jaxrs.examples.bootstrap.ClientAuthenticationJavaSeBootstrapExample Maven / Gradle / Ivy
/*
* Copyright (c) 2018 Markus KARG. All rights reserved.
*
* This program and the accompanying materials are made available under the
* terms of the Eclipse Public License v. 2.0, which is available at
* http://www.eclipse.org/legal/epl-2.0.
*
* This Source Code may also be made available under the following Secondary
* Licenses when the conditions for such availability set forth in the
* Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
* version 2 with the GNU Classpath Exception, which is available at
* https://www.gnu.org/software/classpath/license.html.
*
* SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
*/
package jaxrs.examples.bootstrap;
import java.net.URI;
import jakarta.ws.rs.SeBootstrap;
import jakarta.ws.rs.SeBootstrap.Configuration.SSLClientAuthentication;
/**
* Java SE Bootstrap Example using TLS Client Authentication.
*
* This example demonstrates bootstrapping on Java SE platforms using HTTPS with bidirectional TLS
* authentication (i. e. only trustworthy clients may connect). It relies mostly on defaults but explicitly
* sets the protocol to HTTPS and mandates TLS client certificate validation. The example will effectively startup the
* {@link HelloWorld} application at the URL {@code https://localhost/} on an implementation-specific default IP port
* (e. g. 443, 8443, or someting completely different). The actual configuration needs to be queried after
* bootstrapping, otherwise callers would be unaware of the actual chosen port. If the client's certificate is invalid
* or cannot be validated, the server will reject the connection.
*
* This example uses some basic external JSSE configuration:
*
* - {@code javax.net.ssl.keyStore=~/.keystore} - HTTPS: Path to a keystore holding an X.509 certificate for
* {@code CN=localhost}
* - {@code javax.net.ssl.keyStorePassword=...} - HTTPS: Password of that keystore
* - Client Authentication: The default truststore ({@code $JAVA_HOME/lib/security/cacerts}) must hold the root
* certificate of the CA and all intermediate certificates used for signing the client's certificate.
*
*
* @author Markus KARG ([email protected])
* @since 3.1
*/
public final class ClientAuthenticationJavaSeBootstrapExample {
private ClientAuthenticationJavaSeBootstrapExample() {
}
/**
* Runs this example.
*
* @param args unused command line arguments
* @throws InterruptedException when process is killed
*/
public static void main(final String[] args) throws InterruptedException {
final SeBootstrap.Configuration requestedConfiguration = SeBootstrap.Configuration.builder().protocol("HTTPS")
.sslClientAuthentication(SSLClientAuthentication.MANDATORY).build();
SeBootstrap.start(HelloWorld.class, requestedConfiguration).thenAccept(instance -> {
instance.stopOnShutdown(stopResult ->
System.out.printf("Stop result: %s [Native stop result: %s].%n", stopResult,
stopResult.unwrap(Object.class)));
final URI uri = instance.configuration().baseUri();
System.out.printf("Instance %s running at %s [Native handle: %s].%n", instance, uri,
instance.unwrap(Object.class));
System.out.println("Send SIGKILL to shutdown.");
});
Thread.currentThread().join();
}
}