public class Configurator
extends java.lang.Object
| Modifier and Type | Field and Description |
|---|---|
static java.lang.String |
AUTH_FAILURE |
static java.math.BigInteger |
BIG_ZERO |
static ConfigCertApprovalCallback |
certApprovalCallback |
protected com.netscape.cmscore.apps.EngineConfig |
cs |
static java.lang.String |
DBUSER |
static java.lang.String |
ECC_INTERNAL_ADMIN_CERT_PROFILE |
static java.lang.String |
ECC_INTERNAL_SERVER_CERT_PROFILE |
static java.lang.String |
ECC_INTERNAL_SUBSYSTEM_CERT_PROFILE |
protected com.netscape.cmscore.apps.CMSEngine |
engine |
static java.lang.String |
FAILURE |
static org.slf4j.Logger |
logger |
static java.lang.Long |
MINUS_ONE |
static java.lang.String |
RSA_INTERNAL_ADMIN_CERT_PROFILE |
static java.lang.String |
RSA_INTERNAL_SERVER_CERT_PROFILE |
static java.lang.String |
RSA_INTERNAL_SUBSYSTEM_CERT_PROFILE |
protected com.netscape.cmscore.apps.ServerXml |
serverXml |
static java.lang.String |
SUCCESS |
| Constructor and Description |
|---|
Configurator(com.netscape.cmscore.apps.CMSEngine engine) |
| Modifier and Type | Method and Description |
|---|---|
void |
configCert(CertificateSetupRequest request,
java.security.KeyPair keyPair,
Cert certObj) |
void |
configureCACertChain(ConfigurationRequest request) |
void |
configureSecurityDomain(ConfigurationRequest request) |
org.mozilla.jss.netscape.security.x509.X509CertImpl |
createAdminCertificate(AdminSetupRequest request) |
void |
createAdminCertificate(java.lang.String certRequest,
java.lang.String certRequestType,
java.lang.String subject) |
void |
createAdminUser(AdminSetupRequest request) |
void |
createCertRecord(Cert cert) |
java.security.KeyPair |
createECCKeyPair(org.mozilla.jss.crypto.CryptoToken token,
java.lang.String curveName,
java.lang.String ct) |
org.mozilla.jss.netscape.security.pkcs.PKCS7 |
createPKCS7(org.mozilla.jss.netscape.security.x509.X509CertImpl cert) |
java.security.KeyPair |
createRSAKeyPair(org.mozilla.jss.crypto.CryptoToken token,
int keysize,
java.lang.String ct) |
void |
createSecurityDomain() |
boolean |
deleteDir(java.io.File dir) |
void |
deleteExistingCerts() |
void |
finalizeConfiguration(FinalizeConfigRequest request)
save variables needed for cloning and remove preops
|
void |
generateCertRequest(java.lang.String certTag,
java.security.KeyPair keyPair,
Cert cert) |
static java.lang.String |
get(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) |
byte[] |
getCertChain(java.lang.String host,
int port) |
void |
getConfigEntriesFromMaster(java.lang.String sessionID,
SecurityDomainHost masterHost) |
java.lang.String |
getContentValue(java.lang.String body,
java.lang.String header) |
void |
getDatabaseGroups(java.util.Collection<java.lang.String> groups) |
SecurityDomainHost |
getHostInfo(DomainInfo domainInfo,
java.lang.String csType,
java.lang.String hostname,
int securePort) |
java.lang.String |
getInstallToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
java.util.ArrayList<java.lang.String> |
getMasterCertKeyList() |
java.lang.String |
getNickname(java.lang.String certTag) |
java.lang.String |
getOldCookie(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
java.lang.String |
getSubsystemCert() |
java.lang.String |
getSubsystemCert(java.lang.String host,
int port,
boolean https) |
java.lang.String |
getSystemCertProfileID(java.lang.String keyType,
java.lang.String tag,
java.lang.String defaultName) |
byte[] |
getX509Cert(java.lang.String nickname,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) |
org.mozilla.jss.crypto.X509Certificate |
getX509CertFromToken(byte[] cert) |
void |
handleCert(Cert cert) |
void |
importAndSetCertPermissionsFromHSM() |
void |
importCert(java.lang.String subsystem,
java.lang.String tag,
java.lang.String tokenname,
java.lang.String nickname,
org.mozilla.jss.netscape.security.x509.X509CertImpl impl) |
void |
importCertChain(byte[] certchain,
java.lang.String tag) |
void |
importKeyCert(org.mozilla.jss.util.Password password,
java.util.Vector<java.util.Vector<java.lang.Object>> pkeyinfo_collection,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) |
void |
importLDIFS(LDAPConfigurator ldapConfigurator,
java.lang.String param) |
void |
importLDIFS(LDAPConfigurator ldapConfigurator,
java.lang.String param,
boolean ignoreErrors) |
boolean |
isAuditSigningCert(java.lang.String name) |
boolean |
isCASigningCert(java.lang.String name) |
boolean |
isSDHostDomainMaster(DomainInfo domainInfo) |
byte[] |
loadCertRequest(java.lang.String subsystem,
java.lang.String tag) |
java.security.KeyPair |
loadKeyPair(java.lang.String nickname,
java.lang.String token) |
static java.lang.String |
post(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) |
void |
registerUser(FinalizeConfigRequest request,
java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String targetType) |
void |
reinitSubsystems() |
void |
releaseConnection(netscape.ldap.LDAPConnection conn) |
void |
removeOldDBUsers(java.lang.String subjectDN) |
void |
restoreCertsFromP12(java.lang.String p12File,
java.lang.String p12Pass) |
void |
setConfigStore(com.netscape.cmscore.apps.EngineConfig cs) |
void |
setServerXml(com.netscape.cmscore.apps.ServerXml serverXml) |
void |
setSigningAlgorithm(java.lang.String ct,
java.lang.String keyAlgo) |
void |
setSubsystemEnabled(java.lang.String id,
boolean enabled)
Set whether the given subsystem is enabled.
|
void |
setupAdminUser(AdminSetupRequest request,
org.mozilla.jss.netscape.security.x509.X509CertImpl cert) |
void |
setupClientAuthUser() |
void |
setupClone(CloneSetupRequest request) |
void |
setupDatabase(DatabaseSetupRequest request) |
void |
setupDatabaseUser() |
void |
setupNumberRanges(java.lang.String sessionID,
SecurityDomainHost masterHost) |
void |
setupReplication(CloneSetupRequest request) |
void |
setupReplicationAgreement(LDAPConfigurator masterConfigurator,
LDAPConfigurator replicaConfigurator,
java.lang.String masterReplicationPassword,
java.lang.String replicaReplicationPassword,
int masterReplicationPort,
int replicaReplicationPort,
java.lang.String replicationSecurity) |
void |
setupSecurityDomain(SecurityDomainSetupRequest request) |
void |
storeKeyPair(java.lang.String tag,
java.security.KeyPair pair) |
org.mozilla.jss.netscape.security.x509.X509CertImpl |
submitAdminCertRequest(AdminSetupRequest request,
java.lang.String ca_hostname,
int ca_port,
java.lang.String profileId,
java.lang.String subjectDN) |
void |
updateAdminUserCert(AdminSetupRequest request,
org.mozilla.jss.netscape.security.x509.X509CertImpl adminCert) |
void |
updateConfig(Cert cert) |
void |
updateConfigEntries(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content) |
void |
updateDomainXML(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
boolean useClientAuth) |
void |
updateNextRanges() |
void |
updateNumberRange(java.lang.String hostname,
int eePort,
int adminPort,
boolean https,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
java.lang.String type) |
void |
updateSecurityDomain(SecurityDomainSetupRequest request) |
void |
verifySystemCertificates() |
public static final org.slf4j.Logger logger
public static final java.lang.String ECC_INTERNAL_SERVER_CERT_PROFILE
public static final java.lang.String RSA_INTERNAL_SERVER_CERT_PROFILE
public static final java.lang.String ECC_INTERNAL_SUBSYSTEM_CERT_PROFILE
public static final java.lang.String RSA_INTERNAL_SUBSYSTEM_CERT_PROFILE
public static final java.lang.String ECC_INTERNAL_ADMIN_CERT_PROFILE
public static final java.lang.String RSA_INTERNAL_ADMIN_CERT_PROFILE
public static java.lang.String SUCCESS
public static java.lang.String FAILURE
public static java.lang.String AUTH_FAILURE
public static final java.math.BigInteger BIG_ZERO
public static final java.lang.Long MINUS_ONE
public static final java.lang.String DBUSER
public static ConfigCertApprovalCallback certApprovalCallback
protected com.netscape.cmscore.apps.CMSEngine engine
protected com.netscape.cmscore.apps.EngineConfig cs
protected com.netscape.cmscore.apps.ServerXml serverXml
public static java.lang.String get(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback)
throws java.lang.Exception
java.lang.Exceptionpublic static java.lang.String post(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback)
throws java.lang.Exception
java.lang.Exceptionpublic void setConfigStore(com.netscape.cmscore.apps.EngineConfig cs)
public void setServerXml(com.netscape.cmscore.apps.ServerXml serverXml)
throws java.lang.Exception
java.lang.Exceptionpublic void configureSecurityDomain(ConfigurationRequest request) throws java.lang.Exception
java.lang.Exceptionpublic void configureCACertChain(ConfigurationRequest request) throws java.lang.Exception
java.lang.Exceptionpublic byte[] getCertChain(java.lang.String host,
int port)
throws java.lang.Exception
java.lang.Exceptionpublic void importCertChain(byte[] certchain,
java.lang.String tag)
throws java.lang.Exception
java.lang.Exceptionpublic java.lang.String getInstallToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd)
throws java.lang.Exception
java.lang.Exceptionpublic java.lang.String getOldCookie(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd)
throws java.lang.Exception
java.lang.Exceptionpublic java.lang.String getContentValue(java.lang.String body,
java.lang.String header)
public SecurityDomainHost getHostInfo(DomainInfo domainInfo, java.lang.String csType, java.lang.String hostname, int securePort) throws java.lang.Exception
java.lang.Exceptionpublic void setupClone(CloneSetupRequest request) throws java.lang.Exception
java.lang.Exceptionpublic void setupNumberRanges(java.lang.String sessionID,
SecurityDomainHost masterHost)
throws java.lang.Exception
java.lang.Exceptionpublic void updateNumberRange(java.lang.String hostname,
int eePort,
int adminPort,
boolean https,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
java.lang.String type)
throws java.lang.Exception
java.lang.Exceptionpublic void getConfigEntriesFromMaster(java.lang.String sessionID,
SecurityDomainHost masterHost)
throws java.lang.Exception
java.lang.Exceptionpublic void updateConfigEntries(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content)
throws java.lang.Exception
java.lang.Exceptionpublic void restoreCertsFromP12(java.lang.String p12File,
java.lang.String p12Pass)
throws java.lang.Exception
java.lang.Exceptionpublic void verifySystemCertificates()
throws java.lang.Exception
java.lang.Exceptionpublic void importKeyCert(org.mozilla.jss.util.Password password,
java.util.Vector<java.util.Vector<java.lang.Object>> pkeyinfo_collection,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection)
throws java.lang.Exception
java.lang.Exceptionpublic void importAndSetCertPermissionsFromHSM()
throws EBaseException,
org.mozilla.jss.NotInitializedException,
java.io.IOException,
java.security.cert.CertificateEncodingException,
org.mozilla.jss.NicknameConflictException,
org.mozilla.jss.UserCertConflictException,
org.mozilla.jss.crypto.NoSuchItemOnTokenException,
org.mozilla.jss.crypto.TokenException
EBaseExceptionorg.mozilla.jss.NotInitializedExceptionjava.io.IOExceptionjava.security.cert.CertificateEncodingExceptionorg.mozilla.jss.NicknameConflictExceptionorg.mozilla.jss.UserCertConflictExceptionorg.mozilla.jss.crypto.NoSuchItemOnTokenExceptionorg.mozilla.jss.crypto.TokenExceptionpublic org.mozilla.jss.crypto.X509Certificate getX509CertFromToken(byte[] cert)
throws java.io.IOException,
java.security.cert.CertificateException,
org.mozilla.jss.NotInitializedException
java.io.IOExceptionjava.security.cert.CertificateExceptionorg.mozilla.jss.NotInitializedExceptionpublic boolean isCASigningCert(java.lang.String name)
throws EBaseException
EBaseExceptionpublic boolean isAuditSigningCert(java.lang.String name)
throws EPropertyNotFound,
EBaseException
EPropertyNotFoundEBaseExceptionpublic void deleteExistingCerts()
throws org.mozilla.jss.NotInitializedException,
EBaseException,
org.mozilla.jss.crypto.TokenException
org.mozilla.jss.NotInitializedExceptionEBaseExceptionorg.mozilla.jss.crypto.TokenExceptionpublic java.util.ArrayList<java.lang.String> getMasterCertKeyList()
throws EBaseException
EBaseExceptionpublic byte[] getX509Cert(java.lang.String nickname,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection)
throws java.security.cert.CertificateException
java.security.cert.CertificateExceptionpublic void setupDatabase(DatabaseSetupRequest request) throws java.lang.Exception
java.lang.Exceptionpublic void reinitSubsystems()
throws EBaseException
EBaseExceptionpublic void setupReplication(CloneSetupRequest request) throws java.lang.Exception
java.lang.Exceptionpublic void setupReplicationAgreement(LDAPConfigurator masterConfigurator, LDAPConfigurator replicaConfigurator, java.lang.String masterReplicationPassword, java.lang.String replicaReplicationPassword, int masterReplicationPort, int replicaReplicationPort, java.lang.String replicationSecurity) throws java.lang.Exception
java.lang.Exceptionpublic void releaseConnection(netscape.ldap.LDAPConnection conn)
public void importLDIFS(LDAPConfigurator ldapConfigurator, java.lang.String param) throws java.lang.Exception
java.lang.Exceptionpublic void importLDIFS(LDAPConfigurator ldapConfigurator, java.lang.String param, boolean ignoreErrors) throws java.lang.Exception
java.lang.Exceptionpublic boolean deleteDir(java.io.File dir)
public java.security.KeyPair loadKeyPair(java.lang.String nickname,
java.lang.String token)
throws java.lang.Exception
java.lang.Exceptionpublic void storeKeyPair(java.lang.String tag,
java.security.KeyPair pair)
throws org.mozilla.jss.crypto.TokenException,
EBaseException
org.mozilla.jss.crypto.TokenExceptionEBaseExceptionpublic java.security.KeyPair createECCKeyPair(org.mozilla.jss.crypto.CryptoToken token,
java.lang.String curveName,
java.lang.String ct)
throws java.security.NoSuchAlgorithmException,
org.mozilla.jss.NoSuchTokenException,
org.mozilla.jss.crypto.TokenException,
org.mozilla.jss.NotInitializedException,
EPropertyNotFound,
EBaseException
java.security.NoSuchAlgorithmExceptionorg.mozilla.jss.NoSuchTokenExceptionorg.mozilla.jss.crypto.TokenExceptionorg.mozilla.jss.NotInitializedExceptionEPropertyNotFoundEBaseExceptionpublic java.security.KeyPair createRSAKeyPair(org.mozilla.jss.crypto.CryptoToken token,
int keysize,
java.lang.String ct)
throws java.lang.Exception
java.lang.Exceptionpublic void setSigningAlgorithm(java.lang.String ct,
java.lang.String keyAlgo)
throws EPropertyNotFound,
EBaseException
EPropertyNotFoundEBaseExceptionpublic void configCert(CertificateSetupRequest request, java.security.KeyPair keyPair, Cert certObj) throws java.lang.Exception
java.lang.Exceptionpublic void updateConfig(Cert cert) throws EBaseException, java.io.IOException
EBaseExceptionjava.io.IOExceptionpublic java.lang.String getNickname(java.lang.String certTag)
throws EBaseException
EBaseExceptionpublic byte[] loadCertRequest(java.lang.String subsystem,
java.lang.String tag)
throws java.lang.Exception
java.lang.Exceptionpublic void generateCertRequest(java.lang.String certTag,
java.security.KeyPair keyPair,
Cert cert)
throws java.lang.Exception
java.lang.Exceptionpublic void createCertRecord(Cert cert) throws java.lang.Exception
java.lang.Exceptionpublic void handleCert(Cert cert) throws java.lang.Exception
java.lang.Exceptionpublic void importCert(java.lang.String subsystem,
java.lang.String tag,
java.lang.String tokenname,
java.lang.String nickname,
org.mozilla.jss.netscape.security.x509.X509CertImpl impl)
throws java.lang.Exception
java.lang.Exceptionpublic org.mozilla.jss.netscape.security.x509.X509CertImpl createAdminCertificate(AdminSetupRequest request) throws java.lang.Exception
java.lang.Exceptionpublic void updateAdminUserCert(AdminSetupRequest request, org.mozilla.jss.netscape.security.x509.X509CertImpl adminCert) throws java.lang.Exception
java.lang.Exceptionpublic void createAdminCertificate(java.lang.String certRequest,
java.lang.String certRequestType,
java.lang.String subject)
throws java.lang.Exception
java.lang.Exceptionpublic org.mozilla.jss.netscape.security.pkcs.PKCS7 createPKCS7(org.mozilla.jss.netscape.security.x509.X509CertImpl cert)
throws java.io.IOException
java.io.IOExceptionpublic void setupAdminUser(AdminSetupRequest request, org.mozilla.jss.netscape.security.x509.X509CertImpl cert) throws java.lang.Exception
java.lang.Exceptionpublic void createAdminUser(AdminSetupRequest request) throws java.lang.Exception
java.lang.Exceptionpublic org.mozilla.jss.netscape.security.x509.X509CertImpl submitAdminCertRequest(AdminSetupRequest request, java.lang.String ca_hostname, int ca_port, java.lang.String profileId, java.lang.String subjectDN) throws java.lang.Exception
java.lang.Exceptionpublic void setupSecurityDomain(SecurityDomainSetupRequest request) throws java.lang.Exception
java.lang.Exceptionpublic void createSecurityDomain()
throws java.lang.Exception
java.lang.Exceptionpublic void updateSecurityDomain(SecurityDomainSetupRequest request) throws java.lang.Exception
java.lang.Exceptionpublic boolean isSDHostDomainMaster(DomainInfo domainInfo) throws java.lang.Exception
java.lang.Exceptionpublic void updateDomainXML(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
boolean useClientAuth)
throws java.lang.Exception
java.lang.Exceptionpublic void setupClientAuthUser()
throws java.lang.Exception
java.lang.Exceptionpublic java.lang.String getSubsystemCert(java.lang.String host,
int port,
boolean https)
throws java.lang.Exception
java.lang.Exceptionpublic void setupDatabaseUser()
throws java.lang.Exception
java.lang.Exceptionpublic void getDatabaseGroups(java.util.Collection<java.lang.String> groups)
throws java.lang.Exception
java.lang.Exceptionpublic void registerUser(FinalizeConfigRequest request, java.net.URI secdomainURI, java.net.URI targetURI, java.lang.String targetType) throws java.lang.Exception
java.lang.Exceptionpublic void removeOldDBUsers(java.lang.String subjectDN)
throws EBaseException,
netscape.ldap.LDAPException
EBaseExceptionnetscape.ldap.LDAPExceptionpublic java.lang.String getSubsystemCert()
throws EBaseException,
org.mozilla.jss.NotInitializedException,
org.mozilla.jss.crypto.ObjectNotFoundException,
org.mozilla.jss.crypto.TokenException,
java.security.cert.CertificateEncodingException,
java.io.IOException
EBaseExceptionorg.mozilla.jss.NotInitializedExceptionorg.mozilla.jss.crypto.ObjectNotFoundExceptionorg.mozilla.jss.crypto.TokenExceptionjava.security.cert.CertificateEncodingExceptionjava.io.IOExceptionpublic void updateNextRanges()
throws EBaseException,
netscape.ldap.LDAPException
EBaseExceptionnetscape.ldap.LDAPExceptionpublic void finalizeConfiguration(FinalizeConfigRequest request) throws java.lang.Exception
EBaseExceptionjava.lang.Exceptionpublic void setSubsystemEnabled(java.lang.String id,
boolean enabled)
throws EBaseException
id - The subsystem ID.enabled - Whether the subsystem is enabledEBaseExceptionpublic java.lang.String getSystemCertProfileID(java.lang.String keyType,
java.lang.String tag,
java.lang.String defaultName)