1 package org.cacert.gigi;
3 import static org.cacert.gigi.Gigi.*;
5 import java.awt.Desktop;
6 import java.io.BufferedReader;
7 import java.io.ByteArrayInputStream;
8 import java.io.ByteArrayOutputStream;
9 import java.io.DataOutputStream;
10 import java.io.FileInputStream;
11 import java.io.IOException;
12 import java.io.InputStream;
13 import java.io.InputStreamReader;
14 import java.io.OutputStream;
15 import java.lang.reflect.Field;
16 import java.net.URISyntaxException;
18 import java.nio.file.Files;
19 import java.nio.file.Path;
20 import java.nio.file.Paths;
21 import java.util.Collections;
22 import java.util.HashMap;
24 import java.util.Properties;
26 import javax.servlet.http.HttpServletRequest;
27 import javax.servlet.http.HttpServletResponse;
28 import javax.servlet.http.HttpSession;
30 import org.cacert.gigi.dbObjects.ObjectCache;
31 import org.cacert.gigi.dbObjects.User;
32 import org.cacert.gigi.localisation.Language;
33 import org.cacert.gigi.output.template.Template;
34 import org.cacert.gigi.output.template.TranslateCommand;
35 import org.cacert.gigi.pages.LoginPage;
36 import org.cacert.gigi.pages.Page;
37 import org.cacert.gigi.pages.account.certs.CertificateRequest;
38 import org.cacert.gigi.pages.main.RegisterPage;
39 import org.cacert.gigi.util.AuthorizationContext;
40 import org.cacert.gigi.util.ServerConstants;
41 import org.kamranzafar.jtar.TarEntry;
42 import org.kamranzafar.jtar.TarHeader;
43 import org.kamranzafar.jtar.TarOutputStream;
45 public class DevelLauncher {
47 public static void main(String[] args) throws Exception {
48 Properties mainProps = new Properties();
49 try (FileInputStream inStream = new FileInputStream("config/gigi.properties")) {
50 mainProps.load(inStream);
52 for (int i = 0; i < args.length; i++) {
53 if (args[i].equals("--port")) {
54 mainProps.setProperty("port", args[i + 1]);
58 killPreviousInstance(mainProps);
60 ByteArrayOutputStream chunkConfig = new ByteArrayOutputStream();
61 DataOutputStream dos = new DataOutputStream(chunkConfig);
62 byte[] cacerts = Files.readAllBytes(Paths.get("config/cacerts.jks"));
63 byte[] keystore = null;
64 Path p = Paths.get("config/keystore.pkcs12");
65 if (p.toFile().exists()) {
66 keystore = Files.readAllBytes(p);
68 mainProps.setProperty("proxy", "true");
71 DevelLauncher.writeGigiConfig(dos, "changeit".getBytes("UTF-8"), "changeit".getBytes("UTF-8"), mainProps, cacerts, keystore);
73 new Launcher().boot(new ByteArrayInputStream(chunkConfig.toByteArray()));
75 new Thread("ticket awaiter") {
81 } catch (InterruptedException e) {
86 Desktop.getDesktop().browse(new URL("http://" + ServerConstants.getWwwHostNamePort() + "/ticketWait").toURI());
88 } catch (IOException e) {
90 } catch (URISyntaxException e) {
95 BufferedReader br = new BufferedReader(new InputStreamReader(System.in, "UTF-8"));
96 System.out.println("Cacert-gigi system sucessfully started.");
97 System.out.println("Press enter to shutdown.");
102 private static void killPreviousInstance(Properties mainProps) {
104 String targetPort = mainProps.getProperty("http.port");
105 String targetHost = mainProps.getProperty("name.www");
106 URL u = new URL("http://" + targetHost + ":" + targetPort + "/kill");
108 } catch (IOException e) {
112 public static void addDevelPage(boolean withToken) {
114 Field instF = Gigi.class.getDeclaredField("instance");
115 Field pageF = Gigi.class.getDeclaredField("pages");
116 instF.setAccessible(true);
117 pageF.setAccessible(true);
118 Object gigi = instF.get(null);
120 // Check if we got a proper map (as much as we can tell)
121 Object pagesObj = pageF.get(gigi);
122 if ( !(pagesObj instanceof Map)) {
123 throw new Error("Invalid state when initializing page structure");
126 @SuppressWarnings("unchecked")
127 HashMap<String, Page> pages = new HashMap<>((Map<String, Page>) pagesObj);
129 pages.put("/manage", new Page("Page-manager") {
132 public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
133 ObjectCache.clearAllCaches();
134 RegisterPage.RATE_LIMIT.bypass();
135 LoginPage.RATE_LIMIT.bypass();
136 CertificateRequest.RATE_LIMIT.bypass();
137 resp.getWriter().println("All caches cleared.");
138 System.out.println("Caches cleared.");
143 public boolean needsLogin() {
149 pages.put("/kill", new Page("Kill") {
152 * The contained call to {@link System#exit(int)} is mainly
153 * needed to kill this instance immediately if another
154 * {@link DevelLauncher} is booting up to free all ports This is
155 * required for fast development cycles.
157 * @see #killPreviousInstance(Properties)
160 public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
165 public boolean needsLogin() {
171 addTicketPage(pages);
174 pageF.set(gigi, Collections.unmodifiableMap(pages));
175 } catch (ReflectiveOperationException e) {
180 static boolean ticketUsed = false;
182 private static void addTicketPage(HashMap<String, Page> pages) {
183 pages.put("/ticketWait", new Page("ticket") {
185 private final Template t = new Template(DevelLauncher.class.getResource("DevelTicketWait.templ"));
188 public boolean needsLogin() {
193 public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
194 resp.setHeader("content-security-policy", "");
195 t.output(resp.getWriter(), getLanguage(req), new HashMap<String, Object>());
199 pages.put("/ticket", new Page("ticket") {
202 public boolean beforeTemplate(HttpServletRequest req, HttpServletResponse resp) throws IOException {
203 // TODO Auto-generated method stub
205 HttpSession sess = req.getSession();
206 User user = User.getById(1);
208 resp.getWriter().println("ticket consumed but no user available for that action");
212 sess.setAttribute(LOGGEDIN, true);
213 sess.setAttribute(Language.SESSION_ATTRIB_NAME, user.getPreferredLocale());
214 sess.setAttribute(AUTH_CONTEXT, new AuthorizationContext(user, user));
215 req.getSession().setAttribute(LOGIN_METHOD, new TranslateCommand("Ticket"));
216 resp.getWriter().println("ticket consumed");
223 public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {}
226 public boolean needsLogin() {
232 public static void writeGigiConfig(OutputStream target, byte[] keystorepw, byte[] truststorepw, Properties mainprop, byte[] cacerts, byte[] keystore) throws IOException {
233 TarOutputStream tos = new TarOutputStream(target);
234 ByteArrayOutputStream baos = new ByteArrayOutputStream();
235 mainprop.store(baos, "");
237 putTarEntry(baos.toByteArray(), tos, "gigi.properties");
238 putTarEntry(keystorepw, tos, "keystorepw");
239 putTarEntry(truststorepw, tos, "truststorepw");
240 putTarEntry(keystore, tos, "keystore.pkcs12");
241 putTarEntry(cacerts, tos, "cacerts.jks");
246 private static void putTarEntry(byte[] data, TarOutputStream tos, String name) throws IOException {
250 TarHeader th = new TarHeader();
251 th.name = new StringBuffer(name);
252 th.size = data.length;
253 tos.putNextEntry(new TarEntry(th));