com.alibaba.nacos.common.tls.TlsHelper Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of nacos-common Show documentation
Nacos common pom.xml file
The newest version!
/*
 * Copyright 1999-2018 Alibaba Group Holding Ltd.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.alibaba.nacos.common.tls;

import javax.net.ssl.SSLContext;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;

/**
 * Utils for build {@link SSLContext}.
 *
 * Currently only supports client-side
 *
 * 
Making your client support TLS without authentication
 *  * System.setProperty({@link TlsSystemConfig#TLS_ENABLE}, "true");
 * 
 *
 * Making your client support TLS one-way authentication
 *
 *  * System.setProperty({@link TlsSystemConfig#TLS_ENABLE}, "true");
 * System.setProperty({@link TlsSystemConfig#CLIENT_AUTH}, "true");
 * System.setProperty({@link TlsSystemConfig#CLIENT_TRUST_CERT}, "trustCert");
 * 
 *
 * @author wangwei
 * @date 2020/8/19 2:59 PM
 */
public final class TlsHelper {
    
    /**
     * Returns a {@link org.apache.http.ssl.SSLContexts}.
     *
     * For example
     * HttpsURLConnection.setDefaultSSLSocketFactory(TlsHelper.buildSslContext(true).getSocketFactory());
     *
     * @param forClient whether for client
     * @return {@link SSLContext}
     * @throws NoSuchAlgorithmException Not support the specified algorithm
     * @throws KeyManagementException   KeyManagement exception
     */
    public static SSLContext buildSslContext(boolean forClient)
            throws NoSuchAlgorithmException, KeyManagementException {
        
        SSLContext sslcontext = SSLContext.getInstance("TLS");
        sslcontext.init(null, SelfTrustManager
                        .trustManager(TlsSystemConfig.tlsClientAuthServer, TlsSystemConfig.tlsClientTrustCertPath),
                new java.security.SecureRandom());
        return sslcontext;
    }
}