1 files changed, 157 insertions, 0 deletions
diff --git a/pki/base/common/src/com/netscape/cms/profile/output/CMMFOutput.java b/pki/base/common/src/com/netscape/cms/profile/output/CMMFOutput.java
new file mode 100644
index 000000000..0ed01cb38
--- /dev/null
+++ b/pki/base/common/src/com/netscape/cms/profile/output/CMMFOutput.java
@@ -0,0 +1,157 @@
+// --- BEGIN COPYRIGHT BLOCK ---
+// This program is free software; you can redistribute it and/or modify
+// it under the terms of the GNU General Public License as published by
+// the Free Software Foundation; version 2 of the License.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU General Public License for more details.
+//
+// You should have received a copy of the GNU General Public License along
+// with this program; if not, write to the Free Software Foundation, Inc.,
+// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+//
+// (C) 2007 Red Hat, Inc.
+// All rights reserved.
+// --- END COPYRIGHT BLOCK ---
+package com.netscape.cms.profile.output;
+
+
+import java.security.cert.*;
+import java.io.*;
+import java.util.*;
+import com.netscape.certsrv.base.*;
+import com.netscape.certsrv.profile.*;
+import com.netscape.certsrv.request.*;
+import com.netscape.certsrv.property.*;
+import com.netscape.certsrv.apps.*;
+import com.netscape.certsrv.ca.*;
+
+import netscape.security.x509.*;
+import netscape.security.util.*;
+import netscape.security.pkcs.*;
+
+import org.mozilla.jss.asn1.*;
+import org.mozilla.jss.pkix.crmf.*;
+import org.mozilla.jss.pkix.cmmf.*;
+import org.mozilla.jss.pkix.primitive.*;
+
+import com.netscape.cms.profile.common.*;
+
+
+/**
+ * This class implements the output plugin that outputs
+ * CMMF response for the issued certificate.
+ *
+ * @version $Revision$, $Date$
+ */
+public class CMMFOutput extends EnrollOutput implements IProfileOutput { 
+
+    public static final String VAL_PRETTY_CERT = "pretty_cert";
+    public static final String VAL_CMMF_RESPONSE = "cmmf_response";
+
+    public CMMFOutput() {
+        addValueName(VAL_PRETTY_CERT);
+        addValueName(VAL_CMMF_RESPONSE);
+    }
+
+    /**
+     * Initializes this default policy.
+     */
+    public void init(IProfile profile, IConfigStore config)
+        throws EProfileException {
+        super.init(profile, config);
+    }
+
+    /**
+     * Retrieves the localizable name of this policy.
+     */
+    public String getName(Locale locale) {
+        return CMS.getUserMessage(locale, "CMS_PROFILE_OUTPUT_CERT_NAME");
+    }
+
+    /**
+     * Retrieves the localizable description of this policy.
+     */
+    public String getText(Locale locale) {
+        return CMS.getUserMessage(locale, "CMS_PROFILE_OUTPUT_CERT_TEXT");
+    }
+
+    /**
+     * Populates the request with this policy default.
+     */
+    public void populate(IProfileContext ctx, IRequest request)
+        throws EProfileException {
+    }
+
+    /**
+     * Retrieves the descriptor of the given value
+     * parameter by name.
+     */
+    public IDescriptor getValueDescriptor(Locale locale, String name) {
+        if (name.equals(VAL_PRETTY_CERT)) {
+            return new Descriptor(IDescriptor.PRETTY_PRINT, null,
+                    null,
+                    CMS.getUserMessage(locale, 
+                        "CMS_PROFILE_OUTPUT_CERT_PP"));
+        } else if (name.equals(VAL_CMMF_RESPONSE)) {
+            return new Descriptor(IDescriptor.PRETTY_PRINT, null,
+                    null,
+                    CMS.getUserMessage(locale, 
+                        "CMS_PROFILE_OUTPUT_CMMF_B64"));
+        }
+        return null;
+    }
+
+    public String getValue(String name, Locale locale, IRequest request)
+        throws EProfileException {
+        if (name.equals(VAL_PRETTY_CERT)) {
+            X509CertImpl cert = request.getExtDataInCert(
+                    EnrollProfile.REQUEST_ISSUED_CERT);
+            ICertPrettyPrint prettyCert = CMS.getCertPrettyPrint(cert); 
+
+            return prettyCert.toString(locale);
+        } else if (name.equals(VAL_CMMF_RESPONSE)) {
+            try {
+              X509CertImpl cert = request.getExtDataInCert(
+                    EnrollProfile.REQUEST_ISSUED_CERT);
+              if (cert == null)
+                  return null;
+            
+              ICertificateAuthority ca = (ICertificateAuthority)
+                   CMS.getSubsystem("ca");
+              CertificateChain cachain = ca.getCACertChain(); 
+              X509Certificate[] cacerts = cachain.getChain();
+
+              byte[][] caPubs = new byte[cacerts.length][];
+
+              for (int j = 0; j < cacerts.length; j++)  {
+                caPubs[j] = ((X509CertImpl) cacerts[j]).getEncoded();
+              }   
+
+              CertRepContent certRepContent = null;
+              certRepContent = new CertRepContent(caPubs);
+
+              PKIStatusInfo status = new PKIStatusInfo(PKIStatusInfo.granted); 
+              CertifiedKeyPair certifiedKP = 
+                new CertifiedKeyPair(new CertOrEncCert(cert.getEncoded())); 
+              CertResponse resp = 
+                new CertResponse(new INTEGER(request.getRequestId().toString()), 
+                 status, certifiedKP);
+              certRepContent.addCertResponse(resp);
+
+              ByteArrayOutputStream certRepOut = new ByteArrayOutputStream(); 
+              certRepContent.encode(certRepOut); 
+              byte[] certRepBytes = certRepOut.toByteArray();
+
+              return CMS.BtoA(certRepBytes); 
+            } catch (Exception e) {
+               return null;
+            }
+        } else {
+            return null;
+        }
+    }
+
+}