viewreq

Perl写的CA认证程序

## OpenCA - CA Command
## (c) 1998-2001 by Massimiliano Pala and OpenCA Group
##
##   File Name: viewReq
##       Brief: View Request
## Description: Display given Request to the CA Manager
##  Parameters: dataType, key

my $cmdName = "viewReq";

if ( $cmd !~ /$cmdName/i ) {
        configError( "Wrong Command Usage ($cmd over $cmdName)!" );
        exit 1;
}

## Get the Configuration parameters ...
my ( $baseDoc, $ou, $ouList, $def, $op, $opCert, $info, $opStatus, $dnLabel);
my ( $sigStatus, $signer, $signature, $myDN, $myCN, $myEmail, @myDnInfo );
my ( @opCertList, $reqDataTable, @cols, $opCert, $serLink, $lnk, $sigInfo );
my ( %labels, @values, $opencaDir, $extfile );

my $dataType = $query->param('dataType' );
my $key      = $query->param('key');

## Required Configuration Key
$opencaDir   = getRequired('opencaDir');

configError( "Error, needed dB key!" ) if ( not $key );

if ( $dataType eq "PENDING_REQUEST" ) {
 	$baseDoc = getRequired('PendingRequestSheet');
} elsif ( $dataType eq "RENEW_REQUEST" ) {
 	$baseDoc = getRequired('RenewRequestSheet');
} elsif ( $dataType eq "DELETED_REQUEST" ) {
 	$baseDoc = getRequired('DeletedRequestSheet');
} elsif ( $dataType eq "ARCHIVIED_REQUEST" ) {
 	$baseDoc = getRequired('ArchiviedRequestSheet');
} else {
	configError ( "Invalid or missing dataType ($dataType) !");
}

if( not ( $page = $query->getFile( $baseDoc )) ) {
	configError ("Error while loading $baseDoc!" );
};

my $req = $db->getItem( DATATYPE=>$dataType, KEY=>$key );

configError ("Request not present in DB!" ) if ( not $req );

## Get the parsed Request
my $parsed_req = $req->getParsed();

@cols = ( "Variable", "Value" );

$reqDataTable = $query->startTable( COLS=>[ @cols ],
                                        WIDTH=>"100%",
                                        ## BGCOLOR=>"#F1F0F8",
					PADDING=>"2",
					CELLPADDING=>"4",
					TABLE_BGCOLOR=>"#F1F0F8",
                                        TITLE_BGCOLOR=>"#DDCCFF" );

## The main DN is in the SUBJ field in the header (approved by the operator)
$myDN	= ( $req->getParsed()->{HEADER}->{SUBJ} or $req->getParsed()->{DN});
$myDN 	=~ s/\,\s*/<BR>\n/g;

$lnk = new CGI({cmd=>"search", dataType=>"CERTIFICATE",
		name=>"CN", value=>$req->getParsed()->{CN}} );
$myCN = $lnk->a({-href=>$lnk->self_url()}, $req->getParsed()->{CN});

if( $req->getParsed()->{EMAIL} ne "" ) {
	$lnk = new CGI({cmd=>"search", dataType=>"CERTIFICATE",
		name=>"EMAIL", value=>$req->getParsed()->{EMAIL}} );
	$myEmail = $lnk->a({-href=>$lnk->self_url()}, $req->getParsed()->{EMAIL});
} else {
	$myEmail = "<CENTER>---</CENTER>";
}

## If the Request is signed
if ( $req->getParsed()->{TYPE} =~ /with .*? Signature/i ) {

	$lnk = new CGI({cmd=>"viewSignature", dataType=>$dataType, key=>$key});
	if( libCheckSignature( OBJECT=>$req ) ) {
		$tmp = $query->img({src=>"/images/validSig.png",
					border=>"0", align=>"MIDDLE"});
	} else {
		$tmp = $query->img({-src=>"/images/sigError.png",
					-border=>"0", -align=>"MIDDLE"});
	}

	$sigInfo = $lnk->a({-href=>$lnk->self_url()}, $tmp );
	
} else {
	$def = "<FONT COLOR=\"RED\">Not Signed</FONT>";
	$parsed_req->{OPERATOR} = $def;
}

## Check if another valid Certificate exists with the same DN of the
## current Request (only for PENDING_CERTIFICATE)
$dnLabel = "<B>Distinguished Name:</B><BR>";

if( $dataType eq "PENDING_REQUEST" ) {
	@myDnList = $db->searchItems( DATATYPE=>"VALID_CERTIFICATE",
						MODE=>"RAW",
						DN=>$parsed_req->{DN});

	if( $#myDnList > -1 ) {

		$lnk = new CGI({ cmd=>"search", 
				 dataType=>"VALID_CERTIFICATE" });
		$dnLabel .= "<BR><B><FONT SIZE=-1>[Warning: a " . 
			   $lnk->a({-href=>$lnk->self_url()}, 
				"certificate with same DN") . " exists!]" .
			   "</FONT></B>";
	}

	## Build the extFiles lists
	opendir( DIR, "${opencaDir}/conf/openssl/extfiles" ) or
		configError( "Cannot open ${opencaDir}/conf/openssl/extfiles !");
		@values = grep( /\.ext/, readdir DIR );
	closedir( DIR );

	foreach $tmp ( @values ) {
		$tmp2 = $tmp;
		$tmp2 =~ s/\_/ /g;
		$tmp2 =~ s/\.ext//g;
	
		%labels = ( %labels, $tmp => $tmp2 );
	}

	## Get the parameters
	$def = ( $parsed_req->{HEADER}->{CERTTYPE} or "User Certificate");
	$def =~ s/\s/\_/g;
	$def .= ".ext";

	$extfile     = $query->newInput( -regx=>'*',
                              -intype=>'popup_menu',
                              -name=>'extfile',
                              -values=>[ @values ],
			      -labels=>\%labels,
			      -default=>$def );

	$comment     = $query->newInput( -regx=>'*',
                                    -intype=>'textarea',
                                    -name=>'comment',
                                    -rows=>5,
				    -columns=>30,
				    -default=>"OpenCA Certificate");
} else {
	$extfile = "<CENTER>---</CENTER>";
	$comment = "<CENTER>---</CENTER>";
}

## $reqDataTable .=$query->addTableLine(DATA=>[ "<B>:</B>",
##                         ($parsed_req->{} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>["<B>Request Version:</B>",
                        ($parsed_req->{VERSION} or $parsed_req->{HEADER}->{VERSION}
							 or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Serial Number:</B>",
                        ($parsed_req->{HEADER}->{SERIAL} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>["<B>Request Type:</B>",
                        ($parsed_req->{TYPE} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Common Name:</B>",
                        ($myCN or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>E-Mail:</B>",
                        ($myEmail or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Distinguished Name:</B>",
                        ($myDN or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Approved on:</B>",
                        ($parsed_req->{HEADER}->{APPROVED} or "n/a") ]);
$reqDataTable.=$query->addTableLine(DATA=>["<B>Used Identification PIN:</B>",
                        ($parsed_req->{HEADER}->{PIN} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Modulus (key size):</B>",
                        ($parsed_req->{KEYSIZE} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Public Key Algorithm:</B>",
                        ($parsed_req->{PK_ALGORITHM} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Signature Algorithm:</B>",
                        ($parsed_req->{SIG_ALGORITHM} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Requested Profile:</B>",
                        ($parsed_req->{HEADER}->{CERTTYPE} or "n/a") ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Applied Profile:</B>",
                        $extfile ]);
$reqDataTable .=$query->addTableLine(DATA=>[ "<B>Certificate Comment:</B>",
                        $comment ]);
$reqDataTable .= $query->endTable();

$page = $query->subVar( $page, '@REQDATA@', $reqDataTable );
$page = $query->subVar( $page, '@EXTFILE@', $extfile );

## Substitute dB coordinates
$page = $query->subVar( $page, '@DATATYPE@', $dataType );
$page = $query->subVar( $page, '@KEY@', $key );

## View the Signature Logo
$page = $query->subVar( $page, '@SIGINFO@',    $sigInfo );

print "$page";


1;