1 package org.cacert.gigi.pages.account.certs;
3 import java.io.IOException;
4 import java.io.PrintWriter;
5 import java.security.GeneralSecurityException;
6 import java.util.HashMap;
9 import javax.servlet.http.HttpServletRequest;
11 import org.cacert.gigi.GigiApiException;
12 import org.cacert.gigi.dbObjects.Certificate;
13 import org.cacert.gigi.dbObjects.Certificate.SubjectAlternateName;
14 import org.cacert.gigi.dbObjects.CertificateProfile;
15 import org.cacert.gigi.dbObjects.Organisation;
16 import org.cacert.gigi.localisation.Language;
17 import org.cacert.gigi.output.CertificateValiditySelector;
18 import org.cacert.gigi.output.HashAlgorithms;
19 import org.cacert.gigi.output.template.Form;
20 import org.cacert.gigi.output.template.IterableDataset;
21 import org.cacert.gigi.output.template.Template;
22 import org.cacert.gigi.pages.LoginPage;
23 import org.cacert.gigi.pages.Page;
24 import org.cacert.gigi.util.AuthorizationContext;
25 import org.cacert.gigi.util.RandomToken;
28 * This class represents a form that is used for issuing certificates. This
29 * class uses "sun.security" and therefore needs "-XDignore.symbol.file"
31 public class CertificateIssueForm extends Form {
33 private final static Template t = new Template(CertificateIssueForm.class.getResource("CertificateIssueForm.templ"));
35 private final static Template tIni = new Template(CertificateAdd.class.getResource("RequestCertificate.templ"));
37 private AuthorizationContext c;
39 private String spkacChallenge;
41 private boolean login;
43 public CertificateIssueForm(HttpServletRequest hsr) {
45 c = LoginPage.getAuthorizationContext(hsr);
46 spkacChallenge = RandomToken.generateToken(16);
49 private Certificate result;
51 public Certificate getResult() {
55 private CertificateRequest cr;
57 CertificateValiditySelector issueDate = new CertificateValiditySelector();
60 public boolean submit(PrintWriter out, HttpServletRequest req) {
61 String csr = req.getParameter("CSR");
62 String spkac = req.getParameter("SPKAC");
66 cr = new CertificateRequest(c, csr);
67 cr.checkKeyStrength(out);
68 } else if (spkac != null) {
69 cr = new CertificateRequest(c, spkac, spkacChallenge);
70 cr.checkKeyStrength(out);
71 } else if (cr != null) {
72 login = "1".equals(req.getParameter("login"));
73 issueDate.update(req);
74 GigiApiException error = new GigiApiException();
77 cr.update(req.getParameter("CN"), req.getParameter("hash_alg"), req.getParameter("profile"), //
78 req.getParameter("org"), req.getParameter("OU"), req.getParameter("SANs"), out, req);
79 } catch (GigiApiException e) {
82 if (req.getParameter("CCA") == null) {
83 error.mergeInto(new GigiApiException("You need to accept the CCA."));
85 Certificate result = null;
88 } catch (GigiApiException e) {
91 if ( !error.isEmpty() || result == null) {
92 error.format(out, Page.getLanguage(req));
95 result.issue(issueDate.getFrom(), issueDate.getTo(), c.getActor()).waitFor(60000);
99 throw new GigiApiException("Error no action.");
101 } catch (IOException e) {
103 } catch (IllegalArgumentException e) {
105 throw new GigiApiException("Certificate Request format is invalid.");
106 } catch (GeneralSecurityException e) {
108 throw new GigiApiException("Certificate Request format is invalid.");
109 } catch (InterruptedException e) {
112 } catch (GigiApiException e) {
113 e.format(out, Page.getLanguage(req));
119 public void output(PrintWriter out, Language l, Map<String, Object> vars) {
121 HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
122 vars2.put("csrf", getCSRFToken());
123 vars2.put("csrf_name", getCsrfFieldName());
124 vars2.put("spkacChallenge", spkacChallenge);
125 tIni.output(out, l, vars2);
128 super.output(out, l, vars);
133 protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
134 HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
135 vars2.put("CCA", "<a href='/policy/CAcertCommunityAgreement.html'>CCA</a>");
137 StringBuffer content = new StringBuffer();
138 for (SubjectAlternateName SAN : cr.getSANs()) {
139 content.append(SAN.getType().toString().toLowerCase());
141 content.append(SAN.getName());
142 content.append('\n');
145 vars2.put("CN", cr.getName());
146 if (c.getTarget() instanceof Organisation) {
147 vars2.put("orga", "true");
148 vars2.put("department", cr.getOu());
150 vars2.put("validity", issueDate);
151 vars2.put("emails", content.toString());
152 vars2.put("hashs", new HashAlgorithms(cr.getSelectedDigest()));
153 vars2.put("profiles", new IterableDataset() {
155 CertificateProfile[] cps = CertificateProfile.getAll();
160 public boolean next(Language l, Map<String, Object> vars) {
161 CertificateProfile cp;
163 if (i >= cps.length) {
168 } while ( !cp.canBeIssuedBy(c.getTarget(), c.getActor()));
170 if (cp.getId() == cr.getProfile().getId()) {
171 vars.put("selected", " selected");
173 vars.put("selected", "");
175 vars.put("key", cp.getKeyName());
176 vars.put("name", cp.getVisibleName());
181 t.output(out, l, vars2);