CA.java

package org.cagrid.cds.service.impl.testutils;

import org.bouncycastle.asn1.x509.X509Name;
import org.cagrid.gaards.pki.CertUtil;
import org.cagrid.gaards.pki.KeyUtil;
import org.cagrid.gaards.pki.ProxyCreator;
import org.globus.gsi.GlobusCredential;

import java.security.KeyPair;
import java.security.PrivateKey;
import java.security.Provider;
import java.security.PublicKey;
import java.security.Security;
import java.security.cert.X509Certificate;
import java.util.Calendar;
import java.util.Date;
import java.util.GregorianCalendar;
import java.util.HashMap;
import java.util.Map;

/**
 * @author <A href="mailto:langella@bmi.osu.edu">Stephen Langella </A>
 * @author <A href="mailto:oster@bmi.osu.edu">Scott Oster </A>
 * @author <A href="mailto:hastings@bmi.osu.edu">Shannon Hastings </A>
 * @version $Id: ArgumentManagerTable.java,v 1.2 2004/10/15 16:35:16 langella
 *          Exp $
 */
public class CA {
	private X509Certificate cert;
	private PrivateKey key;
	public static final Provider PROVIDER = new org.bouncycastle.jce.provider.BouncyCastleProvider();
	public static final String SIGNATURE_ALGORITHM = "MD5WithRSAEncryption";
	public static final String PASSWORD = "password";
	public static final String DEFAULT_CA_DN = "O=Organization ABC,OU=Unit XYZ,CN=Certificate Authority";

	private Map<String, GlobusCredential> creds = new HashMap<String, GlobusCredential>();

	public CA() throws Exception {
		this(DEFAULT_CA_DN);
	}

	public CA(String dn) throws Exception {
		Security.addProvider(PROVIDER);
		Calendar c = new GregorianCalendar();
		Date now = c.getTime();
		c.add(Calendar.YEAR, 5);
		Date expires = c.getTime();
		KeyPair pair = KeyUtil.generateRSAKeyPair1024(PROVIDER.getName());
		this.key = pair.getPrivate();
		cert = CertUtil.generateCACertificate(PROVIDER.getName(), new X509Name(
                dn), now, expires, pair, SIGNATURE_ALGORITHM);
		this.creds = new HashMap<String, GlobusCredential>();

	}

	public X509Certificate getCertificate() {
		return cert;
	}

	public GlobusCredential createProxy(String alias, int pathLength)
			throws Exception {
		KeyPair pair = KeyUtil.generateRSAKeyPair(Constants.KEY_LENGTH);
		return createProxy(alias, pair.getPublic(), pair.getPrivate(),
				pathLength);
	}

	public GlobusCredential createProxy(String alias, PublicKey publicKey,
			PrivateKey privateKey, int pathLength) throws Exception {
		GlobusCredential cred = null;
		if (this.creds.containsKey(alias)) {
			cred = this.creds.get(alias);
		} else {
			cred = createCredential(alias);
		}
		X509Certificate[] certs = ProxyCreator
				.createImpersonationProxyCertificate(
                        cred.getCertificateChain(), cred.getPrivateKey(),
                        publicKey, 12, 0, 0, pathLength);
		return new GlobusCredential(privateKey, certs);
	}

	public X509Certificate[] createProxyCertifcates(String alias,
			PublicKey publicKey, int pathLength) throws Exception {
		return createProxyCertifcates(alias, publicKey, pathLength, 12, 0, 0);
	}

	public X509Certificate[] createProxyCertifcates(String alias,
			PublicKey publicKey, int pathLength, int hours, int minutes,
			int seconds) throws Exception {
		GlobusCredential cred = null;
		if (this.creds.containsKey(alias)) {
			cred = this.creds.get(alias);
		} else {
			cred = createCredential(alias);
		}
		X509Certificate[] certs = ProxyCreator
				.createImpersonationProxyCertificate(
                        cred.getCertificateChain(), cred.getPrivateKey(),
                        publicKey, hours, minutes, seconds, pathLength);
		return certs;
	}

	public GlobusCredential createCredential(String alias) throws Exception {
		KeyPair pair = KeyUtil.generateRSAKeyPair(Constants.KEY_LENGTH);
		return createCredential(alias, pair.getPublic(), pair.getPrivate());
	}

	public GlobusCredential createCredential(String alias, PublicKey publicKey,
			PrivateKey privateKey) throws Exception {
		String dn = getCertificate().getSubjectDN().getName();
		int index = dn.indexOf("CN=");
		dn = dn.substring(0, index + 3) + alias;
		Date now = new Date();
		Date end = getCertificate().getNotAfter();
		X509Certificate cert = CertUtil.generateCertificate(PROVIDER.getName(),
                new X509Name(dn), now, end, publicKey, getCertificate(),
                getPrivateKey(), SIGNATURE_ALGORITHM, null);
		GlobusCredential cred = new GlobusCredential(privateKey,
				new X509Certificate[] { cert });
		this.creds.put(alias, cred);
		return cred;
	}

	public PrivateKey getPrivateKey() {
		return key;
	}
}