Endi S. Dewata
4c24581b5c
The service.py has been modified to include certificate info in the service-show result if the service contains usercertificate. A new file certificate.js has been added to store codes related to certificates (e.g. revocation reasons, dialog boxes). The service.js has been modified to provide the UI for certificate management. The certificate.js can also be used for host certificate management. The Makefile.am and index.xhtml has been modified to include certificate.js. New test data files have been added for certificate operations. To test revoke and restore operations the server needs to be installed with dogtag CA instead of self-signed CA. The certificate status and revocation reason in the details page will be implemented in subsequent patches. Unit tests will also be added in subsequent patches.
313 lines
9.3 KiB
JavaScript
313 lines
9.3 KiB
JavaScript
/* Authors:
|
|
* Endi Sukma Dewata <edewata@redhat.com>
|
|
*
|
|
* Copyright (C) 2010 Red Hat
|
|
* see file 'COPYING' for use and warranty information
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License as
|
|
* published by the Free Software Foundation; version 2 only
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
|
|
/* REQUIRES: ipa.js, details.js, search.js, add.js, entity.js */
|
|
|
|
ipa_entity_set_search_definition('service', [
|
|
['krbprincipalname', 'Principal', null],
|
|
['quick_links', 'Quick Links', ipa_entity_quick_links]
|
|
]);
|
|
|
|
ipa_entity_set_add_definition('service', [
|
|
'dialog-add-service', 'Add New Service', [
|
|
['krbprincipalname', 'Principal', service_add_krbprincipalname],
|
|
['service', 'Service', null],
|
|
['host', 'Host Name', null]
|
|
]
|
|
]);
|
|
|
|
ipa_entity_set_details_definition('service', [
|
|
ipa_stanza({name:'details', label:'Service Details'}).
|
|
input({name:'krbprincipalname',
|
|
label:'Principal',
|
|
setup:service_krbprincipalname_setup,
|
|
load:service_krbprincipalname_load}).
|
|
input({name:'service', label:'Service', load:service_service_load}).
|
|
input({name:'host', label:'Host Name', load:service_host_load}),
|
|
ipa_stanza({name:'provisioning', label:'Provisioning'}).
|
|
input({name:'provisioning_status', label:'Status',
|
|
load:service_provisioning_status_load}),
|
|
ipa_stanza({name:'certificate', label:'Service Certificate'}).
|
|
input({name:'certificate_status', label:'Status',
|
|
load:service_usercertificate_load})
|
|
]);
|
|
|
|
function service_add_krbprincipalname(add_dialog, mode) {
|
|
if (mode == IPA_ADD_UPDATE) {
|
|
var service = add_dialog.find('input[name=service]').val();
|
|
var host = add_dialog.find('input[name=host]').val();
|
|
return service+'/'+host;
|
|
}
|
|
return null;
|
|
}
|
|
|
|
ipa_entity_set_association_definition('service', {
|
|
'host': { method: 'add_host' }
|
|
});
|
|
|
|
function service_krbprincipalname_setup(container, dl, section) {
|
|
// skip krbprincipalname
|
|
}
|
|
|
|
function service_krbprincipalname_load(container, dt, result) {
|
|
// skip krbprincipalname
|
|
}
|
|
|
|
function service_service_load(container, dt, result) {
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
var service = krbprincipalname.replace(/\/.*$/, '');
|
|
var dd = ipa_create_first_dd(this.name, service);
|
|
dt.after(dd);
|
|
}
|
|
|
|
function service_host_load(container, dt, result) {
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
var host = krbprincipalname.replace(/^.*\//, '').replace(/@.*$/, '');
|
|
var dd = ipa_create_first_dd(this.name, host);
|
|
dt.after(dd);
|
|
}
|
|
|
|
function service_provisioning_status_load(container, dt, result) {
|
|
// skip provisioning_status
|
|
}
|
|
|
|
function service_usercertificate_get(result) {
|
|
|
|
var usercertificate = result['usercertificate'];
|
|
if (!usercertificate) {
|
|
alert('Service has no usercertificate.');
|
|
return;
|
|
}
|
|
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
var service_name = krbprincipalname.replace(/@.*$/, '');
|
|
|
|
var dialog = certificate_get_dialog({
|
|
'title': 'Certificate for Service '+service_name,
|
|
'usercertificate': usercertificate[0].__base64__
|
|
});
|
|
|
|
dialog.open();
|
|
}
|
|
|
|
function service_usercertificate_view(result) {
|
|
|
|
var usercertificate = result['usercertificate'];
|
|
if (!usercertificate) {
|
|
alert('Service has no usercertificate.');
|
|
return;
|
|
}
|
|
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
var service_name = krbprincipalname.replace(/@.*$/, '');
|
|
|
|
var dialog = certificate_view_dialog({
|
|
'title': 'Certificate for Service '+service_name,
|
|
'subject': result['subject'],
|
|
'serial_number': result['serial_number'],
|
|
'issuer': result['issuer'],
|
|
'issued_on': result['valid_not_before'],
|
|
'expires_on': result['valid_not_after'],
|
|
'md5_fingerprint': result['md5_fingerprint'],
|
|
'sha1_fingerprint': result['sha1_fingerprint']
|
|
});
|
|
|
|
dialog.open();
|
|
}
|
|
|
|
function service_usercertificate_revoke(result) {
|
|
|
|
var usercertificate = result['usercertificate'];
|
|
if (!usercertificate) {
|
|
alert('Service has no usercertificate.');
|
|
return;
|
|
}
|
|
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
var service_name = krbprincipalname.replace(/@.*$/, '');
|
|
|
|
var serial_number = result['serial_number'];
|
|
|
|
var dialog = certificate_revoke_dialog({
|
|
'title': 'Revoke Certificate for Service '+service_name,
|
|
'revoke': function(values) {
|
|
var reason = values['reason'];
|
|
|
|
ipa_cmd(
|
|
'cert_revoke',
|
|
[serial_number],
|
|
{
|
|
'revocation_reason': reason
|
|
},
|
|
function(data, text_status, xhr) {
|
|
var dialog = certificate_confirmation_dialog({
|
|
title: 'Success',
|
|
message: 'Certificate has been revoked successfully.'
|
|
});
|
|
dialog.open();
|
|
}
|
|
);
|
|
}
|
|
});
|
|
|
|
dialog.open();
|
|
}
|
|
|
|
function service_usercertificate_restore(result) {
|
|
|
|
var usercertificate = result['usercertificate'];
|
|
if (!usercertificate) {
|
|
alert('Service has no usercertificate.');
|
|
return;
|
|
}
|
|
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
var service_name = krbprincipalname.replace(/@.*$/, '');
|
|
|
|
var serial_number = result['serial_number'];
|
|
|
|
var dialog = certificate_restore_dialog({
|
|
'title': 'Restore Certificate for Service '+service_name,
|
|
'restore': function(values) {
|
|
ipa_cmd(
|
|
'cert_remove_hold',
|
|
[serial_number],
|
|
{ },
|
|
function(data, text_status, xhr) {
|
|
var dialog = certificate_confirmation_dialog({
|
|
title: 'Success',
|
|
message: 'Certificate has been restored successfully.'
|
|
});
|
|
dialog.open();
|
|
}
|
|
);
|
|
}
|
|
});
|
|
|
|
dialog.open();
|
|
}
|
|
|
|
function service_usercertificate_request(result) {
|
|
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
var service_name = krbprincipalname.replace(/@.*$/, '');
|
|
|
|
var dialog = certificate_request_dialog({
|
|
'title': 'Issue New Certificate for Service '+service_name,
|
|
'request': function(values) {
|
|
var request = values['request'];
|
|
|
|
ipa_cmd(
|
|
'cert_request',
|
|
[request],
|
|
{
|
|
'principal': krbprincipalname
|
|
}
|
|
);
|
|
}
|
|
});
|
|
|
|
dialog.open();
|
|
}
|
|
|
|
function service_usercertificate_load(container, dt, result) {
|
|
|
|
var krbprincipalname = result['krbprincipalname'][0];
|
|
|
|
var table = $('<table/>');
|
|
|
|
var tr = $('<tr/>').appendTo(table);
|
|
|
|
var td = $('<td/>').appendTo(tr);
|
|
td.append('Valid Certificate Present:');
|
|
|
|
td = $('<td/>').appendTo(tr);
|
|
$('<input/>', {
|
|
type: 'button',
|
|
value: 'Get',
|
|
click: function() {
|
|
ipa_cmd('service_show', [krbprincipalname], {},
|
|
function(data, text_status, xhr) {
|
|
service_usercertificate_get(data.result.result);
|
|
}
|
|
);
|
|
}
|
|
}).appendTo(td);
|
|
|
|
$('<input/>', {
|
|
type: 'button',
|
|
value: 'Revoke',
|
|
click: function() {
|
|
ipa_cmd('service_show', [krbprincipalname], {},
|
|
function(data, text_status, xhr) {
|
|
service_usercertificate_revoke(data.result.result);
|
|
}
|
|
);
|
|
}
|
|
}).appendTo(td);
|
|
|
|
$('<input/>', {
|
|
type: 'button',
|
|
value: 'View',
|
|
click: function() {
|
|
ipa_cmd('service_show', [krbprincipalname], {},
|
|
function(data, text_status, xhr) {
|
|
service_usercertificate_view(data.result.result);
|
|
}
|
|
);
|
|
}
|
|
}).appendTo(td);
|
|
|
|
tr = $('<tr/>').appendTo(table);
|
|
|
|
td = $('<td/>').appendTo(tr);
|
|
td.append('Certificate Revoked:');
|
|
|
|
td = $('<td/>').appendTo(tr);
|
|
$('<input/>', {
|
|
type: 'button',
|
|
value: 'Restore',
|
|
click: function() {
|
|
ipa_cmd('service_show', [krbprincipalname], {},
|
|
function(data, text_status, xhr) {
|
|
service_usercertificate_restore(data.result.result);
|
|
}
|
|
);
|
|
}
|
|
}).appendTo(td);
|
|
|
|
tr = $('<tr/>').appendTo(table);
|
|
|
|
td = $('<td/>').appendTo(tr);
|
|
td.append('No Valid Certificate:');
|
|
|
|
td = $('<td/>').appendTo(tr);
|
|
$('<input/>', {
|
|
type: 'button',
|
|
value: 'New Certificate',
|
|
click: function() {
|
|
service_usercertificate_request(result);
|
|
}
|
|
}).appendTo(td);
|
|
|
|
var dd = ipa_create_first_dd(this.name, table);
|
|
dt.after(dd);
|
|
}
|