mirror of
https://github.com/valitydev/thrift.git
synced 2024-11-07 10:48:51 +00:00
THRIFT-4337: Able to set keyStore and trustStore as InputStream in the
TSSLTransportFactory.TSSLTransportParameters Client: java This closes #1486
This commit is contained in:
parent
8bcb7ac2be
commit
8678dfc78b
@ -186,7 +186,11 @@ public class TSSLTransportFactory {
|
|||||||
if (params.isTrustStoreSet) {
|
if (params.isTrustStoreSet) {
|
||||||
tmf = TrustManagerFactory.getInstance(params.trustManagerType);
|
tmf = TrustManagerFactory.getInstance(params.trustManagerType);
|
||||||
KeyStore ts = KeyStore.getInstance(params.trustStoreType);
|
KeyStore ts = KeyStore.getInstance(params.trustStoreType);
|
||||||
in = getStoreAsStream(params.trustStore);
|
if (params.trustStoreStream != null) {
|
||||||
|
in = params.trustStoreStream;
|
||||||
|
} else {
|
||||||
|
in = getStoreAsStream(params.trustStore);
|
||||||
|
}
|
||||||
ts.load(in,
|
ts.load(in,
|
||||||
(params.trustPass != null ? params.trustPass.toCharArray() : null));
|
(params.trustPass != null ? params.trustPass.toCharArray() : null));
|
||||||
tmf.init(ts);
|
tmf.init(ts);
|
||||||
@ -195,7 +199,11 @@ public class TSSLTransportFactory {
|
|||||||
if (params.isKeyStoreSet) {
|
if (params.isKeyStoreSet) {
|
||||||
kmf = KeyManagerFactory.getInstance(params.keyManagerType);
|
kmf = KeyManagerFactory.getInstance(params.keyManagerType);
|
||||||
KeyStore ks = KeyStore.getInstance(params.keyStoreType);
|
KeyStore ks = KeyStore.getInstance(params.keyStoreType);
|
||||||
is = getStoreAsStream(params.keyStore);
|
if (params.keyStoreStream != null) {
|
||||||
|
is = params.keyStoreStream;
|
||||||
|
} else {
|
||||||
|
is = getStoreAsStream(params.keyStore);
|
||||||
|
}
|
||||||
ks.load(is, params.keyPass.toCharArray());
|
ks.load(is, params.keyPass.toCharArray());
|
||||||
kmf.init(ks, params.keyPass.toCharArray());
|
kmf.init(ks, params.keyPass.toCharArray());
|
||||||
}
|
}
|
||||||
@ -273,10 +281,12 @@ public class TSSLTransportFactory {
|
|||||||
public static class TSSLTransportParameters {
|
public static class TSSLTransportParameters {
|
||||||
protected String protocol = "TLS";
|
protected String protocol = "TLS";
|
||||||
protected String keyStore;
|
protected String keyStore;
|
||||||
|
protected InputStream keyStoreStream;
|
||||||
protected String keyPass;
|
protected String keyPass;
|
||||||
protected String keyManagerType = KeyManagerFactory.getDefaultAlgorithm();
|
protected String keyManagerType = KeyManagerFactory.getDefaultAlgorithm();
|
||||||
protected String keyStoreType = "JKS";
|
protected String keyStoreType = "JKS";
|
||||||
protected String trustStore;
|
protected String trustStore;
|
||||||
|
protected InputStream trustStoreStream;
|
||||||
protected String trustPass;
|
protected String trustPass;
|
||||||
protected String trustManagerType = TrustManagerFactory.getDefaultAlgorithm();
|
protected String trustManagerType = TrustManagerFactory.getDefaultAlgorithm();
|
||||||
protected String trustStoreType = "JKS";
|
protected String trustStoreType = "JKS";
|
||||||
@ -332,7 +342,20 @@ public class TSSLTransportFactory {
|
|||||||
}
|
}
|
||||||
isKeyStoreSet = true;
|
isKeyStoreSet = true;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set the keystore, password, certificate type and the store type
|
||||||
|
*
|
||||||
|
* @param keyStoreStream Keystore content input stream
|
||||||
|
* @param keyPass Keystore password
|
||||||
|
* @param keyManagerType The default is X509
|
||||||
|
* @param keyStoreType The default is JKS
|
||||||
|
*/
|
||||||
|
public void setKeyStore(InputStream keyStoreStream, String keyPass, String keyManagerType, String keyStoreType) {
|
||||||
|
this.keyStoreStream = keyStoreStream;
|
||||||
|
setKeyStore("", keyPass, keyManagerType, keyStoreType);
|
||||||
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Set the keystore and password
|
* Set the keystore and password
|
||||||
*
|
*
|
||||||
@ -342,7 +365,17 @@ public class TSSLTransportFactory {
|
|||||||
public void setKeyStore(String keyStore, String keyPass) {
|
public void setKeyStore(String keyStore, String keyPass) {
|
||||||
setKeyStore(keyStore, keyPass, null, null);
|
setKeyStore(keyStore, keyPass, null, null);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set the keystore and password
|
||||||
|
*
|
||||||
|
* @param keyStore Keystore content input stream
|
||||||
|
* @param keyPass Keystore password
|
||||||
|
*/
|
||||||
|
public void setKeyStore(InputStream keyStoreStream, String keyPass) {
|
||||||
|
setKeyStore(keyStoreStream, keyPass, null, null);
|
||||||
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Set the truststore, password, certificate type and the store type
|
* Set the truststore, password, certificate type and the store type
|
||||||
*
|
*
|
||||||
@ -362,6 +395,19 @@ public class TSSLTransportFactory {
|
|||||||
}
|
}
|
||||||
isTrustStoreSet = true;
|
isTrustStoreSet = true;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set the truststore, password, certificate type and the store type
|
||||||
|
*
|
||||||
|
* @param trustStoreStream Truststore content input stream
|
||||||
|
* @param trustPass Truststore password
|
||||||
|
* @param trustManagerType The default is X509
|
||||||
|
* @param trustStoreType The default is JKS
|
||||||
|
*/
|
||||||
|
public void setTrustStore(InputStream trustStoreStream, String trustPass, String trustManagerType, String trustStoreType) {
|
||||||
|
this.trustStoreStream = trustStoreStream;
|
||||||
|
setTrustStore("", trustPass, trustManagerType, trustStoreType);
|
||||||
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Set the truststore and password
|
* Set the truststore and password
|
||||||
@ -372,6 +418,16 @@ public class TSSLTransportFactory {
|
|||||||
public void setTrustStore(String trustStore, String trustPass) {
|
public void setTrustStore(String trustStore, String trustPass) {
|
||||||
setTrustStore(trustStore, trustPass, null, null);
|
setTrustStore(trustStore, trustPass, null, null);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set the truststore and password
|
||||||
|
*
|
||||||
|
* @param trustStore Truststore content input stream
|
||||||
|
* @param trustPass Truststore password
|
||||||
|
*/
|
||||||
|
public void setTrustStore(InputStream trustStoreStream, String trustPass) {
|
||||||
|
setTrustStore(trustStoreStream, trustPass, null, null);
|
||||||
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Set if client authentication is required
|
* Set if client authentication is required
|
||||||
@ -380,6 +436,6 @@ public class TSSLTransportFactory {
|
|||||||
*/
|
*/
|
||||||
public void requireClientAuth(boolean clientAuth) {
|
public void requireClientAuth(boolean clientAuth) {
|
||||||
this.clientAuth = clientAuth;
|
this.clientAuth = clientAuth;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -277,7 +277,7 @@ public class Fixtures {
|
|||||||
nesting = new Nesting(bonk, oneOfEach);
|
nesting = new Nesting(bonk, oneOfEach);
|
||||||
|
|
||||||
holyMoley = new HolyMoley();
|
holyMoley = new HolyMoley();
|
||||||
ArrayList big = new ArrayList<OneOfEach>();
|
List<OneOfEach> big = new ArrayList<OneOfEach>();
|
||||||
big.add(new OneOfEach(oneOfEach));
|
big.add(new OneOfEach(oneOfEach));
|
||||||
big.add(nesting.my_ooe);
|
big.add(nesting.my_ooe);
|
||||||
holyMoley.setBig(big);
|
holyMoley.setBig(big);
|
||||||
|
@ -21,10 +21,7 @@ package org.apache.thrift;
|
|||||||
|
|
||||||
import java.util.HashSet;
|
import java.util.HashSet;
|
||||||
|
|
||||||
import junit.framework.TestCase;
|
|
||||||
|
|
||||||
import org.apache.thrift.protocol.TBinaryProtocol;
|
import org.apache.thrift.protocol.TBinaryProtocol;
|
||||||
import org.apache.thrift.protocol.TType;
|
|
||||||
|
|
||||||
import thrift.test.Reuse;
|
import thrift.test.Reuse;
|
||||||
|
|
||||||
|
@ -18,24 +18,10 @@
|
|||||||
*/
|
*/
|
||||||
package org.apache.thrift.protocol;
|
package org.apache.thrift.protocol;
|
||||||
|
|
||||||
import java.nio.ByteBuffer;
|
|
||||||
import java.util.Arrays;
|
|
||||||
import java.util.List;
|
|
||||||
|
|
||||||
import junit.framework.TestCase;
|
import junit.framework.TestCase;
|
||||||
|
|
||||||
import org.apache.thrift.Fixtures;
|
|
||||||
import org.apache.thrift.TBase;
|
|
||||||
import org.apache.thrift.TDeserializer;
|
|
||||||
import org.apache.thrift.TException;
|
|
||||||
import org.apache.thrift.TSerializer;
|
import org.apache.thrift.TSerializer;
|
||||||
import org.apache.thrift.transport.TMemoryBuffer;
|
|
||||||
|
|
||||||
import thrift.test.CompactProtoTestStruct;
|
|
||||||
import thrift.test.HolyMoley;
|
|
||||||
import thrift.test.Nesting;
|
|
||||||
import thrift.test.OneOfEach;
|
|
||||||
import thrift.test.Srv;
|
|
||||||
import thrift.test.GuessProtocolStruct;
|
import thrift.test.GuessProtocolStruct;
|
||||||
|
|
||||||
public class TestTProtocolUtil extends TestCase {
|
public class TestTProtocolUtil extends TestCase {
|
||||||
|
@ -267,7 +267,7 @@ public abstract class ServerTestBase extends TestCase {
|
|||||||
System.out.println("testOneway(" + Integer.toString(sleepFor) +
|
System.out.println("testOneway(" + Integer.toString(sleepFor) +
|
||||||
") => sleeping...");
|
") => sleeping...");
|
||||||
try {
|
try {
|
||||||
Thread.sleep(sleepFor * 1000);
|
Thread.sleep(sleepFor * SLEEP_DELAY);
|
||||||
System.out.println("Done sleeping!");
|
System.out.println("Done sleeping!");
|
||||||
} catch (InterruptedException ie) {
|
} catch (InterruptedException ie) {
|
||||||
throw new RuntimeException(ie);
|
throw new RuntimeException(ie);
|
||||||
@ -282,6 +282,7 @@ public abstract class ServerTestBase extends TestCase {
|
|||||||
public static final String HOST = "localhost";
|
public static final String HOST = "localhost";
|
||||||
public static final int PORT = Integer.valueOf(
|
public static final int PORT = Integer.valueOf(
|
||||||
System.getProperty("test.port", "9090"));
|
System.getProperty("test.port", "9090"));
|
||||||
|
protected static final int SLEEP_DELAY = 1000;
|
||||||
protected static final int SOCKET_TIMEOUT = 1500;
|
protected static final int SOCKET_TIMEOUT = 1500;
|
||||||
private static final Xtruct XSTRUCT = new Xtruct("Zero", (byte) 1, -3, -5);
|
private static final Xtruct XSTRUCT = new Xtruct("Zero", (byte) 1, -3, -5);
|
||||||
private static final Xtruct2 XSTRUCT2 = new Xtruct2((byte)1, XSTRUCT, 5);
|
private static final Xtruct2 XSTRUCT2 = new Xtruct2((byte)1, XSTRUCT, 5);
|
||||||
@ -388,7 +389,7 @@ public abstract class ServerTestBase extends TestCase {
|
|||||||
public void testIt() throws Exception {
|
public void testIt() throws Exception {
|
||||||
|
|
||||||
for (TProtocolFactory protoFactory : getProtocols()) {
|
for (TProtocolFactory protoFactory : getProtocols()) {
|
||||||
TProcessor processor = useAsyncProcessor() ? new ThriftTest.AsyncProcessor(new AsyncTestHandler()) : new ThriftTest.Processor(new TestHandler());
|
TProcessor processor = useAsyncProcessor() ? new ThriftTest.AsyncProcessor<AsyncTestHandler>(new AsyncTestHandler()) : new ThriftTest.Processor<TestHandler>(new TestHandler());
|
||||||
|
|
||||||
startServer(processor, protoFactory);
|
startServer(processor, protoFactory);
|
||||||
|
|
||||||
@ -537,7 +538,7 @@ public abstract class ServerTestBase extends TestCase {
|
|||||||
public void testTransportFactory() throws Exception {
|
public void testTransportFactory() throws Exception {
|
||||||
for (TProtocolFactory protoFactory : getProtocols()) {
|
for (TProtocolFactory protoFactory : getProtocols()) {
|
||||||
TestHandler handler = new TestHandler();
|
TestHandler handler = new TestHandler();
|
||||||
ThriftTest.Processor processor = new ThriftTest.Processor(handler);
|
ThriftTest.Processor<TestHandler> processor = new ThriftTest.Processor<TestHandler>(handler);
|
||||||
|
|
||||||
final CallCountingTransportFactory factory = new CallCountingTransportFactory(new TFramedTransport.Factory());
|
final CallCountingTransportFactory factory = new CallCountingTransportFactory(new TFramedTransport.Factory());
|
||||||
|
|
||||||
|
@ -45,6 +45,10 @@ public class TestTSSLTransportFactory extends ServerTestBase {
|
|||||||
throws Exception {
|
throws Exception {
|
||||||
return TSSLTransportFactory.getClientSocket(HOST, PORT);
|
return TSSLTransportFactory.getClientSocket(HOST, PORT);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
protected TServerSocket getServerTransport() throws Exception {
|
||||||
|
return TSSLTransportFactory.getServerSocket(PORT);
|
||||||
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
public void startServer(final TProcessor processor, final TProtocolFactory protoFactory, final TTransportFactory factory)
|
public void startServer(final TProcessor processor, final TProtocolFactory protoFactory, final TTransportFactory factory)
|
||||||
@ -52,11 +56,11 @@ public class TestTSSLTransportFactory extends ServerTestBase {
|
|||||||
serverThread = new Thread() {
|
serverThread = new Thread() {
|
||||||
public void run() {
|
public void run() {
|
||||||
try {
|
try {
|
||||||
TServerTransport serverTransport = TSSLTransportFactory.getServerSocket(PORT);
|
TServerTransport serverTransport = getServerTransport();
|
||||||
final Args args = new Args(serverTransport).processor(processor);
|
final Args args = new Args(serverTransport).processor(processor);
|
||||||
server = new TSimpleServer(args);
|
server = new TSimpleServer(args);
|
||||||
server.serve();
|
server.serve();
|
||||||
} catch (TTransportException e) {
|
} catch (Exception e) {
|
||||||
e.printStackTrace();
|
e.printStackTrace();
|
||||||
assert false;
|
assert false;
|
||||||
}
|
}
|
||||||
@ -64,7 +68,7 @@ public class TestTSSLTransportFactory extends ServerTestBase {
|
|||||||
};
|
};
|
||||||
|
|
||||||
serverThread.start();
|
serverThread.start();
|
||||||
Thread.sleep(1000);
|
Thread.sleep(SLEEP_DELAY);
|
||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
|
@ -0,0 +1,62 @@
|
|||||||
|
/*
|
||||||
|
* Licensed to the Apache Software Foundation (ASF) under one
|
||||||
|
* or more contributor license agreements. See the NOTICE file
|
||||||
|
* distributed with this work for additional information
|
||||||
|
* regarding copyright ownership. The ASF licenses this file
|
||||||
|
* to you under the Apache License, Version 2.0 (the
|
||||||
|
* "License"); you may not use this file except in compliance
|
||||||
|
* with the License. You may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing,
|
||||||
|
* software distributed under the License is distributed on an
|
||||||
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||||
|
* KIND, either express or implied. See the License for the
|
||||||
|
* specific language governing permissions and limitations
|
||||||
|
* under the License.
|
||||||
|
*/
|
||||||
|
|
||||||
|
package org.apache.thrift.transport;
|
||||||
|
|
||||||
|
import java.io.FileInputStream;
|
||||||
|
import java.net.InetAddress;
|
||||||
|
|
||||||
|
public class TestTSSLTransportFactoryStreamedStore extends TestTSSLTransportFactory {
|
||||||
|
private static String keyStoreLocation = System.getProperty("javax.net.ssl.keyStore");
|
||||||
|
private static String trustStoreLocation = System.getProperty("javax.net.ssl.trustStore");
|
||||||
|
|
||||||
|
public TestTSSLTransportFactoryStreamedStore() {
|
||||||
|
super();
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Override system properties to be able to test passing
|
||||||
|
* the trustStore and keyStore as input stream
|
||||||
|
*/
|
||||||
|
System.setProperty("javax.net.ssl.trustStore", "");
|
||||||
|
System.setProperty("javax.net.ssl.keyStore", "");
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public TTransport getClientTransport(TTransport underlyingTransport)
|
||||||
|
throws Exception {
|
||||||
|
TSSLTransportFactory.TSSLTransportParameters params = new
|
||||||
|
TSSLTransportFactory.TSSLTransportParameters();
|
||||||
|
|
||||||
|
params.setTrustStore(new FileInputStream(trustStoreLocation),
|
||||||
|
System.getProperty("javax.net.ssl.trustStorePassword"));
|
||||||
|
|
||||||
|
return TSSLTransportFactory.getClientSocket(HOST, PORT, 0/*timeout*/, params);
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
protected TServerSocket getServerTransport() throws Exception {
|
||||||
|
TSSLTransportFactory.TSSLTransportParameters params = new
|
||||||
|
TSSLTransportFactory.TSSLTransportParameters();
|
||||||
|
|
||||||
|
params.setKeyStore(new FileInputStream(keyStoreLocation),
|
||||||
|
System.getProperty("javax.net.ssl.keyStorePassword"));
|
||||||
|
|
||||||
|
return TSSLTransportFactory.getServerSocket(PORT, 0/*timeout*/, InetAddress.getByName(HOST), params);
|
||||||
|
}
|
||||||
|
}
|
Loading…
Reference in New Issue
Block a user