rarevokeusercommand.java

一套JAVA的CA证书签发系统.

/*************************************************************************
 *                                                                       *
 *  EJBCA: The OpenSource Certificate Authority                          *
 *                                                                       *
 *  This software is free software; you can redistribute it and/or       *
 *  modify it under the terms of the GNU Lesser General Public           *
 *  License as published by the Free Software Foundation; either         *
 *  version 2.1 of the License, or any later version.                    *
 *                                                                       *
 *  See terms of license at gnu.org.                                     *
 *                                                                       *
 *************************************************************************/
 
package se.anatom.ejbca.admin;

import se.anatom.ejbca.ra.UserAdminData;
import se.anatom.ejbca.ra.UserDataLocal;
import se.anatom.ejbca.authorization.AuthorizationDeniedException;


/**
 * Revokes a user in the database, and also revokes all the users certificates.
 *
 * @version $Id: RaRevokeUserCommand.java,v 1.13 2004/04/16 07:38:57 anatom Exp $
 */
public class RaRevokeUserCommand extends BaseRaAdminCommand {
    /**
     * Creates a new instance of RaRevokeUserCommand
     *
     * @param args command line arguments
     */
    public RaRevokeUserCommand(String[] args) {
        super(args);
    }

    /**
     * Runs the command
     *
     * @throws IllegalAdminCommandException Error in command args
     * @throws ErrorAdminCommandException Error running command
     */
    public void execute() throws IllegalAdminCommandException, ErrorAdminCommandException {
        try {
            if (args.length < 3) {
                System.out.println("Usage: RA revokeuser <username> <reason>");
                System.out.println(
                    "Reason: unused(0), keyCompromise(1), cACompromise(2), affiliationChanged(3), superseded(4), cessationOfOperation(5), certficateHold(6), removeFromCRL(8),privilegeWithdrawn(9),aACompromise(10)");
                System.out.println("Normal reason is 0");

                return;
            }

            String username = args[1];
            int reason = Integer.parseInt(args[2]);

            if ((reason == 7) || (reason < 0) || (reason > 10)) {
                System.out.println("Error : Reason must be an integer between 0 and 10 except 7.");
            } else {
                UserAdminData data = getAdminSession().findUser(administrator, username);
                System.out.println("Found user:");
                System.out.println("username=" + data.getUsername());
                System.out.println("dn=\"" + data.getDN() + "\"");
                System.out.println("Old status=" + data.getStatus());
                getAdminSession().setUserStatus(administrator, username,
                    UserDataLocal.STATUS_REVOKED);
                System.out.println("New status=" + UserDataLocal.STATUS_REVOKED);

                // Revoke users certificates
                try {
                    getAdminSession().revokeUser(administrator, username, reason);
                } catch (AuthorizationDeniedException e) {
                    System.out.println("Error : Not authorized to revoke user.");
                }
            }
        } catch (Exception e) {
            throw new ErrorAdminCommandException(e);
        }
    }

    // execute
}