Java DataEncryptionKey类代码示例

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
/**
 * Checks if an address is already trusted and then sends client SASL
 * negotiation if required.
 *
 * @param addr connection address
 * @param underlyingOut connection output stream
 * @param underlyingIn connection input stream
 * @param encryptionKeyFactory for creation of an encryption key
 * @param accessToken connection block access token
 * @param datanodeId ID of destination DataNode
 * @return new pair of streams, wrapped after SASL negotiation
 * @throws IOException for any error
 */
private IOStreamPair checkTrustAndSend(InetAddress addr,
    OutputStream underlyingOut, InputStream underlyingIn,
    DataEncryptionKeyFactory encryptionKeyFactory,
    Token<BlockTokenIdentifier> accessToken, DatanodeID datanodeId)
    throws IOException {
  if (!trustedChannelResolver.isTrusted() &&
      !trustedChannelResolver.isTrusted(addr)) {
    // The encryption key factory only returns a key if encryption is enabled.
    DataEncryptionKey encryptionKey =
      encryptionKeyFactory.newDataEncryptionKey();
    return send(addr, underlyingOut, underlyingIn, encryptionKey, accessToken,
      datanodeId);
  } else {
    LOG.debug(
      "SASL client skipping handshake on trusted connection for addr = {}, "
      + "datanodeId = {}", addr, datanodeId);
    return null;
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
/**
 * Sends client SASL negotiation for specialized encrypted handshake.
 *
 * @param underlyingOut connection output stream
 * @param underlyingIn connection input stream
 * @param encryptionKey for an encrypted SASL handshake
 * @return new pair of streams, wrapped after SASL negotiation
 * @throws IOException for any error
 */
private IOStreamPair getEncryptedStreams(OutputStream underlyingOut,
    InputStream underlyingIn, DataEncryptionKey encryptionKey)
    throws IOException {
  Map<String, String> saslProps = createSaslPropertiesForEncryption(
    encryptionKey.encryptionAlgorithm);

  LOG.debug("Client using encryption algorithm {}",
    encryptionKey.encryptionAlgorithm);

  String userName = getUserNameFromEncryptionKey(encryptionKey);
  char[] password = encryptionKeyToPassword(encryptionKey.encryptionKey);
  CallbackHandler callbackHandler = new SaslClientCallbackHandler(userName,
    password);
  return doSaslHandshake(underlyingOut, underlyingIn, userName, saslProps,
    callbackHandler);
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
@Override
public GetDataEncryptionKeyResponseProto getDataEncryptionKey(
    RpcController controller, GetDataEncryptionKeyRequestProto request)
    throws ServiceException {
  try {
    GetDataEncryptionKeyResponseProto.Builder builder = 
        GetDataEncryptionKeyResponseProto.newBuilder();
    DataEncryptionKey encryptionKey = server.getDataEncryptionKey();
    if (encryptionKey != null) {
      builder.setDataEncryptionKey(PBHelper.convert(encryptionKey));
    }
    return builder.build();
  } catch (IOException e) {
    throw new ServiceException(e);
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
/**
 * Checks if an address is already trusted and then sends client SASL
 * negotiation if required.
 *
 * @param addr connection address
 * @param underlyingOut connection output stream
 * @param underlyingIn connection input stream
 * @param encryptionKeyFactory for creation of an encryption key
 * @param accessToken connection block access token
 * @param datanodeId ID of destination DataNode
 * @return new pair of streams, wrapped after SASL negotiation
 * @throws IOException for any error
 */
private IOStreamPair checkTrustAndSend(InetAddress addr,
    OutputStream underlyingOut, InputStream underlyingIn,
    DataEncryptionKeyFactory encryptionKeyFactory,
    Token<BlockTokenIdentifier> accessToken, DatanodeID datanodeId)
    throws IOException {
  if (!trustedChannelResolver.isTrusted() &&
      !trustedChannelResolver.isTrusted(addr)) {
    // The encryption key factory only returns a key if encryption is enabled.
    DataEncryptionKey encryptionKey =
        encryptionKeyFactory.newDataEncryptionKey();
    return send(addr, underlyingOut, underlyingIn, encryptionKey, accessToken,
        datanodeId);
  } else {
    LOG.debug(
        "SASL client skipping handshake on trusted connection for addr = {}, "
            + "datanodeId = {}", addr, datanodeId);
    return null;
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
/**
 * Sends client SASL negotiation for specialized encrypted handshake.
 *
 * @param underlyingOut connection output stream
 * @param underlyingIn connection input stream
 * @param encryptionKey for an encrypted SASL handshake
 * @return new pair of streams, wrapped after SASL negotiation
 * @throws IOException for any error
 */
private IOStreamPair getEncryptedStreams(OutputStream underlyingOut,
    InputStream underlyingIn, DataEncryptionKey encryptionKey)
    throws IOException {
  Map<String, String> saslProps = createSaslPropertiesForEncryption(
      encryptionKey.encryptionAlgorithm);

  LOG.debug("Client using encryption algorithm {}",
      encryptionKey.encryptionAlgorithm);

  String userName = getUserNameFromEncryptionKey(encryptionKey);
  char[] password = encryptionKeyToPassword(encryptionKey.encryptionKey);
  CallbackHandler callbackHandler = new SaslClientCallbackHandler(userName,
      password);
  return doSaslHandshake(underlyingOut, underlyingIn, userName, saslProps,
      callbackHandler);
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
@Override
public GetDataEncryptionKeyResponseProto getDataEncryptionKey(
    RpcController controller, GetDataEncryptionKeyRequestProto request)
    throws ServiceException {
  try {
    GetDataEncryptionKeyResponseProto.Builder builder = 
        GetDataEncryptionKeyResponseProto.newBuilder();
    DataEncryptionKey encryptionKey = server.getDataEncryptionKey();
    if (encryptionKey != null) {
      builder.setDataEncryptionKey(PBHelperClient.convert(encryptionKey));
    }
    return builder.build();
  } catch (IOException e) {
    throw new ServiceException(e);
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
@InterfaceAudience.Private
public DataEncryptionKey getDataEncryptionKey()
    throws IOException {
  if (shouldEncryptData()) {
    synchronized (this) {
      if (encryptionKey == null ||
          encryptionKey.expiryDate < Time.now()) {
        LOG.debug("Getting new encryption token from NN");
        encryptionKey = namenode.getDataEncryptionKey();
      }
      return encryptionKey;
    }
  } else {
    return null;
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
public static Peer peerFromSocketAndKey(Socket s,
      DataEncryptionKey key) throws IOException {
  Peer peer = null;
  boolean success = false;
  try {
    peer = peerFromSocket(s); 
    if (key != null) {
      peer = new EncryptedPeer(peer, key);
    }
    success = true;
    return peer;
  } finally {
    if (!success) {
      IOUtils.cleanup(null, peer);
    }
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
@Override
public GetDataEncryptionKeyResponseProto getDataEncryptionKey(
    RpcController controller, GetDataEncryptionKeyRequestProto request)
    throws ServiceException {
  try {
    GetDataEncryptionKeyResponseProto.Builder builder =
        GetDataEncryptionKeyResponseProto.newBuilder();
    DataEncryptionKey encryptionKey = server.getDataEncryptionKey();
    if (encryptionKey != null) {
      builder.setDataEncryptionKey(PBHelper.convert(encryptionKey));
    }
    return builder.build();
  } catch (IOException e) {
    throw new ServiceException(e);
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
@InterfaceAudience.Private
public DataEncryptionKey getDataEncryptionKey()
    throws IOException {
  if (shouldEncryptData() && 
      !this.trustedChannelResolver.isTrusted()) {
    synchronized (this) {
      if (encryptionKey == null ||
          encryptionKey.expiryDate < Time.now()) {
        LOG.debug("Getting new encryption token from NN");
        encryptionKey = namenode.getDataEncryptionKey();
      }
      return encryptionKey;
    }
  } else {
    return null;
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
@Override
public DataEncryptionKey newDataEncryptionKey() throws IOException {
  if (shouldEncryptData()) {
    synchronized (this) {
      if (encryptionKey == null ||
          encryptionKey.expiryDate < Time.now()) {
        LOG.debug("Getting new encryption token from NN");
        encryptionKey = namenode.getDataEncryptionKey();
      }
      return encryptionKey;
    }
  } else {
    return null;
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
@Override
public DataEncryptionKey newDataEncryptionKey() {
  if (encryptDataTransfer) {
    synchronized (this) {
      if (encryptionKey == null) {
        encryptionKey = blockTokenSecretManager.generateDataEncryptionKey();
      }
      return encryptionKey;
    }
  } else {
    return null;
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
public DataEncryptionKey generateDataEncryptionKey() {
  if (isBlockTokenEnabled() && encryptDataTransfer) {
    return blockTokenSecretManager.generateDataEncryptionKey();
  } else {
    return null;
  }
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
/**
 * Returns a new DataEncryptionKeyFactory that generates a key from the
 * BlockPoolTokenSecretManager, using the block pool ID of the given block.
 *
 * @param block for which the factory needs to create a key
 * @return DataEncryptionKeyFactory for block's block pool ID
 */
DataEncryptionKeyFactory getDataEncryptionKeyFactoryForBlock(
    final ExtendedBlock block) {
  return new DataEncryptionKeyFactory() {
    @Override
    public DataEncryptionKey newDataEncryptionKey() {
      return dnConf.encryptDataTransfer ?
        blockPoolTokenSecretManager.generateDataEncryptionKey(
          block.getBlockPoolId()) : null;
    }
  };
}
 

import org.apache.hadoop.hdfs.security.token.block.DataEncryptionKey; //导入依赖的package包/类
public static DataEncryptionKey convert(DataEncryptionKeyProto bet) {
  String encryptionAlgorithm = bet.getEncryptionAlgorithm();
  return new DataEncryptionKey(bet.getKeyId(),
      bet.getBlockPoolId(),
      bet.getNonce().toByteArray(),
      bet.getEncryptionKey().toByteArray(),
      bet.getExpiryDate(),
      encryptionAlgorithm.isEmpty() ? null : encryptionAlgorithm);
}