net.eightlives.friendlyssl.service.CertificateOrderHandlerService Maven / Gradle / Ivy

Go to download
package net.eightlives.friendlyssl.service;

import net.eightlives.friendlyssl.config.FriendlySSLConfig;
import net.eightlives.friendlyssl.exception.FriendlySSLException;
import net.eightlives.friendlyssl.exception.KeyStoreGeneratorException;
import org.shredzone.acme4j.Certificate;
import org.shredzone.acme4j.Login;
import org.springframework.stereotype.Component;

import java.io.IOException;
import java.io.OutputStream;
import java.nio.file.Files;
import java.nio.file.Path;
import java.security.KeyPair;

@Component
public class CertificateOrderHandlerService {

    private final FriendlySSLConfig config;
    private final CertificateOrderService certificateOrderService;
    private final PKCS12KeyStoreService keyStoreService;

    public CertificateOrderHandlerService(FriendlySSLConfig config,
                                          CertificateOrderService certificateOrderService,
                                          PKCS12KeyStoreService keyStoreService) {
        this.config = config;
        this.certificateOrderService = certificateOrderService;
        this.keyStoreService = keyStoreService;
    }

    /**
     * Order a certificate and write the resulting certificate chain to the configured keystore.
     *
     * @param login         the login with which to order the certificate
     * @param domainKeyPair the domain key pair with which to order the certificate
     * @return successfully ordered {@link Certificate}
     * @throws FriendlySSLException if an exception occurs while generating or writing the key store or
     *                              nothing is returned from the certificate order, indicating a failure
     */
    public Certificate handleCertificateOrder(Login login, KeyPair domainKeyPair) {
        return certificateOrderService.orderCertificate(config.getDomain(), login, domainKeyPair)
                .map(certificate -> {
                    try (OutputStream file = Files.newOutputStream(Path.of(config.getKeystoreFile()))) {
                        byte[] keyStore = keyStoreService.generateKeyStore(
                                certificate.getCertificateChain(),
                                domainKeyPair.getPrivate());
                        file.write(keyStore);
                    } catch (IOException | KeyStoreGeneratorException e) {
                        throw new FriendlySSLException(e);
                    }

                    return certificate;
                }).orElseThrow(() -> new FriendlySSLException("Certificate was not returned"));
    }
}