1 package org.cacert.gigi.pages.account;
3 import java.io.IOException;
4 import java.io.PrintWriter;
5 import java.net.URLEncoder;
6 import java.security.GeneralSecurityException;
7 import java.security.cert.X509Certificate;
8 import java.sql.SQLException;
9 import java.util.HashMap;
11 import javax.servlet.ServletOutputStream;
12 import javax.servlet.http.HttpServletRequest;
13 import javax.servlet.http.HttpServletResponse;
15 import org.cacert.gigi.Certificate;
16 import org.cacert.gigi.User;
17 import org.cacert.gigi.output.CertificateIterable;
18 import org.cacert.gigi.output.template.Template;
19 import org.cacert.gigi.pages.LoginPage;
20 import org.cacert.gigi.pages.Page;
21 import org.cacert.gigi.util.PEM;
23 public class Certificates extends Page {
25 Template certDisplay = new Template(Certificates.class.getResource("CertificateDisplay.templ"));
27 public static final String PATH = "/account/certs";
29 public Certificates() {
30 super("Certificates");
34 public boolean beforeTemplate(HttpServletRequest req, HttpServletResponse resp) throws IOException {
36 String pi = req.getPathInfo().substring(PATH.length());
37 if (pi.length() == 0) {
43 resp.setContentType("application/pkix-cert");
44 if (pi.endsWith(".crt")) {
46 pi = pi.substring(0, pi.length() - 4);
47 } else if (pi.endsWith(".cer")) {
48 if (req.getParameter("install") != null) {
49 resp.setContentType("application/x-x509-user-cert");
52 pi = pi.substring(0, pi.length() - 4);
53 } else if (pi.endsWith(".cer")) {
55 pi = pi.substring(0, pi.length() - 4);
59 Certificate c = Certificate.getBySerial(serial);
60 if (c == null || getUser(req).getId() != c.getOwnerId()) {
64 X509Certificate cert = c.cert();
68 ServletOutputStream out = resp.getOutputStream();
70 out.println(PEM.encode("CERTIFICATE", cert.getEncoded()));
72 out.write(cert.getEncoded());
74 } catch (IllegalArgumentException e) {
77 } catch (GeneralSecurityException e) {
80 } catch (SQLException e) {
88 Template certTable = new Template(CertificateIterable.class.getResource("CertificateTable.templ"));
91 public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
92 PrintWriter out = resp.getWriter();
93 String pi = req.getPathInfo().substring(PATH.length());
94 if (pi.length() != 0) {
98 Certificate c = Certificate.getBySerial(serial);
99 if (c == null || LoginPage.getUser(req).getId() != c.getOwnerId()) {
103 HashMap<String, Object> vars = new HashMap<>();
104 vars.put("serial", URLEncoder.encode(serial, "UTF-8"));
106 vars.put("cert", c.cert());
107 } catch (GeneralSecurityException e) {
109 } catch (SQLException e) {
112 certDisplay.output(out, getLanguage(req), vars);
117 HashMap<String, Object> vars = new HashMap<String, Object>();
118 User us = LoginPage.getUser(req);
119 vars.put("certs", new CertificateIterable(us.getCertificates()));
120 certTable.output(out, getLanguage(req), vars);