diff options
Diffstat (limited to 'base/ca/shared/webapps/ca/agent/cms-funcs.js')
| -rw-r--r-- | base/ca/shared/webapps/ca/agent/cms-funcs.js | 538 |
1 files changed, 538 insertions, 0 deletions
diff --git a/base/ca/shared/webapps/ca/agent/cms-funcs.js b/base/ca/shared/webapps/ca/agent/cms-funcs.js new file mode 100644 index 000000000..c8ffd51c7 --- /dev/null +++ b/base/ca/shared/webapps/ca/agent/cms-funcs.js @@ -0,0 +1,538 @@ +// --- BEGIN COPYRIGHT BLOCK --- +// This program is free software; you can redistribute it and/or modify +// it under the terms of the GNU General Public License as published by +// the Free Software Foundation; version 2 of the License. +// +// This program is distributed in the hope that it will be useful, +// but WITHOUT ANY WARRANTY; without even the implied warranty of +// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +// GNU General Public License for more details. +// +// You should have received a copy of the GNU General Public License along +// with this program; if not, write to the Free Software Foundation, Inc., +// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. +// +// Copyright (C) 2007 Red Hat, Inc. +// All rights reserved. +// --- END COPYRIGHT BLOCK --- + +//<!-- + + +function checkClientTime() +{ + var speed; + var server_date = new Date(serverdate); + var client_date = new Date(); + var zone = client_date.getTimezoneOffset(); + var timediff = 0; + + var serverutc = server_date.getTime(); + var clientutc = client_date.getTime(); + + var offset = clientutc - serverutc; + if (offset >0) { + speed = 'fast'; + } else { + speed = 'slow'; + } + timediff = Math.round(Math.abs(offset/1000/60)); + + if (timediff > 10) { + msg = 'Your computer\'s clock is '+ timediff+ ' minutes '+ speed + + '\n\nYou may encounter problems using your certificate\n' + + 'as your clock is set incorrectly.\n\n' + + 'According to the server, the time is:\n ' + server_date + + '\n\nPlease correct your clock before proceeding with enrollment'+ + '\n\nYour timezone is set to ' + (-zone/60) +' hours relative to GMT.\n' + + 'If you change your timezone, you may need to restart your browser\n'+ + 'before continuing.'; + alert(msg); + return false; + } + return true; +} + + + + +function doubleQuotes(componentName) +{ + for (i=0; i < componentName.length; i++) { + if (componentName.charAt(i) == '"') { + return true; + } + } + return false; +} + +function escapeDNComponent(str) +{ + var outStr = ""; + var escapeValue = false; + + // Do we need to escape any characters + for (i=0; i < str.length; i++) { + c = str.charAt(i); + if (c == ',' || c == '=' || c == '+' || c == '<' || + c == '>' || c == '#' || c == ';' || c == '\r' || + c == '\n') { + escapeValue = true; + break; + } + } + + if (escapeValue == true) { + outStr += '"'; + outStr += str; + outStr += '"'; + } else { + outStr += str; + } + return outStr; +} + +function formulateDN(form, distinguishedName) +{ + // Note: The alerts about double quotes are here to avoid + // problems with the code dealing with quoting and escaping in the + // Netscape Directory Server 1.0 implementation. + with (form) { + distinguishedName.value = ''; + if (form.E != null) { + if (E.value != '') { + if (doubleQuotes(E.value) == true) { + alert('Double quotes are not allowed in the E-mail field'); + E.value = ''; + E.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'E=' + escapeDNComponent(E.value); + } + } + if (form.CN!= null) { + if (CN.value != '') { + if (doubleQuotes(CN.value) == true) { + alert('Double quotes are not allowed in Common Name field'); + CN.value = ''; + CN.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'CN=' + escapeDNComponent(CN.value); + } + } + if (form.UID1 != null) { + if (UID1.value != '') { + if (doubleQuotes(UID1.value) == true) { + alert('Double quotes are not allowed in the user id field'); + UID1.value = ''; + UID1.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'UID=' + escapeDNComponent(UID1.value); + } + } + if (form.OU != null) { + if (OU.value != '') { + if (doubleQuotes(OU.value) == true) { + alert('Double quotes are not allowed in Org Unit field'); + OU.value = ''; + OU.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'OU=' + escapeDNComponent(OU.value); + } + } + if (form.O != null) { + if (O.value != '') { + if (doubleQuotes(O.value) == true) { + alert('Double quotes are not allowed in Organization field.'); + O.value = ''; + O.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'O=' + escapeDNComponent(O.value); + } + } + if (form.L != null) { + if (L.value != '') { + if (doubleQuotes(L.value) == true) { + alert('Double quotes are not allowed in Locality field.'); + L.value = ''; + L.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'L=' + escapeDNComponent(L.value); + } + } + if (form.ST != null) { + if (ST.value != '') { + if (doubleQuotes(ST.value) == true) { + alert('Double quotes are not allowed in State field.'); + ST.value = ''; + ST.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'ST=' + escapeDNComponent(ST.value); + } + } + if (form.C != null) { + if (C.value != '') { + if (doubleQuotes(C.value) == true) { + alert('Double quotes are not allowed in Country field.'); + C.value = ''; + C.focus(); + return; + } + if (distinguishedName.value != '') distinguishedName.value += ', '; + distinguishedName.value += 'C=' + escapeDNComponent(C.value); + } + } + } +} + +function isValidIssuerDN(form) +{ + // Note: The check here is to avoid a bug in Netscape Navigator 3.0 and 3.01 + // that are triggered on formation of the nickname on import of a CA cert if + // that cert does not contain an OU or O component. + if ((form.OU.value == '') && (form.O.value == '')) { + alert("You must enter an Organization Unit or an Organization."); + return false; + } else { + return true; + } +} + +function isValidAdminDN(form) +{ + // Note: The check here is to avoid a bug in Netscape Navigator 3.0 and 3.01 + // that are triggered on formation of the nickname on import of a personal cert if + // that cert does not contain a common name. + + if (form.CN.value == '') { + alert("You must enter a Common Name."); + return false; + } else { + return true; + } +} + +function isValidCSR(form) +{ + // Note: the checks here are of mixed origin. Some are required for Navigator + // and Communicator. The CSR field checks are to avoid server side rejection of the + // submission. These checks can be split up to be different for different types of + // certificates. + + formulateDN(form, form.subject); + // DEBUG + //alert(form.subject); + + with (form) { + if (email != null) { + if (E.value == "" && email.checked) { + alert("E-mail certificates must include an E-mail address."); + return false; + } + } + if (CN.value == "") { + alert("You must supply your name for the certificate."); + return false; + } + return true; + } +} + +function isNumber(string, radix) { + var i = 0; + var legalDigits; + if (radix == null || radix == 10) { + legalDigits = "0123456789"; + } else if (radix == 16) { + legalDigits = "0123456789abcdefABCDEF:"; + } else { + return false; + } + for(; i < string.length; ++i) { + if (string.charAt(i) != ' ') + break; + } + if (string.charAt(i) == '+' || string.charAt(i) == '-' ) { + ++i; + } + if (radix == 16 && i < string.length - 2 && + string.charAt(i) == '0' && + (string.charAt(i+1) == 'x' || string.charAt(i+1) == 'X') && + legalDigits.indexOf(string.charAt(i+2)) != -1) { + i += 3; + } + for(; i < string.length; ++i) { + if (legalDigits.indexOf(string.charAt(i)) == -1) + break; + } + for(; i < string.length; ++i) { + if (string.charAt(i) != ' ') + return false; + } + return true; +} + +function dateForm(name) +{ + var i; + document.write('<FORM NAME=\"'+ name +'\">'); + document.write('<SELECT NAME=\"day\"><OPTION VALUE=0> '); + for (i=1; i <=31; ++i) + document.write('<OPTION VALUE='+i+'>'+i); + document.write('</SELECT>'); + document.write('<SELECT NAME=\"month\">'+ + '<OPTION VALUE=13> '+ + '<OPTION VALUE=0>January'+ + '<OPTION VALUE=1>February'+ + '<OPTION VALUE=2>March'+ + '<OPTION VALUE=3>April'+ + '<OPTION VALUE=4>May'+ + '<OPTION VALUE=5>June'+ + '<OPTION VALUE=6>July'+ + '<OPTION VALUE=7>August'+ + '<OPTION VALUE=8>September'+ + '<OPTION VALUE=9>October'+ + '<OPTION VALUE=10>November'+ + '<OPTION VALUE=11>December'+ + '</SELECT>' + ); + + document.write('<SELECT NAME=\"year\"><OPTION VALUE=0> '); + for (i=1996; i <=2006; ++i) + document.write('<OPTION VALUE='+i+'>'+i); + document.write('</SELECT>'); + document.write('</FORM>'); +} + +function dateIsEmpty(form) +{ + return form.day.selectedIndex == 0 && + form.month.selectedIndex == 0 && + form.year.selectedIndex == 0; +} + + +function convertDate(form, fieldName) +{ + var date; + var day = form.day.options[form.day.selectedIndex].value; + var month = form.month.options[form.month.selectedIndex].value; + var year = form.year.options[form.year.selectedIndex].value; + date = new Date(year,month,day); + + // see if normalization was required + if (date.getMonth() != month || date.getDate() != day ) { + alert(fieldName + " is invalid"); + return null; + } + else + return Math.round(date.getTime() / 1000); +} + +function daysToSeconds(days){ + return 3600 * 24 * days; +} + +// encloses value in double quotes preceding all embedded double quotes with \ +function escapeValue(value) +{ + var result; + var fromIndex = 0, toIndex = 0; + + // kludgy work-around for indexOf JavaScript bug on empty string + if (value == "") + return '\"\"'; + + result = '\"'; + while ((toIndex = value.indexOf('\"',fromIndex)) != -1) { + result += value.substring(fromIndex,toIndex); + result += '\\"'; + fromIndex = toIndex + 1; + } + result += value.substring(fromIndex,value.length); + result += '\"'; + return result; +} + +// encloses value in double quotes preceding all embedded double quotes and +// backslashes with backslash +function escapeValueJSString(value) +{ + var result = ""; + + // Do we need to escape any characters + for (i=0; i < value.length; i++) { + c = value.charAt(i); + if (c == '\\' | c == '"') { + result += '\\'; + } + result += c; + } + return '\"' + result + '\"'; +} + +function escapeValueRfc1779(value) +{ + var result = ""; + + // Do we need to escape any characters + for (i=0; i < value.length; i++) { + c = value.charAt(i); + if (c == ',' || c == '=' || c == '+' || c == '<' || + c == '>' || c == '#' || c == ';' || c == '\r' || + c == '\n' || c == '\\' | c == '"') { + result += '\\'; + } + result += c; + } + return result; +} + +// helper function to construct name component(pattern) +function makeComponent(list,tag,value,asPattern) +{ + var last = list.length; + if (asPattern) { + list[last] = (value == "") ? "*" : (tag+"="+escapeValueRfc1779(value)); + } + else if (value != "") + list[last] = tag+"="+escapeValueRfc1779(value); +} + +// If asPattern is false formulates the RFC 1779 format subject name +// from the component parts skipping all components with blank values, +// otherwise builds RFC 1779-like matching pattern from components +function computeNameCriterion(form) +{ + var asPattern = form.match[1].checked; + var result = new Array; + + with (form) { + // The order of clauses here determines how components are ordered + // in the name sent in the client's request. A site may wish to + // re-order the clauses here if their conventions produce names + // with components in a different order. + makeComponent(result,"E",E.value,asPattern); + makeComponent(result,"CN",CN.value,asPattern); + makeComponent(result,"UID",UID.value,asPattern); + makeComponent(result,"OU",OU.value,asPattern); + makeComponent(result,"O",O.value,asPattern); + makeComponent(result,"L",L.value,asPattern); + makeComponent(result,"ST",ST.value,asPattern); + makeComponent(result,"C",C.value,asPattern); + } + if (result.length == 0) + return asPattern ? "0 == 0" : "0 == 1"; + else + return "subject" + ( asPattern ? " ~= " : " == ") + + escapeValue(result.join(', ')); +} + +function booleanCrit(crit,radioArg) +{ + for (var i = 0; i < radioArg.length; ++i ){ + if( radioArg[i].checked ) { + if (radioArg[i].value.length != 0) { + crit[crit.length] = radioArg[i].name + " == " + radioArg[i].value; + } + return; + } + } +} + +function isHTTPEscapeChar(c) +{ + if (c == '%' || c == '#' || c == '+' || c == '=' || c == '\n' || + c == '\r' || c == '\t' || c == ';' || c == '&' || + c == '>') { + return true; + } + + return false; +} + +function produceHTTPEscapedString(inString) +{ + table = new Object(); + table["%"] = "25"; + table["#"] = "23"; + table["+"] = "2B"; + table["="] = "3D"; + table["\n"] = "0A"; + table["\r"] = "0D"; + table["\t"] = "09"; + table[";"] = "3B"; + table["&"] = "26"; + table[">"] = "3E"; + + outString = ""; + + for (i=0; i < inString.length; i++) { + if (inString.charAt(i) == ' ') { + outString += '+'; + } else { + if (isHTTPEscapeChar(inString.charAt(i))) { + outString += "%" + table[inString.substring(i, i+1)]; + } else { + outString += inString.charAt(i); + } + } + } + + return outString; +} + +// strips (optional) spaces and 0[xX] prefix at the beginning of s +function stripPrefix(s) +{ + var i; + for(i = 0; i < s.length - 1; ++i) { + if (s.charAt(i) != ' ' ) + break; + } + if (s.charAt(i) == '0' && (s.charAt(i+1) == 'x' || s.charAt(i+1) == 'X')) { + return s.substring(i+2,s.length); + } else { + return s.substring(i,s.length);; + } +} + +// removes colons from value and returns the result +// used as helper to convert colon-separated hexadecimal numbers +// to regular numbers +function removeColons(value) +{ + var result = ""; + + for (i=0; i < value.length; i++) { + c = value.charAt(i); + if (c != ':' ){ + result += c; + } + } + return result; +} + +function navMajorVersion() +{ + return parseInt(navigator.appVersion.substring(0, navigator.appVersion.indexOf("."))); +} +//--> + + + + + |