diff options
author | Endi Sukma Dewata <edewata@redhat.com> | 2012-03-24 02:27:47 -0500 |
---|---|---|
committer | Endi Sukma Dewata <edewata@redhat.com> | 2012-03-26 11:43:54 -0500 |
commit | 621d9e5c413e561293d7484b93882d985b3fe15f (patch) | |
tree | 638f3d75761c121d9a8fb50b52a12a6686c5ac5c /pki/base/silent/src/com/netscape/pkisilent/ConfigureSubCA.java | |
parent | 40d3643b8d91886bf210aa27f711731c81a11e49 (diff) | |
download | pki-621d9e5c413e561293d7484b93882d985b3fe15f.tar.gz pki-621d9e5c413e561293d7484b93882d985b3fe15f.tar.xz pki-621d9e5c413e561293d7484b93882d985b3fe15f.zip |
Removed unnecessary pki folder.
Previously the source code was located inside a pki folder.
This folder was created during svn migration and is no longer
needed. This folder has now been removed and the contents have
been moved up one level.
Ticket #131
Diffstat (limited to 'pki/base/silent/src/com/netscape/pkisilent/ConfigureSubCA.java')
-rw-r--r-- | pki/base/silent/src/com/netscape/pkisilent/ConfigureSubCA.java | 1249 |
1 files changed, 0 insertions, 1249 deletions
diff --git a/pki/base/silent/src/com/netscape/pkisilent/ConfigureSubCA.java b/pki/base/silent/src/com/netscape/pkisilent/ConfigureSubCA.java deleted file mode 100644 index 706827c74..000000000 --- a/pki/base/silent/src/com/netscape/pkisilent/ConfigureSubCA.java +++ /dev/null @@ -1,1249 +0,0 @@ -package com.netscape.pkisilent; - -// --- BEGIN COPYRIGHT BLOCK --- -// This program is free software; you can redistribute it and/or modify -// it under the terms of the GNU General Public License as published by -// the Free Software Foundation; version 2 of the License. -// -// This program is distributed in the hope that it will be useful, -// but WITHOUT ANY WARRANTY; without even the implied warranty of -// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -// GNU General Public License for more details. -// -// You should have received a copy of the GNU General Public License along -// with this program; if not, write to the Free Software Foundation, Inc., -// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. -// -// (C) 2007 Red Hat, Inc. -// All rights reserved. -// --- END COPYRIGHT BLOCK --- - -import java.io.ByteArrayInputStream; -import java.io.UnsupportedEncodingException; -import java.net.URLEncoder; -import java.util.ArrayList; - -import com.netscape.pkisilent.argparser.ArgParser; -import com.netscape.pkisilent.argparser.StringHolder; -import com.netscape.pkisilent.common.ComCrypto; -import com.netscape.pkisilent.common.ParseXML; -import com.netscape.pkisilent.http.HTTPClient; -import com.netscape.pkisilent.http.HTTPResponse; -import com.netscape.cmsutil.util.Utils; - -public class ConfigureSubCA { - - // global constants - public static final String DEFAULT_KEY_TYPE = "RSA"; - public static final String DEFAULT_KEY_SIZE = "2048"; - public static final String DEFAULT_KEY_CURVENAME = "nistp256"; - public static final String DEFAULT_KEY_ALGORITHM_RSA = "SHA256withRSA"; - public static final String DEFAULT_KEY_ALGORITHM_ECC = "SHA256withEC"; - - // define global variables - - public static HTTPClient hc = null; - - public static String login_uri = "/ca/admin/console/config/login"; - public static String wizard_uri = "/ca/admin/console/config/wizard"; - public static String admin_uri = "/ca/admin/ca/getBySerial"; - - public static String sd_login_uri = "/ca/admin/ca/securityDomainLogin"; - public static String sd_get_cookie_uri = "/ca/admin/ca/getCookie"; - public static String pkcs12_uri = "/ca/admin/console/config/savepkcs12"; - - public static String cs_hostname = null; - public static String cs_port = null; - - public static String sd_hostname = null; - public static String sd_ssl_port = null; - public static String sd_agent_port = null; - public static String sd_admin_port = null; - public static String sd_admin_name = null; - public static String sd_admin_password = null; - - public static String ca_hostname = null; - public static String ca_port = null; - public static String ca_ssl_port = null; - - public static String client_certdb_dir = null; - public static String client_certdb_pwd = null; - - // Login Panel - public static String pin = null; - - public static String domain_name = null; - - public static String admin_user = null; - public static String admin_email = null; - public static String admin_password = null; - public static String admin_serial_number = null; - public static String agent_name = null; - - public static String ldap_host = null; - public static String ldap_port = null; - public static String bind_dn = null; - public static String bind_password = null; - public static String base_dn = null; - public static String db_name = null; - public static String secure_conn = null; - public static String remove_data = null; - - public static String key_type = null; - public static String key_size = null; - public static String key_curvename = null; - public static String key_algorithm = null; - public static String signing_algorithm = null; - - public static String signing_key_type = null; - public static String signing_key_size = null; - public static String signing_key_curvename = null; - public static String signing_signingalgorithm = null; - - public static String ocsp_signing_key_type = null; - public static String ocsp_signing_key_size = null; - public static String ocsp_signing_key_curvename = null; - public static String ocsp_signing_signingalgorithm = null; - - public static String subsystem_key_type = null; - public static String subsystem_key_size = null; - public static String subsystem_key_curvename = null; - - public static String audit_signing_key_type = null; - public static String audit_signing_key_size = null; - public static String audit_signing_key_curvename = null; - - public static String sslserver_key_type = null; - public static String sslserver_key_size = null; - public static String sslserver_key_curvename = null; - - public static String token_name = null; - public static String token_pwd = null; - - public static String agent_key_size = null; - public static String agent_key_type = null; - public static String agent_cert_subject = null; - - public static String ca_cert_name = null; - public static String ca_cert_req = null; - public static String ca_cert_pp = null; - public static String ca_cert_cert = null; - - public static String ocsp_cert_name = null; - public static String ocsp_cert_req = null; - public static String ocsp_cert_pp = null; - public static String ocsp_cert_cert = null; - - public static String server_cert_name = null; - public static String server_cert_req = null; - public static String server_cert_pp = null; - public static String server_cert_cert = null; - - public static String ca_subsystem_cert_name = null; - public static String ca_subsystem_cert_req = null; - public static String ca_subsystem_cert_pp = null; - public static String ca_subsystem_cert_cert = null; - - public static String ca_audit_signing_cert_name = null; - public static String ca_audit_signing_cert_req = null; - public static String ca_audit_signing_cert_pp = null; - public static String ca_audit_signing_cert_cert = null; - - public static String backup_pwd = null; - - public static String subsystem_name = null; - - // names - public static String subca_sign_cert_subject_name = null; - public static String subca_subsystem_cert_subject_name = null; - public static String subca_ocsp_cert_subject_name = null; - public static String subca_server_cert_subject_name = null; - public static String subca_audit_signing_cert_subject_name = null; - - public ConfigureSubCA() { - // do nothing :) - } - - public void sleep_time() { - try { - System.out.println("Sleeping for 5 secs.."); - Thread.sleep(5000); - } catch (Exception e) { - System.out.println("ERROR: sleep problem"); - } - - } - - public boolean LoginPanel() { - boolean st = false; - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - String query_string = "pin=" + pin + "&xml=true"; - - hr = hc.sslConnect(cs_hostname, cs_port, login_uri, query_string); - System.out.println("xml returned: " + hr.getHTML()); - - // parse xml here - nothing to parse - - // get cookie - String temp = hr.getCookieValue("JSESSIONID"); - - if (temp != null) { - int index = temp.indexOf(";"); - HTTPClient.j_session_id = temp.substring(0, index); - st = true; - } - - hr = null; - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, - "p=0&op=next&xml=true"); - - // parse xml here - - bais = new ByteArrayInputStream( - hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - return st; - } - - public boolean TokenChoicePanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - /////////////////////////////////////////////////////// - String query_string = null; - - // Software Token - if (token_name.equalsIgnoreCase("internal")) { - query_string = "p=1" + "&op=next" + "&xml=true" + - "&choice=" + - URLEncoder.encode("Internal Key Storage Token", "UTF-8") + - ""; - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - } - // HSM - else { - // login to hsm first - query_string = "p=2" + "&op=next" + "&xml=true" + - "&uTokName=" + - URLEncoder.encode(token_name, "UTF-8") + - "&__uPasswd=" + - URLEncoder.encode(token_pwd, "UTF-8") + - ""; - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - // choice with token name now - query_string = "p=1" + "&op=next" + "&xml=true" + - "&choice=" + - URLEncoder.encode(token_name, "UTF-8") + - ""; - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - } - - return true; - } - - public boolean DomainPanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - String domain_url = "https://" + sd_hostname + ":" + sd_admin_port; - - String query_string = "sdomainURL=" + - URLEncoder.encode(domain_url, "UTF-8") + - "&sdomainName=" + - URLEncoder.encode(domain_name, "UTF-8") + - "&choice=existingdomain" + - "&p=3" + - "&op=next" + - "&xml=true"; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - String query_string_1 = "p=4" + - "&op=next" + - "&xml=true"; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string_1); - - return true; - - } - - public boolean SecurityDomainLoginPanel() throws UnsupportedEncodingException { - String subca_url = "https://" + cs_hostname + ":" + cs_port + - "/ca/admin/console/config/wizard" + - "?p=5&subsystem=CA"; - - String query_string = "url=" + URLEncoder.encode(subca_url, "UTF-8"); - - HTTPResponse hr = hc.sslConnect(sd_hostname, sd_admin_port, sd_login_uri, query_string); - - String query_string_1 = "uid=" + sd_admin_name + - "&pwd=" + URLEncoder.encode(sd_admin_password, "UTF-8") + - "&url=" + URLEncoder.encode(subca_url, "UTF-8"); - - hr = hc.sslConnect(sd_hostname, sd_admin_port, sd_get_cookie_uri, - query_string_1); - - // get session id from security domain - - String subca_session_id = hr.getContentValue("header.session_id"); - String subca_url_1 = hr.getContentValue("header.url"); - - System.out.println("SUBCA_SESSION_ID=" + subca_session_id); - System.out.println("SUBCA_URL=" + subca_url_1); - - // use session id to connect back to subCA - - String query_string_2 = "p=5" + - "&subsystem=CA" + - "&session_id=" + subca_session_id + - "&xml=true"; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, - query_string_2); - - return true; - - } - - public boolean DisplayChainPanel() throws UnsupportedEncodingException { - String query_string = "p=5" + "&op=next" + "&xml=true" + - "&choice=newsubsystem" + - "&subsystemName=" + - URLEncoder.encode(subsystem_name, "UTF-8") + - "&subsystemName=" + - URLEncoder.encode(subsystem_name, "UTF-8") + - "&urls=0"; - hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - // parse xml - // bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - // px.parse(bais); - // px.prettyprintxml(); - - return true; - } - - public boolean HierarchyPanel() { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - String query_string = "p=8" + "&op=next" + "&xml=true" + - "&choice=join"; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - return true; - - } - - public boolean LdapConnectionPanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - String query_string = "p=9" + "&op=next" + "&xml=true" + - "&host=" + URLEncoder.encode(ldap_host, "UTF-8") + - "&port=" + URLEncoder.encode(ldap_port, "UTF-8") + - "&basedn=" + URLEncoder.encode(base_dn, "UTF-8") + - "&database=" + URLEncoder.encode(db_name, "UTF-8") + - "&binddn=" + URLEncoder.encode(bind_dn, "UTF-8") + - "&__bindpwd=" + URLEncoder.encode(bind_password, "UTF-8") + - "&display=" + URLEncoder.encode("$displayStr", "UTF-8") + - (secure_conn.equals("true") ? "&secureConn=on" : "") + - (remove_data.equals("true") ? "&removeData=true" : ""); - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - return true; - } - - public boolean KeyPanel() { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - ArrayList<String> al = null; - - String query_string = "p=10" + "&op=next" + "&xml=true" - + "&subsystem_custom_size=" + subsystem_key_size - + "&subsystem_custom_curvename=" + subsystem_key_curvename - + "&subsystem_keytype=" + subsystem_key_type - + "&subsystem_choice=custom" - + "&sslserver_custom_size=" + sslserver_key_size - + "&sslserver_custom_curvename=" + sslserver_key_curvename - + "&sslserver_keytype=" + sslserver_key_type - + "&sslserver_choice=custom" - + "&signing_custom_size=" + signing_key_size - + "&signing_custom_curvename=" + signing_key_curvename - + "&signing_keytype=" + signing_key_type - + "&signing_choice=custom" - + "&signing_keyalgorithm=" + key_algorithm - + "&signing_signingalgorithm=" + signing_signingalgorithm - + "&ocsp_signing_custom_size=" + ocsp_signing_key_size - + "&ocsp_signing_custom_curvename=" + ocsp_signing_key_curvename - + "&ocsp_signing_keytype=" + ocsp_signing_key_type - + "&ocsp_signing_choice=custom" - + "&ocsp_signing_signingalgorithm=" + ocsp_signing_signingalgorithm - + "&audit_signing_custom_size=" + audit_signing_key_size - + "&audit_signing_custom_curvename=" + audit_signing_key_curvename - + "&audit_signing_keytype=" + audit_signing_key_type - + "&audit_signing_choice=custom" - + "&custom_size=" + key_size - + "&custom_curvename=" + key_curvename - + "&keytype=" + key_type - + "&choice=custom" - + "&signingalgorithm=" + signing_algorithm - + "&keyalgorithm=" + key_algorithm; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - al = px.constructValueList("CertReqPair", "DN"); - // get ca cert subject name - if (al != null) { - for (int i = 0; i < al.size(); i++) { - String temp = al.get(i); - if (temp.indexOf("Certificate Authority") > 0) { - ca_cert_name = temp; - } else if (temp.indexOf("OCSP Signing Certificate") > 0) { - ocsp_cert_name = temp; - } else if (temp.indexOf("Subsystem Certificate") > 0) { - ca_subsystem_cert_name = temp; - } else if (temp.indexOf("Audit Signing Certificate") > 0) { - ca_audit_signing_cert_name = temp; - } else { - server_cert_name = temp; - } - } - } - - System.out.println("default: ca_cert_name=" + ca_cert_name); - System.out.println("default: ocsp_cert_name=" + ocsp_cert_name); - System.out.println("default: ca_subsystem_cert_name=" + - ca_subsystem_cert_name); - System.out.println("default: server_cert_name=" + server_cert_name); - System.out.println("default: ca_audit_signing_cert_name=" + - ca_audit_signing_cert_name); - return true; - } - - public boolean CertSubjectPanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - ArrayList<String> req_list = null; - ArrayList<String> cert_list = null; - ArrayList<String> dn_list = null; - - String query_string = "p=11" + "&op=next" + "&xml=true" + - "&signing=" + - URLEncoder.encode(subca_sign_cert_subject_name, "UTF-8") + - "&ocsp_signing=" + - URLEncoder.encode(subca_ocsp_cert_subject_name, "UTF-8") + - "&sslserver=" + - URLEncoder.encode(subca_server_cert_subject_name, "UTF-8") + - "&subsystem=" + - URLEncoder.encode(subca_subsystem_cert_subject_name, "UTF-8") + - "&audit_signing=" + - URLEncoder.encode(subca_audit_signing_cert_subject_name, "UTF-8") + - "&urls=0" + - ""; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - req_list = px.constructValueList("CertReqPair", "Request"); - cert_list = px.constructValueList("CertReqPair", "Certificate"); - dn_list = px.constructValueList("CertReqPair", "Nickname"); - - System.out.println("req_list_size=" + req_list.size()); - System.out.println("cert_list_size=" + cert_list.size()); - System.out.println("dn_list_size=" + dn_list.size()); - - if (req_list != null && cert_list != null && dn_list != null) { - for (int i = 0; i < dn_list.size(); i++) { - String temp = dn_list.get(i); - - if (temp.indexOf("caSigningCert") >= 0) { - ca_cert_req = req_list.get(i); - ca_cert_cert = cert_list.get(i); - } else if (temp.indexOf("ocspSigningCert") >= 0) { - ocsp_cert_req = req_list.get(i); - ocsp_cert_cert = cert_list.get(i); - } else if (temp.indexOf("subsystemCert") >= 0) { - ca_subsystem_cert_req = req_list.get(i); - ca_subsystem_cert_cert = cert_list.get(i); - } else if (temp.indexOf("auditSigningCert") >= 0) { - ca_audit_signing_cert_req = req_list.get(i); - ca_audit_signing_cert_cert = cert_list.get(i); - } else { - server_cert_req = req_list.get(i); - server_cert_cert = cert_list.get(i); - } - } - } - - System.out.println("ca_cert_name=" + subca_sign_cert_subject_name); - System.out.println("ocsp_cert_name=" + subca_ocsp_cert_subject_name); - System.out.println("ca_subsystem_cert_name=" + - subca_subsystem_cert_subject_name); - System.out.println("server_cert_name=" + - subca_server_cert_subject_name); - System.out.println("audit_signing_cert_name=" + - subca_audit_signing_cert_subject_name); - - System.out.println("ca_cert_req=" + ca_cert_req); - System.out.println("ocsp_cert_req=" + ocsp_cert_req); - System.out.println("ca_subsystem_cert_req=" + ca_subsystem_cert_req); - System.out.println("server_cert_req=" + server_cert_req); - System.out.println("ca_audit_siging_cert_req=" + - ca_audit_signing_cert_req); - - System.out.println("ca_cert_cert=" + ca_cert_cert); - System.out.println("ocsp_cert_cert=" + ocsp_cert_cert); - System.out.println("ca_subsystem_cert_cert=" + ca_subsystem_cert_cert); - System.out.println("server_cert_cert=" + server_cert_cert); - System.out.println("ca_audit_signing_cert_cert=" + - ca_audit_signing_cert_cert); - - return true; - } - - public boolean CertificatePanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - String query_string = "p=12" + "&op=next" + "&xml=true" + - "&signing=" + - URLEncoder.encode(ca_cert_cert, "UTF-8") + - "&signing_cc=" + - "&ocsp_signing=" + - URLEncoder.encode(ocsp_cert_cert, "UTF-8") + - "&ocsp_signing_cc=" + - "&sslserver=" + - URLEncoder.encode(server_cert_cert, "UTF-8") + - "&sslserver_cc=" + - "&subsystem=" + - URLEncoder.encode(ca_subsystem_cert_cert, "UTF-8") + - "&subsystem_cc=" + - "&audit_signing=" + - URLEncoder.encode(ca_audit_signing_cert_cert, "UTF-8") + - "&audit_signing_cc=" + - ""; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - return true; - } - - public boolean BackupPanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - String query_string = "p=13" + "&op=next" + "&xml=true" + - "&choice=backupkey" + - "&__pwd=" + URLEncoder.encode(backup_pwd, "UTF-8") + - "&__pwdagain=" + URLEncoder.encode(backup_pwd, "UTF-8"); - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - return true; - } - - public boolean ImportCACertPanel() { - try { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, - "p=15&op=next&xml=true"); - - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - return true; - } catch (Exception e) { - System.out.println("Exception in ImportCACertPanel(): " + e.toString()); - e.printStackTrace(); - return false; - } - } - - public boolean AdminCertReqPanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - String admin_cert_request = null; - - ComCrypto cCrypt = new ComCrypto(client_certdb_dir, - client_certdb_pwd, - agent_cert_subject, - agent_key_size, - agent_key_type); - cCrypt.setDebug(true); - cCrypt.setGenerateRequest(true); - cCrypt.setTransportCert(null); - cCrypt.setDualKey(false); - cCrypt.loginDB(); - - String crmf_request = cCrypt.generateCRMFrequest(); - - if (crmf_request == null) { - System.out.println("ERROR: AdminCertReqPanel() cert req gen failed"); - return false; - } - - admin_cert_request = crmf_request; - - String query_string = "p=16" + "&op=next" + "&xml=true" + - "&uid=" + admin_user + - "&name=" + URLEncoder.encode(agent_name, "UTF-8") + - "&email=" + - URLEncoder.encode(admin_email, "UTF-8") + - "&__pwd=" + URLEncoder.encode(admin_password, "UTF-8") + - "&__admin_password_again=" + URLEncoder.encode(admin_password, "UTF-8") + - "&cert_request=" + - URLEncoder.encode(admin_cert_request, "UTF-8") + - "&display=" + URLEncoder.encode("$displayStr", "UTF-8") + - "&profileId=" + "caAdminCert" + - "&cert_request_type=" + "crmf" + - "&import=true" + - "&uid=" + admin_user + - "&securitydomain=" + - URLEncoder.encode(domain_name, "UTF-8") + - "&subject=" + - URLEncoder.encode(agent_cert_subject, "UTF-8") + - ""; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - admin_serial_number = px.getvalue("serialNumber"); - - return true; - } - - public boolean AdminCertImportPanel() { - boolean st = false; - - String query_string = "serialNumber=" + admin_serial_number + - "&importCert=" + "true" + - ""; - - HTTPResponse hr = hc.sslConnect(cs_hostname, cs_port, admin_uri, query_string); - - // get response data - // String cert_to_import = - // new sun.misc.BASE64Encoder().encode(hr.getResponseData()); - String cert_to_import = - Utils.base64encode(hr.getResponseData()); - System.out.println("Imported Cert=" + cert_to_import); - - ComCrypto cCrypt = new ComCrypto(client_certdb_dir, - client_certdb_pwd, - null, - null, - null); - cCrypt.setDebug(true); - cCrypt.setGenerateRequest(true); - cCrypt.loginDB(); - - String start = "-----BEGIN CERTIFICATE-----\r\n"; - String end = "\r\n-----END CERTIFICATE-----"; - - st = cCrypt.importCert(start + cert_to_import + end, agent_name); - if (!st) { - System.out.println("ERROR: AdminCertImportPanel() during cert import"); - return false; - } - - System.out.println("SUCCESS: imported admin user cert: " + agent_name); - - return true; - } - - public boolean UpdateDomainPanel() throws UnsupportedEncodingException { - HTTPResponse hr = null; - ByteArrayInputStream bais = null; - ParseXML px = new ParseXML(); - - String query_string = "p=17" + - "&serialNumber=" + admin_serial_number + - "&caHost=" + URLEncoder.encode(sd_hostname, "UTF-8") + - "&caPort=" + URLEncoder.encode(sd_admin_port, "UTF-8") + - "&importCert=" + "true" + - "&op=next" + "&xml=true" + - ""; - - hr = hc.sslConnect(cs_hostname, cs_port, wizard_uri, query_string); - - // parse xml - bais = new ByteArrayInputStream(hr.getHTML().getBytes()); - px.parse(bais); - px.prettyprintxml(); - - String caHost = px.getvalue("host"); - String caPort = px.getvalue("port"); - String systemType = px.getvalue("systemType"); - - System.out.println("caHost=" + caHost); - System.out.println("caPort=" + caPort); - System.out.println("systemType=" + systemType); - - return true; - } - - public boolean ConfigureSubCAInstance() throws UnsupportedEncodingException { - // 0. login to cert db - ComCrypto cCrypt = new ComCrypto(client_certdb_dir, - client_certdb_pwd, - null, - null, - null); - cCrypt.setDebug(true); - cCrypt.setGenerateRequest(true); - cCrypt.loginDB(); - - // instantiate http client - hc = new HTTPClient(); - - sleep_time(); - // 0. Login panel - boolean log_st = LoginPanel(); - if (!log_st) { - System.out.println("ERROR: ConfigureSubCA: LoginPanel() failure"); - return false; - } - - sleep_time(); - // 1. Token Choice Panel - boolean disp_token = TokenChoicePanel(); - if (!disp_token) { - System.out.println("ERROR: ConfigureSubCA: TokenChoicePanel() failure"); - return false; - } - - sleep_time(); - // 2. domain panel - boolean dom_st = DomainPanel(); - if (!dom_st) { - System.out.println("ERROR: ConfigureSubCA: DomainPanel() failure"); - return false; - } - - sleep_time(); - // 3. domain panel - boolean sd_st = SecurityDomainLoginPanel(); - if (!sd_st) { - System.out.println("ERROR: ConfigureSubCA: SecurityDomainLoginPanel() failure"); - return false; - } - - sleep_time(); - // 4. display cert chain panel - boolean disp_st = DisplayChainPanel(); - if (!disp_st) { - System.out.println("ERROR: ConfigureSubCA: DisplayChainPanel() failure"); - return false; - } - - sleep_time(); - // 6. hierarchy panel - boolean disp_h = HierarchyPanel(); - if (!disp_h) { - System.out.println("ERROR: ConfigureSubCA: HierarchyPanel() failure"); - return false; - } - - sleep_time(); - // 7. ldap connection panel - boolean disp_ldap = LdapConnectionPanel(); - if (!disp_ldap) { - System.out.println("ERROR: ConfigureSubCA: LdapConnectionPanel() failure"); - return false; - } - - sleep_time(); - sleep_time(); - // 10. Key Panel - boolean disp_key = KeyPanel(); - if (!disp_key) { - System.out.println("ERROR: ConfigureSubCA: KeyPanel() failure"); - return false; - } - - sleep_time(); - // 11. Cert Subject Panel - boolean disp_csubj = CertSubjectPanel(); - if (!disp_csubj) { - System.out.println("ERROR: ConfigureSubCA: CertSubjectPanel() failure"); - return false; - } - - sleep_time(); - // 12. Certificate Panel - boolean disp_cp = CertificatePanel(); - if (!disp_cp) { - System.out.println("ERROR: ConfigureSubCA: CertificatePanel() failure"); - return false; - } - - sleep_time(); - // 13. Backup Panel - boolean disp_back = BackupPanel(); - if (!disp_back) { - System.out.println("ERROR: ConfigureSubCA: BackupPanel() failure"); - return false; - } - - sleep_time(); - // 15. Import CA Certificate Panel - boolean disp_cert = ImportCACertPanel(); - if (!disp_cert) { - System.out.println("ERROR: ConfigureSubCA: ImportCACertPanel() failure"); - return false; - } - - sleep_time(); - // 16. Admin Cert Req Panel - boolean disp_adm = AdminCertReqPanel(); - if (!disp_adm) { - System.out.println("ERROR: ConfigureSubCA: AdminCertReqPanel() failure"); - return false; - } - - sleep_time(); - boolean disp_im = AdminCertImportPanel(); - if (!disp_im) { - System.out.println("ERROR: ConfigureSubCA: AdminCertImportPanel() failure"); - return false; - } - - sleep_time(); - // 17. Update Domain Panel - boolean disp_ud = UpdateDomainPanel(); - if (!disp_ud) { - System.out.println("ERROR: ConfigureSubCA: UpdateDomainPanel() failure"); - return false; - } - - return true; - } - - private static String set_default(String val, String def) { - if ((val == null) || (val.equals(""))) { - return def; - } else { - return val; - } - } - - public static void main(String args[]) throws UnsupportedEncodingException { - ConfigureSubCA ca = new ConfigureSubCA(); - - // set variables - StringHolder x_cs_hostname = new StringHolder(); - StringHolder x_cs_port = new StringHolder(); - - StringHolder x_sd_hostname = new StringHolder(); - StringHolder x_sd_ssl_port = new StringHolder(); - StringHolder x_sd_agent_port = new StringHolder(); - StringHolder x_sd_admin_port = new StringHolder(); - StringHolder x_sd_admin_name = new StringHolder(); - StringHolder x_sd_admin_password = new StringHolder(); - - StringHolder x_ca_hostname = new StringHolder(); - StringHolder x_ca_port = new StringHolder(); - StringHolder x_ca_ssl_port = new StringHolder(); - - StringHolder x_client_certdb_dir = new StringHolder(); - StringHolder x_client_certdb_pwd = new StringHolder(); - StringHolder x_preop_pin = new StringHolder(); - - StringHolder x_domain_name = new StringHolder(); - - StringHolder x_admin_user = new StringHolder(); - StringHolder x_admin_email = new StringHolder(); - StringHolder x_admin_password = new StringHolder(); - - // ldap - StringHolder x_ldap_host = new StringHolder(); - StringHolder x_ldap_port = new StringHolder(); - StringHolder x_bind_dn = new StringHolder(); - StringHolder x_bind_password = new StringHolder(); - StringHolder x_base_dn = new StringHolder(); - StringHolder x_db_name = new StringHolder(); - StringHolder x_secure_conn = new StringHolder(); - StringHolder x_remove_data = new StringHolder(); - - // key properties (defaults) - StringHolder x_key_size = new StringHolder(); - StringHolder x_key_type = new StringHolder(); - StringHolder x_key_curvename = new StringHolder(); - StringHolder x_key_algorithm = new StringHolder(); - StringHolder x_signing_algorithm = new StringHolder(); - - // key properties (custom - signing) - StringHolder x_signing_key_size = new StringHolder(); - StringHolder x_signing_key_type = new StringHolder(); - StringHolder x_signing_key_curvename = new StringHolder(); - StringHolder x_signing_signingalgorithm = new StringHolder(); - - // key properties (custom - ocsp_signing) - StringHolder x_ocsp_signing_key_size = new StringHolder(); - StringHolder x_ocsp_signing_key_type = new StringHolder(); - StringHolder x_ocsp_signing_key_curvename = new StringHolder(); - StringHolder x_ocsp_signing_signingalgorithm = new StringHolder(); - - // key properties (custom - audit_signing) - StringHolder x_audit_signing_key_size = new StringHolder(); - StringHolder x_audit_signing_key_type = new StringHolder(); - StringHolder x_audit_signing_key_curvename = new StringHolder(); - - // key properties (custom - subsystem) - StringHolder x_subsystem_key_size = new StringHolder(); - StringHolder x_subsystem_key_type = new StringHolder(); - StringHolder x_subsystem_key_curvename = new StringHolder(); - - // key properties (custom - sslserver) - StringHolder x_sslserver_key_size = new StringHolder(); - StringHolder x_sslserver_key_type = new StringHolder(); - StringHolder x_sslserver_key_curvename = new StringHolder(); - - StringHolder x_token_name = new StringHolder(); - StringHolder x_token_pwd = new StringHolder(); - - StringHolder x_agent_key_size = new StringHolder(); - StringHolder x_agent_key_type = new StringHolder(); - StringHolder x_agent_cert_subject = new StringHolder(); - - StringHolder x_agent_name = new StringHolder(); - StringHolder x_backup_pwd = new StringHolder(); - - // subsystem name - StringHolder x_subsystem_name = new StringHolder(); - - // subject names - StringHolder x_subca_sign_cert_subject_name = new StringHolder(); - StringHolder x_subca_subsystem_cert_subject_name = new StringHolder(); - StringHolder x_subca_ocsp_cert_subject_name = new StringHolder(); - StringHolder x_subca_server_cert_subject_name = new StringHolder(); - StringHolder x_subca_audit_signing_cert_subject_name = new StringHolder(); - - // parse the args - ArgParser parser = new ArgParser("ConfigureSubCA"); - - parser.addOption("-cs_hostname %s #CS Hostname", - x_cs_hostname); - parser.addOption("-cs_port %s #CS SSL port", - x_cs_port); - - parser.addOption("-sd_hostname %s #Security Domain Hostname", - x_sd_hostname); - parser.addOption("-sd_ssl_port %s #Security Domain SSL EE port", - x_sd_ssl_port); - parser.addOption("-sd_agent_port %s #Security Domain SSL Agent port", - x_sd_agent_port); - parser.addOption("-sd_admin_port %s #Security Domain SSL Admin port", - x_sd_admin_port); - parser.addOption("-sd_admin_name %s #Security Domain admin name", - x_sd_admin_name); - parser.addOption("-sd_admin_password %s #Security Domain admin password", - x_sd_admin_password); - - parser.addOption("-ca_hostname %s #CA Hostname", - x_ca_hostname); - parser.addOption("-ca_port %s #CA non-SSL port", - x_ca_port); - parser.addOption("-ca_ssl_port %s #CA SSL port", - x_ca_ssl_port); - - parser.addOption("-client_certdb_dir %s #Client CertDB dir", - x_client_certdb_dir); - parser.addOption("-client_certdb_pwd %s #client certdb password", - x_client_certdb_pwd); - parser.addOption("-preop_pin %s #pre op pin", - x_preop_pin); - parser.addOption("-domain_name %s #domain name", - x_domain_name); - parser.addOption("-admin_user %s #Admin User Name", - x_admin_user); - parser.addOption("-admin_email %s #Admin email", - x_admin_email); - parser.addOption("-admin_password %s #Admin password", - x_admin_password); - parser.addOption("-agent_name %s #Agent Cert Nickname", - x_agent_name); - - parser.addOption("-ldap_host %s #ldap host", - x_ldap_host); - parser.addOption("-ldap_port %s #ldap port", - x_ldap_port); - parser.addOption("-bind_dn %s #ldap bind dn", - x_bind_dn); - parser.addOption("-bind_password %s #ldap bind password", - x_bind_password); - parser.addOption("-base_dn %s #base dn", - x_base_dn); - parser.addOption("-db_name %s #db name", - x_db_name); - parser.addOption("-secure_conn %s #use ldaps port (optional, default is false)", x_secure_conn); - parser.addOption("-remove_data %s #remove existing data under base_dn (optional, default is false) ", - x_remove_data); - - // key and algorithm options (default) - parser.addOption("-key_type %s #Key type [RSA,ECC] (optional, default is RSA)", x_key_type); - parser.addOption("-key_size %s #Key Size (optional, for RSA default is 2048)", x_key_size); - parser.addOption("-key_curvename %s #Key Curve Name (optional, for ECC default is nistp256)", x_key_curvename); - parser.addOption( - "-key_algorithm %s #Key algorithm of the CA certificate (optional, default is SHA256withRSA for RSA and SHA256withEC for ECC)", - x_key_algorithm); - parser.addOption("-signing_algorithm %s #Signing algorithm (optional, default is key_algorithm)", - x_signing_algorithm); - - // key and algorithm options for signing certificate (overrides default) - parser.addOption("-signing_key_type %s #Key type [RSA,ECC] (optional, default is key_type)", x_signing_key_type); - parser.addOption("-signing_key_size %s #Key Size (optional, for RSA default is key_size)", x_signing_key_size); - parser.addOption("-signing_key_curvename %s #Key Curve Name (optional, for ECC default is key_curvename)", - x_signing_key_curvename); - parser.addOption( - "-signing_signingalgorithm %s #Algorithm used be CA cert to sign objects (optional, default is signing_algorithm)", - x_signing_signingalgorithm); - - // key and algorithm options for ocsp_signing certificate (overrides default) - parser.addOption("-ocsp_signing_key_type %s #Key type [RSA,ECC] (optional, default is key_type)", - x_ocsp_signing_key_type); - parser.addOption("-ocsp_signing_key_size %s #Key Size (optional, for RSA default is key_size)", - x_ocsp_signing_key_size); - parser.addOption("-ocsp_signing_key_curvename %s #Key Curve Name (optional, for ECC default is key_curvename)", - x_ocsp_signing_key_curvename); - parser.addOption( - "-ocsp_signing_signingalgorithm %s #Algorithm used by the OCSP signing cert to sign objects (optional, default is signing_algorithm)", - x_ocsp_signing_signingalgorithm); - - // key and algorithm options for audit_signing certificate (overrides default) - parser.addOption("-audit_signing_key_type %s #Key type [RSA,ECC] (optional, default is key_type)", - x_audit_signing_key_type); - parser.addOption("-audit_signing_key_size %s #Key Size (optional, for RSA default is key_size)", - x_audit_signing_key_size); - parser.addOption( - "-audit_signing_key_curvename %s #Key Curve Name (optional, for ECC default is key_curvename)", - x_audit_signing_key_curvename); - - // key and algorithm options for subsystem certificate (overrides default) - parser.addOption("-subsystem_key_type %s #Key type [RSA,ECC] (optional, default is key_type)", - x_subsystem_key_type); - parser.addOption("-subsystem_key_size %s #Key Size (optional, for RSA default is key_size)", - x_subsystem_key_size); - parser.addOption("-subsystem_key_curvename %s #Key Curve Name (optional, for ECC default is key_curvename)", - x_subsystem_key_curvename); - - // key and algorithm options for sslserver certificate (overrides default) - parser.addOption("-sslserver_key_type %s #Key type [RSA,ECC] (optional, default is key_type)", - x_sslserver_key_type); - parser.addOption("-sslserver_key_size %s #Key Size (optional, for RSA default is key_size)", - x_sslserver_key_size); - parser.addOption("-sslserver_key_curvename %s #Key Curve Name (optional, for ECC default is key_curvename)", - x_sslserver_key_curvename); - - parser.addOption("-token_name %s #HSM/Software Token name", - x_token_name); - parser.addOption("-token_pwd %s #HSM/Software Token password (optional - required for HSM)", - x_token_pwd); - - parser.addOption("-agent_key_size %s #Agent Cert Key Size", - x_agent_key_size); - parser.addOption("-agent_key_type %s #Agent Cert Key type [rsa]", - x_agent_key_type); - parser.addOption("-agent_cert_subject %s #Agent Cert Subject", - x_agent_cert_subject); - - parser.addOption("-backup_pwd %s #PKCS12 backup password", - x_backup_pwd); - - parser.addOption("-subsystem_name %s #Subsystem name", - x_subsystem_name); - - parser.addOption( - "-subca_sign_cert_subject_name %s #subCA cert subject name", - x_subca_sign_cert_subject_name); - parser.addOption( - "-subca_subsystem_cert_subject_name %s #subCA subsystem cert subject name", - x_subca_subsystem_cert_subject_name); - parser.addOption( - "-subca_ocsp_cert_subject_name %s #subCA ocsp cert subject name", - x_subca_ocsp_cert_subject_name); - parser.addOption( - "-subca_server_cert_subject_name %s #subCA server cert subject name", - x_subca_server_cert_subject_name); - parser.addOption( - "-subca_audit_signing_cert_subject_name %s #CA audit signing cert subject name", - x_subca_audit_signing_cert_subject_name); - - // and then match the arguments - String[] unmatched = null; - unmatched = parser.matchAllArgs(args, 0, ArgParser.EXIT_ON_UNMATCHED); - - if (unmatched != null) { - System.out.println("ERROR: Argument Mismatch"); - System.exit(-1); - } - - parser.checkRequiredArgs(); - - // set variables - cs_hostname = x_cs_hostname.value; - cs_port = x_cs_port.value; - - sd_hostname = x_sd_hostname.value; - sd_ssl_port = x_sd_ssl_port.value; - sd_agent_port = x_sd_agent_port.value; - sd_admin_port = x_sd_admin_port.value; - sd_admin_name = x_sd_admin_name.value; - sd_admin_password = x_sd_admin_password.value; - - ca_hostname = x_ca_hostname.value; - ca_port = x_ca_port.value; - ca_ssl_port = x_ca_ssl_port.value; - - client_certdb_dir = x_client_certdb_dir.value; - client_certdb_pwd = x_client_certdb_pwd.value; - pin = x_preop_pin.value; - domain_name = x_domain_name.value; - admin_user = x_admin_user.value; - admin_email = x_admin_email.value; - admin_password = x_admin_password.value; - agent_name = x_agent_name.value; - - ldap_host = x_ldap_host.value; - ldap_port = x_ldap_port.value; - bind_dn = x_bind_dn.value; - bind_password = x_bind_password.value; - base_dn = x_base_dn.value; - db_name = x_db_name.value; - secure_conn = set_default(x_secure_conn.value, "false"); - remove_data = set_default(x_remove_data.value, "false"); - - key_type = set_default(x_key_type.value, DEFAULT_KEY_TYPE); - signing_key_type = set_default(x_signing_key_type.value, key_type); - ocsp_signing_key_type = set_default(x_ocsp_signing_key_type.value, key_type); - audit_signing_key_type = set_default(x_audit_signing_key_type.value, key_type); - subsystem_key_type = set_default(x_subsystem_key_type.value, key_type); - sslserver_key_type = set_default(x_sslserver_key_type.value, key_type); - - key_size = set_default(x_key_size.value, DEFAULT_KEY_SIZE); - signing_key_size = set_default(x_signing_key_size.value, key_size); - ocsp_signing_key_size = set_default(x_ocsp_signing_key_size.value, key_size); - audit_signing_key_size = set_default(x_audit_signing_key_size.value, key_size); - subsystem_key_size = set_default(x_subsystem_key_size.value, key_size); - sslserver_key_size = set_default(x_sslserver_key_size.value, key_size); - - key_curvename = set_default(x_key_curvename.value, DEFAULT_KEY_CURVENAME); - signing_key_curvename = set_default(x_signing_key_curvename.value, key_curvename); - ocsp_signing_key_curvename = set_default(x_ocsp_signing_key_curvename.value, key_curvename); - audit_signing_key_curvename = set_default(x_audit_signing_key_curvename.value, key_curvename); - subsystem_key_curvename = set_default(x_subsystem_key_curvename.value, key_curvename); - sslserver_key_curvename = set_default(x_sslserver_key_curvename.value, key_curvename); - - if (signing_key_type.equalsIgnoreCase("RSA")) { - key_algorithm = set_default(x_key_algorithm.value, DEFAULT_KEY_ALGORITHM_RSA); - } else { - key_algorithm = set_default(x_key_algorithm.value, DEFAULT_KEY_ALGORITHM_ECC); - } - - signing_algorithm = set_default(x_signing_algorithm.value, key_algorithm); - signing_signingalgorithm = set_default(x_signing_signingalgorithm.value, signing_algorithm); - ocsp_signing_signingalgorithm = set_default(x_ocsp_signing_signingalgorithm.value, signing_algorithm); - - token_name = x_token_name.value; - token_pwd = x_token_pwd.value; - - agent_key_size = x_agent_key_size.value; - agent_key_type = x_agent_key_type.value; - agent_cert_subject = x_agent_cert_subject.value; - - backup_pwd = x_backup_pwd.value; - subsystem_name = x_subsystem_name.value; - - subca_sign_cert_subject_name = x_subca_sign_cert_subject_name.value; - subca_subsystem_cert_subject_name = - x_subca_subsystem_cert_subject_name.value; - subca_ocsp_cert_subject_name = x_subca_ocsp_cert_subject_name.value; - subca_server_cert_subject_name = x_subca_server_cert_subject_name.value; - subca_audit_signing_cert_subject_name = x_subca_audit_signing_cert_subject_name.value; - - boolean st = ca.ConfigureSubCAInstance(); - - if (!st) { - System.out.println("ERROR: unable to create Subordinate CA"); - System.exit(-1); - } - - System.out.println("Certificate System - Subordinate CA Instance Configured."); - System.exit(0); - - } - -}; |