder;
32 import android.text.Spanned;
33 import android.text.style.ForegroundColorSpan;
34 import android.view.LayoutInflater;
35 import android.view.WindowManager;
36 import android.widget.TextView;
38 import com.stoutner.privacybrowser.activities.MainWebViewActivity;
39 import com.stoutner.privacybrowser.R;
41 import java.text.DateFormat;
42 import java.util.Calendar;
43 import java.util.Date;
45 // `@SuppressLing("InflateParams")` removes the warning about using `null` as the parent view group when inflating the `AlertDialog`.
46 @SuppressLint("InflateParams")
47 public class ViewSslCertificateDialog extends DialogFragment {
48 public Dialog onCreateDialog(Bundle savedInstanceState) {
49 // Get the activity's layout inflater.
50 LayoutInflater layoutInflater = getActivity().getLayoutInflater();
52 // Create a drawable version of the favorite icon.
53 Drawable favoriteIconDrawable = new BitmapDrawable(getResources(), MainWebViewActivity.favoriteIconBitmap);
55 // Use a builder to create the alert dialog.
56 AlertDialog.Builder dialogBuilder;
58 // Set the style according to the theme.
59 if (MainWebViewActivity.darkTheme) {
60 dialogBuilder = new AlertDialog.Builder(getActivity(), R.style.PrivacyBrowserAlertDialogDark);
62 dialogBuilder = new AlertDialog.Builder(getActivity(), R.style.PrivacyBrowserAlertDialogLight);
66 dialogBuilder.setIcon(favoriteIconDrawable);
68 // Set a listener on the negative button. Using `null` as the listener closes the dialog without doing anything else.
69 dialogBuilder.setNegativeButton(R.string.close, null);
71 // Check to see if the website is encrypted.
72 if (MainWebViewActivity.sslCertificate == null) { // The website is not encrypted.
74 dialogBuilder.setTitle(R.string.unencrypted_website);
76 // Set the Layout. The parent view is `null` because it will be assigned by `AlertDialog`.
77 dialogBuilder.setView(layoutInflater.inflate(R.layout.unencrypted_website, null));
79 // Create an alert dialog from the alert dialog builder.
80 final AlertDialog alertDialog = dialogBuilder.create();
82 // Disable screenshots if not allowed.
83 if (!MainWebViewActivity.allowScreenshots) {
84 // Remove the warning below that `getWindow()` might be null.
85 assert alertDialog.getWindow() != null;
87 // Disable screenshots.
88 alertDialog.getWindow().addFlags(WindowManager.LayoutParams.FLAG_SECURE);
91 // `onCreateDialog` requires the return of an `AlertDialog`.
94 } else { // Display the SSL certificate information
96 dialogBuilder.setTitle(R.string.ssl_certificate);
98 // Set the layout. The parent view is `null` because it will be assigned by `AlertDialog`.
99 dialogBuilder.setView(layoutInflater.inflate(R.layout.view_ssl_certificate, null));
101 // Create an alert dialog from the builder.
102 final AlertDialog alertDialog = dialogBuilder.create();
104 // Disable screenshots if not allowed.
105 if (!MainWebViewActivity.allowScreenshots) {
106 // Remove the warning below that `getWindow()` might be null.
107 assert alertDialog.getWindow() != null;
109 // Disable screenshots.
110 alertDialog.getWindow().addFlags(WindowManager.LayoutParams.FLAG_SECURE);
113 // The alert dialog must be shown before items in the layout can be modified.
116 // Get handles for the `TextViews`.
117 TextView domainTextView = alertDialog.findViewById(R.id.domain);
118 TextView issuedToCNameTextView = alertDialog.findViewById(R.id.issued_to_cname);
119 TextView issuedToONameTextView = alertDialog.findViewById(R.id.issued_to_oname);
120 TextView issuedToUNameTextView = alertDialog.findViewById(R.id.issued_to_uname);
121 TextView issuedByCNameTextView = alertDialog.findViewById(R.id.issued_by_cname);
122 TextView issuedByONameTextView = alertDialog.findViewById(R.id.issued_by_oname);
123 TextView issuedByUNameTextView = alertDialog.findViewById(R.id.issued_by_uname);
124 TextView startDateTextView = alertDialog.findViewById(R.id.start_date);
125 TextView endDateTextView = alertDialog.findViewById(R.id.end_date);
128 String domainLabel = getString(R.string.domain_label) + " ";
129 String cNameLabel = getString(R.string.common_name) + " ";
130 String oNameLabel = getString(R.string.organization) + " ";
131 String uNameLabel = getString(R.string.organizational_unit) + " ";
132 String startDateLabel = getString(R.string.start_date) + " ";
133 String endDateLabel = getString(R.string.end_date) + " ";
135 // Parse `formattedUrlString` to a `URI`.
136 Uri uri = Uri.parse(MainWebViewActivity.formattedUrlString);
138 // Extract the domain name from `uri`.
139 String domainString = uri.getHost();
141 // Get the SSL certificate.
142 SslCertificate sslCertificate = MainWebViewActivity.sslCertificate;
144 // Get the strings from the SSL certificate.
145 String issuedToCNameString = sslCertificate.getIssuedTo().getCName();
146 String issuedToONameString = sslCertificate.getIssuedTo().getOName();
147 String issuedToUNameString = sslCertificate.getIssuedTo().getUName();
148 String issuedByCNameString = sslCertificate.getIssuedBy().getCName();
149 String issuedByONameString = sslCertificate.getIssuedBy().getOName();
150 String issuedByUNameString = sslCertificate.getIssuedBy().getUName();
151 Date startDate = sslCertificate.getValidNotBeforeDate();
152 Date endDate = sslCertificate.getValidNotAfterDate();
154 // Create a `SpannableStringBuilder` for each `TextView` that needs multiple colors of text.
155 SpannableStringBuilder domainStringBuilder = new SpannableStringBuilder(domainLabel + domainString);
156 SpannableStringBuilder issuedToCNameStringBuilder = new SpannableStringBuilder(cNameLabel + issuedToCNameString);
157 SpannableStringBuilder issuedToONameStringBuilder = new SpannableStringBuilder(oNameLabel + issuedToONameString);
158 SpannableStringBuilder issuedToUNameStringBuilder = new SpannableStringBuilder(uNameLabel + issuedToUNameString);
159 SpannableStringBuilder issuedByCNameStringBuilder = new SpannableStringBuilder(cNameLabel + issuedByCNameString);
160 SpannableStringBuilder issuedByONameStringBuilder = new SpannableStringBuilder(oNameLabel + issuedByONameString);
161 SpannableStringBuilder issuedByUNameStringBuilder = new SpannableStringBuilder(uNameLabel + issuedByUNameString);
162 SpannableStringBuilder startDateStringBuilder = new SpannableStringBuilder(startDateLabel + DateFormat.getDateTimeInstance(DateFormat.MEDIUM, DateFormat.LONG).format(startDate));
163 SpannableStringBuilder endDateStringBuilder = new SpannableStringBuilder(endDateLabel + DateFormat.getDateTimeInstance(DateFormat.MEDIUM, DateFormat.LONG).format(endDate));
165 // Create a red `ForegroundColorSpan`. We have to use the deprecated `getColor` until API >= 23.
166 @SuppressWarnings("deprecation") ForegroundColorSpan redColorSpan = new ForegroundColorSpan(getResources().getColor(R.color.red_a700));
168 // Create a blue `ForegroundColorSpan`.
169 ForegroundColorSpan blueColorSpan;
171 // Set `blueColorSpan` according to the theme. We have to use the deprecated `getColor()` until API >= 23.
172 if (MainWebViewActivity.darkTheme) {
173 //noinspection deprecation
174 blueColorSpan = new ForegroundColorSpan(getResources().getColor(R.color.blue_400));
176 //noinspection deprecation
177 blueColorSpan = new ForegroundColorSpan(getResources().getColor(R.color.blue_700));
180 // Formet the `domainString` and `issuedToCName` colors.
181 if (domainString.equals(issuedToCNameString)) { // `domainString` and `issuedToCNameString` match.
182 // Set the strings to be blue.
183 domainStringBuilder.setSpan(blueColorSpan, domainLabel.length(), domainStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
184 issuedToCNameStringBuilder.setSpan(blueColorSpan, cNameLabel.length(), issuedToCNameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
185 } else if(issuedToCNameString.startsWith("*.")){ // `issuedToCNameString` begins with a wildcard.
186 // Remove the initial `*.`.
187 String baseCertificateDomain = issuedToCNameString.substring(2);
189 // Setup a copy of `domainString` to test subdomains.
190 String domainStringSubdomain = domainString;
192 // Initialize `domainNamesMatch`.
193 boolean domainNamesMatch = false;
195 // Check all the subdomains in `domainStringSubdomain` against `baseCertificateDomain`.
196 while (!domainNamesMatch && domainStringSubdomain.contains(".")) { // Stop checking if we know that `domainNamesMatch` is `true` or if we run out of `.`.
197 // Test the `domainStringSubdomain` against `baseCertificateDomain`.
198 if (domainStringSubdomain.equals(baseCertificateDomain)) {
199 domainNamesMatch = true;
202 // Strip out the lowest subdomain of `certificateCommonNameSubdomain`.
203 domainStringSubdomain = domainStringSubdomain.substring(domainStringSubdomain.indexOf(".") + 1);
206 // Format the domain and issued to Common Name according to `domainNamesMatch`.
207 if (domainNamesMatch) { // `domainString` is a subdomain of the wildcard `issuedToCNameString`.
208 // Set the strings to be blue.
209 domainStringBuilder.setSpan(blueColorSpan, domainLabel.length(), domainStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
210 issuedToCNameStringBuilder.setSpan(blueColorSpan, cNameLabel.length(), issuedToCNameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
211 } else { // `domainString` is not a subdomain of the wildcard `issuedToCNameString`.
212 // Set the string to be red.
213 domainStringBuilder.setSpan(redColorSpan, domainLabel.length(), domainStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
214 issuedToCNameStringBuilder.setSpan(redColorSpan, cNameLabel.length(), issuedToCNameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
216 } else { // The strings do not match and `issuedToCNameString` does not begin with a wildcard.
217 // Set the strings to be red.
218 domainStringBuilder.setSpan(redColorSpan, domainLabel.length(), domainStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
219 issuedToCNameStringBuilder.setSpan(redColorSpan, cNameLabel.length(), issuedToCNameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
222 // Setup the issued to and issued by spans to display the certificate information in blue. `SPAN_INCLUSIVE_INCLUSIVE` allows the span to grow in either direction.
223 issuedToONameStringBuilder.setSpan(blueColorSpan, oNameLabel.length(), issuedToONameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
224 issuedToUNameStringBuilder.setSpan(blueColorSpan, uNameLabel.length(), issuedToUNameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
225 issuedByCNameStringBuilder.setSpan(blueColorSpan, cNameLabel.length(), issuedByCNameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
226 issuedByONameStringBuilder.setSpan(blueColorSpan, oNameLabel.length(), issuedByONameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
227 issuedByUNameStringBuilder.setSpan(blueColorSpan, uNameLabel.length(), issuedByUNameStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
229 Date currentDate = Calendar.getInstance().getTime();
231 // Format the start date color. `SPAN_INCLUSIVE_INCLUSIVE` allows the span to grow in either direction.
232 if (startDate.after(currentDate)) { // The certificate start date is in the future.
233 startDateStringBuilder.setSpan(redColorSpan, startDateLabel.length(), startDateStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
234 } else { // The certificate start date is in the past.
235 startDateStringBuilder.setSpan(blueColorSpan, startDateLabel.length(), startDateStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
238 // Format the end date color. `SPAN_INCLUSIVE_INCLUSIVE` allows the span to grow in either direction.
239 if (endDate.before(currentDate)) { // The certificate end date is in the past.
240 endDateStringBuilder.setSpan(redColorSpan, endDateLabel.length(), endDateStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
241 } else { // The certificate end date is in the future.
242 endDateStringBuilder.setSpan(blueColorSpan, endDateLabel.length(), endDateStringBuilder.length(), Spanned.SPAN_INCLUSIVE_INCLUSIVE);
245 // Display the strings.
246 domainTextView.setText(domainStringBuilder);
247 issuedToCNameTextView.setText(issuedToCNameStringBuilder);
248 issuedToONameTextView.setText(issuedToONameStringBuilder);
249 issuedToUNameTextView.setText(issuedToUNameStringBuilder);
250 issuedByCNameTextView.setText(issuedByCNameStringBuilder);
251 issuedByONameTextView.setText(issuedByONameStringBuilder);
252 issuedByUNameTextView.setText(issuedByUNameStringBuilder);
253 startDateTextView.setText(startDateStringBuilder);
254 endDateTextView.setText(endDateStringBuilder);
256 // `onCreateDialog` requires the return of an `AlertDialog`.