* * @author lhsiao * @version $Revision$, $Date$ */ public class OCSPAuthority implements IOCSPAuthority, IOCSPService, ISubsystem, IAuthority { private long mServedRequests = 0; private long mServedTime = 0; public final static OBJECT_IDENTIFIER OCSP_NONCE = new OBJECT_IDENTIFIER("1.3.6.1.5.5.7.48.1.2"); private Hashtable mStores = new Hashtable(); private String mId = "ocsp"; private IConfigStore mConfig = null; private SigningUnit mSigningUnit; private CertificateChain mCertChain = null; private X509CertImpl mCert = null; private String[] mSigningAlgorithms = null; private X500Name mName = null; private String mNickname = null; private String[] mOCSPSigningAlgorithms = null; private IOCSPStore mDefStore = null; public long mNumOCSPRequest = 0; public long mTotalTime = 0; public long mTotalData = 0; public long mSignTime = 0; public long mLookupTime = 0; protected ILogger mLogger = CMS.getLogger(); /** * Retrieves the name of this subsystem. */ public String getId() { return mId; } /** * Sets specific to this subsystem. */ public void setId(String id) throws EBaseException { mId = id; } /** * Initializes this subsystem with the given configuration * store. *
*
* @param owner owner of this subsystem
* @param config configuration store
* @exception EBaseException failed to initialize
*/
public void init(ISubsystem owner, IConfigStore config)
throws EBaseException {
try {
mConfig = config;
initSigUnit();
// create default OCSP Store
try {
String defStoreId = mConfig.getString(PROP_DEF_STORE_ID, null);
if (defStoreId == null) {
throw new EBaseException("default id not found");
}
IConfigStore storeConfig = mConfig.getSubStore(PROP_STORE);
Enumeration
*/
public void shutdown() {
}
/**
* Returns the root configuration storage of this system.
*
*
* @return configuration store of this subsystem
*/
public IConfigStore getConfigStore() {
return mConfig;
}
public String getDefaultAlgorithm() {
return mSigningUnit.getDefaultAlgorithm();
}
/**
* logs a message in the CA area.
*
* @param level the debug level.
* @param msg the message to debug.
*/
public void log(int event, int level, String msg) {
mLogger.log(event, ILogger.S_OCSP,
level, msg);
}
public void log(int level, String msg) {
mLogger.log(ILogger.EV_SYSTEM, ILogger.S_OCSP,
level, msg);
}
public void setDefaultAlgorithm(String algorithm)
throws EBaseException {
mSigningUnit.setDefaultAlgorithm(algorithm);
}
/**
* Signs the Response Data.
*/
public BasicOCSPResponse sign(ResponseData rd)
throws EBaseException {
try {
DerOutputStream out = new DerOutputStream();
DerOutputStream tmp = new DerOutputStream();
String algname = mSigningUnit.getDefaultAlgorithm();
byte rd_data[] = ASN1Util.encode(rd);
if (rd_data != null) {
mTotalData += rd_data.length;
}
rd.encode(tmp);
AlgorithmId.get(algname).encode(tmp);
CMS.debug("adding signature");
byte[] signature = mSigningUnit.sign(rd_data, algname);
tmp.putBitString(signature);
// XXX - optional, put the certificate chains in also
DerOutputStream tmpChain = new DerOutputStream();
DerOutputStream tmp1 = new DerOutputStream();
DerOutputStream outChain = new DerOutputStream();
java.security.cert.X509Certificate chains[] =
mCertChain.getChain();
for (int i = 0; i < chains.length; i++) {
tmpChain.putDerValue(new DerValue(chains[i].getEncoded()));
}
tmp1.write(DerValue.tag_Sequence, tmpChain);
tmp.write(DerValue.createTag(DerValue.TAG_CONTEXT, true, (byte) 0),
tmp1);
out.write(DerValue.tag_Sequence, tmp);
BasicOCSPResponse response = new BasicOCSPResponse(out.toByteArray());
return response;
} catch (Exception e) {
e.printStackTrace();
// error e
log(ILogger.LL_FAILURE, CMS.getLogMessage("CMSCORE_OCSP_SIGN_RESPONSE", e.toString()));
return null;
}
}
/**
* Returns default signing unit used by this CA
*
*
* @return request identifier
*/
public ISigningUnit getSigningUnit() {
return mSigningUnit;
}
/**
* Retrieves the request queue for the Authority.
*
*
* @return the request queue.
*/
public IRequestQueue getRequestQueue() {
return null;
}
/**
* Registers request completed class.
*/
public void registerRequestListener(IRequestListener listener) {
}
/**
* Registers pending request class.
*/
public void registerPendingListener(IRequestListener listener) {
}
/**
* nickname of signing (id) cert
*/
public String getNickname() {
return mNickname;
}
public String getNewNickName() throws EBaseException {
return mConfig.getString(PROP_NEW_NICKNAME, "");
}
public void setNewNickName(String name) {
mConfig.putString(PROP_NEW_NICKNAME, name);
}
public void setNickname(String str) {
mConfig.putString(PROP_NICKNAME, str);
}
/**
* return official product name.
*/
public String getOfficialName() {
return "ocsp";
}
/**
* Utility functions for processing OCSP request.
*/
/**
* public OCSPResponse processOCSPRequest(OCSPRequest req, OCSPReqProcessor p)
* throws EBaseException
* {
* try {
* log(ILogger.LL_INFO, "start OCSP request");
* TBSRequest tbsReq = request.getTBSRequest();
*
* Vector singleResponses = new Vector();
* for (int i = 0; i < tbsReq.getRequestCount(); i++)
* {
* com.netscape.certsrv.ocsp.asn1.Request req =
* tbsReq.getRequestAt(i);
* CertID cid = req.getCertID();
* SingleResponse sr = p.process(cid);
* singleResponses.addElement(sr);
* }
*
*
* SingleResponse res[] = new SingleResponse[singleResponses.size()];
* singleResponses.copyInto(res);
*
* X500Name name = getName();
* Name.Template nameTemplate = new Name.Template();
* NameID rid = new NameID((Name)nameTemplate.decode(
* new ByteArrayInputStream(name.getEncoded())));
* ResponseData rd = new ResponseData(rid, new GeneralizedTime(
* CMS.getCurrentDate()), res);
*
* BasicOCSPResponse basicRes = sign(rd);
*
* OCSPResponse response = new OCSPResponse(
* OCSPResponseStatus.SUCCESSFUL,
* new ResponseBytes(ResponseBytes.OCSP_BASIC,
* new OCTET_STRING(ASN1Util.encode(basicRes))));
*
* log(ILogger.LL_INFO, "done OCSP request");
* return response;
* } catch (Exception e) {
* log(ILogger.LL_FAILURE, "request processing failure " + e);
* return null;
* }
* }
**/
/**
* Returns the in-memory count of the processed OCSP requests.
*
* @return number of processed OCSP requests in memory
*/
public long getNumOCSPRequest() {
return mNumOCSPRequest;
}
/**
* Returns the in-memory time (in mini-second) of
* the processed time for OCSP requests.
*
* @return processed times for OCSP requests
*/
public long getOCSPRequestTotalTime() {
return mTotalTime;
}
/**
* Returns the in-memory time (in mini-second) of
* the signing time for OCSP requests.
*
* @return processed times for OCSP requests
*/
public long getOCSPTotalSignTime() {
return mSignTime;
}
public long getOCSPTotalLookupTime() {
return mLookupTime;
}
/**
* Returns the total data signed
* for OCSP requests.
*
* @return processed times for OCSP requests
*/
public long getOCSPTotalData() {
return mTotalData;
}
public void incTotalTime(long inc) {
mTotalTime += inc;
}
public void incSignTime(long inc) {
mSignTime += inc;
}
public void incLookupTime(long inc) {
mLookupTime += inc;
}
public void incNumOCSPRequest(long inc) {
mNumOCSPRequest += inc;
}
}