Ejemplo n.º 1
0
 public synchronized TrustedAuthority getTrustedAuthority(String name)
     throws GTSInternalFault, InvalidTrustedAuthorityFault {
   Connection c = null;
   try {
     c = db.getConnection();
     PreparedStatement s =
         c.prepareStatement(
             "select * from "
                 + TrustedAuthorityTable.TABLE_NAME
                 + " where "
                 + TrustedAuthorityTable.NAME
                 + "= ?");
     s.setString(1, name);
     ResultSet rs = s.executeQuery();
     if (rs.next()) {
       TrustedAuthority ta = new TrustedAuthority();
       ta.setName(rs.getString(TrustedAuthorityTable.NAME));
       ta.setTrustLevels(getTrustLevels(name));
       ta.setStatus(Status.fromValue(rs.getString(TrustedAuthorityTable.STATUS)));
       ta.setIsAuthority(Boolean.valueOf(rs.getBoolean(TrustedAuthorityTable.IS_AUTHORITY)));
       ta.setAuthorityGTS(rs.getString(TrustedAuthorityTable.AUTHORITY_GTS));
       ta.setSourceGTS(rs.getString(TrustedAuthorityTable.SOURCE_GTS));
       ta.setExpires(rs.getLong(TrustedAuthorityTable.EXPIRES));
       ta.setLastUpdated(rs.getLong(TrustedAuthorityTable.LAST_UPDATED));
       ta.setCertificate(
           new gov.nih.nci.cagrid.gts.bean.X509Certificate(
               rs.getString(TrustedAuthorityTable.CERTIFICATE)));
       String crl = rs.getString(TrustedAuthorityTable.CRL);
       if ((crl != null) && (crl.trim().length() > 0)) {
         ta.setCRL(new gov.nih.nci.cagrid.gts.bean.X509CRL(crl));
       }
       return ta;
     }
     rs.close();
     s.close();
   } catch (Exception e) {
     this.log.error(
         "Unexpected database error incurred in obtaining the Trusted Authority, " + name + ":\n",
         e);
     GTSInternalFault fault = new GTSInternalFault();
     fault.setFaultString("Unexpected error obtaining the TrustedAuthority " + name);
     throw fault;
   } finally {
     db.releaseConnection(c);
   }
   InvalidTrustedAuthorityFault fault = new InvalidTrustedAuthorityFault();
   fault.setFaultString("The TrustedAuthority " + name + " does not exist.");
   throw fault;
 }
Ejemplo n.º 2
0
  public synchronized TrustedAuthority addTrustedAuthority(TrustedAuthority ta, boolean internal)
      throws GTSInternalFault, IllegalTrustedAuthorityFault {
    this.buildDatabase();
    X509Certificate cert = checkAndExtractCertificate(ta);
    if ((ta.getName() != null) && (!ta.getName().equals(cert.getSubjectDN().toString()))) {
      IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
      fault.setFaultString(
          "The Trusted Authority Name must match the subject of the Trusted Authority's certificate");
      throw fault;
    } else {
      ta.setName(cert.getSubjectDN().toString());
    }

    if (this.doesTrustedAuthorityExist(ta.getName())) {
      IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
      fault.setFaultString("The Trusted Authority " + ta.getName() + " already exists.");
      throw fault;
    }

    X509CRL crl = checkAndExtractCRL(ta, cert);

    if (ta.getTrustLevels() != null) {
      if (ta.getTrustLevels().getTrustLevel() != null) {
        for (int i = 0; i < ta.getTrustLevels().getTrustLevel().length; i++) {
          if (!lookup.doesTrustLevelExist(ta.getTrustLevels().getTrustLevel()[i])) {
            IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
            fault.setFaultString(
                "The Trusted Authority "
                    + ta.getName()
                    + " could not be added, the trust level "
                    + ta.getTrustLevels().getTrustLevel()[i]
                    + " does not exist.");
            throw fault;
          }
        }
      }
    }
    if (ta.getStatus() == null) {
      IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
      fault.setFaultString("No status specified for the Trusted Authority!!!");
      throw fault;
    }
    if (internal) {
      ta.setIsAuthority(Boolean.TRUE);
      ta.setAuthorityGTS(gtsURI);
      ta.setSourceGTS(gtsURI);
      ta.setExpires(0);
    } else {
      if ((ta.getIsAuthority() == null)) {
        IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
        fault.setFaultString(
            "The Trusted Authority "
                + ta.getName()
                + " cannot be added because it does not specify whether or not this GTS is the authority of it.");
        throw fault;
      }

      if (ta.getAuthorityGTS() == null) {
        IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
        fault.setFaultString(
            "The Trusted Authority "
                + ta.getName()
                + " cannot be added because it does not specify an authority trust service.");
        throw fault;
      }

      if (ta.getSourceGTS() == null) {
        IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
        fault.setFaultString(
            "The Trusted Authority "
                + ta.getName()
                + " cannot be added because it does not specify an source trust service.");
        throw fault;
      }

      if ((!ta.getIsAuthority().booleanValue()) && (ta.getExpires() <= 0)) {
        IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
        fault.setFaultString(
            "The Trusted Authority "
                + ta.getName()
                + " cannot be added because it does not specify an expiration.");
        throw fault;
      }

      if ((ta.getIsAuthority().booleanValue()) && (!ta.getAuthorityGTS().equals(gtsURI))) {
        IllegalTrustedAuthorityFault fault = new IllegalTrustedAuthorityFault();
        fault.setFaultString(
            "The Trusted Authority "
                + ta.getName()
                + " cannot be added, a conflict was detected, this gts ("
                + gtsURI
                + ") was specified as its authority, however the URI of another GTS ( "
                + ta.getAuthorityGTS()
                + ") was specified.");
        throw fault;
      }
    }
    insertTrustedAuthority(ta, cert, crl);
    return ta;
  }
Ejemplo n.º 3
0
  public synchronized TrustedAuthority[] findTrustAuthorities(TrustedAuthorityFilter filter)
      throws GTSInternalFault {

    this.buildDatabase();
    Connection c = null;
    List authorities = new ArrayList();
    TrustedAuthoritySelectStatement select = new TrustedAuthoritySelectStatement();
    select.addSelectField("*");
    try {
      if (filter != null) {

        if (filter.getName() != null) {
          select.addWhereField(TrustedAuthorityTable.NAME, "=", filter.getName());
        }

        if (filter.getCertificateDN() != null) {
          select.addWhereField(
              TrustedAuthorityTable.CERTIFICATE_DN, "=", filter.getCertificateDN());
        }

        if (filter.getStatus() != null) {
          select.addWhereField(TrustedAuthorityTable.STATUS, "=", filter.getStatus().getValue());
        }

        if (filter.getIsAuthority() != null) {
          select.addWhereField(
              TrustedAuthorityTable.IS_AUTHORITY, "=", String.valueOf(filter.getIsAuthority()));
        }

        if (filter.getAuthorityGTS() != null) {
          select.addWhereField(TrustedAuthorityTable.AUTHORITY_GTS, "=", filter.getAuthorityGTS());
        }

        if (filter.getSourceGTS() != null) {
          select.addWhereField(TrustedAuthorityTable.SOURCE_GTS, "=", filter.getSourceGTS());
        }

        if (filter.getLifetime() != null) {
          if (filter.getLifetime().equals(Lifetime.Valid)) {
            Calendar cal = new GregorianCalendar();
            long time = cal.getTimeInMillis();
            select.addClause(
                "("
                    + TrustedAuthorityTable.EXPIRES
                    + "=0 OR "
                    + TrustedAuthorityTable.EXPIRES
                    + ">"
                    + time
                    + ")");
          } else if (filter.getLifetime().equals(Lifetime.Expired)) {
            Calendar cal = new GregorianCalendar();
            long time = cal.getTimeInMillis();
            select.addClause(
                "("
                    + TrustedAuthorityTable.EXPIRES
                    + "<>0 AND "
                    + TrustedAuthorityTable.EXPIRES
                    + "<"
                    + time
                    + ")");
          }
        }
      }

      c = db.getConnection();
      PreparedStatement s = select.prepareStatement(c);
      ResultSet rs = s.executeQuery();

      while (rs.next()) {
        String name = rs.getString(TrustedAuthorityTable.NAME);
        TrustLevels levels = filter.getTrustLevels();
        boolean okToAdd = true;
        if (levels != null) {
          String[] tl = levels.getTrustLevel();
          if (tl != null) {
            for (int i = 0; i < tl.length; i++) {
              if (!this.hasTrustLevels(name, tl[i])) {
                okToAdd = false;
                break;
              }
            }
          }
        }
        if (okToAdd) {
          TrustedAuthority ta = new TrustedAuthority();
          ta.setName(name);
          ta.setTrustLevels(getTrustLevels(name));
          ta.setStatus(Status.fromValue(rs.getString(TrustedAuthorityTable.STATUS)));
          ta.setIsAuthority(Boolean.valueOf(rs.getBoolean(TrustedAuthorityTable.IS_AUTHORITY)));
          ta.setAuthorityGTS(rs.getString(TrustedAuthorityTable.AUTHORITY_GTS));
          ta.setSourceGTS(rs.getString(TrustedAuthorityTable.SOURCE_GTS));
          ta.setExpires(rs.getLong(TrustedAuthorityTable.EXPIRES));
          ta.setLastUpdated(rs.getLong(TrustedAuthorityTable.LAST_UPDATED));
          ta.setCertificate(
              new gov.nih.nci.cagrid.gts.bean.X509Certificate(
                  rs.getString(TrustedAuthorityTable.CERTIFICATE)));
          String crl = rs.getString(TrustedAuthorityTable.CRL);
          if ((crl != null) && (crl.trim().length() > 0)) {
            ta.setCRL(new gov.nih.nci.cagrid.gts.bean.X509CRL(crl));
          }
          authorities.add(ta);
        }
      }
      rs.close();
      s.close();

      TrustedAuthority[] list = new TrustedAuthority[authorities.size()];
      for (int i = 0; i < authorities.size(); i++) {
        list[i] = (TrustedAuthority) authorities.get(i);
      }
      return list;

    } catch (Exception e) {
      this.log.error(
          "Unexpected database error incurred in finding trusted authorities: " + e.getMessage(),
          e);
      GTSInternalFault fault = new GTSInternalFault();
      fault.setFaultString("Unexpected error occurred in finding Trusted Authorities");
      throw fault;
    } finally {
      db.releaseConnection(c);
    }
  }