icertificatestoresessionremote.java

一套JAVA的CA证书签发系统.

	 *                                               null);
	 * ...
	 * </code>
	 * </li>
	 * </ol>
	 *
     * @param admin Administrator performing the operation
	 * @param type CERTTYPE_* types from SecConst 
	 * @param issuerDN get all certificates issued by a specific issuer.
	 *                 If <tt>null</tt> or empty return certificates regardless of
	 *                 the issuer.
	 *
         * @return Collection Collection of X509Certificate, never <tt>null</tt>
	 *
	 * @throws RemoteException
	 */
	 public Collection findCertificatesByType(Admin admin, int type, String issuerDN)
		throws RemoteException;

    /**
     * Set the status of certificates of given dn to revoked.
     *
     * @param admin Administrator performing the operation
     * @param username the username of user to revoke certificates.
     * @param publishers and array of publiserids (Integer) of publishers to revoke the certificate in.  
     * @param reason the reason of the revokation. (One of the RevokedCertInfo.REVOKATION_REASON
     *        constants.)
     *
     * @throws RemoteException if a communication or other error occurs.
     */
    public void setRevokeStatus(Admin admin, String username, Collection publishers, int reason)
        throws RemoteException;

    /**
     * Set the status of certificate with  given serno to revoked.
     *
     * @param admin Administrator performing the operation
     * @param serno the serno of certificate to revoke.
     * @param publishers and array of publiserids (Integer) of publishers to revoke the certificate in.  
     * @param reason the reason of the revokation. (One of the RevokedCertInfo.REVOKATION_REASON constants.)
     * @throws EJBException if a communication or other error occurs.
     */   
    public void setRevokeStatus(Admin admin, String issuerdn, BigInteger serno, Collection publishers, int reason) throws RemoteException; 
   
   
	/**
	 * Method revoking all certificates generated by the specified issuerdn. Sets revokedate to current time.
	 * Should only be called by CAAdminBean when a CA is about to be revoked.
	 *  
	 * @param admin the administrator performing the event.
	 * @param issuerdn the dn of CA about to be revoked
	 * @param reason the reason of revokation.
	 * 
	 */
	public void revokeAllCertByCA(Admin admin, String issuerdn, int reason) throws RemoteException;
		   
    /**
     * Method that checks if a users all certificates have been revoked.
     *
     * @param admin Administrator performing the operation
     * @param username the username to check for.
     *
     * @return returns true if all certificates are revoked.
     *
     * @throws RemoteException if a communication or other error occurs.
     */
    public boolean checkIfAllRevoked(Admin admin, String username)
        throws RemoteException;

    /**
     * Checks if a certificate is revoked.
     *
     * @param admin Administrator performing the operation
     * @param issuerDN the DN of the issuer.
     * @param serno the serialnumber of the certificate that will be checked
     *
     * @return RevokedCertInfo with revocation information, with reason RevokedCertInfo.NOT_REVOKED if NOT revoked. Returns null if certificate is not found.
     *
     * @throws RemoteException if a communication or other error occurs.
     */
    public RevokedCertInfo isRevoked(Admin admin, String issuerDN, BigInteger serno)
        throws RemoteException;

	/**
	 * The method returns the revocation status for a list or certificate identified
	 * by the serialnumber.
	 *
     * @param admin Administrator performing the operation
	 * @param issuerDN the subjectDN of a CA certificate
	 * @param sernos a collection of certificate serialnumbers
	 *
	 * @return Collection a collection of {@link RevokedCertInfo} objects which
	 *                    reflect the revocation status of the given certificates.
	 */
	public Collection isRevoked(Admin admin, String issuerDN, Collection sernos) throws RemoteException;

    /**
    * Lists all revoked certificates, ie status = CERT_REVOKED.
    *
    * @param admin Administrator performing the operation
    * @return Collection of Strings containing fingerprint (primary key) of the revoced certificates. Reverse ordered by expireDate where last expireDate is first in array.
    * @throws EJBException if a communication or other error occurs.
    */
    public Collection listRevokedCertificates(Admin admin, String issuerdn) throws RemoteException;

   /**
    * Retrieves the latest CRL issued by this CA.
    *
    * @param admin Administrator performing the operation
    * @return X509CRL or null of no CRLs have been issued.
    * @throws EJBException if a communication or other error occurs.
    */
    public byte[] getLastCRL(Admin admin, String issuerdn) throws RemoteException;
    

   /**
    * Retrieves the information about the lastest CRL issued by this CA.
    *
    * @param admin Administrator performing the operation
    * @return CRLInfo of last CRL by CA.
    * @throws EJBException if a communication or other error occurs.
    */
    public CRLInfo getLastCRLInfo(Admin admin, String issuerdn) throws RemoteException;

   /**
    * Retrieves the highest CRLNumber issued by the CA.
    *
    * @param admin Administrator performing the operation
    * @param issuerdn the subjectDN of a CA certificate
    * @return int.
    * @throws EJBException if a communication or other error occurs.
    */
    public int getLastCRLNumber(Admin admin, String issuerdn) throws RemoteException;
  

    /**
     * Adds a certificate profile to the database.
     *
     * @param admin administrator performing the task
     * @param certificateprofilename readable name of new certificate profile
     * @param certificateprofile the profile to be added
     *
     * @return true if added succesfully, false if it already exist
     * @throws RemoteException if a communication or other error occurs.
     */
    public void addCertificateProfile(Admin admin, String certificateprofilename,
        CertificateProfile certificateprofile) throws CertificateProfileExistsException, RemoteException;

    /**
     * Adds a certificate profile to the database.
     *
     * @param admin administrator performing the task
     * @param certificateprofileid internal ID of new certificate profile, use only if you know it's right.
     * @param certificateprofilename readable name of new certificate profile
     * @param certificateprofile the profile to be added
     *
     * @return true if added succesfully, false if it already exist
     * @throws RemoteException if a communication or other error occurs.
     */
    public void addCertificateProfile(Admin admin, int certificateprofileid, String certificateprofilename, CertificateProfile certificateprofile) throws CertificateProfileExistsException, RemoteException;  
	/**
	 * Adds a certificateprofile  with the same content as the original certificateprofile,
	 *
     * @param admin Administrator performing the operation
     * @param originalcertificateprofilename readable name of old certificate profile
     * @param newcertificateprofilename readable name of new certificate profile
	 * @return false if the new certificateprofilename already exists.
	 *
	 * @throws RemoteException if a communication or other error occurs.
	 */
    public void cloneCertificateProfile(Admin admin, String originalcertificateprofilename, String newcertificateprofilename) throws CertificateProfileExistsException, RemoteException;

     /**
     * Removes a certificateprofile from the database.
     *
     * @param admin Administrator performing the operation
     * @throws EJBException if a communication or other error occurs.
     */
    public void removeCertificateProfile(Admin admin, String certificateprofilename) throws RemoteException;

     /**
     * Renames a certificateprofile
     */
    public void renameCertificateProfile(Admin admin, String oldcertificateprofilename, String newcertificateprofilename) throws CertificateProfileExistsException, RemoteException;

    /**
     * Updates certificateprofile data
     *
     * @param admin Administrator performing the operation
     * @return false if certificateprofilename doesn't exists
     *
     * @throws RemoteException if a communication or other error occurs.
     */
    public void changeCertificateProfile(Admin admin, String certificateprofilename,
        CertificateProfile certificateprofile) throws RemoteException;
    
    /**
     * Retrives a Collection of id:s (Integer) to authorized profiles.
     *
     * @param admin Administrator performing the operation
     * @param certprofiletype should be either SecConst.CERTTYPE_ENDENTITY, SecConst.CERTTYPE_SUBCA, SecConst.CERTTYPE_ROOTCA or 0 for all. 
     */
    public Collection getAuthorizedCertificateProfileIds(Admin admin, int certprofiletype) throws RemoteException;
    
    
    /**
     * Method creating a hashmap mapping profile id (Integer) to profile name (String).
     *
     * @param admin Administrator performing the operation
     */    
    public HashMap getCertificateProfileIdToNameMap(Admin admin) throws RemoteException;


    /**
     * Retrives a named certificate profile.
     */
    public CertificateProfile getCertificateProfile(Admin admin, String certificateprofilename) throws RemoteException;

     /**
     * Finds a certificate profile by id.
     
     * @param admin Administrator performing the operation
     */
    public CertificateProfile getCertificateProfile(Admin admin, int id) throws RemoteException;


     /**
     * Returns a certificate profile id, given it's certificate profile name
     *
     * @param admin Administrator performing the operation
     * @return the id or 0 if certificateprofile cannot be found.
     */
    public int getCertificateProfileId(Admin admin, String certificateprofilename) throws RemoteException;

     /**
     * Returns a certificateprofiles name given it's id.
     *
     * @param admin Administrator performing the operation
     * @return certificateprofilename or null if certificateprofile id doesn't exists.
     */
    public String getCertificateProfileName(Admin admin, int id) throws RemoteException;
    
     /**
     * Method to check if a CA exists in any of the certificate profiles. Used to avoid desyncronization of CA data.
     *
     * @param admin Administrator performing the operation
     * @param caid the caid to search for.
     * @return true if ca exists in any of the certificate profiles.
     */
    public boolean existsCAInCertificateProfiles(Admin admin, int caid) throws RemoteException;    
 
    /**
     * Method to check if a Publisher exists in any of the certificate profiles. Used to avoid desyncronization of publisher data.
     *
     * @param publisherid the publisherid to search for.
     * @return true if publisher exists in any of the certificate profiles.
     */
    public boolean existsPublisherInCertificateProfiles(Admin admin, int publisherid)throws RemoteException;    
    
}