aaf/src/src/main/java/com/att/cadi/cm/ArtifactDir.java

   1 /*******************************************************************************\r
   2  * ============LICENSE_START====================================================\r
   3  * * org.onap.aaf\r
   4  * * ===========================================================================\r
   5  * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.\r
   6  * * ===========================================================================\r
   7  * * Licensed under the Apache License, Version 2.0 (the "License");\r
   8  * * you may not use this file except in compliance with the License.\r
   9  * * You may obtain a copy of the License at\r
  10  * * \r
  11  *  *      http://www.apache.org/licenses/LICENSE-2.0\r
  12  * * \r
  13  *  * Unless required by applicable law or agreed to in writing, software\r
  14  * * distributed under the License is distributed on an "AS IS" BASIS,\r
  15  * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
  16  * * See the License for the specific language governing permissions and\r
  17  * * limitations under the License.\r
  18  * * ============LICENSE_END====================================================\r
  19  * *\r
  20  * * ECOMP is a trademark and service mark of AT&T Intellectual Property.\r
  21  * *\r
  22  ******************************************************************************/\r
  23 package com.att.cadi.cm;\r
  24 \r
  25 import java.io.File;\r
  26 import java.io.FileOutputStream;\r
  27 import java.io.FileWriter;\r
  28 import java.io.IOException;\r
  29 import java.io.PrintStream;\r
  30 import java.io.PrintWriter;\r
  31 import java.security.KeyStore;\r
  32 import java.util.ArrayList;\r
  33 import java.util.HashMap;\r
  34 import java.util.List;\r
  35 import java.util.Map;\r
  36 \r
  37 import com.att.cadi.CadiException;\r
  38 import com.att.cadi.Symm;\r
  39 import com.att.cadi.config.Config;\r
  40 import com.att.cadi.util.Chmod;\r
  41 import com.att.inno.env.Trans;\r
  42 import com.att.inno.env.util.Chrono;\r
  43 \r
  44 import certman.v1_0.Artifacts.Artifact;\r
  45 import certman.v1_0.CertInfo;\r
  46 \r
  47 public abstract class ArtifactDir implements PlaceArtifact {\r
  48 \r
  49         protected static final String C_R = "\n";\r
  50         protected File dir;\r
  51         private List<String> encodeds = new ArrayList<String>();\r
  52         \r
  53         private Symm symm;\r
  54         // This checks for multiple passes of Dir on the same objects.  Run clear after done.\r
  55         protected static Map<String,Object> processed = new HashMap<String,Object>();\r
  56 \r
  57 \r
  58         /**\r
  59          * Note:  Derived Classes should ALWAYS call "super.place(cert,arti)" first, and \r
  60          * then "placeProperties(arti)" just after they implement\r
  61          */\r
  62         @Override\r
  63         public final boolean place(Trans trans, CertInfo certInfo, Artifact arti) throws CadiException {\r
  64                 validate(arti);\r
  65                 \r
  66                 try {\r
  67                         // Obtain/setup directory as required\r
  68                         dir = new File(arti.getDir());\r
  69                         if(processed.get("dir")==null) {\r
  70                                 if(!dir.exists()) {\r
  71                                         Chmod.to755.chmod(dir);\r
  72                                         if(!dir.mkdirs()) {\r
  73                                                 throw new CadiException("Could not create " + dir);\r
  74                                         }\r
  75                                 }\r
  76                                 \r
  77                                 // Also place cm_url and Host Name\r
  78                                 addProperty(Config.CM_URL,trans.getProperty(Config.CM_URL));\r
  79                                 addProperty(Config.HOSTNAME,arti.getMachine());\r
  80                         }\r
  81                         symm = (Symm)processed.get("symm");\r
  82                         if(symm==null) {\r
  83                                 // CADI Key Gen\r
  84                                 File f = new File(dir,arti.getAppName() + ".keyfile");\r
  85                                 if(!f.exists()) {\r
  86                                         write(f,Chmod.to400,Symm.baseCrypt().keygen());\r
  87                                 }\r
  88                                 symm = Symm.obtain(f); \r
  89 \r
  90                                 addEncProperty("ChallengePassword", certInfo.getChallenge());\r
  91                                 \r
  92                                 processed.put("symm",symm);\r
  93                         }\r
  94 \r
  95                         _place(trans, certInfo,arti);\r
  96                         \r
  97                         placeProperties(arti);\r
  98                         \r
  99                         processed.put("dir",dir);\r
 100 \r
 101                 } catch (Exception e) {\r
 102                         throw new CadiException(e);\r
 103                 }\r
 104                 return true;\r
 105         }\r
 106 \r
 107         /**\r
 108          * Derived Classes implement this instead, so Dir can process first, and write any Properties last\r
 109          * @param cert\r
 110          * @param arti\r
 111          * @return\r
 112          * @throws CadiException\r
 113          */\r
 114         protected abstract boolean _place(Trans trans, CertInfo certInfo, Artifact arti) throws CadiException;\r
 115 \r
 116         protected void addProperty(String tag, String value) throws IOException {\r
 117                 StringBuilder sb = new StringBuilder();\r
 118                 sb.append(tag);\r
 119                 sb.append('=');\r
 120                 sb.append(value);\r
 121                 encodeds.add(sb.toString());\r
 122         }\r
 123 \r
 124         protected void addEncProperty(String tag, String value) throws IOException {\r
 125                 StringBuilder sb = new StringBuilder();\r
 126                 sb.append(tag);\r
 127                 sb.append('=');\r
 128                 sb.append("enc:???");\r
 129                 sb.append(symm.enpass(value));\r
 130                 encodeds.add(sb.toString());\r
 131         }\r
 132 \r
 133         protected void write(File f, Chmod c, String ... data) throws IOException {\r
 134                 f.setWritable(true,true);\r
 135                 \r
 136                 FileOutputStream fos = new FileOutputStream(f);\r
 137                 PrintStream ps = new PrintStream(fos);\r
 138                 try {\r
 139                         for(String s : data) {\r
 140                                 ps.print(s);\r
 141                         }\r
 142                 } finally {\r
 143                         ps.close();\r
 144                         c.chmod(f);\r
 145                 }\r
 146         }\r
 147 \r
 148         protected void write(File f, Chmod c, byte[] bytes) throws IOException {\r
 149                 f.setWritable(true,true);\r
 150                 \r
 151                 FileOutputStream fos = new FileOutputStream(f);\r
 152                 try {\r
 153                         fos.write(bytes);\r
 154                 } finally {\r
 155                         fos.close();\r
 156                         c.chmod(f);\r
 157                 }\r
 158         }\r
 159         \r
 160         protected void write(File f, Chmod c, KeyStore ks, char[] pass ) throws IOException, CadiException {\r
 161                 f.setWritable(true,true);\r
 162                 \r
 163                 FileOutputStream fos = new FileOutputStream(f);\r
 164                 try {\r
 165                         ks.store(fos, pass);\r
 166                 } catch (Exception e) {\r
 167                         throw new CadiException(e);\r
 168                 } finally {\r
 169                         fos.close();\r
 170                         c.chmod(f);\r
 171                 }\r
 172         }\r
 173 \r
 174 \r
 175         private void validate(Artifact a) throws CadiException {\r
 176                 StringBuilder sb = new StringBuilder();\r
 177                 if(a.getDir()==null) {\r
 178                         sb.append("File Artifacts require a path");\r
 179                 }\r
 180 \r
 181                 if(a.getAppName()==null) {\r
 182                         if(sb.length()>0) {\r
 183                                 sb.append('\n');\r
 184                         }\r
 185                         sb.append("File Artifacts require an appName");\r
 186                 }\r
 187                 \r
 188                 if(sb.length()>0) {\r
 189                         throw new CadiException(sb.toString());\r
 190                 }\r
 191         }\r
 192 \r
 193         private boolean placeProperties(Artifact arti) throws CadiException {\r
 194                 if(encodeds.size()==0) {\r
 195                         return true;\r
 196                 }\r
 197                 boolean first=processed.get("dir")==null;\r
 198                 try {\r
 199                         File f = new File(dir,arti.getAppName()+".props");\r
 200                         if(f.exists()) {\r
 201                                 if(first) {\r
 202                                         f.delete();\r
 203                                 } else {\r
 204                                         f.setWritable(true);\r
 205                                 }\r
 206                         }\r
 207                         // Append if not first\r
 208                         PrintWriter pw = new PrintWriter(new FileWriter(f,!first));\r
 209                         \r
 210                         // Write a Header\r
 211                         if(first) {\r
 212                                 for(int i=0;i<60;++i) {\r
 213                                         pw.print('#');\r
 214                                 }\r
 215                                 pw.println();\r
 216                                 pw.println("# Properties Generated by AT&T Certificate Manager");\r
 217                                 pw.print("#   by ");\r
 218                                 pw.println(System.getProperty("user.name"));\r
 219                                 pw.print("#   on ");\r
 220                                 pw.println(Chrono.dateStamp());\r
 221                                 pw.println("# @copyright 2016, AT&T");\r
 222                                 for(int i=0;i<60;++i) {\r
 223                                         pw.print('#');\r
 224                                 }\r
 225                                 pw.println();\r
 226                                 for(String prop : encodeds) {\r
 227                                         if(prop.startsWith("cm_") || prop.startsWith(Config.HOSTNAME)) {\r
 228                                                 pw.println(prop);\r
 229                                         }\r
 230                                 }\r
 231                         }\r
 232                         \r
 233                         try {\r
 234                                 for(String prop : encodeds) {\r
 235                                         if(prop.startsWith("cadi")) {\r
 236                                                 pw.println(prop);\r
 237                                         }\r
 238                                 }\r
 239                         } finally {\r
 240                                 pw.close();\r
 241                         }\r
 242                         Chmod.to400.chmod(f);\r
 243                         \r
 244                         if(first) {\r
 245                                 // Challenge\r
 246                                 f = new File(dir,arti.getAppName()+".chal");\r
 247                                 if(f.exists()) {\r
 248                                         f.delete();\r
 249                                 }\r
 250                                 pw = new PrintWriter(new FileWriter(f));\r
 251                                 try {\r
 252                                         for(String prop : encodeds) {\r
 253                                                 if(prop.startsWith("Challenge")) {\r
 254                                                         pw.println(prop);\r
 255                                                 }\r
 256                                         }\r
 257                                 } finally {\r
 258                                         pw.close();\r
 259                                 }\r
 260                                 Chmod.to400.chmod(f);\r
 261                         }\r
 262                 } catch(Exception e) {\r
 263                         throw new CadiException(e);\r
 264                 }\r
 265                 return true;\r
 266         }\r
 267         \r
 268         public static void clear() {\r
 269                 processed.clear();\r
 270         }\r
 271 \r
 272 }\r