util-testing/org/cacert/gigi/pages/Manager.java

   1 package org.cacert.gigi.pages;
   2
   3 import java.io.IOException;
   4 import java.io.PrintWriter;
   5 import java.lang.reflect.Field;
   6 import java.security.GeneralSecurityException;
   7 import java.security.KeyPair;
   8 import java.security.KeyPairGenerator;
   9 import java.security.Signature;
  10 import java.sql.Date;
  11 import java.util.Base64;
  12 import java.util.Calendar;
  13 import java.util.GregorianCalendar;
  14 import java.util.HashMap;
  15 import java.util.Iterator;
  16 import java.util.LinkedList;
  17 import java.util.Locale;
  18 import java.util.Map;
  19 import java.util.Properties;
  20
  21 import javax.servlet.http.HttpServletRequest;
  22 import javax.servlet.http.HttpServletResponse;
  23
  24 import org.cacert.gigi.GigiApiException;
  25 import org.cacert.gigi.crypto.SPKAC;
  26 import org.cacert.gigi.database.DatabaseConnection;
  27 import org.cacert.gigi.database.GigiPreparedStatement;
  28 import org.cacert.gigi.dbObjects.Digest;
  29 import org.cacert.gigi.dbObjects.EmailAddress;
  30 import org.cacert.gigi.dbObjects.Group;
  31 import org.cacert.gigi.dbObjects.Name;
  32 import org.cacert.gigi.dbObjects.User;
  33 import org.cacert.gigi.email.EmailProvider;
  34 import org.cacert.gigi.localisation.Language;
  35 import org.cacert.gigi.output.template.IterableDataset;
  36 import org.cacert.gigi.output.template.Template;
  37 import org.cacert.gigi.pages.account.certs.CertificateRequest;
  38 import org.cacert.gigi.util.Notary;
  39
  40 import sun.security.x509.X509Key;
  41
  42 public class Manager extends Page {
  43
  44     public static final String PATH = "/manager";
  45
  46     Field f;
  47
  48     private Manager() {
  49         super("Test Manager");
  50         try {
  51             f = EmailAddress.class.getDeclaredField("hash");
  52             f.setAccessible(true);
  53         } catch (ReflectiveOperationException e) {
  54             throw new Error(e);
  55         }
  56     }
  57
  58     public User[] getAssurers() {
  59         if (assurers != null) {
  60             return assurers;
  61         }
  62         assurers = new User[10];
  63         try {
  64             GigiPreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?");
  65             for (int i = 0; i < assurers.length; i++) {
  66                 String mail = "test-assurer" + i + "@example.com";
  67                 User u = User.getByEmail(mail);
  68                 if (u == null) {
  69                     System.out.println("Creating assurer");
  70                     createUser(mail);
  71                     u = User.getByEmail(mail);
  72                     passCATS(u);
  73                     ps.setInt(1, u.getId());
  74                     ps.setInt(2, u.getId());
  75                     ps.setInt(3, 100);
  76                     ps.setString(4, "Manager init code");
  77                     ps.setString(5, "1990-01-01");
  78                     ps.execute();
  79                 }
  80                 assurers[i] = u;
  81
  82             }
  83         } catch (ReflectiveOperationException | GigiApiException e) {
  84             e.printStackTrace();
  85         }
  86         return assurers;
  87     }
  88
  89     private void passCATS(User u) {
  90         GigiPreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO cats_passed SET user_id=?, variant_id=3");
  91         ps.setInt(1, u.getId());
  92         ps.execute();
  93     }
  94
  95     private static Manager instance;
  96
  97     Template t = new Template(Manager.class.getResource("ManagerMails.templ"));
  98
  99     HashMap<String, LinkedList<String>> emails = new HashMap<>();
 100
 101     public static Manager getInstance() {
 102         if (instance == null) {
 103             instance = new Manager();
 104         }
 105         return instance;
 106     }
 107
 108     public static class MailFetcher extends EmailProvider {
 109
 110         public MailFetcher(Properties p) {}
 111
 112         @Override
 113         public String checkEmailServer(int forUid, String address) throws IOException {
 114             return OK;
 115         }
 116
 117         @Override
 118         public synchronized void sendmail(String to, String subject, String message, String from, String replyto, String toname, String fromname, String errorsto, boolean extra) throws IOException {
 119             HashMap<String, LinkedList<String>> mails = Manager.getInstance().emails;
 120             LinkedList<String> hismails = mails.get(to);
 121             if (hismails == null) {
 122                 mails.put(to, hismails = new LinkedList<>());
 123             }
 124             hismails.addFirst(subject + "\n" + message);
 125         }
 126
 127     }
 128
 129     public void batchCreateUsers(String mailPrefix, String domain, int amount, PrintWriter out) {
 130
 131         try {
 132             if (amount > 100) {
 133                 out.print("100 at most, please.");
 134                 return;
 135             }
 136             for (int i = 0; i < amount; i++) {
 137                 String email = mailPrefix + i + "@" + domain;
 138                 createUser(email);
 139             }
 140         } catch (ReflectiveOperationException e) {
 141             out.println("failed");
 142             e.printStackTrace();
 143         } catch (GigiApiException e) {
 144             out.println("failed: " + e.getMessage());
 145             e.printStackTrace();
 146         }
 147     }
 148
 149     private void createUser(String email) throws GigiApiException, IllegalAccessException {
 150         User u = new User();
 151         u.setName(new Name("Först", "Läst", "Müddle", "Süffix"));
 152         u.setEmail(email);
 153         Calendar gc = GregorianCalendar.getInstance();
 154         gc.set(1990, 0, 1);
 155         u.setDoB(new Date(gc.getTime().getTime()));
 156         u.setPreferredLocale(Locale.ENGLISH);
 157         u.insert("xvXV12°§");
 158         EmailAddress ea = new EmailAddress(u, email);
 159         ea.insert(Language.getInstance(Locale.ENGLISH));
 160         String hash = (String) f.get(ea);
 161
 162         ea.verify(hash);
 163     }
 164
 165     User[] assurers;
 166
 167     @Override
 168     public void doPost(HttpServletRequest req, HttpServletResponse resp) throws IOException {
 169         if (req.getParameter("create") != null) {
 170             batchCreateUsers(req.getParameter("prefix"), req.getParameter("suffix"), Integer.parseInt(req.getParameter("amount")), resp.getWriter());
 171             resp.getWriter().println("User batch created.");
 172         } else if (req.getParameter("addpriv") != null || req.getParameter("delpriv") != null) {
 173             User u = User.getByEmail(req.getParameter("email"));
 174             if (u == null) {
 175                 resp.getWriter().println("User not found.");
 176                 return;
 177             }
 178             if (req.getParameter("addpriv") != null) {
 179                 u.grantGroup(u, Group.getByString(req.getParameter("priv")));
 180                 resp.getWriter().println("Privilege granted");
 181             } else {
 182                 u.revokeGroup(u, Group.getByString(req.getParameter("priv")));
 183                 resp.getWriter().println("Privilege revoked");
 184             }
 185         } else if (req.getParameter("fetch") != null) {
 186             String mail = req.getParameter("femail");
 187             fetchMails(req, resp, mail);
 188         } else if (req.getParameter("cats") != null) {
 189             String mail = req.getParameter("catsEmail");
 190             User byEmail = User.getByEmail(mail);
 191             if (byEmail == null) {
 192                 resp.getWriter().println("User not found.");
 193                 return;
 194             }
 195             passCATS(byEmail);
 196             resp.getWriter().println("User has been passed CATS");
 197         } else if (req.getParameter("assure") != null) {
 198             String mail = req.getParameter("assureEmail");
 199             User byEmail = User.getByEmail(mail);
 200             if (byEmail == null) {
 201                 resp.getWriter().println("User not found.");
 202                 return;
 203             }
 204             try {
 205                 for (int i = 0; i < getAssurers().length; i++) {
 206                     Notary.assure(getAssurers()[i], byEmail, byEmail.getName(), byEmail.getDoB(), 10, "Testmanager Assure up code", "2014-11-06");
 207                 }
 208             } catch (GigiApiException e) {
 209                 throw new Error(e);
 210             }
 211             resp.getWriter().println("User has been assured.");
 212         } else if (req.getParameter("addEmail") != null) {
 213             User u = User.getByEmail(req.getParameter("addEmailEmail"));
 214             EmailAddress ea = new EmailAddress(u, req.getParameter("addEmailNew"));
 215             try {
 216                 ea.insert(Language.getInstance(Locale.ENGLISH));
 217                 String hash = (String) f.get(ea);
 218                 ea.verify(hash);
 219                 resp.getWriter().println("Email added and verified");
 220             } catch (IllegalArgumentException e) {
 221                 e.printStackTrace();
 222                 resp.getWriter().println("An internal error occured.");
 223             } catch (IllegalAccessException e) {
 224                 e.printStackTrace();
 225                 resp.getWriter().println("An internal error occured.");
 226             } catch (GigiApiException e) {
 227                 e.format(resp.getWriter(), Language.getInstance(Locale.ENGLISH));
 228             }
 229         } else if (req.getParameter("addCert") != null) {
 230             User u = User.getByEmail(req.getParameter("addCertEmail"));
 231             try {
 232                 KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA");
 233                 kpg.initialize(4096);
 234                 KeyPair kp = kpg.generateKeyPair();
 235                 SPKAC s = new SPKAC((X509Key) kp.getPublic(), "challange");
 236                 Signature sign = Signature.getInstance("SHA512withRSA");
 237                 sign.initSign(kp.getPrivate());
 238
 239                 byte[] res = s.getEncoded(sign);
 240
 241                 CertificateRequest cr = new CertificateRequest(u, Base64.getEncoder().encodeToString(res), "challange");
 242                 cr.update(CertificateRequest.DEFAULT_CN, Digest.SHA512.toString(), "client", null, "", "email:" + u.getEmail(), resp.getWriter(), req);
 243                 cr.draft().issue(null, "2y");
 244                 resp.getWriter().println("added certificate");
 245             } catch (GeneralSecurityException e1) {
 246                 e1.printStackTrace();
 247                 resp.getWriter().println("error");
 248             } catch (GigiApiException e) {
 249                 e.format(resp.getWriter(), Language.getInstance(Locale.ENGLISH));
 250             }
 251
 252         }
 253     }
 254
 255     private void fetchMails(HttpServletRequest req, HttpServletResponse resp, String mail) throws IOException {
 256         final LinkedList<String> mails = emails.get(mail);
 257         HashMap<String, Object> vars = new HashMap<>();
 258         vars.put("mail", mail);
 259         if (mails != null) {
 260             vars.put("mails", new IterableDataset() {
 261
 262                 Iterator<String> s = mails.iterator();
 263
 264                 @Override
 265                 public boolean next(Language l, Map<String, Object> vars) {
 266                     if ( !s.hasNext()) {
 267                         return false;
 268                     }
 269                     vars.put("body", s.next().replaceAll("(https?://\\S+)", "<a href=\"$1\">$1</a>"));
 270                     return true;
 271                 }
 272             });
 273         }
 274         t.output(resp.getWriter(), getLanguage(req), vars);
 275         if (mails == null) {
 276             resp.getWriter().println("No mails");
 277
 278         }
 279     }
 280
 281     private Template form = new Template(Manager.class.getResource("Manager.templ"));
 282
 283     @Override
 284     public boolean needsLogin() {
 285         return false;
 286     }
 287
 288     @Override
 289     public void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException {
 290         getAssurers();
 291         String pi = req.getPathInfo().substring(PATH.length());
 292         if (pi.length() > 1 && pi.startsWith("/fetch-")) {
 293             String mail = pi.substring(pi.indexOf('-', 2) + 1);
 294             fetchMails(req, resp, mail);
 295             return;
 296         }
 297
 298         form.output(resp.getWriter(), getLanguage(req), new HashMap<String, Object>());
 299     }
 300 }