summaryrefslogtreecommitdiffstats
path: root/pki/base/common/src/com/netscape/cms/publish/mappers/LdapCertSubjMap.java
diff options
context:
space:
mode:
authorEndi Sukma Dewata <edewata@redhat.com>2012-03-24 02:27:47 -0500
committerEndi Sukma Dewata <edewata@redhat.com>2012-03-26 11:43:54 -0500
commit621d9e5c413e561293d7484b93882d985b3fe15f (patch)
tree638f3d75761c121d9a8fb50b52a12a6686c5ac5c /pki/base/common/src/com/netscape/cms/publish/mappers/LdapCertSubjMap.java
parent40d3643b8d91886bf210aa27f711731c81a11e49 (diff)
downloadpki-621d9e5c413e561293d7484b93882d985b3fe15f.tar.gz
pki-621d9e5c413e561293d7484b93882d985b3fe15f.tar.xz
pki-621d9e5c413e561293d7484b93882d985b3fe15f.zip
Removed unnecessary pki folder.
Previously the source code was located inside a pki folder. This folder was created during svn migration and is no longer needed. This folder has now been removed and the contents have been moved up one level. Ticket #131
Diffstat (limited to 'pki/base/common/src/com/netscape/cms/publish/mappers/LdapCertSubjMap.java')
-rw-r--r--pki/base/common/src/com/netscape/cms/publish/mappers/LdapCertSubjMap.java343
1 files changed, 0 insertions, 343 deletions
diff --git a/pki/base/common/src/com/netscape/cms/publish/mappers/LdapCertSubjMap.java b/pki/base/common/src/com/netscape/cms/publish/mappers/LdapCertSubjMap.java
deleted file mode 100644
index 4d5ff38c8..000000000
--- a/pki/base/common/src/com/netscape/cms/publish/mappers/LdapCertSubjMap.java
+++ /dev/null
@@ -1,343 +0,0 @@
-// --- BEGIN COPYRIGHT BLOCK ---
-// This program is free software; you can redistribute it and/or modify
-// it under the terms of the GNU General Public License as published by
-// the Free Software Foundation; version 2 of the License.
-//
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
-// GNU General Public License for more details.
-//
-// You should have received a copy of the GNU General Public License along
-// with this program; if not, write to the Free Software Foundation, Inc.,
-// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
-//
-// (C) 2007 Red Hat, Inc.
-// All rights reserved.
-// --- END COPYRIGHT BLOCK ---
-package com.netscape.cms.publish.mappers;
-
-import java.security.cert.X509Certificate;
-import java.util.Locale;
-import java.util.Vector;
-
-import netscape.ldap.LDAPConnection;
-import netscape.ldap.LDAPEntry;
-import netscape.ldap.LDAPException;
-import netscape.ldap.LDAPSearchResults;
-import netscape.ldap.LDAPv2;
-import netscape.ldap.LDAPv3;
-import netscape.security.x509.X500Name;
-import netscape.security.x509.X509CRLImpl;
-
-import com.netscape.certsrv.apps.CMS;
-import com.netscape.certsrv.base.EBaseException;
-import com.netscape.certsrv.base.IConfigStore;
-import com.netscape.certsrv.base.IExtendedPluginInfo;
-import com.netscape.certsrv.ldap.ELdapException;
-import com.netscape.certsrv.ldap.ELdapServerDownException;
-import com.netscape.certsrv.logging.ILogger;
-import com.netscape.certsrv.publish.ILdapMapper;
-import com.netscape.certsrv.request.IRequest;
-
-/**
- * Maps a X509 certificate to a LDAP entry by finding an LDAP entry
- * which has an attribute whose contents are equal to the cert subject name.
- *
- * @version $Revision$, $Date$
- */
-public class LdapCertSubjMap implements ILdapMapper, IExtendedPluginInfo {
- public static final String LDAP_CERTSUBJNAME_ATTR = "certSubjectName";
- protected String mSearchBase = null;
- protected String mCertSubjNameAttr = LDAP_CERTSUBJNAME_ATTR;
- protected boolean mUseAllEntries = false;
-
- private ILogger mLogger = CMS.getLogger();
- protected IConfigStore mConfig = null;
- boolean mInited = false;
-
- public LdapCertSubjMap() {
- // need to setup the mSearchBase via configuration
- }
-
- /**
- * constructs a certificate subject name mapper with search base.
- *
- * @param searchBase the dn to start searching for the certificate
- * subject name.
- */
- public LdapCertSubjMap(String searchBase) {
- if (searchBase == null)
- throw new IllegalArgumentException(
- "a null argument to constructor " + this.getClass().getName());
- mSearchBase = searchBase;
- mInited = true;
- }
-
- /**
- * Constructor using non-ES cert map attribute name.
- *
- * @param searchBase entry to start search.
- * @param certSubjNameAttr attribute for certificate subject names.
- * @param certAttr attribute to find certificate.
- */
- public LdapCertSubjMap(String searchBase,
- String certSubjNameAttr, String certAttr) {
- if (searchBase == null ||
- certSubjNameAttr == null || certAttr == null)
- throw new IllegalArgumentException(
- "a null argument to constructor " + this.getClass().getName());
- mCertSubjNameAttr = certSubjNameAttr;
- mSearchBase = searchBase;
- mInited = true;
- }
-
- public LdapCertSubjMap(String searchBase,
- String certSubjNameAttr, String certAttr, boolean useAllEntries) {
- if (searchBase == null ||
- certSubjNameAttr == null || certAttr == null)
- throw new IllegalArgumentException(
- "a null argument to constructor " + this.getClass().getName());
- mCertSubjNameAttr = certSubjNameAttr;
- mSearchBase = searchBase;
- mUseAllEntries = useAllEntries;
- mInited = true;
- }
-
- public String getImplName() {
- return "LdapCertSubjMap";
- }
-
- public String getDescription() {
- return "LdapCertSubjMap";
- }
-
- public Vector<String> getDefaultParams() {
- Vector<String> v = new Vector<String>();
-
- v.addElement("certSubjNameAttr=" + mCertSubjNameAttr);
- v.addElement("searchBase=");
- v.addElement("useAllEntries=" + mUseAllEntries);
- return v;
- }
-
- public String[] getExtendedPluginInfo(Locale locale) {
- String[] params = {
- "certSubjNameAttr;string;Name of Ldap attribute containing cert subject name",
- "searchBase;string;Base DN to search from",
- "useAllEntries;boolean;Use all entries for publishing",
- IExtendedPluginInfo.HELP_TOKEN +
- ";configuration-ldappublish-mapper-certsubjmapper",
- IExtendedPluginInfo.HELP_TEXT +
- ";This plugin assumes you want to publish to an LDAP entry which has " +
- "an attribute whose contents are equal to the cert subject name"
- };
-
- return params;
- }
-
- public Vector<String> getInstanceParams() {
- Vector<String> v = new Vector<String>();
-
- if (mCertSubjNameAttr == null) {
- v.addElement("certSubjNameAttr=");
- } else {
- v.addElement("certSubjNameAttr=" + mCertSubjNameAttr);
- }
- if (mSearchBase == null) {
- v.addElement("searchBase=");
- } else {
- v.addElement("searchBase=" + mSearchBase);
- }
- v.addElement("useAllEntries=" + mUseAllEntries);
- return v;
- }
-
- public IConfigStore getConfigStore() {
- return mConfig;
- }
-
- public void init(IConfigStore config)
- throws EBaseException {
- if (mInited == true)
- return;
- mConfig = config;
- mCertSubjNameAttr = config.getString("certSubjNameAttr",
- LDAP_CERTSUBJNAME_ATTR);
- mSearchBase = config.getString("searchBase");
- mUseAllEntries = config.getBoolean("useAllEntries", false);
- mInited = true;
- }
-
- /**
- * Finds the entry for the certificate by looking for the cert
- * subject name in the subject name attribute.
- *
- * @param conn - the LDAP connection.
- * @param obj - the X509Certificate.
- */
- public String
- map(LDAPConnection conn, Object obj)
- throws ELdapException {
- if (conn == null)
- return null;
- X500Name subjectDN = null;
-
- try {
- X509Certificate cert = (X509Certificate) obj;
-
- subjectDN =
- (X500Name) ((X509Certificate) cert).getSubjectDN();
-
- CMS.debug("LdapCertSubjMap: cert subject dn:" + subjectDN.toString());
- } catch (ClassCastException e) {
- try {
- X509CRLImpl crl = (X509CRLImpl) obj;
-
- subjectDN =
- (X500Name) ((X509CRLImpl) crl).getIssuerDN();
-
- CMS.debug("LdapCertSubjMap: crl issuer dn: " +
- subjectDN.toString());
- } catch (ClassCastException ex) {
- log(ILogger.LL_FAILURE, CMS.getLogMessage("PUBLISH_NOT_SUPPORTED_OBJECT"));
- return null;
- }
- }
- try {
- String[] attrs = new String[] { LDAPv3.NO_ATTRS };
-
- log(ILogger.LL_INFO, "search " + mSearchBase +
- " (" + mCertSubjNameAttr + "=" + subjectDN + ") " + mCertSubjNameAttr);
-
- LDAPSearchResults results =
- conn.search(mSearchBase, LDAPv2.SCOPE_SUB,
- "(" + mCertSubjNameAttr + "=" + subjectDN + ")", attrs, false);
-
- LDAPEntry entry = results.next();
-
- if (results.hasMoreElements()) {
- log(ILogger.LL_FAILURE,
- CMS.getLogMessage("PUBLISH_MORE_THAN_ONE_ENTRY", "", subjectDN.toString()));
- }
- if (entry != null) {
- log(ILogger.LL_INFO, "entry found");
- return entry.getDN();
- }
- return null;
- } catch (LDAPException e) {
- if (e.getLDAPResultCode() == LDAPException.UNAVAILABLE) {
- // need to intercept this because message from LDAP is
- // "DSA is unavailable" which confuses with DSA PKI.
- log(ILogger.LL_FAILURE,
- CMS.getLogMessage("PUBLISH_NO_LDAP_SERVER"));
- throw new ELdapServerDownException(CMS.getUserMessage("CMS_LDAP_SERVER_UNAVAILABLE", conn.getHost(), ""
- + conn.getPort()));
- } else {
- log(ILogger.LL_FAILURE,
- CMS.getLogMessage("PUBLISH_DN_MAP_EXCEPTION", "LDAPException", e.toString()));
- throw new ELdapException(CMS.getUserMessage("CMS_LDAP_NO_MATCH_FOUND", e.toString()));
- }
- }
-
- /*
- catch (IOException e) {
- log(ILogger.LL_FAILURE,
- CMS.getLogMessage("PUBLISH_CANT_GET_SUBJECT", e.toString()));
- throw new ELdapException(
- LdapResources.GET_CERT_SUBJECT_DN_FAILED, e);
- }
- catch (CertificateEncodingException e) {
- log(ILogger.LL_FAILURE,
- CMS.getLogMessage("PUBLISH_CANT_DECODE_CERT", e.toString()));
- throw new ELdapException(
- LdapResources.GET_DER_ENCODED_CERT_FAILED, e);
- }
- */
- }
-
- public String map(LDAPConnection conn, IRequest req, Object obj)
- throws ELdapException {
- return map(conn, obj);
- }
-
- public Vector<String> mapAll(LDAPConnection conn, Object obj)
- throws ELdapException {
- Vector<String> v = new Vector<String>();
-
- if (conn == null)
- return null;
- X500Name subjectDN = null;
-
- try {
- X509Certificate cert = (X509Certificate) obj;
- subjectDN = (X500Name) ((X509Certificate) cert).getSubjectDN();
- CMS.debug("LdapCertSubjMap: cert subject dn:" + subjectDN.toString());
- } catch (ClassCastException e) {
- log(ILogger.LL_FAILURE, CMS.getLogMessage("PUBLISH_NOT_SUPPORTED_OBJECT"));
- return v;
- }
- try {
- String[] attrs = new String[] { LDAPv3.NO_ATTRS };
-
- log(ILogger.LL_INFO, "search " + mSearchBase +
- " (" + mCertSubjNameAttr + "=" + subjectDN + ") " + mCertSubjNameAttr);
-
- LDAPSearchResults results =
- conn.search(mSearchBase, LDAPv2.SCOPE_SUB,
- "(" + mCertSubjNameAttr + "=" + subjectDN + ")", attrs, false);
-
- while (results.hasMoreElements()) {
- LDAPEntry entry = results.next();
- String dn = entry.getDN();
- v.addElement(dn);
- CMS.debug("LdapCertSubjMap: dn=" + dn);
- }
- CMS.debug("LdapCertSubjMap: Number of entries: " + v.size());
- } catch (LDAPException e) {
- if (e.getLDAPResultCode() == LDAPException.UNAVAILABLE) {
- // need to intercept this because message from LDAP is
- // "DSA is unavailable" which confuses with DSA PKI.
- log(ILogger.LL_FAILURE,
- CMS.getLogMessage("PUBLISH_NO_LDAP_SERVER"));
- throw new ELdapServerDownException(CMS.getUserMessage("CMS_LDAP_SERVER_UNAVAILABLE", conn.getHost(), ""
- + conn.getPort()));
- } else {
- log(ILogger.LL_FAILURE,
- CMS.getLogMessage("PUBLISH_DN_MAP_EXCEPTION", "LDAPException", e.toString()));
- throw new ELdapException(CMS.getUserMessage("CMS_LDAP_NO_MATCH_FOUND", e.toString()));
- }
- }
-
- return v;
- }
-
- public Vector<String> mapAll(LDAPConnection conn, IRequest req, Object obj)
- throws ELdapException {
- return mapAll(conn, obj);
- }
-
- private void log(int level, String msg) {
- mLogger.log(ILogger.EV_SYSTEM, ILogger.S_LDAP, level,
- "LdapCertSubjMap: " + msg);
- }
-
- /**
- * return search base
- */
- public String getSearchBase() {
- return mSearchBase;
- }
-
- /**
- * return certificate subject attribute
- */
- public String getCertSubjNameAttr() {
- return mCertSubjNameAttr;
- }
-
- public boolean useAllEntries() {
- return mUseAllEntries;
- }
-
-}