com.quorum.tessera.ssl.strategy.TrustMode Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of security Show documentation
Tessera is a stateless Java system that is used to enable the encryption, decryption, and distribution of private transactions for Quorum.
There is a newer version: 24.4.2
Show newest version
package com.quorum.tessera.ssl.strategy;

import com.quorum.tessera.ssl.context.SSLContextBuilder;
import com.quorum.tessera.ssl.context.model.SSLContextProperties;
import java.io.IOException;
import java.security.GeneralSecurityException;
import java.util.Optional;
import javax.net.ssl.SSLContext;
import org.bouncycastle.operator.OperatorCreationException;

public enum TrustMode {
  NONE {
    @Override
    public SSLContext createSSLContext(SSLContextProperties properties)
        throws GeneralSecurityException, OperatorCreationException, IOException {
      return SSLContextBuilder.createBuilder(
              properties.getAddress(),
              properties.getKeyStore(),
              properties.getKeyStorePassword(),
              properties.getTrustStore(),
              properties.getTrustStorePassword())
          .fromPemFiles(
              properties.getKey(), properties.getCertificate(), properties.getTrustedCertificates())
          .forAllCertificates()
          .build();
    }
  },

  WHITELIST {
    @Override
    public SSLContext createSSLContext(SSLContextProperties properties)
        throws GeneralSecurityException, IOException, OperatorCreationException {
      return SSLContextBuilder.createBuilder(
              properties.getAddress(),
              properties.getKeyStore(),
              properties.getKeyStorePassword(),
              properties.getTrustStore(),
              properties.getTrustStorePassword())
          .fromPemFiles(
              properties.getKey(), properties.getCertificate(), properties.getTrustedCertificates())
          .forWhiteList(properties.getKnownHosts())
          .build();
    }
  },

  TOFU {
    @Override
    public SSLContext createSSLContext(SSLContextProperties properties)
        throws GeneralSecurityException, IOException, OperatorCreationException {
      return SSLContextBuilder.createBuilder(
              properties.getAddress(),
              properties.getKeyStore(),
              properties.getKeyStorePassword(),
              properties.getTrustStore(),
              properties.getTrustStorePassword())
          .fromPemFiles(
              properties.getKey(), properties.getCertificate(), properties.getTrustedCertificates())
          .forTrustOnFirstUse(properties.getKnownHosts())
          .build();
    }
  },

  CA {
    @Override
    public SSLContext createSSLContext(SSLContextProperties properties)
        throws GeneralSecurityException, IOException, OperatorCreationException {
      return SSLContextBuilder.createBuilder(
              properties.getAddress(),
              properties.getKeyStore(),
              properties.getKeyStorePassword(),
              properties.getTrustStore(),
              properties.getTrustStorePassword())
          .fromPemFiles(
              properties.getKey(), properties.getCertificate(), properties.getTrustedCertificates())
          .forCASignedCertificates()
          .build();
    }
  },

  CA_OR_TOFU {
    @Override
    public SSLContext createSSLContext(SSLContextProperties properties)
        throws GeneralSecurityException, IOException, OperatorCreationException {
      return SSLContextBuilder.createBuilder(
              properties.getAddress(),
              properties.getKeyStore(),
              properties.getKeyStorePassword(),
              properties.getTrustStore(),
              properties.getTrustStorePassword())
          .fromPemFiles(
              properties.getKey(), properties.getCertificate(), properties.getTrustedCertificates())
          .forCAOrTOFU(properties.getKnownHosts())
          .build();
    }
  };

  public abstract SSLContext createSSLContext(SSLContextProperties properties)
      throws GeneralSecurityException, IOException, OperatorCreationException;

  public static Optional getValueIfPresent(String value) {
    try {
      final TrustMode trustMode = TrustMode.valueOf(value.toUpperCase());
      return Optional.ofNullable(trustMode);
    } catch (IllegalArgumentException ex) {
      return Optional.empty();
    }
  }
}