|
1
13
14 package org.ejbca.ui.web.pub;
15
16 import java.io.IOException  ;
17 import java.util.Date ;
18 import java.util.Enumeration ;
19
20 import javax.ejb.CreateException ;
21 import javax.ejb.EJBException ;
22 import javax.ejb.ObjectNotFoundException ;
23 import javax.naming.InitialContext ;
24 import javax.servlet.ServletConfig ;
25 import javax.servlet.ServletException ;
26 import javax.servlet.http.HttpServlet ;
27 import javax.servlet.http.HttpServletRequest ;
28 import javax.servlet.http.HttpServletResponse ;
29
30 import org.apache.log4j.Logger;
31 import org.ejbca.core.ejb.ServiceLocator;
32 import org.ejbca.core.ejb.ca.sign.ISignSessionLocal;
33 import org.ejbca.core.ejb.ca.sign.ISignSessionLocalHome;
34 import org.ejbca.core.ejb.ca.store.ICertificateStoreSessionHome;
35 import org.ejbca.core.ejb.ca.store.ICertificateStoreSessionRemote;
36 import org.ejbca.core.ejb.ra.IUserAdminSessionHome;
37 import org.ejbca.core.ejb.ra.IUserAdminSessionRemote;
38 import org.ejbca.core.ejb.ra.raadmin.IRaAdminSessionHome;
39 import org.ejbca.core.ejb.ra.raadmin.IRaAdminSessionRemote;
40 import org.ejbca.core.model.SecConst;
41 import org.ejbca.core.model.ca.AuthLoginException;
42 import org.ejbca.core.model.ca.AuthStatusException;
43 import org.ejbca.core.model.ca.SignRequestException;
44 import org.ejbca.core.model.ca.SignRequestSignatureException;
45 import org.ejbca.core.model.log.Admin;
46 import org.ejbca.core.model.ra.UserDataVO;
47 import org.ejbca.ui.web.RequestHelper;
48 import org.ejbca.util.CertTools;
49 import org.ejbca.util.StringTools;
50
51
52
53
54
94 public class DemoCertReqServlet extends HttpServlet {
95
96 private final static Logger log = Logger.getLogger(DemoCertReqServlet.class);
97
98 private IUserAdminSessionHome useradminsessionhome = null;
99 private IRaAdminSessionHome raadminsessionhome = null;
100 private ICertificateStoreSessionHome storesessionhome = null;
101
102 private final static int DEFAULT_DEMOCAID = 0;
104
105 private ISignSessionLocal signsession = null;
106
107 private synchronized ISignSessionLocal getSignSession(){
108 if(signsession == null){
109 try {
110 ISignSessionLocalHome signhome = (ISignSessionLocalHome)ServiceLocator.getInstance().getLocalHome(ISignSessionLocalHome.COMP_NAME);
111 signsession = signhome.create();
112 }catch(Exception e){
113 throw new EJBException (e);
114 }
115 }
116 return signsession;
117 }
118 public void init(ServletConfig config) throws ServletException
119 {
120 super.init(config);
121 try {
122 CertTools.installBCProvider();
124
125 InitialContext ctx = new InitialContext ();
127 useradminsessionhome = (IUserAdminSessionHome) javax.rmi.PortableRemoteObject.narrow(ctx.lookup("UserAdminSession"), IUserAdminSessionHome.class);
128 raadminsessionhome = (IRaAdminSessionHome) javax.rmi.PortableRemoteObject.narrow(ctx.lookup("RaAdminSession"), IRaAdminSessionHome.class);
129 storesessionhome = (ICertificateStoreSessionHome) javax.rmi.PortableRemoteObject.narrow(ctx.lookup("CertificateStoreSession"), ICertificateStoreSessionHome.class);
130 } catch (Exception e) {
131 throw new ServletException (e);
132 }
133 }
134
135
136
158 public void doPost(HttpServletRequest request, HttpServletResponse response)
159 throws IOException , ServletException
160 {
161 ServletDebug debug = new ServletDebug(request, response);
162
163 ISignSessionLocal signsession = null;
164 ICertificateStoreSessionRemote storesession = null;
165 IUserAdminSessionRemote useradminsession = null;
166 IRaAdminSessionRemote raadminsession = null;
167 try {
168 useradminsession = useradminsessionhome.create();
169 raadminsession = raadminsessionhome.create();
170 signsession = getSignSession();
171 storesession = storesessionhome.create();
172 } catch (CreateException e) {
173 throw new ServletException (e);
174 }
175
176 Admin admin = new Admin(Admin.TYPE_RA_USER, request.getRemoteAddr());
177 RequestHelper.setDefaultCharacterEncoding(request);
178
179 String dn = null;
180 dn = request.getParameter("user");
181 byte[] reqBytes = null;
182 int type = 0;
183 if (request.getParameter("keygen") != null) {
184 reqBytes=request.getParameter("keygen").getBytes();
185 log.debug("Received NS request:"+new String (reqBytes));
186 if (reqBytes != null) {
187 type = 1;
188 }
189 } else if (request.getParameter("pkcs10req") != null) {
190 reqBytes=request.getParameter("pkcs10req").getBytes();
192 log.debug("Received IE request:"+new String (reqBytes));
193 if (reqBytes != null) {
194 type = 2;
195 }
196 }
197 if (reqBytes == null) {
198 throw new ServletException ("A certification request must be provided!");
200 }
201
202 String username = request.getParameter("username");
203 if (username == null || username.trim().length() == 0) {
204 username = CertTools.getPartFromDN(dn, "CN");
205 }
206 username = username + "("+(new Date ()).toString()+")";
207 username = StringTools.strip(username);
209 boolean check = checkUsername(admin,username, useradminsession);
212 if (check == false) {
213 String msg = "User '"+username+"' already exist.";
214 log.error(msg);
215 debug.printMessage(msg);
216 debug.printDebugInfo();
217 return;
218 }
219
220 String classid = "clsid:127698e4-e730-4e5c-a2b1-21490a70c8a1\" CODEBASE=\"/CertControl/xenroll.cab#Version=5,131,3659,0";
222 if(request.getParameter("classid")!=null && !request.getParameter("classid").equals(""))
223 classid= request.getParameter("classid");
224
225 String includeEmail = request.getParameter("includeemail");
226 log.debug("includeEmail="+includeEmail);
227
228 UserDataVO newuser = new UserDataVO();
229 newuser.setType(SecConst.USER_ENDUSER);
230 newuser.setUsername(username);
231 newuser.setDN(dn);
232 newuser.setTokenType(SecConst.TOKEN_SOFT_BROWSERGEN);
233 newuser.setAdministrator(false);
234 newuser.setKeyRecoverable(false);
235 newuser.setSendNotification(false);
236
237 String email = request.getParameter("email");
238 if (email == null) email = CertTools.getPartFromDN(dn, "EMAILADDRESS");
239 if ((email != null) && (email.length() > 0)) {
240 newuser.setEmail(email);
241 if (includeEmail != null) {
242 newuser.setSubjectAltName("RFC822NAME="+email);
243 }
244 }
245
246 String tmp = null;
247 int eProfileId = SecConst.EMPTY_ENDENTITYPROFILE;
248 if ((tmp=request.getParameter("entityprofile")) != null) {
249 eProfileId = raadminsession.getEndEntityProfileId(admin, request.getParameter("entityprofile"));
250 if (eProfileId == 0) {
251 throw new ServletException ("No such end entity profile: " + tmp);
252 }
253 }
254 newuser.setEndEntityProfileId(eProfileId);
255
256 int cProfileId = SecConst.CERTPROFILE_FIXED_ENDUSER;
257 if ((tmp=request.getParameter("certificateprofile")) != null) {
258 cProfileId = storesession.getCertificateProfileId(admin, request.getParameter("certificateprofile"));
259 if (cProfileId == 0) {
260 throw new ServletException ("No such certificate profile: " + tmp);
261 }
262 }
263 newuser.setCertificateProfileId(cProfileId);
264
265 int caid = DEFAULT_DEMOCAID;
266 if ((tmp=request.getParameter("ca")) != null) {
267 }
271 newuser.setCAId(caid);
272
273
274 String password = request.getParameter("password");
275 if (password == null) password = "demo";
276 newuser.setPassword(password);
277
278
279 try {
280 useradminsession.addUser(admin, newuser.getUsername(), newuser.getPassword(), newuser.getDN(), newuser.getSubjectAltName()
281 ,newuser.getEmail(), false, newuser.getEndEntityProfileId(),
282 newuser.getCertificateProfileId(), newuser.getType(),
283 newuser.getTokenType(), newuser.getHardTokenIssuerId(), newuser.getCAId());
284 } catch (Exception e) {
285 throw new ServletException ("Error adding user: ", e);
286 }
287
288 RequestHelper helper = new RequestHelper(admin, debug);
289 try {
290 if (type == 1) {
291 byte[] certs = helper.nsCertRequest(signsession, reqBytes, username, password);
292 RequestHelper.sendNewCertToNSClient(certs, response);
293 }
294 if (type == 2) {
295 byte[] b64cert=helper.pkcs10CertRequest(signsession, reqBytes, username, password, RequestHelper.ENCODED_PKCS7);
296 debug.ieCertFix(b64cert);
297 RequestHelper.sendNewCertToIEClient(b64cert, response.getOutputStream(), getServletContext(), getInitParameter("responseTemplate"), classid);
298 }
299 } catch (ObjectNotFoundException oe) {
300 log.debug("Non existens username!");
301 debug.printMessage("Non existent username!");
302 debug.printMessage("To generate a certificate a valid username and password must be entered.");
303 debug.printDebugInfo();
304 return;
305 } catch (AuthStatusException ase) {
306 log.debug("Wrong user status!");
307 debug.printMessage("Wrong user status!");
308 debug.printMessage("To generate a certificate for a user the user must have status new, failed or inprocess.");
309 debug.printDebugInfo();
310 return;
311 } catch (AuthLoginException ale) {
312 log.debug("Wrong password for user!");
313 debug.printMessage("Wrong username or password!");
314 debug.printMessage("To generate a certificate a valid username and password must be entered.");
315 debug.printDebugInfo();
316 return;
317 } catch (SignRequestException re) {
318 log.debug("Invalid request!");
319 debug.printMessage("Invalid request!");
320 debug.printMessage("Please supply a correct request.");
321 debug.printDebugInfo();
322 return;
323 } catch (SignRequestSignatureException se) {
324 log.debug("Invalid signature on certificate request!");
325 debug.printMessage("Invalid signature on certificate request!");
326 debug.printMessage("Please supply a correctly signed request.");
327 debug.printDebugInfo();
328 return;
329 } catch (java.lang.ArrayIndexOutOfBoundsException ae) {
330 log.debug("Empty or invalid request received.");
331 debug.printMessage("Empty or invalid request!");
332 debug.printMessage("Please supply a correct request.");
333 debug.printDebugInfo();
334 return;
335 } catch (Exception e) {
336 log.debug(e);
337 debug.print("<h3>parameter name and values: </h3>");
338 Enumeration paramNames=request.getParameterNames();
339 while (paramNames.hasMoreElements()) {
340 String name=paramNames.nextElement().toString();
341 String parameter=request.getParameter(name);
342 debug.print("<h4>"+name+":</h4>"+parameter+"<br>");
343 }
344 debug.takeCareOfException(e);
345 debug.printDebugInfo();
346 return;
347 }
348 }
349
350
351 public void doGet(HttpServletRequest request, HttpServletResponse response) throws IOException , ServletException
352 {
353 log.debug(">doGet()");
354 response.setHeader("Allow", "POST");
355 ServletDebug debug = new ServletDebug(request,response);
356 debug.print("The certificate request servlet only handles POST method.");
357 debug.printDebugInfo();
358 log.debug("<doGet()");
359 }
361
362
363
366 private final boolean checkUsername(Admin admin, String username, IUserAdminSessionRemote adminsession) throws ServletException
367 {
368 if (username != null) username = username.trim();
369 if (username == null || username.length() == 0) {
370 throw new ServletException ("Username must not be empty.");
371 }
372
373 UserDataVO tmpuser = null;
374 try {
375 tmpuser = adminsession.findUser(admin, username);
376 } catch (Exception e) {
377 throw new ServletException ("Error checking username '" + username +": ", e);
378 }
379 return (tmpuser==null) ? true:false;
380 }
381
382 }
383 |
Popular Tags |
Java API By Example, From Geeks To Geeks.