Changeset 452

Timestamp:

02/16/07 16:35:20 (2 years ago)

Author:

sacha

Message:

cpa reading certificates and trust anchors
providing a runtime location for certificates

Files:

• branches/branch-https-dev/bin/debian-base-hefeweizen-installation.sh (modified) (1 diff)
• branches/branch-https-dev/bin/run-check-dependencies.sh (modified) (1 diff)
• branches/branch-https-dev/defaults/hefeweizen-defaults (modified) (1 diff)
• branches/branch-https-dev/src/hefeweizen_library_cpa.rb (modified) (1 diff)
• branches/branch-https-dev/src/hefeweizen_library_cpa_manager.rb (modified) (5 diffs)

branches/branch-https-dev/bin/debian-base-hefeweizen-installation.sh

@@ -4 +4 @@
-
-echo "some handy tools"
-openssl
+emacs21
-
-echo "install HefeWeizen debian package dependencies"
-
+openssl 
-
-echo "install HefeWeizen ruby gems dependencies"

branches/branch-https-dev/bin/run-check-dependencies.sh

@@ -43 +43 @@
-else
-    echo "The http client wget is not available. Please install that package first."
+    exit -1
+fi
+
+which openssl 1>/dev/null
+if [ $? -eq 0 ]; then
+    echo "openssl binary is available. good."
+else
+    echo "The openssl tool is not available. Please install that package first."
-    exit -1
-fi

branches/branch-https-dev/defaults/hefeweizen-defaults

@@ -23 +23 @@
-CONVERSATION_DIR=/var/run/hefeweizen/conversations
-DIRECTIVE_DIR=/var/run/hefeweizen/directives
+CPA_DIR=/var/run/hefeweizen/cpas
-SPOOL_DIR=/var/spool/hefeweizen
-TRANSACTION_DIR=/var/run/hefeweizen/transactions

branches/branch-https-dev/src/hefeweizen_library_cpa.rb

@@ -54 +54 @@
-          return nil
-        end
+      end
+
+      # Setting up the certificate locations for this CPA.
+      # These locations will be used at run time.
+      # First usecase is SSL trust anchors.
+      def create_certificate_locations party_name, cpa_runtime_dir
+        # this party
+        # get trust anchors -> will be needed for SSL client to validate
+        #                      server SSL certificate against
+        this_party_info = nil
+        if party_name == @xml_cpa.partyInfo.first.xmlattr_partyName then
+          this_party_info = @xml_cpa.partyInfo[0]
+          other_party_info = @xml_cpa.partyInfo[1]
+        else
+          this_party_info = @xml_cpa.partyInfo[1]
+          other_party_info = @xml_cpa.partyInfo[0]
+        end
+        
+        if this_party_info.respond_to? "securityDetails" then
+          sec_details = this_party_info.securityDetails.class == Array ? this_party_info.securityDetails : [this_party_info.securityDetails]
+          sec_details.each{ | sec_detail |
+            security_id = sec_detail.xmlattr_securityId
+            new_dir = "#{cpa_runtime_dir}/#{security_id}"
+            FileUtils.mkdir new_dir
+            # adding individual certificates
+            if sec_detail.trustAnchors.respond_to? "anchorCertificateRef" then
+              anchors = sec_detail.trustAnchors.anchorCertificateRef.class == Array ? sec_detail.trustAnchors.anchorCertificateRef : [sec_detail.trustAnchors.anchorCertificateRef]
+              anchors.each{ | anchor |
+                cert_id = anchor.xmlattr_certId
+                add_pem_cert_to_dir new_dir, cert_id
+              }
+              # TODO a system command
+              # Not criticial right here.
+              command = "c_rehash #{cpa_runtime_dir}/#{security_id}"
+              system command
+            end
+          }
+
+        end
+
+        # other party
+        if other_party_info.respond_to? "certificate" then
+          certs = other_party_info.certificate.class == Array ? other_party_info.certificate : [other_party_info.certificate]
+          certs.each{ | cert |
+            cert_id = cert.xmlattr_certId
+#            new_dir = "#{cpa_runtime_dir}"
+#            FileUtils.mkdir new_dir
+            add_pem_cert_to_dir cpa_runtime_dir, cert_id
+          }
+        end
+        
+        # get each XML certificate and create .pem file
+        
+      end
+      
+      def add_pem_cert_to_dir new_dir, cert_id
+        @xml_cpa.partyInfo.each{ | party_info |
+          if party_info.respond_to? "certificate" then
+            certs = party_info.certificate.class == Array ? party_info.certificate : [party_info.certificate]
+            certs.each{ | cert | 
+              if cert.xmlattr_certId.strip == cert_id then
+                text = cert.keyInfo.x509Data.x509Certificate.strip
+                output_file = File.new "#{new_dir}/#{cert.xmlattr_certId}.pem", "w"
+                output_file << "-----BEGIN CERTIFICATE-----\n"
+                text.each_line{ | line |
+                  output_file << line.strip << "\n"
+                }
+                output_file << "-----END CERTIFICATE-----\n"
+                output_file.close
+              end
+            }
+          end
+        }
-      end
-

branches/branch-https-dev/src/hefeweizen_library_cpa_manager.rb

@@ -29 +29 @@
-#
-##############################################################################
+
+require 'digest/md5'
-
-module HefeWeizen
@@ -47 +49 @@
-
-        require @config['LIB_DIR'].strip + "/hefeweizen_library_cpa"
+
+        @cpas_runtime_dir = "#{@config['CPA_DIR']}/#{party_name}"
+        FileUtils.mkdir_p @cpas_runtime_dir
-        
+        # Lookup table for CPA id to md5sum
+        @cpa_id_md5sum = Hash.new
-      end
-
@@ -100 +107 @@
-                  @cpas[cpa.id] = Hash.new
-                  @cpas[cpa.id]['cpa'] = cpa
+                  result = nil
-                  begin
-                    result = cpa.setup_all_ebMS_header_infos cpa.id, @party_name, @party_identities
@@ -107 +115 @@
-                    @logger.error "#{me}: CPA with id '#{cpa.id}' is not installed into the system."
-                  end
+                  
-                  if result.nil? then
+                    @cpas.delete[cpa.id]
-                    @logger.error "#{me}: Unable to successfully read ebXML CPA."
-                  else
+                    md5sum = Digest::MD5.hexdigest cpa.id
+                    @cpa_id_md5sum[cpa.id] = md5sum
+                    cpa_runtime_dir = "#{@cpas_runtime_dir}/#{md5sum}"
+                    FileUtils.mkdir_p cpa_runtime_dir
+                    mapping_file = "#{@cpas_runtime_dir}/mapping_file"
+                    file = File.open mapping_file, "a"
+                    file << "#{md5sum} - #{cpa.id}\n"
+                    file.close 
+                    cpa.create_certificate_locations @party_name, cpa_runtime_dir
-                    @logger.info "#{me}: Loaded CPA '#{cpa_filename}' with id: '#{cpa.id}'"
-                  end
@@ -121 +140 @@
-        end
-        return @cpas
+      end
+
+      def get_cpa_runtime_dir cpa_id
+        if @cpa_id_md5sum.has_key? cpa_id then
+          return "#{@cpas_runtime_dir}/#{@cpa_id_md5sum[cpa_id]}"
+        else
+          return nil
+        end
-      end
-