Re: [Openca-Users] x509 access to the ca-node

Massimiliano Pala Thu, 16 Nov 2006 13:23:13 -0800

Hello Jose,

Please try to use the attached Session.pm file (substitute in the
perl-modules OpenCA/ directory) and let me know if this fixes your
problem.


        --- Max


SOF - Dragone Jose Luis wrote:

HI
We are trying to set up x509 access to the ca-node. We’ve already initialized the CA, got the CA Administrator and RA Operator certs.
We can not login into the ca-node.The error message in stderror.log is :
Can't call method "param" on an undefined value at /var/openca/perl-modules/perl5/OpenCA/Session.pm line 251.
Compilation failed in require at /var/openca/etc/openca_start line 62.
getParam inside OpenCA::Session does not receive anything in the case of ca-node !.
Any clues?



--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]      [EMAIL PROTECTED]
                                                Tel.:   +39 (0)11  564 7081
http://security.polito.it                       Fax:    +39   178  270 2077
                                                Mobile: +39 (0)347 7222 365

Politecnico di Torino (EuroPKI) CA Info:

Authority Access Point                                  http://ca.polito.it
Authority's Certificate:          http://ca.polito.it/ca_cert/en_index.html
Certificate Revocation List:              http://ca.polito.it/crl03/crl.crl
--o------------------------------------------------------------------------

## OpenCA::Session.pm 
##
## Written by Michael Bell for the OpenCA project 2003
## Copyright (C) 2003-2004 The OpenCA Project
## All rights reserved.
##
##    This library is free software; you can redistribute it and/or
##    modify it under the terms of the GNU Lesser General Public
##    License as published by the Free Software Foundation; either
##    version 2.1 of the License, or (at your option) any later version.
##
##    This library is distributed in the hope that it will be useful,
##    but WITHOUT ANY WARRANTY; without even the implied warranty of
##    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
##    Lesser General Public License for more details.
##
##    You should have received a copy of the GNU Lesser General Public
##    License along with this library; if not, write to the Free Software
##    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
##

use strict;

package OpenCA::Session;

use CGI::Session qw/-ip-match/;
use OpenCA::Log::Message;

use FileHandle;

our ($errno, $errval);

($OpenCA::Session::VERSION = '$Revision: 1.6.2.1 $' )=~ s/(?:^.*: 
(\d+))|(?:\s+\$$)/defined $1?"0\.9":""/eg;

# Preloaded methods go here.

##
## supported functions
##
## new
##
## load
## update
## start
## stop
## clear
## getID
##
## getParam
## setParam
## loadParams
## saveParams
##

## Create an instance of the Class
sub new {
    my $that = shift;
    my $class = ref($that) || $that;

    my $self = {
                DEBUG     => 0,
                ## debug_msg => ()
               };

    bless $self, $class;

    my $keys = { @_ };
    $self->{cgi}         = $keys->{CGI};
    $self->{lifetime}    = 1200;
    $self->{lifetime}    = $keys->{LIFETIME} if ($keys->{LIFETIME});
    $self->{DEBUG}       = 1 if ($keys->{DEBUG});
    $self->{dir}         = $keys->{DIR};
    $self->{journal}     = $keys->{LOG};
    $self->{gettext}     = $keys->{GETTEXT};

    $self->{printed_header} = 0;

    return $self;
}

sub setError {
    my $self = shift;

    if (scalar (@_) == 4) {
        my $keys = { @_ };
        $self->{errval} = $keys->{ERRVAL};
        $self->{errno}  = $keys->{ERRNO};
    } else {
        $self->{errno}  = $_[0];
        $self->{errval} = $_[1];
    }
    $errno  = $self->{errno};
    $errval = $self->{errval};

    $self->{journal}->{errno}   = $self->{errno};
    $self->{journal}->{errval}  = $self->{errval};
    $self->{journal}->{message} = "";
    foreach my $msg (@{$self->{debug_msg}}) {
        $self->{journal}->{message} .= $msg."\n";
    }

    ## support for: return $self->setError (1234, "Something fails.") if (not 
$xyz);
    return undef;
}

#####################################
## operate on the complete session ##
#####################################

sub load {
    my $self = shift;

    if ($self->{cgi}->param ("CGISESSID"))
    {
        $self->{session} = new CGI::Session(
                                 undef,
                                 $self->{cgi}->param ("CGISESSID"),
                                 {Directory=>$self->{dir}});
    } else {
        return undef if (not $self->{cgi}->cookie("CGISESSID"));

        $self->{session} = new CGI::Session(
                                 undef,
                                 $self->{cgi}->cookie("CGISESSID"),
                                 {Directory=>$self->{dir}});
    }

    return 1 if ($self->{session});

    ## this can happen if the session is timed out
    return undef;
}

sub start {
    my $self = shift;

    ## destroy old session if present
    if ($self->{session}) {
        $self->{session}->delete;
        undef ($self->{session});
    }

    ## create new session
    $self->{session} = new CGI::Session(
                             undef,
                             undef,
                             {Directory=>$self->{dir}});

    ## set lifetime
    $self->{session}->expire($self->{lifetime});

    ## store cookie
    $self->{session}->flush;

    ## prepare header
    $self->{cookie} = $self->{cgi}->cookie(CGISESSID => $self->{session}->id);

    ## send header without content-type
    if (not $self->{printed_header})
    {
        my $header = $self->{cgi}->header( -cookie=>$self->{cookie} );
        $header =~ s/\n*Content-Type:[^\n]*\n*//s;
        print $header;
        $self->{printed_header} = 1;
    }

    return 1;
}

sub update {
    my $self = shift;

    ## set lifetime
    $self->{session}->expire($self->{lifetime});

    ## prepare header
    $self->{cookie} = $self->{cgi}->cookie(CGISESSID => $self->{session}->id);

    ## send header without content-type
    if (not $self->{printed_header})
    {
        my $header = $self->{cgi}->header( -cookie=>$self->{cookie} );
        my @lines = split "\n", $header;
        $header = "";
        foreach my $line (@lines) {
            $line = substr ($line, 0, length($line)-1);
            next if (not $line);
            next if ($line =~ /content-type/i);
            $header .= $line."\n";
        }
        print $header;
        $self->{printed_header} = 1;
    }
    $self->{session}->flush;

    return 1;
}

sub stop {
    my $self = shift;

    $self->{session}->delete;
    undef ($self->{session});

    return 1;
}

sub clear
{
    my $self = shift;
    $self->{session}->clear();
}

sub getID
{
    my $self = shift;
    $self->{session}->id;
}

######################
## param operations ##
######################

sub saveParams
{
    my $self = shift;
    $self->{session}->save_param ($self->{cgi});
    $self->{session}->flush;
}

sub loadParams
{
    my $self = shift;
    return $self->setError ("You cannot set a session parameter if there is no 
session created or loaded.", 123456)
        if( not exists $self->{session} );

    $self->{session}->load_param ($self->{cgi});
    $self->{session}->flush;
}

sub setParam
{
    my $self = shift;
    return $self->setError ("You cannot set a session parameter if there is no 
session created or loaded.", 1234567)
        if (not exists $self->{session});
    $self->{session}->param ($_[0], $_[1]);
    $self->{session}->flush;
}

sub getParam
{
    my $self = shift;

    return $self->setError ("You cannot set a session parameter if there is no 
session created or loaded.", 12345678)
        if( not exists $self->{session} );

    $self->{session}->param ($_[0]);
}

1;

smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Re: [Openca-Users] x509 access to the ca-node

Reply via email to