1 package club.wpia.gigi.pages.account.certs;
3 import java.io.IOException;
4 import java.io.PrintWriter;
5 import java.security.GeneralSecurityException;
6 import java.util.HashMap;
9 import javax.servlet.http.HttpServletRequest;
11 import club.wpia.gigi.GigiApiException;
12 import club.wpia.gigi.dbObjects.Certificate;
13 import club.wpia.gigi.dbObjects.Certificate.CertificateStatus;
14 import club.wpia.gigi.dbObjects.Certificate.SubjectAlternateName;
15 import club.wpia.gigi.dbObjects.CertificateProfile;
16 import club.wpia.gigi.dbObjects.Domain;
17 import club.wpia.gigi.dbObjects.Job;
18 import club.wpia.gigi.dbObjects.Organisation;
19 import club.wpia.gigi.dbObjects.User;
20 import club.wpia.gigi.localisation.Language;
21 import club.wpia.gigi.output.CertificateValiditySelector;
22 import club.wpia.gigi.output.HashAlgorithms;
23 import club.wpia.gigi.output.template.Form;
24 import club.wpia.gigi.output.template.IterableDataset;
25 import club.wpia.gigi.output.template.Outputable;
26 import club.wpia.gigi.output.template.Template;
27 import club.wpia.gigi.pages.LoginPage;
28 import club.wpia.gigi.util.AuthorizationContext;
29 import club.wpia.gigi.util.HTMLEncoder;
30 import club.wpia.gigi.util.RandomToken;
31 import club.wpia.gigi.util.ServerConstants;
32 import club.wpia.gigi.util.ServerConstants.Host;
35 * This class represents a form that is used for issuing certificates. This
36 * class uses "sun.security" and therefore needs "-XDignore.symbol.file"
38 public class CertificateIssueForm extends Form {
40 private final static Template t = new Template(CertificateIssueForm.class.getResource("CertificateIssueForm.templ"));
42 private final static Template tIni = new Template(CertificateAdd.class.getResource("RequestCertificate.templ"));
44 private AuthorizationContext c;
46 private String spkacChallenge;
48 private boolean login;
50 public CertificateIssueForm(HttpServletRequest hsr) {
52 c = LoginPage.getAuthorizationContext(hsr);
53 spkacChallenge = RandomToken.generateToken(16);
56 private Certificate result;
58 public Certificate getResult() {
62 private CertificateRequest cr;
64 CertificateValiditySelector issueDate = new CertificateValiditySelector();
67 public SubmissionResult submit(HttpServletRequest req) throws GigiApiException {
68 String csr = req.getParameter("CSR");
69 String spkac = req.getParameter("SPKAC");
72 cr = new CertificateRequest(c, csr);
73 // TODO cr.checkKeyStrength(out);
74 return new FormContinue();
75 } else if (spkac != null) {
76 cr = new CertificateRequest(c, spkac, spkacChallenge);
77 // TODO cr.checkKeyStrength(out);
78 return new FormContinue();
79 } else if (cr != null) {
80 login = "1".equals(req.getParameter("login"));
81 issueDate.update(req);
82 GigiApiException error = new GigiApiException();
85 cr.update(req.getParameter("CN"), req.getParameter("hash_alg"), req.getParameter("profile"), //
86 req.getParameter("org"), req.getParameter("OU"), req.getParameter("SANs"));
87 } catch (GigiApiException e) {
91 Certificate result = null;
94 } catch (GigiApiException e) {
97 if ( !error.isEmpty() || result == null) {
101 result.setLoginEnabled(true);
103 if (req.getParameter("description") != null) {
104 String description = req.getParameter("description").trim();
105 if (description.length() > 100) {
106 throw new GigiApiException("Submitted description is longer than 100 characters.");
108 result.setDescription(description);
110 result.issue(issueDate.getFrom(), issueDate.getTo(), c.getActor()).waitFor(Job.WAIT_MIN);
111 this.result = result;
112 Certificate c = result;
113 if (c.getStatus() != CertificateStatus.ISSUED) {
114 throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
116 String ser = c.getSerial();
118 throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
120 return new RedirectResult(Certificates.PATH + "/" + ser);
122 throw new GigiApiException("Error no action.");
124 } catch (IOException e) {
126 throw new GigiApiException("Certificate Request format is invalid.");
127 } catch (IllegalArgumentException e) {
129 throw new GigiApiException("Certificate Request format is invalid.");
130 } catch (GeneralSecurityException e) {
132 throw new GigiApiException("Certificate Request format is invalid.");
137 public void output(PrintWriter out, Language l, Map<String, Object> vars) {
139 HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
140 vars2.put("csrf", getCSRFToken());
141 vars2.put("csrf_name", getCsrfFieldName());
142 vars2.put("spkacChallenge", spkacChallenge);
143 tIni.output(out, l, vars2);
146 super.output(out, l, vars);
151 protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
152 HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
153 StringBuffer content = new StringBuffer();
154 for (SubjectAlternateName SAN : cr.getSANs()) {
155 content.append(SAN.getType().toString().toLowerCase());
157 content.append(SAN.getName());
158 content.append('\n');
160 vars2.put("placeholderName", CertificateRequest.DEFAULT_CN);
161 if (c.getTarget() instanceof User) {
162 User target = (User) c.getTarget();
163 vars2.put("defaultName", target.getPreferredName().toString());
164 vars2.put("defaultEmail", target.getEmail());
165 Domain[] domains = target.getDomains();
166 if (domains.length > 0) {
167 vars2.put("defaultDomain", domains[0].getSuffix());
170 vars2.put("CN", cr.getName());
171 if (c.getTarget() instanceof Organisation) {
172 vars2.put("orga", "true");
173 vars2.put("department", cr.getOu());
175 vars2.put("secureHostname", new Outputable() {
178 public void output(PrintWriter out, Language l, Map<String, Object> vars) {
180 out.print(HTMLEncoder.encodeHTML("https://" + ServerConstants.getHostNamePortSecure(Host.SECURE)));
181 out.print("</code>");
184 vars2.put("validity", issueDate);
185 vars2.put("emails", content.toString());
186 vars2.put("hashs", new HashAlgorithms(cr.getSelectedDigest()));
187 vars2.put("profiles", new IterableDataset() {
189 CertificateProfile[] cps = CertificateProfile.getAll();
194 public boolean next(Language l, Map<String, Object> vars) {
195 CertificateProfile cp;
197 if (i >= cps.length) {
202 } while ( !cp.canBeIssuedBy(c.getTarget(), c.getActor()));
204 if (cp.getId() == cr.getProfile().getId()) {
205 vars.put("selected", " selected");
207 vars.put("selected", "");
209 vars.put("key", cp.getKeyName());
210 vars.put("name", cp.getVisibleName());
215 t.output(out, l, vars2);