src/club/wpia/gigi/pages/account/certs/CertificateIssueForm.java

   1 package club.wpia.gigi.pages.account.certs;
   2
   3 import java.io.IOException;
   4 import java.io.PrintWriter;
   5 import java.security.GeneralSecurityException;
   6 import java.util.HashMap;
   7 import java.util.Map;
   8
   9 import javax.servlet.http.HttpServletRequest;
  10
  11 import club.wpia.gigi.GigiApiException;
  12 import club.wpia.gigi.dbObjects.Certificate;
  13 import club.wpia.gigi.dbObjects.Certificate.CertificateStatus;
  14 import club.wpia.gigi.dbObjects.Certificate.SubjectAlternateName;
  15 import club.wpia.gigi.dbObjects.CertificateProfile;
  16 import club.wpia.gigi.dbObjects.Domain;
  17 import club.wpia.gigi.dbObjects.Job;
  18 import club.wpia.gigi.dbObjects.Organisation;
  19 import club.wpia.gigi.dbObjects.User;
  20 import club.wpia.gigi.localisation.Language;
  21 import club.wpia.gigi.output.CertificateValiditySelector;
  22 import club.wpia.gigi.output.HashAlgorithms;
  23 import club.wpia.gigi.output.template.Form;
  24 import club.wpia.gigi.output.template.IterableDataset;
  25 import club.wpia.gigi.output.template.Outputable;
  26 import club.wpia.gigi.output.template.Template;
  27 import club.wpia.gigi.pages.LoginPage;
  28 import club.wpia.gigi.util.AuthorizationContext;
  29 import club.wpia.gigi.util.HTMLEncoder;
  30 import club.wpia.gigi.util.RandomToken;
  31 import club.wpia.gigi.util.ServerConstants;
  32 import club.wpia.gigi.util.ServerConstants.Host;
  33
  34 /**
  35  * This class represents a form that is used for issuing certificates. This
  36  * class uses "sun.security" and therefore needs "-XDignore.symbol.file"
  37  */
  38 public class CertificateIssueForm extends Form {
  39
  40     private final static Template t = new Template(CertificateIssueForm.class.getResource("CertificateIssueForm.templ"));
  41
  42     private final static Template tIni = new Template(CertificateAdd.class.getResource("RequestCertificate.templ"));
  43
  44     private AuthorizationContext c;
  45
  46     private String spkacChallenge;
  47
  48     private boolean login;
  49
  50     public CertificateIssueForm(HttpServletRequest hsr) {
  51         super(hsr);
  52         c = LoginPage.getAuthorizationContext(hsr);
  53         spkacChallenge = RandomToken.generateToken(16);
  54     }
  55
  56     private Certificate result;
  57
  58     public Certificate getResult() {
  59         return result;
  60     }
  61
  62     private CertificateRequest cr;
  63
  64     CertificateValiditySelector issueDate = new CertificateValiditySelector();
  65
  66     @Override
  67     public SubmissionResult submit(HttpServletRequest req) throws GigiApiException {
  68         String csr = req.getParameter("CSR");
  69         String spkac = req.getParameter("SPKAC");
  70         try {
  71             if (csr != null) {
  72                 cr = new CertificateRequest(c, csr);
  73                 // TODO cr.checkKeyStrength(out);
  74                 return new FormContinue();
  75             } else if (spkac != null) {
  76                 cr = new CertificateRequest(c, spkac, spkacChallenge);
  77                 // TODO cr.checkKeyStrength(out);
  78                 return new FormContinue();
  79             } else if (cr != null) {
  80                 login = "1".equals(req.getParameter("login"));
  81                 issueDate.update(req);
  82                 GigiApiException error = new GigiApiException();
  83
  84                 try {
  85                     cr.update(req.getParameter("CN"), req.getParameter("hash_alg"), req.getParameter("profile"), //
  86                             req.getParameter("org"), req.getParameter("OU"), req.getParameter("SANs"));
  87                 } catch (GigiApiException e) {
  88                     error.mergeInto(e);
  89                 }
  90
  91                 Certificate result = null;
  92                 try {
  93                     result = cr.draft();
  94                 } catch (GigiApiException e) {
  95                     error.mergeInto(e);
  96                 }
  97                 if ( !error.isEmpty() || result == null) {
  98                     throw error;
  99                 }
 100                 if (login) {
 101                     result.setLoginEnabled(true);
 102                 }
 103                 if (req.getParameter("description") != null) {
 104                     String description = req.getParameter("description").trim();
 105                     if (description.length() > 100) {
 106                         throw new GigiApiException("Submitted description is longer than 100 characters.");
 107                     }
 108                     result.setDescription(description);
 109                 }
 110                 result.issue(issueDate.getFrom(), issueDate.getTo(), c.getActor()).waitFor(Job.WAIT_MIN);
 111                 this.result = result;
 112                 Certificate c = result;
 113                 if (c.getStatus() != CertificateStatus.ISSUED) {
 114                     throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
 115                 }
 116                 String ser = c.getSerial();
 117                 if (ser.isEmpty()) {
 118                     throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
 119                 }
 120                 return new RedirectResult(Certificates.PATH + "/" + ser);
 121             } else {
 122                 throw new GigiApiException("Error no action.");
 123             }
 124         } catch (IOException e) {
 125             e.printStackTrace();
 126             throw new GigiApiException("Certificate Request format is invalid.");
 127         } catch (IllegalArgumentException e) {
 128             e.printStackTrace();
 129             throw new GigiApiException("Certificate Request format is invalid.");
 130         } catch (GeneralSecurityException e) {
 131             e.printStackTrace();
 132             throw new GigiApiException("Certificate Request format is invalid.");
 133         }
 134     }
 135
 136     @Override
 137     public void output(PrintWriter out, Language l, Map<String, Object> vars) {
 138         if (cr == null) {
 139             HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 140             vars2.put("csrf", getCSRFToken());
 141             vars2.put("csrf_name", getCsrfFieldName());
 142             vars2.put("spkacChallenge", spkacChallenge);
 143             tIni.output(out, l, vars2);
 144             return;
 145         } else {
 146             super.output(out, l, vars);
 147         }
 148     }
 149
 150     @Override
 151     protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
 152         HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 153         StringBuffer content = new StringBuffer();
 154         for (SubjectAlternateName SAN : cr.getSANs()) {
 155             content.append(SAN.getType().toString().toLowerCase());
 156             content.append(':');
 157             content.append(SAN.getName());
 158             content.append('\n');
 159         }
 160         vars2.put("placeholderName", CertificateRequest.DEFAULT_CN);
 161         if (c.getTarget() instanceof User) {
 162             User target = (User) c.getTarget();
 163             vars2.put("defaultName", target.getPreferredName().toString());
 164             vars2.put("defaultEmail", target.getEmail());
 165             Domain[] domains = target.getDomains();
 166             if (domains.length > 0) {
 167                 vars2.put("defaultDomain", domains[0].getSuffix());
 168             }
 169         }
 170         vars2.put("CN", cr.getName());
 171         if (c.getTarget() instanceof Organisation) {
 172             vars2.put("orga", "true");
 173             vars2.put("department", cr.getOu());
 174         }
 175         vars2.put("secureHostname", new Outputable() {
 176
 177             @Override
 178             public void output(PrintWriter out, Language l, Map<String, Object> vars) {
 179                 out.print("<code>");
 180                 out.print(HTMLEncoder.encodeHTML("https://" + ServerConstants.getHostNamePortSecure(Host.SECURE)));
 181                 out.print("</code>");
 182             }
 183         });
 184         vars2.put("validity", issueDate);
 185         vars2.put("emails", content.toString());
 186         vars2.put("hashs", new HashAlgorithms(cr.getSelectedDigest()));
 187         vars2.put("profiles", new IterableDataset() {
 188
 189             CertificateProfile[] cps = CertificateProfile.getAll();
 190
 191             int i = 0;
 192
 193             @Override
 194             public boolean next(Language l, Map<String, Object> vars) {
 195                 CertificateProfile cp;
 196                 do {
 197                     if (i >= cps.length) {
 198                         return false;
 199                     }
 200                     cp = cps[i];
 201                     i++;
 202                 } while ( !cp.canBeIssuedBy(c.getTarget(), c.getActor()));
 203
 204                 if (cp.getId() == cr.getProfile().getId()) {
 205                     vars.put("selected", " selected");
 206                 } else {
 207                     vars.put("selected", "");
 208                 }
 209                 vars.put("key", cp.getKeyName());
 210                 vars.put("name", cp.getVisibleName());
 211                 return true;
 212             }
 213         });
 214
 215         t.output(out, l, vars2);
 216     }
 217 }