Package com.yahoo.vespa.athenz.identity

Class SiaIdentityProvider

java.lang.Object

com.yahoo.component.AbstractComponent

com.yahoo.vespa.athenz.identity.SiaIdentityProvider

All Implemented Interfaces:

com.yahoo.component.Component, com.yahoo.component.Deconstructable, ServiceIdentityProvider, Comparable<com.yahoo.component.Component>

public class SiaIdentityProvider
extends com.yahoo.component.AbstractComponent
implements ServiceIdentityProvider

A ServiceIdentityProvider that provides the credentials stored on file system.

Author:

mortent, bjorncs

Field Summary

Fields inherited from class com.yahoo.component.AbstractComponent

isDeconstructable

Constructor Summary

Constructors

Constructor	Description
SiaIdentityProvider(AthenzIdentity service, Path siaPath, Path athenzTruststoreFile, Path clientTruststoreFile)
SiaIdentityProvider(AthenzIdentity service, Path privateKeyFile, Path certificateFile, Path athenzTruststoreFile, Path clientTruststoreFile)
SiaIdentityProvider(SiaProviderConfig config)

Method Summary

Modifier and Type	Method	Description
Path	athenzTruststorePath()
Path	certificatePath()
Path	clientTruststorePath()	The client truststore contains the Athenz certificates from ServiceIdentityProvider.athenzTruststorePath() and additional certificate authorities that issues trusted server certificates.
void	deconstruct()
com.yahoo.security.X509CertificateWithKey	getIdentityCertificateWithKey()
SSLContext	getIdentitySslContext()
AthenzIdentity	identity()
Path	privateKeyPath()

Methods inherited from class com.yahoo.component.AbstractComponent

clone, compareTo, getClassName, getId, getIdString, hasInitializedId, initId, isDeconstructable, setIsDeconstructable, toString

Methods inherited from class java.lang.Object

equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

SiaIdentityProvider

@Inject
public SiaIdentityProvider(SiaProviderConfig config)

SiaIdentityProvider

public SiaIdentityProvider(AthenzIdentity service,
                           Path siaPath,
                           Path athenzTruststoreFile,
                           Path clientTruststoreFile)

SiaIdentityProvider

public SiaIdentityProvider(AthenzIdentity service,
                           Path privateKeyFile,
                           Path certificateFile,
                           Path athenzTruststoreFile,
                           Path clientTruststoreFile)

Method Detail

identity

public AthenzIdentity identity()

Specified by:

identity in interface ServiceIdentityProvider

Returns:

The Athenz identity of the environment

getIdentitySslContext

public SSLContext getIdentitySslContext()

Specified by:

getIdentitySslContext in interface ServiceIdentityProvider

Returns:

SSLContext that is automatically updated.

getIdentityCertificateWithKey

public com.yahoo.security.X509CertificateWithKey getIdentityCertificateWithKey()

Specified by:

getIdentityCertificateWithKey in interface ServiceIdentityProvider

Returns:

Current certificate and private key. Unlike ServiceIdentityProvider.getIdentitySslContext() underlying credentials are not automatically updated.

certificatePath

public Path certificatePath()

Specified by:

certificatePath in interface ServiceIdentityProvider

Returns:

Path to X.509 certificate in PEM format

privateKeyPath

public Path privateKeyPath()

Specified by:

privateKeyPath in interface ServiceIdentityProvider

Returns:

Path to private key in PEM format

athenzTruststorePath

public Path athenzTruststorePath()

Specified by:

athenzTruststorePath in interface ServiceIdentityProvider

Returns:

Path to Athenz truststore in PEM format

clientTruststorePath

public Path clientTruststorePath()

Description copied from interface: ServiceIdentityProvider

The client truststore contains the Athenz certificates from ServiceIdentityProvider.athenzTruststorePath() and additional certificate authorities that issues trusted server certificates.

Specified by:

clientTruststorePath in interface ServiceIdentityProvider

Returns:

Path to client truststore in PEM format

deconstruct

public void deconstruct()

Specified by:

deconstruct in interface com.yahoo.component.Deconstructable

Overrides:

deconstruct in class com.yahoo.component.AbstractComponent