src/org/cacert/gigi/pages/account/certs/CertificateIssueForm.java

   1 package org.cacert.gigi.pages.account.certs;
   2
   3 import java.io.IOException;
   4 import java.io.PrintWriter;
   5 import java.security.GeneralSecurityException;
   6 import java.util.HashMap;
   7 import java.util.Map;
   8
   9 import javax.servlet.http.HttpServletRequest;
  10
  11 import org.cacert.gigi.GigiApiException;
  12 import org.cacert.gigi.dbObjects.Certificate;
  13 import org.cacert.gigi.dbObjects.Certificate.SubjectAlternateName;
  14 import org.cacert.gigi.dbObjects.CertificateProfile;
  15 import org.cacert.gigi.dbObjects.Organisation;
  16 import org.cacert.gigi.localisation.Language;
  17 import org.cacert.gigi.output.CertificateValiditySelector;
  18 import org.cacert.gigi.output.HashAlgorithms;
  19 import org.cacert.gigi.output.template.Form;
  20 import org.cacert.gigi.output.template.IterableDataset;
  21 import org.cacert.gigi.output.template.Template;
  22 import org.cacert.gigi.pages.LoginPage;
  23 import org.cacert.gigi.pages.Page;
  24 import org.cacert.gigi.util.AuthorizationContext;
  25 import org.cacert.gigi.util.RandomToken;
  26
  27 /**
  28  * This class represents a form that is used for issuing certificates. This
  29  * class uses "sun.security" and therefore needs "-XDignore.symbol.file"
  30  */
  31 public class CertificateIssueForm extends Form {
  32
  33     private final static Template t = new Template(CertificateIssueForm.class.getResource("CertificateIssueForm.templ"));
  34
  35     private final static Template tIni = new Template(CertificateAdd.class.getResource("RequestCertificate.templ"));
  36
  37     private AuthorizationContext c;
  38
  39     private String spkacChallenge;
  40
  41     private boolean login;
  42
  43     public CertificateIssueForm(HttpServletRequest hsr) {
  44         super(hsr);
  45         c = LoginPage.getAuthorizationContext(hsr);
  46         spkacChallenge = RandomToken.generateToken(16);
  47     }
  48
  49     private Certificate result;
  50
  51     public Certificate getResult() {
  52         return result;
  53     }
  54
  55     private CertificateRequest cr;
  56
  57     CertificateValiditySelector issueDate = new CertificateValiditySelector();
  58
  59     @Override
  60     public boolean submit(PrintWriter out, HttpServletRequest req) {
  61         String csr = req.getParameter("CSR");
  62         String spkac = req.getParameter("SPKAC");
  63         try {
  64             try {
  65                 if (csr != null) {
  66                     cr = new CertificateRequest(c, csr);
  67                     cr.checkKeyStrength(out);
  68                 } else if (spkac != null) {
  69                     cr = new CertificateRequest(c, spkac, spkacChallenge);
  70                     cr.checkKeyStrength(out);
  71                 } else if (cr != null) {
  72                     login = "1".equals(req.getParameter("login"));
  73                     issueDate.update(req);
  74                     GigiApiException error = new GigiApiException();
  75
  76                     try {
  77                         cr.update(req.getParameter("CN"), req.getParameter("hash_alg"), req.getParameter("profile"), //
  78                                 req.getParameter("org"), req.getParameter("OU"), req.getParameter("SANs"), out, req);
  79                     } catch (GigiApiException e) {
  80                         error.mergeInto(e);
  81                     }
  82                     if (req.getParameter("CCA") == null) {
  83                         error.mergeInto(new GigiApiException("You need to accept the CCA."));
  84                     }
  85                     Certificate result = null;
  86                     try {
  87                         result = cr.draft();
  88                     } catch (GigiApiException e) {
  89                         error.mergeInto(e);
  90                     }
  91                     if ( !error.isEmpty() || result == null) {
  92                         error.format(out, Page.getLanguage(req));
  93                         return false;
  94                     }
  95                     result.issue(issueDate.getFrom(), issueDate.getTo(), c.getActor()).waitFor(60000);
  96                     this.result = result;
  97                     return true;
  98                 } else {
  99                     throw new GigiApiException("Error no action.");
 100                 }
 101             } catch (IOException e) {
 102                 e.printStackTrace();
 103             } catch (IllegalArgumentException e) {
 104                 e.printStackTrace();
 105                 throw new GigiApiException("Certificate Request format is invalid.");
 106             } catch (GeneralSecurityException e) {
 107                 e.printStackTrace();
 108                 throw new GigiApiException("Certificate Request format is invalid.");
 109             } catch (InterruptedException e) {
 110                 e.printStackTrace();
 111             }
 112         } catch (GigiApiException e) {
 113             e.format(out, Page.getLanguage(req));
 114         }
 115         return false;
 116     }
 117
 118     @Override
 119     public void output(PrintWriter out, Language l, Map<String, Object> vars) {
 120         if (cr == null) {
 121             HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 122             vars2.put("csrf", getCSRFToken());
 123             vars2.put("csrf_name", getCsrfFieldName());
 124             vars2.put("spkacChallenge", spkacChallenge);
 125             tIni.output(out, l, vars2);
 126             return;
 127         } else {
 128             super.output(out, l, vars);
 129         }
 130     }
 131
 132     @Override
 133     protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
 134         HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 135         vars2.put("CCA", "<a href='/policy/CAcertCommunityAgreement.html'>CCA</a>");
 136
 137         StringBuffer content = new StringBuffer();
 138         for (SubjectAlternateName SAN : cr.getSANs()) {
 139             content.append(SAN.getType().toString().toLowerCase());
 140             content.append(':');
 141             content.append(SAN.getName());
 142             content.append('\n');
 143         }
 144
 145         vars2.put("CN", cr.getName());
 146         if (c.getTarget() instanceof Organisation) {
 147             vars2.put("orga", "true");
 148             vars2.put("department", cr.getOu());
 149         }
 150         vars2.put("validity", issueDate);
 151         vars2.put("emails", content.toString());
 152         vars2.put("hashs", new HashAlgorithms(cr.getSelectedDigest()));
 153         vars2.put("profiles", new IterableDataset() {
 154
 155             int i = 1;
 156
 157             @Override
 158             public boolean next(Language l, Map<String, Object> vars) {
 159                 CertificateProfile cp;
 160                 do {
 161                     cp = CertificateProfile.getById(i++);
 162                     if (cp == null) {
 163                         return false;
 164                     }
 165                 } while ( !cp.canBeIssuedBy(c.getTarget(), c.getActor()));
 166
 167                 if (cp.getId() == cr.getProfile().getId()) {
 168                     vars.put("selected", " selected");
 169                 } else {
 170                     vars.put("selected", "");
 171                 }
 172                 vars.put("key", cp.getKeyName());
 173                 vars.put("name", cp.getVisibleName());
 174                 return true;
 175             }
 176         });
 177
 178         t.output(out, l, vars2);
 179     }
 180 }