Changeset 451

Timestamp:

02/16/07 14:46:54 (2 years ago)

Author:

sacha

Message:

added first part of SSL support.
client and server side still hard coded parts.

Files:

• branches/branch-https-dev/src/hefeweizen_library_b2b_system.rb (modified) (8 diffs)
• branches/branch-https-dev/src/hefeweizen_library_business_logic.rb (modified) (2 diffs)
• branches/branch-https-dev/src/hefeweizen_library_cpa.rb (modified) (3 diffs)
• branches/branch-https-dev/src/hefeweizen_library_cpa_manager.rb (added)
• branches/branch-https-dev/src/hefeweizen_library_exchange_point.rb (modified) (4 diffs)
• branches/branch-https-dev/src/taskers/hefeweizen_tasker_application_http_server.rb (modified) (7 diffs)
• branches/branch-https-dev/src/taskers/hefeweizen_tasker_application_send_ebXML_message.rb (modified) (3 diffs)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_client_cert (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_client_cert/Coronation_ssl_client_cacert.pem (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_client_cert/Coronation_ssl_client_cacert.xml (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_client_cert/Coronation_ssl_client_private_key.password (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_client_cert/Coronation_ssl_client_private_key.pem (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_server_cert (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_server_cert/Coronation_ssl_server_cacert.pem (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_server_cert/Coronation_ssl_server_cacert.xml (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_server_cert/Coronation_ssl_server_private_key.password (added)
• branches/branch-https-dev/test/test-systems/Coronation/certificates/coronation_ssl_server_cert/Coronation_ssl_server_private_key.pem (added)
• branches/branch-https-dev/test/test-systems/Coronation/infrastructure/exchange-points/http_server.conf (modified) (1 diff)
• branches/branch-https-dev/test/test-systems/Coronation/trading_agreements/cpa_test_https.xml (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_client_cert (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_server_cert (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_server_cert/Gnaraloo_ssl_server_cacert.pem (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_server_cert/Gnaraloo_ssl_server_cacert.xml (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_server_cert/Gnaraloo_ssl_server_private_key.password (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_server_cert/Gnaraloo_ssl_server_private_key.pem (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_server_cert/hashed (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/certificates/gnaraloo_ssl_server_cert/hashed/Gnaraloo_ssl_server_cacert.pem (added)
• branches/branch-https-dev/test/test-systems/Gnaraloo/infrastructure/exchange-points/http_server.conf (modified) (1 diff)
• branches/branch-https-dev/test/test-systems/Gnaraloo/trading_agreements/cpa_test_https.xml (added)

branches/branch-https-dev/src/hefeweizen_library_b2b_system.rb

@@ -82 +82 @@
-      end
-
+      # passing all hard tasks to the business logic manager.
+      # returns:
+      # 1. boolean whether the command was processed
+      # 2. the command to send to ania, if there is a command, otherwise nil
+      def process_command transaction, command, command_hash
+        return @business_logic_manager.process_command( transaction, command, command_hash )
+      end
+
-      # This method can be used to check if the B2B system is ready to be started.
-      def ready?
@@ -155 +163 @@
-      end
-
-      def reload_parameters
-        temp = @parameters
-        @parameters = Hash.new
-        result = load_parameters
-        if result.nil? then
-          @logger.warn "#{me}: Error loading configuration. Keeping old parameters."
-          @parameters = temp
-          return false
-        else
-          @logger.info "#{me}: Successfully reloaded parameters of B2B system #{@system_name}."
-          temp = nil
-          return true
-        end
-      end
-      
-      def get_certificates_directory
-        @certs_dir
@@ -177 +170 @@
-        hash = Hash.new
-        path = "#{@certs_dir}/#{reference}"
-return false, "Reference cannot be found in director '#{@certs_dir}'."
-"#{path}/#{system_name}_cacert.pem"
-"#{path}/#{system_name}_private_key.pem"
-"#{path}/#{system_name}_private_key.password"
+(return false, "Reference cannot be found in director '#{@certs_dir}'.")
+Dir.glob("#{path}/#{system_name}*_cacert.pem").first
+Dir.glob("#{path}/#{system_name}*_private_key.pem").first
+Dir.glob("#{path}/#{system_name}*_private_key.password").first
-        
-        hash.each_pair{ | key, value |
-return false, "'#{key}' file does not exists in directory '#{@parth}'."
+(return false, "#{me}: File '#{key}' does not exists in directory '#{path}'.")
-        }
-        return hash
@@ -210 +203 @@
-      end
-
+      private
+
-      # Constructor to create a new B2B system.
-      def initialize system_path, big_ania, config
@@ -226 +221 @@
-        @certs_dir = "#{@system_path}/certificates"
-
-
+_manager
-        require @config['LIB_DIR'].strip + "/hefeweizen_library_business_logic"
-        
@@ -410 +405 @@
-
-      # This method reads the B2B system exchange points
-      # TODO
-      # - implementation
-      def load_exchange_points
-        exchange_points_dir = "#{@system_path}/infrastructure/exchange-points"
+        certs_dir = "#{@system_path}/certificates"
-        epoints = Array.new
-        if FileTest.exists?(exchange_points_dir) and FileTest.directory?(exchange_points_dir) \
@@ -429 +423 @@
-            conf_files.each{ | configuration_file |
-              begin
-
+certs_dir, 
-                epoints << epoint
-              rescue Exception => e
@@ -445 +439 @@
-      end
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-    end

branches/branch-https-dev/src/hefeweizen_library_business_logic.rb

@@ -465 +465 @@
-            return nil
-          end
-          
-          @logger.debug "#{me}: Successfully read the ebXML message info structure for ebXML message with id #{ebXML_message_id}."
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-          #          if ebMS_info['info']['doc-exchange-sender-non-repudiation'] == "CHANGE ME" then
-          if ebMS_info['info']['doc-exchange-sender-non-repudiation'] == "set" then
@@ -1391 +1412 @@
-          
-          # Seems like a transport error
-          
-          message = @transaction.is_resend_transaction? ? "ebXML_message_failed_to_technically_resend" : "ebXML_message_failed_to_technically_send"
-
+
+
-            @message_state_manager.send message, ebXML_message_id, File.read( @command_hash['transfer_info_path'] ) 
-          else
-
+ about failure. This could indicate that the send command had a wrong syntax
-          end
-          

branches/branch-https-dev/src/hefeweizen_library_cpa.rb

@@ -37 +37 @@
-  module HefeWeizenLibrary
-
-    # This class manages all CPA's of a B2B system.
-    
-    class CPAManager
-
-      def initialize party_name, party_ids, config, path_to_agreements
-        @party_name = party_name
-        @party_identities = party_ids
-        @config = config
-        @cpas_dir = path_to_agreements
-        @cpas = Hash.new
-        @logger = @config['LOGGER']
-        
-      end
-
-      def me
-        "CPAManager (#{@party_name})"
-      end
-
-      # This method loads the CPA's for this B2B system
-      # and keeps them in memory.
-      # there is the cpas hash
-      # Text info:
-      # a) for each cpa there will be a new hash.
-      # b) the cpa is added to the cpa key.
-      # c) each service/action combination is prepared with a hash value and a info hash
-      # Code info:
-      # a) cpas[cpa_id] = Hash.new
-      # b) cpas[cpa_id][cpa] = cpa
-      # c) cpas[cpa_id]['outgoing'][service_action_hash] = service_action_info :Hash
-      #      cpas[cpa_id]['outgoing'][service_action_hash]['from'] = from party name (not identitiy)
-      #      cpas[cpa_id]['outgoing'][service_action_hash]['to'] = to party name (not identitiy)
-      #      cpas[cpa_id]['outgoing'][service_action_hash]['service'] = service name
-      #      cpas[cpa_id]['outgoing'][service_action_hash]['action'] = action name
-      #      cpas[cpa_id]['outgoing'][service_action_hash] = service_action_info :Hash
-      # d) cpas[cpa_id]['outgoing'][service_action_hash]['info'] = info structure (includes Business Transactions, messaging Characteristics, Transport etc)
-      #    info structure also includes the from and to
-      #
-      # |
-      # --> the same for 'incoming'
-      def load_cpas
-        if FileTest.exists?(@cpas_dir) and FileTest.directory?(@cpas_dir) \
-          and FileTest.readable?(@cpas_dir) and FileTest.owned?(@cpas_dir) \
-          and FileTest.executable?(@cpas_dir) then
-          cpa_files = Dir.glob("#{@cpas_dir}/*.xml")
-          if cpa_files.nil? or cpa_files.empty? then
-            @logger.info "#{me}: There are no CPA's installed."
-            return @cpas
-          else
-            @logger.info "#{me}: There are #{cpa_files.size} @cpas installed. Loading each."
-            cpa_files.each{ | cpa_filename |
-              @logger.info "#{me}: Reading CPA #{cpa_filename}"
-              cpa = HefeWeizen::HefeWeizenLibrary::CPA.create(cpa_filename, @config)
-              if cpa.nil? then
-                @logger.error "#{me}: Error reading CPA (#{cpa_filename})"
-                return nil
-              else
-                if @cpas.has_key? cpa.id then
-                  @logger.error "#{me}: There is already a CPA with id #{cpa.id} loaded."
-                  @logger.error "#{me}: Second CPA with same ID has the filename #{cpa_filename}"
-                  @logger.error "#{me}: Not continuing. Please fix this first."
-                  return nil
-                else
-                  @cpas[cpa.id] = Hash.new
-                  @cpas[cpa.id]['cpa'] = cpa
-                  begin
-                    result = cpa.setup_all_ebMS_header_infos cpa.id, @party_name, @party_identities
-                    @cpas[cpa.id].merge! result
-                  rescue Exception => e
-                    @logger.error "#{me}: Unable to prepare CPA information structures: #{e.to_s}, #{e.backtrace}"
-                    @logger.error "#{me}: CPA with id #{cpa.id} is not installed into the system."
-                  end
-                  if result.nil? then
-                    @logger.error "#{me}: Unable to successfully read ebXML CPA."
-                  else
-                    @logger.info "#{me}: Loaded CPA #{cpa_filename} with id: #{cpa.id}"
-                  end
-                end
-              end
-            }
-          end
-        else
-          @logger.error "#{me}: Error accessing trading partner agreements directory (#{@cpas_dir}"
-          return nil
-        end
-        return @cpas
-      end
-
-      # This method determines if there is a CPA that matches the directive.
-      #
-      # TODO currently only outgoing. ? is this still true?
-      # TODO have a better validate! eg test non perMessage attributes are in the CPA and the directive sets such values.
-      def supports_directive? directive
-        return false if directive.nil?
-        @logger.debug "#{me}: looking for matching directive:"
-        @logger.debug "#{me}: directive hash value: #{directive.hash_value}"
-        error_message = ""
-        
-        if (@cpas[directive.cpaId].nil? or @cpas[directive.cpaId]['outgoing'][directive.hash_value].nil?) then
-          error_message = "#{me}: CPA does not support directive."
-          @logger.warn error_message
-          return false
-        else
-          @logger.debug "#{me}: CPA does support this directive. Further checking PartyIds."
-          # Checking Party Identities.
-          from_ok = true
-          to_ok = true
-          if !directive.fromPartyId.nil? and !directive.fromPartyIdType.nil? then
-            if !@cpas[directive.cpaId]['outgoing'][directive.hash_value]['info']['this_party_ids'].include?( { :type => directive.fromPartyIdType, :id => directive.fromPartyId } ) then
-              error_message = "#{me}: CPA with id '#{directive.cpaId}' does not list a party id of '#{directive.fromPartyId}' of type '#{directive.fromPartyIdType}' for the party '#{@cpas[directive.cpaId]['this_party_name']}'."
-              @logger.warn error_message
-              from_ok = false
-            end
-          end
-          if !directive.toPartyId.nil? and !directive.toPartyIdType.nil? then
-            if !@cpas[directive.cpaId]['outgoing'][directive.hash_value]['info']['other_party_ids'].include?( { :type => directive.toPartyIdType, :id => directive.toPartyId } ) then
-              error_message = "#{me}: CPA with id '#{directive.cpaId}' does not list a party id of '#{directive.toPartyId}' of type '#{directive.toPartyIdType}' for the party '#{@cpas[directive.cpaId]['other_party_name']}'."
-              @logger.warn error_message
-              to_ok = false
-            end
-          end
-          if from_ok == true and to_ok == true then
-            @logger.debug "#{me}: PartyIds are OK."
-            return true
-          else
-            return false
-          end
-        end
-        return false
-      end
-
-      # This method returns the ebMS info for a given directive.
-      def get_ebMS_message_info directive
-        #        if directive.class == HefeWeizenDirective then
-        return nil if (directive.nil? or @cpas[directive.cpaId].nil? or @cpas[directive.cpaId]['outgoing'][directive.hash_value].nil?)
-        return @cpas[directive.cpaId]['outgoing'][directive.hash_value] # ['info']
-        #        else
-        #          # directive must be a hash
-        #          return nil if (directive.nil? or @cpas[directive[:cpaId]].nil? or @cpas[directive[:cpaId]]['outgoing'][directive[:hash_value]].nil?)
-        #          return @cpas[directive[:cpaId]]['outgoing'][directive[:hash_value]] # ['info']
-        #          return nil
-        #        end
-      end
-
-      # This method returns the ebMS info for a given service and action.
-      # This method is useful for ebXML message signals that are responses to given ebXML messages.
-      def get_ebMS_message_info_extra cpa_id, service, action, direction
-        return nil if cpa_id.nil? or service.nil? or action.nil? or direction.nil?
-        return nil unless ['outgoing', 'incoming'].include? direction 
-        return nil unless !@cpas[cpa_id].nil?
-        @cpas[cpa_id][direction].each_value{ | hash |
-          if hash['service'] == service and hash['action'] == action then
-            return hash
-          end
-        }
-        return nil
-      end
-
-      # This method tells where this party has a CPA with a given CPA id
-      def has_cpa? cpa_id, from
-        @cpas.has_key? cpa_id
-      end
-
-      # This method returns ths the CPA that matches the CPA id.
-      # If there is no CPA with this CPA then it returns nil.
-      def get_cpa cpa_id
-        if @cpas.has_key? cpa_id then
-          return @cpas[cpa_id]['cpa']
-        else
-          return nil
-        end
-      end
-
-    end
-
-    # The CPA class represents an ebXML Collaboration Protocol Agreement file
-    # This is an XML file.
@@ -218 +44 @@
-      
-      def CPA.create cpa_path, config
-#         
+        #
-        if FileTest.exists?(cpa_path) and FileTest.file?(cpa_path) \
-          and FileTest.readable?(cpa_path)  then
@@ -688 +514 @@
-        info['transport-protocol-version'] = other_party_transport.transportReceiver.transportProtocol.xmlattr_version if other_party_transport.transportReceiver.transportProtocol.respond_to? "xmlattr_version"
-        info['transport-protocol-endpoint'] = other_party_transport.transportReceiver.endpoint.xmlattr_uri if other_party_transport.transportReceiver.endpoint.respond_to? "xmlattr_uri"
+        
+        if other_party_transport.transportReceiver.respond_to? "transportServerSecurity" then
+          tss = other_party_transport.transportReceiver.transportServerSecurity
+          info['transport-protocol-security-protocol'] = (tss.respond_to? "transportSecurityProtocol") ? tss.transportSecurityProtocol.strip : "not set"
+          info['transport-protocol-security-protocol-version'] = (tss.respond_to? "transportSecurityProtocol") ? tss.transportSecurityProtocol.xmlattr_version : "not set"
+          info['transport-protocol-security-server-cert-ref'] = (tss.respond_to? "serverCertificateRef" and tss.serverCertificateRef.respond_to? "xmlattr_certId") ? tss.serverCertificateRef.xmlattr_certId : "not set"
+          # I ASSUME THE CPA IS CORRECT!
+          info['transport-protocol-security-client-cert-ref'] = this_party_transport.transportSender.transportClientSecurity.clientCertificateRef.xmlattr_certId
+          # I ASSUME THE CPA IS CORRECT!
+          info['transport-protocol-security-server-sec-details-ref'] = this_party_transport.transportSender.transportClientSecurity.serverSecurityDetailsRef.xmlattr_securityId
+        else
+          info['transport-protocol-security'] = 'not set'
+        end
-        return info
-      end

branches/branch-https-dev/src/hefeweizen_library_exchange_point.rb

@@ -41 +41 @@
-      attr_reader :exchange_points_config
-
-
+certs_dir, 
-        @b2b_system_name = b2b_system_name
-        @big_ania = big_ania
-        @config = config
-        @logger = config['LOGGER']
+        @certs_dir = certs_dir
-        require "#{@config['LIB_DIR']}/hefeweizen_library_utils"
-        
@@ -56 +57 @@
-            conf.each_line { | line |
-              # sample syntax: 
+              # Protocol: http Host: localhost Port: 7777 Path: /coronation
+              # Protocol: https Host: localhost Port: 7778 Path: /coronation Server-Cert: corontion_ssl_server_cert
-              # http localhost 7777 /coronation
-
-
+
+
+
+
+
+
-                @exchange_points_config << { :protocol => $1, :host => $2, :port => $3.to_i, :path => $4 }
-              elsif line =~ /^#.*$/ then
@@ -87 +94 @@
-          # create a long living tasker that monitors this directory.
-          #
-
+
+
+
+
+
+
+
+
-            command_hash = {
-              "from" => "hefeweizen_exchange_point", 
@@ -93 +107 @@
-              "command" => "start_tasker",
-              "tasker" => "#{@config['BIN_DIR']}/hefeweizen_tasker_application_http_server.rb",
-"--b2b-system-name #{@b2b_system_name} --pipe-to-ania #{@config['PIPE_TO_ANIA']} --port #{exchange_point_config[:port]} --path #{exchange_point_config[:path]} --config #{@config['CONFIG_DIR']}/hefeweizen.conf"
+tasker_argument
-              "uuid" => HefeWeizen::HefeWeizenLibrary::HefeWeizenUUID.uuid
-            }

branches/branch-https-dev/src/taskers/hefeweizen_tasker_application_http_server.rb

@@ -34 +34 @@
-require 'getoptlong'
-require 'webrick'
+require 'webrick/https'
+require 'openssl'
-require 'fileutils'
-require 'logger'
@@ -106 +108 @@
-        file_full.close
-        
+        require 'pp'
+        puts '-------------------------------'
+        puts req.meta_vars
+        puts '-------------------------------'
+        puts req.meta_vars['SSL_CLIENT_CERT']
+        puts '-------------------------------'
+        puts req.client_cert
+
-        # 2.
-        # create a named pipe so big ania (via ania) can tell us how to proceed.
@@ -256 +266 @@
-                              [ '--port', '-p', GetoptLong::REQUIRED_ARGUMENT ],
-                              [ '--path', '-x', GetoptLong::REQUIRED_ARGUMENT ],
+                              [ '--server-cert-dir', '-s', GetoptLong::OPTIONAL_ARGUMENT ],
-                              [ '--config', '-c', GetoptLong::REQUIRED_ARGUMENT ]
-                              )
@@ -264 +275 @@
-        @port = nil
-        @path = nil
-
+
+
-        opts.each do |opt, arg|
-          case opt
@@ -277 +289 @@
-          when '--config'
-            @config_file = arg
+          when '--server-cert-dir'
+            @server_cert_dir = arg
+            @is_https = true
-          end
-        end
@@ -308 +323 @@
-
-        require "#{@config['LIB_DIR']}/hefeweizen_library_utils"
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-      def run
-        return http_server_serve()
@@ -318 +358 @@
-
-      def http_server_serve
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-        s.mount @path, InitializedEBMSServlet, @b2b_system_name, @config, @pipe_to_ania
-        trap("INT"){ s.shutdown }
-        s.start
-        return 0
-
-      end
-

branches/branch-https-dev/src/taskers/hefeweizen_tasker_application_send_ebXML_message.rb

@@ -119 +119 @@
-      end
-
+      def me
+        "HefeWeizenHTTPClient"
+      end
+
-      def run
-        
@@ -137 +141 @@
-          number_of_retries = @ebXML_message_parameters['info']['reliable-messaging-retries'] || 5
-          seconds_to_wait_between_retries = @ebXML_message_parameters['info']['reliable-messaging-retry-interval'] || 10
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-          # FIX ME FOR TESTING PURPOSE SEND IT TO A LOCAL WEBSERVER
-          #        http_url = "localhost:5555/test"
-
-          # FIX ME FOR TESTING PURPOSE SEND IT TO A LOCAL WEBSERVER
-#  
+          #
-          
-          time = Time.now.to_f.to_s
@@ -175 +211 @@
-
-          # added ignore-length ... had problems with it when using webrick and setting code 204 to it.
-
+
+
+
-          system(command)
-

branches/branch-https-dev/test/test-systems/Coronation/infrastructure/exchange-points/http_server.conf

@@ -8 +8 @@
-#    the server is listening is port 7777 and the path to the server is /coronation
-Protocol: http Host: localhost Port: 7777 Path: /coronation
+Protocol: https Host: localhost Port: 7778 Path: /coronation Server-Cert: coronation_ssl_server_cert

branches/branch-https-dev/test/test-systems/Gnaraloo/infrastructure/exchange-points/http_server.conf

@@ -8 +8 @@
-#    the server is listening is port 7777 and the path to the server is /coronation
-Protocol: http Host: localhost Port: 8888 Path: /gnaraloo
+Protocol: https Host: localhost Port: 8889 Path: /gnaraloo Server-Cert: gnaraloo_ssl_server_cert