org.neo4j.test.ssl.CertificateChainFactory Maven / Gradle / Ivy
Show all versions of test-utils Show documentation
/*
* Copyright (c) "Neo4j"
* Neo4j Sweden AB [http://neo4j.com]
*
* This file is part of Neo4j.
*
* Neo4j is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see
* The hook should only be installed prior to generation of the certificate chain, and not if certificates already exist.
*/
private static void installCleanupHook( final Path endUserCertPath, final Path endUserPrivateKeyPath,
final Path intCertPath, final Path intPrivateKeyPath,
final Path rootCertPath, final Path rootPrivateKeyPath,
BouncyCastleProvider bouncyCastleProvider )
{
Runtime.getRuntime().addShutdownHook( new Thread( () ->
{
if ( cleanupRequired )
{
System.err.println( "Cleaning up partially generated self-signed certificate..." );
try
{
Security.removeProvider( bouncyCastleProvider.getName() );
Files.deleteIfExists( endUserCertPath );
Files.deleteIfExists( endUserPrivateKeyPath );
Files.deleteIfExists( intCertPath );
Files.deleteIfExists( intPrivateKeyPath );
Files.deleteIfExists( rootCertPath );
Files.deleteIfExists( rootPrivateKeyPath );
}
catch ( IOException e )
{
System.err.println( "Error cleaning up" );
e.printStackTrace( System.err );
}
}
} ) );
}
private static void writePem( String type, byte[] encodedContent, Path path ) throws IOException
{
Files.createDirectories( path.getParent() );
try ( PemWriter writer = new PemWriter( Files.newBufferedWriter( path, StandardCharsets.UTF_8 ) ) )
{
writer.writeObject( new PemObject( type, encodedContent ) );
writer.flush();
}
try
{
Files.setPosixFilePermissions( path, Set.of( PosixFilePermission.OWNER_WRITE, PosixFilePermission.OWNER_READ ) );
}
catch ( UnsupportedOperationException ignore )
{
// Fallback for windows
File file = path.toFile();
file.setReadable( false, false );
file.setWritable( false, false );
file.setReadable( true );
file.setWritable( true );
}
}
private static void writePem( String type, byte[] certA, byte[] certB, byte[] certC, Path path ) throws IOException
{
Files.createDirectories( path.getParent() );
try ( PemWriter writer = new PemWriter( Files.newBufferedWriter( path, StandardCharsets.UTF_8 ) ) )
{
writer.writeObject( new PemObject( type, certA ) );
writer.writeObject( new PemObject( type, certB ) );
writer.writeObject( new PemObject( type, certC ) );
writer.flush();
}
try
{
Files.setPosixFilePermissions( path, Set.of( PosixFilePermission.OWNER_WRITE, PosixFilePermission.OWNER_READ ) );
}
catch ( UnsupportedOperationException ignore )
{
// Fallback for windows
File file = path.toFile();
file.setReadable( false, false );
file.setWritable( false, false );
file.setReadable( true );
file.setWritable( true );
}
}
}