1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
// --- BEGIN COPYRIGHT BLOCK ---
// This program is free software; you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation; version 2 of the License.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License along
// with this program; if not, write to the Free Software Foundation, Inc.,
// 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
//
// (C) 2012 Red Hat, Inc.
// All rights reserved.
// --- END COPYRIGHT BLOCK ---
package com.netscape.cmstools.key;
import com.netscape.certsrv.cert.CertData;
import com.netscape.certsrv.key.KeyClient;
import com.netscape.certsrv.key.KeyInfo;
import com.netscape.certsrv.key.KeyRequestInfo;
import com.netscape.certsrv.system.SystemCertClient;
import com.netscape.certsrv.util.NSSCryptoProvider;
import com.netscape.cmstools.cli.CLI;
import com.netscape.cmstools.cli.MainCLI;
import com.netscape.cmsutil.util.Utils;
/**
* @author Endi S. Dewata
*/
public class KeyCLI extends CLI {
public KeyClient keyClient;
public SystemCertClient systemCertClient;
public KeyCLI(CLI parent) {
super("key", "Key management commands", parent);
addModule(new KeyTemplateFindCLI(this));
addModule(new KeyTemplateShowCLI(this));
addModule(new KeyRequestFindCLI(this));
addModule(new KeyRequestShowCLI(this));
addModule(new KeyRequestReviewCLI(this));
addModule(new KeyFindCLI(this));
addModule(new KeyShowCLI(this));
addModule(new KeyModifyCLI(this));
addModule(new KeyGenerateCLI(this));
addModule(new KeyArchiveCLI(this));
addModule(new KeyRetrieveCLI(this));
addModule(new KeyRecoverCLI(this));
}
public String getFullName() {
if (parent instanceof MainCLI) {
// do not include MainCLI's name
return name;
} else {
return parent.getFullName() + "-" + name;
}
}
@Override
public String getManPage() {
return "pki-key";
}
public void execute(String[] args) throws Exception {
client = parent.getClient();
// determine the subsystem
String subsystem = client.getSubsystem();
if (subsystem == null)
subsystem = "kra";
// create new key client
keyClient = new KeyClient(client, subsystem);
// if security database password is specified,
// prepare key client for archival/retrieval
if (client.getConfig().getCertPassword() != null) {
// create crypto provider for key client
keyClient.setCrypto(new NSSCryptoProvider(client.getConfig()));
// download transport cert
systemCertClient = new SystemCertClient(client, subsystem);
String transportCert = systemCertClient.getTransportCert().getEncoded();
transportCert = transportCert.substring(CertData.HEADER.length(),
transportCert.indexOf(CertData.FOOTER));
// set transport cert for key client
keyClient.setTransportCert(transportCert);
}
super.execute(args);
}
public static void printKeyInfo(KeyInfo info) {
System.out.println(" Key ID: "+info.getKeyId().toHexString());
if (info.getClientKeyID() != null) System.out.println(" Client Key ID: "+info.getClientKeyID());
if (info.getStatus() != null) System.out.println(" Status: "+info.getStatus());
if (info.getAlgorithm() != null) System.out.println(" Algorithm: "+info.getAlgorithm());
if (info.getSize() != null) System.out.println(" Size: "+info.getSize());
if (info.getOwnerName() != null) System.out.println(" Owner: "+info.getOwnerName());
if (info.getRealm() != null) System.out.println(" Realm: " + info.getRealm());
if (info.getPublicKey() != null) {
// Print out the Base64 encoded public key in the form of a blob,
// where the max line length is 64.
System.out.println(" Public Key: \n");
String publicKey = Utils.base64encode(info.getPublicKey());
System.out.println(publicKey);
System.out.println();
}
}
public static void printKeyRequestInfo(KeyRequestInfo info) {
System.out.println(" Request ID: "+info.getRequestId().toHexString());
if (info.getKeyId() != null) System.out.println(" Key ID: "+info.getKeyId().toHexString());
if (info.getRequestType() != null) System.out.println(" Type: "+info.getRequestType());
if (info.getRequestStatus() != null) System.out.println(" Status: "+info.getRequestStatus());
if (info.getRealm() != null) System.out.println(" Realm: "+ info.getRealm());
}
}
|
