public class ConfigurationUtils
extends java.lang.Object
| Modifier and Type | Field and Description |
|---|---|
static java.lang.String |
AUTH_FAILURE |
static java.math.BigInteger |
BIG_ZERO |
static java.lang.String |
DBUSER |
static java.lang.String |
FAILURE |
static java.lang.Long |
MINUS_ONE |
static java.lang.String |
SUCCESS |
| Constructor and Description |
|---|
ConfigurationUtils() |
| Modifier and Type | Method and Description |
|---|---|
static byte[] |
addCertBag(org.mozilla.jss.crypto.X509Certificate x509cert,
java.lang.String nickname,
org.mozilla.jss.asn1.SEQUENCE safeContents) |
static void |
addKeyBag(org.mozilla.jss.crypto.PrivateKey pkey,
org.mozilla.jss.crypto.X509Certificate x509cert,
org.mozilla.jss.util.Password pass,
byte[] localKeyId,
org.mozilla.jss.asn1.SEQUENCE safeContents) |
static void |
addProfilesToTPSUser(java.lang.String adminID) |
static void |
backupKeys(java.lang.String pwd,
java.lang.String fname) |
static void |
configCert(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
org.apache.velocity.context.Context context,
Cert certObj,
WizardPanelBase panel) |
static void |
createAdmin(java.lang.String uid,
java.lang.String email,
java.lang.String name,
java.lang.String pwd) |
static void |
createAdminCertificate(java.lang.String certRequest,
java.lang.String certRequestType,
java.lang.String subject) |
static org.mozilla.jss.asn1.SET |
createBagAttrs(java.lang.String nickName,
byte[] localKeyId) |
static void |
createChangeLog(netscape.ldap.LDAPConnection conn,
java.lang.String dir) |
static void |
createECCKeyPair(java.lang.String token,
java.lang.String curveName,
IConfigStore config,
java.lang.String ct) |
static byte[] |
createLocalKeyId(org.mozilla.jss.crypto.X509Certificate cert) |
static void |
createPKCS7(netscape.security.x509.X509CertImpl cert) |
static void |
createReplicationAgreement(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name,
java.lang.String replicahost,
int replicaport,
java.lang.String replicapwd,
java.lang.String basedn,
java.lang.String bindUser,
java.lang.String secure,
java.lang.String replicationSecurity) |
static void |
createReplicationManager(netscape.ldap.LDAPConnection conn,
java.lang.String bindUser,
java.lang.String pwd) |
static void |
createRSAKeyPair(java.lang.String token,
int keysize,
IConfigStore config,
java.lang.String ct) |
static void |
createSecurityDomain() |
static void |
deleteBootstrapServerCert() |
static void |
deleteCert(java.lang.String tokenname,
java.lang.String nickname) |
static boolean |
deleteDir(java.io.File dir) |
static void |
deleteEntries(netscape.ldap.LDAPSearchResults res,
netscape.ldap.LDAPConnection conn,
java.lang.String[] excludedDNs) |
static void |
deleteEntry(netscape.ldap.LDAPConnection conn,
java.lang.String dn,
java.lang.String[] excludedDNs) |
static void |
deleteExistingCerts() |
static void |
deleteSubtree(netscape.ldap.LDAPConnection conn,
java.lang.String dn) |
static int |
enableReplication(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String bindUser,
java.lang.String basedn,
int id) |
static void |
exportTransportCert(java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String transportCert) |
static boolean |
findBootstrapServerCert() |
static boolean |
findCertificate(java.lang.String tokenname,
java.lang.String nickname) |
static void |
getConfigEntriesFromMaster() |
static java.lang.String |
getContentValue(java.lang.String body,
java.lang.String header) |
static java.lang.String |
getDomainXML(java.lang.String hostname,
int https_admin_port,
boolean https) |
static netscape.security.x509.X509Key |
getECCX509Key(IConfigStore config,
java.lang.String certTag) |
static byte[] |
getEncodedKey(org.mozilla.jss.crypto.PrivateKey pkey) |
static java.lang.String |
getGroupName(java.lang.String uid,
java.lang.String subsystemname) |
static java.lang.String |
getHttpResponse(java.lang.String hostname,
int port,
boolean secure,
java.lang.String uri,
java.lang.String content,
java.lang.String clientnickname) |
static java.lang.String |
getHttpResponse(java.lang.String hostname,
int port,
boolean secure,
java.lang.String uri,
java.lang.String content,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) |
static java.lang.String |
getInstallToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
static java.lang.String |
getInstanceDir(netscape.ldap.LDAPConnection conn) |
static java.util.ArrayList<java.lang.String> |
getMasterCertKeyList() |
static java.lang.String |
getNickname(IConfigStore config,
java.lang.String certTag) |
static java.lang.String |
getOldCookie(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
static java.lang.String |
getOldToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd) |
static int |
getPortFromSecurityDomain(java.lang.String domainXML,
java.lang.String host,
int port,
java.lang.String csType,
java.lang.String givenTag,
java.lang.String wantedTag) |
static org.mozilla.jss.crypto.PrivateKey.Type |
getPrivateKeyType(java.security.PublicKey pubkey) |
static netscape.security.x509.X509Key |
getRSAX509Key(IConfigStore config,
java.lang.String certTag) |
static void |
getSecurityDomainPorts(java.lang.String domainXML,
java.lang.String host,
int port) |
static void |
getSharedSecret(java.lang.String tksHost,
int tksPort,
boolean importKey) |
static java.lang.String |
getSubsystemCert() |
static java.lang.String |
getSubsystemCert(java.lang.String host,
int port,
boolean https) |
static int |
getSubsystemCount(java.lang.String hostname,
int https_admin_port,
boolean https,
java.lang.String type) |
static java.lang.String |
getTransportCert(java.net.URI secdomainURI,
java.net.URI kraUri) |
static java.util.Vector<java.lang.String> |
getUrlListFromSecurityDomain(IConfigStore config,
java.lang.String type,
java.lang.String portType) |
static byte[] |
getX509Cert(java.lang.String nickname,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) |
static org.mozilla.jss.crypto.X509Certificate |
getX509CertFromToken(byte[] cert) |
static void |
handleCertRequest(IConfigStore config,
java.lang.String certTag,
Cert cert) |
static int |
handleCerts(Cert cert) |
static void |
importAndSetCertPermissionsFromHSM() |
static void |
importCACertToOCSP() |
static void |
importCertChain(java.lang.String host,
int port,
java.lang.String serverPath,
java.lang.String tag) |
static void |
importKeyCert(java.util.Vector<java.util.Vector<java.lang.Object>> pkeyinfo_collection,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection) |
static void |
importLDIFS(java.lang.String param,
netscape.ldap.LDAPConnection conn) |
static void |
initializeConsumer(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name) |
static boolean |
isAuditSigningCert(java.lang.String name) |
static boolean |
isCASigningCert(java.lang.String name) |
static boolean |
isCertdbCloned() |
static boolean |
isSDHostDomainMaster(IConfigStore config) |
static boolean |
isValidCloneURI(java.lang.String domainXML,
java.lang.String cloneHost,
int clonePort) |
static boolean |
loginToken(org.mozilla.jss.crypto.CryptoToken token,
java.lang.String tokPwd) |
static void |
populateDB() |
static void |
populateDBManager() |
static void |
populateVLVIndexes() |
static java.lang.String |
post(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> map,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback) |
static void |
registerUser(java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String targetType) |
static void |
reInitSubsystem(java.lang.String csType) |
static void |
releaseConnection(netscape.ldap.LDAPConnection conn) |
static void |
removeOldDBUsers(java.lang.String subjectDN) |
static void |
removePreopConfigEntries()
save variables needed for cloning and remove preops
|
static boolean |
replicationDone(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name) |
static java.lang.String |
replicationStatus(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name) |
static void |
restoreCertsFromP12(java.lang.String p12File,
java.lang.String p12Pass) |
static void |
setCertPermissions(java.lang.String tag) |
static void |
setExternalCACert(java.lang.String certStr,
java.lang.String subsystem,
IConfigStore config,
Cert certObj) |
static void |
setExternalCACertChain(java.lang.String certChainStr,
java.lang.String subsystem,
IConfigStore config,
Cert certObj) |
static void |
setSigningAlgorithm(java.lang.String ct,
java.lang.String keyAlgo,
IConfigStore config) |
static void |
setupClientAuthUser() |
static void |
setupDBUser() |
static void |
setupReplication() |
static java.lang.String |
submitAdminCertRequest(java.lang.String ca_hostname,
int ca_port,
java.lang.String profileId,
java.lang.String certRequestType,
java.lang.String certRequest,
java.lang.String subjectDN) |
static void |
updateAuthdbInfo(java.lang.String basedn,
java.lang.String host,
java.lang.String port,
java.lang.String secureConn) |
static void |
updateCloneConfig() |
static void |
updateConfig(IConfigStore config,
java.lang.String certTag) |
static boolean |
updateConfigEntries(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
java.lang.String uri,
IConfigStore config) |
static void |
updateConnectorInfo(java.lang.String host,
int port,
boolean https,
java.lang.String content) |
static void |
updateConnectorInfo(java.lang.String ownagenthost,
java.lang.String ownagentsport) |
static void |
updateDomainXML(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
java.lang.String uri,
boolean useClientAuth) |
static void |
updateNextRanges() |
static void |
updateNumberRange(java.lang.String hostname,
int eePort,
int adminPort,
boolean https,
java.lang.String content,
java.lang.String type) |
static void |
updateOCSPConfig() |
static void |
updateSecurityDomain() |
public static java.lang.String SUCCESS
public static java.lang.String FAILURE
public static java.lang.String AUTH_FAILURE
public static final java.math.BigInteger BIG_ZERO
public static final java.lang.Long MINUS_ONE
public static final java.lang.String DBUSER
public static boolean loginToken(org.mozilla.jss.crypto.CryptoToken token,
java.lang.String tokPwd)
throws org.mozilla.jss.crypto.TokenException,
org.mozilla.jss.util.IncorrectPasswordException
org.mozilla.jss.crypto.TokenExceptionorg.mozilla.jss.util.IncorrectPasswordExceptionpublic static java.lang.String getHttpResponse(java.lang.String hostname,
int port,
boolean secure,
java.lang.String uri,
java.lang.String content,
java.lang.String clientnickname)
throws java.io.IOException
java.io.IOExceptionpublic static java.lang.String post(java.lang.String hostname,
int port,
boolean secure,
java.lang.String path,
javax.ws.rs.core.MultivaluedMap<java.lang.String,java.lang.String> map,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback)
throws java.lang.Exception
java.lang.Exceptionpublic static java.lang.String getHttpResponse(java.lang.String hostname,
int port,
boolean secure,
java.lang.String uri,
java.lang.String content,
java.lang.String clientnickname,
org.mozilla.jss.ssl.SSLCertificateApprovalCallback certApprovalCallback)
throws java.io.IOException
java.io.IOExceptionpublic static void importCertChain(java.lang.String host,
int port,
java.lang.String serverPath,
java.lang.String tag)
throws java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException,
java.security.cert.CertificateEncodingException,
java.security.cert.CertificateException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.TokenException,
EBaseException
java.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionjava.security.cert.CertificateEncodingExceptionjava.security.cert.CertificateExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.TokenExceptionEBaseExceptionpublic static java.lang.String getInstallToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd)
throws java.lang.Exception
java.lang.Exceptionpublic static java.lang.String getOldCookie(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd)
throws java.lang.Exception
java.lang.Exceptionpublic static java.lang.String getOldToken(java.lang.String sdhost,
int sdport,
java.lang.String user,
java.lang.String passwd)
throws java.io.IOException,
EPropertyNotFound,
EBaseException,
java.net.URISyntaxException
java.io.IOExceptionEPropertyNotFoundEBaseExceptionjava.net.URISyntaxExceptionpublic static java.lang.String getContentValue(java.lang.String body,
java.lang.String header)
public static java.lang.String getGroupName(java.lang.String uid,
java.lang.String subsystemname)
public static java.lang.String getDomainXML(java.lang.String hostname,
int https_admin_port,
boolean https)
throws java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void getSecurityDomainPorts(java.lang.String domainXML,
java.lang.String host,
int port)
throws org.xml.sax.SAXException,
java.io.IOException,
javax.xml.parsers.ParserConfigurationException
org.xml.sax.SAXExceptionjava.io.IOExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static java.util.Vector<java.lang.String> getUrlListFromSecurityDomain(IConfigStore config, java.lang.String type, java.lang.String portType) throws EPropertyNotFound, EBaseException, java.io.IOException, org.xml.sax.SAXException, javax.xml.parsers.ParserConfigurationException
EPropertyNotFoundEBaseExceptionjava.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static boolean isValidCloneURI(java.lang.String domainXML,
java.lang.String cloneHost,
int clonePort)
throws EPropertyNotFound,
EBaseException,
org.xml.sax.SAXException,
java.io.IOException,
javax.xml.parsers.ParserConfigurationException
EPropertyNotFoundEBaseExceptionorg.xml.sax.SAXExceptionjava.io.IOExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void getConfigEntriesFromMaster()
throws java.io.IOException,
EBaseException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionEBaseExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void updateNumberRange(java.lang.String hostname,
int eePort,
int adminPort,
boolean https,
java.lang.String content,
java.lang.String type)
throws java.io.IOException,
EBaseException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionEBaseExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static boolean updateConfigEntries(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
java.lang.String uri,
IConfigStore config)
throws java.io.IOException,
EBaseException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionEBaseExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void restoreCertsFromP12(java.lang.String p12File,
java.lang.String p12Pass)
throws EPropertyNotFound,
EBaseException,
java.security.InvalidKeyException,
java.security.cert.CertificateException,
java.security.NoSuchAlgorithmException,
java.security.InvalidAlgorithmParameterException,
java.lang.IllegalStateException,
org.mozilla.jss.crypto.TokenException,
org.mozilla.jss.crypto.IllegalBlockSizeException,
org.mozilla.jss.crypto.BadPaddingException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.CryptoManager.NicknameConflictException,
org.mozilla.jss.CryptoManager.UserCertConflictException,
org.mozilla.jss.crypto.NoSuchItemOnTokenException,
org.mozilla.jss.asn1.InvalidBERException,
java.io.IOException
EPropertyNotFoundEBaseExceptionjava.security.InvalidKeyExceptionjava.security.cert.CertificateExceptionjava.security.NoSuchAlgorithmExceptionjava.security.InvalidAlgorithmParameterExceptionjava.lang.IllegalStateExceptionorg.mozilla.jss.crypto.TokenExceptionorg.mozilla.jss.crypto.IllegalBlockSizeExceptionorg.mozilla.jss.crypto.BadPaddingExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.CryptoManager.NicknameConflictExceptionorg.mozilla.jss.CryptoManager.UserCertConflictExceptionorg.mozilla.jss.crypto.NoSuchItemOnTokenExceptionorg.mozilla.jss.asn1.InvalidBERExceptionjava.io.IOExceptionpublic static boolean isCertdbCloned()
public static void importKeyCert(java.util.Vector<java.util.Vector<java.lang.Object>> pkeyinfo_collection,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection)
throws java.io.IOException,
java.security.cert.CertificateException,
org.mozilla.jss.crypto.TokenException,
java.security.NoSuchAlgorithmException,
java.security.InvalidKeyException,
java.security.InvalidAlgorithmParameterException,
java.lang.IllegalStateException,
org.mozilla.jss.crypto.IllegalBlockSizeException,
org.mozilla.jss.crypto.BadPaddingException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.CryptoManager.NicknameConflictException,
org.mozilla.jss.CryptoManager.UserCertConflictException,
org.mozilla.jss.crypto.NoSuchItemOnTokenException,
EPropertyNotFound,
EBaseException
java.io.IOExceptionjava.security.cert.CertificateExceptionorg.mozilla.jss.crypto.TokenExceptionjava.security.NoSuchAlgorithmExceptionjava.security.InvalidKeyExceptionjava.security.InvalidAlgorithmParameterExceptionjava.lang.IllegalStateExceptionorg.mozilla.jss.crypto.IllegalBlockSizeExceptionorg.mozilla.jss.crypto.BadPaddingExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.CryptoManager.NicknameConflictExceptionorg.mozilla.jss.CryptoManager.UserCertConflictExceptionorg.mozilla.jss.crypto.NoSuchItemOnTokenExceptionEPropertyNotFoundEBaseExceptionpublic static void importAndSetCertPermissionsFromHSM()
throws EBaseException,
org.mozilla.jss.CryptoManager.NotInitializedException,
java.io.IOException,
java.security.cert.CertificateEncodingException,
org.mozilla.jss.CryptoManager.NicknameConflictException,
org.mozilla.jss.CryptoManager.UserCertConflictException,
org.mozilla.jss.crypto.NoSuchItemOnTokenException,
org.mozilla.jss.crypto.TokenException
EBaseExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionjava.io.IOExceptionjava.security.cert.CertificateEncodingExceptionorg.mozilla.jss.CryptoManager.NicknameConflictExceptionorg.mozilla.jss.CryptoManager.UserCertConflictExceptionorg.mozilla.jss.crypto.NoSuchItemOnTokenExceptionorg.mozilla.jss.crypto.TokenExceptionpublic static org.mozilla.jss.crypto.X509Certificate getX509CertFromToken(byte[] cert)
throws java.io.IOException,
java.security.cert.CertificateException,
org.mozilla.jss.CryptoManager.NotInitializedException
java.io.IOExceptionjava.security.cert.CertificateExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionpublic static org.mozilla.jss.crypto.PrivateKey.Type getPrivateKeyType(java.security.PublicKey pubkey)
public static boolean isCASigningCert(java.lang.String name)
public static boolean isAuditSigningCert(java.lang.String name)
throws EPropertyNotFound,
EBaseException
EPropertyNotFoundEBaseExceptionpublic static void deleteExistingCerts()
throws org.mozilla.jss.CryptoManager.NotInitializedException,
EBaseException,
org.mozilla.jss.crypto.TokenException
org.mozilla.jss.CryptoManager.NotInitializedExceptionEBaseExceptionorg.mozilla.jss.crypto.TokenExceptionpublic static java.util.ArrayList<java.lang.String> getMasterCertKeyList()
throws EBaseException
EBaseExceptionpublic static byte[] getX509Cert(java.lang.String nickname,
java.util.Vector<java.util.Vector<java.lang.Object>> cert_collection)
throws java.security.cert.CertificateException
java.security.cert.CertificateExceptionpublic static void releaseConnection(netscape.ldap.LDAPConnection conn)
public static void populateDB()
throws java.io.IOException,
EBaseException
java.io.IOExceptionEBaseExceptionpublic static void importLDIFS(java.lang.String param,
netscape.ldap.LDAPConnection conn)
throws java.io.IOException,
EPropertyNotFound,
EBaseException
java.io.IOExceptionEPropertyNotFoundEBaseExceptionpublic static void deleteSubtree(netscape.ldap.LDAPConnection conn,
java.lang.String dn)
throws EBaseException
EBaseExceptionpublic static void deleteEntries(netscape.ldap.LDAPSearchResults res,
netscape.ldap.LDAPConnection conn,
java.lang.String[] excludedDNs)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static void deleteEntry(netscape.ldap.LDAPConnection conn,
java.lang.String dn,
java.lang.String[] excludedDNs)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static java.lang.String getInstanceDir(netscape.ldap.LDAPConnection conn)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static boolean deleteDir(java.io.File dir)
public static void populateDBManager()
throws java.lang.Exception
java.lang.Exceptionpublic static void populateVLVIndexes()
throws java.lang.Exception
java.lang.Exceptionpublic static void setupReplication()
throws EBaseException,
java.io.IOException
EBaseExceptionjava.io.IOExceptionpublic static void createReplicationManager(netscape.ldap.LDAPConnection conn,
java.lang.String bindUser,
java.lang.String pwd)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static void createChangeLog(netscape.ldap.LDAPConnection conn,
java.lang.String dir)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static int enableReplication(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String bindUser,
java.lang.String basedn,
int id)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static void createReplicationAgreement(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name,
java.lang.String replicahost,
int replicaport,
java.lang.String replicapwd,
java.lang.String basedn,
java.lang.String bindUser,
java.lang.String secure,
java.lang.String replicationSecurity)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static void initializeConsumer(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name)
throws netscape.ldap.LDAPException
netscape.ldap.LDAPExceptionpublic static boolean replicationDone(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name)
throws netscape.ldap.LDAPException,
java.io.IOException
netscape.ldap.LDAPExceptionjava.io.IOExceptionpublic static java.lang.String replicationStatus(java.lang.String replicadn,
netscape.ldap.LDAPConnection conn,
java.lang.String name)
throws java.io.IOException,
netscape.ldap.LDAPException
java.io.IOExceptionnetscape.ldap.LDAPExceptionpublic static void reInitSubsystem(java.lang.String csType)
throws EBaseException
EBaseExceptionpublic static void setExternalCACert(java.lang.String certStr,
java.lang.String subsystem,
IConfigStore config,
Cert certObj)
throws java.lang.Exception
java.lang.Exceptionpublic static void setExternalCACertChain(java.lang.String certChainStr,
java.lang.String subsystem,
IConfigStore config,
Cert certObj)
public static void createECCKeyPair(java.lang.String token,
java.lang.String curveName,
IConfigStore config,
java.lang.String ct)
throws java.security.NoSuchAlgorithmException,
org.mozilla.jss.NoSuchTokenException,
org.mozilla.jss.crypto.TokenException,
org.mozilla.jss.CryptoManager.NotInitializedException,
EPropertyNotFound,
EBaseException
java.security.NoSuchAlgorithmExceptionorg.mozilla.jss.NoSuchTokenExceptionorg.mozilla.jss.crypto.TokenExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionEPropertyNotFoundEBaseExceptionpublic static void createRSAKeyPair(java.lang.String token,
int keysize,
IConfigStore config,
java.lang.String ct)
throws java.security.NoSuchAlgorithmException,
org.mozilla.jss.NoSuchTokenException,
org.mozilla.jss.crypto.TokenException,
org.mozilla.jss.CryptoManager.NotInitializedException,
EPropertyNotFound,
EBaseException
java.security.NoSuchAlgorithmExceptionorg.mozilla.jss.NoSuchTokenExceptionorg.mozilla.jss.crypto.TokenExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionEPropertyNotFoundEBaseExceptionpublic static void setSigningAlgorithm(java.lang.String ct,
java.lang.String keyAlgo,
IConfigStore config)
throws EPropertyNotFound,
EBaseException
EPropertyNotFoundEBaseExceptionpublic static int getSubsystemCount(java.lang.String hostname,
int https_admin_port,
boolean https,
java.lang.String type)
throws java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void configCert(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
org.apache.velocity.context.Context context,
Cert certObj,
WizardPanelBase panel)
throws java.io.IOException
java.io.IOExceptionpublic static void updateConfig(IConfigStore config, java.lang.String certTag) throws EBaseException, java.io.IOException
EBaseExceptionjava.io.IOExceptionpublic static java.lang.String getNickname(IConfigStore config, java.lang.String certTag) throws EBaseException
EBaseExceptionpublic static int getPortFromSecurityDomain(java.lang.String domainXML,
java.lang.String host,
int port,
java.lang.String csType,
java.lang.String givenTag,
java.lang.String wantedTag)
throws org.xml.sax.SAXException,
java.io.IOException,
javax.xml.parsers.ParserConfigurationException
org.xml.sax.SAXExceptionjava.io.IOExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void updateCloneConfig()
throws EBaseException,
java.io.IOException
EBaseExceptionjava.io.IOExceptionpublic static void handleCertRequest(IConfigStore config, java.lang.String certTag, Cert cert) throws EPropertyNotFound, EBaseException, java.security.InvalidKeyException, org.mozilla.jss.CryptoManager.NotInitializedException, org.mozilla.jss.crypto.TokenException, java.security.NoSuchAlgorithmException, java.security.NoSuchProviderException, java.security.cert.CertificateException, java.security.SignatureException, java.io.IOException
EPropertyNotFoundEBaseExceptionjava.security.InvalidKeyExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.TokenExceptionjava.security.NoSuchAlgorithmExceptionjava.security.NoSuchProviderExceptionjava.security.cert.CertificateExceptionjava.security.SignatureExceptionjava.io.IOExceptionpublic static netscape.security.x509.X509Key getECCX509Key(IConfigStore config, java.lang.String certTag) throws EPropertyNotFound, EBaseException, java.security.InvalidKeyException
EPropertyNotFoundEBaseExceptionjava.security.InvalidKeyExceptionpublic static netscape.security.x509.X509Key getRSAX509Key(IConfigStore config, java.lang.String certTag) throws EPropertyNotFound, EBaseException, java.security.InvalidKeyException
EPropertyNotFoundEBaseExceptionjava.security.InvalidKeyExceptionpublic static int handleCerts(Cert cert) throws java.io.IOException, EBaseException, java.security.cert.CertificateException, org.mozilla.jss.CryptoManager.NotInitializedException, org.mozilla.jss.crypto.TokenException, java.security.InvalidKeyException
java.io.IOExceptionEBaseExceptionjava.security.cert.CertificateExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.TokenExceptionjava.security.InvalidKeyExceptionpublic static void setCertPermissions(java.lang.String tag)
throws EBaseException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.ObjectNotFoundException,
org.mozilla.jss.crypto.TokenException
EBaseExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.ObjectNotFoundExceptionorg.mozilla.jss.crypto.TokenExceptionpublic static boolean findCertificate(java.lang.String tokenname,
java.lang.String nickname)
throws org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.TokenException,
java.io.IOException
org.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.TokenExceptionjava.io.IOExceptionpublic static boolean findBootstrapServerCert()
throws EBaseException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.TokenException
EBaseExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.TokenExceptionpublic static void deleteBootstrapServerCert()
throws EBaseException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.NoSuchTokenException,
org.mozilla.jss.crypto.TokenException
EBaseExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.NoSuchTokenExceptionorg.mozilla.jss.crypto.TokenExceptionpublic static void deleteCert(java.lang.String tokenname,
java.lang.String nickname)
throws org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.NoSuchTokenException,
org.mozilla.jss.crypto.TokenException
org.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.NoSuchTokenExceptionorg.mozilla.jss.crypto.TokenExceptionpublic static void backupKeys(java.lang.String pwd,
java.lang.String fname)
throws EPropertyNotFound,
EBaseException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.ObjectNotFoundException,
org.mozilla.jss.crypto.TokenException,
java.security.DigestException,
java.security.InvalidKeyException,
java.security.NoSuchAlgorithmException,
java.security.InvalidAlgorithmParameterException,
org.mozilla.jss.asn1.InvalidBERException,
java.security.cert.CertificateEncodingException,
java.lang.IllegalStateException,
org.mozilla.jss.crypto.IllegalBlockSizeException,
org.mozilla.jss.crypto.BadPaddingException,
java.io.IOException
EPropertyNotFoundEBaseExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.ObjectNotFoundExceptionorg.mozilla.jss.crypto.TokenExceptionjava.security.DigestExceptionjava.security.InvalidKeyExceptionjava.security.NoSuchAlgorithmExceptionjava.security.InvalidAlgorithmParameterExceptionorg.mozilla.jss.asn1.InvalidBERExceptionjava.security.cert.CertificateEncodingExceptionjava.lang.IllegalStateExceptionorg.mozilla.jss.crypto.IllegalBlockSizeExceptionorg.mozilla.jss.crypto.BadPaddingExceptionjava.io.IOExceptionpublic static void addKeyBag(org.mozilla.jss.crypto.PrivateKey pkey,
org.mozilla.jss.crypto.X509Certificate x509cert,
org.mozilla.jss.util.Password pass,
byte[] localKeyId,
org.mozilla.jss.asn1.SEQUENCE safeContents)
throws java.security.NoSuchAlgorithmException,
org.mozilla.jss.asn1.InvalidBERException,
java.security.InvalidKeyException,
java.security.InvalidAlgorithmParameterException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.TokenException,
java.lang.IllegalStateException,
org.mozilla.jss.crypto.IllegalBlockSizeException,
org.mozilla.jss.crypto.BadPaddingException,
java.io.CharConversionException
java.security.NoSuchAlgorithmExceptionorg.mozilla.jss.asn1.InvalidBERExceptionjava.security.InvalidKeyExceptionjava.security.InvalidAlgorithmParameterExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.TokenExceptionjava.lang.IllegalStateExceptionorg.mozilla.jss.crypto.IllegalBlockSizeExceptionorg.mozilla.jss.crypto.BadPaddingExceptionjava.io.CharConversionExceptionpublic static byte[] addCertBag(org.mozilla.jss.crypto.X509Certificate x509cert,
java.lang.String nickname,
org.mozilla.jss.asn1.SEQUENCE safeContents)
throws java.security.cert.CertificateEncodingException,
java.security.NoSuchAlgorithmException,
java.io.CharConversionException
java.security.cert.CertificateEncodingExceptionjava.security.NoSuchAlgorithmExceptionjava.io.CharConversionExceptionpublic static byte[] getEncodedKey(org.mozilla.jss.crypto.PrivateKey pkey)
throws org.mozilla.jss.CryptoManager.NotInitializedException,
java.security.NoSuchAlgorithmException,
org.mozilla.jss.crypto.TokenException,
java.lang.IllegalStateException,
java.io.CharConversionException,
java.security.InvalidKeyException,
java.security.InvalidAlgorithmParameterException,
org.mozilla.jss.crypto.IllegalBlockSizeException,
org.mozilla.jss.crypto.BadPaddingException
org.mozilla.jss.CryptoManager.NotInitializedExceptionjava.security.NoSuchAlgorithmExceptionorg.mozilla.jss.crypto.TokenExceptionjava.lang.IllegalStateExceptionjava.io.CharConversionExceptionjava.security.InvalidKeyExceptionjava.security.InvalidAlgorithmParameterExceptionorg.mozilla.jss.crypto.IllegalBlockSizeExceptionorg.mozilla.jss.crypto.BadPaddingExceptionpublic static byte[] createLocalKeyId(org.mozilla.jss.crypto.X509Certificate cert)
throws java.security.NoSuchAlgorithmException,
java.security.cert.CertificateEncodingException
java.security.NoSuchAlgorithmExceptionjava.security.cert.CertificateEncodingExceptionpublic static org.mozilla.jss.asn1.SET createBagAttrs(java.lang.String nickName,
byte[] localKeyId)
throws java.io.CharConversionException
java.io.CharConversionExceptionpublic static void createAdminCertificate(java.lang.String certRequest,
java.lang.String certRequestType,
java.lang.String subject)
throws org.mozilla.jss.asn1.InvalidBERException,
java.io.IOException,
java.security.InvalidKeyException,
org.mozilla.jss.crypto.InvalidKeyFormatException,
java.security.NoSuchAlgorithmException,
java.security.SignatureException,
java.security.NoSuchProviderException,
EBaseException
org.mozilla.jss.asn1.InvalidBERExceptionjava.io.IOExceptionjava.security.InvalidKeyExceptionorg.mozilla.jss.crypto.InvalidKeyFormatExceptionjava.security.NoSuchAlgorithmExceptionjava.security.SignatureExceptionjava.security.NoSuchProviderExceptionEBaseExceptionpublic static void createPKCS7(netscape.security.x509.X509CertImpl cert)
throws java.io.IOException
java.io.IOExceptionpublic static void createAdmin(java.lang.String uid,
java.lang.String email,
java.lang.String name,
java.lang.String pwd)
throws java.io.IOException,
EBaseException,
netscape.ldap.LDAPException
java.io.IOExceptionEBaseExceptionnetscape.ldap.LDAPExceptionpublic static java.lang.String submitAdminCertRequest(java.lang.String ca_hostname,
int ca_port,
java.lang.String profileId,
java.lang.String certRequestType,
java.lang.String certRequest,
java.lang.String subjectDN)
throws java.io.IOException,
EBaseException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionEBaseExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void createSecurityDomain()
throws EBaseException,
netscape.ldap.LDAPException,
java.lang.NumberFormatException,
java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
EBaseExceptionnetscape.ldap.LDAPExceptionjava.lang.NumberFormatExceptionjava.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void updateSecurityDomain()
throws java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException,
EPropertyNotFound,
EBaseException
java.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionEPropertyNotFoundEBaseExceptionpublic static boolean isSDHostDomainMaster(IConfigStore config) throws EPropertyNotFound, EBaseException, java.io.IOException, org.xml.sax.SAXException, javax.xml.parsers.ParserConfigurationException
EPropertyNotFoundEBaseExceptionjava.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void updateDomainXML(java.lang.String hostname,
int port,
boolean https,
java.lang.String servlet,
java.lang.String uri,
boolean useClientAuth)
throws java.io.IOException,
EBaseException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionEBaseExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void updateConnectorInfo(java.lang.String ownagenthost,
java.lang.String ownagentsport)
throws java.io.IOException,
EBaseException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionEBaseExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void updateConnectorInfo(java.lang.String host,
int port,
boolean https,
java.lang.String content)
throws java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void setupClientAuthUser()
throws EBaseException,
java.security.cert.CertificateException,
java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException,
netscape.ldap.LDAPException
EBaseExceptionjava.security.cert.CertificateExceptionjava.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionnetscape.ldap.LDAPExceptionpublic static java.lang.String getSubsystemCert(java.lang.String host,
int port,
boolean https)
throws java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static java.lang.String getTransportCert(java.net.URI secdomainURI,
java.net.URI kraUri)
throws java.io.IOException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void getSharedSecret(java.lang.String tksHost,
int tksPort,
boolean importKey)
throws EPropertyNotFound,
EBaseException,
java.net.URISyntaxException
EPropertyNotFoundEBaseExceptionjava.net.URISyntaxExceptionpublic static void importCACertToOCSP()
throws java.io.IOException,
EBaseException,
java.security.cert.CertificateEncodingException
java.io.IOExceptionEBaseExceptionjava.security.cert.CertificateEncodingExceptionpublic static void updateOCSPConfig()
throws java.io.IOException,
EBaseException,
org.xml.sax.SAXException,
javax.xml.parsers.ParserConfigurationException
java.io.IOExceptionEBaseExceptionorg.xml.sax.SAXExceptionjavax.xml.parsers.ParserConfigurationExceptionpublic static void setupDBUser()
throws java.security.cert.CertificateException,
netscape.ldap.LDAPException,
EBaseException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.ObjectNotFoundException,
org.mozilla.jss.crypto.TokenException,
java.io.IOException
java.security.cert.CertificateExceptionnetscape.ldap.LDAPExceptionEBaseExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.ObjectNotFoundExceptionorg.mozilla.jss.crypto.TokenExceptionjava.io.IOExceptionpublic static void addProfilesToTPSUser(java.lang.String adminID)
throws EUsrGrpException,
netscape.ldap.LDAPException
EUsrGrpExceptionnetscape.ldap.LDAPExceptionpublic static void registerUser(java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String targetType)
throws java.lang.Exception
java.lang.Exceptionpublic static void exportTransportCert(java.net.URI secdomainURI,
java.net.URI targetURI,
java.lang.String transportCert)
throws java.lang.Exception
java.lang.Exceptionpublic static void removeOldDBUsers(java.lang.String subjectDN)
throws EBaseException,
netscape.ldap.LDAPException
EBaseExceptionnetscape.ldap.LDAPExceptionpublic static java.lang.String getSubsystemCert()
throws EBaseException,
org.mozilla.jss.CryptoManager.NotInitializedException,
org.mozilla.jss.crypto.ObjectNotFoundException,
org.mozilla.jss.crypto.TokenException,
java.security.cert.CertificateEncodingException,
java.io.IOException
EBaseExceptionorg.mozilla.jss.CryptoManager.NotInitializedExceptionorg.mozilla.jss.crypto.ObjectNotFoundExceptionorg.mozilla.jss.crypto.TokenExceptionjava.security.cert.CertificateEncodingExceptionjava.io.IOExceptionpublic static void updateAuthdbInfo(java.lang.String basedn,
java.lang.String host,
java.lang.String port,
java.lang.String secureConn)
public static void updateNextRanges()
throws EBaseException,
netscape.ldap.LDAPException
EBaseExceptionnetscape.ldap.LDAPExceptionpublic static void removePreopConfigEntries()
throws EBaseException
EBaseException