diff options
Diffstat (limited to 'pki/base/common/src/com/netscape/cms/profile/def/UserKeyDefault.java')
-rw-r--r-- | pki/base/common/src/com/netscape/cms/profile/def/UserKeyDefault.java | 233 |
1 files changed, 0 insertions, 233 deletions
diff --git a/pki/base/common/src/com/netscape/cms/profile/def/UserKeyDefault.java b/pki/base/common/src/com/netscape/cms/profile/def/UserKeyDefault.java deleted file mode 100644 index b1dc9d116..000000000 --- a/pki/base/common/src/com/netscape/cms/profile/def/UserKeyDefault.java +++ /dev/null @@ -1,233 +0,0 @@ -// --- BEGIN COPYRIGHT BLOCK --- -// This program is free software; you can redistribute it and/or modify -// it under the terms of the GNU General Public License as published by -// the Free Software Foundation; version 2 of the License. -// -// This program is distributed in the hope that it will be useful, -// but WITHOUT ANY WARRANTY; without even the implied warranty of -// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -// GNU General Public License for more details. -// -// You should have received a copy of the GNU General Public License along -// with this program; if not, write to the Free Software Foundation, Inc., -// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. -// -// (C) 2007 Red Hat, Inc. -// All rights reserved. -// --- END COPYRIGHT BLOCK --- -package com.netscape.cms.profile.def; - -import java.io.ByteArrayInputStream; -import java.math.BigInteger; -import java.security.interfaces.DSAParams; -import java.util.Locale; - -import netscape.security.provider.DSAPublicKey; -import netscape.security.provider.RSAPublicKey; -import netscape.security.x509.AlgorithmId; -import netscape.security.x509.CertificateX509Key; -import netscape.security.x509.X509CertInfo; -import netscape.security.x509.X509Key; - -import com.netscape.certsrv.apps.CMS; -import com.netscape.certsrv.base.IConfigStore; -import com.netscape.certsrv.profile.EProfileException; -import com.netscape.certsrv.profile.IEnrollProfile; -import com.netscape.certsrv.profile.IProfile; -import com.netscape.certsrv.property.Descriptor; -import com.netscape.certsrv.property.EPropertyException; -import com.netscape.certsrv.property.IDescriptor; -import com.netscape.certsrv.request.IRequest; - -/** - * This class implements an enrollment default policy - * that populates a user supplied key - * into the certificate template. - * - * @version $Revision$, $Date$ - */ -public class UserKeyDefault extends EnrollDefault { - - public static final String VAL_KEY = "KEY"; - public static final String VAL_LEN = "LEN"; - public static final String VAL_TYPE = "TYPE"; - - public UserKeyDefault() { - super(); - addValueName(VAL_TYPE); - addValueName(VAL_LEN); - addValueName(VAL_KEY); - } - - public void init(IProfile profile, IConfigStore config) - throws EProfileException { - super.init(profile, config); - } - - public IDescriptor getValueDescriptor(Locale locale, String name) { - if (name.equals(VAL_KEY)) { - return new Descriptor(IDescriptor.STRING, - IDescriptor.READONLY, - null, - CMS.getUserMessage(locale, "CMS_PROFILE_KEY")); - } else if (name.equals(VAL_LEN)) { - return new Descriptor(IDescriptor.STRING, - IDescriptor.READONLY, - null, - CMS.getUserMessage(locale, "CMS_PROFILE_KEY_LEN")); - } else if (name.equals(VAL_TYPE)) { - return new Descriptor(IDescriptor.STRING, - IDescriptor.READONLY, - null, - CMS.getUserMessage(locale, "CMS_PROFILE_KEY_TYPE")); - } else { - return null; - } - } - - public void setValue(String name, Locale locale, - X509CertInfo info, String value) - throws EPropertyException { - // this default rule is readonly - } - - public String getValue(String name, Locale locale, - X509CertInfo info) - throws EPropertyException { - if (name == null) { - throw new EPropertyException(CMS.getUserMessage( - locale, "CMS_INVALID_PROPERTY", name)); - } - if (name.equals(VAL_KEY)) { - CertificateX509Key ck = null; - - try { - ck = (CertificateX509Key) - info.get(X509CertInfo.KEY); - } catch (Exception e) { - // nothing - } - X509Key k = null; - - try { - k = (X509Key) - ck.get(CertificateX509Key.KEY); - } catch (Exception e) { - // nothing - } - if (k == null) { - throw new EPropertyException(CMS.getUserMessage( - locale, "CMS_PROFILE_KEY_NOT_FOUND")); - } - return toHexString(k.getKey()); - } else if (name.equals(VAL_LEN)) { - CertificateX509Key ck = null; - - try { - ck = (CertificateX509Key) - info.get(X509CertInfo.KEY); - } catch (Exception e) { - // nothing - } - X509Key k = null; - - try { - k = (X509Key) - ck.get(CertificateX509Key.KEY); - } catch (Exception e) { - // nothing - } - if (k == null) { - throw new EPropertyException(CMS.getUserMessage( - locale, "CMS_PROFILE_KEY_NOT_FOUND")); - } - try { - if (k.getAlgorithm().equals("RSA")) { - return Integer.toString(getRSAKeyLen(k)); - } else { - return Integer.toString(getDSAKeyLen(k)); - } - } catch (Exception e) { - CMS.debug("UserKeyDefault: getValue " + e.toString()); - throw new EPropertyException(CMS.getUserMessage( - locale, "CMS_INVALID_PROPERTY", name)); - } - } else if (name.equals(VAL_TYPE)) { - CertificateX509Key ck = null; - - try { - ck = (CertificateX509Key) - info.get(X509CertInfo.KEY); - } catch (Exception e) { - // nothing - } - X509Key k = null; - - try { - k = (X509Key) - ck.get(CertificateX509Key.KEY); - } catch (Exception e) { - // nothing - } - if (k == null) { - throw new EPropertyException(CMS.getUserMessage( - locale, "CMS_PROFILE_KEY_NOT_FOUND")); - } - return k.getAlgorithm() + " - " + - k.getAlgorithmId().getOID().toString(); - } else { - throw new EPropertyException(CMS.getUserMessage( - locale, "CMS_INVALID_PROPERTY", name)); - } - } - - public String getText(Locale locale) { - return CMS.getUserMessage(locale, "CMS_PROFILE_DEF_USER_KEY"); - } - - public int getRSAKeyLen(X509Key key) throws Exception { - X509Key newkey = null; - - try { - newkey = new X509Key(AlgorithmId.get("RSA"), - key.getKey()); - } catch (Exception e) { - CMS.debug("UserKeyDefault: getRSAKey " + e.toString()); - throw e; - } - RSAPublicKey rsaKey = new RSAPublicKey(newkey.getEncoded()); - - return rsaKey.getKeySize(); - } - - public int getDSAKeyLen(X509Key key) throws Exception { - // Check DSAKey parameters. - // size refers to the p parameter. - DSAPublicKey dsaKey = new DSAPublicKey(key.getEncoded()); - DSAParams keyParams = dsaKey.getParams(); - BigInteger p = keyParams.getP(); - int len = p.bitLength(); - - return len; - } - - /** - * Populates the request with this policy default. - */ - public void populate(IRequest request, X509CertInfo info) - throws EProfileException { - CertificateX509Key certKey = null; - // authenticate the certificate key, and move - // the key from request into x509 certinfo - try { - byte[] certKeyData = request.getExtDataInByteArray(IEnrollProfile.REQUEST_KEY); - if (certKeyData != null) { - certKey = new CertificateX509Key( - new ByteArrayInputStream(certKeyData)); - } - info.set(X509CertInfo.KEY, certKey); - } catch (Exception e) { - CMS.debug("UserKeyDefault: populate " + e.toString()); - } - } -} |