Added SetSslFipsEnabledCommand

CHANGELOG.mdown

@@ -1,9 +1,9 @@
 # ml-app-deployer releases
-This changelog is in its infancy, but the plan is to start tracking all changes via issues and then associating them
-with releases. 
 
-TODO Reconcile this with what's in gradle.properties
+## 2.0b13
 
+* Added SetSslFipsEnabledCommand
+
 ## 2.0b12
 
 * Added null-check in SimpleAppDeployer

src/main/java/com/rjrudin/marklogic/appdeployer/command/admin/SetSslFipsEnabledCommand.java

@@ -0,0 +1,27 @@
+package com.rjrudin.marklogic.appdeployer.command.admin;
+
+import com.rjrudin.marklogic.appdeployer.command.AbstractCommand;
+import com.rjrudin.marklogic.appdeployer.command.CommandContext;
+
+public class SetSslFipsEnabledCommand extends AbstractCommand {
+
+    private boolean sslFipsEnabled = false;
+
+    public SetSslFipsEnabledCommand(boolean sslFipsEnabled) {
+        this.sslFipsEnabled = sslFipsEnabled;
+    }
+
+    @Override
+    public void execute(CommandContext context) {
+        context.getAdminManager().setSslFipsEnabled(sslFipsEnabled);
+    }
+
+    public boolean isSslFipsEnabled() {
+        return sslFipsEnabled;
+    }
+
+    public void setSslFipsEnabled(boolean sslFipsEnabled) {
+        this.sslFipsEnabled = sslFipsEnabled;
+    }
+
+}

src/main/java/com/rjrudin/marklogic/mgmt/ManageClient.java

@@ -23,6 +23,7 @@
  */
 public class ManageClient extends LoggingObject {
 
+    private ManageConfig manageConfig;
     private RestTemplate restTemplate;
     private RestTemplate adminRestTemplate;
     private String baseUrl;
@@ -39,6 +40,7 @@ public ManageClient(ManageConfig config) {
     }
 
     public void initialize(ManageConfig config) {
+        this.manageConfig = config;
         if (logger.isInfoEnabled()) {
             logger.info("Initializing ManageClient with manage config of: " + config);
         }
@@ -170,4 +172,8 @@ public String getBaseUrl() {
     public RestTemplate getAdminRestTemplate() {
         return adminRestTemplate;
     }
+
+    public ManageConfig getManageConfig() {
+        return manageConfig;
+    }
 }

src/main/java/com/rjrudin/marklogic/mgmt/admin/AdminManager.java

@@ -6,6 +6,8 @@
 import org.springframework.http.HttpStatus;
 import org.springframework.http.MediaType;
 import org.springframework.http.ResponseEntity;
+import org.springframework.util.LinkedMultiValueMap;
+import org.springframework.util.MultiValueMap;
 import org.springframework.web.client.HttpClientErrorException;
 import org.springframework.web.client.RestTemplate;
 
@@ -140,6 +142,9 @@ public void waitForRestart() {
         try {
             Thread.sleep(waitForRestartCheckInterval);
             getLastRestartTimestamp();
+            if (logger.isInfoEnabled()) {
+                logger.info("Finished waiting for MarkLogic to restart");
+            }
         } catch (Exception ex) {
             logger.info("Waiting for MarkLogic to restart...");
             if (logger.isDebugEnabled()) {
@@ -149,6 +154,39 @@ public void waitForRestart() {
         }
     }
 
+    /**
+     * Set whether SSL FIPS is enabled on the cluster or not by running against /v1/eval on 8000.
+     */
+    public void setSslFipsEnabled(final boolean enabled) {
+        final String xquery = "import module namespace admin = 'http://marklogic.com/xdmp/admin' at '/MarkLogic/admin.xqy'; "
+                + "admin:save-configuration(admin:cluster-set-ssl-fips-enabled(admin:get-configuration(), "
+                + enabled
+                + "()))";
+
+        invokeActionRequiringRestart(new ActionRequiringRestart() {
+            @Override
+            public boolean execute() {
+                RestTemplate rt = RestTemplateUtil.newRestTemplate(adminConfig.getHost(), 8000,
+                        adminConfig.getUsername(), adminConfig.getPassword());
+                HttpHeaders headers = new HttpHeaders();
+                headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);
+                MultiValueMap<String, String> map = new LinkedMultiValueMap<String, String>();
+                map.add("xquery", xquery);
+                HttpEntity<MultiValueMap<String, String>> entity = new HttpEntity<MultiValueMap<String, String>>(map,
+                        headers);
+                String url = format("http://%s:8000/v1/eval", adminConfig.getHost());
+                if (logger.isInfoEnabled()) {
+                    logger.info("Setting SSL FIPS enabled: " + enabled);
+                }
+                rt.exchange(url, HttpMethod.POST, entity, String.class);
+                if (logger.isInfoEnabled()) {
+                    logger.info("Finished setting SSL FIPS enabled: " + enabled);
+                }
+                return true;
+            }
+        });
+    }
+
     public void setWaitForRestartCheckInterval(int waitForRestartCheckInterval) {
         this.waitForRestartCheckInterval = waitForRestartCheckInterval;
     }

src/test/java/com/rjrudin/marklogic/appdeployer/command/admin/SetSslFipsEnabledDebug.java

@@ -0,0 +1,25 @@
+package com.rjrudin.marklogic.appdeployer.command.admin;
+
+import com.rjrudin.marklogic.appdeployer.AppConfig;
+import com.rjrudin.marklogic.appdeployer.command.CommandContext;
+import com.rjrudin.marklogic.mgmt.ManageClient;
+import com.rjrudin.marklogic.mgmt.ManageConfig;
+import com.rjrudin.marklogic.mgmt.admin.AdminConfig;
+import com.rjrudin.marklogic.mgmt.admin.AdminManager;
+
+/**
+ * TODO Convert this into a real test, adding a isSslFipsEnabled method to AdminManager.
+ */
+public class SetSslFipsEnabledDebug {
+
+    public static void main(String[] args) {
+        ManageConfig config = new ManageConfig("localhost", 8002, "admin", "admin");
+        ManageClient manageClient = new ManageClient(config);
+        AppConfig appConfig = new AppConfig();
+        AdminManager adminManager = new AdminManager(new AdminConfig("localhost", "admin"));
+        CommandContext context = new CommandContext(appConfig, manageClient, adminManager);
+
+        SetSslFipsEnabledCommand command = new SetSslFipsEnabledCommand(false);
+        command.execute(context);
+    }
+}