]>
git.argeo.org Git - lgpl/argeo-commons.git/blob - org.argeo.cms/src/org/argeo/cms/internal/kernel/InitUtils.java
1 package org
.argeo
.cms
.internal
.kernel
;
3 import static org
.argeo
.cms
.internal
.kernel
.KernelUtils
.getFrameworkProp
;
6 import java
.io
.FileFilter
;
7 import java
.io
.IOException
;
8 import java
.net
.InetAddress
;
10 import java
.nio
.file
.Files
;
11 import java
.nio
.file
.Path
;
12 import java
.security
.KeyStore
;
13 import java
.util
.ArrayList
;
14 import java
.util
.Arrays
;
15 import java
.util
.Dictionary
;
16 import java
.util
.Hashtable
;
17 import java
.util
.List
;
19 import javax
.security
.auth
.x500
.X500Principal
;
21 import org
.apache
.commons
.io
.FileUtils
;
22 import org
.apache
.commons
.logging
.Log
;
23 import org
.apache
.commons
.logging
.LogFactory
;
24 import org
.argeo
.cms
.CmsException
;
25 import org
.argeo
.cms
.internal
.http
.HttpConstants
;
26 import org
.argeo
.cms
.internal
.jcr
.RepoConf
;
27 import org
.argeo
.node
.NodeConstants
;
28 import org
.argeo
.osgi
.useradmin
.UserAdminConf
;
31 * Interprets framework properties in order to generate the initial deploy
35 private final static Log log
= LogFactory
.getLog(InitUtils
.class);
37 /** Override the provided config with the framework properties */
38 static Dictionary
<String
, Object
> getNodeRepositoryConfig(Dictionary
<String
, Object
> provided
) {
39 Dictionary
<String
, Object
> props
= provided
!= null ? provided
: new Hashtable
<String
, Object
>();
40 for (RepoConf repoConf
: RepoConf
.values()) {
41 Object value
= getFrameworkProp(NodeConstants
.NODE_REPO_PROP_PREFIX
+ repoConf
.name());
43 props
.put(repoConf
.name(), value
);
45 props
.put(NodeConstants
.CN
, NodeConstants
.NODE
);
49 static Dictionary
<String
, Object
> getRepositoryConfig(String dataModelName
, Dictionary
<String
, Object
> provided
) {
50 if (dataModelName
.equals(NodeConstants
.NODE
) || dataModelName
.equals(NodeConstants
.HOME
))
51 throw new IllegalArgumentException("Data model '" + dataModelName
+ "' is reserved.");
52 Dictionary
<String
, Object
> props
= provided
!= null ? provided
: new Hashtable
<String
, Object
>();
53 for (RepoConf repoConf
: RepoConf
.values()) {
54 Object value
= getFrameworkProp(
55 NodeConstants
.NODE_REPOS_PROP_PREFIX
+ dataModelName
+ '.' + repoConf
.name());
57 props
.put(repoConf
.name(), value
);
59 if (props
.size() != 0)
60 props
.put(NodeConstants
.CN
, dataModelName
);
64 /** Override the provided config with the framework properties */
65 static Dictionary
<String
, Object
> getHttpServerConfig(Dictionary
<String
, Object
> provided
) {
66 String httpPort
= getFrameworkProp("org.osgi.service.http.port");
67 String httpsPort
= getFrameworkProp("org.osgi.service.http.port.secure");
68 /// TODO make it more generic
69 String httpHost
= getFrameworkProp(HttpConstants
.JETTY_PROPERTY_PREFIX
+ HttpConstants
.HTTP_HOST
);
70 String httpsHost
= getFrameworkProp(HttpConstants
.JETTY_PROPERTY_PREFIX
+ HttpConstants
.HTTPS_HOST
);
71 String webSocketEnabled
= getFrameworkProp(
72 HttpConstants
.JETTY_PROPERTY_PREFIX
+ HttpConstants
.WEB_SOCKET_ENABLED
);
74 final Hashtable
<String
, Object
> props
= new Hashtable
<String
, Object
>();
76 if (httpPort
!= null || httpsPort
!= null) {
77 if (httpPort
!= null) {
78 props
.put(HttpConstants
.HTTP_PORT
, httpPort
);
79 props
.put(HttpConstants
.HTTP_ENABLED
, true);
81 if (httpsPort
!= null) {
82 props
.put(HttpConstants
.HTTPS_PORT
, httpsPort
);
83 props
.put(HttpConstants
.HTTPS_ENABLED
, true);
84 Path keyStorePath
= KernelUtils
.getOsgiInstancePath(KernelConstants
.DEFAULT_KEYSTORE_PATH
);
85 String keyStorePassword
= getFrameworkProp(
86 HttpConstants
.JETTY_PROPERTY_PREFIX
+ HttpConstants
.SSL_PASSWORD
);
87 if (keyStorePassword
== null)
88 keyStorePassword
= "changeit";
89 if (!Files
.exists(keyStorePath
))
90 createSelfSignedKeyStore(keyStorePath
, keyStorePassword
);
91 props
.put(HttpConstants
.SSL_KEYSTORETYPE
, "PKCS12");
92 props
.put(HttpConstants
.SSL_KEYSTORE
, keyStorePath
.toString());
93 props
.put(HttpConstants
.SSL_PASSWORD
, keyStorePassword
);
94 props
.put(HttpConstants
.SSL_WANTCLIENTAUTH
, true);
95 String needClientAuth
= getFrameworkProp(
96 HttpConstants
.JETTY_PROPERTY_PREFIX
+ HttpConstants
.SSL_NEEDCLIENTAUTH
);
97 if (needClientAuth
!= null) {
98 props
.put(HttpConstants
.SSL_NEEDCLIENTAUTH
, Boolean
.parseBoolean(needClientAuth
));
101 if (httpHost
!= null)
102 props
.put(HttpConstants
.HTTP_HOST
, httpHost
);
103 if (httpsHost
!= null)
104 props
.put(HttpConstants
.HTTPS_HOST
, httpHost
);
106 if (webSocketEnabled
!= null)
107 if (webSocketEnabled
.equals("true"))
108 props
.put(HttpConstants
.WEB_SOCKET_ENABLED
, true);
110 props
.put(NodeConstants
.CN
, NodeConstants
.DEFAULT
);
115 static List
<Dictionary
<String
, Object
>> getUserDirectoryConfigs() {
116 List
<Dictionary
<String
, Object
>> res
= new ArrayList
<>();
117 File nodeBaseDir
= KernelUtils
.getOsgiInstancePath(KernelConstants
.DIR_NODE
).toFile();
118 List
<String
> uris
= new ArrayList
<>();
121 String nodeRolesUri
= getFrameworkProp(NodeConstants
.ROLES_URI
);
122 String baseNodeRoleDn
= NodeConstants
.ROLES_BASEDN
;
123 if (nodeRolesUri
== null) {
124 nodeRolesUri
= baseNodeRoleDn
+ ".ldif";
125 File nodeRolesFile
= new File(nodeBaseDir
, nodeRolesUri
);
126 if (!nodeRolesFile
.exists())
128 FileUtils
.copyInputStreamToFile(InitUtils
.class.getResourceAsStream(baseNodeRoleDn
+ ".ldif"),
130 } catch (IOException e
) {
131 throw new CmsException("Cannot copy demo resource", e
);
133 // nodeRolesUri = nodeRolesFile.toURI().toString();
135 uris
.add(nodeRolesUri
);
138 String nodeTokensUri
= getFrameworkProp(NodeConstants
.TOKENS_URI
);
139 String baseNodeTokensDn
= NodeConstants
.TOKENS_BASEDN
;
140 if (nodeTokensUri
== null) {
141 nodeTokensUri
= baseNodeTokensDn
+ ".ldif";
142 File nodeRolesFile
= new File(nodeBaseDir
, nodeRolesUri
);
143 if (!nodeRolesFile
.exists())
145 FileUtils
.copyInputStreamToFile(InitUtils
.class.getResourceAsStream(baseNodeTokensDn
+ ".ldif"),
147 } catch (IOException e
) {
148 throw new CmsException("Cannot copy demo resource", e
);
150 // nodeRolesUri = nodeRolesFile.toURI().toString();
152 uris
.add(nodeTokensUri
);
155 String userAdminUris
= getFrameworkProp(NodeConstants
.USERADMIN_URIS
);
156 if (userAdminUris
== null) {
157 String demoBaseDn
= "dc=example,dc=com";
158 userAdminUris
= demoBaseDn
+ ".ldif";
159 File businessRolesFile
= new File(nodeBaseDir
, userAdminUris
);
160 if (!businessRolesFile
.exists())
162 FileUtils
.copyInputStreamToFile(InitUtils
.class.getResourceAsStream(demoBaseDn
+ ".ldif"),
164 } catch (IOException e
) {
165 throw new CmsException("Cannot copy demo resource", e
);
167 // userAdminUris = businessRolesFile.toURI().toString();
168 log
.warn("## DEV Using dummy base DN " + demoBaseDn
);
169 // TODO downgrade security level
171 for (String userAdminUri
: userAdminUris
.split(" "))
172 uris
.add(userAdminUri
);
175 for (String uri
: uris
) {
179 if (u
.getPath() == null)
180 throw new CmsException("URI " + uri
+ " must have a path in order to determine base DN");
181 if (u
.getScheme() == null) {
182 if (uri
.startsWith("/") || uri
.startsWith("./") || uri
.startsWith("../"))
183 u
= new File(uri
).getCanonicalFile().toURI();
184 else if (!uri
.contains("/")) {
185 // u = KernelUtils.getOsgiInstanceUri(KernelConstants.DIR_NODE + '/' + uri);
188 throw new CmsException("Cannot interpret " + uri
+ " as an uri");
189 } else if (u
.getScheme().equals(UserAdminConf
.SCHEME_FILE
)) {
190 u
= new File(u
).getCanonicalFile().toURI();
192 } catch (Exception e
) {
193 throw new CmsException("Cannot interpret " + uri
+ " as an uri", e
);
195 Dictionary
<String
, Object
> properties
= UserAdminConf
.uriAsProperties(u
.toString());
203 * Called before node initialisation, in order populate OSGi instance are with
204 * some files (typically LDIF, etc).
206 static void prepareFirstInitInstanceArea() {
207 String nodeInit
= getFrameworkProp(NodeConstants
.NODE_INIT
);
208 if (nodeInit
== null)
209 nodeInit
= "../../init";
210 if (nodeInit
.startsWith("http")) {
211 // remoteFirstInit(nodeInit);
215 // TODO use java.nio.file
217 if (nodeInit
.startsWith("."))
218 initDir
= KernelUtils
.getExecutionDir(nodeInit
);
220 initDir
= new File(nodeInit
);
221 // TODO also uncompress archives
222 if (initDir
.exists())
224 FileUtils
.copyDirectory(initDir
, KernelUtils
.getOsgiInstanceDir(), new FileFilter() {
227 public boolean accept(File pathname
) {
228 if (pathname
.getName().equals(".svn") || pathname
.getName().equals(".git"))
233 log
.info("CMS initialized from " + initDir
.getCanonicalPath());
234 } catch (IOException e
) {
235 throw new CmsException("Cannot initialize from " + initDir
, e
);
239 private static void createSelfSignedKeyStore(Path keyStorePath
, String keyStorePassword
) {
240 // for (Provider provider : Security.getProviders())
241 // System.out.println(provider.getName());
242 File keyStoreFile
= keyStorePath
.toFile();
243 char[] ksPwd
= keyStorePassword
.toCharArray();
244 char[] keyPwd
= Arrays
.copyOf(ksPwd
, ksPwd
.length
);
245 if (!keyStoreFile
.exists()) {
247 keyStoreFile
.getParentFile().mkdirs();
248 KeyStore keyStore
= PkiUtils
.getKeyStore(keyStoreFile
, ksPwd
);
249 PkiUtils
.generateSelfSignedCertificate(keyStore
,
250 new X500Principal("CN=" + InetAddress
.getLocalHost().getHostName() + ",OU=UNSECURE,O=UNSECURE"),
252 PkiUtils
.saveKeyStore(keyStoreFile
, ksPwd
, keyStore
);
253 if (log
.isDebugEnabled())
254 log
.debug("Created self-signed unsecure keystore " + keyStoreFile
);
255 } catch (Exception e
) {
256 if (keyStoreFile
.length() == 0)
257 keyStoreFile
.delete();
258 log
.error("Cannot create keystore " + keyStoreFile
, e
);
261 throw new CmsException("Keystore " + keyStorePath
+ " already exists");