diff --git a/Site/ClientApp/src/app/components/keygen/keygen.component.html b/Site/ClientApp/src/app/components/keygen/keygen.component.html index 4466655..d53bebf 100644 --- a/Site/ClientApp/src/app/components/keygen/keygen.component.html +++ b/Site/ClientApp/src/app/components/keygen/keygen.component.html @@ -36,40 +36,44 @@

Geração e download de chaves

open_in_new

+ + -

Baixar chave privada

- -
- - - Insira uma senha - - @if (password.invalid || passwordError()) { - {{passwordError()}} - } - - - - Confirme a senha - - @if (confirm.invalid || confirmError()) { - {{confirmError()}} - } - +
+

Baixar chave privada

+ +
+ + Insira uma senha + + Informe a senha + + Digite pelo menos {{minPasswordLength}} caracteres + + + + + Confirme a senha + + Confirme a senha + As senhas não coincidem + +
-
+
+ + -
- - - -
+
+ @@ -88,3 +92,61 @@

Confirmar descarte

 + + +
+

Verificar chave

+ +
+ + + Chave pública (PEM) + + + + + + + Chave privada (PEM criptografado) + + + + + + + senha + + + +
+ + +

+ Chaves válidas: a pública corresponde à privada. +

+

+ Senha incorreta ou chave privada inválida. +

+

+ Não corresponde: a pública não bate com a privada. +

+

+ Formato inválido: verifique os blocos PEM fornecidos. +

+
+ +
+ +
+ + +
+ +
+ diff --git a/Site/ClientApp/src/app/components/keygen/keygen.component.ts b/Site/ClientApp/src/app/components/keygen/keygen.component.ts index 1f4e34e..7e96869 100644 --- a/Site/ClientApp/src/app/components/keygen/keygen.component.ts +++ b/Site/ClientApp/src/app/components/keygen/keygen.component.ts @@ -1,9 +1,9 @@ -import { Component, TemplateRef } from '@angular/core'; +import { Component, OnInit, TemplateRef } from '@angular/core'; import { CommonModule } from '@angular/common'; import * as forge from 'node-forge'; import { MatButtonModule } from '@angular/material/button'; import { MatDialog, MatDialogModule } from '@angular/material/dialog'; -import { FormsModule, ReactiveFormsModule, FormControl, Validators, AbstractControl, ValidationErrors } from '@angular/forms'; +import { FormsModule, ReactiveFormsModule, Validators, FormBuilder, FormGroup } from '@angular/forms'; import { MatFormFieldModule } from '@angular/material/form-field'; import { MatInputModule } from '@angular/material/input'; import { firstValueFrom } from 'rxjs'; @@ -11,6 +11,8 @@ import { MatIconModule } from '@angular/material/icon'; import { delay } from '../../classes/utils'; import { MatDividerModule } from '@angular/material/divider'; +type VerifyState = 'idle' | 'ok' | 'badpass' | 'mismatch' | 'parse'; + @Component({ selector: 'app-keygen', standalone: true, @@ -27,48 +29,60 @@ import { MatDividerModule } from '@angular/material/divider'; templateUrl: './keygen.component.html', styleUrls: ['./keygen.component.scss'], }) -export class KeygenComponent { - constructor(private dialog: MatDialog) { } +export class KeygenComponent implements OnInit { + constructor( + private dialog: MatDialog, + private readonly fb: FormBuilder, + ) { } generating = false; + hasKeys = false; + publicKeyPem = ''; privateKeyEncryptedPem = ''; privateKeyObj: forge.pki.rsa.PrivateKey | null = null; thumbprint = ''; moniker = ''; - password = new FormControl('', { nonNullable: true, validators: [Validators.required, Validators.minLength(4)] }); - confirm = new FormControl('', { - nonNullable: true, validators: [ - Validators.required, - (control: AbstractControl): ValidationErrors | null => { - if (this.password && control.value != this.password.value) { - return { passwordMismatch: true }; - } - return null; - } + form!: FormGroup; + minPasswordLength = 4; - ] }); + verifyForm!: FormGroup; + verifyState: VerifyState = 'idle'; + verifying = false; - passwordError(): string { - if (this.password.hasError('required')) return 'Informe a senha'; - if (this.password.hasError('minlength')) return 'Digite pelo menos 4 caracteres'; - - return ''; + ngOnInit(): void { + this.initializeForm(); } - confirmError(): string { - if (this.confirm.hasError('required')) return 'Confirme a senha'; - if (this.password.value != this.confirm.value) return 'As senhas não coincidem'; - return ''; + private initializeForm(): void { + this.form = this.fb.group({ + password: ['', [Validators.required, Validators.minLength(this.minPasswordLength)]], + confirm: ['', [Validators.required]] + }, { validators: this.passwordsMatchValidator }); + + this.verifyForm = this.fb.group({ + publicKey: ['', [Validators.required]], + privateKey: ['', [Validators.required]], + password: ['', [Validators.required]] + }); } - get hasKeys(): boolean { - return !!(this.publicKeyPem && this.privateKeyObj); + private passwordsMatchValidator = (group: FormGroup) => { + const p = group.get('password')?.value; + const c = group.get('confirm')?.value; + if (p !== c) { + return { passwordMismatch: true }; + } + return null; + }; + + get passwordValue(): string { + return this.form.get('password')?.value; } get formInvalid(): boolean { - return !!this.passwordError() || !!this.confirmError(); + return this.form.invalid; } async generate(): Promise { @@ -94,6 +108,8 @@ export class KeygenComponent { this.moniker = digest.toHex().slice(0, 6); this.thumbprint = digest.toHex(); + this.hasKeys = true; + } catch (err) { console.error('Falha ao gerar chaves:', err); } finally { @@ -109,16 +125,16 @@ export class KeygenComponent { async downloadPrivate(passwordtpl: TemplateRef): Promise { if (!this.hasKeys || !this.privateKeyObj) return; + this.initializeForm(); + const ref = this.dialog.open(passwordtpl, { disableClose: true }); const password: string = await firstValueFrom(ref.afterClosed()); - const pwdValue = this.password.value; - this.password.reset(''); - this.confirm.reset(''); + this.initializeForm(); if (!password) return; - const pem = forge.pki.encryptRsaPrivateKey(this.privateKeyObj, pwdValue, { + const pem = forge.pki.encryptRsaPrivateKey(this.privateKeyObj, password, { algorithm: 'aes256', count: 200_000, prfAlgorithm: 'sha256', @@ -139,6 +155,7 @@ export class KeygenComponent { this.privateKeyObj = null; this.thumbprint = ''; this.moniker = ''; + this.hasKeys = false; } private download(content: string, filename: string, mime = 'application/octet-stream'): void { @@ -153,4 +170,74 @@ export class KeygenComponent { a.click(); setTimeout(() => { URL.revokeObjectURL(url); a.remove(); }, 100); } + + openVerifyDialog(tpl: TemplateRef): void { + this.verifyForm.reset(); + this.verifyState = 'idle'; + this.verifying = false; + this.dialog.open(tpl, { disableClose: false, width: '450px' }); + } + + async loadFile(event: Event, controlName: 'publicKey' | 'privateKey'): Promise { + const input = event.target as HTMLInputElement; + const file = input.files?.[0]; + if (!file) return; + + try { + const text = await file.text(); + this.verifyForm.get(controlName)?.setValue(text); + this.verifyForm.get(controlName)?.markAsDirty(); + this.verifyForm.updateValueAndValidity(); + + } finally { + input.value = ''; + } + } + + async verifyKey(): Promise { + if (this.verifyForm.invalid || this.verifying) return; + + this.verifying = true; + this.verifyState = 'idle'; + + await delay(100); + + const publicPem = (this.verifyForm.get('publicKey')?.value).trim(); + const privatePem = (this.verifyForm.get('privateKey')?.value).trim(); + const password = this.verifyForm.get('password')?.value; + + try { + let providedPub: forge.pki.rsa.PublicKey; + try { + providedPub = forge.pki.publicKeyFromPem(publicPem) as forge.pki.rsa.PublicKey; + } catch { + this.verifyState = 'parse'; + return; + } + + let privateKey = forge.pki.decryptRsaPrivateKey(privatePem, password); + + if (!privateKey) { + this.verifyState = 'badpass'; + return; + } + + const pubFromPriv = forge.pki.rsa.setPublicKey(privateKey.n, privateKey.e); + const sameN = pubFromPriv.n.compareTo(providedPub.n) === 0; + const sameE = pubFromPriv.e.compareTo(providedPub.e) === 0; + + if (!(sameN && sameE)) { + this.verifyState = 'mismatch'; + return; + } else { + this.verifyState = 'ok'; + return + } + + } catch { + this.verifyState = 'parse'; + } finally { + this.verifying = false; + } + } }