org.eclipse.emf.emfstore.server.connection.ServerKeyStoreManager.java Source code

Introduction

Here is the source code for org.eclipse.emf.emfstore.server.connection.ServerKeyStoreManager.java

Source

/*******************************************************************************
 * Copyright (c) 2008-2011 Chair for Applied Software Engineering,
 * Technische Universitaet Muenchen.
 * All rights reserved. This program and the accompanying materials
 * are made available under the terms of the Eclipse Public License v1.0
 * which accompanies this distribution, and is available at
 * http://www.eclipse.org/legal/epl-v10.html
 * 
 * Contributors:
 ******************************************************************************/
package org.eclipse.emf.emfstore.server.connection;

import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.IOException;
import java.security.InvalidKeyException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertificateException;
import java.util.Arrays;

import javax.crypto.BadPaddingException;
import javax.crypto.Cipher;
import javax.crypto.IllegalBlockSizeException;
import javax.crypto.NoSuchPaddingException;
import javax.net.ssl.KeyManagerFactory;

import org.apache.commons.codec.binary.Base64;
import org.eclipse.emf.emfstore.server.ServerConfiguration;
import org.eclipse.emf.emfstore.server.exceptions.ServerKeyStoreException;

/**
 * The ServerKeyStoreManager loads the keystore, which is needed for decryption of user passwords and for rmi
 * encryption.
 * 
 * @author wesendon
 */
public final class ServerKeyStoreManager {

    private static ServerKeyStoreManager instance;
    private KeyStore keyStore;

    private ServerKeyStoreManager() {
    }

    /**
     * Returns the instance of the ServerKeyStoreManager.
     * 
     * @return an instance
     */
    public static synchronized ServerKeyStoreManager getInstance() {
        if (instance == null) {
            instance = new ServerKeyStoreManager();
        }
        return instance;
    }

    /**
     * Decrypts a password with the server's password.
     * 
     * @param password encrypted password
     * @return decrypted password
     * @throws ServerKeyStoreException in case of failure
     */
    public String decrypt(String password) throws ServerKeyStoreException {
        try {
            if (password == null) {
                throw new ServerKeyStoreException("Password is null.");
            }
            byte[] passwordBytes = Base64.decodeBase64(password.getBytes());
            Cipher cipher = Cipher.getInstance(
                    ServerConfiguration.getProperties().getProperty(ServerConfiguration.KEYSTORE_CIPHER_ALGORITHM,
                            ServerConfiguration.KEYSTORE_CIPHER_ALGORITHM_DEFAULT));
            cipher.init(Cipher.DECRYPT_MODE, getDecryptionKey());
            return new String(cipher.doFinal(passwordBytes));
        } catch (NoSuchAlgorithmException e) {
            throw new ServerKeyStoreException(e);
        } catch (NoSuchPaddingException e) {
            throw new ServerKeyStoreException(e);
        } catch (InvalidKeyException e) {
            throw new ServerKeyStoreException(e);
        } catch (IllegalBlockSizeException e) {
            throw new ServerKeyStoreException(e);
        } catch (BadPaddingException e) {
            throw new ServerKeyStoreException(e);
        }
    }

    private PrivateKey getDecryptionKey() throws ServerKeyStoreException {
        try {
            return (PrivateKey) getKeyStore().getKey(getKeyStoreAlias(), getKeyStorePassword());
        } catch (ServerKeyStoreException e) {
            throw new ServerKeyStoreException(e);
        } catch (KeyStoreException e) {
            throw new ServerKeyStoreException(e);
        } catch (NoSuchAlgorithmException e) {
            throw new ServerKeyStoreException(e);
        } catch (UnrecoverableKeyException e) {
            throw new ServerKeyStoreException(e);
        }
    }

    private KeyStore getKeyStore() throws ServerKeyStoreException {
        if (keyStore == null) {
            try {
                keyStore = KeyStore.getInstance("JKS");
                keyStore.load(new FileInputStream(ServerConfiguration.getServerKeyStorePath()),
                        getKeyStorePassword());
            } catch (NoSuchAlgorithmException e) {
                throw new ServerKeyStoreException(e);
            } catch (CertificateException e) {
                throw new ServerKeyStoreException(e);
            } catch (FileNotFoundException e) {
                throw new ServerKeyStoreException(e);
            } catch (IOException e) {
                throw new ServerKeyStoreException(e);
            } catch (KeyStoreException e) {
                throw new ServerKeyStoreException(e);
            }
        }
        return keyStore;
    }

    /**
     * Creates a {@link KeyManagerFactory} for the rmi encryption (
     * {@link org.eclipse.emf.emfstore.server.connection.rmi.RMISSLServerSocketFactory} ).
     * 
     * @return KeyManagerFactory
     * @throws ServerKeyStoreException in case of failure
     */
    public KeyManagerFactory getKeyManagerFactory() throws ServerKeyStoreException {
        try {
            KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(
                    ServerConfiguration.getProperties().getProperty(ServerConfiguration.KEYSTORE_CERTIFICATE_TYPE,
                            ServerConfiguration.KEYSTORE_CERTIFICATE_TYPE_DEFAULT));
            keyManagerFactory.init(getKeyStore(), getKeyStorePassword());
            return keyManagerFactory;
        } catch (NoSuchAlgorithmException e) {
            throw new ServerKeyStoreException(e);
        } catch (KeyStoreException e) {
            throw new ServerKeyStoreException(e);
        } catch (UnrecoverableKeyException e) {
            throw new ServerKeyStoreException(e);
        }
    }

    /**
     * Sets java runtime properties for ssl.
     */
    public void setJavaSSLProperties() {
        System.setProperty("javax.net.ssl.keyStore", ServerConfiguration.getServerKeyStorePath());
        System.setProperty("javax.net.ssl.trustStore", ServerConfiguration.getServerKeyStorePath());
        System.setProperty("javax.net.ssl.keyStorePassword", Arrays.toString(getKeyStorePassword()));
    }

    private char[] getKeyStorePassword() {
        return ServerConfiguration.getProperties()
                .getProperty(ServerConfiguration.KEYSTORE_PASSWORD, ServerConfiguration.KEYSTORE_PASSWORD_DEFAULT)
                .toCharArray();
    }

    private String getKeyStoreAlias() {
        return ServerConfiguration.getProperties().getProperty(ServerConfiguration.KEYSTORE_ALIAS,
                ServerConfiguration.KEYSTORE_ALIAS_DEFAULT);
    }
}