* *
* NOTE: The Policy Framework has been replaced by the Profile Framework. **
*
* @deprecated
* @version $Revision$, $Date$
*/
public class NSCCommentExt extends APolicyRule
implements IEnrollmentPolicy, IExtendedPluginInfo {
protected static final String PROP_USER_NOTICE_DISPLAY_TEXT = "displayText";
protected static final String PROP_COMMENT_FILE = "commentFile";
protected static final String PROP_CRITICAL = "critical";
protected static final String PROP_INPUT_TYPE = "inputType";
protected static final String TEXT = "Text";
protected static final String FILE = "File";
protected String mUserNoticeDisplayText;
protected String mCommentFile;
protected String mInputType;
protected boolean mCritical;
private Vector
* The entries may be of the form:
*
* ca.Policy.rule.
*
* @param req The request on which to apply policy.
* @return The policy result object.
*/
public PolicyResult apply(IRequest req) {
PolicyResult res = PolicyResult.ACCEPTED;
// get cert info.
X509CertInfo[] ci =
req.getExtDataInCertInfoArray(IRequest.CERT_INFO);
if (ci == null || ci[0] == null) {
setError(req, CMS.getUserMessage("CMS_POLICY_NO_CERT_INFO"), NAME);
return PolicyResult.REJECTED; // unrecoverable error.
}
for (int i = 0; i < ci.length; i++) {
PolicyResult r = applyCert(req, ci[i]);
if (r == PolicyResult.REJECTED)
return r;
}
return res;
}
public PolicyResult applyCert(IRequest req, X509CertInfo certInfo) {
certApplied = false;
CertificateExtensions extensions = null;
try {
extensions = (CertificateExtensions)
certInfo.get(X509CertInfo.EXTENSIONS);
} catch (IOException e) {
} catch (CertificateException e) {
}
if (extensions == null) {
extensions = new CertificateExtensions();
try {
certInfo.set(X509CertInfo.VERSION,
new CertificateVersion(CertificateVersion.V3));
certInfo.set(X509CertInfo.EXTENSIONS, extensions);
} catch (Exception e) {
}
} else {
// remove any previously computed version of the extension
try {
extensions.delete(NSCCommentExtension.NAME);
} catch (IOException e) {
// this is the hack: for some reason, the key which is the name
// of the policy has been converted into the OID
try {
extensions.delete("2.16.840.1.113730.1.13");
} catch (IOException ee) {
}
}
}
if (mInputType.equals("File")) {
// if ((mUserNoticeDisplayText.equals("")) && !(mCommentFile.equals(""))) {
try {
// Read the comments file
BufferedReader fis = new BufferedReader(new FileReader(mCommentFile));
String line = null;
StringBuffer buffer = new StringBuffer();
while ((line = fis.readLine()) != null)
buffer.append(line);
mUserNoticeDisplayText = new String(buffer);
fis.close();
} catch (IOException e) {
setError(req, CMS.getUserMessage("CMS_POLICY_UNEXPECTED_POLICY_ERROR"),
NAME, " Comment Text file not found : " + mCommentFile);
log(ILogger.LL_FAILURE,
CMS.getLogMessage("POLICY_COMMENT_FILE_NOT_FOUND", e.toString()));
return PolicyResult.REJECTED;
}
}
certApplied = true;
try {
NSCCommentExtension cpExt =
new NSCCommentExtension(mCritical, mUserNoticeDisplayText);
extensions.set(NSCCommentExtension.NAME, cpExt);
} catch (Exception e) {
log(ILogger.LL_FAILURE,
CMS.getLogMessage("POLICY_ERROR_CERTIFICATE_POLICIES_1", NAME));
setError(req,
CMS.getUserMessage("CMS_POLICY_CERTIFICATE_POLICIES_ERROR"), NAME);
return PolicyResult.REJECTED;
}
return PolicyResult.ACCEPTED;
}
public String[] getExtendedPluginInfo(Locale locale) {
String[] params = {
PROP_CRITICAL + ";boolean;Netscape recommendation: non-critical.",
PROP_INPUT_TYPE + ";choice(Text,File);Whether the comments " +
"would be entered in the displayText field or come from " +
"a file.",
PROP_USER_NOTICE_DISPLAY_TEXT + ";string;The comment that may be " +
"displayed to the user when the certificate is viewed.",
PROP_COMMENT_FILE + ";string; If data source is 'File', specify " +
"the file name with full path.",
IExtendedPluginInfo.HELP_TOKEN +
";configuration-policyrules-nsccomment",
IExtendedPluginInfo.HELP_TEXT +
";Adds 'netscape comment' extension. See manual"
};
return params;
}
/**
* Return configured parameters for a policy rule instance.
*
* @return nvPairs A Vector of name/value pairs.
*/
public Vector