org.apache.activemq.artemis.core.remoting.impl.ssl

Class SSLSupport

java.lang.Object

org.apache.activemq.artemis.core.remoting.impl.ssl.SSLSupport

public class SSLSupport
extends Object

Please note, this class supports PKCS#11 keystores, but there are no specific tests in the ActiveMQ Artemis test-suite to validate/verify this works because this requires a functioning PKCS#11 provider which is not available by default (see java.security.Security#getProviders()). The main thing to keep in mind is that PKCS#11 keystores will either use null, and empty string, or NONE for their keystore path.

Field Summary

Fields

Modifier and Type	Field and Description
static String	NONE

Constructor Summary

Constructors

Constructor and Description
SSLSupport()
SSLSupport(SSLContextConfig config)

Method Summary

Modifier and Type	Method and Description
SSLContext	createContext()
io.netty.handler.ssl.SslContext	createNettyClientContext()
io.netty.handler.ssl.SslContext	createNettyContext()
String	getCrlPath()
String	getKeystorePassword()
String	getKeystorePath()
String	getKeystoreProvider()
String	getKeystoreType()
String	getSslProvider()
String	getTrustManagerFactoryPlugin()
String	getTruststorePassword()
String	getTruststorePath()
String	getTruststoreProvider()
String	getTruststoreType()
static Pair<String,String>	getValidProviderAndType(String storeProvider, String storeType) The changes ARTEMIS-3155 introduced an incompatibility with old clients using the keyStoreProvider and trustStoreProvider URL properties.
boolean	isTrustAll()
static String	parseArrayIntoCommandSeparatedList(String[] suites)
static String[]	parseCommaSeparatedListIntoArray(String suites)
SSLSupport	setCrlPath(String crlPath)
SSLSupport	setKeystorePassword(String keystorePassword)
SSLSupport	setKeystorePath(String keystorePath)
SSLSupport	setKeystoreProvider(String keystoreProvider)
SSLSupport	setKeystoreType(String keystoreType)
SSLSupport	setSslProvider(String sslProvider)
SSLSupport	setTrustAll(boolean trustAll)
SSLSupport	setTrustManagerFactoryPlugin(String trustManagerFactoryPlugin)
SSLSupport	setTruststorePassword(String truststorePassword)
SSLSupport	setTruststorePath(String truststorePath)
SSLSupport	setTruststoreProvider(String truststoreProvider)
SSLSupport	setTruststoreType(String truststoreType)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

NONE

public static final String NONE

See Also:

Constant Field Values

Constructor Detail

SSLSupport

public SSLSupport()

SSLSupport

public SSLSupport(SSLContextConfig config)

Method Detail

getKeystoreProvider

public String getKeystoreProvider()

setKeystoreProvider

public SSLSupport setKeystoreProvider(String keystoreProvider)

getKeystoreType

public String getKeystoreType()

setKeystoreType

public SSLSupport setKeystoreType(String keystoreType)

getKeystorePath

public String getKeystorePath()

setKeystorePath

public SSLSupport setKeystorePath(String keystorePath)

getKeystorePassword

public String getKeystorePassword()

setKeystorePassword

public SSLSupport setKeystorePassword(String keystorePassword)

getTruststoreProvider

public String getTruststoreProvider()

setTruststoreProvider

public SSLSupport setTruststoreProvider(String truststoreProvider)

getTruststoreType

public String getTruststoreType()

setTruststoreType

public SSLSupport setTruststoreType(String truststoreType)

getTruststorePath

public String getTruststorePath()

setTruststorePath

public SSLSupport setTruststorePath(String truststorePath)

getTruststorePassword

public String getTruststorePassword()

setTruststorePassword

public SSLSupport setTruststorePassword(String truststorePassword)

getCrlPath

public String getCrlPath()

setCrlPath

public SSLSupport setCrlPath(String crlPath)

getSslProvider

public String getSslProvider()

setSslProvider

public SSLSupport setSslProvider(String sslProvider)

isTrustAll

public boolean isTrustAll()

setTrustAll

public SSLSupport setTrustAll(boolean trustAll)

getTrustManagerFactoryPlugin

public String getTrustManagerFactoryPlugin()

setTrustManagerFactoryPlugin

public SSLSupport setTrustManagerFactoryPlugin(String trustManagerFactoryPlugin)

createContext

public SSLContext createContext()
                         throws Exception

Throws:

Exception

createNettyContext

public io.netty.handler.ssl.SslContext createNettyContext()
                                                   throws Exception

Throws:

Exception

createNettyClientContext

public io.netty.handler.ssl.SslContext createNettyClientContext()
                                                         throws Exception

Throws:

Exception

parseCommaSeparatedListIntoArray

public static String[] parseCommaSeparatedListIntoArray(String suites)

parseArrayIntoCommandSeparatedList

public static String parseArrayIntoCommandSeparatedList(String[] suites)

getValidProviderAndType

public static Pair<String,String> getValidProviderAndType(String storeProvider,
                                                          String storeType)

The changes ARTEMIS-3155 introduced an incompatibility with old clients using the keyStoreProvider and trustStoreProvider URL properties. These old clients use these properties to set the *type* of store (e.g. PKCS12, PKCS11, JKS, JCEKS, etc.), but new clients use these to set the *provider* (as the name implies). This method checks to see if the provider property matches what is expected from old clients and if so returns they proper provider and type properties to use with the new client implementation.

Parameters:

storeProvider -

storeType -

Returns:

a Pair<String, String> representing the provider and type to use (in that order)