com.netflix.netty.common.ssl.ServerSslConfig Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of zuul-core Show documentation
zuul-core
There is a newer version: 2.5.13
/*
 * Copyright 2018 Netflix, Inc.
 *
 *      Licensed under the Apache License, Version 2.0 (the "License");
 *      you may not use this file except in compliance with the License.
 *      You may obtain a copy of the License at
 *
 *          http://www.apache.org/licenses/LICENSE-2.0
 *
 *      Unless required by applicable law or agreed to in writing, software
 *      distributed under the License is distributed on an "AS IS" BASIS,
 *      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *      See the License for the specific language governing permissions and
 *      limitations under the License.
 */

package com.netflix.netty.common.ssl;

import com.netflix.config.DynamicLongProperty;
import io.netty.handler.ssl.ClientAuth;
import java.io.File;
import java.security.NoSuchAlgorithmException;
import java.util.Arrays;
import java.util.List;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;

/**
 * User: [email protected]
 * Date: 8/16/16
 * Time: 2:40 PM
 */
public class ServerSslConfig {
    private static final DynamicLongProperty DEFAULT_SESSION_TIMEOUT =
            new DynamicLongProperty("server.ssl.session.timeout", (18 * 60)); // 18 hours

    private static final String[] DEFAULT_CIPHERS;

    static {
        try {
            SSLContext context = SSLContext.getDefault();
            SSLSocketFactory sf = context.getSocketFactory();
            DEFAULT_CIPHERS = sf.getSupportedCipherSuites();
        } catch (NoSuchAlgorithmException e) {
            throw new RuntimeException(e);
        }
    }

    private final String[] protocols;
    private final List ciphers;
    private final File certChainFile;
    private final File keyFile;

    private final ClientAuth clientAuth;
    private final File clientAuthTrustStoreFile;
    private final String clientAuthTrustStorePassword;
    private final File clientAuthTrustStorePasswordFile;

    private final long sessionTimeout;
    private final boolean sessionTicketsEnabled;

    public ServerSslConfig(String[] protocols, String[] ciphers, File certChainFile, File keyFile) {
        this(protocols, ciphers, certChainFile, keyFile, ClientAuth.NONE, null, (File) null, false);
    }

    public ServerSslConfig(
            String[] protocols, String[] ciphers, File certChainFile, File keyFile, ClientAuth clientAuth) {
        this(protocols, ciphers, certChainFile, keyFile, clientAuth, null, (File) null, true);
    }

    public ServerSslConfig(
            String[] protocols,
            String[] ciphers,
            File certChainFile,
            File keyFile,
            ClientAuth clientAuth,
            File clientAuthTrustStoreFile,
            File clientAuthTrustStorePasswordFile,
            boolean sessionTicketsEnabled) {
        this.protocols = protocols;
        this.ciphers = ciphers != null ? Arrays.asList(ciphers) : null;
        this.certChainFile = certChainFile;
        this.keyFile = keyFile;
        this.clientAuth = clientAuth;
        this.clientAuthTrustStoreFile = clientAuthTrustStoreFile;
        this.clientAuthTrustStorePassword = null;
        this.clientAuthTrustStorePasswordFile = clientAuthTrustStorePasswordFile;
        this.sessionTimeout = DEFAULT_SESSION_TIMEOUT.get();
        this.sessionTicketsEnabled = sessionTicketsEnabled;
    }

    public ServerSslConfig(
            String[] protocols,
            String[] ciphers,
            File certChainFile,
            File keyFile,
            ClientAuth clientAuth,
            File clientAuthTrustStoreFile,
            String clientAuthTrustStorePassword,
            boolean sessionTicketsEnabled) {
        this.protocols = protocols;
        this.ciphers = Arrays.asList(ciphers);
        this.certChainFile = certChainFile;
        this.keyFile = keyFile;
        this.clientAuth = clientAuth;
        this.clientAuthTrustStoreFile = clientAuthTrustStoreFile;
        this.clientAuthTrustStorePassword = clientAuthTrustStorePassword;
        this.clientAuthTrustStorePasswordFile = null;
        this.sessionTimeout = DEFAULT_SESSION_TIMEOUT.get();
        this.sessionTicketsEnabled = sessionTicketsEnabled;
    }

    public static String[] getDefaultCiphers() {
        return DEFAULT_CIPHERS;
    }

    public static ServerSslConfig withDefaultCiphers(File certChainFile, File keyFile, String... protocols) {
        return new ServerSslConfig(protocols, getDefaultCiphers(), certChainFile, keyFile);
    }

    public String[] getProtocols() {
        return protocols;
    }

    public List getCiphers() {
        return ciphers;
    }

    public File getCertChainFile() {
        return certChainFile;
    }

    public File getKeyFile() {
        return keyFile;
    }

    public ClientAuth getClientAuth() {
        return clientAuth;
    }

    public File getClientAuthTrustStoreFile() {
        return clientAuthTrustStoreFile;
    }

    public String getClientAuthTrustStorePassword() {
        return clientAuthTrustStorePassword;
    }

    public File getClientAuthTrustStorePasswordFile() {
        return clientAuthTrustStorePasswordFile;
    }

    public long getSessionTimeout() {
        return sessionTimeout;
    }

    public boolean sessionTicketsEnabled() {
        return sessionTicketsEnabled;
    }

    @Override
    public String toString() {
        return "ServerSslConfig{" + "protocols="
                + Arrays.toString(protocols) + ", ciphers="
                + ciphers + ", certChainFile="
                + certChainFile + ", keyFile="
                + keyFile + ", clientAuth="
                + clientAuth + ", clientAuthTrustStoreFile="
                + clientAuthTrustStoreFile + ", sessionTimeout="
                + sessionTimeout + ", sessionTicketsEnabled="
                + sessionTicketsEnabled + '}';
    }
}