eu.europa.esig.dss.client.http.commons.DefaultKeyManager Maven / Gradle / Ivy
package eu.europa.esig.dss.client.http.commons;
import java.io.IOException;
import java.io.InputStream;
import java.net.Socket;
import java.security.GeneralSecurityException;
import java.security.KeyStore;
import java.security.NoSuchAlgorithmException;
import java.security.Principal;
import java.security.PrivateKey;
import java.security.cert.X509Certificate;
import javax.net.ssl.KeyManager;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.X509KeyManager;
/**
* Default Keys Manager.
*
* @author lodermatt
*/
public final class DefaultKeyManager implements X509KeyManager {
/** KeyManager. */
private X509KeyManager keyManager;
/**
* Constructor.
*
* @param keystore
* The keystore
* @param ksPasswd
* Keystore's password
* @throws GeneralSecurityException
* Certificate/Keystore/Algorithm/... exception
* @throws IOException
* I/O Error
*/
public DefaultKeyManager(KeyStore keystore, String ksPasswd) throws GeneralSecurityException, IOException {
this.initKeyManager(keystore, ksPasswd);
}
/**
* Constructor.
*
* @param ksInputStream
* The keystore
* @param keyStoreType
* The keystore type
* @param ksPasswd
* Keystore's password
* @throws GeneralSecurityException
* Certificate/Keystore/Algorithm/... exception
* @throws IOException
* I/O Error
*/
public DefaultKeyManager(InputStream ksInputStream, String keyStoreType, String ksPasswd) throws GeneralSecurityException, IOException {
// load keystore from specified cert store (or default)
final KeyStore keystore = KeyStore.getInstance(keyStoreType);
keystore.load(ksInputStream, ksPasswd.toCharArray());
this.initKeyManager(keystore, ksPasswd);
}
/*
* (non-Javadoc)
*
* @see javax.net.ssl.X509KeyManager#chooseClientAlias(java.lang.String[], java.security.Principal[],
* java.net.Socket)
*/
@Override
public String chooseClientAlias(final String[] keyType, final Principal[] issuers, final Socket socket) {
return keyManager.chooseClientAlias(keyType, issuers, socket);
}
/*
* (non-Javadoc)
*
* @see javax.net.ssl.X509KeyManager#chooseServerAlias(java.lang.String, java.security.Principal[], java.net.Socket)
*/
@Override
public String chooseServerAlias(final String keyType, final Principal[] issuers, final Socket socket) {
return keyManager.chooseServerAlias(keyType, issuers, socket);
}
/*
* (non-Javadoc)
*
* @see javax.net.ssl.X509KeyManager#getCertificateChain(java.lang.String)
*/
@Override
public X509Certificate[] getCertificateChain(final String alias) {
return keyManager.getCertificateChain(alias);
}
/*
* (non-Javadoc)
*
* @see javax.net.ssl.X509KeyManager#getClientAliases(java.lang.String, java.security.Principal[])
*/
@Override
public String[] getClientAliases(final String keyType, final Principal[] issuers) {
return keyManager.getClientAliases(keyType, issuers);
}
/*
* (non-Javadoc)
*
* @see javax.net.ssl.X509KeyManager#getPrivateKey(java.lang.String)
*/
@Override
public PrivateKey getPrivateKey(final String alias) {
return keyManager.getPrivateKey(alias);
}
/*
* (non-Javadoc)
*
* @see javax.net.ssl.X509KeyManager#getServerAliases(java.lang.String, java.security.Principal[])
*/
@Override
public String[] getServerAliases(final String keyType, final Principal[] issuers) {
return keyManager.getServerAliases(keyType, issuers);
}
/**
* Loads the keystore.
*
* @param keystore
* the keystore to load
* @param ksPasswd
* keystore's password
* @throws GeneralSecurityException
* Certificate/Keystore/Algorithm/... exception
*/
private void initKeyManager(KeyStore keystore, String ksPasswd) throws GeneralSecurityException {
// initialize a new KMF with the ts we just loaded
KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
kmf.init(keystore, ksPasswd.toCharArray());
// acquire X509 key manager from factory
KeyManager[] kms = kmf.getKeyManagers();
for (final KeyManager km : kms) {
if (km instanceof X509KeyManager) {
keyManager = (X509KeyManager) km;
return;
}
}
throw new NoSuchAlgorithmException("No X509KeyManager in KeyManagerFactory");
}
}