org.jivesoftware.openfire.spi

Class EncryptionArtifactFactory

java.lang.Object

org.jivesoftware.openfire.spi.EncryptionArtifactFactory

public class EncryptionArtifactFactory
extends Object

Instances of this class will be able to generate various encryption-related artifacts based on a specific connection configuration. This implementation intends to centralize the implementation for generating the artifacts produced, which in earlier versions of the code-base was scattered (and duplicated) over various connection-type-specific implementations.

Author:

Guus der Kinderen, guus.der.kinderen@gmail.com

Constructor Summary

Constructors

Constructor and Description
EncryptionArtifactFactory(ConnectionConfiguration configuration) Creates a new instance of the factory.

Method Summary

Modifier and Type	Method and Description
SSLEngine	createClientModeSSLEngine() Creates an SSL Engine that is configured to use client mode when handshaking.
org.apache.mina.filter.ssl.SslFilter	createClientModeSslFilter() Creates an Apache MINA SslFilter that is configured to use client mode when handshaking.
SSLEngine	createServerModeSSLEngine() Creates a new SSL Engine that is configured to use server mode when handshaking.
org.apache.mina.filter.ssl.SslFilter	createServerModeSslFilter() Creates an Apache MINA SslFilter that is configured to use server mode when handshaking.
static List<String>	getDefaultCipherSuites() Returns the names of all encryption cipher suites that are enabled by default.
static List<String>	getDefaultProtocols() Returns the names of all encryption protocols that are enabled by default.
KeyManager[]	getKeyManagers() Generates KeyManager instances suitable for connections that are created based on a particular configuration.
SSLContext	getSSLContext() Generates a new, initialized SSLContext instance that is suitable for connections that are created based on a particular configuration.
org.eclipse.jetty.util.ssl.SslContextFactory	getSslContextFactory()
static List<String>	getSupportedCipherSuites() Returns the names of all encryption cipher suites that are supported (but not necessarily enabled).
static List<String>	getSupportedProtocols() Returns the names of all encryption protocols that are supported (but not necessarily enabled).
TrustManager[]	getTrustManagers() Generates KeyManager instances suitable for connections that are created based on a particular configuration.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

EncryptionArtifactFactory

public EncryptionArtifactFactory(ConnectionConfiguration configuration)

Creates a new instance of the factory.

Parameters:

configuration - the configuration for which this factory generates artifacts (cannot be null).

Method Detail

getKeyManagers

public KeyManager[] getKeyManagers()
                            throws UnrecoverableKeyException,
                                   NoSuchAlgorithmException,
                                   KeyStoreException

Generates KeyManager instances suitable for connections that are created based on a particular configuration.

Returns:

KeyManagers applicable to a connection that is established using the provided configuration.

Throws:

UnrecoverableKeyException

NoSuchAlgorithmException

KeyStoreException

getTrustManagers

public TrustManager[] getTrustManagers()
                                throws KeyStoreException,
                                       NoSuchAlgorithmException

Generates KeyManager instances suitable for connections that are created based on a particular configuration.

Returns:

TrustManagers applicable to a connection that is established using the provided configuration.

Throws:

KeyStoreException

NoSuchAlgorithmException

getSSLContext

public SSLContext getSSLContext()
                         throws NoSuchAlgorithmException,
                                KeyManagementException,
                                KeyStoreException,
                                UnrecoverableKeyException

Generates a new, initialized SSLContext instance that is suitable for connections that are created based on a particular configuration.

Returns:

TrustManagers applicable to a connection that is established using the provided configuration.

Throws:

NoSuchAlgorithmException

KeyManagementException

KeyStoreException

UnrecoverableKeyException

createServerModeSSLEngine

public SSLEngine createServerModeSSLEngine()
                                    throws UnrecoverableKeyException,
                                           NoSuchAlgorithmException,
                                           KeyStoreException,
                                           KeyManagementException

Creates a new SSL Engine that is configured to use server mode when handshaking. For Openfire, an engine is of this mode used for most purposes (as Openfire is a server by nature).

Returns:

A new, initialized SSLEngine instance (never null).

Throws:

UnrecoverableKeyException

NoSuchAlgorithmException

KeyStoreException

KeyManagementException

createClientModeSSLEngine

public SSLEngine createClientModeSSLEngine()
                                    throws UnrecoverableKeyException,
                                           NoSuchAlgorithmException,
                                           KeyStoreException,
                                           KeyManagementException

Creates an SSL Engine that is configured to use client mode when handshaking. For Openfire, an engine of this mode is typically used when the server tries to connect to another server. These SSLEngines never send SSLV2 ClientHello messages.

Returns:

An initialized SSLEngine instance (never null).

Throws:

UnrecoverableKeyException

NoSuchAlgorithmException

KeyStoreException

KeyManagementException

getSslContextFactory

public org.eclipse.jetty.util.ssl.SslContextFactory getSslContextFactory()

createServerModeSslFilter

public org.apache.mina.filter.ssl.SslFilter createServerModeSslFilter()
                                                               throws KeyManagementException,
                                                                      NoSuchAlgorithmException,
                                                                      KeyStoreException,
                                                                      UnrecoverableKeyException

Creates an Apache MINA SslFilter that is configured to use server mode when handshaking. For Openfire, an engine is of this mode used for most purposes (as Openfire is a server by nature). Instead of an SSLContext or SSLEngine, Apache MINA uses an SslFilter instance. It is generally not needed to create both SSLContext/SSLEngine as well as SslFilter instances.

Returns:

An initialized SslFilter instance (never null)

Throws:

KeyManagementException

NoSuchAlgorithmException

KeyStoreException

UnrecoverableKeyException

createClientModeSslFilter

public org.apache.mina.filter.ssl.SslFilter createClientModeSslFilter()
                                                               throws KeyManagementException,
                                                                      NoSuchAlgorithmException,
                                                                      KeyStoreException,
                                                                      UnrecoverableKeyException

Creates an Apache MINA SslFilter that is configured to use client mode when handshaking. For Openfire, a filter of this mode is typically used when the server tries to connect to another server. Instead of an SSLContext or SSLEngine, Apache MINA uses an SslFilter instance. It is generally not needed to create both SSLContext/SSLEngine as well as SslFilter instances.

Returns:

An initialized SslFilter instance (never null)

Throws:

KeyManagementException

NoSuchAlgorithmException

KeyStoreException

UnrecoverableKeyException

getSupportedProtocols

public static List<String> getSupportedProtocols()
                                          throws NoSuchAlgorithmException,
                                                 KeyManagementException

Returns the names of all encryption protocols that are supported (but not necessarily enabled).

Returns:

An array of protocol names. Not expected to be empty.

Throws:

NoSuchAlgorithmException

KeyManagementException

getDefaultProtocols

public static List<String> getDefaultProtocols()
                                        throws NoSuchAlgorithmException,
                                               KeyManagementException

Returns the names of all encryption protocols that are enabled by default.

Returns:

An array of protocol names. Not expected to be empty.

Throws:

NoSuchAlgorithmException

KeyManagementException

getSupportedCipherSuites

public static List<String> getSupportedCipherSuites()
                                             throws NoSuchAlgorithmException,
                                                    KeyManagementException

Returns the names of all encryption cipher suites that are supported (but not necessarily enabled).

Returns:

An array of cipher suite names. Not expected to be empty.

Throws:

NoSuchAlgorithmException

KeyManagementException

getDefaultCipherSuites

public static List<String> getDefaultCipherSuites()
                                           throws NoSuchAlgorithmException,
                                                  KeyManagementException

Returns the names of all encryption cipher suites that are enabled by default.

Returns:

An array of cipher suite names. Not expected to be empty.

Throws:

NoSuchAlgorithmException

KeyManagementException