1 files changed, 223 insertions, 0 deletions
diff --git a/base/common/src/com/netscape/cms/servlet/admin/KRAConnectorProcessor.java b/base/common/src/com/netscape/cms/servlet/admin/KRAConnectorProcessor.java
new file mode 100644
index 000000000..61536f346
--- /dev/null
+++ b/base/common/src/com/netscape/cms/servlet/admin/KRAConnectorProcessor.java
@@ -0,0 +1,223 @@
+// --- BEGIN COPYRIGHT BLOCK ---
+// This program is free software; you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation; version 2 of the License.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License along
+// with this program; if not, write to the Free Software Foundation, Inc.,
+// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+//
+// (C) 2013 Red Hat, Inc.
+// All rights reserved.
+// --- END COPYRIGHT BLOCK ---
+package com.netscape.cms.servlet.admin;
+
+import java.util.ArrayList;
+import java.util.Locale;
+
+import org.apache.commons.lang.StringUtils;
+
+import com.netscape.certsrv.apps.CMS;
+import com.netscape.certsrv.base.BadRequestException;
+import com.netscape.certsrv.base.EBaseException;
+import com.netscape.certsrv.base.EPropertyNotFound;
+import com.netscape.certsrv.base.IConfigStore;
+import com.netscape.certsrv.base.PKIException;
+import com.netscape.certsrv.ca.ICAService;
+import com.netscape.certsrv.ca.ICertificateAuthority;
+import com.netscape.certsrv.connector.IConnector;
+import com.netscape.certsrv.system.KRAConnectorInfo;
+import com.netscape.cms.servlet.processors.Processor;
+
+/**
+ * @author Ade Lee
+ */
+public class KRAConnectorProcessor extends Processor {
+    private boolean connectorExists = false;
+
+    // Connector constants
+    public final static String PREFIX = "ca.connector.KRA";
+
+    public KRAConnectorProcessor(Locale locale) throws EPropertyNotFound, EBaseException {
+        super("kraconnector", locale);
+        ICertificateAuthority ca = (ICertificateAuthority)CMS.getSubsystem("ca");
+        ICAService caService = (ICAService)ca.getCAService();
+        connectorExists = (caService.getKRAConnector() != null)? true:false;
+    }
+
+    public void removeConnector(String newHost, String newPort) throws EPropertyNotFound, EBaseException {
+        if (! connectorExists) {
+            CMS.debug("removeConnector: no KRA connector exists, returning success");
+            return;
+        }
+
+        if ((newHost == null) || (newPort == null)) {
+            CMS.debug("removeConnector: malformed request.  newHost or newPort is null");
+            throw new BadRequestException("Bad Request: KRA Host or Port not defined");
+        }
+        IConfigStore cs = CMS.getConfigStore();
+        String host = cs.getString(PREFIX + ".host");
+        String port = cs.getString(PREFIX + ".port");
+
+        if ((host == null) || (port == null)) {
+            CMS.debug("removeConnector: bad connector configuration - host or port are null");
+            throw new PKIException("Bad Connector configuration on this CA");
+        }
+
+        String hostport = newHost + ":" + newPort;
+        if ((host.equals(newHost)) && port.equals(newPort)) {
+            CMS.debug("removeConnector: Removing " + PREFIX + " substore");
+            cs.removeSubStore(PREFIX);
+            cs.commit(true);
+            deleteConnector();
+        } else if (host.indexOf(' ') != -1) { // host is a list
+            String[] hostList = host.trim().split(" ");
+            ArrayList<String> finalList = new ArrayList<String>();
+            for (String h : hostList) {
+                if (! h.equals(hostport)) {
+                    finalList.add(h);
+                }
+            }
+            if (finalList.size() == hostList.length) {
+                CMS.debug("removeConnector: no connector for " + hostport + " exists. Returning success");
+                return;
+            }
+
+            CMS.debug("removeConnector: Removing " + hostport + " from " + PREFIX);
+
+            if (finalList.size() == 0) {
+                CMS.debug("removeConnector: Removing " + PREFIX + " substore");
+                cs.removeSubStore(PREFIX);
+                cs.commit(true);
+                deleteConnector();
+            } else if (finalList.size() == 1) {
+                cs.putString(PREFIX + ".host", finalList.get(0).split(":")[0]);
+                cs.putString(PREFIX + ".port", finalList.get(0).split(":")[1]);
+                cs.commit(true);
+                replaceConnector();
+            } else {
+                String finalString = StringUtils.join(finalList, " ");
+                cs.putString(PREFIX + ".host", finalString.trim());
+                cs.commit(true);
+                replaceConnector();
+            }
+        } else {
+            CMS.debug("removeConnector: no connector for " + hostport + " exists. Returning success");
+        }
+    }
+
+    public void stopConnector() {
+        ICertificateAuthority ca = (ICertificateAuthority)CMS.getSubsystem("ca");
+        ICAService caService = (ICAService)ca.getCAService();
+        IConnector kraConnector = caService.getKRAConnector();
+        if (kraConnector != null) {
+            kraConnector.stop();
+        }
+    }
+
+    public void startConnector() {
+        ICertificateAuthority ca = (ICertificateAuthority)CMS.getSubsystem("ca");
+        ICAService caService = (ICAService)ca.getCAService();
+        IConnector kraConnector = caService.getKRAConnector();
+        if (kraConnector != null) {
+            kraConnector.start();
+        }
+    }
+
+    public void replaceConnector() throws EBaseException {
+        // stop the old connector
+        stopConnector();
+
+        ICertificateAuthority ca = (ICertificateAuthority)CMS.getSubsystem("ca");
+        ICAService caService = (ICAService)ca.getCAService();
+        IConfigStore cs = CMS.getConfigStore();
+
+        IConnector kraConnector = caService.getConnector(cs.getSubStore(PREFIX));
+        caService.setKRAConnector(kraConnector);
+
+        startConnector();
+    }
+
+    public void deleteConnector() {
+        stopConnector();
+
+        ICertificateAuthority ca = (ICertificateAuthority)CMS.getSubsystem("ca");
+        ICAService caService = (ICAService)ca.getCAService();
+        caService.setKRAConnector(null);
+    }
+
+    public void addConnector(KRAConnectorInfo info) throws EPropertyNotFound, EBaseException {
+        IConfigStore cs = CMS.getConfigStore();
+        String newHost = info.getHost();
+        String newPort = info.getPort();
+        String newTransportCert = info.getTransportCert();
+
+        if ((newHost == null) || (newPort == null) || (newTransportCert == null)) {
+            CMS.debug("addConnector: malformed request.  newHost, newPort or transport cert is null");
+            throw new BadRequestException("Bad Request: KRA host, port or transport cert not defined");
+        }
+
+        if (connectorExists) {
+            String host = cs.getString(PREFIX + ".host");
+            String port = cs.getString(PREFIX + ".port");
+
+            if ((!host.equals(newHost)) || (!port.equals(newPort))) { //existing connector is not the same
+
+                // check transport cert
+                String transportCert = cs.getString(PREFIX + ".transportCert");
+                if (!transportCert.equals(newTransportCert)) {
+                    CMS.debug("addConnector: Connector is already defined");
+                    throw new BadRequestException("KRA connector has already been defined for this CA");
+                }
+
+                String hostport = newHost + ":" + newPort;
+                if (host.indexOf(' ') != -1) { // host is a list
+                    String[] hostList = host.trim().split(" ");
+                    for (String h : hostList) {
+                        if (h.equals(hostport)) {
+                            CMS.debug("addConnector: connector for " + hostport +
+                                    " is already present.  Returning success");
+                            return;
+                        }
+                    }
+
+                    CMS.debug("addConnector: adding " + hostport + " to KRA connector host list");
+                    cs.putString(PREFIX + ".host", host + " " + hostport);
+                    cs.commit(true);
+                    replaceConnector();
+                    return;
+                } else { // host is not a list, turn it into one
+                    CMS.debug("addConnector: adding " + hostport + " to KRA connector");
+                    cs.putString(PREFIX + ".host", host + ":" + port + " " + hostport);
+                    cs.commit(true);
+                    replaceConnector();
+                    return;
+                }
+            }
+        }
+
+        // connector does not exist, or existing connector is the same host/port and we are replacing it
+        cs.putString(PREFIX + ".host", info.getHost());
+        cs.putString(PREFIX + ".port", info.getPort());
+        cs.putString(PREFIX + ".enable", info.getEnable() != null ? info.getEnable() : "true");
+        cs.putString(PREFIX + ".local", info.getLocal() != null ? info.getLocal(): "false");
+        cs.putString(PREFIX + ".timeout", info.getTimeout() != null ?  info.getTimeout() : "30");
+        cs.putString(PREFIX + ".uri", info.getUri() != null ? info.getUri() : "/kra/agent/kra/connector");
+        cs.putString(PREFIX + ".transportCert", info.getTransportCert());
+
+        String nickname = cs.getString("ca.subsystem.nickname", "");
+        String tokenname = cs.getString("ca.subsystem.tokenname", "");
+        if (!tokenname.equals("Internal Key Storage Token"))
+            nickname = tokenname + ":" + nickname;
+        cs.putString(PREFIX + ".nickName", nickname);
+        cs.commit(true);
+
+        replaceConnector();
+    }
+
+}