Examples with ISMLConfigurationManager com.helger.peppol.app.mgr.ISMLConfigurationManager used on opensource projects

Example 1 with ISMLConfigurationManager

use of com.helger.peppol.app.mgr.ISMLConfigurationManager in project peppol-practical by phax.

the class PagePublicToolsParticipantInformation method fillContent.

@Override
protected void fillContent(@Nonnull final WebPageExecutionContext aWPEC) {
    final HCNodeList aNodeList = aWPEC.getNodeList();
    final ISMLConfigurationManager aSMLConfigurationMgr = PPMetaManager.getSMLConfigurationMgr();
    final FormErrorList aFormErrors = new FormErrorList();
    final boolean bShowInput = true;
    String sParticipantIDScheme = DEFAULT_ID_SCHEME;
    String sParticipantIDValue = null;
    if (aWPEC.hasAction(CPageParam.ACTION_PERFORM)) {
        // Validate fields
        sParticipantIDScheme = StringHelper.trim(aWPEC.params().getAsString(FIELD_ID_SCHEME));
        sParticipantIDValue = StringHelper.trim(aWPEC.params().getAsString(FIELD_ID_VALUE));
        final String sSMLID = StringHelper.trim(aWPEC.params().getAsString(FIELD_SML));
        final ISMLConfiguration aSMLConfiguration = aSMLConfigurationMgr.getSMLInfoOfID(sSMLID);
        final boolean bSMLAutoDetect = ISMLConfigurationManager.ID_AUTO_DETECT.equals(sSMLID);
        final boolean bQueryBusinessCard = aWPEC.params().isCheckBoxChecked(PARAM_QUERY_BUSINESS_CARD, DEFAULT_QUERY_BUSINESS_CARD);
        final boolean bShowTime = aWPEC.params().isCheckBoxChecked(PARAM_SHOW_TIME, DEFAULT_SHOW_TIME);
        final boolean bXSDValidation = aWPEC.params().isCheckBoxChecked(PARAM_XSD_VALIDATION, DEFAULT_XSD_VALIDATION);
        final boolean bVerifySignatures = aWPEC.params().isCheckBoxChecked(PARAM_VERIFY_SIGNATURES, DEFAULT_VERIFY_SIGNATURES);
        final IIdentifierFactory aIF = aSMLConfiguration != null ? aSMLConfiguration.getSMPIdentifierType().getIdentifierFactory() : SimpleIdentifierFactory.INSTANCE;
        // Legacy URL params?
        if (aWPEC.params().containsKey("idscheme") && aWPEC.params().containsKey("idvalue")) {
            sParticipantIDScheme = DEFAULT_ID_SCHEME;
            sParticipantIDValue = StringHelper.trim(aWPEC.params().getAsString("idscheme")) + ":" + StringHelper.trim(aWPEC.params().getAsString("idvalue"));
        }
        if (StringHelper.hasNoText(sParticipantIDScheme))
            aFormErrors.addFieldError(FIELD_ID_SCHEME, "Please provide an identifier scheme");
        else if (!aIF.isParticipantIdentifierSchemeValid(sParticipantIDScheme))
            aFormErrors.addFieldError(FIELD_ID_SCHEME, "The participant identifier scheme '" + sParticipantIDScheme + "' is not valid!");
        if (StringHelper.hasNoText(sParticipantIDValue))
            aFormErrors.addFieldError(FIELD_ID_VALUE, "Please provide an identifier value");
        else if (!aIF.isParticipantIdentifierValueValid(sParticipantIDValue))
            aFormErrors.addFieldError(FIELD_ID_VALUE, "The participant identifier value '" + sParticipantIDValue + "' is not valid!");
        if (aSMLConfiguration == null && !bSMLAutoDetect)
            aFormErrors.addFieldError(FIELD_SML, "A valid SML must be selected!");
        if (aFormErrors.isEmpty()) {
            _queryParticipant(aWPEC, sParticipantIDScheme, sParticipantIDValue, aSMLConfiguration, bSMLAutoDetect, bQueryBusinessCard, bShowTime, bXSDValidation, bVerifySignatures);
        }
    }
    if (bShowInput) {
        final BootstrapForm aForm = aNodeList.addAndReturnChild(getUIHandler().createFormSelf(aWPEC).setMethod(EHCFormMethod.GET).setLeft(3));
        aForm.addChild(info().addChildren(div("Show all processes, document types and endpoints of a participant."), div("You may want to try scheme ").addChild(code(DEFAULT_ID_SCHEME)).addChild(" and value ").addChild(code("9915:test")).addChild(" on ").addChild(code("SMK")).addChild(" as an example.")));
        aForm.addFormGroup(new BootstrapFormGroup().setLabelMandatory("Identifier scheme").setCtrl(new HCEdit(new RequestField(FIELD_ID_SCHEME, sParticipantIDScheme)).setPlaceholder("Identifier scheme")).setHelpText(div("The most common identifier scheme is ").addChild(code(DEFAULT_ID_SCHEME))).setErrorList(aFormErrors.getListOfField(FIELD_ID_SCHEME)));
        aForm.addFormGroup(new BootstrapFormGroup().setLabelMandatory("Identifier value").setCtrl(new HCEdit(new RequestField(FIELD_ID_VALUE, sParticipantIDValue)).setPlaceholder("Identifier value")).setHelpText(div("The identifier value must look like ").addChild(code("9915:test"))).setErrorList(aFormErrors.getListOfField(FIELD_ID_VALUE)));
        aForm.addFormGroup(new BootstrapFormGroup().setLabelMandatory("SML to use").setCtrl(new SMLConfigurationSelect(new RequestField(FIELD_SML, ISMLConfigurationManager.ID_AUTO_DETECT), true)).setErrorList(aFormErrors.getListOfField(FIELD_SML)));
        aForm.addFormGroup(new BootstrapFormGroup().setLabel("Query Business Card?").setCtrl(new HCCheckBox(new RequestFieldBoolean(PARAM_QUERY_BUSINESS_CARD, DEFAULT_QUERY_BUSINESS_CARD))).setErrorList(aFormErrors.getListOfField(PARAM_QUERY_BUSINESS_CARD)));
        aForm.addFormGroup(new BootstrapFormGroup().setLabel("Show query duration?").setCtrl(new HCCheckBox(new RequestFieldBoolean(PARAM_SHOW_TIME, DEFAULT_SHOW_TIME))).setErrorList(aFormErrors.getListOfField(PARAM_SHOW_TIME)));
        aForm.addFormGroup(new BootstrapFormGroup().setLabel("Enable XML Schema validation of responses?").setCtrl(new HCCheckBox(new RequestFieldBoolean(PARAM_XSD_VALIDATION, DEFAULT_XSD_VALIDATION))).setErrorList(aFormErrors.getListOfField(PARAM_XSD_VALIDATION)));
        aForm.addFormGroup(new BootstrapFormGroup().setLabel("Verify signatures of SMP responses?").setCtrl(new HCCheckBox(new RequestFieldBoolean(PARAM_VERIFY_SIGNATURES, DEFAULT_VERIFY_SIGNATURES))).setErrorList(aFormErrors.getListOfField(PARAM_VERIFY_SIGNATURES)));
        final BootstrapButtonToolbar aToolbar = aForm.addAndReturnChild(new BootstrapButtonToolbar(aWPEC));
        aToolbar.addHiddenField(CPageParam.PARAM_ACTION, CPageParam.ACTION_PERFORM);
        aToolbar.addSubmitButton("Show details");
    }
}

Example 2 with ISMLConfigurationManager

use of com.helger.peppol.app.mgr.ISMLConfigurationManager in project peppol-practical by phax.

the class PagePublicToolsSMPSML method _registerSMPtoSML.

private void _registerSMPtoSML(@Nonnull final WebPageExecutionContext aWPEC, @Nonnull final FormErrorList aFormErrors) {
    final HCNodeList aNodeList = aWPEC.getNodeList();
    final Locale aDisplayLocale = aWPEC.getDisplayLocale();
    final ISMLConfigurationManager aSMLConfigurationMgr = PPMetaManager.getSMLConfigurationMgr();
    final String sSMLID = aWPEC.params().getAsString(FIELD_SML_ID);
    final ISMLConfiguration aSMLInfo = aSMLConfigurationMgr.getSMLInfoOfID(sSMLID);
    final String sSMPID = aWPEC.params().getAsString(FIELD_SMP_ID);
    final String sPhysicalAddress = aWPEC.params().getAsString(FIELD_PHYSICAL_ADDRESS);
    final String sLogicalAddress = aWPEC.params().getAsString(FIELD_LOGICAL_ADDRESS);
    final IFileItem aKeyStoreFile = aWPEC.params().getAsFileItem(FIELD_KEYSTORE);
    final String sKeyStorePassword = aWPEC.params().getAsString(FIELD_KEYSTORE_PW);
    final boolean bIsPeppol = aSMLInfo != null && aSMLInfo.getSMPAPIType() == ESMPAPIType.PEPPOL;
    if (aSMLInfo == null)
        aFormErrors.addFieldError(FIELD_SML_ID, "A valid SML must be selected!");
    if (StringHelper.hasNoText(sSMPID))
        aFormErrors.addFieldError(FIELD_SMP_ID, "A non-empty SMP ID must be provided!");
    else if (!RegExHelper.stringMatchesPattern(CPPApp.PATTERN_SMP_ID, sSMPID))
        aFormErrors.addFieldError(FIELD_SMP_ID, "The provided SMP ID contains invalid characters. It must match the following regular expression: " + CPPApp.PATTERN_SMP_ID);
    if (StringHelper.hasNoText(sPhysicalAddress))
        aFormErrors.addFieldError(FIELD_PHYSICAL_ADDRESS, "A physical address must be provided!");
    else if (!RegExHelper.stringMatchesPattern(IPV4Addr.PATTERN_IPV4, sPhysicalAddress))
        aFormErrors.addFieldError(FIELD_PHYSICAL_ADDRESS, "The provided physical address does not seem to be an IPv4 address!");
    else {
        final String[] aParts = StringHelper.getExplodedArray('.', sPhysicalAddress, 4);
        final byte[] aBytes = new byte[] { (byte) StringParser.parseInt(aParts[0], -1), (byte) StringParser.parseInt(aParts[1], -1), (byte) StringParser.parseInt(aParts[2], -1), (byte) StringParser.parseInt(aParts[3], -1) };
        try {
            InetAddress.getByAddress(aBytes);
        } catch (final UnknownHostException ex) {
            final String sMsg = "The provided IP address does not resolve to a valid host. ";
            aFormErrors.addFieldError(FIELD_PHYSICAL_ADDRESS, sMsg + AppCommonUI.getTechnicalDetailsString(ex, false));
        }
    }
    if (StringHelper.hasNoText(sLogicalAddress))
        aFormErrors.addFieldError(FIELD_LOGICAL_ADDRESS, "A logical address must be provided in the form 'http://smp.example.org'!");
    else {
        final URL aURL = URLHelper.getAsURL(sLogicalAddress);
        if (aURL == null)
            aFormErrors.addFieldError(FIELD_LOGICAL_ADDRESS, "The provided logical address seems not be a URL! Please use the form 'http://smp.example.org'");
        else {
            if (bIsPeppol) {
                if (!"http".equals(aURL.getProtocol()) && !"https".equals(aURL.getProtocol()))
                    aFormErrors.addFieldError(FIELD_LOGICAL_ADDRESS, "The provided logical address must use the 'http' protocol and may not use the '" + aURL.getProtocol() + "' protocol. According to the Peppol SMP specification, no other protocols than 'http' are allowed!");
                // -1 means default port
                if (aURL.getPort() != 80 && aURL.getPort() != -1)
                    aFormErrors.addFieldError(FIELD_LOGICAL_ADDRESS, "The provided logical address must use the default http port 80 and not port " + aURL.getPort() + ". According to the Peppol SMP specification, no other ports are allowed!");
                if (StringHelper.hasText(aURL.getPath()) && !"/".equals(aURL.getPath()))
                    aFormErrors.addFieldError(FIELD_LOGICAL_ADDRESS, "The provided logical address may not contain a path (" + aURL.getPath() + ") because according to the Peppol SMP specifications it must run in the root (/) path!");
            }
        }
    }
    final SSLSocketFactory aSocketFactory = _loadKeyStoreAndCreateSSLSocketFactory(EKeyStoreType.JKS, SECURITY_PROVIDER, aKeyStoreFile, sKeyStorePassword, aFormErrors, aDisplayLocale);
    if (aFormErrors.isEmpty()) {
        try {
            final ManageServiceMetadataServiceCaller aCaller = _create(aSMLInfo.getSMLInfo(), aSocketFactory);
            aCaller.create(sSMPID, sPhysicalAddress, sLogicalAddress);
            final String sMsg = "Successfully registered SMP '" + sSMPID + "' with physical address '" + sPhysicalAddress + "' and logical address '" + sLogicalAddress + "' to the SML '" + aSMLInfo.getManagementServiceURL() + "'.";
            LOGGER.info(sMsg);
            aNodeList.addChild(success(sMsg));
            AuditHelper.onAuditExecuteSuccess("smp-sml-create", sSMPID, sPhysicalAddress, sLogicalAddress, aSMLInfo.getManagementServiceURL());
        } catch (final Exception ex) {
            final String sMsg = "Error registering SMP '" + sSMPID + "' with physical address '" + sPhysicalAddress + "' and logical address '" + sLogicalAddress + "' to the SML '" + aSMLInfo.getManagementServiceURL() + "'.";
            aNodeList.addChild(error(sMsg).addChild(AppCommonUI.getTechnicalDetailsUI(ex, true)));
            AuditHelper.onAuditExecuteFailure("smp-sml-create", sSMPID, sPhysicalAddress, sLogicalAddress, aSMLInfo.getManagementServiceURL(), ex.getClass(), ex.getMessage());
        }
    } else
        aNodeList.addChild(BootstrapWebPageUIHandler.INSTANCE.createIncorrectInputBox(aWPEC));
}

Example 3 with ISMLConfigurationManager

use of com.helger.peppol.app.mgr.ISMLConfigurationManager in project peppol-practical by phax.

the class PagePublicToolsSMPSML method _updateSMPCertAtSML.

private void _updateSMPCertAtSML(@Nonnull final WebPageExecutionContext aWPEC, @Nonnull final FormErrorList aFormErrors) {
    final HCNodeList aNodeList = aWPEC.getNodeList();
    final Locale aDisplayLocale = aWPEC.getDisplayLocale();
    final ISMLConfigurationManager aSMLConfigurationMgr = PPMetaManager.getSMLConfigurationMgr();
    final LocalDate aNow = PDTFactory.getCurrentLocalDate();
    final String sSMLID = aWPEC.params().getAsString(FIELD_SML_ID);
    final ISMLConfiguration aSML = aSMLConfigurationMgr.getSMLInfoOfID(sSMLID);
    final IFileItem aKeyStoreFile = aWPEC.params().getAsFileItem(FIELD_KEYSTORE);
    final String sKeyStorePassword = aWPEC.params().getAsString(FIELD_KEYSTORE_PW);
    final String sMigrationDate = aWPEC.params().getAsString(FIELD_PM_MIGRATION_DATE);
    final LocalDate aMigrationDate = PDTFromString.getLocalDateFromString(sMigrationDate, aDisplayLocale);
    final String sMigrationPublicCert = aWPEC.params().getAsStringTrimmed(FIELD_PM_PUBLIC_CERT);
    X509Certificate aMigrationPublicCert = null;
    if (aSML == null)
        aFormErrors.addFieldError(FIELD_SML_ID, "A valid SML must be selected!");
    if (StringHelper.hasText(sMigrationDate)) {
        if (aMigrationDate == null)
            aFormErrors.addFieldError(FIELD_PM_MIGRATION_DATE, "The provided certificate migration date '" + sMigrationDate + "' is invalid!");
        else if (aMigrationDate.compareTo(aNow) <= 0)
            aFormErrors.addFieldError(FIELD_PM_MIGRATION_DATE, "The certificate migration date must be in the future!");
    }
    if (StringHelper.hasNoText(sMigrationPublicCert)) {
        aFormErrors.addFieldError(FIELD_PM_PUBLIC_CERT, "A new public certificate must be provided.");
    } else {
        try {
            aMigrationPublicCert = CertificateHelper.convertStringToCertficate(sMigrationPublicCert);
        } catch (final Exception ex) {
        // Fall through
        }
        if (aMigrationPublicCert == null)
            aFormErrors.addFieldError(FIELD_PM_PUBLIC_CERT, "The provided public certificate cannot be parsed as a X.509 certificate.");
        else {
            try {
                aMigrationPublicCert.checkValidity();
            } catch (final CertificateExpiredException ex) {
                aFormErrors.addFieldError(FIELD_PM_PUBLIC_CERT, "The provided public certificate is already expired!");
                aMigrationPublicCert = null;
            } catch (final CertificateNotYetValidException ex) {
            // That's okay
            }
            if (!sMigrationPublicCert.startsWith(CertificateHelper.BEGIN_CERTIFICATE))
                aFormErrors.addFieldError(FIELD_PM_PUBLIC_CERT, "The provided value must start with '" + CertificateHelper.BEGIN_CERTIFICATE + "' (without the quotes)");
            if (!sMigrationPublicCert.endsWith(CertificateHelper.END_CERTIFICATE))
                aFormErrors.addFieldError(FIELD_PM_PUBLIC_CERT, "The provided value must end with '" + CertificateHelper.END_CERTIFICATE + "' (without the quotes)");
        }
    }
    if (aMigrationPublicCert != null) {
        final LocalDate aNotBefore = PDTFactory.createLocalDate(aMigrationPublicCert.getNotBefore());
        final LocalDate aNotAfter = PDTFactory.createLocalDate(aMigrationPublicCert.getNotAfter());
        if (aMigrationDate != null) {
            if (aMigrationDate.isBefore(aNotBefore))
                aFormErrors.addFieldError(FIELD_PM_MIGRATION_DATE, "The provided certificate migration date " + PDTToString.getAsString(aMigrationDate, aDisplayLocale) + " must not be before the certificate NotBefore date " + PDTToString.getAsString(aNotBefore, aDisplayLocale) + "!");
            if (aMigrationDate.isAfter(aNotAfter))
                aFormErrors.addFieldError(FIELD_PM_MIGRATION_DATE, "The provided certificate migration date " + PDTToString.getAsString(aMigrationDate, aDisplayLocale) + " must not be after the certificate NotAfter date " + PDTToString.getAsString(aNotAfter, aDisplayLocale) + "!");
        } else {
            if (aNotBefore.compareTo(aNow) <= 0)
                aFormErrors.addFieldError(FIELD_PM_PUBLIC_CERT, "The effective certificate migration date (" + PDTToString.getAsString(aNotBefore, aDisplayLocale) + " - taken from the new public certificate) must be in the future!");
        }
    }
    final SSLSocketFactory aSocketFactory = _loadKeyStoreAndCreateSSLSocketFactory(EKeyStoreType.JKS, SECURITY_PROVIDER, aKeyStoreFile, sKeyStorePassword, aFormErrors, aDisplayLocale);
    if (aFormErrors.isEmpty()) {
        final BDMSLClient aCaller = new BDMSLClient(aSML.getSMLInfo());
        aCaller.setSSLSocketFactory(aSocketFactory);
        try {
            aCaller.prepareChangeCertificate(sMigrationPublicCert, aMigrationDate);
            final LocalDateTime aNotBefore = PDTFactory.createLocalDateTime(aMigrationPublicCert.getNotBefore());
            final LocalDateTime aNotAfter = PDTFactory.createLocalDateTime(aMigrationPublicCert.getNotAfter());
            final LocalDate aEffectiveMigrationDate = aMigrationDate != null ? aMigrationDate : aNotBefore.toLocalDate();
            final String sMsg = "Successfully prepared migration of SMP certificate at SML '" + aSML.getManagementServiceURL() + "'" + " to be exchanged at " + PDTToString.getAsString(aEffectiveMigrationDate, aDisplayLocale) + ".";
            LOGGER.info(sMsg);
            aNodeList.addChild(success().addChildren(div(sMsg), div("Issuer: " + aMigrationPublicCert.getIssuerX500Principal().getName()), div("Subject: " + aMigrationPublicCert.getSubjectX500Principal().getName()), div("Not before: " + PDTToString.getAsString(aNotBefore, aDisplayLocale)), div("Not after: " + PDTToString.getAsString(aNotAfter, aDisplayLocale))));
            AuditHelper.onAuditExecuteSuccess("smp-sml-update-cert", aSML.getManagementServiceURL(), sMigrationPublicCert, aMigrationDate);
        } catch (final com.helger.peppol.smlclient.bdmsl.BadRequestFault | com.helger.peppol.smlclient.bdmsl.InternalErrorFault | com.helger.peppol.smlclient.bdmsl.NotFoundFault | com.helger.peppol.smlclient.bdmsl.UnauthorizedFault | ClientTransportException ex) {
            final String sMsg = "Error preparing migration of SMP certificate at SML '" + aSML.getManagementServiceURL() + "'.";
            aNodeList.addChild(error(sMsg).addChild(AppCommonUI.getTechnicalDetailsUI(ex, true)));
            AuditHelper.onAuditExecuteFailure("smp-sml-update-cert", aSML.getManagementServiceURL(), sMigrationPublicCert, aMigrationDate, ex.getClass(), ex.getMessage());
        }
    } else
        aNodeList.addChild(BootstrapWebPageUIHandler.INSTANCE.createIncorrectInputBox(aWPEC));
}

Example 4 with ISMLConfigurationManager

use of com.helger.peppol.app.mgr.ISMLConfigurationManager in project peppol-practical by phax.

the class APISMPQueryGetBusinessCard method rateLimitedInvokeAPI.

@Override
protected void rateLimitedInvokeAPI(@Nonnull final IAPIDescriptor aAPIDescriptor, @Nonnull @Nonempty final String sPath, @Nonnull final Map<String, String> aPathVariables, @Nonnull final IRequestWebScopeWithoutResponse aRequestScope, @Nonnull final UnifiedResponse aUnifiedResponse) throws Exception {
    final ISMLConfigurationManager aSMLConfigurationMgr = PPMetaManager.getSMLConfigurationMgr();
    final String sSMLID = aPathVariables.get(PPAPI.PARAM_SML_ID);
    final boolean bSMLAutoDetect = ISMLConfigurationManager.ID_AUTO_DETECT.equals(sSMLID);
    ISMLConfiguration aSML = aSMLConfigurationMgr.getSMLInfoOfID(sSMLID);
    if (aSML == null && !bSMLAutoDetect)
        throw new APIParamException("Unsupported SML ID '" + sSMLID + "' provided.");
    final String sParticipantID = aPathVariables.get(PPAPI.PARAM_PARTICIPANT_ID);
    final IParticipantIdentifier aPID = SimpleIdentifierFactory.INSTANCE.parseParticipantIdentifier(sParticipantID);
    if (aPID == null)
        throw new APIParamException("Invalid participant ID '" + sParticipantID + "' provided.");
    final ZonedDateTime aQueryDT = PDTFactory.getCurrentZonedDateTimeUTC();
    final StopWatch aSW = StopWatch.createdStarted();
    SMPQueryParams aQueryParams = null;
    if (bSMLAutoDetect) {
        for (final ISMLConfiguration aCurSML : aSMLConfigurationMgr.getAllSorted()) {
            aQueryParams = SMPQueryParams.createForSML(aCurSML, aPID.getScheme(), aPID.getValue(), false);
            if (aQueryParams == null)
                continue;
            try {
                InetAddress.getByName(aQueryParams.getSMPHostURI().getHost());
                // Found it
                aSML = aCurSML;
                break;
            } catch (final UnknownHostException ex) {
            // continue
            }
        }
        // Ensure to go into the exception handler
        if (aSML == null)
            throw new HttpResponseException(CHttp.HTTP_NOT_FOUND, "The participant identifier '" + sParticipantID + "' could not be found in any SML.");
    } else {
        aQueryParams = SMPQueryParams.createForSML(aSML, aPID.getScheme(), aPID.getValue(), true);
    }
    if (aQueryParams == null)
        throw new APIParamException("Failed to resolve participant ID '" + sParticipantID + "' for the provided SML '" + aSML.getID() + "'");
    final IParticipantIdentifier aParticipantID = aQueryParams.getParticipantID();
    final String sLogPrefix = "[API] ";
    LOGGER.info(sLogPrefix + "BusinessCard of '" + aParticipantID.getURIEncoded() + "' is queried using SMP API '" + aQueryParams.getSMPAPIType() + "' from '" + aQueryParams.getSMPHostURI() + "' using SML '" + aSML + "'");
    IJsonObject aJson = null;
    final String sBCURL = aQueryParams.getSMPHostURI().toString() + "/businesscard/" + aParticipantID.getURIEncoded();
    LOGGER.info(sLogPrefix + "Querying BC from '" + sBCURL + "'");
    byte[] aData;
    try (HttpClientManager aHttpClientMgr = new HttpClientManager()) {
        final HttpGet aGet = new HttpGet(sBCURL);
        aData = aHttpClientMgr.execute(aGet, new ResponseHandlerByteArray());
    } catch (final Exception ex) {
        aData = null;
    }
    if (aData == null)
        LOGGER.warn(sLogPrefix + "No Business Card is available for that participant.");
    else {
        final PDBusinessCard aBC = PDBusinessCardHelper.parseBusinessCard(aData, StandardCharsets.UTF_8);
        if (aBC == null) {
            LOGGER.error(sLogPrefix + "Failed to parse BC:\n" + new String(aData));
        } else {
            // Business Card found
            aJson = aBC.getAsJson();
        }
    }
    aSW.stop();
    if (aJson == null) {
        LOGGER.error("[API] Failed to perform the BusinessCard SMP lookup");
        aUnifiedResponse.setStatus(CHttp.HTTP_NOT_FOUND);
    } else {
        LOGGER.info("[API] Succesfully finished BusinessCard lookup lookup after " + aSW.getMillis() + " milliseconds");
        aJson.add("queryDateTime", DateTimeFormatter.ISO_ZONED_DATE_TIME.format(aQueryDT));
        aJson.add("queryDurationMillis", aSW.getMillis());
        final String sRet = new JsonWriter(JsonWriterSettings.DEFAULT_SETTINGS_FORMATTED).writeAsString(aJson);
        aUnifiedResponse.setContentAndCharset(sRet, StandardCharsets.UTF_8).setMimeType(CMimeType.APPLICATION_JSON).enableCaching(3 * CGlobal.SECONDS_PER_HOUR);
    }
}

Example 5 with ISMLConfigurationManager

use of com.helger.peppol.app.mgr.ISMLConfigurationManager in project peppol-practical by phax.

the class PagePublicToolsParticipantInformation method _queryParticipant.

private void _queryParticipant(@Nonnull final WebPageExecutionContext aWPEC, final String sParticipantIDScheme, final String sParticipantIDValue, final ISMLConfiguration aSMLConfiguration, final boolean bSMLAutoDetect, final boolean bQueryBusinessCard, final boolean bShowTime, final boolean bXSDValidation, final boolean bVerifySignatures) {
    final HCNodeList aNodeList = aWPEC.getNodeList();
    final Locale aDisplayLocale = aWPEC.getDisplayLocale();
    final IRequestWebScopeWithoutResponse aRequestScope = aWPEC.getRequestScope();
    final ISMLConfigurationManager aSMLConfigurationMgr = PPMetaManager.getSMLConfigurationMgr();
    final String sParticipantIDUriEncoded = CIdentifier.getURIEncoded(sParticipantIDScheme, sParticipantIDValue);
    LOGGER.info("Start querying the Participant information of '" + sParticipantIDUriEncoded + "'");
    // Try to print the basic information before an error occurs
    aNodeList.addChild(div("Querying the following SMP for ").addChild(code(sParticipantIDUriEncoded)).addChild(":"));
    final ICommonsList<JAXBException> aSMPExceptions = new CommonsArrayList<>();
    try {
        SMPQueryParams aQueryParams = null;
        ISMLConfiguration aRealSMLConfiguration = aSMLConfiguration;
        if (bSMLAutoDetect) {
            final ICommonsList<ISMLConfiguration> aSortedList = aSMLConfigurationMgr.getAllSorted();
            if (LOGGER.isDebugEnabled())
                LOGGER.debug("Sorted SML Configs: " + StringHelper.getImplodedMapped(", ", aSortedList, ISMLConfiguration::getID));
            for (final ISMLConfiguration aCurSML : aSortedList) {
                aQueryParams = SMPQueryParams.createForSML(aCurSML, sParticipantIDScheme, sParticipantIDValue, false);
                if (aQueryParams == null)
                    continue;
                try {
                    InetAddress.getByName(aQueryParams.getSMPHostURI().getHost());
                    // Found it
                    aRealSMLConfiguration = aCurSML;
                    break;
                } catch (final UnknownHostException ex) {
                // continue
                }
            }
            // Ensure to go into the exception handler
            if (aRealSMLConfiguration == null) {
                LOGGER.error("Failed to autodetect a matching SML for '" + sParticipantIDUriEncoded + "'");
                aNodeList.addChild(error(div("Seems like the participant ID " + sParticipantIDUriEncoded + " is not known in any of the configured networks.")));
                // Audit failure
                AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, "no-sml-found");
                return;
            }
            LOGGER.info("Participant ID '" + sParticipantIDUriEncoded + "': auto detected SML " + aRealSMLConfiguration.getID());
        } else {
            // SML configuration is not null
            aQueryParams = SMPQueryParams.createForSML(aRealSMLConfiguration, sParticipantIDScheme, sParticipantIDValue, true);
        }
        if (aQueryParams == null) {
            LOGGER.error("Participant ID '" + sParticipantIDUriEncoded + "': failed to resolve SMP query parameters for SML '" + aRealSMLConfiguration.getID() + "'");
            aNodeList.addChild(error(div("Failed to resolve participant ID " + sParticipantIDUriEncoded + " for the provided network.")).addChild(bSMLAutoDetect ? null : div("Try selecting a different SML - maybe this helps")));
            // Audit failure
            AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, "smp-query-params-null");
            return;
        }
        LOGGER.info("Participant information of '" + sParticipantIDUriEncoded + "' is queried using SMP API '" + aQueryParams.getSMPAPIType() + "' from '" + aQueryParams.getSMPHostURI() + "' using SML '" + aRealSMLConfiguration + "'; XSD validation=" + bXSDValidation + "; verify signatures=" + bVerifySignatures);
        final IParticipantIdentifier aParticipantID = aQueryParams.getParticipantID();
        final URL aSMPHost = URLHelper.getAsURL(aQueryParams.getSMPHostURI());
        {
            if (LOGGER.isDebugEnabled())
                LOGGER.debug("Trying to resolve SMP '" + aSMPHost.getHost() + "' by DNS");
            final HCUL aUL = new HCUL();
            aNodeList.addChild(aUL);
            aUL.addItem(div("SML used: ").addChild(code(aRealSMLConfiguration.getDisplayName() + " / " + aRealSMLConfiguration.getDNSZone())).addChild(" ").addChild(aRealSMLConfiguration.isProduction() ? badgeSuccess("production SML") : badgeWarn("test SML")));
            aUL.addItem(div("Query API: " + aRealSMLConfiguration.getSMPAPIType().getDisplayName()));
            final String sURL1 = aSMPHost.toExternalForm();
            aUL.addItem(div("Resolved name: ").addChild(code(sURL1)), div(_createOpenInBrowser(sURL1)));
            if (aWPEC.params().hasStringValue("dnsjava", "true")) {
                LOGGER.info("Start DNSJava lookup");
                Record[] aRecords = null;
                try {
                    aRecords = new Lookup(aSMPHost.getHost(), Type.A).run();
                } catch (final TextParseException ex) {
                // Ignore
                }
                if (aRecords != null)
                    for (final Record aRecord : aRecords) {
                        final ARecord aARec = (ARecord) aRecord;
                        final String sURL2 = aARec.rdataToString();
                        final InetAddress aNice = aARec.getAddress();
                        final String sURL3 = aNice != null ? aNice.getCanonicalHostName() : null;
                        final HCDiv aDiv1 = div("[dnsjava] IP addressX: ").addChild(code(sURL2));
                        if (sURL3 != null)
                            aDiv1.addChild(" - reverse lookup: ").addChild(code(sURL3));
                        else
                            aDiv1.addChild(" - reverse lookup failed");
                        final HCDiv aDiv2 = div(_createOpenInBrowser("http://" + sURL2, "Open IP in browser"));
                        if (sURL3 != null)
                            aDiv2.addChild(" ").addChild(_createOpenInBrowser("http://" + sURL3, "Open name in browser"));
                        aUL.addItem(aDiv1, aDiv2);
                    }
                LOGGER.info("Finished DNSJava lookup - " + (aRecords == null ? "no results" : aRecords.length + " result records"));
            }
            try {
                final InetAddress[] aInetAddresses = InetAddress.getAllByName(aSMPHost.getHost());
                for (final InetAddress aInetAddress : aInetAddresses) {
                    final String sURL2 = new IPV4Addr(aInetAddress).getAsString();
                    final InetAddress aNice = InetAddress.getByAddress(aInetAddress.getAddress());
                    final String sURL3 = aNice.getCanonicalHostName();
                    aUL.addItem(div("IP address: ").addChild(code(sURL2)).addChild(" - reverse lookup: ").addChild(code(sURL3)), div(_createOpenInBrowser("http://" + sURL2, "Open IP in browser")).addChild(" ").addChild(_createOpenInBrowser("http://" + sURL3, "Open name in browser")));
                }
                // Show only once
                final String sURL4 = sURL1 + (sURL1.endsWith("/") ? "" : "/") + sParticipantIDUriEncoded;
                aUL.addItem(div("Query base URL: ").addChild(code(sURL4)), div(_createOpenInBrowser(sURL4)));
                if (!bXSDValidation)
                    aUL.addItem(badgeWarn("XML Schema validation of SMP responses is disabled."));
                if (!bVerifySignatures)
                    aUL.addItem(badgeDanger("Signature verification of SMP responses is disabled."));
            } catch (final UnknownHostException ex) {
                LOGGER.error("Failed to resolve SMP host '" + aSMPHost.getHost() + "' for the participant ID '" + sParticipantIDUriEncoded + "'");
                aNodeList.addChild(error(div("Seems like the participant ID " + sParticipantIDUriEncoded + " is not registered to the selected network.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false)).addChild(bSMLAutoDetect ? null : div("Try selecting a different SML - maybe this helps")));
                // Audit failure
                AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, "unknown-host", ex.getMessage());
                return;
            }
        }
        // Determine all document types
        final ICommonsList<IDocumentTypeIdentifier> aDocTypeIDs = new CommonsArrayList<>();
        SMPClientReadOnly aSMPClient = null;
        BDXRClientReadOnly aBDXR1Client = null;
        final Consumer<GenericJAXBMarshaller<?>> aSMPMarshallerCustomizer = m -> {
            aSMPExceptions.clear();
            // Remember exceptions
            m.readExceptionCallbacks().add(aSMPExceptions::add);
        };
        try {
            final StopWatch aSWGetDocTypes = StopWatch.createdStarted();
            final HCUL aSGUL = new HCUL();
            final ICommonsSortedMap<String, String> aSGHrefs = new CommonsTreeMap<>();
            IHCNode aSGExtension = null;
            switch(aQueryParams.getSMPAPIType()) {
                case PEPPOL:
                    {
                        aSMPClient = new SMPClientReadOnly(aQueryParams.getSMPHostURI());
                        aSMPClient.setXMLSchemaValidation(bXSDValidation);
                        aSMPClient.setVerifySignature(bVerifySignatures);
                        aSMPClient.setMarshallerCustomizer(aSMPMarshallerCustomizer);
                        // Get all HRefs and sort them by decoded URL
                        final com.helger.xsds.peppol.smp1.ServiceGroupType aSG = aSMPClient.getServiceGroupOrNull(aParticipantID);
                        if (aSG != null) {
                            // Map from cleaned URL to original URL
                            if (aSG.getServiceMetadataReferenceCollection() != null)
                                for (final com.helger.xsds.peppol.smp1.ServiceMetadataReferenceType aSMR : aSG.getServiceMetadataReferenceCollection().getServiceMetadataReference()) {
                                    // Decoded href is important for unification
                                    final String sHref = CIdentifier.createPercentDecoded(aSMR.getHref());
                                    if (aSGHrefs.put(sHref, aSMR.getHref()) != null)
                                        aSGUL.addItem(warn("The ServiceGroup list contains the duplicate URL ").addChild(code(sHref)));
                                }
                            if (aSG.getExtension() != null && aSG.getExtension().getAny() != null) {
                                aSGExtension = new HCPrismJS(EPrismLanguage.MARKUP).addChild(XMLWriter.getNodeAsString(aSG.getExtension().getAny()));
                            }
                        }
                        break;
                    }
                case OASIS_BDXR_V1:
                    {
                        aBDXR1Client = new BDXRClientReadOnly(aQueryParams.getSMPHostURI());
                        aBDXR1Client.setXMLSchemaValidation(bXSDValidation);
                        aBDXR1Client.setVerifySignature(bVerifySignatures);
                        aBDXR1Client.setMarshallerCustomizer(aSMPMarshallerCustomizer);
                        // Get all HRefs and sort them by decoded URL
                        final com.helger.xsds.bdxr.smp1.ServiceGroupType aSG = aBDXR1Client.getServiceGroupOrNull(aParticipantID);
                        // Map from cleaned URL to original URL
                        if (aSG != null) {
                            if (aSG.getServiceMetadataReferenceCollection() != null)
                                for (final com.helger.xsds.bdxr.smp1.ServiceMetadataReferenceType aSMR : aSG.getServiceMetadataReferenceCollection().getServiceMetadataReference()) {
                                    // Decoded href is important for unification
                                    final String sHref = CIdentifier.createPercentDecoded(aSMR.getHref());
                                    if (aSGHrefs.put(sHref, aSMR.getHref()) != null)
                                        aSGUL.addItem(warn("The ServiceGroup list contains the duplicate URL ").addChild(code(sHref)));
                                }
                            if (aSG.getExtensionCount() > 0) {
                                final HCUL aNL2 = new HCUL();
                                for (final com.helger.xsds.bdxr.smp1.ExtensionType aExt : aSG.getExtension()) if (aExt.getAny() != null) {
                                    if (aExt.getAny() instanceof Element)
                                        aNL2.addItem(new HCPrismJS(EPrismLanguage.MARKUP).addChild(XMLWriter.getNodeAsString((Element) aExt.getAny())));
                                    else
                                        aNL2.addItem(code(aExt.getAny().toString()));
                                }
                                if (aNL2.hasChildren())
                                    aSGExtension = aNL2;
                            }
                        }
                        break;
                    }
            }
            aSWGetDocTypes.stop();
            LOGGER.info("Participant information of '" + aParticipantID.getURIEncoded() + "' returned " + aSGHrefs.size() + " entries");
            final HCH3 aH3 = h3("ServiceGroup contents");
            if (bShowTime)
                aH3.addChild(" ").addChild(_createTimingNode(aSWGetDocTypes.getMillis()));
            aNodeList.addChild(aH3);
            final String sPathStart = "/" + aParticipantID.getURIEncoded() + "/services/";
            // Show all ServiceGroup hrefs
            for (final Map.Entry<String, String> aEntry : aSGHrefs.entrySet()) {
                final String sHref = aEntry.getKey();
                final String sOriginalHref = aEntry.getValue();
                final IHCLI<?> aLI = aSGUL.addAndReturnItem(div(code(sHref)));
                // Should be case insensitive "indexOf" here
                final int nPathStart = sHref.toLowerCase(Locale.US).indexOf(sPathStart.toLowerCase(Locale.US));
                if (nPathStart >= 0) {
                    final String sDocType = sHref.substring(nPathStart + sPathStart.length());
                    final IDocumentTypeIdentifier aDocType = aQueryParams.getIF().parseDocumentTypeIdentifier(sDocType);
                    if (aDocType != null) {
                        aDocTypeIDs.add(aDocType);
                        aLI.addChild(div(EFontAwesome4Icon.ARROW_RIGHT.getAsNode()).addChild(" ").addChild(AppCommonUI.createDocTypeID(aDocType, false)));
                        aLI.addChild(div(EFontAwesome4Icon.ARROW_RIGHT.getAsNode()).addChild(" ").addChild(_createOpenInBrowser(sOriginalHref)));
                    } else {
                        aLI.addChild(error("The document type ").addChild(code(sDocType)).addChild(" could not be interpreted as a structured document type!"));
                    }
                } else {
                    aLI.addChild(error().addChildren(div("Contained href does not match the rules!"), div("Found href: ").addChild(code(sHref)), div("Expected path part: ").addChild(code(sPathStart))));
                }
            }
            if (!aSGUL.hasChildren())
                aSGUL.addItem(warn("No service group entries were found for " + aParticipantID.getURIEncoded()));
            if (aSGExtension != null)
                aSGUL.addAndReturnItem(div("Extension:")).addChild(aSGExtension);
            aNodeList.addChild(aSGUL);
        } catch (final SMPClientException ex) {
            if (LOGGER.isDebugEnabled())
                LOGGER.debug("Participant DocTypes Error", ex);
            else if (LOGGER.isWarnEnabled())
                LOGGER.warn("Participant DocTypes Error: " + ex.getClass().getName() + " - " + ex.getMessage());
            final BootstrapErrorBox aErrorBox = error(div("Error querying SMP.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false));
            for (final JAXBException aItem : aSMPExceptions) aErrorBox.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
            aNodeList.addChild(aErrorBox);
            // Audit failure
            AuditHelper.onAuditExecuteFailure("participant-doctypes", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
        }
        // List document type details
        if (aDocTypeIDs.isNotEmpty()) {
            final OffsetDateTime aNowDateTime = PDTFactory.getCurrentOffsetDateTime();
            final ICommonsOrderedSet<X509Certificate> aAllUsedEndpointCertifiactes = new CommonsLinkedHashSet<>();
            long nTotalDurationMillis = 0;
            aNodeList.addChild(h3("Document type details"));
            final HCUL aULDocTypeIDs = new HCUL();
            for (final IDocumentTypeIdentifier aDocTypeID : aDocTypeIDs.getSortedInline(IDocumentTypeIdentifier.comparator())) {
                final HCDiv aDocTypeDiv = div(AppCommonUI.createDocTypeID(aDocTypeID, true));
                final IHCLI<?> aLIDocTypeID = aULDocTypeIDs.addAndReturnItem(aDocTypeDiv);
                LOGGER.info("Now SMP querying '" + aParticipantID.getURIEncoded() + "' / '" + aDocTypeID.getURIEncoded() + "'");
                final StopWatch aSWGetDetails = StopWatch.createdStarted();
                try {
                    switch(aQueryParams.getSMPAPIType()) {
                        case PEPPOL:
                            {
                                final com.helger.xsds.peppol.smp1.SignedServiceMetadataType aSSM = aSMPClient.getServiceMetadataOrNull(aParticipantID, aDocTypeID);
                                aSWGetDetails.stop();
                                if (aSSM != null) {
                                    final com.helger.xsds.peppol.smp1.ServiceMetadataType aSM = aSSM.getServiceMetadata();
                                    if (aSM.getRedirect() != null)
                                        aLIDocTypeID.addChild(div("Redirect to " + aSM.getRedirect().getHref()));
                                    else {
                                        // For all processes
                                        final HCUL aULProcessID = new HCUL();
                                        for (final com.helger.xsds.peppol.smp1.ProcessType aProcess : aSM.getServiceInformation().getProcessList().getProcess()) if (aProcess.getProcessIdentifier() != null) {
                                            final IHCLI<?> aLIProcessID = aULProcessID.addItem();
                                            aLIProcessID.addChild(div("Process ID: ").addChild(AppCommonUI.createProcessID(aDocTypeID, SimpleProcessIdentifier.wrap(aProcess.getProcessIdentifier()))));
                                            final HCUL aULEndpoint = new HCUL();
                                            // For all endpoints of the process
                                            for (final com.helger.xsds.peppol.smp1.EndpointType aEndpoint : aProcess.getServiceEndpointList().getEndpoint()) {
                                                final IHCLI<?> aLIEndpoint = aULEndpoint.addItem();
                                                // Endpoint URL
                                                final String sEndpointRef = aEndpoint.getEndpointReference() == null ? null : W3CEndpointReferenceHelper.getAddress(aEndpoint.getEndpointReference());
                                                _printEndpointURL(aLIEndpoint, sEndpointRef);
                                                // Valid from
                                                _printActivationDate(aLIEndpoint, aEndpoint.getServiceActivationDate(), aDisplayLocale);
                                                // Valid to
                                                _printExpirationDate(aLIEndpoint, aEndpoint.getServiceExpirationDate(), aDisplayLocale);
                                                // Transport profile
                                                _printTransportProfile(aLIEndpoint, aEndpoint.getTransportProfile());
                                                // Technical infos
                                                _printTecInfo(aLIEndpoint, aEndpoint.getTechnicalInformationUrl(), aEndpoint.getTechnicalContactUrl());
                                                // Certificate (also add null values)
                                                final X509Certificate aCert = CertificateHelper.convertStringToCertficateOrNull(aEndpoint.getCertificate());
                                                aAllUsedEndpointCertifiactes.add(aCert);
                                            }
                                            aLIProcessID.addChild(aULEndpoint);
                                        }
                                        aLIDocTypeID.addChild(aULProcessID);
                                    }
                                } else {
                                    aLIDocTypeID.addChild(error("Failed to read service metadata from SMP (not found)"));
                                }
                                break;
                            }
                        case OASIS_BDXR_V1:
                            {
                                final com.helger.xsds.bdxr.smp1.SignedServiceMetadataType aSSM = aBDXR1Client.getServiceMetadataOrNull(aParticipantID, aDocTypeID);
                                aSWGetDetails.stop();
                                if (aSSM != null) {
                                    final com.helger.xsds.bdxr.smp1.ServiceMetadataType aSM = aSSM.getServiceMetadata();
                                    if (aSM.getRedirect() != null)
                                        aLIDocTypeID.addChild(div("Redirect to " + aSM.getRedirect().getHref()));
                                    else {
                                        // For all processes
                                        final HCUL aULProcessID = new HCUL();
                                        for (final com.helger.xsds.bdxr.smp1.ProcessType aProcess : aSM.getServiceInformation().getProcessList().getProcess()) if (aProcess.getProcessIdentifier() != null) {
                                            final IHCLI<?> aLIProcessID = aULProcessID.addItem();
                                            aLIProcessID.addChild(div("Process ID: ").addChild(AppCommonUI.createProcessID(aDocTypeID, SimpleProcessIdentifier.wrap(aProcess.getProcessIdentifier()))));
                                            final HCUL aULEndpoint = new HCUL();
                                            // For all endpoints of the process
                                            for (final com.helger.xsds.bdxr.smp1.EndpointType aEndpoint : aProcess.getServiceEndpointList().getEndpoint()) {
                                                final IHCLI<?> aLIEndpoint = aULEndpoint.addItem();
                                                // Endpoint URL
                                                _printEndpointURL(aLIEndpoint, aEndpoint.getEndpointURI());
                                                // Valid from
                                                _printActivationDate(aLIEndpoint, aEndpoint.getServiceActivationDate(), aDisplayLocale);
                                                // Valid to
                                                _printExpirationDate(aLIEndpoint, aEndpoint.getServiceExpirationDate(), aDisplayLocale);
                                                // Transport profile
                                                _printTransportProfile(aLIEndpoint, aEndpoint.getTransportProfile());
                                                // Technical infos
                                                _printTecInfo(aLIEndpoint, aEndpoint.getTechnicalInformationUrl(), aEndpoint.getTechnicalContactUrl());
                                                // Certificate (also add null values)
                                                try {
                                                    final X509Certificate aCert = CertificateHelper.convertByteArrayToCertficateDirect(aEndpoint.getCertificate());
                                                    aAllUsedEndpointCertifiactes.add(aCert);
                                                } catch (final CertificateException ex) {
                                                    aAllUsedEndpointCertifiactes.add(null);
                                                }
                                            }
                                            aLIProcessID.addChild(aULEndpoint);
                                        }
                                        aLIDocTypeID.addChild(aULProcessID);
                                    }
                                } else {
                                    aLIDocTypeID.addChild(error("Failed to read service metadata from SMP (not found)"));
                                }
                                break;
                            }
                    }
                } catch (final SMPClientBadResponseException ex) {
                    if (LOGGER.isDebugEnabled())
                        LOGGER.debug("Participant Information Error", ex);
                    else if (LOGGER.isWarnEnabled())
                        LOGGER.warn("Participant Information Error: " + ex.getClass().getName() + " - " + ex.getMessage());
                    final BootstrapErrorBox aErrorBox = error(div("Error querying SMP. Try disabling 'XML Schema validation'.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false));
                    for (final JAXBException aItem : aSMPExceptions) aErrorBox.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
                    aLIDocTypeID.addChild(aErrorBox);
                    // Audit failure
                    AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
                } catch (final SMPClientException ex) {
                    if (LOGGER.isDebugEnabled())
                        LOGGER.debug("Participant Information Error", ex);
                    else if (LOGGER.isWarnEnabled())
                        LOGGER.warn("Participant Information Error: " + ex.getClass().getName() + " - " + ex.getMessage());
                    final BootstrapErrorBox aErrorBox = error(div("Error querying SMP.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, false));
                    for (final JAXBException aItem : aSMPExceptions) aErrorBox.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
                    aLIDocTypeID.addChild(aErrorBox);
                    // Audit failure
                    AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
                }
                if (bShowTime)
                    aDocTypeDiv.addChild(" ").addChild(_createTimingNode(aSWGetDetails.getMillis()));
                nTotalDurationMillis += aSWGetDetails.getMillis();
            }
            aNodeList.addChild(aULDocTypeIDs);
            if (bShowTime)
                aNodeList.addChild(div("Overall time: ").addChild(_createTimingNode(nTotalDurationMillis)));
            aNodeList.addChild(h3("Endpoint Certificate details"));
            if (aAllUsedEndpointCertifiactes.isEmpty()) {
                aNodeList.addChild(warn("No Endpoint Certificate information was found."));
            } else {
                final HCUL aULCerts = new HCUL();
                for (final X509Certificate aEndpointCert : aAllUsedEndpointCertifiactes) {
                    final IHCLI<?> aLICert = aULCerts.addItem();
                    if (aEndpointCert != null) {
                        aLICert.addChild(div("Subject: " + aEndpointCert.getSubjectX500Principal().getName()));
                        aLICert.addChild(div("Issuer: " + aEndpointCert.getIssuerX500Principal().getName()));
                        final OffsetDateTime aNotBefore = PDTFactory.createOffsetDateTime(aEndpointCert.getNotBefore());
                        aLICert.addChild(div("Not before: " + PDTToString.getAsString(aNotBefore, aDisplayLocale)));
                        if (aNotBefore.isAfter(aNowDateTime))
                            aLICert.addChild(error("This Endpoint Certificate is not yet valid!"));
                        final OffsetDateTime aNotAfter = PDTFactory.createOffsetDateTime(aEndpointCert.getNotAfter());
                        aLICert.addChild(div("Not after: " + PDTToString.getAsString(aNotAfter, aDisplayLocale)));
                        if (aNotAfter.isBefore(aNowDateTime))
                            aLICert.addChild(error("This Endpoint Certificate is no longer valid!"));
                        aLICert.addChild(div("Serial number: " + aEndpointCert.getSerialNumber().toString() + " / 0x" + _inGroupsOf(aEndpointCert.getSerialNumber().toString(16), 4)));
                        if (aQueryParams.getSMPAPIType() == ESMPAPIType.PEPPOL) {
                            // Check Peppol certificate status
                            final EPeppolCertificateCheckResult eCertStatus = PeppolCertificateChecker.checkPeppolAPCertificate(aEndpointCert, aNowDateTime, ETriState.FALSE, null);
                            if (eCertStatus.isValid())
                                aLICert.addChild(success("The Endpoint Certificate appears to be a valid Peppol certificate."));
                            else {
                                aLICert.addChild(error().addChild(div("The Endpoint Certificate appears to be an invalid Peppol certificate. Reason: " + eCertStatus.getReason())));
                            }
                        }
                        final HCTextArea aTextArea = new HCTextArea().setReadOnly(true).setRows(4).setValue(CertificateHelper.getPEMEncodedCertificate(aEndpointCert)).addStyle(CCSSProperties.FONT_FAMILY.newValue(CCSSValue.FONT_MONOSPACE));
                        BootstrapFormHelper.markAsFormControl(aTextArea);
                        aLICert.addChild(div(aTextArea));
                    } else {
                        aLICert.addChild(error("Failed to interpret the data as a X509 certificate"));
                    }
                }
                aNodeList.addChild(aULCerts);
            }
        }
        if (bQueryBusinessCard) {
            final StopWatch aSWGetBC = StopWatch.createdStarted();
            aNodeList.addChild(h3("Business Card details"));
            EFamFamFlagIcon.registerResourcesForThisRequest();
            final String sBCURL = aSMPHost.toExternalForm() + "/businesscard/" + aParticipantID.getURIEncoded();
            LOGGER.info("Querying BC from '" + sBCURL + "'");
            byte[] aData;
            try (HttpClientManager aHttpClientMgr = new HttpClientManager()) {
                final HttpGet aGet = new HttpGet(sBCURL);
                aData = aHttpClientMgr.execute(aGet, new ResponseHandlerByteArray());
            } catch (final Exception ex) {
                aData = null;
            }
            aSWGetBC.stop();
            if (aData == null)
                aNodeList.addChild(warn("No Business Card is available for that participant."));
            else {
                final ICommonsList<JAXBException> aPDExceptions = new CommonsArrayList<>();
                final Consumer<GenericJAXBMarshaller<?>> aPMarshallerCustomizer = m -> {
                    aPDExceptions.clear();
                    // Remember errors
                    m.readExceptionCallbacks().add(aPDExceptions::add);
                    m.setCharset(StandardCharsets.UTF_8);
                };
                final PDBusinessCard aBC = PDBusinessCardHelper.parseBusinessCard(aData, aPMarshallerCustomizer);
                if (aBC == null) {
                    final BootstrapErrorBox aError = error("Failed to parse the response data as a Business Card.");
                    for (final JAXBException aItem : aPDExceptions) aError.addChild(AppCommonUI.getTechnicalDetailsUI(aItem, false));
                    aNodeList.addChild(aError);
                    final String sBC = new String(aData, StandardCharsets.UTF_8);
                    if (StringHelper.hasText(sBC))
                        aNodeList.addChild(new HCPrismJS(EPrismLanguage.MARKUP).addChild(sBC));
                    LOGGER.error("Failed to parse BC:\n" + sBC);
                } else {
                    final HCH4 aH4 = h4("Business Card contains " + (aBC.businessEntities().size() == 1 ? "1 entity" : aBC.businessEntities().size() + " entities"));
                    if (bShowTime)
                        aH4.addChild(" ").addChild(_createTimingNode(aSWGetBC.getMillis()));
                    aNodeList.addChild(aH4);
                    aNodeList.addChild(div(_createOpenInBrowser(sBCURL)));
                    final HCUL aUL = new HCUL();
                    for (final PDBusinessEntity aEntity : aBC.businessEntities()) {
                        final HCLI aLI = aUL.addItem();
                        // Name
                        for (final PDName aName : aEntity.names()) {
                            final Locale aLanguage = LanguageCache.getInstance().getLanguage(aName.getLanguageCode());
                            final String sLanguageName = aLanguage == null ? "" : " (" + aLanguage.getDisplayLanguage(aDisplayLocale) + ")";
                            aLI.addChild(div(aName.getName() + sLanguageName));
                        }
                        // Country
                        {
                            final String sCountryCode = aEntity.getCountryCode();
                            final Locale aCountryCode = CountryCache.getInstance().getCountry(sCountryCode);
                            final String sCountryName = aCountryCode == null ? sCountryCode : aCountryCode.getDisplayCountry(aDisplayLocale) + " (" + sCountryCode + ")";
                            final EFamFamFlagIcon eIcon = EFamFamFlagIcon.getFromIDOrNull(sCountryCode);
                            aLI.addChild(div("Country: " + sCountryName + " ").addChild(eIcon == null ? null : eIcon.getAsNode()));
                        }
                        // Geo info
                        if (aEntity.hasGeoInfo()) {
                            aLI.addChild(div("Geographical information: ").addChildren(HCExtHelper.nl2brList(aEntity.getGeoInfo())));
                        }
                        // Additional IDs
                        if (aEntity.identifiers().isNotEmpty()) {
                            final BootstrapTable aIDTab = new BootstrapTable().setCondensed(true);
                            aIDTab.addHeaderRow().addCells("Scheme", "Value");
                            for (final PDIdentifier aItem : aEntity.identifiers()) {
                                // Avoid empty rows
                                if (StringHelper.hasText(aItem.getScheme()) || StringHelper.hasText(aItem.getValue()))
                                    aIDTab.addBodyRow().addCells(aItem.getScheme(), aItem.getValue());
                            }
                            if (aIDTab.hasBodyRows())
                                aLI.addChild(div("Additional identifiers: ").addChild(aIDTab));
                        }
                        // Website URLs
                        if (aEntity.websiteURIs().isNotEmpty()) {
                            final HCNodeList aWebsites = new HCNodeList();
                            for (final String sItem : aEntity.websiteURIs()) if (StringHelper.hasText(sItem))
                                aWebsites.addChild(div(HCA.createLinkedWebsite(sItem)));
                            if (aWebsites.hasChildren())
                                aLI.addChild(div("Website URLs: ").addChild(aWebsites));
                        }
                        // Contacts
                        if (aEntity.contacts().isNotEmpty()) {
                            final BootstrapTable aContactTab = new BootstrapTable().setCondensed(true);
                            aContactTab.addHeaderRow().addCells("Type", "Name", "Phone", "Email");
                            for (final PDContact aItem : aEntity.contacts()) {
                                // Avoid empty rows
                                if (StringHelper.hasText(aItem.getType()) || StringHelper.hasText(aItem.getName()) || StringHelper.hasText(aItem.getPhoneNumber()) || StringHelper.hasText(aItem.getEmail()))
                                    aContactTab.addBodyRow().addCell(aItem.getType()).addCell(aItem.getName()).addCell(aItem.getPhoneNumber()).addCell(HCA_MailTo.createLinkedEmail(aItem.getEmail()));
                            }
                            if (aContactTab.hasBodyRows())
                                aLI.addChild(div("Contact points: ").addChild(aContactTab));
                        }
                        if (aEntity.hasAdditionalInfo()) {
                            aLI.addChild(div("Additional information: ").addChildren(HCExtHelper.nl2brList(aEntity.getAdditionalInfo())));
                        }
                        if (aEntity.hasRegistrationDate()) {
                            aLI.addChild(div("Registration date: ").addChild(PDTToString.getAsString(aEntity.getRegistrationDate(), aDisplayLocale)));
                        }
                    }
                    aNodeList.addChild(aUL);
                }
            }
        }
        // Audit success
        AuditHelper.onAuditExecuteSuccess("participant-information", aParticipantID.getURIEncoded());
    } catch (final RuntimeException ex) {
        if (LOGGER.isDebugEnabled())
            LOGGER.debug("Participant Information Error", ex);
        else if (LOGGER.isWarnEnabled())
            LOGGER.warn("Participant Information Error: " + ex.getClass().getName() + " - " + ex.getMessage());
        new InternalErrorBuilder().setRequestScope(aRequestScope).setDisplayLocale(aDisplayLocale).setThrowable(ex).handle();
        aNodeList.addChild(error(div("Error querying participant information.")).addChild(AppCommonUI.getTechnicalDetailsUI(ex, true)));
        // Audit failure
        AuditHelper.onAuditExecuteFailure("participant-information", sParticipantIDUriEncoded, ex.getClass(), ex.getMessage());
    }
    aNodeList.addChild(new HCHR());
}