src/club/wpia/gigi/pages/account/certs/CertificateIssueForm.java

   1 package club.wpia.gigi.pages.account.certs;
   2
   3 import java.io.IOException;
   4 import java.io.PrintWriter;
   5 import java.security.GeneralSecurityException;
   6 import java.util.HashMap;
   7 import java.util.Map;
   8
   9 import javax.servlet.http.HttpServletRequest;
  10
  11 import club.wpia.gigi.GigiApiException;
  12 import club.wpia.gigi.dbObjects.Certificate;
  13 import club.wpia.gigi.dbObjects.Certificate.CertificateStatus;
  14 import club.wpia.gigi.dbObjects.Certificate.SubjectAlternateName;
  15 import club.wpia.gigi.dbObjects.CertificateProfile;
  16 import club.wpia.gigi.dbObjects.Domain;
  17 import club.wpia.gigi.dbObjects.Organisation;
  18 import club.wpia.gigi.dbObjects.User;
  19 import club.wpia.gigi.localisation.Language;
  20 import club.wpia.gigi.output.CertificateValiditySelector;
  21 import club.wpia.gigi.output.HashAlgorithms;
  22 import club.wpia.gigi.output.template.Form;
  23 import club.wpia.gigi.output.template.IterableDataset;
  24 import club.wpia.gigi.output.template.Outputable;
  25 import club.wpia.gigi.output.template.Template;
  26 import club.wpia.gigi.pages.LoginPage;
  27 import club.wpia.gigi.util.AuthorizationContext;
  28 import club.wpia.gigi.util.HTMLEncoder;
  29 import club.wpia.gigi.util.RandomToken;
  30 import club.wpia.gigi.util.ServerConstants;
  31 import club.wpia.gigi.util.ServerConstants.Host;
  32
  33 /**
  34  * This class represents a form that is used for issuing certificates. This
  35  * class uses "sun.security" and therefore needs "-XDignore.symbol.file"
  36  */
  37 public class CertificateIssueForm extends Form {
  38
  39     private final static Template t = new Template(CertificateIssueForm.class.getResource("CertificateIssueForm.templ"));
  40
  41     private final static Template tIni = new Template(CertificateAdd.class.getResource("RequestCertificate.templ"));
  42
  43     private AuthorizationContext c;
  44
  45     private String spkacChallenge;
  46
  47     private boolean login;
  48
  49     public CertificateIssueForm(HttpServletRequest hsr) {
  50         super(hsr);
  51         c = LoginPage.getAuthorizationContext(hsr);
  52         spkacChallenge = RandomToken.generateToken(16);
  53     }
  54
  55     private Certificate result;
  56
  57     public Certificate getResult() {
  58         return result;
  59     }
  60
  61     private CertificateRequest cr;
  62
  63     CertificateValiditySelector issueDate = new CertificateValiditySelector();
  64
  65     @Override
  66     public SubmissionResult submit(HttpServletRequest req) throws GigiApiException {
  67         String csr = req.getParameter("CSR");
  68         String spkac = req.getParameter("SPKAC");
  69         try {
  70             if (csr != null) {
  71                 cr = new CertificateRequest(c, csr);
  72                 // TODO cr.checkKeyStrength(out);
  73                 return new FormContinue();
  74             } else if (spkac != null) {
  75                 cr = new CertificateRequest(c, spkac, spkacChallenge);
  76                 // TODO cr.checkKeyStrength(out);
  77                 return new FormContinue();
  78             } else if (cr != null) {
  79                 login = "1".equals(req.getParameter("login"));
  80                 issueDate.update(req);
  81                 GigiApiException error = new GigiApiException();
  82
  83                 try {
  84                     cr.update(req.getParameter("CN"), req.getParameter("hash_alg"), req.getParameter("profile"), //
  85                             req.getParameter("org"), req.getParameter("OU"), req.getParameter("SANs"));
  86                 } catch (GigiApiException e) {
  87                     error.mergeInto(e);
  88                 }
  89
  90                 Certificate result = null;
  91                 try {
  92                     result = cr.draft();
  93                 } catch (GigiApiException e) {
  94                     error.mergeInto(e);
  95                 }
  96                 if ( !error.isEmpty() || result == null) {
  97                     throw error;
  98                 }
  99                 if (login) {
 100                     result.setLoginEnabled(true);
 101                 }
 102                 result.issue(issueDate.getFrom(), issueDate.getTo(), c.getActor()).waitFor(60000);
 103                 this.result = result;
 104                 Certificate c = result;
 105                 if (c.getStatus() != CertificateStatus.ISSUED) {
 106                     throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
 107                 }
 108                 String ser = c.getSerial();
 109                 if (ser.isEmpty()) {
 110                     throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
 111                 }
 112                 return new RedirectResult(Certificates.PATH + "/" + ser);
 113             } else {
 114                 throw new GigiApiException("Error no action.");
 115             }
 116         } catch (IOException e) {
 117             e.printStackTrace();
 118             throw new GigiApiException("Certificate Request format is invalid.");
 119         } catch (IllegalArgumentException e) {
 120             e.printStackTrace();
 121             throw new GigiApiException("Certificate Request format is invalid.");
 122         } catch (GeneralSecurityException e) {
 123             e.printStackTrace();
 124             throw new GigiApiException("Certificate Request format is invalid.");
 125         }
 126     }
 127
 128     @Override
 129     public void output(PrintWriter out, Language l, Map<String, Object> vars) {
 130         if (cr == null) {
 131             HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 132             vars2.put("csrf", getCSRFToken());
 133             vars2.put("csrf_name", getCsrfFieldName());
 134             vars2.put("spkacChallenge", spkacChallenge);
 135             tIni.output(out, l, vars2);
 136             return;
 137         } else {
 138             super.output(out, l, vars);
 139         }
 140     }
 141
 142     @Override
 143     protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
 144         HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 145         StringBuffer content = new StringBuffer();
 146         for (SubjectAlternateName SAN : cr.getSANs()) {
 147             content.append(SAN.getType().toString().toLowerCase());
 148             content.append(':');
 149             content.append(SAN.getName());
 150             content.append('\n');
 151         }
 152         vars2.put("placeholderName", CertificateRequest.DEFAULT_CN);
 153         if (c.getTarget() instanceof User) {
 154             User target = (User) c.getTarget();
 155             vars2.put("defaultName", target.getPreferredName().toString());
 156             vars2.put("defaultEmail", target.getEmail());
 157             Domain[] domains = target.getDomains();
 158             if (domains.length > 0) {
 159                 vars2.put("defaultDomain", domains[0].getSuffix());
 160             }
 161         }
 162         vars2.put("CN", cr.getName());
 163         if (c.getTarget() instanceof Organisation) {
 164             vars2.put("orga", "true");
 165             vars2.put("department", cr.getOu());
 166         }
 167         vars2.put("secureHostname", new Outputable() {
 168
 169             @Override
 170             public void output(PrintWriter out, Language l, Map<String, Object> vars) {
 171                 out.print("<code>");
 172                 out.print(HTMLEncoder.encodeHTML("https://" + ServerConstants.getHostNamePortSecure(Host.SECURE)));
 173                 out.print("</code>");
 174             }
 175         });
 176         vars2.put("validity", issueDate);
 177         vars2.put("emails", content.toString());
 178         vars2.put("hashs", new HashAlgorithms(cr.getSelectedDigest()));
 179         vars2.put("profiles", new IterableDataset() {
 180
 181             CertificateProfile[] cps = CertificateProfile.getAll();
 182
 183             int i = 0;
 184
 185             @Override
 186             public boolean next(Language l, Map<String, Object> vars) {
 187                 CertificateProfile cp;
 188                 do {
 189                     if (i >= cps.length) {
 190                         return false;
 191                     }
 192                     cp = cps[i];
 193                     i++;
 194                 } while ( !cp.canBeIssuedBy(c.getTarget(), c.getActor()));
 195
 196                 if (cp.getId() == cr.getProfile().getId()) {
 197                     vars.put("selected", " selected");
 198                 } else {
 199                     vars.put("selected", "");
 200                 }
 201                 vars.put("key", cp.getKeyName());
 202                 vars.put("name", cp.getVisibleName());
 203                 return true;
 204             }
 205         });
 206
 207         t.output(out, l, vars2);
 208     }
 209 }