From f73b655466092169abac34833fb628fce1fcdebe Mon Sep 17 00:00:00 2001
From: jcduff <jcduff@localhost>
Date: Thu, 23 Oct 2008 14:04:24 +0000
Subject: [PATCH] The commit will bring the following features : - An updated version of the underlying database. BDB JE 3.3 is now used. - Attribute API refactoring providing a better abstraction and offering improved performances. - A new GUI called the Control-Panel to replace the Status-Panel: the specifications for this GUI are available on OpenDS Wiki and contains a link to a mockup. See <https://www.opends.org/wiki/page/ControlPanelUISpecification>. - Some changes in the replication protocol to implement "Assured Replication Mode". The specifications are on OpenDS Wiki at <https://www.opends.org/wiki/page/AssuredMode> and section 7 described some of the replication changes required to support this. Assured Replication is not finished, but the main replication protocol changes to support it are done. As explained by Gilles on an email on the Dev mailing list (http://markmail.org/message/46rgo3meq3vriy4a), with these changes the newer versions of OpenDS may not be able to replicate with OpenDS 1.0 instances. - Support for Service Tags on the platforms where the functionality is available and enabled. Specifications are published at <https://www.opends.org/wiki/page/OpenDSServiceTagEnabled>. For more information on Service Tags see <http://wikis.sun.com/display/ServiceTag/Sun+Service+Tag+FAQ>. - The Admin Connector service. In order to provide agentry of the OpenDS server at any time, a new service has been added, dedicated to the administration, configuration and monitoring of the server. An overview of the Admin Connector service and it's use is available on the OpenDS wiki <https://www.opends.org/wiki/page/ManagingAdministrationTrafficToTheServer> - Updates to the various command line tools to support the Admin Connector service. - Some internal re-architecting of the server to put the foundation of future developments such as virtual directory services. The new NetworkGroups and WorkFlow internal services which have been specified in <https://www.opends.org/wiki/page/BasicOperationRoutingThroughNetworkGroup> are now implemented. - Many bug fixes...
---
opends/src/server/org/opends/server/util/SetupUtils.java | 98 +++++++++++++++++++++++++++++++++++++++++++++++++
1 files changed, 98 insertions(+), 0 deletions(-)
diff --git a/opends/src/server/org/opends/server/util/SetupUtils.java b/opends/src/server/org/opends/server/util/SetupUtils.java
index 83af11b..31fd13c 100644
--- a/opends/src/server/org/opends/server/util/SetupUtils.java
+++ b/opends/src/server/org/opends/server/util/SetupUtils.java
@@ -30,13 +30,18 @@
import java.io.BufferedWriter;
import java.io.File;
+import java.io.FileOutputStream;
import java.io.FileWriter;
import java.io.IOException;
import java.net.InetSocketAddress;
import java.net.ServerSocket;
import java.net.Socket;
+import java.security.KeyStoreException;
+import java.security.cert.Certificate;
+import java.security.cert.CertificateEncodingException;
import java.util.LinkedList;
+import java.util.Random;
import org.opends.server.types.OperatingSystem;
@@ -409,5 +414,98 @@
}
return s;
}
+
+ /**
+ * Returns a randomly generated password for a self-signed certificate
+ * keystore.
+ * @return a randomly generated password for a self-signed certificate
+ * keystore.
+ */
+ public static char[] createSelfSignedCertificatePwd() {
+ int pwdLength = 50;
+ char[] pwd = new char[pwdLength];
+ Random random = new Random();
+ for (int pos=0; pos < pwdLength; pos++) {
+ int type = getRandomInt(random,3);
+ char nextChar = getRandomChar(random,type);
+ pwd[pos] = nextChar;
+ }
+ return pwd;
+ }
+
+
+ /**
+ * Export a certificate in a file.
+ *
+ * @param certManager Certificate manager to use.
+ * @param alias Certificate alias to export.
+ * @param path Path of the output file.
+ *
+ * @throws CertificateEncodingException If the certificate manager cannot
+ * encode the certificate.
+ * @throws IOException If a problem occurs while creating or writing in the
+ * output file.
+ * @throws KeyStoreException If the certificate manager cannot retrieve the
+ * certificate to be exported.
+ */
+ public static void exportCertificate(
+ CertificateManager certManager, String alias, String path)
+ throws CertificateEncodingException, IOException, KeyStoreException
+ {
+ Certificate certificate = certManager.getCertificate(alias);
+
+ byte[] certificateBytes = certificate.getEncoded();
+
+ FileOutputStream outputStream = new FileOutputStream(path, false);
+ outputStream.write(certificateBytes);
+ outputStream.close();
+ }
+
+ /* The next two methods are used to generate the random password for the
+ * self-signed certificate. */
+ private static char getRandomChar(Random random, int type)
+ {
+ char generatedChar;
+ int next = random.nextInt();
+ int d;
+
+ switch (type)
+ {
+ case 0:
+ // Will return a digit
+ d = next % 10;
+ if (d < 0)
+ {
+ d = d * (-1);
+ }
+ generatedChar = (char) (d+48);
+ break;
+ case 1:
+ // Will return a lower case letter
+ d = next % 26;
+ if (d < 0)
+ {
+ d = d * (-1);
+ }
+ generatedChar = (char) (d + 97);
+ break;
+ default:
+ // Will return a capital letter
+ d = (next % 26);
+ if (d < 0)
+ {
+ d = d * (-1);
+ }
+ generatedChar = (char) (d + 65) ;
+ }
+
+ return generatedChar;
+ }
+
+ private static int getRandomInt(Random random,int modulo)
+ {
+ return (random.nextInt() & modulo);
+ }
+
}
--
Gitblit v1.10.0