Spring/spring-data-gemfire
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SGF-513 - Configure SSL with annotations.

Browse Source
This commit is contained in:
John Blum
2016-08-17 12:39:43 -07:00
parent 1af7ad523a
commit 64ccca1551
2 changed files with 193 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

129
src/main/java/org/springframework/data/gemfire/config/annotation/EnableSsl.java Normal file
View File

@@ -0,0 +1,129 @@
/*
* Copyright 2012 the original author or authors.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
*/
package org.springframework.data.gemfire.config.annotation;
import java.lang.annotation.Documented;
import java.lang.annotation.ElementType;
import java.lang.annotation.Inherited;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;
import org.springframework.context.annotation.Import;
/**
* The EnableSsl class...
*
* @author John Blum
* @since 1.0.0
*/
@Target(ElementType.TYPE)
@Retention(RetentionPolicy.RUNTIME)
@Inherited
@Documented
@Import(SslConfiguration.class)
@SuppressWarnings("unused")
public @interface EnableSsl {
/**
* A space-separated list of the valid SSL ciphers for secure Socket connections. A setting of 'any'
* uses any ciphers that are enabled by default in the configured JSSE provider.
*
* Defaults to {@literal any}.
*/
String ciphers() default "any";
/**
* A list of GemFire components in which SSL will be enabled.
*
* Defaults to {@link org.springframework.data.gemfire.config.annotation.EnableSsl.Component#CLUSTER}
*/
Component[] components() default { Component.CLUSTER };
/**
* Pathname to the keystore used for SSL communications.
*
* Defaults to unset.
*/
String keystore() default "";
/**
* Password to access the keys in the keystore used in SSL communications.
*
* Defaults to unset.
*/
String keystorePassword() default "";
/**
* Identifies the type of keystore used in SSL communications. For example, JKS, PKCS11, etc.
*
* Defaults to unset.
*/
// TODO change to a enum?
String keystoreType() default "";
/**
* A space-separated list of the valid SSL protocols used in secure Socket connections. A setting of 'any'
* uses any protocol that is enabled by default in the configured JSSE provider.
*
* Defaults to {@literal any}.
*/
String protocols() default "any";
/**
* Boolean value indicating whether to require authentication for SSL communication between peers,
* clients and servers, gateways, etc.
*
* Defaults to {@literal true}.
*/
boolean requireAuthentication() default true;
/**
* Pathname to the truststore used in SSL communications.
*
* Defaults to unset.
*/
String truststore() default "";
/**
* Password to access the keys in the truststore used in SSL communications.
*
* Defaults to unset.
*/
String truststorePassword() default "";
enum Component {
CLUSTER("cluster"),
GATEWAY("gateway"),
HTTP("http-service"),
JMX("jmx-manager"),
LOCATOR("locator"),
SERVER("server");
private final String prefix;
Component(String prefix) {
this.prefix = prefix;
}
@Override
public String toString() {
return prefix;
}
}
}

64
src/main/java/org/springframework/data/gemfire/config/annotation/SslConfiguration.java Normal file
View File

@@ -0,0 +1,64 @@
/*
* Copyright 2012 the original author or authors.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
*/
package org.springframework.data.gemfire.config.annotation;
import java.util.Map;
import java.util.Properties;
import org.springframework.data.gemfire.config.annotation.support.EmbeddedServiceConfigurationSupport;
import org.springframework.data.gemfire.util.PropertiesBuilder;
import org.springframework.util.Assert;
/**
* The SslConfiguration class...
*
* @author John Blum
* @since 1.0.0
*/
public class SslConfiguration extends EmbeddedServiceConfigurationSupport {
@Override
protected Class getAnnotationType() {
return EnableSsl.class;
}
@Override
protected Properties toGemFireProperties(Map<String, Object> annotationAttributes) {
PropertiesBuilder gemfireProperties = new PropertiesBuilder();
EnableSsl.Component[] components = (EnableSsl.Component[]) annotationAttributes.get("components");
Assert.notNull(components, "GemFire SSL enabled components cannot be null");
for (EnableSsl.Component component : components) {
gemfireProperties
.setProperty(String.format("%s-ssl-ciphers", component), annotationAttributes.get("ciphers"))
.setProperty(String.format("%s-ssl-enabled", component), Boolean.TRUE.toString())
.setProperty(String.format("%s-ssl-keystore", component), annotationAttributes.get("keystore"))
.setProperty(String.format("%s-ssl-keystore-password", component), annotationAttributes.get("keystorePassword"))
.setProperty(String.format("%s-ssl-keystore-type", component), annotationAttributes.get("keystoreType"))
.setProperty(String.format("%s-ssl-protocols", component), annotationAttributes.get("protocols"))
.setProperty(String.format("%s-ssl-require-authentication", component),
Boolean.TRUE.equals(annotationAttributes.get("requireAuthentication")))
.setProperty(String.format("%s-ssl-truststore", component), annotationAttributes.get("truststore"))
.setProperty(String.format("%s-ssl-truststore-password", component), annotationAttributes.get("truststorePassword"));
}
return gemfireProperties.build();
}
}