Certificate management for services.

This is an initial implementation of certificate management for
services. It addresses the mechanism required to view and update
certificates. The complete UI implementation will be addressed in
subsequent patches.

On the server side, the service.py has been modified to define
usercertificate in the service object's takes_params. This is
needed to generate the proper JSON metadata which is needed by
the UI. It also has been modified to accept null certificate for
deletion.

On the client side, the service details page has been modified to
display the base64-encoded certificate in a text area. When the
page is saved, the action handler will store the base64-encoded
certificate in the proper JSON structure. Also the service name
and service hostname are now displayed in separate fields.

The details configuration has been modified to support displaying
and updating certificates. The structure is changed to use maps
to define sections and fields. A section contains name, label,
and an array of fields. A field contains name, label, setup
function, load function, and save function. This is used to
implement custom interface and behavior for certificates.

All other entities, test cases, and test data have been updated
accordingly. Some functions and variables have been renamed to
improve clarity and consistency.

1 files changed, 69 insertions, 6 deletions

diff --git a/install/static/service.js b/install/static/service.js
index 43ef968a..0afcb468 100644
--- a/install/static/service.js
+++ b/install/static/service.js
@@ -29,18 +29,21 @@ ipa_entity_set_add_definition('service', [
     'dialog-add-service', 'Add New Service', [
         ['krbprincipalname', 'Principal', service_add_krbprincipalname],
         ['service', 'Service', null],
-        ['host', 'Host Name', null],
+        ['host', 'Host Name', null]
     ]
 ]);
 
 ipa_entity_set_details_definition('service', [
-    ['identity', 'Service Details', [
-        ['krbprincipalname', 'Principal', null],
-    ]]
+    {name:'identity', label:'Service Details', fields:[
+        {name:'krbprincipalname', label:'Principal', setup:service_krbprincipalname_setup, load:service_krbprincipalname_load},
+        {name:'service', label:'Service', load:service_service_load},
+        {name:'host', label:'Host Name', load:service_host_load},
+        {name:'usercertificate', label:'Certificate', load:service_usercertificate_load, save:service_usercertificate_save}
+    ]}
 ]);
 
-function service_add_krbprincipalname(add_dialog, flag) {
-    if (flag == IPA_ADD_UPDATE) {
+function service_add_krbprincipalname(add_dialog, mode) {
+    if (mode == IPA_ADD_UPDATE) {
         var service = add_dialog.find('input[name=service]').val();
         var host = add_dialog.find('input[name=host]').val();
         return service+'/'+host;
@@ -51,3 +54,63 @@ function service_add_krbprincipalname(add_dialog, flag) {
 ipa_entity_set_association_definition('service', {
     'host': { method: 'add_host' }
 });
+
+function service_krbprincipalname_setup(container, dl, section) {
+    // skip krbprincipalname
+}
+
+function service_krbprincipalname_load(dt, result) {
+    // skip krbprincipalname
+}
+
+function service_service_load(dt, result) {
+    var krbprincipalname = result['krbprincipalname'][0];
+    var service = krbprincipalname.replace(/\/.*$/, '');
+    var dd = ipa_create_first_dd(this.name, service);
+    dt.after(dd);
+}
+
+function service_host_load(dt, result) {
+    var krbprincipalname = result['krbprincipalname'][0];
+    var host = krbprincipalname.replace(/^.*\//, '');
+    var dd = ipa_create_first_dd(this.name, host);
+    dt.after(dd);
+}
+
+function service_usercertificate_load(dt, result) {
+    var textarea = $("<textarea/>", {
+        title: 'usercertificate',
+        style: 'width: 300px; height: 200px;'
+    });
+
+    var dd = ipa_create_first_dd(this.name, textarea);
+    dt.after(dd);
+
+    var usercertificate = result['usercertificate'];
+    if (!usercertificate) return;
+
+    var value = usercertificate[0].__base64__;
+    textarea.val(value);
+}
+
+function service_usercertificate_save(container) {
+    var field = this;
+    var values = [];
+
+    var dd = $('dd[title='+field.name+']', container);
+    dd.each(function () {
+        var textarea = $('textarea', dd);
+        if (!textarea.length) return;
+
+        var value = $.trim(textarea.val());
+        if (value) {
+            value = {'__base64__': value};
+        } else {
+            value = '';
+        }
+
+        values.push(value);
+    });
+
+    return values;
+}