org.apache.cassandra.spark.validation.TrustStoreValidation Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of cassandra-analytics-sidecar-client Show documentation
The newest version!
/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

package org.apache.cassandra.spark.validation;

import java.io.IOException;
import java.io.InputStream;
import java.security.GeneralSecurityException;
import java.security.KeyStore;
import java.security.cert.Certificate;
import java.util.Enumeration;
import java.util.function.Supplier;

import org.apache.cassandra.secrets.SecretsProvider;
import org.apache.cassandra.spark.utils.Throwing;
import org.jetbrains.annotations.NotNull;

/**
 * A startup validation that checks the TrustStore
 */
public class TrustStoreValidation implements StartupValidation
{
    private final boolean configured;
    private final String type;
    private final char[] password;
    private final Supplier stream;

    public TrustStoreValidation(@NotNull SecretsProvider secrets)
    {
        this(
        secrets.hasTrustStoreSecrets(),
        secrets.trustStoreType(),
        secrets.trustStorePassword(),
        Throwing.supplier(secrets::trustStoreInputStream)
        );
    }

    protected TrustStoreValidation(boolean configured,
                                   String type,
                                   char[] password,
                                   Supplier stream)
    {
        this.configured = configured;
        this.type = type;
        this.password = password;
        this.stream = stream;
    }

    @Override
    public void validate()
    {
        try
        {
            if (!configured)
            {
                return;  // TrustStore is optional
            }

            KeyStore trustStore = KeyStore.getInstance(type);
            trustStore.load(stream.get(), password);
            if (trustStore.size() == 0)
            {
                throw new RuntimeException("TrustStore is empty");
            }

            for (Enumeration aliases = trustStore.aliases(); aliases.hasMoreElements();)
            {
                Certificate certificate = trustStore.getCertificate(aliases.nextElement());
                if (certificate != null)
                {
                    return;  // TrustStore contains a certificate
                }
            }
            throw new RuntimeException("TrustStore contains no certificates");
        }
        catch (IOException | GeneralSecurityException exception)
        {
            throw new RuntimeException("TrustStore is misconfigured", exception);
        }
    }
}