1 files changed, 261 insertions, 12 deletions
diff --git a/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/tsl/connector/TSLConnector.java b/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/tsl/connector/TSLConnector.java
index 2e4af2817..07da0a998 100644
--- a/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/tsl/connector/TSLConnector.java
+++ b/spss/server/serverlib/src/main/java/at/gv/egovernment/moa/spss/tsl/connector/TSLConnector.java
@@ -83,28 +83,277 @@ public class TSLConnector implements TSLConnectorInterface {
 		return updateAndGetQualifiedCACertificates(dateTime, null, serviceLevelStatus);
 	}
 	
+	public void updateTSLs(Date dateTime,
+			String[] serviceLevelStatus) throws TSLEngineDiedException, TSLSearchException {
+		
+		if (Configurator.is_isInitialised() == false)
+			new TSLEngineFatalException("The TSL Engine is not initialized!");
+		
+		updateTSLs(dateTime, null, serviceLevelStatus);
+	}
+	
 	public ArrayList<File> updateAndGetQualifiedCACertificates(Date dateTime,
 			String[] countries, String[] serviceLevelStatus) throws TSLEngineDiedException, TSLSearchException {
 		
 		if (Configurator.is_isInitialised() == false)
 			new TSLEngineFatalException("The TSL Engine is not initialized!");
+
+		String tsldownloaddir = Configurator.get_TSLWorkingDirectoryPath() + "TslDownload";
+		
+//		String hashcachedir = System.getProperty("iaik.xml.crypto.tsl.BinaryHashCache.DIR");
+//		System.out.println("hashcachedir: " + hashcachedir);
+//		if (hashcachedir==null)
+//			hashcachedir = DEFAULT_HASHCACHE_DIR;
+
+//		File hashcachefile = new File(hashcachedir);
+//		File[] filelist = hashcachefile.listFiles();
+//		if (filelist != null) {
+//			for (File f : filelist)
+//				f.delete();
+//		}
 	
-		//TODO: clean hascash and TLS Download folder	
-		String hashcachedir = System.getProperty("iaik.xml.crypto.tsl.BinaryHashCache.DIR");
+		File tsldownloadfile = new File(tsldownloaddir);
+		if (!tsldownloadfile.exists()) {
+			tsldownloadfile.mkdir();
+		}
+		File[] tslfilelist = tsldownloadfile.listFiles();
+		if (tslfilelist != null) {
+			for (File f : tslfilelist)
+				f.delete();
+		}
 		
-		if (hashcachedir==null)
-			hashcachedir = DEFAULT_HASHCACHE_DIR;
-				
-		String tsldownloaddir = Configurator.get_TSLWorkingDirectoryPath() + "TslDownload";
+		//create sqlLite database
+		File dbFile = new File(Configurator.get_TempdbFile());
+		try {
+			dbFile.delete();
+			dbFile.createNewFile();
+		} catch (IOException e) {
+			throw new TSLEngineDiedException("Could not create temporary data base file", e);
+		}
+		
+		//the TSL library uses the iaik.util.logging environment.
+		//iaik.util.logging.Log.setLogLevel(iaik.util.logging.LogLevels.WARN);
+		iaik.util.logging.Log.setLogLevel(iaik.util.logging.LogLevels.OFF);
+		
+		log.info("Starting EU TSL import.");
+
+		// Certificates in Germany, Estonia, Greece, Cyprus,
+		// Lithuainia, Hungary, Poland, Finland, Norway use SURNAME
+		log.debug("### SURNAME registered as " + ObjectID.surName + " ###");
+		RFC2253NameParser.register("SURNAME", ObjectID.surName);
+
+		XSecProvider.addAsProvider(false);
+
+		TSLEngine tslEngine;
+		TslSqlConnectionWrapper connection = null;
+
+		try {
+			// register the Https JSSE Wrapper
+			TLS.register();
+			log.trace("### Https JSSE Wrapper registered ###");
+			
+
+			log.debug("### Connect to Database.###");
+			connection = DbTables.connectToDatabaBase(dbFile, MODE.AUTO_COMMIT_ON);
+
+			log.trace("### Connected ###");
+
+			// empty the database and recreate the tables
+			tslEngine = new TSLEngine(dbFile, Configurator.get_TSLWorkingDirectoryPath(), 
+					connection, true, true);
+			
+		} catch (TSLEngineFatalException e1) {
+			throw new TSLEngineDiedException(e1);
+			
+		}
+
+		// H.2.2.1 Same-scheme searching
+		// H.2.2.2 Known scheme searching
+		// H.2.2.3 "Blind" (unknown) scheme searching
+		Number tId = null;
+		Countries euTerritory = Countries.EU;
+		TSLImportContext topLevelTslContext = new TSLEUImportFromFileContext(
+			euTerritory, Configurator.get_euTSLURL(), Configurator.get_TSLWorkingDirectoryPath(), 
+			Configurator.is_sqlMultithreaded(), 
+			Configurator.is_throwExceptions(), Configurator.is_logExceptions(), 
+			Configurator.is_throwWarnings(), Configurator.is_logWarnings(), 
+			Configurator.is_nullRedundancies());
+
+		TSLEngineEU tslengineEU;
+		try {
+			tslengineEU = tslEngine.new TSLEngineEU();
+			
+		} catch (TSLEngineFatalException e1) {
+			throw new TSLEngineDiedException(e1);
+		}
+
+		// establish EU TSL trust anchor
+		ListIterator<java.security.cert.X509Certificate> expectedEuTslSignerCerts =
+			tslEngine.loadCertificatesFromResource(
+			Configurator.get_euTrustAnchorsPath(), topLevelTslContext);
+
+		log.debug("Process EU TSL");
+		// process the EU TSL to receive the pointers to the other TSLs
+		// and the trust anchors for the TSL signers
+		Set<Entry<Number, LocationAndCertHash>> pointersToMsTSLs = null;
 		
-		File hashcachefile = new File(hashcachedir);
+		try {
+			
+			tId = tslengineEU.processEUTSL(topLevelTslContext, expectedEuTslSignerCerts);
+			log.info("Process EU TSL finished");
+			
+			log.debug(Thread.currentThread() + " waiting for other threads ...");
+			
+			topLevelTslContext.waitForAllOtherThreads();
+			log.debug(Thread.currentThread()
+				+ " reactivated after other threads finished ...");
+
+
+			// get the TSLs pointed from the EU TSL
+			LinkedHashMap<Number, LocationAndCertHash> tslMap = tslengineEU
+				.getOtherTslMap(tId, topLevelTslContext);
+
+			pointersToMsTSLs = tslMap.entrySet();
+			
+			//set Errors and Warrnings
+			
+		} catch (TSLEngineFatalRuntimeException e) {
+			throw new TSLEngineDiedException(topLevelTslContext.dumpFatals());
+			
+		} catch (TSLTransactionFailedRuntimeException e) {
+			throw new TSLEngineDiedException(topLevelTslContext.dumpTransactionFaliures());
+		}
+
+		//Backup implementation if the EU TSL includes a false signer certificate 
+		// establish additional trust anchors for member states
+//			Countries[] countriesWithPotentiallyWrongCertsOnEuTsl = {
+//				Countries.CZ,
+//				Countries.LU,
+//				Countries.ES,
+//				Countries.AT,
+//			};
+		Countries[] countriesWithPotentiallyWrongCertsOnEuTsl = {};
+
+		Map<Countries, java.util.ListIterator<java.security.cert.X509Certificate>>
+			trustAnchorsWrongOnEuTsl = loadCertificatesFromResource(
+					Configurator.get_msTrustAnchorsPath(), tslEngine, topLevelTslContext,
+					countriesWithPotentiallyWrongCertsOnEuTsl);
+
+		log.info("Starting EU member TSL import.");
+		
+		for (Entry<Number, LocationAndCertHash> entry : pointersToMsTSLs) {
+
+			TSLImportContext msTslContext;
+			
+			Countries expectedTerritory = entry.getValue().getSchemeTerritory();
+			try {
+				
+//				if (expectedTerritory.equals("RO"))
+//					System.out.println("Stop");
 				
+				Number otpId = entry.getKey();
+				LocationAndCertHash lac = entry.getValue();
+
+				URL uriReference = null;
+				try {
+					uriReference = new URL(lac.getUrl());
+					
+				} catch (MalformedURLException e) {
+					log.warn("Could not process: " + uriReference, e);
+					continue;
+				}
+
+				String baseURI = uriReference == null ? "" : "" + uriReference;
+
+				msTslContext = new TSLImportFromFileContext(
+					expectedTerritory, uriReference, otpId, Configurator.get_TSLWorkingDirectoryPath(),
+					Configurator.is_sqlMultithreaded(),
+					Configurator.is_throwExceptions(), Configurator.is_logExceptions(), 
+					Configurator.is_throwWarnings(), Configurator.is_logWarnings(), 
+					Configurator.is_nullRedundancies(), baseURI, trustAnchorsWrongOnEuTsl, 
+					topLevelTslContext);
+
+				ListIterator<X509Certificate> expectedTslSignerCerts = null;
+				expectedTslSignerCerts = tslEngine.getCertificates(lac, msTslContext);
+
+				if (expectedTslSignerCerts == null) {
+					
+					// no signer certificate on the EU TSL
+					// ignore this msTSL and log a warning
+					log.warn("NO signer certificate found on EU TSL! " 
+							+ lac.getSchemeTerritory() + "TSL ignored.");
+					
+				}
+				else {
+					tslEngine.processMSTSL(topLevelTslContext, msTslContext, expectedTslSignerCerts);
+				}
+				
+			} catch (TSLExceptionB e) {
+				log.warn("Failed to process TSL. " + entry.getValue().getSchemeTerritory() 
+						+ " TSL ignored.");
+				log.debug("Failed to process TSL. " + entry, e);
+				continue;
+			} catch (TSLRuntimeException e) {
+				log.warn("Failed to process TSL. " + entry.getValue().getSchemeTerritory()
+						+ " TSL ignored.");
+				log.debug("Failed to process TSL. " + entry, e);
+				continue;
+			}				
+		}
+				
+		log.debug(Thread.currentThread() + " waiting for other threads ...");
+		topLevelTslContext.waitForAllOtherThreads();
+
+		log.debug(_.dumpAllThreads());
+		log.debug(Thread.currentThread() + " reactivated after other threads finished ...");
+		
+		connection = null;
+		try {
+			connection = DbTables.connectToDatabaBase(dbFile, MODE.AUTO_COMMIT_ON);				
+			tslEngine.recreateTablesInvalidatedByImport(connection);
 			
-		File[] filelist = hashcachefile.listFiles();
-		if (filelist != null) {
-			for (File f : filelist)
-				f.delete();
+			
+			//TODO: implement database copy operation!
+			File working_database = new File(Configurator.get_dbFile());
+			working_database.delete();
+			copy(dbFile, working_database);
+
+			
+		} catch (TSLEngineFatalException e) {
+			throw new TSLEngineDiedException(e);
+			
+		} finally {
+			try {
+				connection.closeConnection();
+				
+			} catch (TSLEngineFatalException e) {
+				throw new TSLEngineDiedException(e);
+				
+			}
 		}
+		
+		return getQualifiedCACertificates(dateTime, countries, serviceLevelStatus);
+	}
+
+	public void updateTSLs(Date dateTime,
+			String[] countries, String[] serviceLevelStatus) throws TSLEngineDiedException, TSLSearchException {
+		
+		if (Configurator.is_isInitialised() == false)
+			new TSLEngineFatalException("The TSL Engine is not initialized!");
+
+		String tsldownloaddir = Configurator.get_TSLWorkingDirectoryPath() + "TslDownload";
+		
+//		String hashcachedir = System.getProperty("iaik.xml.crypto.tsl.BinaryHashCache.DIR");
+//		System.out.println("hashcachedir: " + hashcachedir);
+//		if (hashcachedir==null)
+//			hashcachedir = DEFAULT_HASHCACHE_DIR;
+
+//		File hashcachefile = new File(hashcachedir);
+//		File[] filelist = hashcachefile.listFiles();
+//		if (filelist != null) {
+//			for (File f : filelist)
+//				f.delete();
+//		}
 	
 		File tsldownloadfile = new File(tsldownloaddir);
 		if (!tsldownloadfile.exists()) {
@@ -326,7 +575,7 @@ public class TSLConnector implements TSLConnectorInterface {
 			}
 		}
 		
-		return getQualifiedCACertificates(dateTime, countries, serviceLevelStatus);
+		//return getQualifiedCACertificates(dateTime, countries, serviceLevelStatus);
 	}
 
 	public ArrayList<File> getQualifiedCACertificates(Date dateTime,