freeipa/install/static/service.js

/*  Authors:
 *    Endi Sukma Dewata <edewata@redhat.com>
 *
 * Copyright (C) 2010 Red Hat
 * see file 'COPYING' for use and warranty information
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License as
 * published by the Free Software Foundation; version 2 only
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
 */

/* REQUIRES: ipa.js, details.js, search.js, add.js, entity.js */

var SERVICE_CERTIFICATE_VALID   = 1;
var SERVICE_CERTIFICATE_REVOKED = 2;
var SERVICE_CERTIFICATE_MISSING = 3;

ipa_entity_set_search_definition('service', [
    ['krbprincipalname', 'Principal', null],
    ['quick_links', 'Quick Links', ipa_entity_quick_links]
]);

ipa_entity_set_add_definition('service', [
    'dialog-add-service', 'Add New Service', [
        ['krbprincipalname', 'Principal', service_add_krbprincipalname],
        ['service', 'Service', null],
        ['host', 'Host Name', null]
    ]
]);

ipa_entity_set_details_definition('service', [
    ipa_stanza({name:'details', label:'Service Details'}).
        input({name:'krbprincipalname',
               label:'Principal',
               setup:service_krbprincipalname_setup,
               load:service_krbprincipalname_load}).
        input({name:'service', label:'Service', load:service_service_load}).
        input({name:'host', label:'Host Name', load:service_host_load}),
    ipa_stanza({name:'provisioning', label:'Provisioning'}).
        input({name:'provisioning_status', label:'Status',
               load:service_provisioning_status_load}),
    ipa_stanza({name:'certificate', label:'Service Certificate'}).
        input({name:'certificate_status', label:'Status',
               load:service_usercertificate_load})
]);

function service_add_krbprincipalname(add_dialog, mode) {
    if (mode == IPA_ADD_UPDATE) {
        var service = add_dialog.find('input[name=service]').val();
        var host = add_dialog.find('input[name=host]').val();
        return service+'/'+host;
    }
    return null;
}

ipa_entity_set_association_definition('service', {
    'host': { method: 'add_host' }
});

function service_krbprincipalname_setup(container, dl, section) {
    // skip krbprincipalname
}

function service_krbprincipalname_load(container, dt, result) {
    // skip krbprincipalname
}

function service_service_load(container, dt, result) {
    var krbprincipalname = result['krbprincipalname'][0];
    var service = krbprincipalname.replace(/\/.*$/, '');
    var dd = ipa_create_first_dd(this.name, service);
    dt.after(dd);
}

function service_host_load(container, dt, result) {
    var krbprincipalname = result['krbprincipalname'][0];
    var host = krbprincipalname.replace(/^.*\//, '').replace(/@.*$/, '');
    var dd = ipa_create_first_dd(this.name, host);
    dt.after(dd);
}

function service_provisioning_status_load(container, dt, result) {
    // skip provisioning_status
}

function service_usercertificate_load(container, dt, result) {

    var li1, li2, li3;

    function set_status(status, revocation_reason) {
        li1.css('list-style-type', status == SERVICE_CERTIFICATE_VALID ? 'disc' : 'circle');
        li2.css('list-style-type', status == SERVICE_CERTIFICATE_REVOKED ? 'disc' : 'circle');
        li3.css('list-style-type', status == SERVICE_CERTIFICATE_MISSING ? 'disc' : 'circle');

        $('#revocation_reason').html(revocation_reason ? CRL_REASON[revocation_reason] : '');
        $('#restore_button').css('visibility', revocation_reason == 6 ? 'visible' : 'hidden')
    }

    function check_status(serial_number) {
        ipa_cmd(
            'cert_show',
            [serial_number],
            { },
            function(data, text_status, xhr) {
                var revocation_reason = data.result.result.revocation_reason;
                if (revocation_reason) {
                    set_status(SERVICE_CERTIFICATE_REVOKED, revocation_reason);
                } else {
                    set_status(SERVICE_CERTIFICATE_VALID);
                }
            }
        );
    }

    function get_certificate(result) {

        var usercertificate = result['usercertificate'];
        if (!usercertificate) {
            set_status(SERVICE_CERTIFICATE_MISSING);
            return;
        }

        var krbprincipalname = result['krbprincipalname'][0];
        var service_name = krbprincipalname.replace(/@.*$/, '');

        var dialog = certificate_get_dialog({
            'title': 'Certificate for Service '+service_name,
            'usercertificate': usercertificate[0].__base64__
        });

        dialog.open();
    }

    function view_certificate(result) {

        var usercertificate = result['usercertificate'];
        if (!usercertificate) {
            set_status(SERVICE_CERTIFICATE_MISSING);
            return;
        }

        var krbprincipalname = result['krbprincipalname'][0];
        var service_name = krbprincipalname.replace(/@.*$/, '');

        var dialog = certificate_view_dialog({
            'title': 'Certificate for Service '+service_name,
            'subject': result['subject'],
            'serial_number': result['serial_number'],
            'issuer': result['issuer'],
            'issued_on': result['valid_not_before'],
            'expires_on': result['valid_not_after'],
            'md5_fingerprint': result['md5_fingerprint'],
            'sha1_fingerprint': result['sha1_fingerprint']
        });

        dialog.open();
    }

    function revoke_certificate(result) {

        var usercertificate = result['usercertificate'];
        if (!usercertificate) {
            set_status(SERVICE_CERTIFICATE_MISSING);
            return;
        }

        var krbprincipalname = result['krbprincipalname'][0];
        var service_name = krbprincipalname.replace(/@.*$/, '');

        var serial_number = result['serial_number'];

        var dialog = certificate_revoke_dialog({
            'title': 'Revoke Certificate for Service '+service_name,
            'revoke': function(values) {
                var reason = values['reason'];

                ipa_cmd(
                    'cert_revoke',
                    [serial_number],
                    {
                        'revocation_reason': reason
                    },
                    function(data, text_status, xhr) {
                        check_status(serial_number);
                    }
                );
            }
        });

        dialog.open();
    }

    function restore_certificate(result) {

        var usercertificate = result['usercertificate'];
        if (!usercertificate) {
            set_status(SERVICE_CERTIFICATE_MISSING);
            return;
        }

        var krbprincipalname = result['krbprincipalname'][0];
        var service_name = krbprincipalname.replace(/@.*$/, '');

        var serial_number = result['serial_number'];

        var dialog = certificate_restore_dialog({
            'title': 'Restore Certificate for Service '+service_name,
            'restore': function(values) {
                ipa_cmd(
                    'cert_remove_hold',
                    [serial_number],
                    { },
                    function(data, text_status, xhr) {
                        check_status(serial_number);
                    }
                );
            }
        });

        dialog.open();
    }

    function request_certificate(result) {

        var krbprincipalname = result['krbprincipalname'][0];
        var service_name = krbprincipalname.replace(/@.*$/, '');

        var dialog = certificate_request_dialog({
            'title': 'Issue New Certificate for Service '+service_name,
            'request': function(values) {
                var request = values['request'];

                ipa_cmd(
                    'cert_request',
                    [request],
                    {
                        'principal': krbprincipalname
                    },
                    function(data, text_status, xhr) {
                        check_status(data.result.result.serial_number);
                    }
                );
            }
        });

        dialog.open();
    }

    var krbprincipalname = result['krbprincipalname'][0];

    var table = $('<table/>');

    var tr = $('<tr/>').appendTo(table);

    var td = $('<td/>').appendTo(tr);
    li1 = $('<li/>', {
        style: 'color: green;'
    }).appendTo(td);

    td = $('<td/>').appendTo(tr);
    td.append('Valid Certificate Present:');

    td = $('<td/>').appendTo(tr);
    $('<input/>', {
        'type': 'button',
        'value': 'Get',
        'click': function() {
            ipa_cmd('service_show', [krbprincipalname], {},
                function(data, text_status, xhr) {
                    get_certificate(data.result.result);
                }
            );
        }
    }).appendTo(td);

    $('<input/>', {
        'type': 'button',
        'value': 'Revoke',
        'click': function() {
            ipa_cmd('service_show', [krbprincipalname], {},
                function(data, text_status, xhr) {
                    revoke_certificate(data.result.result);
                }
            );
        }
    }).appendTo(td);

    $('<input/>', {
        'type': 'button',
        'value': 'View',
        'click': function() {
            ipa_cmd('service_show', [krbprincipalname], {},
                function(data, text_status, xhr) {
                    view_certificate(data.result.result);
                }
            );
        }
    }).appendTo(td);

    tr = $('<tr/>').appendTo(table);

    td = $('<td/>').appendTo(tr);
    li2 = $('<li/>', {
        'style': 'color: red;'
    }).appendTo(td);

    td = $('<td/>').appendTo(tr);
    td.append('Certificate Revoked:');

    td = $('<td/>').appendTo(tr);
    td.append($('<span/>', {
        'id': 'revocation_reason'
    }));
    td.append(' ');

    $('<input/>', {
        'id': 'restore_button',
        'type': 'button',
        'value': 'Restore',
        'click': function() {
            ipa_cmd('service_show', [krbprincipalname], {},
                function(data, text_status, xhr) {
                    restore_certificate(data.result.result);
                }
            );
        }
    }).appendTo(td);

    tr = $('<tr/>').appendTo(table);

    td = $('<td/>').appendTo(tr);
    li3 = $('<li/>', {
        'style': 'color: goldenrod;'
    }).appendTo(td);

    td = $('<td/>').appendTo(tr);
    td.append('No Valid Certificate:');

    td = $('<td/>').appendTo(tr);
    $('<input/>', {
        'type': 'button',
        'value': 'New Certificate',
        'click': function() {
            request_certificate(result);
        }
    }).appendTo(td);

    var dd = ipa_create_first_dd(this.name, table);
    dt.after(dd);

    var usercertificate = result['usercertificate'];
    if (usercertificate) {
        check_status(result.serial_number);
    } else {
        set_status(SERVICE_CERTIFICATE_MISSING);
    }
}