com.github.dtreskunov.easyssl.spring.EasySslProperties Maven / Gradle / Ivy

Go to download
package com.github.dtreskunov.easyssl.spring;

import java.util.List;

import javax.validation.constraints.NotNull;

import org.springframework.boot.web.server.Ssl.ClientAuth;
import org.springframework.boot.context.properties.ConfigurationProperties;
import org.springframework.core.io.Resource;
import org.springframework.validation.annotation.Validated;

/**
 * Settings that define the application's SSL identity.
 *
 *  * # In application.yml
 * easyssl:
 *   caCertificate:             classpath:ca.pem # also accepts arrays
 *   certificate:               file:cert.pem
 *   key:                       file:key.pem
 *   keyPassword:               secret
 *   certificateRevocationList: http://ca/crl.pem
 *   certificateRevocationListCheckIntervalSeconds: 60
 *   # If the servlet container (if any) should NOT be configured to use SSL:
 *   # serverCustomizationEnabled: false
 *   # If auto-configuration should NOT be enabled:
 *   # enabled: false
 * 
 */
@Validated
@ConfigurationProperties(prefix = "easyssl")
public class EasySslProperties {

    @NotNull
    private List m_caCertificate;

    @NotNull
    private Resource m_certificate;

    private long m_certificateRevocationListCheckIntervalSeconds;
    private long m_certificateRevocationListCheckTimeoutSeconds;
    private Resource m_certificateRevocationList;

    @NotNull
    private Resource m_key;

    private String m_keyPassword;

    private boolean m_enabled = true;
    private boolean m_serverCustomizationEnabled = true;
    private ClientAuth m_clientAuth = ClientAuth.NEED;

    /**
     * @return Certificate Authority's (CA) certificate(s), used for validating client and server certificates, and the signature on the CRL.
     */
    public List getCaCertificate() {
        return m_caCertificate;
    }

    /**
     * @return The application's SSL certificate, used for establishing a secure connection to client or server.
     */
    public Resource getCertificate() {
        return m_certificate;
    }

    /**
     * @return Certificate revocation list, used for checking validity of certificates presented to this application by client or server.
     */
    public Resource getCertificateRevocationList() {
        return m_certificateRevocationList;
    }

    /**
     * @return How often the CRL should be refreshed (defaults to "once at startup")
     */
    public long getCertificateRevocationListCheckIntervalSeconds() {
        return m_certificateRevocationListCheckIntervalSeconds;
    }

    /**
     * @return Timeout on getting the CRL refreshed (defaults to "no timeout")
     */
    public long getCertificateRevocationListCheckTimeoutSeconds() {
        return m_certificateRevocationListCheckTimeoutSeconds;
    }

    /**
     * @return The key associated with the application's SSL certificate, used as a proof of ownership of the certificate.
     */
    public Resource getKey() {
        return m_key;
    }

    /**
     * @return Password used to decrypt the private key.
     */
    public String getKeyPassword() {
        return m_keyPassword;
    }

    /**
     * @return Whether any {@code @Bean}s should be injected at all.
     */
    public boolean isEnabled() {
        return m_enabled;
    }
    /**
     * @return Whether the servlet container customization should be enabled.
     */
    public boolean isServerCustomizationEnabled() {
        return m_serverCustomizationEnabled;
    }

    /**
     * @return Whether requests made to this server should be immediately rejected if the client did not include a certificate.
     * See {@link ClientAuth}.
     */
    public ClientAuth getClientAuth() {
        return m_clientAuth;
    }

    public void setCaCertificate(List caCertificate) {
        m_caCertificate = caCertificate;
    }
    public void setCertificate(Resource certificate) {
        m_certificate = certificate;
    }
    public void setCertificateRevocationList(Resource certificateRevocationList) {
        m_certificateRevocationList = certificateRevocationList;
    }
    public void setCertificateRevocationListCheckIntervalSeconds(long certificateRevocationListCheckIntervalSeconds) {
        m_certificateRevocationListCheckIntervalSeconds = certificateRevocationListCheckIntervalSeconds;
    }
    public void setCertificateRevocationListCheckTimeoutSeconds(long certificateRevocationListCheckTimeoutSeconds) {
        m_certificateRevocationListCheckTimeoutSeconds = certificateRevocationListCheckTimeoutSeconds;
    }
    public void setKey(Resource key) {
        m_key = key;
    }
    public void setKeyPassword(String keyPassword) {
        m_keyPassword = keyPassword;
    }
    public void setEnabled(boolean enabled) {
        m_enabled = enabled;
    }
    public void setServerCustomizationEnabled(boolean serverCustomizationEnabled) {
        m_serverCustomizationEnabled = serverCustomizationEnabled;
    }
    public void setClientAuth(ClientAuth clientAuth) {
        m_clientAuth = clientAuth;
    }
}