com.terradue.dsi.wire.KeyManagerProvider Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of dsi-tools Show documentation

A set of Command Line Tools to interact with Zimory/T-Systems cloud REST server

There is a newer version: 0.3

package com.terradue.dsi.wire;

/*
 *  Copyright 2012 Terradue srl
 *
 *  Licensed under the Apache License, Version 2.0 (the "License");
 *  you may not use this file except in compliance with the License.
 *  You may obtain a copy of the License at
 *
 *       http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 */

import java.io.File;
import java.security.KeyStore;

import javax.net.ssl.KeyManager;
import javax.net.ssl.KeyManagerFactory;

import org.apache.commons.ssl.KeyMaterial;

import com.google.inject.Inject;
import com.google.inject.Provider;
import com.google.inject.ProvisionException;
import com.google.inject.name.Named;

public final class KeyManagerProvider
    implements Provider
{

    private final File certificate;

    private final String password;

    @Inject
    public KeyManagerProvider( @Named( "user.certificate" ) File certificate,
                               @Named( "dsi.password" ) String password )
    {
        this.certificate = certificate;
        this.password = password;
    }

    @Override
    public KeyManager[] get()
    {
        final char[] password = this.password.toCharArray();

        try
        {
            final KeyStore store = new KeyMaterial( certificate, certificate, password ).getKeyStore();
            store.load( null, password );

            // initialize key and trust managers -> default behavior
            final KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance( "SunX509" );
            // password for key and store have to be the same IIRC
            keyManagerFactory.init( store, password );

            return keyManagerFactory.getKeyManagers();
        }
        catch ( Exception e )
        {
            throw new ProvisionException( "Impossible to initialize SSL certificate/key", e );
        }
    }

}