org.gluu.oxtrust.action.CertificateManagementAction クラス

org.gluu.oxtrust.action.CertificateManagementAction の継承関係図

org.gluu.oxtrust.action.CertificateManagementAction 連携図

公開メンバ関数
void	init ()
void	refresh ()
String	add ()
String	cancel ()
String	search ()
List< X509CertificateShortInfoView >	getAsimbaCertificates ()
void	setAsimbaCertificates (List< X509CertificateShortInfoView > asimbaCertificates)
String	getSearchPattern ()
void	setSearchPattern (String searchPattern)
List< X509CertificateShortInfoView >	getTrustStoreCertificates ()
void	setTrustStoreCertificates (List< X509CertificateShortInfoView > trustStoreCertificates)
List< X509CertificateShortInfoView >	getInternalCertificates ()
void	setInternalCertificates (List< X509CertificateShortInfoView > internalCertificates)
boolean	isSearchObsoleteWarning ()
void	setSearchObsoleteWarning (boolean searchObsoleteWarning)

非公開メンバ関数
void	updateTableView ()

非公開変数類
Logger	log
FacesMessages	facesMessages
SvnSyncTimer	svnSyncTimer
AsimbaXMLConfigurationService	asimbaXMLConfigurationService
ApplianceService	applianceService
KeystoreWrapper	asimbaKeystore
List< X509CertificateShortInfoView >	asimbaCertificates
List< X509CertificateShortInfoView >	trustStoreCertificates
List< X509CertificateShortInfoView >	internalCertificates
String	searchPattern = ""
boolean	searchObsoleteWarning = false

静的非公開変数類
static final long	serialVersionUID = -1938167091985945238L
static final String	OPENDJ_CERTIFICATE_FILE = "/etc/certs/opendj.crt"
static final String	HTTPD_CERTIFICATE_FILE = "/etc/certs/httpd.crt"
static final String	SHIB_IDP_CERTIFICATE_FILE = "/etc/certs/shibIDP.crt"

詳解

Action class for security certificate management.

著者

Dmitry Ognyannikov

関数詳解

add()

String org.gluu.oxtrust.action.CertificateManagementAction.add ( )

inline

                        {
        log.info("add");
        // save
        synchronized (svnSyncTimer) {
            //TODO
        }
        refresh();
        return OxTrustConstants.RESULT_SUCCESS;
    }

cancel()

String org.gluu.oxtrust.action.CertificateManagementAction.cancel ( )

inline

                           {
        log.info("cancel CertificateManagement");
        
                facesMessages.add(FacesMessage.SEVERITY_INFO, "Certificates not updated");
        return OxTrustConstants.RESULT_SUCCESS;
    }

getAsimbaCertificates()

List<X509CertificateShortInfoView> org.gluu.oxtrust.action.CertificateManagementAction.getAsimbaCertificates ( )

inline

戻り値

the asimbaCertificates

                                                                      {
        return asimbaCertificates;
    }

getInternalCertificates()

List<X509CertificateShortInfoView> org.gluu.oxtrust.action.CertificateManagementAction.getInternalCertificates ( )

inline

戻り値

the internalCertificates

                                                                        {
        return internalCertificates;
    }

getSearchPattern()

String org.gluu.oxtrust.action.CertificateManagementAction.getSearchPattern ( )

inline

戻り値

the searchPattern

                                     {
        return searchPattern;
    }

getTrustStoreCertificates()

List<X509CertificateShortInfoView> org.gluu.oxtrust.action.CertificateManagementAction.getTrustStoreCertificates ( )

inline

戻り値

the trustStoreCertificates

                                                                          {
        return trustStoreCertificates;
    }

init()

void org.gluu.oxtrust.action.CertificateManagementAction.init ( )

inline

                       {
        log.info("init() CertificateManagement call");
        
        refresh();
    }

isSearchObsoleteWarning()

boolean org.gluu.oxtrust.action.CertificateManagementAction.isSearchObsoleteWarning ( )

inline

戻り値

the searchObsoleteWarning

                                             {
        return searchObsoleteWarning;
    }

refresh()

void org.gluu.oxtrust.action.CertificateManagementAction.refresh ( )

inline

                          {
        log.info("refresh() CertificateManagement call");
        
        try {
            if (asimbaXMLConfigurationService.isReady()) {
                asimbaKeystore = asimbaXMLConfigurationService.getKeystore();

                asimbaCertificates = asimbaKeystore.listCertificatesForView();
            }
        } catch (Exception e) {
            log.error("Load Asimba keystore configuration exception", e); 
        }
        
        updateTableView();
    }

search()

String org.gluu.oxtrust.action.CertificateManagementAction.search ( )

inline

                           {
        log.info("search() CertificateManagement searchPattern:", searchPattern);
        
        //TODO
        
        return OxTrustConstants.RESULT_SUCCESS;
    }

setAsimbaCertificates()

void org.gluu.oxtrust.action.CertificateManagementAction.setAsimbaCertificates ( List< X509CertificateShortInfoView >  asimbaCertificates )

inline

引数

asimbaCertificates

the asimbaCertificates to set

                                                                                             {
        this.asimbaCertificates = asimbaCertificates;
    }

setInternalCertificates()

void org.gluu.oxtrust.action.CertificateManagementAction.setInternalCertificates ( List< X509CertificateShortInfoView >  internalCertificates )

inline

引数

internalCertificates

the internalCertificates to set

                                                                                                 {
        this.internalCertificates = internalCertificates;
    }

setSearchObsoleteWarning()

void org.gluu.oxtrust.action.CertificateManagementAction.setSearchObsoleteWarning ( boolean  searchObsoleteWarning )

inline

引数

searchObsoleteWarning

the searchObsoleteWarning to set

                                                                        {
        this.searchObsoleteWarning = searchObsoleteWarning;
    }

setSearchPattern()

void org.gluu.oxtrust.action.CertificateManagementAction.setSearchPattern ( String  searchPattern )

inline

引数

searchPattern

the searchPattern to set

                                                       {
        this.searchPattern = searchPattern;
    }

setTrustStoreCertificates()

void org.gluu.oxtrust.action.CertificateManagementAction.setTrustStoreCertificates ( List< X509CertificateShortInfoView >  trustStoreCertificates )

inline

引数

trustStoreCertificates

the trustStoreCertificates to set

                                                                                                     {
        this.trustStoreCertificates = trustStoreCertificates;
    }

updateTableView()

void org.gluu.oxtrust.action.CertificateManagementAction.updateTableView ( )

inlineprivate

Load and process certificate lists.

Set highlight for obsolete certificates. Apply search pattern.

                                   {
        try {
            for (X509CertificateShortInfoView cert : asimbaCertificates) {
                // check dates
                cert.updateViewStyle();
            }
        } catch (Exception e) {
            log.error("Load Asimba keystore configuration exception", e); 
        }
        
        try {
            // load trustStoreCertificates
            trustStoreCertificates = new ArrayList<X509CertificateShortInfoView>();

            GluuAppliance appliance = applianceService.getAppliance();

            List<TrustStoreCertificate> trustStoreCertificatesList = appliance.getTrustStoreCertificates();

            if (trustStoreCertificatesList != null) {
                for (TrustStoreCertificate trustStoreCertificate : trustStoreCertificatesList) {
                    try {
                        X509Certificate certs[] = SSLService.loadCertificates(trustStoreCertificate.getCertificate().getBytes());

                        for (X509Certificate cert : certs) {
                            X509CertificateShortInfoView entry = new X509CertificateShortInfoView(trustStoreCertificate.getName(), cert);
                            trustStoreCertificates.add(entry);
                        }
                    } catch (Exception e) { log.error("Certificate load exception", e); }
                }
            }
        } catch (Exception e) {
            log.error("Load trustStoreCertificates configuration exception", e); 
        }
        
        try {
            // load internalCertificates
            internalCertificates = new ArrayList<X509CertificateShortInfoView>();
            try {
                X509Certificate openDJCerts[] = SSLService.loadCertificates(new FileInputStream(OPENDJ_CERTIFICATE_FILE));
                for (X509Certificate openDJCert : openDJCerts)
                    internalCertificates.add(new X509CertificateShortInfoView("OpenDJ SSL", openDJCert));
            } catch (Exception e) { log.error("Certificate load exception", e); }
            try {
                X509Certificate httpdCerts[] = SSLService.loadCertificates(new FileInputStream(HTTPD_CERTIFICATE_FILE));
                for (X509Certificate httpdCert : httpdCerts)
                    internalCertificates.add(new X509CertificateShortInfoView("HTTPD SSL", httpdCert));
            } catch (Exception e) { log.error("Certificate load exception", e); }
            try {
                X509Certificate shibIDPCerts[] = SSLService.loadCertificates(new FileInputStream(SHIB_IDP_CERTIFICATE_FILE));
                for (X509Certificate shibIDPCert : shibIDPCerts)
                    internalCertificates.add(new X509CertificateShortInfoView("Shibboleth IDP SAML Certificate", shibIDPCert));
            } catch (Exception e) { log.error("Certificate load exception", e); }
        } catch (Exception e) {
            log.error("Load internalCertificates configuration exception", e); 
        }
        
        try {
            // check for warning and search pattern
            final String searchPatternLC = this.searchPattern != null ? this.searchPattern.toLowerCase() : null;

            Iterator<X509CertificateShortInfoView> certsIterator = asimbaCertificates.iterator();
            while (certsIterator.hasNext()) {
                X509CertificateShortInfoView cert = certsIterator.next();
                // apply warning flag
                if (searchObsoleteWarning && !cert.isWarning())
                    certsIterator.remove();
                // apply search pattern
                if (searchPatternLC != null && !searchPatternLC.isEmpty() &&
                        cert.getAlias() != null && cert.getIssuer() != null) {
                    if (!cert.getAlias().toLowerCase().contains(searchPatternLC) &&
                            !cert.getIssuer().toLowerCase().contains(searchPatternLC))
                        certsIterator.remove();
                }
            }

            certsIterator = trustStoreCertificates.iterator();
            while (certsIterator.hasNext()) {
                X509CertificateShortInfoView cert = certsIterator.next();
                // apply warning flag
                if (searchObsoleteWarning && !cert.isWarning())
                    certsIterator.remove();
                // apply search pattern
                if (searchPatternLC != null && !searchPatternLC.isEmpty() &&
                        cert.getAlias() != null && cert.getIssuer() != null) {
                    if (!cert.getAlias().toLowerCase().contains(searchPatternLC) &&
                            !cert.getIssuer().toLowerCase().contains(searchPatternLC))
                        certsIterator.remove();
                }
            }

            certsIterator = internalCertificates.iterator();
            while (certsIterator.hasNext()) {
                X509CertificateShortInfoView cert = certsIterator.next();
                // apply warning flag
                if (searchObsoleteWarning && !cert.isWarning())
                    certsIterator.remove();
                // apply search pattern
                if (searchPatternLC != null && !searchPatternLC.isEmpty() &&
                        cert.getAlias() != null && cert.getIssuer() != null) {
                    if (!cert.getAlias().toLowerCase().contains(searchPatternLC) &&
                            !cert.getIssuer().toLowerCase().contains(searchPatternLC))
                        certsIterator.remove();
                }
            }
        } catch (Exception e) {
            log.error("Update certificates status view exception", e); 
        }
    }

メンバ詳解

applianceService

ApplianceService org.gluu.oxtrust.action.CertificateManagementAction.applianceService

private

asimbaCertificates

List<X509CertificateShortInfoView> org.gluu.oxtrust.action.CertificateManagementAction.asimbaCertificates

private

asimbaKeystore

KeystoreWrapper org.gluu.oxtrust.action.CertificateManagementAction.asimbaKeystore

private

asimbaXMLConfigurationService

AsimbaXMLConfigurationService org.gluu.oxtrust.action.CertificateManagementAction.asimbaXMLConfigurationService

private

facesMessages

FacesMessages org.gluu.oxtrust.action.CertificateManagementAction.facesMessages

private

HTTPD_CERTIFICATE_FILE

final String org.gluu.oxtrust.action.CertificateManagementAction.HTTPD_CERTIFICATE_FILE = "/etc/certs/httpd.crt"

staticprivate

internalCertificates

List<X509CertificateShortInfoView> org.gluu.oxtrust.action.CertificateManagementAction.internalCertificates

private

log

Logger org.gluu.oxtrust.action.CertificateManagementAction.log

private

OPENDJ_CERTIFICATE_FILE

final String org.gluu.oxtrust.action.CertificateManagementAction.OPENDJ_CERTIFICATE_FILE = "/etc/certs/opendj.crt"

staticprivate

searchObsoleteWarning

boolean org.gluu.oxtrust.action.CertificateManagementAction.searchObsoleteWarning = false

private

searchPattern

String org.gluu.oxtrust.action.CertificateManagementAction.searchPattern = ""

private

serialVersionUID

final long org.gluu.oxtrust.action.CertificateManagementAction.serialVersionUID = -1938167091985945238L

staticprivate

SHIB_IDP_CERTIFICATE_FILE

final String org.gluu.oxtrust.action.CertificateManagementAction.SHIB_IDP_CERTIFICATE_FILE = "/etc/certs/shibIDP.crt"

staticprivate

svnSyncTimer

SvnSyncTimer org.gluu.oxtrust.action.CertificateManagementAction.svnSyncTimer

private

trustStoreCertificates

List<X509CertificateShortInfoView> org.gluu.oxtrust.action.CertificateManagementAction.trustStoreCertificates

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxTrust/server/src/main/java/org/gluu/oxtrust/action/CertificateManagementAction.java