Package de.trustable.ca3s.core.service.util

Class PipelineUtil

java.lang.Object

de.trustable.ca3s.core.service.util.PipelineUtil

@Service
public class PipelineUtil
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static String	ACME_ALLOW_CHALLENGE_ALPN
static String	ACME_ALLOW_CHALLENGE_DNS
static String	ACME_ALLOW_CHALLENGE_HTTP01
static String	ACME_ALLOW_CHALLENGE_WILDCARDS
static String	ACME_CHECK_CAA
static String	ACME_NAME_CAA
static String	ACME_ORDER_VALIDITY_SECONDS
static String	ACME_PROCESS_ACCOUNT_VALIDATION
static String	ACME_PROCESS_CHALLENGE_VALIDATION
static String	ACME_PROCESS_ORDER_VALIDATION
static String	ADDITIONAL_EMAIL_RECIPIENTS
static String	ALLOW_IP_AS_SAN
static String	ALLOW_IP_AS_SUBJECT
static String	CSR_USAGE
static String	DOMAIN_RA_OFFICER
static String	LIST_ORDER
static String	NOTIFY_RA_OFFICER_ON_PENDING
static String	RESTR_ARA_COMMENT
static String	RESTR_ARA_NAME
static String	RESTR_ARA_PATTERN
static String	RESTR_ARA_PREFIX
static String	RESTR_ARA_REGEX
static String	RESTR_ARA_REGEXMATCH
static String	RESTR_ARA_REQUIRED
static String	RESTR_ARA_TEMPLATE
static String	RESTR_C_CARDINALITY
static String	RESTR_C_REGEX
static String	RESTR_C_REGEXMATCH
static String	RESTR_C_TEMPLATE
static String	RESTR_CN_CARDINALITY
static String	RESTR_CN_REGEX
static String	RESTR_CN_REGEXMATCH
static String	RESTR_CN_TEMPLATE
static String	RESTR_E_CARDINALITY
static String	RESTR_E_REGEX
static String	RESTR_E_REGEXMATCH
static String	RESTR_E_TEMPLATE
static String	RESTR_L_CARDINALITY
static String	RESTR_L_REGEX
static String	RESTR_L_REGEXMATCH
static String	RESTR_L_TEMPLATE
static String	RESTR_O_CARDINALITY
static String	RESTR_O_REGEX
static String	RESTR_O_REGEXMATCH
static String	RESTR_O_TEMPLATE
static String	RESTR_OU_CARDINALITY
static String	RESTR_OU_REGEX
static String	RESTR_OU_REGEXMATCH
static String	RESTR_OU_TEMPLATE
static String	RESTR_S_CARDINALITY
static String	RESTR_S_REGEX
static String	RESTR_S_REGEXMATCH
static String	RESTR_S_TEMPLATE
static String	RESTR_SAN_CARDINALITY
static String	RESTR_SAN_REGEX
static String	RESTR_SAN_REGEXMATCH
static String	RESTR_SAN_TEMPLATE
static String	SCEP_CA_CONNECTOR_RECIPIENT_NAME
static String	SCEP_CAPABILITY_POST
static String	SCEP_CAPABILITY_RENEWAL
static String	SCEP_RECIPIENT_DN
static String	SCEP_RECIPIENT_KEY_TYPE_LEN
static String	SCEP_SECRET
static String	SCEP_SECRET_PC_ID
static String	SCEP_SECRET_VALID_TO
static String	TO_PENDIND_ON_FAILED_RESTRICTIONS

Constructor Summary

Constructors

Constructor

Description

PipelineUtil(CertificateRepository certRepository, CSRRepository csrRepository, CAConnectorConfigRepository caConnRepository, PipelineRepository pipelineRepository, PipelineAttributeRepository pipelineAttRepository, BPMNProcessInfoRepository bpmnPIRepository, ProtectedContentRepository protectedContentRepository, ProtectedContentUtil protectedContentUtil, PreferenceUtil preferenceUtil, CertificateUtil certUtil, ConfigUtil configUtil, AuditService auditService, AuditTraceRepository auditTraceRepository, TenantRepository tenantRepository, RequestProxyConfigRepository requestProxyConfigRepository, String defaultKeySpec)

Method Summary

Modifier and Type	Method	Description
void	addPipelineAttribute(Set<PipelineAttribute> pipelineAttributes, Pipeline p, List<AuditTrace> auditList, String name, Boolean value)
void	addPipelineAttribute(Set<PipelineAttribute> pipelineAttributes, Pipeline p, List<AuditTrace> auditList, String name, String value)
PipelineView	from(Pipeline pipeline)
Boolean	getPipelineAttribute(Pipeline pipeline, String name, boolean defaultValue)
int	getPipelineAttribute(Pipeline pipeline, String name, int defaultValue)
String	getPipelineAttribute(Pipeline pipeline, String name, String defaultValue)
Pipeline	getPipelineByRealm(PipelineType pipelineType, String realm)
Certificate	getSCEPRecipientCertificate(Pipeline pipeline, CertificateProcessingUtil cpUtil)
@NotNull ARARestriction[]	initAraRestrictions(Pipeline pipeline)
boolean	isAlgorithmRestrictionsResolved(PipelineView pv, de.trustable.util.Pkcs10RequestHolder p10ReqHolder, List<String> messageList)
boolean	isPipelineAdditionalRestrictionsResolved(ARARestriction[] araRestrictions, NamedValues[] nvARArr, List<String> messageList)
boolean	isPipelineRestrictionsResolved(Pipeline p, de.trustable.util.Pkcs10RequestHolder p10ReqHolder, NamedValues[] nvARArr, List<String> messageList)
boolean	isPipelineRestrictionsResolved(Pipeline p, de.trustable.util.Pkcs10RequestHolder p10ReqHolder, List<String> messageList)
boolean	isPipelineRestrictionsResolved(PipelineView pv, de.trustable.util.Pkcs10RequestHolder p10ReqHolder, List<String> messageList)
boolean	isUserValidAsRA(Pipeline pipeline, User user)
void	setPipelineAttribute(Pipeline pipeline, String name, String value)
Pipeline	toPipeline(PipelineView pv)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

RESTR_C_CARDINALITY

public static final String RESTR_C_CARDINALITY

See Also:

Constant Field Values

RESTR_C_TEMPLATE

public static final String RESTR_C_TEMPLATE

See Also:

Constant Field Values

RESTR_C_REGEXMATCH

public static final String RESTR_C_REGEXMATCH

See Also:

Constant Field Values

RESTR_C_REGEX

public static final String RESTR_C_REGEX

See Also:

Constant Field Values

RESTR_CN_CARDINALITY

public static final String RESTR_CN_CARDINALITY

See Also:

Constant Field Values

RESTR_CN_TEMPLATE

public static final String RESTR_CN_TEMPLATE

See Also:

Constant Field Values

RESTR_CN_REGEXMATCH

public static final String RESTR_CN_REGEXMATCH

See Also:

Constant Field Values

RESTR_CN_REGEX

public static final String RESTR_CN_REGEX

See Also:

Constant Field Values

RESTR_O_CARDINALITY

public static final String RESTR_O_CARDINALITY

See Also:

Constant Field Values

RESTR_O_TEMPLATE

public static final String RESTR_O_TEMPLATE

See Also:

Constant Field Values

RESTR_O_REGEXMATCH

public static final String RESTR_O_REGEXMATCH

See Also:

Constant Field Values

RESTR_O_REGEX

public static final String RESTR_O_REGEX

See Also:

Constant Field Values

RESTR_OU_CARDINALITY

public static final String RESTR_OU_CARDINALITY

See Also:

Constant Field Values

RESTR_OU_TEMPLATE

public static final String RESTR_OU_TEMPLATE

See Also:

Constant Field Values

RESTR_OU_REGEXMATCH

public static final String RESTR_OU_REGEXMATCH

See Also:

Constant Field Values

RESTR_OU_REGEX

public static final String RESTR_OU_REGEX

See Also:

Constant Field Values

RESTR_L_CARDINALITY

public static final String RESTR_L_CARDINALITY

See Also:

Constant Field Values

RESTR_L_TEMPLATE

public static final String RESTR_L_TEMPLATE

See Also:

Constant Field Values

RESTR_L_REGEXMATCH

public static final String RESTR_L_REGEXMATCH

See Also:

Constant Field Values

RESTR_L_REGEX

public static final String RESTR_L_REGEX

See Also:

Constant Field Values

RESTR_S_CARDINALITY

public static final String RESTR_S_CARDINALITY

See Also:

Constant Field Values

RESTR_S_TEMPLATE

public static final String RESTR_S_TEMPLATE

See Also:

Constant Field Values

RESTR_S_REGEXMATCH

public static final String RESTR_S_REGEXMATCH

See Also:

Constant Field Values

RESTR_S_REGEX

public static final String RESTR_S_REGEX

See Also:

Constant Field Values

RESTR_E_CARDINALITY

public static final String RESTR_E_CARDINALITY

See Also:

Constant Field Values

RESTR_E_TEMPLATE

public static final String RESTR_E_TEMPLATE

See Also:

Constant Field Values

RESTR_E_REGEXMATCH

public static final String RESTR_E_REGEXMATCH

See Also:

Constant Field Values

RESTR_E_REGEX

public static final String RESTR_E_REGEX

See Also:

Constant Field Values

RESTR_SAN_CARDINALITY

public static final String RESTR_SAN_CARDINALITY

See Also:

Constant Field Values

RESTR_SAN_TEMPLATE

public static final String RESTR_SAN_TEMPLATE

See Also:

Constant Field Values

RESTR_SAN_REGEXMATCH

public static final String RESTR_SAN_REGEXMATCH

See Also:

Constant Field Values

RESTR_SAN_REGEX

public static final String RESTR_SAN_REGEX

See Also:

Constant Field Values

RESTR_ARA_PREFIX

public static final String RESTR_ARA_PREFIX

See Also:

Constant Field Values

RESTR_ARA_PATTERN

public static final String RESTR_ARA_PATTERN

See Also:

Constant Field Values

RESTR_ARA_NAME

public static final String RESTR_ARA_NAME

See Also:

Constant Field Values

RESTR_ARA_TEMPLATE

public static final String RESTR_ARA_TEMPLATE

See Also:

Constant Field Values

RESTR_ARA_REGEX

public static final String RESTR_ARA_REGEX

See Also:

Constant Field Values

RESTR_ARA_REGEXMATCH

public static final String RESTR_ARA_REGEXMATCH

See Also:

Constant Field Values

RESTR_ARA_REQUIRED

public static final String RESTR_ARA_REQUIRED

See Also:

Constant Field Values

RESTR_ARA_COMMENT

public static final String RESTR_ARA_COMMENT

See Also:

Constant Field Values

ALLOW_IP_AS_SUBJECT

public static final String ALLOW_IP_AS_SUBJECT

See Also:

Constant Field Values

ALLOW_IP_AS_SAN

public static final String ALLOW_IP_AS_SAN

See Also:

Constant Field Values

TO_PENDIND_ON_FAILED_RESTRICTIONS

public static final String TO_PENDIND_ON_FAILED_RESTRICTIONS

See Also:

Constant Field Values

DOMAIN_RA_OFFICER

public static final String DOMAIN_RA_OFFICER

See Also:

Constant Field Values

NOTIFY_RA_OFFICER_ON_PENDING

public static final String NOTIFY_RA_OFFICER_ON_PENDING

See Also:

Constant Field Values

ADDITIONAL_EMAIL_RECIPIENTS

public static final String ADDITIONAL_EMAIL_RECIPIENTS

See Also:

Constant Field Values

ACME_ALLOW_CHALLENGE_HTTP01

public static final String ACME_ALLOW_CHALLENGE_HTTP01

See Also:

Constant Field Values

ACME_ALLOW_CHALLENGE_ALPN

public static final String ACME_ALLOW_CHALLENGE_ALPN

See Also:

Constant Field Values

ACME_ALLOW_CHALLENGE_DNS

public static final String ACME_ALLOW_CHALLENGE_DNS

See Also:

Constant Field Values

ACME_ALLOW_CHALLENGE_WILDCARDS

public static final String ACME_ALLOW_CHALLENGE_WILDCARDS

See Also:

Constant Field Values

ACME_CHECK_CAA

public static final String ACME_CHECK_CAA

See Also:

Constant Field Values

ACME_NAME_CAA

public static final String ACME_NAME_CAA

See Also:

Constant Field Values

CSR_USAGE

public static final String CSR_USAGE

See Also:

Constant Field Values

LIST_ORDER

public static final String LIST_ORDER

See Also:

Constant Field Values

ACME_PROCESS_ACCOUNT_VALIDATION

public static final String ACME_PROCESS_ACCOUNT_VALIDATION

See Also:

Constant Field Values

ACME_PROCESS_ORDER_VALIDATION

public static final String ACME_PROCESS_ORDER_VALIDATION

See Also:

Constant Field Values

ACME_PROCESS_CHALLENGE_VALIDATION

public static final String ACME_PROCESS_CHALLENGE_VALIDATION

See Also:

Constant Field Values

ACME_ORDER_VALIDITY_SECONDS

public static final String ACME_ORDER_VALIDITY_SECONDS

See Also:

Constant Field Values

SCEP_CAPABILITY_RENEWAL

public static final String SCEP_CAPABILITY_RENEWAL

See Also:

Constant Field Values

SCEP_CAPABILITY_POST

public static final String SCEP_CAPABILITY_POST

See Also:

Constant Field Values

SCEP_SECRET

public static final String SCEP_SECRET

See Also:

Constant Field Values

SCEP_SECRET_VALID_TO

public static final String SCEP_SECRET_VALID_TO

See Also:

Constant Field Values

SCEP_SECRET_PC_ID

public static final String SCEP_SECRET_PC_ID

See Also:

Constant Field Values

SCEP_RECIPIENT_DN

public static final String SCEP_RECIPIENT_DN

See Also:

Constant Field Values

SCEP_RECIPIENT_KEY_TYPE_LEN

public static final String SCEP_RECIPIENT_KEY_TYPE_LEN

See Also:

Constant Field Values

SCEP_CA_CONNECTOR_RECIPIENT_NAME

public static final String SCEP_CA_CONNECTOR_RECIPIENT_NAME

See Also:

Constant Field Values

Constructor Detail

PipelineUtil

public PipelineUtil(CertificateRepository certRepository,
                    CSRRepository csrRepository,
                    CAConnectorConfigRepository caConnRepository,
                    PipelineRepository pipelineRepository,
                    PipelineAttributeRepository pipelineAttRepository,
                    BPMNProcessInfoRepository bpmnPIRepository,
                    ProtectedContentRepository protectedContentRepository,
                    ProtectedContentUtil protectedContentUtil,
                    PreferenceUtil preferenceUtil,
                    CertificateUtil certUtil,
                    ConfigUtil configUtil,
                    AuditService auditService,
                    AuditTraceRepository auditTraceRepository,
                    TenantRepository tenantRepository,
                    RequestProxyConfigRepository requestProxyConfigRepository,
                    @Value("${ca3s.keyspec.default:RSA_4096}")
                    String defaultKeySpec)

Method Detail

from

public PipelineView from(Pipeline pipeline)

initAraRestrictions

@NotNull
public @NotNull ARARestriction[] initAraRestrictions(Pipeline pipeline)

toPipeline

public Pipeline toPipeline(PipelineView pv)

Parameters:

pv -

Returns:

addPipelineAttribute

public void addPipelineAttribute(Set<PipelineAttribute> pipelineAttributes,
                                 Pipeline p,
                                 List<AuditTrace> auditList,
                                 String name,
                                 Boolean value)

addPipelineAttribute

public void addPipelineAttribute(Set<PipelineAttribute> pipelineAttributes,
                                 Pipeline p,
                                 List<AuditTrace> auditList,
                                 String name,
                                 String value)

isPipelineRestrictionsResolved

public boolean isPipelineRestrictionsResolved(Pipeline p,
                                              de.trustable.util.Pkcs10RequestHolder p10ReqHolder,
                                              NamedValues[] nvARArr,
                                              List<String> messageList)

isPipelineRestrictionsResolved

public boolean isPipelineRestrictionsResolved(Pipeline p,
                                              de.trustable.util.Pkcs10RequestHolder p10ReqHolder,
                                              List<String> messageList)

isPipelineAdditionalRestrictionsResolved

public boolean isPipelineAdditionalRestrictionsResolved(ARARestriction[] araRestrictions,
                                                        NamedValues[] nvARArr,
                                                        List<String> messageList)

isPipelineRestrictionsResolved

public boolean isPipelineRestrictionsResolved(PipelineView pv,
                                              de.trustable.util.Pkcs10RequestHolder p10ReqHolder,
                                              List<String> messageList)

isAlgorithmRestrictionsResolved

public boolean isAlgorithmRestrictionsResolved(PipelineView pv,
                                               de.trustable.util.Pkcs10RequestHolder p10ReqHolder,
                                               List<String> messageList)

setPipelineAttribute

public void setPipelineAttribute(Pipeline pipeline,
                                 String name,
                                 String value)

getPipelineAttribute

public String getPipelineAttribute(Pipeline pipeline,
                                   String name,
                                   String defaultValue)

getPipelineAttribute

public int getPipelineAttribute(Pipeline pipeline,
                                String name,
                                int defaultValue)

getPipelineAttribute

public Boolean getPipelineAttribute(Pipeline pipeline,
                                    String name,
                                    boolean defaultValue)

getSCEPRecipientCertificate

public Certificate getSCEPRecipientCertificate(Pipeline pipeline,
                                               CertificateProcessingUtil cpUtil)
                                        throws IOException,
                                               GeneralSecurityException

Throws:

IOException

GeneralSecurityException

getPipelineByRealm

public Pipeline getPipelineByRealm(PipelineType pipelineType,
                                   String realm)

isUserValidAsRA

public boolean isUserValidAsRA(Pipeline pipeline,
                               User user)