1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
// Copyright 2018 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.security.tls;
import com.fasterxml.jackson.databind.JsonNode;
import com.fasterxml.jackson.databind.ObjectMapper;
import java.io.IOException;
import java.io.UncheckedIOException;
import java.nio.file.Path;
import java.nio.file.Paths;
import java.util.Objects;
import java.util.Optional;
/**
* Generic TLS configuration for Vespa
*
* @author bjorncs
*/
public class TransportSecurityOptions {
private static final ObjectMapper mapper = new ObjectMapper();
private final Path privateKeyFile;
private final Path certificatesFile;
private final Path caCertificatesFile;
public TransportSecurityOptions(String privateKeyFile, String certificatesFile, String caCertificatesFile) {
this(Paths.get(privateKeyFile), Paths.get(certificatesFile), Paths.get(caCertificatesFile));
}
public TransportSecurityOptions(Path privateKeyFile, Path certificatesFile, Path caCertificatesFile) {
this.privateKeyFile = privateKeyFile;
this.certificatesFile = certificatesFile;
this.caCertificatesFile = caCertificatesFile;
}
public Path getPrivateKeyFile() {
return privateKeyFile;
}
public Path getCertificatesFile() {
return certificatesFile;
}
public Path getCaCertificatesFile() {
return caCertificatesFile;
}
public static TransportSecurityOptions fromJsonFile(Path file) {
try {
JsonNode root = mapper.readTree(file.toFile());
JsonNode filesNode = getField(root, "files");
String privateKeyFile = getField(filesNode, "private-key").asText();
String certificatesFile = getField(filesNode, "certificates").asText();
String caCertificatesFile = getField(filesNode, "ca-certificates").asText();
return new TransportSecurityOptions(privateKeyFile, certificatesFile, caCertificatesFile);
} catch (IOException e) {
throw new UncheckedIOException(e);
}
}
private static JsonNode getField(JsonNode root, String fieldName) {
return Optional.ofNullable(root.get(fieldName))
.orElseThrow(() -> new IllegalArgumentException(String.format("'%s' field missing", fieldName)));
}
@Override
public String toString() {
return "TransportSecurityOptions{" +
"privateKeyFile=" + privateKeyFile +
", certificatesFile=" + certificatesFile +
", caCertificatesFile=" + caCertificatesFile +
'}';
}
@Override
public boolean equals(Object o) {
if (this == o) return true;
if (o == null || getClass() != o.getClass()) return false;
TransportSecurityOptions that = (TransportSecurityOptions) o;
return Objects.equals(privateKeyFile, that.privateKeyFile) &&
Objects.equals(certificatesFile, that.certificatesFile) &&
Objects.equals(caCertificatesFile, that.caCertificatesFile);
}
@Override
public int hashCode() {
return Objects.hash(privateKeyFile, certificatesFile, caCertificatesFile);
}
}
|
