1 package org.cacert.gigi.pages.account.certs;
3 import java.io.IOException;
4 import java.io.PrintWriter;
5 import java.security.GeneralSecurityException;
6 import java.util.HashMap;
9 import javax.servlet.http.HttpServletRequest;
11 import org.cacert.gigi.GigiApiException;
12 import org.cacert.gigi.dbObjects.Certificate;
13 import org.cacert.gigi.dbObjects.Certificate.CertificateStatus;
14 import org.cacert.gigi.dbObjects.Certificate.SubjectAlternateName;
15 import org.cacert.gigi.dbObjects.CertificateProfile;
16 import org.cacert.gigi.dbObjects.Domain;
17 import org.cacert.gigi.dbObjects.Organisation;
18 import org.cacert.gigi.dbObjects.User;
19 import org.cacert.gigi.localisation.Language;
20 import org.cacert.gigi.output.CertificateValiditySelector;
21 import org.cacert.gigi.output.HashAlgorithms;
22 import org.cacert.gigi.output.template.Form;
23 import org.cacert.gigi.output.template.IterableDataset;
24 import org.cacert.gigi.output.template.Outputable;
25 import org.cacert.gigi.output.template.Template;
26 import org.cacert.gigi.pages.LoginPage;
27 import org.cacert.gigi.util.AuthorizationContext;
28 import org.cacert.gigi.util.HTMLEncoder;
29 import org.cacert.gigi.util.RandomToken;
30 import org.cacert.gigi.util.ServerConstants;
33 * This class represents a form that is used for issuing certificates. This
34 * class uses "sun.security" and therefore needs "-XDignore.symbol.file"
36 public class CertificateIssueForm extends Form {
38 private final static Template t = new Template(CertificateIssueForm.class.getResource("CertificateIssueForm.templ"));
40 private final static Template tIni = new Template(CertificateAdd.class.getResource("RequestCertificate.templ"));
42 private AuthorizationContext c;
44 private String spkacChallenge;
46 private boolean login;
48 public CertificateIssueForm(HttpServletRequest hsr) {
50 c = LoginPage.getAuthorizationContext(hsr);
51 spkacChallenge = RandomToken.generateToken(16);
54 private Certificate result;
56 public Certificate getResult() {
60 private CertificateRequest cr;
62 CertificateValiditySelector issueDate = new CertificateValiditySelector();
65 public SubmissionResult submit(HttpServletRequest req) throws GigiApiException {
66 String csr = req.getParameter("CSR");
67 String spkac = req.getParameter("SPKAC");
70 cr = new CertificateRequest(c, csr);
71 // TODO cr.checkKeyStrength(out);
72 return new FormContinue();
73 } else if (spkac != null) {
74 cr = new CertificateRequest(c, spkac, spkacChallenge);
75 // TODO cr.checkKeyStrength(out);
76 return new FormContinue();
77 } else if (cr != null) {
78 login = "1".equals(req.getParameter("login"));
79 issueDate.update(req);
80 GigiApiException error = new GigiApiException();
83 cr.update(req.getParameter("CN"), req.getParameter("hash_alg"), req.getParameter("profile"), //
84 req.getParameter("org"), req.getParameter("OU"), req.getParameter("SANs"));
85 } catch (GigiApiException e) {
89 Certificate result = null;
92 } catch (GigiApiException e) {
95 if ( !error.isEmpty() || result == null) {
99 result.setLoginEnabled(true);
101 result.issue(issueDate.getFrom(), issueDate.getTo(), c.getActor()).waitFor(60000);
102 this.result = result;
103 Certificate c = result;
104 if (c.getStatus() != CertificateStatus.ISSUED) {
105 throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
107 String ser = c.getSerial();
109 throw new PermamentFormException(new GigiApiException("Timeout while waiting for certificate."));
111 return new RedirectResult(Certificates.PATH + "/" + ser);
113 throw new GigiApiException("Error no action.");
115 } catch (IOException e) {
117 throw new GigiApiException("Certificate Request format is invalid.");
118 } catch (IllegalArgumentException e) {
120 throw new GigiApiException("Certificate Request format is invalid.");
121 } catch (GeneralSecurityException e) {
123 throw new GigiApiException("Certificate Request format is invalid.");
128 public void output(PrintWriter out, Language l, Map<String, Object> vars) {
130 HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
131 vars2.put("csrf", getCSRFToken());
132 vars2.put("csrf_name", getCsrfFieldName());
133 vars2.put("spkacChallenge", spkacChallenge);
134 tIni.output(out, l, vars2);
137 super.output(out, l, vars);
142 protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
143 HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
145 StringBuffer content = new StringBuffer();
146 for (SubjectAlternateName SAN : cr.getSANs()) {
147 content.append(SAN.getType().toString().toLowerCase());
149 content.append(SAN.getName());
150 content.append('\n');
152 vars2.put("placeholderName", CertificateRequest.DEFAULT_CN);
153 if (c.getTarget() instanceof User) {
154 User target = (User) c.getTarget();
155 vars2.put("defaultName", target.getPreferredName().toString());
156 vars2.put("defaultEmail", target.getEmail());
157 Domain[] domains = target.getDomains();
158 if (domains.length > 0) {
159 vars2.put("defaultDomain", domains[0].getSuffix());
162 vars2.put("CN", cr.getName());
163 if (c.getTarget() instanceof Organisation) {
164 vars2.put("orga", "true");
165 vars2.put("department", cr.getOu());
167 vars2.put("secureHostname", new Outputable() {
170 public void output(PrintWriter out, Language l, Map<String, Object> vars) {
172 out.print(HTMLEncoder.encodeHTML("https://" + ServerConstants.getSecureHostNamePortSecure()));
173 out.print("</code>");
176 vars2.put("validity", issueDate);
177 vars2.put("emails", content.toString());
178 vars2.put("hashs", new HashAlgorithms(cr.getSelectedDigest()));
179 vars2.put("profiles", new IterableDataset() {
181 CertificateProfile[] cps = CertificateProfile.getAll();
186 public boolean next(Language l, Map<String, Object> vars) {
187 CertificateProfile cp;
189 if (i >= cps.length) {
194 } while ( !cp.canBeIssuedBy(c.getTarget(), c.getActor()));
196 if (cp.getId() == cr.getProfile().getId()) {
197 vars.put("selected", " selected");
199 vars.put("selected", "");
201 vars.put("key", cp.getKeyName());
202 vars.put("name", cp.getVisibleName());
207 t.output(out, l, vars2);