*
* (Certificate Request - all "agent" profile cert requests made through a connector)
*
*
* (Certificate Request Processed - all automated "agent" profile based cert acceptance made through a connector)
*
enum1 = crlExts.getElements();
while (enum1.hasMoreElements()) {
Extension ext = enum1.nextElement();
if (ext instanceof CRLReasonExtension) {
reason = ((CRLReasonExtension) ext).getReason().toInt();
break;
}
}
}
int count = oldCerts.length;
Integer result = thisreq.getExtDataInInteger(IRequest.RESULT);
if (result.equals(IRequest.RES_ERROR)) {
String[] svcErrors =
thisreq.getExtDataInStringArray(IRequest.SVCERRORS);
if (svcErrors != null && svcErrors.length > 0) {
for (int i = 0; i < svcErrors.length; i++) {
String err = svcErrors[i];
if (err != null) {
for (int j = 0; j < count; j++) {
if (oldCerts[j] != null) {
if (oldCerts[j] instanceof X509CertImpl) {
X509CertImpl cert = (X509CertImpl) oldCerts[j];
mLogger.log(ILogger.EV_AUDIT,
ILogger.S_OTHER,
AuditFormat.LEVEL,
AuditFormat.DOREVOKEFORMAT,
new Object[] {
thisreq.getRequestId(),
initiative,
"completed with error: " +
err,
cert.getSubjectDN(),
cert.getSerialNumber().toString(16),
RevocationReason.fromInt(reason).toString() }
);
}
}
}
}
}
}
} else {
// the success.
for (int j = 0; j < count; j++) {
if (oldCerts[j] != null) {
if (oldCerts[j] instanceof X509CertImpl) {
X509CertImpl cert = (X509CertImpl) oldCerts[j];
mLogger.log(ILogger.EV_AUDIT, ILogger.S_OTHER,
AuditFormat.LEVEL,
AuditFormat.DOREVOKEFORMAT,
new Object[] {
thisreq.getRequestId(),
initiative,
"completed",
cert.getSubjectDN(),
cert.getSerialNumber().toString(16),
RevocationReason.fromInt(reason).toString() }
);
}
}
}
}
} else {
mLogger.log(ILogger.EV_AUDIT,
ILogger.S_OTHER,
AuditFormat.LEVEL,
AuditFormat.NODNFORMAT,
new Object[] {
thisreq.getRequestType(),
thisreq.getRequestId(),
initiative,
authMgr,
"completed" }
);
}
}
// store a message in the signed audit log file
auditMessage = CMS.getLogMessage(
LOGGING_SIGNED_AUDIT_INTER_BOUNDARY_SUCCESS,
auditSubjectID,
ILogger.SUCCESS,
auditProtectionMethod,
auditRequestType,
auditRequesterID);
audit(auditMessage);
} catch (IOException e) {
CMS.debug("ConnectorServlet: process " + e.toString());
// store a message in the signed audit log file
auditMessage = CMS.getLogMessage(
LOGGING_SIGNED_AUDIT_INTER_BOUNDARY_SUCCESS,
auditSubjectID,
ILogger.FAILURE,
auditProtectionMethod,
auditRequestType,
auditRequesterID);
audit(auditMessage);
} catch (CertificateException e) {
CMS.debug("ConnectorServlet: process " + e.toString());
// store a message in the signed audit log file
auditMessage = CMS.getLogMessage(
LOGGING_SIGNED_AUDIT_INTER_BOUNDARY_SUCCESS,
auditSubjectID,
ILogger.FAILURE,
auditProtectionMethod,
auditRequestType,
auditRequesterID);
audit(auditMessage);
} catch (Exception e) {
CMS.debug("ConnectorServlet: process " + e.toString());
// store a message in the signed audit log file
auditMessage = CMS.getLogMessage(
LOGGING_SIGNED_AUDIT_INTER_BOUNDARY_SUCCESS,
auditSubjectID,
ILogger.FAILURE,
auditProtectionMethod,
auditRequestType,
auditRequesterID);
audit(auditMessage);
} finally {
SessionContext.releaseContext();
}
// NOTE: The signed audit event
// LOGGING_SIGNED_AUDIT_PROFILE_CERT_REQUEST
// has already been logged at this point!
return replymsg;
} catch (EBaseException e) {
// store a message in the signed audit log file
auditMessage = CMS.getLogMessage(
LOGGING_SIGNED_AUDIT_INTER_BOUNDARY_SUCCESS,
auditSubjectID,
ILogger.FAILURE,
auditProtectionMethod,
auditRequestType,
auditRequesterID);
audit(auditMessage);
// NOTE: The signed audit event
// LOGGING_SIGNED_AUDIT_PROFILE_CERT_REQUEST
// has either already been logged, or
// does not yet matter at this point!
return replymsg;
}
}
protected X509Certificate
getPeerCert(HttpServletRequest req) throws EBaseException {
return getSSLClientCertificate(req);
}
public String getServletInfo() {
return INFO;
}
/**
* Signed Audit Log
*
* This method is inherited by all extended "CMSServlet"s,
* and is called to store messages to the signed audit log.
*
*
* @param msg signed audit log message
*/
protected void audit(String msg) {
// in this case, do NOT strip preceding/trailing whitespace
// from passed-in String parameters
if (mSignedAuditLogger == null) {
return;
}
mSignedAuditLogger.log(ILogger.EV_SIGNED_AUDIT,
null,
ILogger.S_SIGNED_AUDIT,
ILogger.LL_SECURITY,
msg);
}
/**
* Signed Audit Log Profile ID
*
* This method is inherited by all extended "EnrollProfile"s,
* and is called to obtain the "ProfileID" for
* a signed audit log message.
*
*
* @return id string containing the signed audit log message ProfileID
*/
protected String auditProfileID() {
// if no signed audit object exists, bail
if (mSignedAuditLogger == null) {
return null;
}
String profileID = getId();
if (profileID != null) {
profileID = profileID.trim();
} else {
profileID = ILogger.UNIDENTIFIED;
}
return profileID;
}
/**
* Signed Audit Log Info Certificate Value
*
* This method is called to obtain the certificate from the passed in
* "X509CertImpl" for a signed audit log message.
*
*
* @param request a Request containing an X509CertImpl
* @return cert string containing the certificate
*/
private String auditInfoCertValue(IRequest request) {
// if no signed audit object exists, bail
if (mSignedAuditLogger == null) {
return null;
}
X509CertImpl x509cert = request.getExtDataInCert(
IEnrollProfile.REQUEST_ISSUED_CERT);
if (x509cert == null) {
return ILogger.SIGNED_AUDIT_EMPTY_VALUE;
}
byte rawData[] = null;
try {
rawData = x509cert.getEncoded();
} catch (CertificateEncodingException e) {
return ILogger.SIGNED_AUDIT_EMPTY_VALUE;
}
String cert = null;
// convert "rawData" into "base64Data"
if (rawData != null) {
String base64Data = null;
base64Data = Utils.base64encode(rawData).trim();
StringBuffer sb = new StringBuffer();
// extract all line separators from the "base64Data"
for (int i = 0; i < base64Data.length(); i++) {
if (base64Data.substring(i, i).getBytes() != EOL) {
sb.append(base64Data.substring(i, i));
}
}
cert = sb.toString();
}
if (cert != null) {
cert = cert.trim();
if (cert.equals("")) {
return ILogger.SIGNED_AUDIT_EMPTY_VALUE;
} else {
return cert;
}
} else {
return ILogger.SIGNED_AUDIT_EMPTY_VALUE;
}
}
}