src/org/cacert/gigi/pages/account/certs/CertificateIssueForm.java

   1 package org.cacert.gigi.pages.account.certs;
   2
   3 import java.io.IOException;
   4 import java.io.PrintWriter;
   5 import java.security.GeneralSecurityException;
   6 import java.util.HashMap;
   7 import java.util.Map;
   8
   9 import javax.servlet.http.HttpServletRequest;
  10
  11 import org.cacert.gigi.GigiApiException;
  12 import org.cacert.gigi.dbObjects.Certificate;
  13 import org.cacert.gigi.dbObjects.Certificate.SubjectAlternateName;
  14 import org.cacert.gigi.dbObjects.CertificateProfile;
  15 import org.cacert.gigi.dbObjects.Organisation;
  16 import org.cacert.gigi.localisation.Language;
  17 import org.cacert.gigi.output.CertificateValiditySelector;
  18 import org.cacert.gigi.output.HashAlgorithms;
  19 import org.cacert.gigi.output.template.Form;
  20 import org.cacert.gigi.output.template.IterableDataset;
  21 import org.cacert.gigi.output.template.Template;
  22 import org.cacert.gigi.pages.LoginPage;
  23 import org.cacert.gigi.util.AuthorizationContext;
  24 import org.cacert.gigi.util.RandomToken;
  25
  26 /**
  27  * This class represents a form that is used for issuing certificates. This
  28  * class uses "sun.security" and therefore needs "-XDignore.symbol.file"
  29  */
  30 public class CertificateIssueForm extends Form {
  31
  32     private final static Template t = new Template(CertificateIssueForm.class.getResource("CertificateIssueForm.templ"));
  33
  34     private final static Template tIni = new Template(CertificateAdd.class.getResource("RequestCertificate.templ"));
  35
  36     private AuthorizationContext c;
  37
  38     private String spkacChallenge;
  39
  40     private boolean login;
  41
  42     public CertificateIssueForm(HttpServletRequest hsr) {
  43         super(hsr);
  44         c = LoginPage.getAuthorizationContext(hsr);
  45         spkacChallenge = RandomToken.generateToken(16);
  46     }
  47
  48     private Certificate result;
  49
  50     public Certificate getResult() {
  51         return result;
  52     }
  53
  54     private CertificateRequest cr;
  55
  56     CertificateValiditySelector issueDate = new CertificateValiditySelector();
  57
  58     @Override
  59     public boolean submit(HttpServletRequest req) throws GigiApiException {
  60         String csr = req.getParameter("CSR");
  61         String spkac = req.getParameter("SPKAC");
  62         try {
  63             if (csr != null) {
  64                 cr = new CertificateRequest(c, csr);
  65                 // TODO cr.checkKeyStrength(out);
  66                 return false;
  67             } else if (spkac != null) {
  68                 cr = new CertificateRequest(c, spkac, spkacChallenge);
  69                 // TODO cr.checkKeyStrength(out);
  70                 return false;
  71             } else if (cr != null) {
  72                 login = "1".equals(req.getParameter("login"));
  73                 issueDate.update(req);
  74                 GigiApiException error = new GigiApiException();
  75
  76                 try {
  77                     cr.update(req.getParameter("CN"), req.getParameter("hash_alg"), req.getParameter("profile"), //
  78                             req.getParameter("org"), req.getParameter("OU"), req.getParameter("SANs"));
  79                 } catch (GigiApiException e) {
  80                     error.mergeInto(e);
  81                 }
  82
  83                 Certificate result = null;
  84                 try {
  85                     result = cr.draft();
  86                 } catch (GigiApiException e) {
  87                     error.mergeInto(e);
  88                 }
  89                 if ( !error.isEmpty() || result == null) {
  90                     throw error;
  91                 }
  92                 if (login) {
  93                     result.setLoginEnabled(true);
  94                 }
  95                 result.issue(issueDate.getFrom(), issueDate.getTo(), c.getActor()).waitFor(60000);
  96                 this.result = result;
  97                 return true;
  98             } else {
  99                 throw new GigiApiException("Error no action.");
 100             }
 101         } catch (IOException e) {
 102             e.printStackTrace();
 103             throw new GigiApiException("Certificate Request format is invalid.");
 104         } catch (IllegalArgumentException e) {
 105             e.printStackTrace();
 106             throw new GigiApiException("Certificate Request format is invalid.");
 107         } catch (GeneralSecurityException e) {
 108             e.printStackTrace();
 109             throw new GigiApiException("Certificate Request format is invalid.");
 110         }
 111     }
 112
 113     @Override
 114     public void output(PrintWriter out, Language l, Map<String, Object> vars) {
 115         if (cr == null) {
 116             HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 117             vars2.put("csrf", getCSRFToken());
 118             vars2.put("csrf_name", getCsrfFieldName());
 119             vars2.put("spkacChallenge", spkacChallenge);
 120             tIni.output(out, l, vars2);
 121             return;
 122         } else {
 123             super.output(out, l, vars);
 124         }
 125     }
 126
 127     @Override
 128     protected void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
 129         HashMap<String, Object> vars2 = new HashMap<String, Object>(vars);
 130
 131         StringBuffer content = new StringBuffer();
 132         for (SubjectAlternateName SAN : cr.getSANs()) {
 133             content.append(SAN.getType().toString().toLowerCase());
 134             content.append(':');
 135             content.append(SAN.getName());
 136             content.append('\n');
 137         }
 138
 139         vars2.put("CN", cr.getName());
 140         if (c.getTarget() instanceof Organisation) {
 141             vars2.put("orga", "true");
 142             vars2.put("department", cr.getOu());
 143         }
 144         vars2.put("validity", issueDate);
 145         vars2.put("emails", content.toString());
 146         vars2.put("hashs", new HashAlgorithms(cr.getSelectedDigest()));
 147         vars2.put("profiles", new IterableDataset() {
 148
 149             CertificateProfile[] cps = CertificateProfile.getAll();
 150
 151             int i = 0;
 152
 153             @Override
 154             public boolean next(Language l, Map<String, Object> vars) {
 155                 CertificateProfile cp;
 156                 do {
 157                     if (i >= cps.length) {
 158                         return false;
 159                     }
 160                     cp = cps[i];
 161                     i++;
 162                 } while ( !cp.canBeIssuedBy(c.getTarget(), c.getActor()));
 163
 164                 if (cp.getId() == cr.getProfile().getId()) {
 165                     vars.put("selected", " selected");
 166                 } else {
 167                     vars.put("selected", "");
 168                 }
 169                 vars.put("key", cp.getKeyName());
 170                 vars.put("name", cp.getVisibleName());
 171                 return true;
 172             }
 173         });
 174
 175         t.output(out, l, vars2);
 176     }
 177 }