public class Configurator
extends java.lang.Object
Modifier and Type | Field and Description |
---|---|
static java.lang.String |
AUTH_FAILURE |
static java.math.BigInteger |
BIG_ZERO |
static ConfigCertApprovalCallback |
certApprovalCallback |
protected com.netscape.cmscore.apps.EngineConfig |
cs |
static java.lang.String |
DBUSER |
static java.lang.String |
ECC_INTERNAL_ADMIN_CERT_PROFILE |
protected com.netscape.cmscore.apps.CMSEngine |
engine |
static java.lang.String |
FAILURE |
static org.slf4j.Logger |
logger |
static java.lang.Long |
MINUS_ONE |
static java.lang.String |
RSA_INTERNAL_ADMIN_CERT_PROFILE |
protected com.netscape.cmscore.apps.ServerXml |
serverXml |
static java.lang.String |
SUCCESS |
Constructor and Description |
---|
Configurator(com.netscape.cmscore.apps.CMSEngine engine) |
Modifier and Type | Method and Description |
---|---|
org.mozilla.jss.netscape.security.x509.X509CertImpl |
configCert(CertificateSetupRequest request,
java.security.KeyPair keyPair,
Cert certObj) |
org.mozilla.jss.netscape.security.x509.X509CertImpl |
createAdminCertificate(AdminSetupRequest request) |
void |
createAdminCertificate(java.lang.String certRequest,
java.lang.String certRequestType,
java.lang.String subject) |
void |
createAdminUser(AdminSetupRequest request) |
static PKIClient |
createClient(java.lang.String serverURL,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) |
java.security.KeyPair |
createECCKeyPair(org.mozilla.jss.crypto.CryptoToken token,
java.lang.String curveName,
java.lang.String ct) |
org.mozilla.jss.netscape.security.pkcs.PKCS7 |
createPKCS7(org.mozilla.jss.netscape.security.x509.X509CertImpl cert) |
IRequest |
createRequest(java.lang.String tag,
CertInfoProfile profile,
org.mozilla.jss.netscape.security.x509.X509Key x509key,
org.mozilla.jss.netscape.security.x509.X509CertInfo info) |
java.security.KeyPair |
createRSAKeyPair(org.mozilla.jss.crypto.CryptoToken token,
int keysize,
java.lang.String ct) |
void |
createSecurityDomain() |
boolean |
deleteDir(java.io.File dir) |
void |
finalizeConfiguration(FinalizeConfigRequest request)
save variables needed for cloning and remove preops
|
void |
generateCertRequest(java.lang.String certTag,
java.security.KeyPair keyPair,
Cert cert) |
java.lang.String |
getContentValue(java.lang.String body,
java.lang.String header) |
void |
getDatabaseGroups(java.util.Collection<java.lang.String> groups) |
SecurityDomainHost |
getHostInfo(DomainInfo domainInfo,
java.lang.String csType,
java.lang.String hostname,
int securePort) |
java.lang.String |
getInstallToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
java.lang.String |
getNickname(java.lang.String certTag) |
java.lang.String |
getOldCookie(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
java.lang.String |
getSubsystemCert() |
org.mozilla.jss.netscape.security.x509.X509CertImpl |
getSubsystemCert(java.lang.String host,
int port) |
void |
handleCert(Cert cert) |
void |
importAndSetCertPermissionsFromHSM() |
void |
importCert(java.lang.String subsystem,
java.lang.String tag,
java.lang.String tokenname,
java.lang.String nickname,
org.mozilla.jss.netscape.security.x509.X509CertImpl impl) |
void |
importLDIFS(LDAPConfigurator ldapConfigurator,
java.lang.String param) |
void |
importLDIFS(LDAPConfigurator ldapConfigurator,
java.lang.String param,
boolean ignoreErrors) |
boolean |
isSDHostDomainMaster(DomainInfo domainInfo) |
java.security.KeyPair |
loadKeyPair(java.lang.String nickname,
java.lang.String token) |
void |
registerUser(FinalizeConfigRequest request,
java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String targetType) |
void |
reinitSubsystems() |
void |
releaseConnection(netscape.ldap.LDAPConnection conn) |
void |
removeOldDBUsers(java.lang.String subjectDN) |
void |
setConfigStore(com.netscape.cmscore.apps.EngineConfig cs) |
void |
setServerXml(com.netscape.cmscore.apps.ServerXml serverXml) |
void |
setSubsystemEnabled(java.lang.String id,
boolean enabled)
Set whether the given subsystem is enabled.
|
void |
setupAdminUser(AdminSetupRequest request,
org.mozilla.jss.netscape.security.x509.X509CertImpl cert) |
void |
setupClientAuthUser() |
void |
setupClone(CloneSetupRequest request) |
void |
setupDatabase(DatabaseSetupRequest request) |
void |
setupDatabaseUser() |
void |
setupReplication(CloneSetupRequest request) |
int |
setupReplicationAgreements(LDAPConfigurator masterConfigurator,
LDAPConfigurator replicaConfigurator,
java.lang.String masterAgreementName,
java.lang.String replicaAgreementName,
java.lang.String masterHostname,
java.lang.String replicaHostname,
int masterReplicationPort,
int replicaReplicationPort,
java.lang.String masterReplicationPassword,
java.lang.String replicaReplicationPassword,
java.lang.String replicationSecurity,
int replicaID) |
void |
setupSecurityDomain(SecurityDomainSetupRequest request) |
void |
setupSubsystemUser(org.mozilla.jss.netscape.security.x509.X509CertImpl cert) |
void |
setupUser(java.lang.String id,
org.mozilla.jss.netscape.security.x509.X509CertImpl cert,
java.lang.String groupName) |
org.mozilla.jss.netscape.security.x509.X509CertImpl |
submitAdminCertRequest(AdminSetupRequest request,
java.lang.String ca_hostname,
int ca_port,
java.lang.String profileId,
java.lang.String subjectDN) |
void |
updateAdminUserCert(AdminSetupRequest request,
org.mozilla.jss.netscape.security.x509.X509CertImpl adminCert) |
void |
updateDomainXML(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content,
boolean useClientAuth) |
void |
updateNextRanges() |
void |
updateSecurityDomain(SecurityDomainSetupRequest request) |
void |
verifySystemCertificates() |
public static final org.slf4j.Logger logger
public static final java.lang.String ECC_INTERNAL_ADMIN_CERT_PROFILE
public static final java.lang.String RSA_INTERNAL_ADMIN_CERT_PROFILE
public static java.lang.String SUCCESS
public static java.lang.String FAILURE
public static java.lang.String AUTH_FAILURE
public static final java.math.BigInteger BIG_ZERO
public static final java.lang.Long MINUS_ONE
public static final java.lang.String DBUSER
public static ConfigCertApprovalCallback certApprovalCallback
protected com.netscape.cmscore.apps.CMSEngine engine
protected com.netscape.cmscore.apps.EngineConfig cs
protected com.netscape.cmscore.apps.ServerXml serverXml
public static PKIClient createClient(java.lang.String serverURL, java.lang.String clientnickname, org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) throws java.lang.Exception
java.lang.Exception
public void setConfigStore(com.netscape.cmscore.apps.EngineConfig cs)
public void setServerXml(com.netscape.cmscore.apps.ServerXml serverXml) throws java.lang.Exception
java.lang.Exception
public java.lang.String getInstallToken(java.lang.String sdhost, int sdport, java.lang.String user, java.lang.String passwd) throws java.lang.Exception
java.lang.Exception
public java.lang.String getOldCookie(java.lang.String sdhost, int sdport, java.lang.String user, java.lang.String passwd) throws java.lang.Exception
java.lang.Exception
public java.lang.String getContentValue(java.lang.String body, java.lang.String header)
public SecurityDomainHost getHostInfo(DomainInfo domainInfo, java.lang.String csType, java.lang.String hostname, int securePort) throws java.lang.Exception
java.lang.Exception
public void setupClone(CloneSetupRequest request) throws java.lang.Exception
java.lang.Exception
public void verifySystemCertificates() throws java.lang.Exception
java.lang.Exception
public void importAndSetCertPermissionsFromHSM() throws EBaseException, org.mozilla.jss.NotInitializedException, java.io.IOException, java.security.cert.CertificateEncodingException, org.mozilla.jss.NicknameConflictException, org.mozilla.jss.UserCertConflictException, org.mozilla.jss.crypto.NoSuchItemOnTokenException, org.mozilla.jss.crypto.TokenException
EBaseException
org.mozilla.jss.NotInitializedException
java.io.IOException
java.security.cert.CertificateEncodingException
org.mozilla.jss.NicknameConflictException
org.mozilla.jss.UserCertConflictException
org.mozilla.jss.crypto.NoSuchItemOnTokenException
org.mozilla.jss.crypto.TokenException
public void setupDatabase(DatabaseSetupRequest request) throws java.lang.Exception
java.lang.Exception
public void reinitSubsystems() throws EBaseException
EBaseException
public void setupReplication(CloneSetupRequest request) throws java.lang.Exception
java.lang.Exception
public int setupReplicationAgreements(LDAPConfigurator masterConfigurator, LDAPConfigurator replicaConfigurator, java.lang.String masterAgreementName, java.lang.String replicaAgreementName, java.lang.String masterHostname, java.lang.String replicaHostname, int masterReplicationPort, int replicaReplicationPort, java.lang.String masterReplicationPassword, java.lang.String replicaReplicationPassword, java.lang.String replicationSecurity, int replicaID) throws java.lang.Exception
java.lang.Exception
public void releaseConnection(netscape.ldap.LDAPConnection conn)
public void importLDIFS(LDAPConfigurator ldapConfigurator, java.lang.String param) throws java.lang.Exception
java.lang.Exception
public void importLDIFS(LDAPConfigurator ldapConfigurator, java.lang.String param, boolean ignoreErrors) throws java.lang.Exception
java.lang.Exception
public boolean deleteDir(java.io.File dir)
public java.security.KeyPair loadKeyPair(java.lang.String nickname, java.lang.String token) throws java.lang.Exception
java.lang.Exception
public java.security.KeyPair createECCKeyPair(org.mozilla.jss.crypto.CryptoToken token, java.lang.String curveName, java.lang.String ct) throws java.security.NoSuchAlgorithmException, org.mozilla.jss.NoSuchTokenException, org.mozilla.jss.crypto.TokenException, org.mozilla.jss.NotInitializedException, EPropertyNotFound, EBaseException
java.security.NoSuchAlgorithmException
org.mozilla.jss.NoSuchTokenException
org.mozilla.jss.crypto.TokenException
org.mozilla.jss.NotInitializedException
EPropertyNotFound
EBaseException
public java.security.KeyPair createRSAKeyPair(org.mozilla.jss.crypto.CryptoToken token, int keysize, java.lang.String ct) throws java.lang.Exception
java.lang.Exception
public org.mozilla.jss.netscape.security.x509.X509CertImpl configCert(CertificateSetupRequest request, java.security.KeyPair keyPair, Cert certObj) throws java.lang.Exception
java.lang.Exception
public java.lang.String getNickname(java.lang.String certTag) throws EBaseException
EBaseException
public void generateCertRequest(java.lang.String certTag, java.security.KeyPair keyPair, Cert cert) throws java.lang.Exception
java.lang.Exception
public IRequest createRequest(java.lang.String tag, CertInfoProfile profile, org.mozilla.jss.netscape.security.x509.X509Key x509key, org.mozilla.jss.netscape.security.x509.X509CertInfo info) throws java.lang.Exception
java.lang.Exception
public void handleCert(Cert cert) throws java.lang.Exception
java.lang.Exception
public void importCert(java.lang.String subsystem, java.lang.String tag, java.lang.String tokenname, java.lang.String nickname, org.mozilla.jss.netscape.security.x509.X509CertImpl impl) throws java.lang.Exception
java.lang.Exception
public org.mozilla.jss.netscape.security.x509.X509CertImpl createAdminCertificate(AdminSetupRequest request) throws java.lang.Exception
java.lang.Exception
public void updateAdminUserCert(AdminSetupRequest request, org.mozilla.jss.netscape.security.x509.X509CertImpl adminCert) throws java.lang.Exception
java.lang.Exception
public void createAdminCertificate(java.lang.String certRequest, java.lang.String certRequestType, java.lang.String subject) throws java.lang.Exception
java.lang.Exception
public org.mozilla.jss.netscape.security.pkcs.PKCS7 createPKCS7(org.mozilla.jss.netscape.security.x509.X509CertImpl cert) throws java.io.IOException
java.io.IOException
public void setupAdminUser(AdminSetupRequest request, org.mozilla.jss.netscape.security.x509.X509CertImpl cert) throws java.lang.Exception
java.lang.Exception
public void createAdminUser(AdminSetupRequest request) throws java.lang.Exception
java.lang.Exception
public org.mozilla.jss.netscape.security.x509.X509CertImpl submitAdminCertRequest(AdminSetupRequest request, java.lang.String ca_hostname, int ca_port, java.lang.String profileId, java.lang.String subjectDN) throws java.lang.Exception
java.lang.Exception
public void setupSecurityDomain(SecurityDomainSetupRequest request) throws java.lang.Exception
java.lang.Exception
public void createSecurityDomain() throws java.lang.Exception
java.lang.Exception
public void updateSecurityDomain(SecurityDomainSetupRequest request) throws java.lang.Exception
java.lang.Exception
public boolean isSDHostDomainMaster(DomainInfo domainInfo) throws java.lang.Exception
java.lang.Exception
public void updateDomainXML(java.lang.String hostname, int port, boolean https, java.lang.String servlet, javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> content, boolean useClientAuth) throws java.lang.Exception
java.lang.Exception
public void setupSubsystemUser(org.mozilla.jss.netscape.security.x509.X509CertImpl cert) throws java.lang.Exception
java.lang.Exception
public void setupClientAuthUser() throws java.lang.Exception
java.lang.Exception
public void setupUser(java.lang.String id, org.mozilla.jss.netscape.security.x509.X509CertImpl cert, java.lang.String groupName) throws java.lang.Exception
java.lang.Exception
public org.mozilla.jss.netscape.security.x509.X509CertImpl getSubsystemCert(java.lang.String host, int port) throws java.lang.Exception
java.lang.Exception
public void setupDatabaseUser() throws java.lang.Exception
java.lang.Exception
public void getDatabaseGroups(java.util.Collection<java.lang.String> groups) throws java.lang.Exception
java.lang.Exception
public void registerUser(FinalizeConfigRequest request, java.net.URI secdomainURI, java.net.URI targetURI, java.lang.String targetType) throws java.lang.Exception
java.lang.Exception
public void removeOldDBUsers(java.lang.String subjectDN) throws EBaseException, netscape.ldap.LDAPException
EBaseException
netscape.ldap.LDAPException
public java.lang.String getSubsystemCert() throws EBaseException, org.mozilla.jss.NotInitializedException, org.mozilla.jss.crypto.ObjectNotFoundException, org.mozilla.jss.crypto.TokenException, java.security.cert.CertificateEncodingException, java.io.IOException
EBaseException
org.mozilla.jss.NotInitializedException
org.mozilla.jss.crypto.ObjectNotFoundException
org.mozilla.jss.crypto.TokenException
java.security.cert.CertificateEncodingException
java.io.IOException
public void updateNextRanges() throws EBaseException, netscape.ldap.LDAPException
EBaseException
netscape.ldap.LDAPException
public void finalizeConfiguration(FinalizeConfigRequest request) throws java.lang.Exception
EBaseException
java.lang.Exception
public void setSubsystemEnabled(java.lang.String id, boolean enabled) throws EBaseException
id
- The subsystem ID.enabled
- Whether the subsystem is enabledEBaseException