summaryrefslogtreecommitdiffstats
path: root/base/kra/src/com
diff options
context:
space:
mode:
authorAde Lee <alee@redhat.com>2017-05-24 12:31:45 -0400
committerAde Lee <alee@redhat.com>2017-05-24 14:49:30 -0400
commit3ddc916954d712f6fe25497789925fecebef20fc (patch)
tree5f2cd696c77fc7d54cd5188dc6d5cd56488b2874 /base/kra/src/com
parent84f3958dc9c1c5bfab4a8789e621d621a28cbdd6 (diff)
downloadpki-3ddc916954d712f6fe25497789925fecebef20fc.tar.gz
pki-3ddc916954d712f6fe25497789925fecebef20fc.tar.xz
pki-3ddc916954d712f6fe25497789925fecebef20fc.zip
Encapsulate symmetric and asymmetric keygen audit events
Change-Id: Ifc8d05bd1d2d34bb0ef25877f838731bed58d00e
Diffstat (limited to 'base/kra/src/com')
-rw-r--r--base/kra/src/com/netscape/kra/AsymKeyGenService.java20
-rw-r--r--base/kra/src/com/netscape/kra/SymKeyGenService.java16
2 files changed, 18 insertions, 18 deletions
diff --git a/base/kra/src/com/netscape/kra/AsymKeyGenService.java b/base/kra/src/com/netscape/kra/AsymKeyGenService.java
index cfee504ef..ea1d0ccdd 100644
--- a/base/kra/src/com/netscape/kra/AsymKeyGenService.java
+++ b/base/kra/src/com/netscape/kra/AsymKeyGenService.java
@@ -28,11 +28,13 @@ import com.netscape.certsrv.base.EBaseException;
import com.netscape.certsrv.base.IConfigStore;
import com.netscape.certsrv.dbs.keydb.IKeyRecord;
import com.netscape.certsrv.dbs.keydb.IKeyRepository;
+import com.netscape.certsrv.dbs.keydb.KeyId;
import com.netscape.certsrv.key.AsymKeyGenerationRequest;
import com.netscape.certsrv.key.KeyRequestResource;
import com.netscape.certsrv.kra.IKeyRecoveryAuthority;
import com.netscape.certsrv.logging.AuditEvent;
import com.netscape.certsrv.logging.ILogger;
+import com.netscape.certsrv.logging.event.AsymKeyGenerationProcessedEvent;
import com.netscape.certsrv.request.IRequest;
import com.netscape.certsrv.request.IService;
import com.netscape.certsrv.request.RequestId;
@@ -144,8 +146,8 @@ public class AsymKeyGenService implements IService {
} catch (EBaseException e) {
CMS.debugStackTrace();
auditAsymKeyGenRequestProcessed(auditSubjectID, ILogger.FAILURE, request.getRequestId(),
- clientKeyId, null, "Failed to generate Asymmetric key");
- throw new EBaseException("Errors in generating Asymmetric key: " + e);
+ clientKeyId, null, "Failed to generate asymmetric key: " + e.getMessage());
+ throw new EBaseException("Errors in generating Asymmetric key: " + e, e);
}
if (kp == null) {
@@ -205,7 +207,7 @@ public class AsymKeyGenService implements IService {
storage.addKeyRecord(record);
auditAsymKeyGenRequestProcessed(auditSubjectID, ILogger.SUCCESS, request.getRequestId(),
- clientKeyId, serialNo.toString(), "None");
+ clientKeyId, new KeyId(serialNo), "None");
request.setExtData(IRequest.RESULT, IRequest.RES_SUCCESS);
kra.getRequestQueue().updateRequest(request);
return true;
@@ -234,15 +236,13 @@ public class AsymKeyGenService implements IService {
private void auditAsymKeyGenRequestProcessed(String subjectID, String status, RequestId requestID,
String clientKeyID,
- String keyID, String reason) {
- String auditMessage = CMS.getLogMessage(
- AuditEvent.ASYMKEY_GENERATION_REQUEST_PROCESSED,
+ KeyId keyID, String reason) {
+ audit(new AsymKeyGenerationProcessedEvent(
subjectID,
status,
- requestID.toString(),
+ requestID,
clientKeyID,
- keyID != null ? keyID : "None",
- reason);
- audit(auditMessage);
+ keyID,
+ reason));
}
}
diff --git a/base/kra/src/com/netscape/kra/SymKeyGenService.java b/base/kra/src/com/netscape/kra/SymKeyGenService.java
index bf350d5f5..a4613c285 100644
--- a/base/kra/src/com/netscape/kra/SymKeyGenService.java
+++ b/base/kra/src/com/netscape/kra/SymKeyGenService.java
@@ -32,11 +32,13 @@ import com.netscape.certsrv.base.EBaseException;
import com.netscape.certsrv.base.IConfigStore;
import com.netscape.certsrv.dbs.keydb.IKeyRecord;
import com.netscape.certsrv.dbs.keydb.IKeyRepository;
+import com.netscape.certsrv.dbs.keydb.KeyId;
import com.netscape.certsrv.key.KeyRequestResource;
import com.netscape.certsrv.key.SymKeyGenerationRequest;
import com.netscape.certsrv.kra.IKeyRecoveryAuthority;
import com.netscape.certsrv.logging.AuditEvent;
import com.netscape.certsrv.logging.ILogger;
+import com.netscape.certsrv.logging.event.SymKeyGenerationProcessedEvent;
import com.netscape.certsrv.request.IRequest;
import com.netscape.certsrv.request.IService;
import com.netscape.certsrv.request.RequestId;
@@ -232,7 +234,7 @@ public class SymKeyGenService implements IService {
storage.addKeyRecord(rec);
auditSymKeyGenRequestProcessed(auditSubjectID, ILogger.SUCCESS, request.getRequestId(),
- clientKeyId, serialNo.toString(), "None");
+ clientKeyId, new KeyId(serialNo), "None");
request.setExtData(IRequest.RESULT, IRequest.RES_SUCCESS);
mKRA.getRequestQueue().updateRequest(request);
@@ -262,15 +264,13 @@ public class SymKeyGenService implements IService {
}
private void auditSymKeyGenRequestProcessed(String subjectID, String status, RequestId requestID, String clientKeyID,
- String keyID, String reason) {
- String auditMessage = CMS.getLogMessage(
- AuditEvent.SYMKEY_GENERATION_REQUEST_PROCESSED,
+ KeyId keyID, String reason) {
+ audit(new SymKeyGenerationProcessedEvent(
subjectID,
status,
- requestID.toString(),
+ requestID,
clientKeyID,
- keyID != null ? keyID : "None",
- reason);
- audit(auditMessage);
+ keyID,
+ reason));
}
} \ No newline at end of file