public class ConfigurationUtils
extends java.lang.Object
Modifier and Type | Field and Description |
---|---|
static java.lang.String |
AUTH_FAILURE |
static java.math.BigInteger |
BIG_ZERO |
static ConfigCertApprovalCallback |
certApprovalCallback |
static java.lang.String |
DBUSER |
static java.lang.String |
FAILURE |
static org.slf4j.Logger |
logger |
static java.lang.Long |
MINUS_ONE |
static java.lang.String |
SUCCESS |
Constructor and Description |
---|
ConfigurationUtils() |
Modifier and Type | Method and Description |
---|---|
static void |
addProfilesToTPSUser(java.lang.String adminID) |
static void |
backupKeys(java.lang.String pwd,
java.lang.String fname) |
static void |
configCert(ConfigurationRequest request,
javax.servlet.http.HttpServletResponse response,
org.apache.velocity.context.Context context,
Cert certObj) |
static void |
createAdmin(java.lang.String uid,
java.lang.String email,
java.lang.String name,
java.lang.String pwd) |
static void |
createAdminCertificate(java.lang.String certRequest,
java.lang.String certRequestType,
java.lang.String subject) |
static void |
createCertRecord(IConfigStore cs,
Cert cert) |
static java.security.KeyPair |
createECCKeyPair(org.mozilla.jss.crypto.CryptoToken token,
java.lang.String curveName,
IConfigStore config,
java.lang.String ct) |
static void |
createPKCS7(org.mozilla.jss.netscape.security.x509.X509CertImpl cert) |
static java.security.KeyPair |
createRSAKeyPair(org.mozilla.jss.crypto.CryptoToken token,
int keysize,
IConfigStore config,
java.lang.String ct) |
static void |
createSecurityDomain() |
static boolean |
deleteDir(java.io.File dir) |
static void |
deleteEntries(netscape.ldap.LDAPSearchResults res,
netscape.ldap.LDAPConnection conn,
java.lang.String[] excludedDNs) |
static void |
deleteEntry(netscape.ldap.LDAPConnection conn,
java.lang.String dn,
java.lang.String[] excludedDNs) |
static void |
deleteExistingCerts() |
static void |
deleteSubtree(netscape.ldap.LDAPConnection conn,
java.lang.String dn) |
static void |
enableUSNPlugin() |
static void |
exportTransportCert(java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String transportCert) |
static void |
generateCertRequest(IConfigStore config,
java.lang.String certTag,
Cert cert) |
static java.lang.String |
get(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) |
static java.lang.String |
getCertChain(java.lang.String host,
int port,
java.lang.String serverPath) |
static void |
getConfigEntriesFromMaster() |
static java.lang.String |
getContentValue(java.lang.String body,
java.lang.String header) |
static java.lang.String |
getDomainXML(java.lang.String hostname,
int https_admin_port,
boolean https) |
static org.mozilla.jss.netscape.security.x509.X509Key |
getECCX509Key(IConfigStore config,
java.lang.String certTag) |
static java.lang.String |
getInstallToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
static java.util.ArrayList<java.lang.String> |
getMasterCertKeyList() |
static java.lang.String |
getNickname(IConfigStore config,
java.lang.String certTag) |
static java.lang.String |
getOldCookie(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
static int |
getPortFromSecurityDomain(java.lang.String domainXML,
java.lang.String host,
int port,
java.lang.String csType,
java.lang.String givenTag,
java.lang.String wantedTag) |
static org.mozilla.jss.netscape.security.x509.X509Key |
getRSAX509Key(IConfigStore config,
java.lang.String certTag) |
static void |
getSecurityDomainPorts(java.lang.String domainXML,
java.lang.String host,
int port) |
static void |
getSharedSecret(java.lang.String tksHost,
int tksPort,
boolean importKey) |
static java.lang.String |
getSubsystemCert() |
static java.lang.String |
getSubsystemCert(java.lang.String host,
int port,
boolean https) |
static int |
getSubsystemCount(java.lang.String hostname,
int https_admin_port,
boolean https,
java.lang.String type) |
static java.lang.String |
getTransportCert(java.net.URI secdomainURI,
java.net.URI kraUri) |
static java.util.Vector<java.lang.String> |
getUrlListFromSecurityDomain(IConfigStore config,
java.lang.String type,
java.lang.String portType) |
static byte[] |
getX509Cert(java.lang.String nickname,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) |
static org.mozilla.jss.crypto.X509Certificate |
getX509CertFromToken(byte[] cert) |
static void |
handleCert(Cert cert) |
static void |
importAndSetCertPermissionsFromHSM() |
static void |
importCert(java.lang.String subsystem,
java.lang.String tag,
java.lang.String tokenname,
java.lang.String nickname,
org.mozilla.jss.netscape.security.x509.X509CertImpl impl) |
static void |
importCertChain(java.lang.String certchain,
java.lang.String tag) |
static void |
importKeyCert(org.mozilla.jss.util.Password password,
java.util.Vector<java.util.Vector<java.lang.Object>> pkeyinfo_collection,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) |
static void |
importLDIFS(java.lang.String param,
netscape.ldap.LDAPConnection conn) |
static void |
importLDIFS(java.lang.String param,
netscape.ldap.LDAPConnection conn,
boolean suppressErrors) |
static boolean |
isAuditSigningCert(java.lang.String name) |
static boolean |
isCASigningCert(java.lang.String name) |
static boolean |
isSDHostDomainMaster(IConfigStore config) |
static boolean |
isValidCloneURI(java.lang.String domainXML,
java.lang.String cloneHost,
int clonePort) |
static byte[] |
loadCertRequest(IConfigStore config,
java.lang.String subsystem,
java.lang.String tag) |
static java.security.KeyPair |
loadKeyPair(java.lang.String nickname,
java.lang.String token) |
static void |
populateDB() |
static void |
populateDBManager() |
static void |
populateVLVIndexes() |
static java.lang.String |
post(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) |
static void |
registerUser(java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String targetType) |
static void |
releaseConnection(netscape.ldap.LDAPConnection conn) |
static void |
removeOldDBUsers(java.lang.String subjectDN) |
static void |
removePreopConfigEntries()
save variables needed for cloning and remove preops
|
static void |
restoreCertsFromP12(java.lang.String p12File,
java.lang.String p12Pass) |
static void |
setSigningAlgorithm(java.lang.String ct,
java.lang.String keyAlgo,
IConfigStore config) |
static void |
setupClientAuthUser() |
static void |
setupDBUser() |
static void |
storeKeyPair(IConfigStore config,
java.lang.String tag,
java.security.KeyPair pair) |
static java.lang.String |
submitAdminCertRequest(java.lang.String ca_hostname,
int ca_port,
java.lang.String profileId,
java.lang.String certRequestType,
java.lang.String certRequest,
java.lang.String subjectDN) |
static void |
updateAuthdbInfo(java.lang.String basedn,
java.lang.String host,
java.lang.String port,
java.lang.String secureConn) |
static void |
updateCloneConfig() |
static void |
updateConfig(IConfigStore config,
Cert cert) |
static boolean |
updateConfigEntries(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
IConfigStore config) |
static void |
updateDomainXML(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
boolean useClientAuth) |
static void |
updateNextRanges() |
static void |
updateNumberRange(java.lang.String hostname,
int eePort,
int adminPort,
boolean https,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
java.lang.String type) |
static void |
updateSecurityDomain() |
static void |
verifySystemCertificates() |
public static final org.slf4j.Logger logger
public static java.lang.String SUCCESS
public static java.lang.String FAILURE
public static java.lang.String AUTH_FAILURE
public static final java.math.BigInteger BIG_ZERO
public static final java.lang.Long MINUS_ONE
public static final java.lang.String DBUSER
public static ConfigCertApprovalCallback certApprovalCallback
public static java.lang.String get(java.lang.String hostname, int port, boolean secure, java.lang.String path, java.lang.String clientnickname, org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) throws java.lang.Exception
java.lang.Exception
public static java.lang.String post(java.lang.String hostname, int port, boolean secure, java.lang.String path, javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content, java.lang.String clientnickname, org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) throws java.lang.Exception
java.lang.Exception
public static java.lang.String getCertChain(java.lang.String host, int port, java.lang.String serverPath) throws java.lang.Exception
java.lang.Exception
public static void importCertChain(java.lang.String certchain, java.lang.String tag) throws java.lang.Exception
java.lang.Exception
public static java.lang.String getInstallToken(java.lang.String sdhost, int sdport, java.lang.String user, java.lang.String passwd) throws java.lang.Exception
java.lang.Exception
public static java.lang.String getOldCookie(java.lang.String sdhost, int sdport, java.lang.String user, java.lang.String passwd) throws java.lang.Exception
java.lang.Exception
public static java.lang.String getContentValue(java.lang.String body, java.lang.String header)
public static java.lang.String getDomainXML(java.lang.String hostname, int https_admin_port, boolean https) throws java.lang.Exception
java.lang.Exception
public static void getSecurityDomainPorts(java.lang.String domainXML, java.lang.String host, int port) throws org.xml.sax.SAXException, java.io.IOException, javax.xml.parsers.ParserConfigurationException
org.xml.sax.SAXException
java.io.IOException
javax.xml.parsers.ParserConfigurationException
public static java.util.Vector<java.lang.String> getUrlListFromSecurityDomain(IConfigStore config, java.lang.String type, java.lang.String portType) throws java.lang.Exception
java.lang.Exception
public static boolean isValidCloneURI(java.lang.String domainXML, java.lang.String cloneHost, int clonePort) throws EPropertyNotFound, EBaseException, org.xml.sax.SAXException, java.io.IOException, javax.xml.parsers.ParserConfigurationException
EPropertyNotFound
EBaseException
org.xml.sax.SAXException
java.io.IOException
javax.xml.parsers.ParserConfigurationException
public static void getConfigEntriesFromMaster() throws java.lang.Exception
java.lang.Exception
public static void updateNumberRange(java.lang.String hostname, int eePort, int adminPort, boolean https, javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content, java.lang.String type) throws java.lang.Exception
java.lang.Exception
public static boolean updateConfigEntries(java.lang.String hostname, int port, boolean https, java.lang.String servlet, javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content, IConfigStore config) throws java.lang.Exception
java.lang.Exception
public static void restoreCertsFromP12(java.lang.String p12File, java.lang.String p12Pass) throws java.lang.Exception
java.lang.Exception
public static void verifySystemCertificates() throws java.lang.Exception
java.lang.Exception
public static void importKeyCert(org.mozilla.jss.util.Password password, java.util.Vector<java.util.Vector<java.lang.Object>> pkeyinfo_collection, java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) throws java.lang.Exception
java.lang.Exception
public static void importAndSetCertPermissionsFromHSM() throws EBaseException, org.mozilla.jss.NotInitializedException, java.io.IOException, java.security.cert.CertificateEncodingException, org.mozilla.jss.NicknameConflictException, org.mozilla.jss.UserCertConflictException, org.mozilla.jss.crypto.NoSuchItemOnTokenException, org.mozilla.jss.crypto.TokenException
EBaseException
org.mozilla.jss.NotInitializedException
java.io.IOException
java.security.cert.CertificateEncodingException
org.mozilla.jss.NicknameConflictException
org.mozilla.jss.UserCertConflictException
org.mozilla.jss.crypto.NoSuchItemOnTokenException
org.mozilla.jss.crypto.TokenException
public static org.mozilla.jss.crypto.X509Certificate getX509CertFromToken(byte[] cert) throws java.io.IOException, java.security.cert.CertificateException, org.mozilla.jss.NotInitializedException
java.io.IOException
java.security.cert.CertificateException
org.mozilla.jss.NotInitializedException
public static boolean isCASigningCert(java.lang.String name) throws EBaseException
EBaseException
public static boolean isAuditSigningCert(java.lang.String name) throws EPropertyNotFound, EBaseException
EPropertyNotFound
EBaseException
public static void deleteExistingCerts() throws org.mozilla.jss.NotInitializedException, EBaseException, org.mozilla.jss.crypto.TokenException
org.mozilla.jss.NotInitializedException
EBaseException
org.mozilla.jss.crypto.TokenException
public static java.util.ArrayList<java.lang.String> getMasterCertKeyList() throws EBaseException
EBaseException
public static byte[] getX509Cert(java.lang.String nickname, java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) throws java.security.cert.CertificateException
java.security.cert.CertificateException
public static void releaseConnection(netscape.ldap.LDAPConnection conn)
public static void enableUSNPlugin() throws java.io.IOException, EBaseException
java.io.IOException
EBaseException
public static void populateDB() throws java.io.IOException, EBaseException
java.io.IOException
EBaseException
public static void importLDIFS(java.lang.String param, netscape.ldap.LDAPConnection conn) throws EPropertyNotFound, java.io.IOException, EBaseException
EPropertyNotFound
java.io.IOException
EBaseException
public static void importLDIFS(java.lang.String param, netscape.ldap.LDAPConnection conn, boolean suppressErrors) throws java.io.IOException, EPropertyNotFound, EBaseException
java.io.IOException
EPropertyNotFound
EBaseException
public static void deleteSubtree(netscape.ldap.LDAPConnection conn, java.lang.String dn) throws EBaseException
EBaseException
public static void deleteEntries(netscape.ldap.LDAPSearchResults res, netscape.ldap.LDAPConnection conn, java.lang.String[] excludedDNs) throws netscape.ldap.LDAPException
netscape.ldap.LDAPException
public static void deleteEntry(netscape.ldap.LDAPConnection conn, java.lang.String dn, java.lang.String[] excludedDNs) throws netscape.ldap.LDAPException
netscape.ldap.LDAPException
public static boolean deleteDir(java.io.File dir)
public static void populateDBManager() throws java.lang.Exception
java.lang.Exception
public static void populateVLVIndexes() throws java.lang.Exception
java.lang.Exception
public static java.security.KeyPair loadKeyPair(java.lang.String nickname, java.lang.String token) throws java.lang.Exception
java.lang.Exception
public static void storeKeyPair(IConfigStore config, java.lang.String tag, java.security.KeyPair pair) throws org.mozilla.jss.crypto.TokenException, EBaseException
org.mozilla.jss.crypto.TokenException
EBaseException
public static java.security.KeyPair createECCKeyPair(org.mozilla.jss.crypto.CryptoToken token, java.lang.String curveName, IConfigStore config, java.lang.String ct) throws java.security.NoSuchAlgorithmException, org.mozilla.jss.NoSuchTokenException, org.mozilla.jss.crypto.TokenException, org.mozilla.jss.NotInitializedException, EPropertyNotFound, EBaseException
java.security.NoSuchAlgorithmException
org.mozilla.jss.NoSuchTokenException
org.mozilla.jss.crypto.TokenException
org.mozilla.jss.NotInitializedException
EPropertyNotFound
EBaseException
public static java.security.KeyPair createRSAKeyPair(org.mozilla.jss.crypto.CryptoToken token, int keysize, IConfigStore config, java.lang.String ct) throws java.lang.Exception
java.lang.Exception
public static void setSigningAlgorithm(java.lang.String ct, java.lang.String keyAlgo, IConfigStore config) throws EPropertyNotFound, EBaseException
EPropertyNotFound
EBaseException
public static int getSubsystemCount(java.lang.String hostname, int https_admin_port, boolean https, java.lang.String type) throws java.lang.Exception
java.lang.Exception
public static void configCert(ConfigurationRequest request, javax.servlet.http.HttpServletResponse response, org.apache.velocity.context.Context context, Cert certObj) throws java.lang.Exception
java.lang.Exception
public static void updateConfig(IConfigStore config, Cert cert) throws EBaseException, java.io.IOException
EBaseException
java.io.IOException
public static java.lang.String getNickname(IConfigStore config, java.lang.String certTag) throws EBaseException
EBaseException
public static int getPortFromSecurityDomain(java.lang.String domainXML, java.lang.String host, int port, java.lang.String csType, java.lang.String givenTag, java.lang.String wantedTag) throws org.xml.sax.SAXException, java.io.IOException, javax.xml.parsers.ParserConfigurationException
org.xml.sax.SAXException
java.io.IOException
javax.xml.parsers.ParserConfigurationException
public static void updateCloneConfig() throws EBaseException, java.io.IOException
EBaseException
java.io.IOException
public static byte[] loadCertRequest(IConfigStore config, java.lang.String subsystem, java.lang.String tag) throws java.lang.Exception
java.lang.Exception
public static void generateCertRequest(IConfigStore config, java.lang.String certTag, Cert cert) throws java.lang.Exception
java.lang.Exception
public static org.mozilla.jss.netscape.security.x509.X509Key getECCX509Key(IConfigStore config, java.lang.String certTag) throws EPropertyNotFound, EBaseException, java.security.InvalidKeyException
EPropertyNotFound
EBaseException
java.security.InvalidKeyException
public static org.mozilla.jss.netscape.security.x509.X509Key getRSAX509Key(IConfigStore config, java.lang.String certTag) throws EPropertyNotFound, EBaseException, java.security.InvalidKeyException
EPropertyNotFound
EBaseException
java.security.InvalidKeyException
public static void createCertRecord(IConfigStore cs, Cert cert) throws java.lang.Exception
java.lang.Exception
public static void handleCert(Cert cert) throws java.lang.Exception
java.lang.Exception
public static void importCert(java.lang.String subsystem, java.lang.String tag, java.lang.String tokenname, java.lang.String nickname, org.mozilla.jss.netscape.security.x509.X509CertImpl impl) throws java.lang.Exception
java.lang.Exception
public static void backupKeys(java.lang.String pwd, java.lang.String fname) throws java.lang.Exception
java.lang.Exception
public static void createAdminCertificate(java.lang.String certRequest, java.lang.String certRequestType, java.lang.String subject) throws java.lang.Exception
java.lang.Exception
public static void createPKCS7(org.mozilla.jss.netscape.security.x509.X509CertImpl cert) throws java.io.IOException
java.io.IOException
public static void createAdmin(java.lang.String uid, java.lang.String email, java.lang.String name, java.lang.String pwd) throws java.io.IOException, EBaseException, netscape.ldap.LDAPException
java.io.IOException
EBaseException
netscape.ldap.LDAPException
public static java.lang.String submitAdminCertRequest(java.lang.String ca_hostname, int ca_port, java.lang.String profileId, java.lang.String certRequestType, java.lang.String certRequest, java.lang.String subjectDN) throws java.lang.Exception
java.lang.Exception
public static void createSecurityDomain() throws EBaseException, netscape.ldap.LDAPException, java.lang.NumberFormatException, java.io.IOException, org.xml.sax.SAXException, javax.xml.parsers.ParserConfigurationException
EBaseException
netscape.ldap.LDAPException
java.lang.NumberFormatException
java.io.IOException
org.xml.sax.SAXException
javax.xml.parsers.ParserConfigurationException
public static void updateSecurityDomain() throws java.lang.Exception
java.lang.Exception
public static boolean isSDHostDomainMaster(IConfigStore config) throws java.lang.Exception
java.lang.Exception
public static void updateDomainXML(java.lang.String hostname, int port, boolean https, java.lang.String servlet, javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content, boolean useClientAuth) throws java.lang.Exception
java.lang.Exception
public static void setupClientAuthUser() throws java.lang.Exception
java.lang.Exception
public static java.lang.String getSubsystemCert(java.lang.String host, int port, boolean https) throws java.lang.Exception
java.lang.Exception
public static java.lang.String getTransportCert(java.net.URI secdomainURI, java.net.URI kraUri) throws java.lang.Exception
java.lang.Exception
public static void getSharedSecret(java.lang.String tksHost, int tksPort, boolean importKey) throws EPropertyNotFound, EBaseException, java.net.URISyntaxException, java.security.InvalidKeyException, java.security.NoSuchAlgorithmException, java.security.InvalidAlgorithmParameterException, org.mozilla.jss.NotInitializedException, org.mozilla.jss.crypto.TokenException, org.mozilla.jss.crypto.ObjectNotFoundException, java.io.IOException
EPropertyNotFound
EBaseException
java.net.URISyntaxException
java.security.InvalidKeyException
java.security.NoSuchAlgorithmException
java.security.InvalidAlgorithmParameterException
org.mozilla.jss.NotInitializedException
org.mozilla.jss.crypto.TokenException
org.mozilla.jss.crypto.ObjectNotFoundException
java.io.IOException
public static void setupDBUser() throws java.security.cert.CertificateException, netscape.ldap.LDAPException, EBaseException, org.mozilla.jss.NotInitializedException, org.mozilla.jss.crypto.ObjectNotFoundException, org.mozilla.jss.crypto.TokenException, java.io.IOException
java.security.cert.CertificateException
netscape.ldap.LDAPException
EBaseException
org.mozilla.jss.NotInitializedException
org.mozilla.jss.crypto.ObjectNotFoundException
org.mozilla.jss.crypto.TokenException
java.io.IOException
public static void addProfilesToTPSUser(java.lang.String adminID) throws EUsrGrpException, netscape.ldap.LDAPException
EUsrGrpException
netscape.ldap.LDAPException
public static void registerUser(java.net.URI secdomainURI, java.net.URI targetURI, java.lang.String targetType) throws java.lang.Exception
java.lang.Exception
public static void exportTransportCert(java.net.URI secdomainURI, java.net.URI targetURI, java.lang.String transportCert) throws java.lang.Exception
java.lang.Exception
public static void removeOldDBUsers(java.lang.String subjectDN) throws EBaseException, netscape.ldap.LDAPException
EBaseException
netscape.ldap.LDAPException
public static java.lang.String getSubsystemCert() throws EBaseException, org.mozilla.jss.NotInitializedException, org.mozilla.jss.crypto.ObjectNotFoundException, org.mozilla.jss.crypto.TokenException, java.security.cert.CertificateEncodingException, java.io.IOException
EBaseException
org.mozilla.jss.NotInitializedException
org.mozilla.jss.crypto.ObjectNotFoundException
org.mozilla.jss.crypto.TokenException
java.security.cert.CertificateEncodingException
java.io.IOException
public static void updateAuthdbInfo(java.lang.String basedn, java.lang.String host, java.lang.String port, java.lang.String secureConn)
public static void updateNextRanges() throws EBaseException, netscape.ldap.LDAPException
EBaseException
netscape.ldap.LDAPException
public static void removePreopConfigEntries() throws EBaseException
EBaseException