1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
/********************************************************************************
* Copyright (c) 2006, 2008 IBM Corporation. All rights reserved.
* This program and the accompanying materials are made available under the terms
* of the Eclipse Public License v1.0 which accompanies this distribution, and is
* available at http://www.eclipse.org/legal/epl-v10.html
*
* Initial Contributors:
* The following IBM employees contributed to the Remote System Explorer
* component that contains this file: David McKnight, Kushal Munir,
* Michael Berger, David Dykstal, Phil Coulthard, Don Yantzi, Eric Simpson,
* Emily Bruner, Mazen Faraj, Adrian Storisteanu, Li Ding, and Kent Hawley.
*
* Contributors:
* David McKnight (IBM) - [226561] [apidoc] Add API markup to RSE Javadocs where extend / implement is allowed
* David McKnight (IBM) - [230013] [api][breaking] need to make DStoreKeyStore _instance private
********************************************************************************/
package org.eclipse.dstore.core.util.ssl;
import java.io.File;
import java.io.FileInputStream;
import java.io.FileNotFoundException;
import java.io.FileOutputStream;
import java.io.IOException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.cert.Certificate;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
/**
* This class is used for managing the DStore keystore for use with the DStore communication framework.
*
* @noextend This class is not intended to be subclassed by clients.
* @noinstantiate This class is not intended to be instantiated by clients.
*/
public class DStoreKeyStore
{
private static DStoreKeyStore _instance = new DStoreKeyStore();
public DStoreKeyStore()
{
}
public static DStoreKeyStore getInstance()
{
if (_instance == null)
{
_instance = new DStoreKeyStore();
}
return _instance;
}
public static KeyStore getKeyStore(String filePath, String password)
throws KeyStoreException, NoSuchAlgorithmException,
CertificateException, IOException, NoSuchProviderException
{
KeyStore keyStore= null;
if (filePath != null)
{
File keyStoreFile = new File(filePath);
/* Do not stomp an existing file */
if(!keyStoreFile.exists())
{
keyStore = KeyStore.getInstance("JKS"); //$NON-NLS-1$
keyStore.load(null, password.toCharArray());
persistKeyStore(keyStore, filePath, password);
}
else {
keyStore = loadKeyStore(filePath, password);
}
}
return keyStore;
}
public static KeyStore loadKeyStore(String pathname, String password)
throws KeyStoreException,
NoSuchAlgorithmException,
CertificateException,
IOException,
NoSuchProviderException {
KeyStore ks=null;
File file=new File(pathname);
/* Do not stomp an existing file */
if(file.exists()) {
ks=KeyStore.getInstance("JKS"); //$NON-NLS-1$
/* Initialize the keystore with no information */
FileInputStream is=new FileInputStream(file);
ks.load(is, password.toCharArray());
is.close();
}
return ks;
}
public static Certificate loadCertificate(String certFilename)
throws CertificateException,
FileNotFoundException {
CertificateFactory factory=CertificateFactory.getInstance("X.509"); //$NON-NLS-1$
return factory.generateCertificate(new FileInputStream(certFilename));
}
public static void addCertificateToKeyStore(KeyStore ks, Certificate cert, String alias)
throws KeyStoreException {
ks.setCertificateEntry(alias, cert);
}
public static void persistKeyStore(KeyStore ks, String pathname, String password)
throws KeyStoreException,
FileNotFoundException,
NoSuchAlgorithmException,
CertificateException,
IOException {
FileOutputStream os=new FileOutputStream(pathname);
ks.store(os, password.toCharArray());
os.close();
}
}
|
