Added search filter for pki ca-authority-find.

The pki ca-authority-find CLI has been modified to provide search
filter based on the authority ID, parent ID, authority DN, and
issuer DN.

https://pagure.io/dogtagpki/issue/2652

Change-Id: I563a0b93eb7a00ae4771069812455ecc552f407c

1 files changed, 28 insertions, 3 deletions

diff --git a/base/ca/src/org/dogtagpki/server/ca/rest/AuthorityService.java b/base/ca/src/org/dogtagpki/server/ca/rest/AuthorityService.java
index 7ba95963a..8502f44ca 100644
--- a/base/ca/src/org/dogtagpki/server/ca/rest/AuthorityService.java
+++ b/base/ca/src/org/dogtagpki/server/ca/rest/AuthorityService.java
@@ -60,6 +60,8 @@ import com.netscape.certsrv.logging.ILogger;
 import com.netscape.cms.servlet.base.SubsystemService;
 import com.netscape.cmsutil.util.Utils;
 
+import netscape.security.x509.X500Name;
+
 /**
  * @author ftweedal
  */
@@ -72,13 +74,36 @@ public class AuthorityService extends SubsystemService implements AuthorityResou
     }
 
     @Override
-    public Response listCAs() {
+    public Response findCAs(String id, String parentID, String dn, String issuerDN) throws Exception {
+
+        X500Name x500dn = dn == null ? null : new X500Name(dn);
+        X500Name x500issuerDN = issuerDN == null ? null : new X500Name(issuerDN);
+
         List<AuthorityData> results = new ArrayList<>();
-        for (ICertificateAuthority ca : hostCA.getCAs())
-            results.add(readAuthorityData(ca));
+
+        for (ICertificateAuthority ca : hostCA.getCAs()) {
+
+            AuthorityData authority = readAuthorityData(ca);
+
+            if (id != null && !id.equalsIgnoreCase(authority.getID())) continue;
+            if (parentID != null && !parentID.equalsIgnoreCase(authority.getParentID())) continue;
+
+            if (x500dn != null) {
+                X500Name caDN = new X500Name(authority.getDN());
+                if (!x500dn.equals(caDN)) continue;
+            }
+
+            if (x500issuerDN != null) {
+                X500Name caIssuerDN = new X500Name(authority.getIssuerDN());
+                if (!x500issuerDN.equals(caIssuerDN)) continue;
+            }
+
+            results.add(authority);
+        }
 
         GenericEntity<List<AuthorityData>> entity =
             new GenericEntity<List<AuthorityData>>(results) {};
+
         return createOKResponse(entity);
     }