|
1
10
11 package org.mule.management.agents;
12
13 import java.io.File  ;
14 import java.io.FileInputStream ;
15 import java.io.IOException ;
16 import java.io.InputStream ;
17 import java.net.InetAddress ;
18 import java.net.ServerSocket ;
19 import java.security.KeyStore ;
20 import java.security.Security ;
21 import java.security.UnrecoverableKeyException ;
22
23 import javax.net.ssl.KeyManagerFactory;
24 import javax.net.ssl.SSLContext;
25 import javax.net.ssl.SSLServerSocket;
26 import javax.net.ssl.SSLServerSocketFactory;
27 import javax.net.ssl.TrustManagerFactory;
28
29 import mx4j.log.Log;
30 import mx4j.log.Logger;
31 import mx4j.tools.adaptor.ssl.SSLAdaptorServerSocketFactoryMBean;
32
33 import org.mule.umo.security.provider.AutoDiscoverySecurityProviderFactory;
34 import org.mule.umo.security.provider.SecurityProviderFactory;
35 import org.mule.umo.security.provider.SecurityProviderInfo;
36 import org.mule.util.IOUtils;
37 import org.mule.util.FileUtils;
38
39
69 public class IBMSslAdapterServerSocketFactory implements SSLAdaptorServerSocketFactoryMBean
70 {
71
72 private SecurityProviderFactory spFactory = new AutoDiscoverySecurityProviderFactory();
74 private SecurityProviderInfo spInfo = spFactory.getSecurityProviderInfo();
75
76 private String m_keyStoreType = "JKS";
77 private String m_trustStoreType = "JKS";
78 private String m_keyStoreName;
79 private String m_trustStoreName;
80 private String m_keyStorePassword;
81 private String m_trustStorePassword;
82 private String m_keyManagerAlgorithm = spInfo.getKeyManagerAlgorithm();
83 private String m_trustManagerAlgorithm = spInfo.getKeyManagerAlgorithm();
85 private String m_keyManagerPassword;
86 private String m_sslProtocol = "SSL";
90
91 public IBMSslAdapterServerSocketFactory()
92 {
93 Security.addProvider(spFactory.getProvider());
94 }
95
96 public void setKeyStoreType(String keyStoreType)
97 {
98 if (keyStoreType == null || keyStoreType.trim().length() == 0)
99 {
100 throw new IllegalArgumentException ("Invalid KeyStore type");
101 }
102 m_keyStoreType = keyStoreType;
103 }
104
105 public void setTrustStoreType(String trustStoreType)
106 {
107 if (trustStoreType == null || trustStoreType.trim().length() == 0)
108 {
109 throw new IllegalArgumentException ("Invalid TrustStore type");
110 }
111 m_trustStoreType = trustStoreType;
112 }
113
114 public void setKeyStoreName(String name)
115 {
116 if (name == null || name.trim().length() == 0)
117 {
118 throw new IllegalArgumentException ("Invalid KeyStore name");
119 }
120 m_keyStoreName = name;
121 }
122
123 public void setTrustStoreName(String name)
124 {
125 if (name == null || name.trim().length() == 0)
126 {
127 throw new IllegalArgumentException ("Invalid TrustStore name");
128 }
129 m_trustStoreName = name;
130 }
131
132 public void setKeyStorePassword(String password)
133 {
134 if (password == null || password.trim().length() == 0)
135 {
136 throw new IllegalArgumentException ("Invalid KeyStore password");
137 }
138 m_keyStorePassword = password;
139 }
140
141 public void setTrustStorePassword(String password)
142 {
143 if (password == null || password.trim().length() == 0)
144 {
145 throw new IllegalArgumentException ("Invalid TrustStore password");
146 }
147 m_trustStorePassword = password;
148 }
149
150 public void setKeyManagerAlgorithm(String algorithm)
151 {
152 if (algorithm == null || algorithm.trim().length() == 0)
153 {
154 throw new IllegalArgumentException ("Invalid KeyManager algorithm");
155 }
156 m_keyManagerAlgorithm = algorithm;
157 }
158
159 public void setTrustManagerAlgorithm(String algorithm)
160 {
161 if (algorithm == null || algorithm.trim().length() == 0)
162 {
163 throw new IllegalArgumentException ("Invalid TrustManager algorithm");
164 }
165 m_trustManagerAlgorithm = algorithm;
166 }
167
168 public void setKeyManagerPassword(String password)
169 {
170 if (password == null || password.trim().length() == 0)
171 {
172 throw new IllegalArgumentException ("Invalid KeyManager password");
173 }
174 m_keyManagerPassword = password;
175 }
176
177 public void setSSLProtocol(String protocol)
178 {
179 if (protocol == null || protocol.trim().length() == 0)
180 {
181 throw new IllegalArgumentException ("Invalid SSL protocol");
182 }
183 m_sslProtocol = protocol;
184 }
185
186
189 public ServerSocket createServerSocket(int port, int backlog, String host) throws IOException
190 {
191 if (m_keyStoreName == null)
192 {
193 throw new IOException ("KeyStore file name cannot be null");
194 }
195 if (m_keyStorePassword == null)
196 {
197 throw new IOException ("KeyStore password cannot be null");
198 }
199
200 Logger logger = getLogger();
201 if (logger.isEnabledFor(Logger.TRACE))
202 {
203 logger.trace("Creating SSLServerSocket");
204 logger.trace("\tKeyStore " + m_keyStoreName + ", type " + m_keyStoreType);
205 logger.trace("\tKeyManager algorithm is " + m_keyManagerAlgorithm);
206 logger.trace("\tTrustStore " + m_trustStoreName + ", type " + m_trustStoreType);
207 logger.trace("\tTrustManager algorithm is " + m_trustManagerAlgorithm);
208 logger.trace("\tSSL protocol version is " + m_sslProtocol);
209 }
210
211 try
212 {
213 KeyStore keystore = KeyStore.getInstance(m_keyStoreType);
214 InputStream keyStoreStream = IOUtils.getResourceAsStream(m_keyStoreName, getClass());
215 if (keyStoreStream == null)
218 {
219 File fle = FileUtils.newFile(m_keyStoreName);
222 if (fle.exists()) keyStoreStream = new FileInputStream (fle);
223 }
224 if (keyStoreStream == null) throw new IOException ("Cannot find KeyStore " + m_keyStoreName);
225 keystore.load(keyStoreStream, m_keyStorePassword.toCharArray());
226 try
227 {
228 keyStoreStream.close();
229 }
230 catch (IOException x)
231 {
232 }
234
235 KeyManagerFactory keyFactory = KeyManagerFactory.getInstance(m_keyManagerAlgorithm);
236 keyFactory.init(keystore, m_keyManagerPassword == null
238 ? m_keyStorePassword.toCharArray() : m_keyManagerPassword.toCharArray());
239
240 TrustManagerFactory trustFactory = null;
241 if (m_trustStoreName != null)
242 {
243
245 if (m_trustStorePassword == null)
246 {
247 throw new IOException ("TrustStore password cannot be null");
248 }
249
250 KeyStore trustStore = KeyStore.getInstance(m_trustStoreType);
251 InputStream trustStoreStream = IOUtils.getResourceAsStream(m_trustStoreName, getClass());
252 if (trustStoreStream == null)
254 {
255 throw new IOException ("Cannot find TrustStore " + m_trustStoreName);
256 }
257 trustStore.load(trustStoreStream, m_trustStorePassword.toCharArray());
258
259 trustFactory = TrustManagerFactory.getInstance(m_trustManagerAlgorithm);
260 trustFactory.init(trustStore);
261 }
262
263 SSLContext context = SSLContext.getInstance(m_sslProtocol);
264 context.init(keyFactory.getKeyManagers(), trustFactory == null
267 ? null : trustFactory.getTrustManagers(), null);
268
269 SSLServerSocketFactory ssf = context.getServerSocketFactory();
270 SSLServerSocket serverSocket = (SSLServerSocket)ssf.createServerSocket(port, backlog,
271 InetAddress.getByName(host));
272
273 return serverSocket;
274 }
275 catch (IOException x)
276 {
277 logger.error("", x);
278 throw x;
279 }
280 catch (UnrecoverableKeyException x)
281 {
282 logger.error("Probably a bad key password", x);
284 throw new IOException ("Probably a bad key password: " + x.toString());
285 }
286 catch (Exception x)
287 {
288 logger.error("Unexpected exception", x);
289 throw new IOException (x.toString());
290 }
291 }
292
293 private Logger getLogger()
294 {
295 return Log.getLogger(getClass().getName());
296 }
297 }
298 |
Popular Tags |
Java API By Example, From Geeks To Geeks.