org.paxml.util.CryptoUtils Maven / Gradle / Ivy
The newest version!
/**
* This file is part of PaxmlCore.
*
* PaxmlCore is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* PaxmlCore is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with PaxmlCore. If not, see () {
@Override
public Void call() throws Exception {
KeyStore keyStore = getKeyStore(file, oldPassword);
saveKeyStore(file, newPassword, keyStore);
return null;
}
});
}
public static String getKey(String keyStoreName, final String keyStorePassword, final String keyName, final String keyPassword) {
final File file = getKeyStoreFile(keyStoreName);
final String key = file.getAbsolutePath();
return keyStoreExecutor.executeRead(key, new Callable() {
@Override
public String call() throws Exception {
KeyStore keyStore = getKeyStore(file, keyStorePassword);
return getKey(keyStore, keyName, keyPassword);
}
});
}
private static String getKey(KeyStore keyStore, String keyName, String keyPassword) {
if (StringUtils.isBlank(keyName)) {
keyName = DEFAULT_KEY_NAME;
}
if (keyPassword == null) {
keyPassword = DEFAULT_KEY_PASSWORD;
}
PasswordProtection _keyPassword = new PasswordProtection(keyPassword.toCharArray());
KeyStore.Entry entry;
try {
if (!keyStore.containsAlias(keyName)) {
return null;
}
entry = keyStore.getEntry(keyName, _keyPassword);
} catch (Exception e) {
throw new PaxmlRuntimeException(e);
}
SecretKey key = ((KeyStore.SecretKeyEntry) entry).getSecretKey();
try {
return new String(key.getEncoded(), KEY_VALUE_ENCODING);
} catch (UnsupportedEncodingException e) {
throw new PaxmlRuntimeException(e);
}
}
public static boolean deleteKeyStore(String keyStoreName) {
final File file = getKeyStoreFile(keyStoreName);
return keyStoreExecutor.executeWrite(file.getAbsolutePath(), new Callable() {
@Override
public Boolean call() throws Exception {
return file.delete();
}
});
}
public static void deleteKey(String keyStoreName, final String keyStorePassword, final String keyName) {
final File file = getKeyStoreFile(keyStoreName);
keyStoreExecutor.executeWrite(file.getAbsolutePath(), new Callable() {
@Override
public Void call() throws Exception {
deleteKey(getKeyStore(file, keyStorePassword), keyName);
return null;
}
});
}
private static void deleteKey(KeyStore keyStore, String keyName) {
try {
if (keyStore.containsAlias(keyName)) {
keyStore.deleteEntry(keyName);
}
} catch (KeyStoreException e) {
throw new PaxmlRuntimeException(e);
}
}
public static void setKey(String keyStoreName, final String keyStorePassword, final String keyName, final String keyPassword, final String keyValue) {
final File file = getKeyStoreFile(keyStoreName);
final String key = file.getAbsolutePath();
keyStoreExecutor.executeWrite(key, new Callable() {
@Override
public Void call() throws Exception {
KeyStore keyStore = getKeyStore(file, keyStorePassword);
setKey(keyStore, keyName, keyPassword, keyValue);
saveKeyStore(file, keyStorePassword, keyStore);
return null;
}
});
}
private static void setKey(KeyStore keyStore, String keyName, String keyPassword, String keyValue) {
if (StringUtils.isBlank(keyName)) {
keyName = DEFAULT_KEY_NAME;
}
if (keyPassword == null) {
keyPassword = DEFAULT_KEY_PASSWORD;
}
try {
SecretKey secretKey = new SecretKeySpec(keyValue.getBytes(KEY_VALUE_ENCODING), KEY_TYPE);
KeyStore.SecretKeyEntry keyStoreEntry = new KeyStore.SecretKeyEntry(secretKey);
PasswordProtection _keyPassword = new PasswordProtection(keyPassword.toCharArray());
keyStore.setEntry(keyName, keyStoreEntry, _keyPassword);
} catch (Exception e) {
throw new PaxmlRuntimeException(e);
}
}
private static void saveKeyStore(final File file, final String password, final KeyStore ks) {
file.delete();
FileOutputStream fos = null;
try {
fos = new FileOutputStream(file);
ks.store(fos, password.toCharArray());
} catch (Exception e) {
throw new PaxmlRuntimeException("Cannot write to key store file: " + file.getAbsolutePath(), e);
} finally {
IOUtils.closeQuietly(fos);
}
}
private static KeyStore getKeyStore(final File file, final String password) {
final String key = file.getAbsolutePath();
KeyStore keyStore;
final char[] pwd = password.toCharArray();
if (!file.exists()) {
FileOutputStream fos = null;
try {
file.getParentFile().mkdirs();
fos = new FileOutputStream(file);
// keystore file not created yet => create it
keyStore = KeyStore.getInstance(KEY_STORE_TYPE);
keyStore.load(null, null);
keyStore.store(fos, pwd);
} catch (Exception e) {
throw new PaxmlRuntimeException("Cannot create new key store file: " + key, e);
} finally {
IOUtils.closeQuietly(fos);
}
}
FileInputStream fis = null;
try {
fis = new FileInputStream(file);
keyStore = KeyStore.getInstance(KEY_STORE_TYPE);
// keystore file already exists => load it
keyStore.load(fis, pwd);
} catch (Exception e) {
throw new PaxmlRuntimeException("Cannot read from key store file: " + key, e);
} finally {
IOUtils.closeQuietly(fis);
}
return keyStore;
}
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy