1 files changed, 235 insertions, 0 deletions
diff --git a/bkucommon/src/main/java/at/gv/egiz/bku/spring/PKIProfileFactoryBean.java b/bkucommon/src/main/java/at/gv/egiz/bku/spring/PKIProfileFactoryBean.java
new file mode 100644
index 00000000..97a0d872
--- /dev/null
+++ b/bkucommon/src/main/java/at/gv/egiz/bku/spring/PKIProfileFactoryBean.java
@@ -0,0 +1,235 @@
+/*
+* Copyright 2009 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package at.gv.egiz.bku.spring;
+
+import iaik.logging.LogConfigurationException;
+import iaik.logging.LoggerConfig;
+import iaik.logging.impl.TransactionIdImpl;
+import iaik.pki.DefaultPKIConfiguration;
+import iaik.pki.DefaultPKIProfile;
+import iaik.pki.PKIException;
+import iaik.pki.PKIFactory;
+import iaik.pki.PKIProfile;
+import iaik.pki.revocation.RevocationSourceTypes;
+import iaik.pki.store.certstore.CertStoreParameters;
+import iaik.pki.store.certstore.directory.DefaultDirectoryCertStoreParameters;
+import iaik.pki.store.truststore.DefaultTrustStoreProfile;
+import iaik.pki.store.truststore.TrustStoreProfile;
+import iaik.pki.store.truststore.TrustStoreTypes;
+
+import java.io.File;
+import java.io.IOException;
+import java.net.MalformedURLException;
+import java.net.URL;
+import java.util.Properties;
+
+import org.apache.commons.configuration.CompositeConfiguration;
+import org.apache.commons.configuration.Configuration;
+import org.apache.commons.configuration.FileConfiguration;
+import org.springframework.beans.factory.FactoryBean;
+import org.springframework.context.ResourceLoaderAware;
+import org.springframework.core.io.Resource;
+import org.springframework.core.io.ResourceLoader;
+
+import at.gv.egiz.bku.conf.IAIKLogAdapterFactory;
+import at.gv.egiz.bku.conf.MoccaConfigurationFacade;
+
+public class PKIProfileFactoryBean implements FactoryBean, ResourceLoaderAware {
+
+  /**
+   * The configuration facade.
+   */
+  protected final ConfigurationFacade configurationFacade = new ConfigurationFacade();
+
+  public class ConfigurationFacade implements MoccaConfigurationFacade {
+    
+    private Configuration configuration;
+    
+    public static final String SSL_CERT_DIRECTORY = "SSL.certDirectory";
+    
+    public static final String SSL_CERT_DIRECTORY_DEFAULT = "classpath:at/gv/egiz/bku/certs/certStore";
+    
+    public static final String SSL_CA_DIRECTORY = "SSL.caDirectory";
+    
+    public static final String SSL_CA_DIRECTORY_DEFAULT = "classpath:at/gv/egiz/bku/certs/trustStore";
+    
+    public URL getCertDirectory() throws MalformedURLException {
+      return getURL(SSL_CERT_DIRECTORY);
+    }
+    
+    public URL getCaDirectory() throws MalformedURLException {
+      return getURL(SSL_CA_DIRECTORY);
+    }
+    
+    private URL getURL(String key) throws MalformedURLException {
+      String url = configuration.getString(key);
+      if (url == null || url.isEmpty()) {
+        return null;
+      }
+      return new URL(getBasePath(key), configuration.getString(key));
+    }
+
+    private URL getBasePath(String key) {
+      Configuration configuration = this.configuration;
+      if (configuration instanceof CompositeConfiguration) {
+        CompositeConfiguration compositeConfiguration = (CompositeConfiguration) configuration;
+        for (int i = 0; i < compositeConfiguration.getNumberOfConfigurations(); i++) {
+          if (compositeConfiguration.getConfiguration(i).containsKey(key)) {
+            configuration = compositeConfiguration.getConfiguration(i);
+            break;
+          }
+        }
+      }
+      if (configuration instanceof FileConfiguration) {
+        return ((FileConfiguration) configuration).getURL();
+      }
+      return null;
+    }
+    
+  }
+
+  
+  private ResourceLoader resourceLoader;
+  
+  protected String trustProfileId;
+
+  @Override
+  public void setResourceLoader(ResourceLoader loader) {
+    this.resourceLoader = loader;
+  }
+  
+  /**
+   * @return the configuration
+   */
+  public Configuration getConfiguration() {
+    return configurationFacade.configuration;
+  }
+
+  /**
+   * @param configuration the configuration to set
+   */
+  public void setConfiguration(Configuration configuration) {
+    configurationFacade.configuration = configuration;
+  }
+
+  /**
+   * @return the trustProfileId
+   */
+  public String getTrustProfileId() {
+    return trustProfileId;
+  }
+
+  /**
+   * @param trustProfileId the trustProfileId to set
+   */
+  public void setTrustProfileId(String trustProfileId) {
+    this.trustProfileId = trustProfileId;
+  }
+
+  protected File getDirectory(String url) throws IOException {
+    Resource resource = resourceLoader.getResource(url);
+    File path = resource.getFile();
+    if (!path.exists() && !path.isDirectory()) {
+      throw new IOException("URL '" + url + "' is not a directory.");
+    }
+    return path;
+  }
+  
+  protected void configureIAIKLogging() {
+    // initialize IAIK logging for PKI module
+    iaik.logging.LogFactory.configure(new LoggerConfig() {
+      
+      @Override
+      public Properties getProperties() throws LogConfigurationException {
+        return null;
+      }
+      
+      @Override
+      public String getNodeId() {
+        return "pki";
+      }
+      
+      @Override
+      public String getFactory() {
+        return IAIKLogAdapterFactory.class.getName();
+      }
+    });
+  }
+  
+  protected void configurePkiFactory() throws MalformedURLException, PKIException, IOException {
+    
+    URL url = configurationFacade.getCertDirectory();
+    File certDirectory = (url != null) 
+        ? getDirectory(url.toString())
+        : getDirectory(ConfigurationFacade.SSL_CERT_DIRECTORY_DEFAULT);
+    
+    CertStoreParameters[] certStoreParameters = { new DefaultDirectoryCertStoreParameters(
+        "CS", certDirectory.getAbsolutePath(), true, false) };
+    
+    DefaultPKIConfiguration pkiConfiguration = new DefaultPKIConfiguration(certStoreParameters);
+  
+    
+    PKIFactory pkiFactory = PKIFactory.getInstance();
+    pkiFactory.configure(pkiConfiguration, new TransactionIdImpl("Configure-PKI"));
+  }
+
+  protected TrustStoreProfile createDirectoryTrustStoreProfile() throws MalformedURLException, IOException {
+    
+    URL url = configurationFacade.getCaDirectory();
+    File caDirectory = (url != null) 
+        ? getDirectory(url.toString())
+        : getDirectory(ConfigurationFacade.SSL_CA_DIRECTORY_DEFAULT);        
+    
+    return new DefaultTrustStoreProfile(trustProfileId,
+        TrustStoreTypes.DIRECTORY, caDirectory.getAbsolutePath());
+    
+  }
+  
+  @Override
+  public Object getObject() throws Exception {
+    
+    configureIAIKLogging();
+
+    PKIFactory pkiFactory = PKIFactory.getInstance();
+    
+    if (!pkiFactory.isAlreadyConfigured()) {
+      configurePkiFactory();
+    }
+
+    TrustStoreProfile trustProfile = createDirectoryTrustStoreProfile();
+
+    DefaultPKIProfile pkiProfile = new DefaultPKIProfile(trustProfile);
+    
+    pkiProfile.setAutoAddCertificates(true);
+    pkiProfile.setPreferredServiceOrder(new String[] {
+        RevocationSourceTypes.OCSP, RevocationSourceTypes.CRL });
+    
+    return pkiProfile;
+  }
+
+  @Override
+  public Class<?> getObjectType() {
+    return PKIProfile.class;
+  }
+
+  @Override
+  public boolean isSingleton() {
+    return false;
+  }
+  
+}