/**

  * Copyright 2005-2011 The Kuali Foundation

  *

  * Licensed under the Educational Community License, Version 2.0 (the "License");

  * you may not use this file except in compliance with the License.

  * You may obtain a copy of the License at

  *

  * http://www.opensource.org/licenses/ecl2.php

  *

  * Unless required by applicable law or agreed to in writing, software

  * distributed under the License is distributed on an "AS IS" BASIS,

  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

  * See the License for the specific language governing permissions and

  * limitations under the License.

  */

 package org.kuali.rice.ksb.security.admin.web;

 import java.io.ByteArrayOutputStream;

 import java.io.IOException;

 import java.security.KeyStore;

 import java.security.KeyStoreException;

 import java.security.NoSuchAlgorithmException;

 import java.security.cert.CertificateException;

 import java.util.Collection;

 import javax.servlet.http.HttpServletRequest;

 import javax.servlet.http.HttpServletResponse;

 import org.apache.struts.action.ActionForm;

 import org.apache.struts.action.ActionForward;

 import org.apache.struts.action.ActionMapping;

 import org.apache.struts.action.ActionMessages;

 import org.kuali.rice.ksb.messaging.web.KSBAction;

 import org.kuali.rice.ksb.security.admin.ExportServlet;

 import org.kuali.rice.ksb.security.admin.KeyStoreEntryDataContainer;

 import org.kuali.rice.ksb.service.KSBServiceLocator;

 /**

  * Struts action for admin users to manage keys and keystore files for client applications 

  * 

  * @author Kuali Rice Team (rice.collab@kuali.org)

  *

  */

 public class JavaSecurityManagementAction extends KSBAction {

     private static final org.apache.log4j.Logger LOG = org.apache.log4j.Logger.getLogger(JavaSecurityManagementAction.class);

     /**

      * @see org.kuali.rice.ksb.messaging.web.KSBAction#establishRequiredState(javax.servlet.http.HttpServletRequest, org.apache.struts.action.ActionForm)

      */

     @Override

     public ActionMessages establishRequiredState(HttpServletRequest request, ActionForm form) throws Exception {

         request.setAttribute("rice_constant", getServlet().getServletContext().getAttribute("RiceConstants"));

         request.setAttribute("entryListPageSize", 30);

         Collection<KeyStoreEntryDataContainer> keyStoreEntryList = KSBServiceLocator.getJavaSecurityManagementService().getListOfModuleKeyStoreEntries();

         LOG.info("Found " + keyStoreEntryList.size() + " entries in module keystore");

         request.setAttribute("keyStoreEntryList", keyStoreEntryList);

         return null;

     }

     /**

      * @see org.kuali.rice.ksb.messaging.web.KSBAction#start(org.apache.struts.action.ActionMapping, org.apache.struts.action.ActionForm, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)

      */

     @Override

     public ActionForward start(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) throws Exception {

         return mapping.findForward("report");

     }

     /**

      *  Method to sort the list of keystore entries

      */

     public ActionForward sort(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) throws Exception {

         return mapping.findForward("report");

     }

     /**

      *  Clear the form

      */

     public ActionForward clear(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) throws Exception {

         form = new JavaSecurityManagementForm();

         return mapping.findForward("restart");

     }

     /**

      *  Remove the entry associated with the given alias parameter

      */

     public ActionForward removeEntry(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) throws Exception {

         String aliasToRemove = request.getParameter("aliasToRemove");

         LOG.info("Removing alias " + aliasToRemove + " from module keystore file");

         KSBServiceLocator.getJavaSecurityManagementService().removeClientCertificate(aliasToRemove);

         return mapping.findForward("restart");

     }

     public ActionForward generateClientKeyStore(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) throws Exception {

         JavaSecurityManagementForm managementForm = (JavaSecurityManagementForm)form;

         ActionMessages errors = managementForm.validateGenerateClientKeystore(mapping, request);

         if (errors == null || errors.isEmpty()) {

             KeyStore clientKeyStore = KSBServiceLocator.getJavaSecurityManagementService().generateClientKeystore(managementForm.getAlias(), managementForm.getPassword());

             byte[] data = {};

             ByteArrayOutputStream baos = null;

             try {

                 baos = new ByteArrayOutputStream();

                 clientKeyStore.store(baos, managementForm.getPassword().toCharArray());

                 data = baos.toByteArray();

             } catch (KeyStoreException e) {

                 e.printStackTrace();

                 throw new RuntimeException(e);

             } catch (NoSuchAlgorithmException e) {

                 e.printStackTrace();

                 throw new RuntimeException(e);

             } catch (CertificateException e) {

                 e.printStackTrace();

                 throw new RuntimeException(e);

             } finally {

                 try {

                     baos.close();

                 } catch (IOException e) {}

             }

             form = new JavaSecurityManagementForm();

             request.getSession().setAttribute(ExportServlet.CLIENT_KEYSTORE_DATA, data);

             return new ActionForward(ExportServlet.generateExportPath(managementForm.getAlias() + "_keystore", request), true);

         } else {

             // found at least one error

             saveErrors(request, errors);

             return mapping.findForward("report");

         }

     }

 }