X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2Fpages%2Faccount%2FMailCertificates.java;h=775f527d993989b27d6653e9eab5bcc50c17cefb;hb=55eabf9c9f1e5479673071727b76eb908019fec4;hp=6eae585a2c787cee2ab2691712e58346713feffc;hpb=e9336bb2781a287a5542179208a869acd17c9a5a;p=gigi.git

diff --git a/src/org/cacert/gigi/pages/account/MailCertificates.java b/src/org/cacert/gigi/pages/account/MailCertificates.java
index 6eae585a..775f527d 100644
--- a/src/org/cacert/gigi/pages/account/MailCertificates.java
+++ b/src/org/cacert/gigi/pages/account/MailCertificates.java
@@ -2,12 +2,15 @@ package org.cacert.gigi.pages.account;
 
 import java.io.IOException;
 import java.io.PrintWriter;
+import java.net.URLEncoder;
 import java.security.GeneralSecurityException;
+import java.security.cert.X509Certificate;
 import java.sql.PreparedStatement;
 import java.sql.ResultSet;
 import java.sql.SQLException;
 import java.util.HashMap;
 
+import javax.servlet.ServletOutputStream;
 import javax.servlet.http.HttpServletRequest;
 import javax.servlet.http.HttpServletResponse;
 
@@ -15,54 +18,117 @@ import org.cacert.gigi.Certificate;
 import org.cacert.gigi.User;
 import org.cacert.gigi.database.DatabaseConnection;
 import org.cacert.gigi.output.CertificateTable;
+import org.cacert.gigi.output.template.Template;
 import org.cacert.gigi.pages.LoginPage;
 import org.cacert.gigi.pages.Page;
+import org.cacert.gigi.util.PEM;
 
 public class MailCertificates extends Page {
-	CertificateTable myTable = new CertificateTable("mailcerts");
-	public static final String PATH = "/account/certs/email";
-
-	public MailCertificates() {
-		super("Email Certificates");
-	}
-
-	@Override
-	public void doGet(HttpServletRequest req, HttpServletResponse resp)
-			throws IOException {
-		PrintWriter out = resp.getWriter();
-		String pi = req.getPathInfo().substring(PATH.length());
-		if (pi.length() != 0) {
-			pi = pi.substring(1);
-			int id = Integer.parseInt(pi);
-			Certificate c = new Certificate(id);
-			// TODO check ownership
-			out.println("<pre>");
-			try {
-				out.print(c.cert());
-			} catch (GeneralSecurityException e) {
-				e.printStackTrace();
-			} catch (SQLException e) {
-				e.printStackTrace();
-			}
-			out.println("</pre>");
-			return;
-		}
-
-		HashMap<String, Object> vars = new HashMap<String, Object>();
-		User us = LoginPage.getUser(req);
-		try {
-			PreparedStatement ps = DatabaseConnection
-					.getInstance()
-					.prepare(
-							"SELECT `id`, `CN`, `serial`, `revoked`, `expire`, `disablelogin` FROM `emailcerts` WHERE `memid`=?");
-			ps.setInt(1, us.getId());
-			ResultSet rs = ps.executeQuery();
-			vars.put("mailcerts", rs);
-			myTable.output(out, getLanguage(req), vars);
-			rs.close();
-		} catch (SQLException e) {
-			e.printStackTrace();
-		}
-	}
+
+    CertificateTable myTable = new CertificateTable("mailcerts");
+
+    Template certDisplay = new Template(MailCertificates.class.getResource("CertificateDisplay.templ"));
+
+    public static final String PATH = "/account/certs/email";
+
+    public MailCertificates() {
+        super("Email Certificates");
+    }
+
+    @Override
+    public boolean beforeTemplate(HttpServletRequest req, HttpServletResponse resp) throws IOException {
+
+        String pi = req.getPathInfo().substring(PATH.length());
+        if (pi.length() == 0) {
+            return false;
+        }
+        pi = pi.substring(1);
+        boolean crt = false;
+        boolean cer = false;
+        resp.setContentType("application/pkix-cert");
+        if (pi.endsWith(".crt")) {
+            crt = true;
+            pi = pi.substring(0, pi.length() - 4);
+        } else if (pi.endsWith(".cer")) {
+            if (req.getParameter("install") != null) {
+                resp.setContentType("application/x-x509-user-cert");
+            }
+            cer = true;
+            pi = pi.substring(0, pi.length() - 4);
+        } else if (pi.endsWith(".cer")) {
+            cer = true;
+            pi = pi.substring(0, pi.length() - 4);
+        }
+        String serial = pi;
+        try {
+            Certificate c = Certificate.getBySerial(serial);
+            if (c == null || getUser(req).getId() != c.getOwnerId()) {
+                resp.sendError(404);
+                return true;
+            }
+            X509Certificate cert = c.cert();
+            if ( !crt && !cer) {
+                return false;
+            }
+            ServletOutputStream out = resp.getOutputStream();
+            if (crt) {
+                out.println(PEM.encode("CERTIFICATE", cert.getEncoded()));
+            } else if (cer) {
+                out.write(cert.getEncoded());
+            }
+        } catch (IllegalArgumentException e) {
+            resp.sendError(404);
+            return true;
+        } catch (GeneralSecurityException e) {
+            resp.sendError(404);
+            return true;
+        } catch (SQLException e) {
+            resp.sendError(404);
+            return true;
+        }
+
+        return true;
+    }
+
+    @Override
+    public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
+        PrintWriter out = resp.getWriter();
+        String pi = req.getPathInfo().substring(PATH.length());
+        if (pi.length() != 0) {
+            pi = pi.substring(1);
+
+            String serial = pi;
+            Certificate c = Certificate.getBySerial(serial);
+            if (c == null || LoginPage.getUser(req).getId() != c.getOwnerId()) {
+                resp.sendError(404);
+                return;
+            }
+            HashMap<String, Object> vars = new HashMap<>();
+            vars.put("serial", URLEncoder.encode(serial, "UTF-8"));
+            try {
+                vars.put("cert", c.cert());
+            } catch (GeneralSecurityException e) {
+                e.printStackTrace();
+            } catch (SQLException e) {
+                e.printStackTrace();
+            }
+            certDisplay.output(out, getLanguage(req), vars);
+
+            return;
+        }
+
+        HashMap<String, Object> vars = new HashMap<String, Object>();
+        User us = LoginPage.getUser(req);
+        try {
+            PreparedStatement ps = DatabaseConnection.getInstance().prepare("SELECT `id`, `CN`, `serial`, `revoked`, `expire`, `disablelogin` FROM `emailcerts` WHERE `memid`=?");
+            ps.setInt(1, us.getId());
+            ResultSet rs = ps.executeQuery();
+            vars.put("mailcerts", rs);
+            myTable.output(out, getLanguage(req), vars);
+            rs.close();
+        } catch (SQLException e) {
+            e.printStackTrace();
+        }
+    }
 
 }