/security/nss/cmd/crmf-cgi/crmfcgi.html

http://github.com/zpao/v8monkey · HTML · 168 lines · 122 code · 11 blank · 35 comment · 0 complexity · 21401c99b8f88d2d07d75faea1b7f8ce MD5 · raw file 

    

  1. <!-- ***** BEGIN LICENSE BLOCK *****
    2. 

  2.    - Version: MPL 1.1/GPL 2.0/LGPL 2.1
    3. 

  3.    -
    4. 

  4.    - The contents of this file are subject to the Mozilla Public License Version
    5. 

  5.    - 1.1 (the "License"); you may not use this file except in compliance with
    6. 

  6.    - the License. You may obtain a copy of the License at
    7. 

  7.    - http://www.mozilla.org/MPL/
    8. 

  8.    -
    9. 

  9.    - Software distributed under the License is distributed on an "AS IS" basis,
    10. 

  10.    - WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
    11. 

  11.    - for the specific language governing rights and limitations under the
    12. 

  12.    - License.
    13. 

  13.    -
    14. 

  14.    - The Original Code is the Netscape security libraries.
    15. 

  15.    -
    16. 

  16.    - The Initial Developer of the Original Code is
    17. 

  17.    - Netscape Communications Corporation.
    18. 

  18.    - Portions created by the Initial Developer are Copyright (C) 1994-2000
    19. 

  19.    - the Initial Developer. All Rights Reserved.
    20. 

  20.    -
    21. 

  21.    - Contributor(s):
    22. 

  22.    -
    23. 

  23.    - Alternatively, the contents of this file may be used under the terms of
    24. 

  24.    - either the GNU General Public License Version 2 or later (the "GPL"), or
    25. 

  25.    - the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
    26. 

  26.    - in which case the provisions of the GPL or the LGPL are applicable instead
    27. 

  27.    - of those above. If you wish to allow use of your version of this file only
    28. 

  28.    - under the terms of either the GPL or the LGPL, and not to allow others to
    29. 

  29.    - use your version of this file under the terms of the MPL, indicate your
    30. 

  30.    - decision by deleting the provisions above and replace them with the notice
    31. 

  31.    - and other provisions required by the GPL or the LGPL. If you do not delete
    32. 

  32.    - the provisions above, a recipient may use your version of this file under
    33. 

  33.    - the terms of any one of the MPL, the GPL or the LGPL.
    34. 

  34.    -
    35. 

  35.    - ***** END LICENSE BLOCK ***** -->
    36. 

  36. 

  37. <html>
    38. 

  38. <head>
    39. 

  39. <title>CRMF Test Page for PSM</title>
    40. 

  40. <script language=javascript>
    41. 

  41. var request;
    42. 

  42. //This variable must be set to the first value
    43. 

  43. //in the select field "testType" in the form.
    44. 

  44. var keyGenType="SigningOnlyRSA";
    45. 

  45. 

  46. var requestedDN = "CN=Javi CA Shack ID, O=NSS";
    47. 

  47. 

  48. function setTestType() {
    49. 

  49.   var testType = document.crmfForm.testType;
    50. 

  50.   
    51. 

  51.   keyGenType = testType.options[testType.selectedIndex].value;
    52. 

  52. }
    53. 

  53. 

  54. function setRequest() {
    55. 

  55.   with (document.crmfForm) {
    56. 

  56.     CRMFRequest.value = request.request;
    57. 

  57.     submit();
    58. 

  58.   }
    59. 

  59. }
    60. 

  60. 

  61. function generateSignAndEncryptRSARequest() {
    62. 

  62.     request = crypto.generateCRMFRequest(requestedDN,
    63. 

  63.                                          null, null, null, "setRequest()",
    64. 

  64.                                          crypto.algorithms.rsa.keyEx.keySizes[0],
    65. 

  65.                                          null, "rsa-dual-use");    
    66. 

  66. }
    67. 

  67. 

  68. function generateSigningOnlyRSARequest() {
    69. 

  69.     request = crypto.generateCRMFRequest(requestedDN,null,null,null,"setRequest()",
    70. 

  70.                                          crypto.algorithms.rsa.signing.keySizes[0],
    71. 

  71.                                          null, "rsa-sign");
    72. 

  72. }
    73. 

  73. 

  74. function generateEncryptionOnlyRSARequest() {
    75. 

  75.     request = crypto.generateCRMFRequest(requestedDN, null, null, null, "setRequest()",
    76. 

  76.                                          crypto.algorithms.rsa.keyEx.keySizes[0],
    77. 

  77.                                          null, "rsa-ex");
    78. 

  78. }
    79. 

  79. 

  80. function generateDualRSAKeys() {
    81. 

  81.     request = crypto.generateCRMFRequest(requestedDN, null, null, null, "setRequest()",
    82. 

  82.                                          crypto.algorithms.rsa.keyEx.keySizes[0],
    83. 

  83.                                          null, "rsa-ex",
    84. 

  84.                                          crypto.algorithms.rsa.signing.keySizes[0],
    85. 

  85.                                          null, "rsa-sign");
    86. 

  86. }
    87. 

  87. 

  88. function generateDSAKey() {
    89. 

  89.     request = crypto.generateCRMFRequest(requestedDN, null, null, null, "setRequest()",
    90. 

  90.                                          crypto.algorithms.dsa.keySizes[0],
    91. 

  91.                                          null, "dsa-sign-nonrepudiation");
    92. 

  92. }
    93. 

  93. 

  94. function processForm(form) {
    95. 

  95.   with (form) {
    96. 

  96.     if (typeof(crypto.version) == "undefined") {
    97. 

  97.       alert('You must be running PSM in order to use this page.');
    98. 

  98.       return false;
    99. 

  99.     }
    100. 

  100.     if (NSSDirectory.value == "") {
    101. 

  101.       alert('You must provide a path for NSS to use.');
    102. 

  102.       return false;
    103. 

  103.     }
    104. 

  104.     if (dbPassword.value == "") {
    105. 

  105.       alert('You must provide a password for the certificate database.');
    106. 

  106.       return false;
    107. 

  107.     }
    108. 

  108.     if (CANickname.value == "") {
    109. 

  109.       alert('You must provide a CA Nickname to use.');
    110. 

  110.       return false;
    111. 

  111.     }
    112. 

  112.     //Now do the correct key generation.
    113. 

  113.     if (keyGenType == "SignAndEncryptRSA") {
    114. 

  114.       generateSignAndEncryptRSARequest();
    115. 

  115.     } else if (keyGenType == "SigningOnlyRSA") {
    116. 

  116.       generateSigningOnlyRSARequest();
    117. 

  117.     } else if (keyGenType == "EncryptionOnlyRSA") {
    118. 

  118.       generateEncryptionOnlyRSARequest();
    119. 

  119.     } else if (keyGenType == "DualRSAKeys") {
    120. 

  120.       generateDualRSAKeys();
    121. 

  121.     } else if (keyGenType == "DSAKeyGen") {
    122. 

  122.       generateDSAKey();
    123. 

  123.     }
    124. 

  124.   }
    125. 

  125.   return true;
    126. 

  126. }
    127. 

  127. </script>
    128. 

  128. </head>
    129. 

  129. <body>
    130. 

  130. <h1><center>CRMF Test page for PSM</center></h1>
    131. 

  131. This page is designed to be used in combination with the executable
    132. 

  132. produced by ns/security/cmd/crmf-cgi in a CGI environment.  In order
    133. 

  133. to successfully use this page, modify its action to post to a a server
    134. 

  134. where you have installed the crmfcgi executable and you'll be able to
    135. 

  135. test the functionality.
    136. 

  136. <hr>
    137. 

  137. <form name="crmfForm" method=post action="http://www.cgi-site.com/cgi-bin/crmfcgi"> 
    138. 

  138. <h2>Certificate Database information</h2>
    139. 

  139. First, enter all the information for the CGI to use for initializing 
    140. 

  140. NSS.  The CGI will use the directory entered below as the directory
    141. 

  141. where to look for the certificate and key databases.
    142. 

  142. <pre>
    143. 

  143. Path for NSS Config: <input size=40 type="text" name="NSSDirectory">
    144. 

  144. </pre>
    145. 

  145. Enter the password for the certificate database found in the direcotry
    146. 

  146. above.
    147. 

  147. <pre>
    148. 

  148. Database Password:   <input type="password" name="dbPassword" size=40>
    149. 

  149. </pre>
    150. 

  150. Now enter the nickname of the certificate to use for signing the 
    151. 

  151. certificate issued during this test.
    152. 

  152. <pre>
    153. 

  153. CA Nickname:         <input size=40 type="text" name="CANickname">
    154. 

  154. </pre>
    155. 

  155. <h2>Now, figure out which type of key generation you want to test:</h2>
    156. 

  156. <select name="testType" onChange="setTestType()">`
    157. 

  157. <option value="SigningOnlyRSA">Signing Only-RSA
    158. 

  158. <option value="EncryptionOnlyRSA">Encryption Only-RSA
    159. 

  159. <option value="SignAndEncryptRSA">Sign and Encrypt Single Key -RSA
    160. 

  160. <option value="DualRSAKeys">Dual Keys-RSA
    161. 

  161. <option value="DSAKeyGen">DSA Key Gen
    162. 

  162. </select>
    163. 

  163. <input type="hidden" name=CRMFRequest value="">
    164. 

  164. <hr>
    165. 

  165. <input type="button" value="OK" onclick="processForm(document.crmfForm)">
    166. 

  166. </form>
    167. 

  167. </body>
    168. 

  168. </html>
    169.