io.quarkus.vertx.core.runtime.SSLConfigHelper Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of quarkus-vertx Show documentation
Write reactive applications with the Vert.x API
There is a newer version: 3.17.5
package io.quarkus.vertx.core.runtime;

import io.quarkus.vertx.core.runtime.config.JksConfiguration;
import io.quarkus.vertx.core.runtime.config.PemKeyCertConfiguration;
import io.quarkus.vertx.core.runtime.config.PemTrustCertConfiguration;
import io.quarkus.vertx.core.runtime.config.PfxConfiguration;
import io.vertx.core.net.JksOptions;
import io.vertx.core.net.KeyCertOptions;
import io.vertx.core.net.PemKeyCertOptions;
import io.vertx.core.net.PemTrustOptions;
import io.vertx.core.net.PfxOptions;
import io.vertx.core.net.TCPSSLOptions;

public class SSLConfigHelper {

    public static void configurePemTrustOptions(TCPSSLOptions options, PemTrustCertConfiguration configuration) {
        if (configuration.enabled()) {
            ensureTrustOptionsNotSet(options);
            options.setTrustOptions(toPemTrustOptions(configuration));
        }
    }

    private static PemTrustOptions toPemTrustOptions(PemTrustCertConfiguration configuration) {
        PemTrustOptions pemTrustOptions = new PemTrustOptions();
        if (configuration.certs().isPresent()) {
            for (String cert : configuration.certs().get()) {
                pemTrustOptions.addCertPath(cert);
            }
        }
        return pemTrustOptions;
    }

    public static void configureJksTrustOptions(TCPSSLOptions options, JksConfiguration configuration) {
        if (configuration.enabled()) {
            ensureTrustOptionsNotSet(options);
            options.setTrustOptions(toJksOptions(configuration));
        }
    }

    private static JksOptions toJksOptions(JksConfiguration configuration) {
        JksOptions jksOptions = new JksOptions();
        if (configuration.path().isPresent()) {
            jksOptions.setPath(configuration.path().get());
        }
        if (configuration.password().isPresent()) {
            jksOptions.setPassword(configuration.password().get());
        }
        return jksOptions;
    }

    public static void configurePfxTrustOptions(TCPSSLOptions options, PfxConfiguration configuration) {
        if (configuration.enabled()) {
            ensureTrustOptionsNotSet(options);
            options.setTrustOptions(toPfxOptions(configuration));
        }
    }

    private static PfxOptions toPfxOptions(PfxConfiguration configuration) {
        PfxOptions pfxOptions = new PfxOptions();
        if (configuration.path().isPresent()) {
            pfxOptions.setPath(configuration.path().get());
        }
        if (configuration.password().isPresent()) {
            pfxOptions.setPassword(configuration.password().get());
        }
        return pfxOptions;
    }

    private static void ensureTrustOptionsNotSet(TCPSSLOptions options) {
        if (options.getTrustOptions() != null) {
            throw new IllegalArgumentException("Trust options have already been set");
        }
    }

    public static void configurePemKeyCertOptions(TCPSSLOptions options, PemKeyCertConfiguration configuration) {
        if (configuration.enabled()) {
            ensureKeyCertOptionsNotSet(options);
            options.setKeyCertOptions(toPemKeyCertOptions(configuration));
        }
    }

    private static KeyCertOptions toPemKeyCertOptions(PemKeyCertConfiguration configuration) {
        PemKeyCertOptions pemKeyCertOptions = new PemKeyCertOptions();
        if (configuration.certs().isPresent()) {
            for (String cert : configuration.certs().get()) {
                pemKeyCertOptions.addCertPath(cert);
            }
        }
        if (configuration.keys().isPresent()) {
            for (String cert : configuration.keys().get()) {
                pemKeyCertOptions.addKeyPath(cert);
            }
        }
        return pemKeyCertOptions;
    }

    public static void configureJksKeyCertOptions(TCPSSLOptions options, JksConfiguration configuration) {
        if (configuration.enabled()) {
            ensureKeyCertOptionsNotSet(options);
            options.setKeyCertOptions(toJksOptions(configuration));
        }
    }

    public static void configurePfxKeyCertOptions(TCPSSLOptions options, PfxConfiguration configuration) {
        if (configuration.enabled()) {
            ensureKeyCertOptionsNotSet(options);
            options.setKeyCertOptions(toPfxOptions(configuration));
        }
    }

    private static void ensureKeyCertOptionsNotSet(TCPSSLOptions options) {
        if (options.getKeyCertOptions() != null) {
            throw new IllegalArgumentException("Key cert options have already been set");
        }
    }

    private SSLConfigHelper() {
        // Utility
    }
}