Java SSLContextConfigurator.setKeyStorePass方法代码示例

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
private HttpServer createHttpsServer() {
    SSLContextConfigurator sslContextConfig = new SSLContextConfigurator();

    // set up security context
    sslContextConfig.setKeyStoreFile(this.serverKeystore); // contains server cert and key
    sslContextConfig.setKeyStorePass(this.serverKeystorePwd);

    // Create context and have exceptions raised if anything wrong with keystore or password
    SSLContext sslContext = sslContextConfig.createSSLContext(true);
            
    // Create server but do not start it
    HttpServer server = GrizzlyHttpServerFactory.createHttpServer(URI.create(this.baseUri),false);

    
    //LOGGER.debug("About to loop through listeners");
    //for (NetworkListener listener : server.getListeners()) {
    //	LOGGER.debug("About to setSecure on listener name: " + listener.getName());
    //}
    
    // grizzly is the default listener name
    server.getListener("grizzly").setSecure(true);
    // One way authentication
    server.getListener("grizzly").setSSLEngineConfig(new SSLEngineConfigurator(sslContext).setClientMode(false).setNeedClientAuth(false));
    return server;
}
 

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
public void startServer() throws TelegramApiException {
    SSLContextConfigurator sslContext = new SSLContextConfigurator();

    // set up security context
    sslContext.setKeyStoreFile(KEYSTORE_SERVER_FILE); // contains server keypair
    sslContext.setKeyStorePass(KEYSTORE_SERVER_PWD);

    ResourceConfig rc = new ResourceConfig();
    rc.register(restApi);
    rc.register(JacksonFeature.class);
    rc.property(JSONConfiguration.FEATURE_POJO_MAPPING, true);
    final HttpServer grizzlyServer = GrizzlyHttpServerFactory.createHttpServer(
            getBaseURI(),
            rc,
            true,
            new SSLEngineConfigurator(sslContext).setClientMode(false).setNeedClientAuth(false));
    try {
        grizzlyServer.start();
    } catch (IOException e) {
        throw new TelegramApiException("Error starting webhook server", e);
    }
}
 

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
public void startServer() throws TelegramApiRequestException {
    ResourceConfig rc = new ResourceConfig();
    rc.register(restApi);
    rc.register(JacksonFeature.class);

    final HttpServer grizzlyServer;
    if (keystoreServerFile != null && keystoreServerPwd != null) {
        SSLContextConfigurator sslContext = new SSLContextConfigurator();

        // set up security context
        sslContext.setKeyStoreFile(keystoreServerFile); // contains server keypair
        sslContext.setKeyStorePass(keystoreServerPwd);

        grizzlyServer = GrizzlyHttpServerFactory.createHttpServer(getBaseURI(), rc, true,
                new SSLEngineConfigurator(sslContext).setClientMode(false).setNeedClientAuth(false));
    } else {
        grizzlyServer = GrizzlyHttpServerFactory.createHttpServer(getBaseURI(), rc);
    }

    try {
        grizzlyServer.start();
    } catch (IOException e) {
        throw new TelegramApiRequestException("Error starting webhook server", e);
    }
}
 

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
@Bean
public SSLContextConfigurator sslConf() {
	SSLContextConfigurator config = new SSLContextConfigurator();
	String keyStorePath;
	try {
		keyStorePath = configuration().getString(GlobalConfig.SERVER_KEYSTORE);
		if (keyStorePath == null) {
			keyStorePath = GlobalConfig.SERVER_KEYSTORE_DEFAULT;
		}
		config.setKeyStoreFile(keyStorePath);
		config.setKeyStorePass(configuration().getString(GlobalConfig.SERVER_KEYPASS));
		return config;
	} catch (ConfigurationException | IOException e) {
		throw new IllegalStateException(e);
	}
}
 

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
public static void start() {
    WebappContext webappContext = new WebappContext("TestContext");
    ServletRegistration registration = webappContext.addServlet("ServletContainer", ServletContainer.class);
    registration.setInitParameter(PackagesResourceConfig.PROPERTY_PACKAGES, "org.moskito.central.connectors.rest;org.codehaus.jackson.jaxrs");
    registration.addMapping("/*");

    SSLContextConfigurator sslConfigurator = new SSLContextConfigurator();
    sslConfigurator.setKeyStoreFile("./target/test-classes/central_server_keystore.jks");
    sslConfigurator.setKeyStorePass("moskito");
    SSLContext sslContext = sslConfigurator.createSSLContext();

    try {
        server = GrizzlyServerFactory.createHttpServer(
                getBaseURI(),
                null,
                true,
                new SSLEngineConfigurator(sslContext).setClientMode(false).setNeedClientAuth(false)
        );

        webappContext.deploy(server);
        server.start();
    } catch (Exception e) {
        System.out.println("Error while starting the test server: " + e);
    }
}
 

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
/**
 * Starts Grizzly HTTP server exposing JAX-RS resources defined in this
 * application.
 *
 * @return Grizzly HTTP server.
 */
public static HttpServer startSecureServer ()
{
  if (false)
    System.setProperty ("javax.net.debug", "all");

  final WebappContext aContext = _createContext (BASE_URI_HTTPS);

  final SSLContextConfigurator aSSLContext = new SSLContextConfigurator ();
  aSSLContext.setKeyStoreFile ("src/test/resources/test-https-keystore.jks");
  aSSLContext.setKeyStorePass ("password");
  aSSLContext.setKeyStoreType ("JKS");
  aSSLContext.setTrustStoreBytes (StreamHelper.getAllBytes (new ClassPathResource (PeppolKeyStoreHelper.TRUSTSTORE_COMPLETE_CLASSPATH)));
  aSSLContext.setTrustStorePass (PeppolKeyStoreHelper.TRUSTSTORE_PASSWORD);
  aSSLContext.setTrustStoreType ("JKS");
  aSSLContext.setSecurityProtocol ("TLSv1.2");

  final SSLEngineConfigurator aSSLEngine = new SSLEngineConfigurator (aSSLContext);
  aSSLEngine.setClientMode (false);
  aSSLEngine.setNeedClientAuth (true);
  aSSLEngine.setEnabledCipherSuites (new String [] { "TLS_RSA_WITH_AES_128_CBC_SHA",
                                                     "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256",
                                                     "TLS_RSA_WITH_AES_128_CBC_SHA256",
                                                     "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
                                                     "TLS_RSA_WITH_AES_128_CBC_SHA" });

  // create and start a new instance of grizzly https server
  // exposing the Jersey application at BASE_URI
  final HttpServer ret = GrizzlyHttpServerFactory.createHttpServer (URI.create (BASE_URI_HTTPS),
                                                                    (GrizzlyHttpContainer) null,
                                                                    true,
                                                                    aSSLEngine,
                                                                    true);
  aContext.deploy (ret);
  return ret;
}
 

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
public SSLEngineConfigurator build(SSLProperties sslProperties) {
	
	SSLContextConfigurator sslContext = new SSLContextConfigurator();

       sslContext.setKeyStoreFile(sslProperties.getKeyStoreFile()); // contains server keypair
       sslContext.setKeyStorePass(sslProperties.getKeyStorePass());
       
       /**
        * trustStore stores public key or certificates from CA (Certificate Authorities) 
        * which is used to trust remote party or SSL connection. So should be optional
        */
       sslProperties.getTrustStoreFile().ifPresent(file->sslContext.setTrustStoreFile(file)); // contains client certificate
       sslProperties.getTrustStorePass().ifPresent(pass->sslContext.setTrustStorePass(pass));
       
       
       
       sslProperties.getKeyStoreType().ifPresent(type->sslContext.setKeyStoreType(type));
       sslProperties.getKeyStoreProvider().ifPresent(provider->sslContext.setKeyStoreProvider(provider));
	
       
       sslProperties.getTrustStoreType().ifPresent(type->sslContext.setTrustStoreType(type));
       sslProperties.getTrustStoreProvider().ifPresent(provider->sslContext.setTrustStoreProvider(provider));
	
	
	
	
	
       SSLEngineConfigurator sslConf = new SSLEngineConfigurator(sslContext).setClientMode(false);
       sslProperties.getClientAuth().filter(auth-> auth.toLowerCase().equals("want"))
								.ifPresent(auth->sslConf.setWantClientAuth(true));
       sslProperties.getClientAuth().filter(auth-> auth.toLowerCase().equals("need"))
						.ifPresent(auth->sslConf.setNeedClientAuth(true));
       Maybe.fromOptional(sslProperties.getCiphers()).peek(ciphers->sslConf.setEnabledCipherSuites(ciphers.split(",")))
       			.forEach(c-> sslConf.setCipherConfigured(true));
       Maybe.fromOptional(sslProperties.getProtocol()).peek(pr->sslConf.setEnabledProtocols(pr.split(",")))
       						.forEach(p->sslConf.setProtocolConfigured(true));
       
       
       return sslConf;
}
 

import org.glassfish.grizzly.ssl.SSLContextConfigurator; //导入方法依赖的package包/类
private static SSLEngineConfigurator makeSSLConfig(PropertiesConfiguration properties){

		SSLContextConfigurator sslContextConfig = new SSLContextConfigurator();

		
		sslContextConfig.setKeyStoreFile(properties.getString(PROPERTY_KEYSTORE_FILE));
		sslContextConfig.setKeyStorePass(properties.getString(PROPERTY_KEYSTORE_PASS)); 
		
		return new SSLEngineConfigurator(sslContextConfig.createSSLContext(), false, false, false);
	}