com.gemstone.gemfire.internal.admin.SSLConfig Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of gemfire-core Show documentation
SnappyData store based off Pivotal GemFireXD
There is a newer version: 2.0-BETA
/*
 * Copyright (c) 2010-2015 Pivotal Software, Inc. All rights reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you
 * may not use this file except in compliance with the License. You
 * may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
 * implied. See the License for the specific language governing
 * permissions and limitations under the License. See accompanying
 * LICENSE file.
 */
package com.gemstone.gemfire.internal.admin;

import com.gemstone.gemfire.distributed.internal.DistributionConfig;

import java.util.Iterator;
import java.util.Properties;

/**
 * The SSL configuration settings for a GemFire distributed system.
 *
 * @author    Kirk Lund
 *
 */
public class SSLConfig {
  
  //private static final String PREFIX = "javax.net.ssl.";

  private boolean enabled = DistributionConfig.DEFAULT_SSL_ENABLED;
  private String protocols = DistributionConfig.DEFAULT_SSL_PROTOCOLS;
  private String ciphers = DistributionConfig.DEFAULT_SSL_CIPHERS;
  private boolean requireAuth = DistributionConfig.DEFAULT_SSL_REQUIRE_AUTHENTICATION;
  
  /** 
   * SSL implementation-specific key-value pairs. Each key should be prefixed 
   * with javax.net.ssl.
   */
  private Properties properties = new Properties();

  public SSLConfig() {
  }
  
  public SSLConfig(boolean enabled) {
    this.enabled = enabled;
  }
  
	public boolean isEnabled() {
		return this.enabled;
	}
	public void setEnabled(boolean enabled) {
		this.enabled = enabled;
	}

	public String getProtocols() {
		return this.protocols;
	}
	public void setProtocols(String protocols) {
		this.protocols = protocols;
	}

	public String getCiphers() {
		return this.ciphers;
	}
	public void setCiphers(String ciphers) {
		this.ciphers = ciphers;
	}

	public boolean isRequireAuth() {
		return this.requireAuth;
	}
	public void setRequireAuth(boolean requireAuth) {
		this.requireAuth = requireAuth;
	}

	public Properties getProperties() {
		return this.properties;
	}
	public void setProperties(Properties newProps) {
          this.properties = new Properties();
          for (Iterator iter = newProps.keySet().iterator(); iter.hasNext();) {
            String key = (String) iter.next();
//            String value = newProps.getProperty(key);
            this.properties.setProperty(key, newProps.getProperty(key));
          }
	}

	/**
	 * Returns a string representation of the object.
	 * 
	 * @return a string representation of the object
	 */
	@Override
	public String toString() {
		final StringBuffer sb = new StringBuffer("[SSLConfig: ");
		sb.append("enabled=").append(this.enabled);
		sb.append(", protocols=").append(this.protocols);
		sb.append(", ciphers=").append(this.ciphers);
		sb.append(", requireAuth=").append(this.requireAuth);
		sb.append(", properties=").append(this.properties);
		sb.append("]");
		return sb.toString();
	}

  /**
   * Populates a Properties object with the SSL-related
   * configuration information used by {@link
   * com.gemstone.gemfire.distributed.DistributedSystem#connect}.
   *
   * @since 4.0
   */
  public void toDSProperties(Properties props) {
    props.setProperty(DistributionConfig.SSL_ENABLED_NAME,
                      String.valueOf(this.enabled));

    if (this.enabled) {
      props.setProperty(DistributionConfig.SSL_PROTOCOLS_NAME,
                        this.protocols); 
      props.setProperty(DistributionConfig.SSL_CIPHERS_NAME,
                        this.ciphers);
      props.setProperty(DistributionConfig.SSL_REQUIRE_AUTHENTICATION_NAME,
                        String.valueOf(this.requireAuth));
    }
  }

}