org.obiba.opal.core.security.OpalKeyStore.java Source code

Introduction

Here is the source code for org.obiba.opal.core.security.OpalKeyStore.java

Source

/*******************************************************************************
 * Copyright 2008(c) The OBiBa Consortium. All rights reserved.
 *
 * This program and the accompanying materials
 * are made available under the terms of the GNU Public License v3.0.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 ******************************************************************************/
package org.obiba.opal.core.security;

import java.io.InputStream;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.PublicKey;
import java.security.cert.Certificate;
import java.security.cert.X509Certificate;

import org.apache.commons.vfs2.FileObject;
import org.apache.commons.vfs2.FileSystemException;
import org.obiba.magma.Datasource;
import org.obiba.magma.crypt.KeyProvider;
import org.obiba.magma.crypt.MagmaCryptRuntimeException;
import org.obiba.magma.crypt.NoSuchKeyException;
import org.obiba.security.KeyStoreManager;

public class OpalKeyStore extends KeyStoreManager implements KeyProvider {

    public OpalKeyStore(String name, KeyStore store) {
        super(name, store);
    }

    public X509Certificate importCertificate(String alias, FileObject certFile) {
        try {
            return importCertificate(alias, certFile.getContent().getInputStream());
        } catch (FileSystemException e) {
            throw new RuntimeException(e);
        }
    }

    /**
     * Import a private key and it's associated certificate into the keystore at the given alias.
     *
     * @param alias name of the key
     * @param privateKey private key in the PEM format
     * @param certificate certificate in the PEM format
     */
    public void importKey(String alias, FileObject privateKey, FileObject certificate) {
        try {
            InputStream privateIn = privateKey.getContent().getInputStream();
            InputStream certificateIn = certificate.getContent().getInputStream();
            importKey(alias, privateIn, certificateIn);
        } catch (FileSystemException e) {
            throw new RuntimeException(e);
        }
    }

    /**
     * Import a private key into the keystore and generate an associated certificate at the given alias.
     *
     * @param alias name of the key
     * @param privateKey private key in the PEM format
     * @param certificateInfo Certificate attributes as a String (e.g. CN=Administrator, OU=Bioinformatics, O=GQ,
     * L=Montreal, ST=Quebec, C=CA)
     */
    public void importKey(String alias, FileObject privateKey, String certificateInfo) {
        try {
            importKey(alias, privateKey.getContent().getInputStream(), certificateInfo);
        } catch (FileSystemException e) {
            throw new RuntimeException(e);
        }
    }

    @Override
    public PublicKey getPublicKey(Datasource datasource) throws NoSuchKeyException {
        try {
            Certificate cert = getKeyStore().getCertificate(datasource.getName());
            if (cert == null) {
                throw new NoSuchKeyException(datasource.getName(),
                        "No PublicKey for Datasource '" + datasource.getName() + "'");
            }
            return cert.getPublicKey();
        } catch (KeyStoreException e) {
            throw new MagmaCryptRuntimeException(e);
        }
    }

    public static class Builder extends KeyStoreManager.Builder {

        public static Builder newStore() {
            return new Builder();
        }

        protected KeyStoreManager createKeyStoreManager(KeyStore keyStore) {
            OpalKeyStore opalKeyStore = new OpalKeyStore(name, keyStore);
            opalKeyStore.setCallbackHandler(callbackHandler);
            return opalKeyStore;
        }
    }

}