Java SSLFactory.createSSLServerSocketFactory方法代码示例

import org.apache.hadoop.security.ssl.SSLFactory; //导入方法依赖的package包/类
/**
 * Configure an ssl listener on the server for shuffle.
 *
 * @param addr address to listen on.
 * @param sslFactory SSLFactory to use.
 */
public void addSslListener(InetSocketAddress addr, final SSLFactory sslFactory)
  throws IOException {
  if (webServer.isStarted()) {
    throw new IOException("Failed to add ssl listener");
  }

  SslSocketConnector sslListener = new SslSocketConnector() {
    @Override
    protected SSLServerSocketFactory createFactory() throws Exception {
      return sslFactory.createSSLServerSocketFactory();
    }
  };

  sslListener.setHost(addr.getHostName());
  sslListener.setPort(addr.getPort());
  webServer.addConnector(sslListener);
}
 

import org.apache.hadoop.security.ssl.SSLFactory; //导入方法依赖的package包/类
@VisibleForTesting
public static SecureResources getSecureResources(final SSLFactory sslFactory,
                                Configuration conf) throws Exception {
  // Obtain secure port for data streaming to datanode
  InetSocketAddress streamingAddr  = DataNode.getStreamingAddr(conf);
  int socketWriteTimeout = conf.getInt(DFSConfigKeys.DFS_DATANODE_SOCKET_WRITE_TIMEOUT_KEY,
      HdfsServerConstants.WRITE_TIMEOUT);
  
  ServerSocket ss = (socketWriteTimeout > 0) ? 
      ServerSocketChannel.open().socket() : new ServerSocket();
  ss.bind(streamingAddr, 0);
  
  // Check that we got the port we need
  if (ss.getLocalPort() != streamingAddr.getPort()) {
    throw new RuntimeException("Unable to bind on specified streaming port in secure " +
        "context. Needed " + streamingAddr.getPort() + ", got " + ss.getLocalPort());
  }

  // Obtain secure listener for web server
  Connector listener;
  if (HttpConfig.isSecure()) {
    try {
      sslFactory.init();
    } catch (GeneralSecurityException ex) {
      throw new IOException(ex);
    }
    SslSocketConnector sslListener = new SslSocketConnector() {
      @Override
      protected SSLServerSocketFactory createFactory() throws Exception {
        return sslFactory.createSSLServerSocketFactory();
      }
    };
    listener = sslListener;
  } else {
    listener = HttpServer.createDefaultChannelConnector();
  }

  InetSocketAddress infoSocAddr = DataNode.getInfoAddr(conf);
  listener.setHost(infoSocAddr.getHostName());
  listener.setPort(infoSocAddr.getPort());
  // Open listener here in order to bind to port as root
  listener.open();
  if (listener.getPort() != infoSocAddr.getPort()) {
    throw new RuntimeException("Unable to bind on specified info port in secure " +
        "context. Needed " + streamingAddr.getPort() + ", got " + ss.getLocalPort());
  }
  System.err.println("Successfully obtained privileged resources (streaming port = "
      + ss + " ) (http listener port = " + listener.getConnection() +")");
  
  if ((ss.getLocalPort() > 1023 || listener.getPort() > 1023) &&
      UserGroupInformation.isSecurityEnabled()) {
    throw new RuntimeException("Cannot start secure datanode with unprivileged ports");
  }
  System.err.println("Opened streaming server at " + streamingAddr);
  System.err.println("Opened info server at " + infoSocAddr);
  return new SecureResources(ss, listener);
}
 

import org.apache.hadoop.security.ssl.SSLFactory; //导入方法依赖的package包/类
@VisibleForTesting
public static SecureResources getSecureResources(final SSLFactory sslFactory,
    Configuration conf) throws Exception {
  // Obtain secure port for data streaming to datanode
  InetSocketAddress streamingAddr = DataNode.getStreamingAddr(conf);
  int socketWriteTimeout =
      conf.getInt(DFSConfigKeys.DFS_DATANODE_SOCKET_WRITE_TIMEOUT_KEY,
          HdfsServerConstants.WRITE_TIMEOUT);
  
  ServerSocket ss =
      (socketWriteTimeout > 0) ? ServerSocketChannel.open().socket() :
          new ServerSocket();
  ss.bind(streamingAddr, 0);
  
  // Check that we got the port we need
  if (ss.getLocalPort() != streamingAddr.getPort()) {
    throw new RuntimeException(
        "Unable to bind on specified streaming port in secure " +
            "context. Needed " + streamingAddr.getPort() + ", got " +
            ss.getLocalPort());
  }

  // Obtain secure listener for web server
  Connector listener;
  if (HttpConfig2.isSecure()) {
    try {
      sslFactory.init();
    } catch (GeneralSecurityException ex) {
      throw new IOException(ex);
    }
    SslSocketConnector sslListener = new SslSocketConnector() {
      @Override
      protected SSLServerSocketFactory createFactory() throws Exception {
        return sslFactory.createSSLServerSocketFactory();
      }
    };
    listener = sslListener;
  } else {
    listener = HttpServer.createDefaultChannelConnector();
  }

  InetSocketAddress infoSocAddr = DataNode.getInfoAddr(conf);
  listener.setHost(infoSocAddr.getHostName());
  listener.setPort(infoSocAddr.getPort());
  // Open listener here in order to bind to port as root
  listener.open();
  if (listener.getPort() != infoSocAddr.getPort()) {
    throw new RuntimeException(
        "Unable to bind on specified info port in secure " +
            "context. Needed " + streamingAddr.getPort() + ", got " +
            ss.getLocalPort());
  }
  System.err.println(
      "Successfully obtained privileged resources (streaming port = " + ss +
          " ) (http listener port = " + listener.getConnection() + ")");
  
  if ((ss.getLocalPort() > 1023 || listener.getPort() > 1023) &&
      UserGroupInformation.isSecurityEnabled()) {
    throw new RuntimeException(
        "Cannot start secure datanode with unprivileged ports");
  }
  System.err.println("Opened streaming server at " + streamingAddr);
  System.err.println("Opened info server at " + infoSocAddr);
  return new SecureResources(ss, listener);
}